Known Plugin Vulnerabilities
Track known vulnerabilities from configured sources. Default view shows all open and closed vulnerabilities, ordered by most recently updated first.
Open Vulnerabilities
36406Across tracked plugins
Affected Plugins
93With open vulnerabilities
Critical / High
0Require immediate attention
Recently Updated
0In the last 30 days
Vulnerability List
Export CSV| Plugin | Slug | Score | Vulnerability | CVE ID | Severity | Affected Versions | Patched | Updated |
|---|---|---|---|---|---|---|---|---|
| wp-database-optimizer | wp-database-optimizer | N/A | WP Database Optimizer <= 1.2.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting | LOW | *-1.2.1.3 | July 2, 2026 | ||
| wp-compress-mainwp | wp-compress-mainwp | N/A | WP Compress for MainWP <= 6.30.03 - Authenticated (Subscriber+) Server-Side Request Forgery | LOW | *-6.30.03 | 6.30.06 | July 2, 2026 | |
| wbounce | wbounce | N/A | wBounce <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | LOW | *-1.8.1 | July 2, 2026 | ||
| video-embedder | video-embedder | N/A | Video Embedder <= 1.7.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting | LOW | *-1.7.1 | 1.8 | July 2, 2026 | |
| usermaven | usermaven | N/A | Usermaven <= 1.2.1 - Cross-Site Request Forgery | LOW | *-1.2.1 | 1.2.2 | July 2, 2026 | |
| ultimate-security-checker | ultimate-security-checker | N/A | Ultimate Security Checker <= 4.2 - Cross-Site Request Forgery | LOW | *-4.2 | July 2, 2026 | ||
| ultimate-post | ultimate-post | N/A | PostX <= 4.1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting | LOW | *-4.1.25 | 4.1.26 | July 2, 2026 | |
| ultimate-blocks | ultimate-blocks | N/A | Ultimate Blocks <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting | LOW | *-3.2.7 | 3.2.8 | July 2, 2026 | |
| toggle-box | toggle-box | N/A | Toggle Box <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting | LOW | *-1.6 | July 2, 2026 | ||
| the-visitor-counter | the-visitor-counter | N/A | The Visitor Counter <= 1.4.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting | LOW | *-1.4.3 | July 2, 2026 | ||
| tgg-wp-optimizer | tgg-wp-optimizer | N/A | TGG WP Optimizer <= 1.21 - Authenticated (Administrator+) Stored Cross-Site Scripting | LOW | *-1.21 | 1.22 | July 2, 2026 | |
| text-selection-color | text-selection-color | N/A | Text Selection Color <= 1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting | LOW | *-1.6 | July 2, 2026 | ||
| terms-of-use-2 | terms-of-use-2 | N/A | Terms of Use <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting | LOW | *-2.0 | July 2, 2026 | ||
| sunshine-photo-cart | sunshine-photo-cart | N/A | Sunshine Photo Cart <= 3.4.10 - Unauthenticated PHP Object Injection | LOW | *-3.4.10 | 3.4.11 | July 2, 2026 | |
| slider-bws | slider-bws | N/A | Slider by BestWebSoft <= 1.1.0 - Authenticated (Administrator+) SQL Injection | LOW | *-1.1.0 | 1.1.1 | July 2, 2026 | |
| simple-trackback-disabler | simple-trackback-disabler | N/A | Simple Trackback Disabler <= 1.4 - Cross-Site Request Forgery | LOW | *-1.4 | July 2, 2026 | ||
| showtime-slideshow | showtime-slideshow | N/A | ShowTime Slideshow <= 1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting | LOW | *-1.6 | July 2, 2026 | ||
