WordPress Vulnerability Database

Search 67,880+ known security issues across 16,100 plugins and 2,157 themes. Find a plugin to see its vulnerabilities and affected versions.

WordPress Core vulnerabilities →

Recently disclosed

high Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret Wp Plugin Hostgator · Sep 8, 2026 · CVE-2026-80099 high Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret Wp Module Data · Sep 8, 2026 · CVE-2026-80099 high Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret Wp Plugin Crazy Domains · Sep 8, 2026 · CVE-2026-80099 high Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret Bluehost Wordpress Plugin · Sep 8, 2026 · CVE-2026-80099 high Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret Wp Plugin Web · Sep 8, 2026 · CVE-2026-80099 high YITH WooCommerce Waitlist Premium <= 3.35.0 - Authenticated (Subscriber+) Privilege Escalation to Admin via wp_ajax_yith_wcwtl_add_user Yith Woocommerce Waiting List Premium · Sep 8, 2026 · CVE-2026-14359 high Cookie Banner for GDPR / CCPA <= 4.4.1 - Unauthenticated Stored Cross-Site Scripting via 'wpl_user_preference' Parameter Gdpr Cookie Consent · Sep 8, 2026 · CVE-2026-14989 medium myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute Mycred · Sep 8, 2026 · CVE-2026-17149 medium Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) <= 4.1.22 - Authenticated (Subscriber+) Missing Authorization to Order Completion / Free Ticket Redemption Wp Event Solution · Sep 8, 2026 · CVE-2026-15398 medium WPMR Google Feed Manager for WooCommerce <= 2.23.7 - Authenticated (Administrator+) SQL Injection via 'feed' Parameter Wp Product Feed Manager · Sep 8, 2026 · CVE-2026-19778 high PublishPress Capabilities <= 2.50.0 - Authenticated (Editor+) Privilege Escalation to Fresh-Install Default Capability Grant Capability Manager Enhanced · Sep 8, 2026 · CVE-2026-75927 medium Checkout Custom Fields Builder for WooCommerce <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation via 'plugin' Parameter Checkout Custom Fields Builder For Woocommerce · Sep 8, 2026 · CVE-2026-19802

Browse plugins

16,100 tracked
Wsanalytics Google Analytics And Dashboards 1 Wsb Brands 1 Wschat Live Chat 2 Wsecure 5 Wsify Widget 1 Wsm Downloader 2 Wt Display Breeze 1 Wt Smart Coupons For Woocommerce 2 Wt Woocommerce Wishlist 1 Wte Elementor Widgets 2 Wti Like Post 7 Wtyczka Seopilot Dla Wp 1 Wu Rating 1 Wueen 2 Wufoo Shortcode 2 Wumii Related Posts 1 Wupo Group Attributes 1 Wux Blog Editor 2 Wwc Amz Aff 1 Wwm Social Share On Image Hover 1 Www Xml Sitemap Generator Org 1 Wxsync 1 Wysija Newsletters 29 X Addons Elementor 4 X Forms Express 1 Xagio Seo 12 Xavins List Subpages 1 Xavins Review Ratings 1 Xc Woo Google Cloud Print 1 Xcloner Backup And Restore 42 Xelion Webchat 4 Xen Carousel 2 Xerte Online 5 Xforwoocommerce 6 Xhanch My Advanced Settings 1 Xhanch My Twitter 1 Xili Dictionary 2 Xili Language 5 Xili Tidy Tags 7 Xisearch Bar 1 Xl Tab 2 Xllentech English Islamic Calendar 1 Xlsx Viewer 1 Xm Backup 1 Xmasb Quotes 1 Xml File Export Import For Stampscom And Woocommerce 1 Xml For Avito 1 Xml For Google Merchant Center 4 Xml Multilanguage Sitemap Generator 2 Xml Sitemap Feed 1 Xml Sitemap Generator For Google 1 Xml Sitemaps For Videos 1 Xmlrpc Attacks Blocker 1 Xo Event Calendar 2 Xo Liteslider 2 Xo Security 1 Xola Bookings For Tours Activities 1 Xorbin Digital Flash Clock 1 Xpd Reduce Image Filesize 1 Xpert Tab 1

Is your site running a vulnerable version?

A free scan detects the plugins and themes installed on your WordPress site and flags the ones with known security issues.

Scan your site free