WordPress Vulnerability Database

Search 67,843+ known security issues across 16,091 plugins and 2,157 themes. Find a plugin to see its vulnerabilities and affected versions.

WordPress Core vulnerabilities →

Recently disclosed

high WP Fusion (Pro) <= 3.47.13 - Authenticated (Subscriber+) Privilege Escalation via ThriveCart Auto Login 'role' Parameter Wp Fusion · Sep 7, 2026 · CVE-2026-14444 medium Email Subscribers & Newsletters <= 5.9.27 - Unauthenticated Arbitrary Shortcode Execution via Subscriber Name Field Email Subscribers · Sep 7, 2026 · CVE-2026-12757 medium LearnPress <= 4.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layout_custom_css' Learnpress · Sep 7, 2026 · CVE-2026-12230 high Event Tickets and Registration <= 5.27.4 - Missing Authorization to Unauthenticated Stripe Credentials Update Event Tickets · Sep 7, 2026 · CVE-2026-3174 medium WPML Multilingual CMS <= 4.9.5 - Incorrect Authorization to Authenticated (Subscriber+) SQL Injection via ‘elementIds’ Sitepress Multilingual Cms · Sep 7, 2026 · CVE-2026-17509 high EDD Product Catalog Feed by PixelYourSite <= 1.0.2 - Authenticated (Subscriber+) Arbitrary Options Deletion via Missing Authorization on 'delete' Parameter Edd Products Feed Pro · Sep 7, 2026 · CVE-2026-9331 medium Zephyr Project Manager <= 3.3.205 - Authenticated (Custom+) Stored Cross-Site Scripting via 'message' Parameter Zephyr Project Manager · Sep 7, 2026 · CVE-2026-76931 high Live Composer <= 2.1.18 - Authenticated (Contributor+) PHP Object Injection via Shortcode Live Composer Page Builder · Sep 7, 2026 · CVE-2026-16502 medium Beaver Builder Page Builder <= 2.10.3.1 - Unauthenticated Arbitrary Shortcode Execution Beaver Builder Lite Version · Sep 7, 2026 · CVE-2026-18021 medium Online Scheduling and Appointment Booking System – Bookly <= 27.2 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Plugin Update Bookly Responsive Appointment Booking Tool · Sep 7, 2026 · CVE-2026-2520 medium Otter Blocks <= 3.1.7 - Missing Authorization to Unauthenticated Purchase Verification Bypass Otter Blocks · Sep 6, 2026 · CVE-2026-4945 high User Profile Builder <= 3.15.7 - Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Field Profile Builder · Sep 6, 2026 · CVE-2026-6431

Browse plugins

16,091 tracked
Woocommerce Orders Ei 2 Woocommerce Parcelas 1 Woocommerce Pay Per Post 2 Woocommerce Paymaster Gateway 019 2 Woocommerce Payment Gateway For Saferpay 2 Woocommerce Payments 17 Woocommerce Paypal Payments 4 Woocommerce Payplug 1 Woocommerce Payu Paisa 1 Woocommerce Pdf Invoices Packing Slips 29 Woocommerce Pdf Vouchers 12 Woocommerce Photo Reviews 3 Woocommerce Pos 7 Woocommerce Pre Orders 11 Woocommerce Predictive Search 10 Woocommerce Product Addon 27 Woocommerce Product Addons 2 Woocommerce Product Category Selection Widget 1 Woocommerce Product Filters 1 Woocommerce Product Importer 1 Woocommerce Product Payments 8 Woocommerce Product Recommendations 1 Woocommerce Product Sort And Display 4 Woocommerce Product Stock Alert 7 Woocommerce Product Vendors 34 Woocommerce Products By Custom Tax 1 Woocommerce Products Designer 1 Woocommerce Products Filter 49 Woocommerce Products Quick View 5 Woocommerce Products Slider 8 Woocommerce Products Without Featured Images 1 Woocommerce Putler Connector 4 Woocommerce Quick Product Editor 1 Woocommerce Refund And Exchange 1 Woocommerce Role Pricing 1 Woocommerce Sendinblue Newsletter Subscription 3 Woocommerce Services 1 Woocommerce Shipping Canada Post 2 Woocommerce Shipping Gateway Per Product 2 Woocommerce Shipping Multiple Addresses 12 Woocommerce Shipping Per Product 1 Woocommerce Simple Registration 2 Woocommerce Smart Coupons 1 Woocommerce Social Media Share Buttons 1 Woocommerce Square 4 Woocommerce Stock Manager 11 Woocommerce Store Toolkit 15 Woocommerce Subscriptions 14 Woocommerce Superfaktura 1 Woocommerce Support Ticket System 9 Woocommerce Tax Exempt Plugin 1 Woocommerce Tm Extra Checkout Options Addon 1 Woocommerce Tm Extra Product Options 1 Woocommerce To Google Merchant Center 1 Woocommerce Ultimate Gift Card 3 Woocommerce Ultimate Points And Rewards 1 Woocommerce Upcoming Product 2 Woocommerce Upload Files 2 Woocommerce User Switching 1 Woocommerce Warranties And Returns 4

Is your site running a vulnerable version?

A free scan detects the plugins and themes installed on your WordPress site and flags the ones with known security issues.

Scan your site free