| rps-include-content | rps-include-content | N/A | RPS Include Content <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | LOW | *-1.2.1 | 1.2.2 | July 2, 2026 | |
| pop-up | pop-up | N/A | Pop-Up Chop Chop <= 2.1.7 - Authenticated (Contributor+) Local File Inclusion | LOW | *-2.1.7 | July 2, 2026 | ||
| pakkelabels-for-woocommerce | pakkelabels-for-woocommerce | N/A | Shipmondo – A complete shipping solution for WooCommerce <= 5.0.3 - Missing Authorization to Authenticated (Customer+) Information Disclosure | LOW | *-5.0.3 | 5.0.4 | July 2, 2026 | |
| paid-membership | paid-membership | N/A | MicroPayments <= 2.9.29 - Authenticated (Contributor+) Stored Cross-Site Scripting | LOW | *-2.9.29 | 2.9.30 | July 2, 2026 | |
| Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction | paid-member-subscriptions | N/A | Paid Member Subscriptions <= 2.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting | LOW | *-2.14.3 | 2.14.4 | July 2, 2026 | |
| page-takeover | page-takeover |
93
|
Page Takeover <= 1.1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting | LOW | *-1.1.6 | 1.1.7 | July 2, 2026 | |
| omnileads-scripts-and-tags-manager | omnileads-scripts-and-tags-manager |
91
|
OmniLeads Scripts and Tags Manager <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting | LOW | *-1.3 | July 2, 2026 | ||
| nertworks-all-in-one-social-share-tools | nertworks-all-in-one-social-share-tools |
91
|
NertWorks All in One Social Share Tools <= 1.26 - Cross-Site Request Forgery | LOW | *-1.26 | July 2, 2026 | ||
| mobile-dj-manager | mobile-dj-manager |
91
|
MDJM Event Management <= 1.7.5.2 - Authenticated (Subscriber+) PHP Object Injection | LOW | *-1.7.5.2 | 1.7.5.3 | July 2, 2026 | |
| microblog-poster | microblog-poster |
91
|
Microblog Poster <= 2.1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting | LOW | *-2.1.6 | July 2, 2026 | ||
| material-dashboard | material-dashboard |
93
|
Material Dashboard <= 1.4.5 - Unauthenticated Privilege Escalation | LOW | *-1.4.5 | 1.4.6 | July 2, 2026 | |
| lws-sms | lws-sms |
91
|
LWS SMS <= 2.4.1 - Cross-Site Request Forgery | LOW | *-2.4.1 | July 2, 2026 | ||
| login-alert | login-alert |
91
|
Login Alert <= 0.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting | LOW | *-0.2.1 | July 2, 2026 | ||
| leaky-paywall | leaky-paywall |
93
|
Leaky Paywall <= 4.21.7 - Authenticated (Contributor+) Stored Cross-Site Scripting | LOW | *-4.21.7 | 4.21.8 | July 2, 2026 | |
| kk-i-like-it | kk-i-like-it |
91
|
KK I Like It <= 1.7.5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting | LOW | *-1.7.5.3 | July 2, 2026 | ||
| kento-wp-stats | kento-wp-stats |
91
|
Kento WordPress Stats <= 1.1 - Reflected Cross-Site Scripting | LOW | *-1.1 | July 2, 2026 | ||
| hostel | hostel |
93
|
Hostel <= 1.1.5.5 - Reflected Cross-Site Scripting | LOW | *-1.1.5.5 | 1.1.5.6 | July 2, 2026 | |
| formlift | formlift |
93
|
FormLift for Infusionsoft Web Forms <= 7.5.19 - Authenticated (Contributor+) Stored Cross-Site Scripting | LOW | *-7.5.19 | 7.5.20 | July 2, 2026 | |
| flatty-flat-admin-theme | flatty-flat-admin-theme |
