Live intelligence from Wordfence Intelligence, WPScan, NVD, and CISA KEV — updated daily. Check if your plugins and themes have known CVEs.
46,661 vulnerabilities found (page 1341 of 1867)
| CVE ID | Plugin / Theme | Severity | CVSS | Description | Fixed In | Source |
|---|---|---|---|---|---|---|
| WF-8b1f5965 | wp-travel < 11.7.1 |
MEDIUM | 5.3 | The Travel plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in … | 11.7.1 | wordfence |
| WF-8b1cf5dc | media-library-assistant < 3.01 |
MEDIUM | 5.3 | The Media Library Assistant plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and includi… | 3.01 | wordfence |
| WF-8b1af76a | wp-job-manager < 2.1.0 |
MEDIUM | 5.3 | The WP Job Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c… | 2.1.0 | wordfence |
| WF-8b007bf9 | keep-backup-daily < 2.0.9 |
MEDIUM | 5.3 | The Keep Backup Daily plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and in… | 2.0.9 | wordfence |
| WF-8aee568b | wpforms-lite < 2.0.2.2 |
MEDIUM | 5.3 | The WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More plugin for Word… | 2.0.2.2 | wordfence |
| WF-8adabc89 | upload-am-file-hosting-vpn < 1.0.1 |
MEDIUM | 5.3 | The Upload.am – File Hosting & VPN plugin for WordPress is vulnerable to unauthorized access of data due to a missing … | 1.0.1 | wordfence |
| WF-8a9e1325 | accept-stripe-payments-using-contact-form-7 < 2.6 |
MEDIUM | 5.3 | The Accept Stripe Payments Using Contact Form 7 plugin for WordPress is vulnerable to Information Exposure in all versio… | 2.6 | wordfence |
| WF-8a9df5f6 | acf-city-selector | MEDIUM | 5.3 | The ACF City Selector plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and in… | — | wordfence |
| WF-8a98c966 | revive-so < 2.0.8 |
MEDIUM | 5.3 | The Revive.so plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function … | 2.0.8 | wordfence |
| WF-8a8ee823 | media-cleaner < 6.7.3 |
MEDIUM | 5.3 | The Media Cleaner: Clean your WordPress! plugin for WordPress is vulnerable to Sensitive Information Exposure in all ver… | 6.7.3 | wordfence |
| WF-8a8d3c6a | progress-planner < 0.9.2 |
MEDIUM | 5.3 | The Progress Planner plugin for WordPress is vulnerable to unauthorized access of data due to an insufficient capability… | 0.9.2 | wordfence |
| WF-8a84bcc2 | pdf-resume-parser | MEDIUM | 5.3 | The PDF Resume Parser plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and in… | — | wordfence |
| WF-8a7eb2ed | influencer < 1.1.8 |
MEDIUM | 5.3 | The Influencer theme for WordPress is vulnerable to unauthorized access due to a missing capability check on a function … | 1.1.8 | wordfence |
| WF-8a7ced3b | mappress-google-maps-for-wordpress < 2.88.16 |
MEDIUM | 5.3 | The MapPress Maps for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capab… | 2.88.16 | wordfence |
| WF-8a64d68b | nmedia-user-file-uploader < 23.6 |
MEDIUM | 5.3 | The Frontend File Manager Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions … | 23.6 | wordfence |
| WF-8a3a1769 | bus-ticket-booking-with-seat-reservation < 5.6.5 |
MEDIUM | 5.3 | The Bus Ticket Booking with Seat Reservation plugin for WordPress is vulnerable to Sensitive Information Exposure in all… | 5.6.5 | wordfence |
| WF-8a15ab92 | ldap-login-for-intranet-sites < 4.1.10 |
MEDIUM | 5.3 | The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to Information Exposure in all ve… | 4.1.10 | wordfence |
| WF-8a0b961e | booking < 10.10.1 |
MEDIUM | 5.3 | The WP Booking Calendar plugin for WordPress is vulnerable to Unauthenticated Post-Confirmation Booking Manipulation in … | 10.10.1 | wordfence |
| WF-8a003bbc | persian-elementor < 2.8.2 |
MEDIUM | 5.3 | The المنتور فارسی plugin for WordPress is vulnerable to Payment Bypass in versions 2.7.10 through 2.8.1. Thi… | 2.8.2 | wordfence |
| WF-89f7c287 | jet-blocks < 1.3.16.1 |
MEDIUM | 5.3 | The JetBlocks for Elementor plugin for WordPress is vulnerable to unauthorized access due to a missing capability check … | 1.3.16.1 | wordfence |
| WF-89f57714 | yet-another-related-posts-plugin < 5.30.11 |
MEDIUM | 5.3 | The YARPP – Yet Another Related Posts Plugin plugin for WordPress is vulnerable to unauthorized access due to a missin… | 5.30.11 | wordfence |
| WF-89ee5d27 | quiz-master-next < 8.1.17 |
MEDIUM | 5.3 | The Quiz And Survey Master plugin for WordPress is vulnerable to unauthorized access, modification or loss of data due t… | 8.1.17 | wordfence |
| WF-89e9cc7b | wp-ajaxify-comments < 3.2 |
MEDIUM | 5.3 | The Ajaxify Comments – Ajax and Lazy Loading Comments plugin for WordPress is vulnerable to HTTP Header Injection in a… | 3.2 | wordfence |
| WF-89d6a232 | wp-rollback < 3.2.0 |
MEDIUM | 5.3 | The WP Rollback – Rollback Plugins and Themes plugin for WordPress is vulnerable to Sensitive Information Exposure in … | 3.2.0 | wordfence |
| WF-89c199e0 | easy-form < 2.8.0 |
MEDIUM | 5.3 | The Easy Form plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function … | 2.8.0 | wordfence |
Vulnerability information shown by EzyAudit comes from the sources below. Each Wordfence Intelligence record links back to its record page.
Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy. Terms.
CVE data. Copyright 1999-2026 The MITRE Corporation. CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. Terms of Use.
EzyAudit AI automatically detects your installed plugins and checks them against this database — in seconds.
Scan My Website →