WordPress Vulnerability Database

Search 67,843+ known security issues across 16,091 plugins and 2,157 themes. Find a plugin to see its vulnerabilities and affected versions.

WordPress Core vulnerabilities →

Recently disclosed

high WP Fusion (Pro) <= 3.47.13 - Authenticated (Subscriber+) Privilege Escalation via ThriveCart Auto Login 'role' Parameter Wp Fusion · Sep 7, 2026 · CVE-2026-14444 medium Email Subscribers & Newsletters <= 5.9.27 - Unauthenticated Arbitrary Shortcode Execution via Subscriber Name Field Email Subscribers · Sep 7, 2026 · CVE-2026-12757 medium LearnPress <= 4.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layout_custom_css' Learnpress · Sep 7, 2026 · CVE-2026-12230 high Event Tickets and Registration <= 5.27.4 - Missing Authorization to Unauthenticated Stripe Credentials Update Event Tickets · Sep 7, 2026 · CVE-2026-3174 medium WPML Multilingual CMS <= 4.9.5 - Incorrect Authorization to Authenticated (Subscriber+) SQL Injection via ‘elementIds’ Sitepress Multilingual Cms · Sep 7, 2026 · CVE-2026-17509 high EDD Product Catalog Feed by PixelYourSite <= 1.0.2 - Authenticated (Subscriber+) Arbitrary Options Deletion via Missing Authorization on 'delete' Parameter Edd Products Feed Pro · Sep 7, 2026 · CVE-2026-9331 medium Zephyr Project Manager <= 3.3.205 - Authenticated (Custom+) Stored Cross-Site Scripting via 'message' Parameter Zephyr Project Manager · Sep 7, 2026 · CVE-2026-76931 high Live Composer <= 2.1.18 - Authenticated (Contributor+) PHP Object Injection via Shortcode Live Composer Page Builder · Sep 7, 2026 · CVE-2026-16502 medium Beaver Builder Page Builder <= 2.10.3.1 - Unauthenticated Arbitrary Shortcode Execution Beaver Builder Lite Version · Sep 7, 2026 · CVE-2026-18021 medium Online Scheduling and Appointment Booking System – Bookly <= 27.2 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Plugin Update Bookly Responsive Appointment Booking Tool · Sep 7, 2026 · CVE-2026-2520 medium Otter Blocks <= 3.1.7 - Missing Authorization to Unauthenticated Purchase Verification Bypass Otter Blocks · Sep 6, 2026 · CVE-2026-4945 high User Profile Builder <= 3.15.7 - Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Field Profile Builder · Sep 6, 2026 · CVE-2026-6431

Browse plugins

16,091 tracked
Woocommerce Display Products By Tags 1 Woocommerce Dropshipping 3 Woocommerce Dynamic Gallery 4 Woocommerce Ean Payment Gateway 2 Woocommerce Email Inquiry Cart Options 1 Woocommerce Email Test 1 Woocommerce Es 1 Woocommerce Eu Vat Assistant 2 Woocommerce Exporter 23 Woocommerce Extra Charges To Payment Gateways 3 Woocommerce Follow Up Emails 4 Woocommerce For Japan 13 Woocommerce For Paygent Payment Main 1 Woocommerce Fortnox Integration 2 Woocommerce Frontend Shop Manager 4 Woocommerce Gateway Amazon Payments Advanced 1 Woocommerce Gateway Certification De Facture Et Gestion De Pdf Kiwiz 1 Woocommerce Gateway Eway 1 Woocommerce Gateway Gocardless 1 Woocommerce Gateway Nab Dp 2 Woocommerce Gateway Placetopay Belice 1 Woocommerce Gateway Placetopay Colombia 1 Woocommerce Gateway Placetopay Ecuador 1 Woocommerce Gateway Placetopay Honduras 1 Woocommerce Gateway Placetopay Uruguay 1 Woocommerce Gateway Stripe 5 Woocommerce Germanized 2 Woocommerce Google Adwords Conversion Tracking Tag 16 Woocommerce Help Scout 1 Woocommerce Hss Extension For Streaming Video 2 Woocommerce Html5 Video 1 Woocommerce Inventory Management 1 Woocommerce Jetpack 84 Woocommerce Lightbox 2 Woocommerce Lottery 1 Woocommerce Loyal Customer 1 Woocommerce Maintenance Mode 1 Woocommerce Menu Bar Cart 1 Woocommerce Menu Extension 2 Woocommerce Mercadopago 9 Woocommerce Mis Report 1 Woocommerce Multi Currency 3 Woocommerce Multi Locations Inventory Management 3 Woocommerce Multilingual 19 Woocommerce Multiple Addresses 1 Woocommerce Multiple Customer Addresses 1 Woocommerce Multiple Free Gift 1 Woocommerce Myparcel 2 Woocommerce Ninjaforms Product Addons 1 Woocommerce Notify Updated Product 1 Woocommerce Novalnet Gateway 1 Woocommerce One Page Checkout 1 Woocommerce Openpos 6 Woocommerce Order Address Print 2 Woocommerce Order Barcodes 1 Woocommerce Order Details 2 Woocommerce Order Proposal 1 Woocommerce Order Searching 2 Woocommerce Order Status Change Notifier 1 Woocommerce Orders Customers Exporter 1

Is your site running a vulnerable version?

A free scan detects the plugins and themes installed on your WordPress site and flags the ones with known security issues.

Scan your site free