91
|
Flatty <= 2.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting | LOW | *-2.0.0 | July 2, 2026 | ||
| ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor | elementskit-lite |
95
|
ElementsKit Elementor addons <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting | LOW | *-3.4.7 | 3.4.8 | July 2, 2026 | |
| duplicate-post-and-page | duplicate-post-and-page |
89
|
Duplicate Page and Post <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting | LOW | *-1.0 | July 2, 2026 | ||
| duplicate-post-and-page | duplicate-post-and-page |
89
|
Duplicate Page and Post <= 1.0 - Authenticated (Contributor+) SQL Injection | LOW | *-1.0 | July 2, 2026 | ||
| dropdown-multisite-selector | dropdown-multisite-selector |
93
|
Dropdown Multisite selector < 0.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting | LOW | [*, 0.9.4) | 0.9.4 | July 2, 2026 | |
| different-shipping-and-billing-address-for-woocommerce | different-shipping-and-billing-address-for-woocommerce |
93
|
Multiple Shipping And Billing Address For Woocommerce <= 1.5 - Unauthenticated PHP Object Injection | LOW | *-1.5 | 1.6 | July 2, 2026 | |
| clear-sucuri-cache | clear-sucuri-cache |
91
|
Clear Sucuri Cache <= 1.4 - Missing Authorization | LOW | *-1.4 | July 2, 2026 | ||
| browser-caching-with-htaccess | browser-caching-with-htaccess |
91
|
Browser Caching with .htaccess 1.2.1 - Cross-Site Request Forgery | LOW | 1.2.1 | July 2, 2026 | ||
| bit-assist | bit-assist |
93
|
Bit Assist <= 1.5.4 - Unauthenticated Path Traversal | LOW | *-1.5.4 | 1.5.5 | July 2, 2026 | |
| better-section-navigation | better-section-navigation |
93
|
Better Section Navigation Widget <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | LOW | *-1.6.1 | 1.7.0 | July 2, 2026 | |
| td-composer | td-composer | N/A | tagDiv Composer <= 5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting | LOW | *-5.3 | 5.4 | July 2, 2026 | |
| Advanced Google reCAPTCHA | advanced-google-recaptcha |
89
|
Advanced Google reCAPTCHA <= 1.29 - Authenticated (Subscriber+) Limited SQL Injection via 'sSearch' Parameter | LOW | *-1.29 | 1.30 | July 2, 2026 | |
| td-composer | td-composer | N/A | tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'account_id' and 'account_username' | LOW | *-5.3 | 5.4 | July 2, 2026 | |
| kubio | kubio |
93
|
Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion | LOW | *-2.5.1 | 2.5.2 | July 2, 2026 | |
| zoho-subscriptions | zoho-subscriptions | N/A | Zoho Billing – Embed Payment Form <= 4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting | LOW | *-4.0 | 4.1 | July 2, 2026 | |
| z-companion | z-companion | N/A | Z Companion <= 1.0.13 - Missing Authorization | LOW | *-1.0.13 | 1.1.0 | July 2, 2026 | |
| xili-dictionary | xili-dictionary | N/A | xili-dictionary <= 2.12.5 - Reflected Cross-Site Scripting | LOW | *-2.12.5 | 2.12.5.1 | July 2, 2026 | |
| wpshopgermany-it-recht-kanzlei | wpshopgermany-it-recht-kanzlei | N/A | wpShopGermany IT-RECHT KANZLEI <= 2.0 - Cross-Site Request Forgery | LOW | *-2.0 | 2.1 | July 2, 2026 | |
| wpguppy-lite | wpguppy-lite | N/A | WPGuppy <= 1.1.3 - Authenticated (Subscriber+) SQL Injection | LOW | *-1.1.3 | 1.1.4 | July 2, 2026 | |
