WordPress Vulnerability Database

Search 67,880+ known security issues across 16,100 plugins and 2,157 themes. Find a plugin to see its vulnerabilities and affected versions.

WordPress Core vulnerabilities →

Recently disclosed

high Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret Wp Plugin Hostgator · Sep 8, 2026 · CVE-2026-80099 high Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret Wp Module Data · Sep 8, 2026 · CVE-2026-80099 high Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret Wp Plugin Crazy Domains · Sep 8, 2026 · CVE-2026-80099 high Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret Bluehost Wordpress Plugin · Sep 8, 2026 · CVE-2026-80099 high Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret Wp Plugin Web · Sep 8, 2026 · CVE-2026-80099 high YITH WooCommerce Waitlist Premium <= 3.35.0 - Authenticated (Subscriber+) Privilege Escalation to Admin via wp_ajax_yith_wcwtl_add_user Yith Woocommerce Waiting List Premium · Sep 8, 2026 · CVE-2026-14359 high Cookie Banner for GDPR / CCPA <= 4.4.1 - Unauthenticated Stored Cross-Site Scripting via 'wpl_user_preference' Parameter Gdpr Cookie Consent · Sep 8, 2026 · CVE-2026-14989 medium myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute Mycred · Sep 8, 2026 · CVE-2026-17149 medium Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) <= 4.1.22 - Authenticated (Subscriber+) Missing Authorization to Order Completion / Free Ticket Redemption Wp Event Solution · Sep 8, 2026 · CVE-2026-15398 medium WPMR Google Feed Manager for WooCommerce <= 2.23.7 - Authenticated (Administrator+) SQL Injection via 'feed' Parameter Wp Product Feed Manager · Sep 8, 2026 · CVE-2026-19778 high PublishPress Capabilities <= 2.50.0 - Authenticated (Editor+) Privilege Escalation to Fresh-Install Default Capability Grant Capability Manager Enhanced · Sep 8, 2026 · CVE-2026-75927 medium Checkout Custom Fields Builder for WooCommerce <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation via 'plugin' Parameter Checkout Custom Fields Builder For Woocommerce · Sep 8, 2026 · CVE-2026-19802

Browse plugins

16,100 tracked
Yith Custom Thank You Page For Woocommerce 3 Yith Desktop Notifications For Woocommerce 1 Yith Donations For Woocommerce 2 Yith Easy Login Register Popup For Woocommerce 1 Yith Essential Kit For Woocommerce 1 3 Yith Infinite Scrolling 2 Yith Maintenance Mode 3 Yith Paypal Express Checkout For Woocommerce 4 Yith Paypal Payments For Woocommerce 2 Yith Pre Order For Woocommerce 3 Yith Product Size Charts For Woocommerce 1 Yith Slider For Page Builders 1 Yith Woocommerce Account Funds Premium 1 Yith Woocommerce Added To Cart Popup 3 Yith Woocommerce Advanced Reviews 3 Yith Woocommerce Affiliates 3 Yith Woocommerce Ajax Navigation 4 Yith Woocommerce Ajax Search 13 Yith Woocommerce Authorizenet Payment Gateway 3 Yith Woocommerce Badges Management 3 Yith Woocommerce Best Sellers 1 Yith Woocommerce Brands Add On 3 Yith Woocommerce Bulk Product Editing 3 Yith Woocommerce Cart Messages 3 Yith Woocommerce Catalog Mode 2 Yith Woocommerce Category Accordion 2 Yith Woocommerce Compare 10 Yith Woocommerce Featured Video 2 Yith Woocommerce Frequently Bought Together 3 Yith Woocommerce Gift Cards 4 Yith Woocommerce Gift Cards Premium 5 Yith Woocommerce Mailchimp 3 Yith Woocommerce Membership Premium 1 Yith Woocommerce Multi Step Checkout 3 Yith Woocommerce Name Your Price 2 Yith Woocommerce Order Tracking 3 Yith Woocommerce Pdf Invoice 3 Yith Woocommerce Points And Rewards 3 Yith Woocommerce Popup 3 Yith Woocommerce Product Add Ons 22 Yith Woocommerce Product Bundles 3 Yith Woocommerce Product Slider Carousel 2 Yith Woocommerce Product Vendors 4 Yith Woocommerce Questions And Answers 3 Yith Woocommerce Quick View 4 Yith Woocommerce Recover Abandoned Cart 1 Yith Woocommerce Request A Quote 12 Yith Woocommerce Social Login 3 Yith Woocommerce Stripe 3 Yith Woocommerce Subscription 3 Yith Woocommerce Tab Manager 7 Yith Woocommerce Waiting List 9 Yith Woocommerce Waiting List Premium 1 Yith Woocommerce Wishlist 21 Yith Woocommerce Zoom Magnifier 4 Ymc Smart Filter 9 Ymc States Map 1 Yml For Yandex Market 5 Ymm Search 1 Yoco Payment Gateway 2

Is your site running a vulnerable version?

A free scan detects the plugins and themes installed on your WordPress site and flags the ones with known security issues.

Scan your site free