Live intelligence from Wordfence Intelligence, WPScan, NVD, and CISA KEV — updated daily. Check if your plugins and themes have known CVEs.
46,624 vulnerabilities found (page 262 of 1865)
| CVE ID | Plugin / Theme | Severity | CVSS | Description | Fixed In | Source |
|---|---|---|---|---|---|---|
| WF-dc82bfca | chakra < 1.19.0 |
HIGH | 8.1 | Multiple themes for WordPress by axiomthemes, ThemeRex, and AncoraThemes are vulnerable to Local File Inclusion in vario… | 1.19.0 | wordfence |
| WF-dc82bfca | corredo | HIGH | 8.1 | Multiple themes for WordPress by axiomthemes, ThemeRex, and AncoraThemes are vulnerable to Local File Inclusion in vario… | — | wordfence |
| WF-dc82bfca | beyoga < 2.8.0 |
HIGH | 8.1 | Multiple themes for WordPress by axiomthemes, ThemeRex, and AncoraThemes are vulnerable to Local File Inclusion in vario… | 2.8.0 | wordfence |
| WF-dc82bfca | hogwords | HIGH | 8.1 | Multiple themes for WordPress by axiomthemes, ThemeRex, and AncoraThemes are vulnerable to Local File Inclusion in vario… | — | wordfence |
| WF-dc82bfca | clothing69 < 1.2.11.1 |
HIGH | 8.1 | Multiple themes for WordPress by axiomthemes, ThemeRex, and AncoraThemes are vulnerable to Local File Inclusion in vario… | 1.2.11.1 | wordfence |
| WF-dc82bfca | alanzo < 1.2.4 |
HIGH | 8.1 | Multiple themes for WordPress by axiomthemes, ThemeRex, and AncoraThemes are vulnerable to Local File Inclusion in vario… | 1.2.4 | wordfence |
| WF-dc684b36 | houzez < 4.0.8 |
HIGH | 8.1 | The Houzez theme for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 4.0.4. This makes… | 4.0.8 | wordfence |
| WF-dc4e9e51 | the-events-calendar < 6.17.3 |
HIGH | 8.1 | The The Events Calendar plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including,… | 6.17.3 | wordfence |
| WF-dc3e3d47 | hr-management < 1.1.2 |
HIGH | 8.1 | The Employee, Leave and Recruitment Management System – Crew HRM plugin for WordPress is vulnerable to PHP Object Inje… | 1.1.2 | wordfence |
| WF-dc0fe855 | wp-ultimate-review < 2.4.3 |
HIGH | 8.1 | The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, an… | 2.4.3 | wordfence |
| WF-dbea3356 | advanced-form-integration < 2.10.3 |
HIGH | 8.1 | The Advanced Form Integration — Connect Forms to 300+ Apps plugin for WordPress is vulnerable to PHP Object Injection … | 2.10.3 | wordfence |
| WF-db96104a | atlas | HIGH | 8.1 | The Atlas theme for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.1.0. This makes … | — | wordfence |
| WF-db805bbb | sevenhills | HIGH | 8.1 | The SevenHills theme for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.6.2 via des… | — | wordfence |
| WF-db6da907 | ochahouse | HIGH | 8.1 | The OchaHouse theme for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.2.8. This ma… | — | wordfence |
| WF-db24042e | solene < 3.4.1 |
HIGH | 8.1 | The Solene theme for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 3.4. This makes i… | 3.4.1 | wordfence |
| WF-daded527 | leroux < 1.4 |
HIGH | 8.1 | The Leroux - Business Consulting WordPress Theme theme for WordPress is vulnerable to PHP Object Injection in versions u… | 1.4 | wordfence |
| WF-dac2a6f0 | prisma | HIGH | 8.1 | The Prisma theme for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.10. This makes … | — | wordfence |
| WF-da575fd4 | kayon | HIGH | 8.1 | The Kayon theme for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.3. This makes it… | — | wordfence |
| WF-d9c51f6b | kirki < 6.0.13 |
HIGH | 8.1 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to PHP Object Injec… | 6.0.13 | wordfence |
| WF-d99bc021 | user-registration < 5.1.3 |
HIGH | 8.1 | The User Registration & Membership plugin for WordPress is vulnerable to authentication bypass in versions up to, and in… | 5.1.3 | wordfence |
| WF-d9305e0d | alchemists | HIGH | 8.1 | The Alchemists theme for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 4.6.0. This m… | — | wordfence |
| WF-d926e4e1 | lione | HIGH | 8.1 | The Lione theme for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.16. This makes i… | — | wordfence |
| WF-d8ee82cf | propertyhive < 2.0.6 |
HIGH | 8.1 | The PropertyHive plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.0.5 … | 2.0.6 | wordfence |
| WF-d8895dc9 | wp-ticket < 6.0.3 |
HIGH | 8.1 | The WP Ticket Customer Service Software & Support Ticket System plugin for WordPress is vulnerable to PHP Object Injecti… | 6.0.3 | wordfence |
| WF-d83cd6a0 | blaze-demo-importer < 1.0.14 |
HIGH | 8.1 | The Blaze Demo Importer plugin for WordPress is vulnerable to unauthorized database resets and file deletion due to a mi… | 1.0.14 | wordfence |
Vulnerability information shown by EzyAudit comes from the sources below. Each Wordfence Intelligence record links back to its record page.
Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy. Terms.
CVE data. Copyright 1999-2026 The MITRE Corporation. CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. Terms of Use.
EzyAudit AI automatically detects your installed plugins and checks them against this database — in seconds.
Scan My Website →