| WP Extended – The Ultimate WordPress Toolkit | wpextended | N/A | The Ultimate WordPress Toolkit – WP Extended <= 3.0.14 - Reflected Cross-Site Scripting | LOW | *-3.0.14 | 3.0.15 | July 2, 2026 | |
| wpc-smart-upsell-funnel | wpc-smart-upsell-funnel | N/A | WPC Smart Upsell Funnel for WooCommerce <= 3.0.4 - Authenticated (Subscriber+) Arbitrary Options Update | LOW | *-3.0.4 | 3.0.5 | July 2, 2026 | |
| wp2leads | wp2leads | N/A | WP2LEADS <= 3.4.5 - Reflected Cross-Site Scripting | LOW | *-3.4.5 | 3.4.7 | July 2, 2026 | |
| WP Travel Engine – Tour Booking Plugin – Tour Operator Software | wp-travel-engine | N/A | WP Travel Engine <= 6.3.5 - Authenticated (Contributor+) Local File Inclusion | LOW | *-6.3.5 | 6.3.6 | July 2, 2026 | |
| WP Travel Engine – Tour Booking Plugin – Tour Operator Software | wp-travel-engine | N/A | WP Travel Engine <= 6.3.5 - Unauthenticated Local File Inclusion | LOW | *-6.3.5 | 6.3.6 | July 2, 2026 | |
| wp-team-manager | wp-team-manager | N/A | Team Manager <= 2.1.23 - Authenticated (Contributor+) Local File Inclusion | LOW | *-2.1.23 | 2.2.0 | July 2, 2026 | |
| wp-subscription-forms | wp-subscription-forms | N/A | WP Subscription Forms <= 1.2.3 - Authenticated (Contributor+) SQL Injection | LOW | *-1.2.3 | 1.2.4 | July 2, 2026 | |
| wp-posts-carousel | wp-posts-carousel | N/A | WP Posts Carousel <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting | LOW | *-1.3.7 | 1.3.8 | July 2, 2026 | |
| wp-plugin-contact-form-7 | wp-plugin-contact-form-7 | N/A | VaultRE Contact Form 7 <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting | LOW | *-1.0 | July 2, 2026 | ||
| wp-marketing-automations | wp-marketing-automations | N/A | Automation By Autonami <= 3.5.1 - Open Redirect | LOW | *-3.5.1 | 3.5.2 | July 2, 2026 | |
| wp-leads-builder-any-crm | wp-leads-builder-any-crm | N/A | Lead Form Data Collection to CRM <= 3.0.1 - Authenticated (Contributor+) SQL Injection | LOW | *-3.0.1 | 3.1 | July 2, 2026 | |
| wp-job-manager-colors | wp-job-manager-colors | N/A | Job Colors for WP Job Manager <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting | LOW | *-1.0.4 | July 2, 2026 | ||
| wp-google-street-view | wp-google-street-view | N/A | WP Google Street View <= 1.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting | LOW | *-1.1.5 | 1.1.6 | July 2, 2026 | |
| WP Google Review Slider | wp-google-places-review-slider |
70
|
WP Google Review Slider <= 16.0 - Cross-Site Request Forgery to SQL Injection | LOW | *-16.0 | 16.1 | July 2, 2026 | |
| wp-cards | wp-cards | N/A | WP Cards <= 1.5.1 - Reflected Cross-Site Scripting | LOW | *-1.5.1 | July 2, 2026 | ||
| wp-cafe | wp-cafe | N/A | WPCafe <= 2.2.31 - Authenticated (Contributor+) Local File Inclusion | LOW | *-2.2.31 | 2.2.32 | July 2, 2026 | |
| wp-analytify | wp-analytify | N/A | Analytify <= 5.5.1 - Missing Authorization to Authenticated (Subscriber+) Minor Settings Update | LOW | *-5.5.1 | 6.0.0 | July 2, 2026 | |
| woo-fattureincloud | woo-fattureincloud | N/A | WooCommerce Fattureincloud <= 2.6.7 - Reflected Cross-Site Scripting | LOW | *-2.6.7 | 2.6.8 | July 2, 2026 | |
