Live intelligence from CISA KEV, NVD, and WPScan — updated daily. Check if your plugins and themes have known CVEs.
40,549 vulnerabilities found (page 1617 of 1622)
| CVE ID | Plugin / Theme | Severity | CVSS | Description | Fixed In | Source |
|---|---|---|---|---|---|---|
| CVE-2021-25056 | < 3.6.10 |
LOW | N/A | Ninja Forms < 3.6.10 - Admin+ Stored Cross-Site Scripting | — | wpscan |
| CVE-2021-25037 | < 4.1.5.3 |
LOW | N/A | All In One SEO < 4.1.5.3 - Authenticated SQL Injection | — | wpscan |
| CVE-2021-25036 | < 4.1.5.3 |
LOW | N/A | All In One SEO < 4.1.5.3 - Authenticated Privilege Escalation | — | wpscan |
| CVE-2021-25022 | < 1.16.66 |
LOW | N/A | UpdraftPlus < 1.16.66 - Reflected Cross-Site Scripting | — | wpscan |
| CVE-2021-25017 | < 1.9.12 |
LOW | N/A | Tutor LMS < 1.9.12 - Reflected Cross-Site Scripting | — | wpscan |
| CVE-2021-24970 | < 2.5.0 |
LOW | N/A | All-In-One-Gallery < 2.5.0 - Admin+ Local File Inclusion | — | wpscan |
| CVE-2021-24969 | < 3.2.22 |
LOW | N/A | Download Manager < 3.2.22 - Subscriber+ Stored Cross-Site Scripting | — | wpscan |
| CVE-2021-24964 | < 4.4.4 |
LOW | N/A | LiteSpeed Cache < 4.4.4 - IP Check Bypass to Unauthenticated Stored XSS | — | wpscan |
| CVE-2021-24963 | < 4.4.4 |
LOW | N/A | LiteSpeed Cache < 4.4.4 - Admin+ Reflected Cross-Site Scripting | — | wpscan |
| CVE-2021-24891 | < 3.4.8 |
LOW | N/A | Elementor < 3.4.8 - DOM Cross-Site-Scripting | — | wpscan |
| CVE-2021-24889 | < 3.6.4 |
LOW | N/A | Ninja Forms < 3.6.4 - Admin+ SQL Injection | — | wpscan |
| CVE-2021-24873 | < 1.9.11 |
LOW | N/A | Tutor LMS < 1.9.11 - Reflected Cross-Site Scripting | — | wpscan |
| CVE-2021-24773 | < 3.2.16 |
LOW | N/A | WordPress Download Manager < 3.2.16 - Admin+ Stored Cross-Site Scripting | — | wpscan |
| CVE-2021-24749 | < 1.5.1 |
LOW | N/A | URL Shortify < 1.5.1 - Arbitrary Link/Group Deletion via CSRF | — | wpscan |
| CVE-2021-24740 | < 1.9.9 |
LOW | N/A | Tutor LMS < 1.9.9 - Multiple Admin+ Stored Cross-Site Scripting | — | wpscan |
| CVE-2021-24681 | < 4.4.3 |
LOW | N/A | Duplicate Page < 4.4.3 - Admin+ Stored Cross-Site Scripting | — | wpscan |
| CVE-2021-24455 | < 1.9.2 |
LOW | N/A | Tutor LMS < 1.9.2 - Authenticated Stored Cross-Site Scripting (XSS) | — | wpscan |
| CVE-2021-24423 | < 1.6.59 |
LOW | N/A | UpdraftPlus < 1.6.59 - Admin+ Stored Cross-Site Scripting | — | wpscan |
| CVE-2021-24381 | < 3.5.8.2 |
LOW | N/A | NinjaForms < 3.5.8.2 - Admin+ Stored Cross-Site Scripting | — | wpscan |
| CVE-2021-24374 | < 9.8 |
LOW | N/A | Jetpack < 9.8 - Carousel Module Non-Published Page/Post Attachment Comment Leak | — | wpscan |
| CVE-2021-24329 | < 1.7.3 |
LOW | N/A | WP Super Cache < 1.7.3 - Authenticated Stored Cross-Site Scripting (XSS) | — | wpscan |
| CVE-2021-24323 | < 5.2.0 |
LOW | N/A | Woocommerce < 5.2.0 - Authenticated Stored Cross-Site Scripting (XSS) | — | wpscan |
| CVE-2021-24312 | < 1.7.3 |
LOW | N/A | WP Super Cache < 1.7.3 - Authenticated Remote Code Execution | — | wpscan |
| CVE-2021-24307 | < 4.1.0.2 |
LOW | N/A | All in One SEO Pack < 4.1.0.2 - Admin RCE via unserialize | — | wpscan |
| CVE-2021-24259 | < 1.11.2 |
LOW | N/A | Elementor Addon Elements < 1.11.2 - Contributor+ Stored XSS | — | wpscan |
EzyAudit AI automatically detects your installed plugins and checks them against this database — in seconds.
Scan My Website →