WordPress Vulnerability Database

Search 67,880+ known security issues across 16,100 plugins and 2,157 themes. Find a plugin to see its vulnerabilities and affected versions.

WordPress Core vulnerabilities →

Recently disclosed

high Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret Wp Plugin Hostgator · Sep 8, 2026 · CVE-2026-80099 high Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret Wp Module Data · Sep 8, 2026 · CVE-2026-80099 high Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret Wp Plugin Crazy Domains · Sep 8, 2026 · CVE-2026-80099 high Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret Bluehost Wordpress Plugin · Sep 8, 2026 · CVE-2026-80099 high Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret Wp Plugin Web · Sep 8, 2026 · CVE-2026-80099 high YITH WooCommerce Waitlist Premium <= 3.35.0 - Authenticated (Subscriber+) Privilege Escalation to Admin via wp_ajax_yith_wcwtl_add_user Yith Woocommerce Waiting List Premium · Sep 8, 2026 · CVE-2026-14359 high Cookie Banner for GDPR / CCPA <= 4.4.1 - Unauthenticated Stored Cross-Site Scripting via 'wpl_user_preference' Parameter Gdpr Cookie Consent · Sep 8, 2026 · CVE-2026-14989 medium myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute Mycred · Sep 8, 2026 · CVE-2026-17149 medium Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) <= 4.1.22 - Authenticated (Subscriber+) Missing Authorization to Order Completion / Free Ticket Redemption Wp Event Solution · Sep 8, 2026 · CVE-2026-15398 medium WPMR Google Feed Manager for WooCommerce <= 2.23.7 - Authenticated (Administrator+) SQL Injection via 'feed' Parameter Wp Product Feed Manager · Sep 8, 2026 · CVE-2026-19778 high PublishPress Capabilities <= 2.50.0 - Authenticated (Editor+) Privilege Escalation to Fresh-Install Default Capability Grant Capability Manager Enhanced · Sep 8, 2026 · CVE-2026-75927 medium Checkout Custom Fields Builder for WooCommerce <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation via 'plugin' Parameter Checkout Custom Fields Builder For Woocommerce · Sep 8, 2026 · CVE-2026-19802

Browse plugins

16,100 tracked
Xpinner Lite 2 Xpresslane Integration For Woocommerce 1 Xpro Addons Beaver Builder Elementor 2 Xpro Elementor Addons 38 Xpro Elementor Addons Pro 3 Xpro Theme Builder 2 Xqueue Maileon 1 Xserver Migrator 1 Xserver Typesquare Webfonts 1 Xshare 1 Xt Facebook Events 1 Xt Woo Ajax Add To Cart 3 Xt Woo Points Rewards 2 Xt Woo Quick View Lite 2 Xt Woo Variation Swatches 3 Xtra Settings 1 Xtremelocator 1 Xv Random Quotes 4 Yaad Sarig Payment Gateway For Wc 4 Yabp 1 Yacp 1 Yada Wiki 4 Yahoo Boss 2 Yahoo Media Player 4 Yahoo Updates For Wordpress 1 Yamaps 10 Yame Linkinbio 1 Yampi Checkout 1 Yandex Money Button 3 Yandex Pinger 1 Yandexnews Feed By Teplitsa 1 Yanewsflash 2 Yatra 2 Yatri Tools 2 Yawave 1 Yawpp 2 Yaycurrency 7 Yayextra 3 Yayforms 1 Yaymail 7 Yaypricing 3 Yaysmtp 17 Ycontributors 2 Ycyclista 1 Ydn Download 1 Yds Support Ticket System 2 Years Since 2 Yeemail 2 Yellow Pencil Visual Theme Customizer 11 Yellow Yard 2 Yesno 1 Yet Another Related Posts Plugin 18 Yet Another Stars Rating 23 Yet Another Webclap For Wordpress 1 Yext 2 Yikes Inc Easy Custom Woocommerce Product Tabs 6 Yikes Inc Easy Mailchimp Extender 31 Yith Advanced Refund System For Woocommerce 1 Yith Color And Label Variations For Woocommerce 3 Yith Custom Login 4

Is your site running a vulnerable version?

A free scan detects the plugins and themes installed on your WordPress site and flags the ones with known security issues.

Scan your site free