| wishsuite | wishsuite | N/A | WishSuite <= 1.4.4 - Authenticated (Contributor+) Local File Inclusion | LOW | *-1.4.4 | 1.4.5 | July 2, 2026 | |
| webtexttool | webtexttool | N/A | Textmetrics <= 3.6.1 - Missing Authorization | LOW | *-3.6.1 | 3.6.2 | July 2, 2026 | |
| wc-product-author | wc-product-author | N/A | Product Author for WooCommerce <= 1.0.7 - Cross-Site Request Forgery | LOW | *-1.0.7 | 1.0.8 | July 2, 2026 | |
| wa-chatbox-manager | wa-chatbox-manager | N/A | Chatbox Manager <= 1.2.2 - Missing Authorization | LOW | *-1.2.2 | 1.2.3 | July 2, 2026 | |
| verge3d | verge3d | N/A | Verge3D <= 4.8.2 - Cross-Site Request Forgery | LOW | *-4.8.2 | 4.8.3 | July 2, 2026 | |
| validar-certificados-de-cursos | validar-certificados-de-cursos | N/A | ValidateCertify <= 1.6.1 - Cross-Site Request Forgery | LOW | *-1.6.1 | 1.6.2 | July 2, 2026 | |
| User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder | user-registration | N/A | User Registration <= 4.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting | LOW | *-4.0.3 | 4.0.4 | July 2, 2026 | |
| ultimate-dashboard | ultimate-dashboard | N/A | Ultimate Dashboard <= 3.8.5 - Authenticated (Administrator+) Stored Cross-Site Scripting | LOW | *-3.8.5 | 3.8.6 | July 2, 2026 | |
| ultimate-dashboard | ultimate-dashboard | N/A | Ultimate Dashboard <= 3.8.5 - Authenticated (Administrator+) Stored Cross-Site Scripting | LOW | *-3.8.5 | 3.8.6 | July 2, 2026 | |
| ultimate-dashboard | ultimate-dashboard | N/A | Ultimate Dashboard <= 3.8.5 - Authenticated (Administrator+) Stored Cross-Site Scripting | LOW | *-3.8.5 | 3.8.6 | July 2, 2026 | |
| twb-woocommerce-reviews | twb-woocommerce-reviews | N/A | TWB Woocommerce Reviews <= 1.7.7 - Cross-Site Request Forgery | LOW | *-1.7.7 | 1.7.8 | July 2, 2026 | |
| TranslatePress – Translate Multilingual sites with AI Translation | translatepress-multilingual |
68
|
TranslatePress <= 2.9.6 - Authenticated (Administrator+) PHP Object Injection | LOW | *-2.9.6 | 2.9.7 | July 2, 2026 | |
| tour-booking-manager | tour-booking-manager | N/A | WpTravelly <= 1.8.7 - Authenticated (Contributor+) Local File Inclusion | LOW | *-1.8.7 | 1.8.8 | July 2, 2026 | |
| timetics | timetics | N/A | Timetics <= 1.0.29 - Missing Authorization | LOW | *-1.0.29 | 1.0.30 | July 2, 2026 | |
| tidekey | tidekey | N/A | Tidekey <= 1.1 - Reflected Cross-Site Scripting | LOW | *-1.1 | July 2, 2026 | ||
| tickera-event-ticketing-system | tickera-event-ticketing-system | N/A | Tickera <= 3.5.5.2 - Missing Authorization | LOW | *-3.5.5.2 | 3.5.5.3 | July 2, 2026 | |
| themify-event-post | themify-event-post | N/A | Themify Event Post <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting | LOW | *-1.3.2 | 1.3.3 | July 2, 2026 | |
| themify-event-post | themify-event-post | N/A | Themify Event Post <= 1.3.2 - Authenticated (Contributor+) Local File Inclusion | LOW | *-1.3.2 | 1.3.3 | July 2, 2026 | |
| the-post-grid | the-post-grid | N/A | The Post Grid <= 7.7.17 - Authenticated (Contributor+) Local File Inclusion | LOW | *-7.7.17 | 7.7.18 | July 2, 2026 | |
| the-pack-addon | the-pack-addon | N/A | The Pack Elementor addons <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | LOW | *-2.1.1 | 2.1.2 | July 2, 2026 | |
