Live intelligence from Wordfence Intelligence, WPScan, NVD, and CISA KEV — updated daily. Check if your plugins and themes have known CVEs.
46,655 vulnerabilities found (page 1304 of 1867)
| CVE ID | Plugin / Theme | Severity | CVSS | Description | Fixed In | Source |
|---|---|---|---|---|---|---|
| WF-c18ad885 | latepoint < 5.2.7 |
MEDIUM | 5.3 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to unauthorized… | 5.2.7 | wordfence |
| WF-c183ba80 | sunshine-photo-cart < 3.7 |
MEDIUM | 5.3 | The Sunshine Photo Cart plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, an… | 3.7 | wordfence |
| WF-c182b4f2 | order-notification-for-telegram | MEDIUM | 5.3 | The Order Notification for Telegram plugin for WordPress is vulnerable to unauthorized test message sending due to a mis… | — | wordfence |
| WF-c16c8f50 | wp-emember | MEDIUM | 5.3 | The Wp EMember plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, v1… | — | wordfence |
| WF-c1586542 | ppv-live-webcams < 7.5.13 |
MEDIUM | 5.3 | The Paid Videochat Turnkey Site – HTML5 PPV Live Webcams plugin for WordPress is vulnerable to unauthorized access in … | 7.5.13 | wordfence |
| WF-c1558b08 | simple-membership < 4.5.6 |
MEDIUM | 5.3 | The Simple Membership plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and in… | 4.5.6 | wordfence |
| WF-c12cca1e | catfolders-document-gallery < 2.0.7 |
MEDIUM | 5.3 | The CatFolders Document Gallery & PDF Library plugin for WordPress is vulnerable to unauthorized access in all versions … | 2.0.7 | wordfence |
| WF-c1033b4d | embedpress < 3.8.0 |
MEDIUM | 5.3 | The EmbedPress plugin for WordPress is vulnerable to Sensitive Information Exposure due to hardcoded encryption key on t… | 3.8.0 | wordfence |
| WF-c0faf1ac | hyve-lite < 2.0.3 |
MEDIUM | 5.3 | The Hyve Lite – AI Chatbot Trained on WordPress Posts, Pages, Products & More with ChatGPT plugin for WordPress is vul… | 2.0.3 | wordfence |
| WF-c0e53afe | bookit < 2.6.0.6 |
MEDIUM | 5.3 | The Bookit — Booking & Appointment Calendar plugin for WordPress is vulnerable to unauthorized access in all versions … | 2.6.0.6 | wordfence |
| WF-c0d1145d | easy-digital-downloads < 3.6.8 |
MEDIUM | 5.3 | The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to unau… | 3.6.8 | wordfence |
| WF-c0c60ee5 | upi-qr-code-payment-for-woocommerce < 1.6.1 |
MEDIUM | 5.3 | The UPI QR Code Payment Gateway for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missi… | 1.6.1 | wordfence |
| WF-c0bba475 | wordpress < 3.5.2 |
MEDIUM | 5.3 | wp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post exists, allows remote attackers to cause… | 3.5.2 | wordfence |
| WF-c0a42af0 | all-in-one-seo-pack < 4.9.9 |
MEDIUM | 5.3 | The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin … | 4.9.9 | wordfence |
| WF-c09318f1 | notificationx < 3.2.2 |
MEDIUM | 5.3 | The NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & … | 3.2.2 | wordfence |
| WF-c092629f | post-from-frontend | MEDIUM | 5.3 | The Post From Frontend plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inclu… | — | wordfence |
| WF-c08444ef | jetformbuilder < 3.5.4 |
MEDIUM | 5.3 | The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to unauthorized modification of da… | 3.5.4 | wordfence |
| WF-c0467322 | chatbot < 8.6.0 |
MEDIUM | 5.3 | The WPBot plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 8.5… | 8.6.0 | wordfence |
| WF-c034d2a2 | shareyourcart < 1.7.1 |
MEDIUM | 5.3 | The ShareYourCart plugin before 1.7.1 for WordPress allows remote attackers to obtain the installation path via unspecif… | 1.7.1 | wordfence |
| WF-c023b91e | spin-wheel < 2.1.1 |
MEDIUM | 5.3 | The Spin Wheel plugin for WordPress is vulnerable to client-side prize manipulation in all versions up to, and including… | 2.1.1 | wordfence |
| WF-c01a8fbc | vikrentcar < 1.3.3 |
MEDIUM | 5.3 | The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Sensitive Information Exposure in all … | 1.3.3 | wordfence |
| WF-c01a06ca | wp-cafe < 3.0.20 |
MEDIUM | 5.3 | The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is vulnerable to author… | 3.0.20 | wordfence |
| WF-c0163382 | eventon | MEDIUM | 5.3 | The EventON (Pro) - WordPress Virtual Event Calendar Plugin plugin for WordPress is vulnerable to unauthorized access du… | — | wordfence |
| WF-c0038682 | picu < 3.10.2 |
MEDIUM | 5.3 | The picu – Online Photo Proofing Gallery plugin for WordPress is vulnerable to unauthorized access in all versions up … | 3.10.2 | wordfence |
| WF-bfef0be2 | woo-xendit-virtual-accounts < 7.2.1 |
MEDIUM | 5.3 | The Xendit Payment plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a func… | 7.2.1 | wordfence |
Vulnerability information shown by EzyAudit comes from the sources below. Each Wordfence Intelligence record links back to its record page.
Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy. Terms.
CVE data. Copyright 1999-2026 The MITRE Corporation. CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. Terms of Use.
EzyAudit AI automatically detects your installed plugins and checks them against this database — in seconds.
Scan My Website →