Live intelligence from Wordfence Intelligence, WPScan, NVD, and CISA KEV — updated daily. Check if your plugins and themes have known CVEs.
46,655 vulnerabilities found (page 1276 of 1867)
| CVE ID | Plugin / Theme | Severity | CVSS | Description | Fixed In | Source |
|---|---|---|---|---|---|---|
| WF-e5ea906a | rethink | MEDIUM | 5.3 | Multiple plugins andthemes for WordPress by inkthemes are vulnerable to Sensitive Information Exposure in various versio… | — | wordfence |
| WF-e5ea906a | butterbelly | MEDIUM | 5.3 | Multiple plugins andthemes for WordPress by inkthemes are vulnerable to Sensitive Information Exposure in various versio… | — | wordfence |
| WF-e5ea906a | colorway | MEDIUM | 5.3 | Multiple plugins andthemes for WordPress by inkthemes are vulnerable to Sensitive Information Exposure in various versio… | — | wordfence |
| WF-e5ea906a | poloray | MEDIUM | 5.3 | Multiple plugins andthemes for WordPress by inkthemes are vulnerable to Sensitive Information Exposure in various versio… | — | wordfence |
| WF-e5ea906a | road-fighter | MEDIUM | 5.3 | Multiple plugins andthemes for WordPress by inkthemes are vulnerable to Sensitive Information Exposure in various versio… | — | wordfence |
| WF-e5ea906a | dzonia-lite | MEDIUM | 5.3 | Multiple plugins andthemes for WordPress by inkthemes are vulnerable to Sensitive Information Exposure in various versio… | — | wordfence |
| WF-e5d625d6 | whatsorder-instant-checkout-for-woocommerce | MEDIUM | 5.3 | The WhatsOrder – Instant Checkout for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure… | — | wordfence |
| WF-e5c99252 | golo < 1.7.5 |
MEDIUM | 5.3 | The Golo - City Travel Guide WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing c… | 1.7.5 | wordfence |
| WF-e5af2507 | eroom-zoom-meetings-webinar < 1.7.2 |
MEDIUM | 5.3 | The eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams plugin for WordPress is vulnerable to unau… | 1.7.2 | wordfence |
| WF-e5ab6dcd | wp-backup-bank | MEDIUM | 5.3 | The Backup Bank: WordPress Backup Plugin plugin for WordPress is vulnerable to unauthorized execution of an AJAX action … | — | wordfence |
| WF-e59928f6 | ecab-taxi-booking-manager < 1.3.1 |
MEDIUM | 5.3 | The E-cab Taxi Booking Manager for Woocommerce plugin for WordPress is vulnerable to unauthorized access due to a missin… | 1.3.1 | wordfence |
| WF-e58afab1 | surecart < 4.9.5 |
MEDIUM | 5.3 | The SureCart plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, … | 4.9.5 | wordfence |
| WF-e54e199a | learnpress < 4.2.7.6 |
MEDIUM | 5.3 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capab… | 4.2.7.6 | wordfence |
| WF-e545b53e | modern-events-calendar-lite < 7.22 |
MEDIUM | 5.3 | The Modern Events Calendar Lite plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and in… | 7.22 | wordfence |
| WF-e53e75be | user-private-files < 2.0.5 |
MEDIUM | 5.3 | The WordPress File Sharing Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions… | 2.0.5 | wordfence |
| WF-e53ca576 | nelio-ab-testing < 8.3.0 |
MEDIUM | 5.3 | The Nelio A/B Testing – AB Tests and Heatmaps for Better Conversion Optimization plugin for WordPress is vulnerable to… | 8.3.0 | wordfence |
| WF-e537c56d | simple-calendar-for-elementor < 1.6.7 |
MEDIUM | 5.3 | The Simple calendar for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and… | 1.6.7 | wordfence |
| WF-e533f20e | ht-mega-for-elementor < 3.0.7 |
MEDIUM | 5.3 | The HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin for WordPress is vulnerable to Sensitiv… | 3.0.7 | wordfence |
| WF-e52e35db | innovs-woo-manager | MEDIUM | 5.3 | The WooCommerce Manager – Customize and Control Cart page, Add to Cart button, Checkout fields easily plugin for WordP… | — | wordfence |
| WF-e4f090da | gf-add-on-by-click5 | MEDIUM | 5.3 | The click5 CRM add-on to Gravity Forms plugin for WordPress is vulnerable to unauthorized access in all versions up to, … | — | wordfence |
| WF-e4deb62a | shapepress-dsgvo < 3.1.40 |
MEDIUM | 5.3 | The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includin… | 3.1.40 | wordfence |
| WF-e4dcedcc | latepoint < 5.6.2 |
MEDIUM | 5.3 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to authorizatio… | 5.6.2 | wordfence |
| WF-e4d539a3 | content-protector < 4.3.14 |
MEDIUM | 5.3 | The Passster – Password Protect Pages and Content plugin for WordPress is vulnerable to unauthorized access in all ver… | 4.3.14 | wordfence |
| WF-e4c31bcb | appmysite < 3.15.5 |
MEDIUM | 5.3 | The AppMySite – WordPress & WooCommerce Mobile App Builder (No-Code Android & iOS App Maker) plugin for WordPress is v… | 3.15.5 | wordfence |
| WF-e4b4d08a | gutena-forms < 2.0.0 |
MEDIUM | 5.3 | The Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin for WordPres… | 2.0.0 | wordfence |
Vulnerability information shown by EzyAudit comes from the sources below. Each Wordfence Intelligence record links back to its record page.
Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy. Terms.
CVE data. Copyright 1999-2026 The MITRE Corporation. CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. Terms of Use.
EzyAudit AI automatically detects your installed plugins and checks them against this database — in seconds.
Scan My Website →