| the-pack-addon | the-pack-addon | N/A | The Pack Elementor addons <= 2.1.1 - Authenticated (Contributor+) Local File Inclusion | LOW | *-2.1.1 | 2.1.2 | July 2, 2026 | |
| terms-and-conditions-per-product | terms-and-conditions-per-product | N/A | Terms & Conditions Per Product <= 1.2.15 - Missing Authorization | LOW | *-1.2.15 | 1.2.16 | July 2, 2026 | |
| syntaxhighlighter | syntaxhighlighter | N/A | SyntaxHighlighter Evolved <= 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | LOW | *-3.7.1 | 3.7.2 | July 2, 2026 | |
| support-genix-lite | support-genix-lite | N/A | Support Genix <= 1.4.11 - Authenticated (Subscriber+) Insecure Direct Object Reference | LOW | *-1.4.11 | 1.4.12 | July 2, 2026 | |
| support-chat | support-chat | N/A | Click to Chat – WP Support All-in-One Floating Widget <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting | LOW | *-2.3.4 | 2.3.5 | July 2, 2026 | |
| subscribe-to-download-lite | subscribe-to-download-lite | N/A | Subscribe to Download Lite <= 1.2.9 - Authenticated (Contributor+) Local File Inclusion | LOW | *-1.2.9 | 1.3.0 | July 2, 2026 | |
| structured-content | structured-content | N/A | Structured Content <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting | LOW | *-1.6.3 | 1.6.4 | July 2, 2026 | |
| store-locator-widget | store-locator-widget | N/A | Store Locator Widget <= 2025r2 - Cross-Site Request Forgery to Stored Cross-Site Scripting | LOW | * - 2025r2 | 2025r3 | July 2, 2026 |
LOW
wp-database-optimizer
wp-database-optimizer
LOW
wp-compress-mainwp
wp-compress-mainwp
LOW
wbounce
wbounce
LOW
video-embedder
video-embedder
LOW
usermaven
usermaven
LOW
ultimate-security-checker
ultimate-security-checker
LOW
ultimate-post
ultimate-post
LOW
ultimate-blocks
ultimate-blocks
LOW
toggle-box
toggle-box
LOW
the-visitor-counter
the-visitor-counter
LOW
tgg-wp-optimizer
tgg-wp-optimizer
LOW
text-selection-color
text-selection-color
LOW
terms-of-use-2
terms-of-use-2
LOW
sunshine-photo-cart
sunshine-photo-cart
LOW
slider-bws
slider-bws
LOW
simple-trackback-disabler
simple-trackback-disabler
LOW
showtime-slideshow
showtime-slideshow
LOW
rps-include-content
rps-include-content
LOW
pop-up
pop-up
LOW
pakkelabels-for-woocommerce
pakkelabels-for-woocommerce
LOW
paid-membership
paid-membership
LOW
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction
paid-member-subscriptions
LOW
page-takeover
page-takeover
LOW
omnileads-scripts-and-tags-manager
omnileads-scripts-and-tags-manager
LOW
nertworks-all-in-one-social-share-tools
nertworks-all-in-one-social-share-tools
LOW
mobile-dj-manager
mobile-dj-manager
LOW
microblog-poster
microblog-poster
LOW
material-dashboard
material-dashboard
LOW
lws-sms
lws-sms
LOW
login-alert
login-alert
LOW
leaky-paywall
leaky-paywall
LOW
kk-i-like-it
kk-i-like-it
LOW
kento-wp-stats
kento-wp-stats
LOW
hostel
hostel
LOW
formlift
formlift
LOW
flatty-flat-admin-theme
flatty-flat-admin-theme
LOW
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor
elementskit-lite
LOW
duplicate-post-and-page
duplicate-post-and-page
LOW
duplicate-post-and-page
duplicate-post-and-page
LOW
