Live intelligence from Wordfence Intelligence, WPScan, NVD, and CISA KEV — updated daily. Check if your plugins and themes have known CVEs.
46,655 vulnerabilities found (page 1258 of 1867)
| CVE ID | Plugin / Theme | Severity | CVSS | Description | Fixed In | Source |
|---|---|---|---|---|---|---|
| WF-fe4c20d6 | easy-post-submission < 2.0.0 |
MEDIUM | 5.3 | The Easy Post Submission – Frontend Posting, Guest Publishing & Submit Content for WordPress plugin for WordPress is v… | 2.0.0 | wordfence |
| WF-fe4171b9 | lana-email-tester < 1.1.0 |
MEDIUM | 5.3 | The Lana Email Tester plugin for WordPress is vulnerable to Cross-Site Request Forgery and unauthorized Mail Relay in ve… | 1.1.0 | wordfence |
| WF-fe391ac9 | getwid < 2.0.11 |
MEDIUM | 5.3 | The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing… | 2.0.11 | wordfence |
| WF-fe324d4d | codeconfig-accessibility < 1.0.1 |
MEDIUM | 5.3 | The Accessiy By CodeConfig Accessibility plugin for WordPress is vulnerable to unauthorized page creation due to missing… | 1.0.1 | wordfence |
| WF-fe2cfc96 | powerpack-lite-for-elementor < 2.7.14 |
MEDIUM | 5.3 | The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Cross-… | 2.7.14 | wordfence |
| WF-fe10f68d | education-zone < 1.3.9 |
MEDIUM | 5.3 | The Education Zone theme for WordPress is vulnerable to unauthorized access due to a missing capability check on a funct… | 1.3.9 | wordfence |
| WF-fe09ddfd | hungarian-pickup-points-for-woocommerce < 4.2.8 |
MEDIUM | 5.3 | The Csomagpontok és Címkék WooCommerce-hez plugin for WordPress is vulnerable to unauthorized access in all versions … | 4.2.8 | wordfence |
| WF-fde0ab44 | custom-registration-form-builder-with-submission-manager < 5.1.9.3 |
MEDIUM | 5.3 | The RegistrationMagic plugin for WordPress is vulnerable to content injection in versions up to, and including, 5.1.9.2.… | 5.1.9.3 | wordfence |
| WF-fdd0694c | maxbuttons < 9.8.0 |
MEDIUM | 5.3 | The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to information exposure in all versions up to,… | 9.8.0 | wordfence |
| WF-fdc8bee7 | timetics < 1.0.57 |
MEDIUM | 5.3 | The Timetics – Appointment Booking Calendar & Scheduling plugin for WordPress is vulnerable to unauthorized access due… | 1.0.57 | wordfence |
| WF-fd98b0c1 | profiler-what-slowing-down | MEDIUM | 5.3 | The Profiler – What Slowing Down Your WP plugin for WordPress is vulnerable to unauthorized access due to a missing ca… | — | wordfence |
| WF-fd8997a0 | wp-jobsearch < 3.2.8 |
MEDIUM | 5.3 | The JobSearch WP Job Board plugin for WordPress is vulnerable to unauthorized access due to a missing capability check o… | 3.2.8 | wordfence |
| WF-fd74672c | directory-pro | MEDIUM | 5.3 | The Directory Pro plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a funct… | — | wordfence |
| WF-fd4eeb13 | custom-registration-form-builder-with-submission-manager < 6.0.9.4 |
MEDIUM | 5.3 | The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is … | 6.0.9.4 | wordfence |
| WF-fd4714d1 | koji < 2.2.2 |
MEDIUM | 5.3 | The Koji theme for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.2.1. This is d… | 2.2.2 | wordfence |
| WF-fd4446b0 | contact-form-7-integrations < 1.3.11 |
MEDIUM | 5.3 | Multiple cross-site scripting (XSS) vulnerabilities in includes/toAdmin.php in Contact Form 7 Integrations plugin 1.0 th… | 1.3.11 | wordfence |
| WF-fd3cd605 | wordpress-console | MEDIUM | 5.3 | The WordPress Console plugin for WordPress is vulnerable to unauthorized modification of data and execution of files due… | — | wordfence |
| WF-fd399ed3 | rentmy-online-rental-shop | MEDIUM | 5.3 | The RentMy Real-Time Rental Management Plugin plugin for WordPress is vulnerable to authorization bypass in all versions… | — | wordfence |
| WF-fd30fea3 | masvideos < 1.3.3 |
MEDIUM | 5.3 | The MAS Videos plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function… | 1.3.3 | wordfence |
| WF-fd21c7d3 | wps-hide-login < 1.9.16 |
MEDIUM | 5.3 | The WPS Hide Login plugin for WordPress is vulnerable to Login Page Disclosure in all versions up to, and including, 1.9… | 1.9.16 | wordfence |
| WF-fd191128 | woocommerce-wholesale-prices < 2.2.0 |
MEDIUM | 5.3 | The Wholesale Suite – WooCommerce Wholesale Prices, B2B, Catalog Mode, Order Form, Wholesale User Roles, Dynamic Prici… | 2.2.0 | wordfence |
| WF-fcdaa3c0 | nexi-xpay-build | MEDIUM | 5.3 | The Nexi XPay Build plugin for WordPress is vulnerable to unauthorized access in versions 7.0.0 through 7.6.2. This is d… | — | wordfence |
| WF-fcce0a92 | woocommerce-product-vendors < 2.2.2 |
MEDIUM | 5.3 | The WooCommerce Product Vendors plugin for WordPress is vulnerable to unauthorized access due to a missing capability ch… | 2.2.2 | wordfence |
| WF-fca34e4e | wp-glossary | MEDIUM | 5.3 | The Glossary plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check o… | — | wordfence |
| WF-fca13d1d | grandnews | MEDIUM | 5.3 | The Grand News theme for WordPress is vulnerable to unauthorized access in all versions up to, and including, 3.4. This … | — | wordfence |
Vulnerability information shown by EzyAudit comes from the sources below. Each Wordfence Intelligence record links back to its record page.
Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy. Terms.
CVE data. Copyright 1999-2026 The MITRE Corporation. CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. Terms of Use.
EzyAudit AI automatically detects your installed plugins and checks them against this database — in seconds.
Scan My Website →