Live intelligence from Wordfence Intelligence, WPScan, NVD, and CISA KEV — updated daily. Check if your plugins and themes have known CVEs.
46,661 vulnerabilities found (page 1374 of 1867)
| CVE ID | Plugin / Theme | Severity | CVSS | Description | Fixed In | Source |
|---|---|---|---|---|---|---|
| WF-5a3c16a5 | breeze < 2.2.22 |
MEDIUM | 5.3 | The Breeze - WordPress Cache Plugin plugin for WordPress is vulnerable to unauthorized cache clearing in all versions up… | 2.2.22 | wordfence |
| WF-5a38a72a | user-activity | MEDIUM | 5.3 | The User Activity plugin for WordPress is vulnerable to IP Address Spoofing in versions up to and including 1.0.1. This … | — | wordfence |
| WF-5a334947 | broken-link-checker < 1.10.6 |
MEDIUM | 5.3 | The Broken Link Checker plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 1.1… | 1.10.6 | wordfence |
| WF-5a24d442 | wpfunnels < 3.13.0 |
MEDIUM | 5.3 | The WPFunnels plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.12.13. Thi… | 3.13.0 | wordfence |
| WF-5a23a284 | king-addons < 51.1.90 |
MEDIUM | 5.3 | The King Addons for Elementor – 100+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce Builder, Mega Menu, Po… | 51.1.90 | wordfence |
| WF-5a2043a8 | mapsvg-lite-interactive-vector-maps < 8.16.2 |
MEDIUM | 5.3 | The MapSVG – Vector maps, Image maps, Google Maps plugin for WordPress is vulnerable to Sensitive Information Exposure… | 8.16.2 | wordfence |
| WF-5a1ed919 | convertkit < 3.4.8 |
MEDIUM | 5.3 | The Kit (formerly ConvertKit) – Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership plu… | 3.4.8 | wordfence |
| WF-5a1dc947 | macro-admin-email-data-optin-calculator | MEDIUM | 5.3 | The Macro Calculator with Admin Email Optin & Data plugin for WordPress is vulnerable to Sensitive Information Exposure … | — | wordfence |
| WF-5a1b31f4 | ays-facebook-popup-likebox < 3.7.8 |
MEDIUM | 5.3 | The Popup Like box plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a func… | 3.7.8 | wordfence |
| WF-5a1391b1 | usc-e-shop < 2.11.29 |
MEDIUM | 5.3 | The Welcart e-Commerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a … | 2.11.29 | wordfence |
| WF-59ff476d | add-expires-headers < 3.3.0 |
MEDIUM | 5.3 | The Add Expires Headers & Optimized Minify plugin for WordPress is vulnerable to unauthorized access due to a missing ca… | 3.3.0 | wordfence |
| WF-59e4fe52 | gift4u-gift-cards-all-in-one-for-woo < 1.1.4 |
MEDIUM | 5.3 | The GIFT4U – Gift Cards All in One for Woo plugin for WordPress is vulnerable to unauthorized access in all versions u… | 1.1.4 | wordfence |
| WF-59da92e2 | riaxe-product-customizer | MEDIUM | 5.3 | The Riaxe Product Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and inclu… | — | wordfence |
| WF-59d93b2e | all-in-one-video-gallery < 5.1.0 |
MEDIUM | 5.3 | The All-in-One Video Gallery plugin for WordPress is vulnerable to unauthorized access in all versions up to, and includ… | 5.1.0 | wordfence |
| WF-59c0caa2 | wemail < 2.0.8 |
MEDIUM | 5.3 | The weMail - Email Marketing, Lead Generation, Optin Forms, Email Newsletters, A/B Testing, and Automation plugin for Wo… | 2.0.8 | wordfence |
| WF-598c6005 | mage-eventpress-pro < 5.0.3 |
MEDIUM | 5.3 | The Event Booking Manager for WooCommerce (Pro) plugin for WordPress is vulnerable to Payment Bypass in versions up to, … | 5.0.3 | wordfence |
| WF-598875c5 | masterstudy-elementor-widgets < 1.2.3 |
MEDIUM | 5.3 | The Masterstudy Elementor Widgets plugin for WordPress is vulnerable to unauthorized access due to a missing capability … | 1.2.3 | wordfence |
| WF-5981b937 | give < 4.16.6 |
MEDIUM | 5.3 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access due to… | 4.16.6 | wordfence |
| WF-596f70da | cream-blog | MEDIUM | 5.3 | The Cream Blog theme for WordPress is vulnerable to unauthorized access due to a missing capability check on a function … | — | wordfence |
| WF-5968f3f8 | wedocs < 2.6.2 |
MEDIUM | 5.3 | The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for WordPress is vulnerable to unau… | 2.6.2 | wordfence |
| WF-595d6cdb | rafflepress < 1.12.11 |
MEDIUM | 5.3 | The Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers plugin f… | 1.12.11 | wordfence |
| WF-5958f5ba | newsletters-lite < 4.17 |
MEDIUM | 5.3 | The Newsletters plugin for WordPress is vulnerable to unauthorized access due to insufficient randomization of API keys … | 4.17 | wordfence |
| WF-594fc4c4 | eshipper-commerce < 2.16.13 |
MEDIUM | 5.3 | The eShipper Commerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a f… | 2.16.13 | wordfence |
| WF-594de3b2 | geodirectory < 2.8.194 |
MEDIUM | 5.3 | The GeoDirectory plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includi… | 2.8.194 | wordfence |
| WF-5947f7cb | flexible-woocommerce-checkout-field-editor | MEDIUM | 5.3 | The Flexible Woocommerce Checkout Field Editor plugin for WordPress is vulnerable to unauthorized access due to a missin… | — | wordfence |
Vulnerability information shown by EzyAudit comes from the sources below. Each Wordfence Intelligence record links back to its record page.
Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy. Terms.
CVE data. Copyright 1999-2026 The MITRE Corporation. CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. Terms of Use.
EzyAudit AI automatically detects your installed plugins and checks them against this database — in seconds.
Scan My Website →