dropdown-multisite-selector
dropdown-multisite-selector
LOW
different-shipping-and-billing-address-for-woocommerce
different-shipping-and-billing-address-for-woocommerce
LOW
clear-sucuri-cache
clear-sucuri-cache
LOW
browser-caching-with-htaccess
browser-caching-with-htaccess
LOW
bit-assist
bit-assist
LOW
better-section-navigation
better-section-navigation
LOW
td-composer
td-composer
LOW
Advanced Google reCAPTCHA
advanced-google-recaptcha
LOW
td-composer
td-composer
LOW
kubio
kubio
LOW
zoho-subscriptions
zoho-subscriptions
LOW
z-companion
z-companion
LOW
xili-dictionary
xili-dictionary
LOW
wpshopgermany-it-recht-kanzlei
wpshopgermany-it-recht-kanzlei
LOW
wpguppy-lite
wpguppy-lite
LOW
WP Extended – The Ultimate WordPress Toolkit
wpextended
LOW
wpc-smart-upsell-funnel
wpc-smart-upsell-funnel
LOW
wp2leads
wp2leads
LOW
WP Travel Engine – Tour Booking Plugin – Tour Operator Software
wp-travel-engine
LOW
WP Travel Engine – Tour Booking Plugin – Tour Operator Software
wp-travel-engine
LOW
wp-team-manager
wp-team-manager
LOW
wp-subscription-forms
wp-subscription-forms
LOW
wp-posts-carousel
wp-posts-carousel
LOW
wp-plugin-contact-form-7
wp-plugin-contact-form-7
LOW
wp-marketing-automations
wp-marketing-automations
LOW
wp-leads-builder-any-crm
wp-leads-builder-any-crm
LOW
wp-job-manager-colors
wp-job-manager-colors
LOW
wp-google-street-view
wp-google-street-view
LOW
WP Google Review Slider
wp-google-places-review-slider
LOW
wp-cards
wp-cards
LOW
wp-cafe
wp-cafe
LOW
wp-analytify
wp-analytify
LOW
woo-fattureincloud
woo-fattureincloud
LOW
wishsuite
wishsuite
LOW
webtexttool
webtexttool
LOW
wc-product-author
wc-product-author
LOW
wa-chatbox-manager
wa-chatbox-manager
LOW
verge3d
verge3d
LOW
validar-certificados-de-cursos
validar-certificados-de-cursos
LOW
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
user-registration
LOW
ultimate-dashboard
ultimate-dashboard
LOW
ultimate-dashboard
ultimate-dashboard
LOW
ultimate-dashboard
ultimate-dashboard
LOW
twb-woocommerce-reviews
twb-woocommerce-reviews
LOW
TranslatePress – Translate Multilingual sites with AI Translation
translatepress-multilingual
LOW
tour-booking-manager
tour-booking-manager
LOW
timetics
timetics
LOW
tidekey
tidekey
LOW
tickera-event-ticketing-system
tickera-event-ticketing-system
LOW
themify-event-post
themify-event-post
LOW
themify-event-post
themify-event-post
LOW
the-post-grid
the-post-grid
LOW
the-pack-addon
the-pack-addon
LOW
the-pack-addon
the-pack-addon
LOW
terms-and-conditions-per-product
terms-and-conditions-per-product
LOW
syntaxhighlighter
syntaxhighlighter
LOW
support-genix-lite
support-genix-lite
LOW
support-chat
support-chat
LOW
subscribe-to-download-lite
subscribe-to-download-lite
LOW
structured-content
structured-content
LOW
store-locator-widget
store-locator-widget
Showing 10801 to 10900 of 36406 results
Important: Review Required
Vulnerability data is aggregated from automated feeds and public sources. Results may include false positives or outdated information. Always verify details and apply updates in a staging environment before deploying to production.
Data updated daily from trusted sources. Last updated: July 2, 2026 at 22:46 UTC.