Live intelligence from Wordfence Intelligence, WPScan, NVD, and CISA KEV — updated daily. Check if your plugins and themes have known CVEs.
46,661 vulnerabilities found (page 1436 of 1867)
| CVE ID | Plugin / Theme | Severity | CVSS | Description | Fixed In | Source |
|---|---|---|---|---|---|---|
| WF-061a14bf | sureforms < 2.2.2 |
MEDIUM | 5.3 | The SureForms plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function … | 2.2.2 | wordfence |
| WF-0612c0be | hel-online-classroom | MEDIUM | 5.3 | The HEL Online Classroom: AI-powered Online Classrooms plugin for WordPress is vulnerable to Missing Authorization in al… | — | wordfence |
| WF-0608fb1c | learning-management-system < 2.3.1 |
MEDIUM | 5.3 | The Masteriyo LMS – LMS Course Builder, Quizzes & Certificates plugin for WordPress is vulnerable to unauthorized acce… | 2.3.1 | wordfence |
| WF-05fe7d6d | mage-eventpress < 5.0.5 |
MEDIUM | 5.3 | The Event Booking Manager for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing cap… | 5.0.5 | wordfence |
| WF-05fae1f8 | igms-direct-booking < 2.0 |
MEDIUM | 5.3 | The iGMS Direct Booking plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a… | 2.0 | wordfence |
| WF-05eeb878 | directorist < 8.6.1 |
MEDIUM | 5.3 | The Directorist plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a functio… | 8.6.1 | wordfence |
| WF-05e8ec0d | admin-site-enhancements < 7.6.10 |
MEDIUM | 5.3 | The Admin and Site Enhancements (ASE) plugin for WordPress is vulnerable to Password Protection Bypass in all versions u… | 7.6.10 | wordfence |
| WF-05e1d30e | kivicare-clinic-management-system < 4.5.5 |
MEDIUM | 5.3 | The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Sensitive Information Ex… | 4.5.5 | wordfence |
| WF-05dbfd37 | travel-booking < 1.4.0 |
MEDIUM | 5.3 | The Travel Booking theme for WordPress is vulnerable to unauthorized access due to a missing capability check on a funct… | 1.4.0 | wordfence |
| WF-05a36d46 | booking < 11.8 |
MEDIUM | 5.3 | The Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to 11.8. Th… | 11.8 | wordfence |
| WF-059ede2b | hybrid-composer < 1.4.7 |
MEDIUM | 5.3 | The Hybrid Composer plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a fun… | 1.4.7 | wordfence |
| WF-05909e9c | envolve-plugin < 1.1.0 |
MEDIUM | 5.3 | The Envolve Plugin plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 1… | 1.1.0 | wordfence |
| WF-0578c49e | happyforms < 1.25.11 |
MEDIUM | 5.3 | The Happyforms plugin for WordPress is vulnerable to unauthorized access due to a missing capability check in all versio… | 1.25.11 | wordfence |
| WF-0556738f | post-grid | MEDIUM | 5.3 | The Post Grid plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and includin… | — | wordfence |
| WF-05529ca0 | media-file-manager < 1.4.3 |
MEDIUM | 5.3 | The Media File Manager plugin up to and including version 1.4.2 for WordPress allows directory listing via a ../ directo… | 1.4.3 | wordfence |
| WF-054bb123 | ad-blocking-detector < 1.2.2 |
MEDIUM | 5.3 | The Ad Blocking Detector Plugin plugin for WordPress is vulnerable to information exposure in all versions up to, and in… | 1.2.2 | wordfence |
| WF-0505d023 | conveythis-translate < 235 |
MEDIUM | 5.3 | The Language Translate Widget for WordPress – ConveyThis plugin for WordPress is vulnerable to unauthorized modificati… | 235 | wordfence |
| WF-05056d99 | cnvrse < 026.02.10.20 |
MEDIUM | 5.3 | The Cnvrse plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and excluding, … | 026.02.10.20 | wordfence |
| WF-0500c57a | xcloner-backup-and-restore < 4.7.4 |
MEDIUM | 5.3 | The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin plugin for WordPress is vulnerable to Full Path … | 4.7.4 | wordfence |
| WF-04f0bffb | wp-less < 1.9.7 |
MEDIUM | 5.3 | The WP-LESS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1… | 1.9.7 | wordfence |
| WF-04ee71cb | mage-eventpress < 5.6.4 |
MEDIUM | 5.3 | The Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar plugin for WordPre… | 5.6.4 | wordfence |
| WF-04eb82e4 | strabl-a-checkout-solution < 4.6 |
MEDIUM | 5.3 | The STRABL – A checkout solution plugin for WordPress is vulnerable to Missing Authentication in all versions up to an… | 4.6 | wordfence |
| WF-04e0ddff | learnpress < 4.2.6.8.2 |
MEDIUM | 5.3 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized user registration due to a mi… | 4.2.6.8.2 | wordfence |
| WF-04c66c9e | trustedlogin-connector < 2.0.4 |
MEDIUM | 5.3 | The TrustedLogin Connector plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, a… | 2.0.4 | wordfence |
| WF-04beb4f4 | mapsvg-lite-interactive-vector-maps < 9.0.0 |
MEDIUM | 5.3 | The MapSVG – Vector maps, Google Maps, Image maps – with AI assistant plugin for WordPress is vulnerable to unauthor… | 9.0.0 | wordfence |
Vulnerability information shown by EzyAudit comes from the sources below. Each Wordfence Intelligence record links back to its record page.
Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy. Terms.
CVE data. Copyright 1999-2026 The MITRE Corporation. CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. Terms of Use.
EzyAudit AI automatically detects your installed plugins and checks them against this database — in seconds.
Scan My Website →