Live intelligence from Wordfence Intelligence, WPScan, NVD, and CISA KEV — updated daily. Check if your plugins and themes have known CVEs.
46,655 vulnerabilities found (page 1300 of 1867)
| CVE ID | Plugin / Theme | Severity | CVSS | Description | Fixed In | Source |
|---|---|---|---|---|---|---|
| WF-c52eba24 | author-avatars | MEDIUM | 5.3 | The Author Avatars List/Block plugin for WordPress is vulnerable to unauthorized access due to a missing capability chec… | — | wordfence |
| WF-c525b41c | user-registration < 4.1.4 |
MEDIUM | 5.3 | The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vu… | 4.1.4 | wordfence |
| WF-c51c6cfb | wp-google-maps < 10.1.02 |
MEDIUM | 5.3 | The WP Go Maps – Most Popular Map Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up… | 10.1.02 | wordfence |
| WF-c50cf850 | mappress-google-maps-for-wordpress < 2.97.7 |
MEDIUM | 5.3 | The MapPress – Google Maps, OpenStreetMap & Leaflet plugin for WordPress is vulnerable to Sensitive Information Exposu… | 2.97.7 | wordfence |
| WF-c509b832 | woocommerce-pdf-invoices-packing-slips < 3.8.7 |
MEDIUM | 5.3 | The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a miss… | 3.8.7 | wordfence |
| WF-c4e0a21a | ppv-live-webcams < 7.3.24 |
MEDIUM | 5.3 | The Paid Videochat Turnkey Site – HTML5 PPV Live Webcams plugin for WordPress is vulnerable to unauthorized access due… | 7.3.24 | wordfence |
| WF-c4d8f5a9 | unyson < 2.7.19 |
MEDIUM | 5.3 | The Unyson plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.7.18 via im… | 2.7.19 | wordfence |
| WF-c4d496d1 | wp-travel < 11.8.1 |
MEDIUM | 5.3 | The WP Travel – Ultimate Travel Booking System, Tour Management Engine plugin for WordPress is vulnerable to Payment B… | 11.8.1 | wordfence |
| WF-c4c58c0e | wp-event-solution < 4.1.26 |
MEDIUM | 5.3 | The Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce plugin for WordPress is vulnerable to Sens… | 4.1.26 | wordfence |
| WF-c4b833c3 | learnpress < 4.3.2 |
MEDIUM | 5.3 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missi… | 4.3.2 | wordfence |
| WF-c4b2cf3b | ultimate-post < 5.0.6 |
MEDIUM | 5.3 | The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to unauth… | 5.0.6 | wordfence |
| WF-c4a1b869 | pie-register < 3.8.4.9 |
MEDIUM | 5.3 | The Pie Register plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a functi… | 3.8.4.9 | wordfence |
| WF-c4901d9d | all-in-one-wp-migration < 7.87 |
MEDIUM | 5.3 | The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to Sensitive Information Exposure in all versi… | 7.87 | wordfence |
| WF-c462eb91 | wpfunnels < 3.13.6 |
MEDIUM | 5.3 | The WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin for WordPress is vulnerable to … | 3.13.6 | wordfence |
| WF-c460e742 | miraculouscore < 2.0.9 |
MEDIUM | 5.3 | The miraculouscore plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to 2.0.9 (e… | 2.0.9 | wordfence |
| WF-c45aea72 | yame-linkinbio | MEDIUM | 5.3 | The Yame | Link In Bio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and i… | — | wordfence |
| WF-c441d113 | inet-webkit < 1.2.3 |
MEDIUM | 5.3 | The iNET Webkit plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a functio… | 1.2.3 | wordfence |
| WF-c4192a7f | royal-elementor-addons < 1.7.1050 |
MEDIUM | 5.3 | The Royal Addons for Elementor – Addons and Templates Kit for Elementor plugin for WordPress is vulnerable to Informat… | 1.7.1050 | wordfence |
| WF-c41651ce | secure-passkeys < 1.2.2 |
MEDIUM | 5.3 | The Secure Passkeys plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the d… | 1.2.2 | wordfence |
| WF-c4098a47 | mystickyelements < 2.1.4 |
MEDIUM | 5.3 | The All-in-one Floating Contact Form – My Sticky Elements plugin for WordPress is vulnerable to unauthorized access du… | 2.1.4 | wordfence |
| WF-c3f9898b | wordpress < 4.7.34 |
MEDIUM | 5.3 | WordPress Core is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.0.2 via the comme… | 4.7.34 | wordfence |
| WF-c3ede2bc | atarim-visual-collaboration < 4.0.2 |
MEDIUM | 5.3 | The Atarim plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on … | 4.0.2 | wordfence |
| WF-c3ecf521 | mailchimp-for-wp < 4.15.0 |
MEDIUM | 5.3 | The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to unauthorized access in all versions up to, and … | 4.15.0 | wordfence |
| WF-c3eb3444 | depay-payments-for-woocommerce < 2.12.18 |
MEDIUM | 5.3 | The Web3 Crypto Payments by DePay for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due … | 2.12.18 | wordfence |
| WF-c3e98eb0 | token-of-trust < 4.0.3 |
MEDIUM | 5.3 | The Age Verification & Identity Verification by Token of Trust plugin for WordPress is vulnerable to unauthorized access… | 4.0.3 | wordfence |
Vulnerability information shown by EzyAudit comes from the sources below. Each Wordfence Intelligence record links back to its record page.
Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy. Terms.
CVE data. Copyright 1999-2026 The MITRE Corporation. CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. Terms of Use.
EzyAudit AI automatically detects your installed plugins and checks them against this database — in seconds.
Scan My Website →