Live intelligence from Wordfence Intelligence, WPScan, NVD, and CISA KEV — updated daily. Check if your plugins and themes have known CVEs.
46,661 vulnerabilities found (page 1386 of 1867)
| CVE ID | Plugin / Theme | Severity | CVSS | Description | Fixed In | Source |
|---|---|---|---|---|---|---|
| WF-484ffb38 | nota-fiscal-eletronica-woocommerce < 3.4.1.0 |
MEDIUM | 5.3 | The Nota Fiscal Eletrônica WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capab… | 3.4.1.0 | wordfence |
| WF-484d364d | hippoo < 1.9.6 |
MEDIUM | 5.3 | The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capabil… | 1.9.6 | wordfence |
| WF-483fa12f | fusion-core < 5.15.0 |
MEDIUM | 5.3 | The Avada Core plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function… | 5.15.0 | wordfence |
| WF-483dad33 | fastdup < 2.7.3 |
MEDIUM | 5.3 | The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to Path Traversal in all ver… | 2.7.3 | wordfence |
| WF-4836b2c8 | the-conference < 1.2.6 |
MEDIUM | 5.3 | The The Conference theme for WordPress is vulnerable to unauthorized access due to a missing capability check on a funct… | 1.2.6 | wordfence |
| WF-481bbdd6 | backupbuddy < 3.0 |
MEDIUM | 5.3 | The BackupBuddy plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.2.28 v… | 3.0 | wordfence |
| WF-48164d31 | shopping-feed-for-google < 5.3.2 |
MEDIUM | 5.3 | The Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant plugin for WordPre… | 5.3.2 | wordfence |
| WF-47f9a466 | zigaform-calculator-cost-estimation-form-builder-lite < 7.6.7 |
MEDIUM | 5.3 | The Zigaform plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 7.6.… | 7.6.7 | wordfence |
| WF-47f57e90 | wp-analytify-pro < 7.0.4 |
MEDIUM | 5.3 | The Analytify Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includ… | 7.0.4 | wordfence |
| WF-47dac5bb | yaad-sarig-payment-gateway-for-wc < 2.2.13 |
MEDIUM | 5.3 | The Yaad Sarig Payment Gateway For WC plugin for WordPress is vulnerable to unauthorized access due to a missing capabil… | 2.2.13 | wordfence |
| WF-47bf51eb | mage-eventpress < 5.3.8 |
MEDIUM | 5.3 | The Event Booking Manager for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all … | 5.3.8 | wordfence |
| WF-47bb46df | pmpro-ccbill < 0.4 |
MEDIUM | 5.3 | The Paid Memberships Pro CCBill Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to i… | 0.4 | wordfence |
| WF-47b0a994 | atarim-visual-collaboration < 4.3.2 |
MEDIUM | 5.3 | The Visual Feedback, Review & AI Collaboration Tool For WordPress – Atarim plugin for WordPress is vulnerable to unaut… | 4.3.2 | wordfence |
| WF-47acd9a1 | wpappninja < 11.84 |
MEDIUM | 5.3 | The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in… | 11.84 | wordfence |
| WF-47a51676 | woocommerce-pay-for-payment < 3.0.2 |
MEDIUM | 5.3 | The Pay for Payment for WooCommerce – Payment Gateway Fees & Discounts plugin for WordPress is vulnerable to unauthori… | 3.0.2 | wordfence |
| WF-478e3383 | wp-customize-login-page | MEDIUM | 5.3 | The WP Customize Login Page plugin for WordPress is vulnerable to unauthorized access due to a missing capability check … | — | wordfence |
| WF-478d7c1e | wpforo < 3.0.7 |
MEDIUM | 5.3 | The wpForo Forum plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a functi… | 3.0.7 | wordfence |
| WF-4775d8f0 | car-rental-manager < 1.3.8 |
MEDIUM | 5.3 | The Car Rental Manager – Online Vehicle Booking System plugin for WordPress is vulnerable to unauthorized access due t… | 1.3.8 | wordfence |
| WF-47681954 | safe-redirect-manager < 2.0.0 |
MEDIUM | 5.3 | The got (JS Package) is vulnerable to Open Redirect in versions up to, and including, 11.8.4 as well as from 12 to below… | 2.0.0 | wordfence |
| WF-47681954 | simple-podcasting < 1.3.0 |
MEDIUM | 5.3 | The got (JS Package) is vulnerable to Open Redirect in versions up to, and including, 11.8.4 as well as from 12 to below… | 1.3.0 | wordfence |
| WF-47681954 | simple-page-ordering < 2.4.3 |
MEDIUM | 5.3 | The got (JS Package) is vulnerable to Open Redirect in versions up to, and including, 11.8.4 as well as from 12 to below… | 2.4.3 | wordfence |
| WF-4756312e | awesome-responsive-photo-gallery < 1.2 |
MEDIUM | 5.3 | The Awesome Responsive Photo Gallery – Image & Video Lightbox Gallery plugin for WordPress is vulnerable to unauthoriz… | 1.2 | wordfence |
| WF-4735c491 | bulletproof-security < 5.2 |
MEDIUM | 5.3 | The BulletProof Security WordPress plugin is vulnerable to sensitive information disclosure due to a file path disclosur… | 5.2 | wordfence |
| WF-47295f41 | knit-pay < 9.6.3.1 |
MEDIUM | 5.3 | The Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more plugin for WordPress is vulnerable to unauthorized acces… | 9.6.3.1 | wordfence |
| WF-472551ce | jetformbuilder < 3.6.8 |
MEDIUM | 5.3 | The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to unauthorized access in all vers… | 3.6.8 | wordfence |
Vulnerability information shown by EzyAudit comes from the sources below. Each Wordfence Intelligence record links back to its record page.
Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy. Terms.
CVE data. Copyright 1999-2026 The MITRE Corporation. CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. Terms of Use.
EzyAudit AI automatically detects your installed plugins and checks them against this database — in seconds.
Scan My Website →