Live intelligence from Wordfence Intelligence, WPScan, NVD, and CISA KEV — updated daily. Check if your plugins and themes have known CVEs.
46,661 vulnerabilities found (page 1390 of 1867)
| CVE ID | Plugin / Theme | Severity | CVSS | Description | Fixed In | Source |
|---|---|---|---|---|---|---|
| WF-42aa82ff | eventprime-event-calendar-management < 4.2.8.5 |
MEDIUM | 5.3 | The EventPrime plugin for WordPress is vulnerable to unauthorized image file upload in all versions up to, and including… | 4.2.8.5 | wordfence |
| WF-428feddb | import-users-from-csv-with-meta < 1.24.7 |
MEDIUM | 5.3 | The Import and export users and customers plugin for WordPress is vulnerable to unauthorized modification of data due to… | 1.24.7 | wordfence |
| WF-4279efe9 | woocommerce < 4.7.0 |
MEDIUM | 5.3 | The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the… | 4.7.0 | wordfence |
| WF-426554d8 | fg-drupal-to-wp < 3.71.0 |
MEDIUM | 5.3 | The FG Drupal to WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, a… | 3.71.0 | wordfence |
| WF-426431d9 | falcon < 2.12.1 |
MEDIUM | 5.3 | The Falcon – Cache, Performance, Security, Cleanup, and Tweaks plugin for WordPress is vulnerable to unauthorized acce… | 2.12.1 | wordfence |
| WF-4261bc62 | wp-cafe < 2.2.23 |
MEDIUM | 5.3 | The WPCafe plugin for WordPress is vulnerable to unauthorized access, modification, or loss of data due to a missing cap… | 2.2.23 | wordfence |
| WF-425d9583 | events-manager < 7.4.6 |
MEDIUM | 5.3 | The Events Manager – Calendar, Bookings, Tickets, Appointments and more! plugin for WordPress is vulnerable to Sensiti… | 7.4.6 | wordfence |
| WF-424cf586 | wpforo < 3.1.1 |
MEDIUM | 5.3 | The wpForo Forum plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a functi… | 3.1.1 | wordfence |
| WF-424b0de2 | saoshyant-page-builder | MEDIUM | 5.3 | The Saoshyant Page Builder plugin for WordPress is vulnerable to unauthorized access due to a missing capability check o… | — | wordfence |
| WF-4229a61a | easy-property-listings < 3.5.28 |
MEDIUM | 5.3 | The Easy Property Listings plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, a… | 3.5.28 | wordfence |
| WF-41f6c1da | wp-full-stripe-free < 8.5.5 |
MEDIUM | 5.3 | The Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions plugin for WordPress … | 8.5.5 | wordfence |
| WF-41de0cf6 | trackship-for-woocommerce < 1.7.6 |
MEDIUM | 5.3 | The TrackShip for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability chec… | 1.7.6 | wordfence |
| WF-41db1af4 | avalex < 3.1.4 |
MEDIUM | 5.3 | The avalex – Automatisch sichere Rechtstexte plugin for WordPress is vulnerable to unauthorized access due to a missin… | 3.1.4 | wordfence |
| WF-41d55e84 | html5-mp3-player-with-playlist < 2.8.0 |
MEDIUM | 5.3 | The HTML5 MP3 Player with Playlist Free plugin for WordPress is vulnerable to full path disclosure in versions up to, an… | 2.8.0 | wordfence |
| WF-41d41850 | jobbank | MEDIUM | 5.3 | The JobBank plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in… | — | wordfence |
| WF-41d018a9 | provesource < 4.0.0 |
MEDIUM | 5.3 | The ProveSource Social Proof plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,… | 4.0.0 | wordfence |
| WF-41b2a584 | download-manager < 3.3.71 |
MEDIUM | 5.3 | The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and inc… | 3.3.71 | wordfence |
| WF-41ad41dc | advanced-classifieds-and-directory-pro < 3.4.3 |
MEDIUM | 5.3 | The Advanced Classifieds & Directory Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in version… | 3.4.3 | wordfence |
| WF-41aa5b3d | redi-restaurant-reservation < 24.0712 |
MEDIUM | 5.3 | The ReDi Restaurant Reservation plugin for WordPress is vulnerable to unauthorized modification of data due to a missing… | 24.0712 | wordfence |
| WF-41a2d4db | dc-woocommerce-multi-vendor | MEDIUM | 5.3 | The MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions plugin for WordPress is vulnerable to unau… | — | wordfence |
| WF-41a1ea51 | fluxtore < 1.6.3 |
MEDIUM | 5.3 | The fluXtore Funnel Builder for WordPress – Earn More with Highly Converting Sales Funnels plugin for WordPress is vul… | 1.6.3 | wordfence |
| WF-4198bbb2 | hide-links | MEDIUM | 5.3 | The Hide Links plugin for WordPress is vulnerable to unauthorized shortcode execution due to do_shortcode being hooked t… | — | wordfence |
| WF-415c2648 | pmpro-mailchimp < 2.3.5 |
MEDIUM | 5.3 | The Paid Memberships Pro – Mailchimp Add On plugin for WordPress is vulnerable to Sensitive Information Exposure in al… | 2.3.5 | wordfence |
| WF-4158f6ff | byconsole-woo-order-delivery-time < 2.5.2 |
MEDIUM | 5.3 | The WooODT Lite – Delivery & pickup date time location for WooCommerce plugin for WordPress is vulnerable to Full Path… | 2.5.2 | wordfence |
| WF-4149ee26 | wheel-of-life < 1.2.1 |
MEDIUM | 5.3 | The Wheel of Life: Coaching and Assessment Tool for Life Coach plugin for WordPress is vulnerable to unauthorized access… | 1.2.1 | wordfence |
Vulnerability information shown by EzyAudit comes from the sources below. Each Wordfence Intelligence record links back to its record page.
Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy. Terms.
CVE data. Copyright 1999-2026 The MITRE Corporation. CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. Terms of Use.
EzyAudit AI automatically detects your installed plugins and checks them against this database — in seconds.
Scan My Website →