Live intelligence from Wordfence Intelligence, WPScan, NVD, and CISA KEV — updated daily. Check if your plugins and themes have known CVEs.
46,661 vulnerabilities found (page 1399 of 1867)
| CVE ID | Plugin / Theme | Severity | CVSS | Description | Fixed In | Source |
|---|---|---|---|---|---|---|
| WF-379a5016 | stepbyteservice-openstreetmap | MEDIUM | 5.3 | Multiple plugins for WordPress are vulnerable to malicious redirection in various versions. This is due to the use of Po… | — | wordfence |
| WF-37963064 | ki-live-video-conferences | MEDIUM | 5.3 | The KI Live Video Conferences plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to… | — | wordfence |
| WF-3779cf95 | wp-cafe < 3.0.8 |
MEDIUM | 5.3 | The WPCafe – Restaurant Menu, Online Food Ordering and Reservation Booking Solution plugin for WordPress is vulnerable… | 3.0.8 | wordfence |
| WF-370a96e0 | fapi-member | MEDIUM | 5.3 | The FAPI Member plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and includ… | — | wordfence |
| WF-36fa7191 | computer-repair-shop < 4.1224 |
MEDIUM | 5.3 | The RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress plugin for WordPress is vulnerable to unauthorized ac… | 4.1224 | wordfence |
| WF-36def628 | hkdev-maintenance-mode < 3.0.2 |
MEDIUM | 5.3 | The Maintenance Mode plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and inc… | 3.0.2 | wordfence |
| WF-36dea43a | sprout-invoices < 20.8.18 |
MEDIUM | 5.3 | The Sprout Invoices – Client Invoicing & Estimates plugin for WordPress is vulnerable to Insecure Direct Object Refere… | 20.8.18 | wordfence |
| WF-36ccce3e | license-manager-for-woocommerce < 3.0.16 |
MEDIUM | 5.3 | The License Manager for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versio… | 3.0.16 | wordfence |
| WF-36ad02c5 | zonify < 1.0.5 |
MEDIUM | 5.3 | The Zonify – Amazon Product Importer for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Expos… | 1.0.5 | wordfence |
| WF-36aa7193 | forminator < 1.55.1 |
MEDIUM | 5.3 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Insecure… | 1.55.1 | wordfence |
| WF-36933547 | appexperts < 1.4.5 |
MEDIUM | 5.3 | The APPExperts – Mobile App Builder for WordPress | WooCommerce to iOS and Android Apps plugin for WordPress is vulner… | 1.4.5 | wordfence |
| WF-3681eb1a | mf-plus-wpml | MEDIUM | 5.3 | The MF Plus WPML plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a functi… | — | wordfence |
| WF-3674cfb8 | poll-maker < 5.9.0 |
MEDIUM | 5.3 | The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Basic Information Ex… | 5.9.0 | wordfence |
| WF-3666a841 | activitypub < 1.0.6 |
MEDIUM | 5.3 | The ActivityPub plugin for WordPress is vulnerable to unauthorized access of data due to a unsufficient authorization ch… | 1.0.6 | wordfence |
| WF-3658ed5e | trust-payments-hosted-payment-pages-integration < 3.1.0 |
MEDIUM | 5.3 | The Trust Payments Gateway for WooCommerce plugin for WordPress is vulnerable to unauthorized access in all versions up … | 3.1.0 | wordfence |
| WF-3623f84d | wp-simple-html-sitemap < 3.6 |
MEDIUM | 5.3 | The WordPress Simple HTML Sitemap plugin for WordPress is vulnerable to unauthorized access due to a missing capability … | 3.6 | wordfence |
| WF-3622f58c | internal-link-finder < 5.1.3 |
MEDIUM | 5.3 | The WordPress Internal Link Optimiser plugin for WordPress is vulnerable to unauthorized modification of data due to a m… | 5.1.3 | wordfence |
| WF-360b1927 | yop-poll < 6.5.27 |
MEDIUM | 5.3 | The YOP Poll plugin for WordPress is vulnerable to a race condition in all versions up to, and including, 6.5.26. This i… | 6.5.27 | wordfence |
| WF-35df1ab9 | google-captcha < 1.13 |
MEDIUM | 5.3 | The BestWebSoft Google Captcha (aka reCAPTCHA) plugin before 1.13 for WordPress allows remote attackers to bypass the CA… | 1.13 | wordfence |
| WF-35d84ccf | tailpress | MEDIUM | 5.3 | The TailPress – Tailwind for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all ver… | — | wordfence |
| WF-358a5807 | another-wordpress-classifieds-plugin < 4.4.6 |
MEDIUM | 5.3 | The AWP Classifieds plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a fun… | 4.4.6 | wordfence |
| WF-357bf5c3 | mycred < 2.9.4.3 |
MEDIUM | 5.3 | The myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program. plugin for WordPre… | 2.9.4.3 | wordfence |
| WF-355d8d4a | wp-event-solution < 4.1.20 |
MEDIUM | 5.3 | The Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce plugin for WordPress is vulnerable to user … | 4.1.20 | wordfence |
| WF-3555d06b | todo-lists-for-membership-sites | MEDIUM | 5.3 | The To Do List Member plugin for WordPress is vulnerable to Content Injection in all versions up to, and including, 1.6.… | — | wordfence |
| WF-3535fad2 | albo-pretorio-on-line < 4.12.2 |
MEDIUM | 5.3 | The Albo Pretorio On line plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, an… | 4.12.2 | wordfence |
Vulnerability information shown by EzyAudit comes from the sources below. Each Wordfence Intelligence record links back to its record page.
Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy. Terms.
CVE data. Copyright 1999-2026 The MITRE Corporation. CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. Terms of Use.
EzyAudit AI automatically detects your installed plugins and checks them against this database — in seconds.
Scan My Website →