Known Plugin Vulnerabilities
Track known vulnerabilities from configured sources. Default view shows all open and closed vulnerabilities, ordered by most recently updated first.
Open Vulnerabilities
36189Across tracked plugins
Affected Plugins
96With open vulnerabilities
Critical / High
0Require immediate attention
Recently Updated
0In the last 30 days
Vulnerability List
Export CSV| Plugin | Slug | Score | Vulnerability | CVE ID | Severity | Affected Versions | Patched | Updated |
|---|---|---|---|---|---|---|---|---|
| html5-audio-player | html5-audio-player |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-2.2.27 | 2.5.1 | June 29, 2026 | |
| gs-testimonial | gs-testimonial |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-3.2.8 | 3.2.9 | June 29, 2026 | |
| gs-team-members | gs-team-members |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-2.5.8 | 2.6.1 | June 29, 2026 | |
| AI Puffer – Chat. Create. Automate. (formerly AI Power) | gpt3-ai-content-generator |
92
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-1.8.99 | 2.3.17 | June 29, 2026 | |
| goal-tracker-ga | goal-tracker-ga |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-1.1.5 | 1.1.6 | June 29, 2026 | |
| go-fetch-jobs-wp-job-manager | go-fetch-jobs-wp-job-manager |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-1.8.4.8.1 | 1.8.4.9.1 | June 29, 2026 | |
| glossary-by-codeat | glossary-by-codeat |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-2.2.38 | 2.2.39 | June 29, 2026 | |
| geo-mashup | geo-mashup |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-1.13.15 | 1.13.16 | June 29, 2026 | |
| ga-for-wp | ga-for-wp |
89
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-2.6.0 | 2.10.0 | June 29, 2026 | |
| fullworks-anti-spam | fullworks-anti-spam |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-2.3.7 | 2.3.12 | June 29, 2026 | |
| fullscreen-background | fullscreen-background |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-2.0.2 | 2.0.3 | June 29, 2026 | |
| Gallery by FooGallery | foogallery |
82
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-2.4.27 | 2.4.29 | June 29, 2026 | |
| foobox-image-lightbox | foobox-image-lightbox |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-2.7.33 | 2.7.34 | June 29, 2026 | |
| foobar-notifications-lite | foobar-notifications-lite |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-2.1.34 | 2.1.35 | June 29, 2026 | |
| five-star-ratings-shortcode | five-star-ratings-shortcode |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-1.2.56 | 1.2.57 | June 29, 2026 | |
| featured-images-for-rss-feeds | featured-images-for-rss-feeds |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-1.6.3 | 1.6.4 | June 29, 2026 | |
| events-addon-for-elementor | events-addon-for-elementor |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-2.2.2 | 2.2.5 | June 29, 2026 | |
| embedder-for-google-reviews | embedder-for-google-reviews |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-1.6.6 | 1.7.5 | June 29, 2026 | |
| elespare | elespare |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-3.3.2 | 3.3.4 | June 29, 2026 | |
| eazydocs | eazydocs |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-2.5.7 | 2.5.9 | June 29, 2026 | |
| easy-marijuana-age-verify | easy-marijuana-age-verify |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-1.5.5 | 1.6 | June 29, 2026 | |
| Easy Social Feed – Social Photos Gallery and Post Feed for WordPress | easy-facebook-likebox |
72
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-6.6.5 | 6.6.6 | June 29, 2026 | |
| easy-age-verify | easy-age-verify |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-1.8.5 | 1.9 | June 29, 2026 | |
| dynamic-copyright-year | dynamic-copyright-year |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-1.0.4 | 1.1 | June 29, 2026 | |
| dracula-dark-mode | dracula-dark-mode |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-1.2.7 | 1.2.8 | June 29, 2026 | |
| display-a-meta-field-as-block | display-a-meta-field-as-block |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-1.3.3 | 1.3.4 | June 29, 2026 | |
| delete-old-posts-programmatically | delete-old-posts-programmatically |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-3.9.6 | 3.9.7 | June 29, 2026 | |
| custom-php-settings | custom-php-settings |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-2.3.1 | 2.3.2 | June 29, 2026 | |
| custom-page-templates-by-vegacorp | custom-page-templates-by-vegacorp |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-1.1.16 | 1.1.17 | June 29, 2026 | |
| Contact Form 7 Multi-Step Forms | contact-form-7-multi-step-module |
97
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-4.4.1 | 4.4.2 | June 29, 2026 | |
| code-manager | code-manager |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-1.0.40 | 1.0.41 | June 29, 2026 | |
| cf7-styler | cf7-styler |
91
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-1.7.0 | 1.7.1 | June 29, 2026 | |
| Message Filter for Contact Form 7 | cf7-message-filter |
89
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-1.6.3.2 | 1.6.3.3 | June 29, 2026 | |
| bulletin-announcements | bulletin-announcements |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-3.12.1 | 3.13.1 | June 29, 2026 | |
| bulk-image-alt-text-with-yoast | bulk-image-alt-text-with-yoast |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-2.1.0 | 2.2.0 | June 29, 2026 | |
| Better Messages – Live Chat, Chat Rooms, Real-Time Messaging & Private Messages | bp-better-messages |
75
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-2.6.7 | 2.7.0 | June 29, 2026 | |
| blog-designer-pack | blog-designer-pack |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-3.4.9 | 3.4.11 | June 29, 2026 | |
| blockspare | blockspare |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-3.2.6 | 3.2.8 | June 29, 2026 | |
| bbp-core | bbp-core |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-1.2.7 | 1.2.9 | June 29, 2026 | |
| basepress | basepress |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-2.16.3.3 | 2.16.3.6 | June 29, 2026 | |
| bBlocks – Essential Gutenberg Blocks & Patterns Collection | b-blocks |
90
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-1.9.8 | 2.0.19 | June 29, 2026 | |
| automatic-youtube-gallery | automatic-youtube-gallery |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-2.5.5 | 2.5.6 | June 29, 2026 | |
| automatic-internal-links-for-seo | automatic-internal-links-for-seo |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-2.0.0 | 2.0.1 | June 29, 2026 | |
| auto-install-free-ssl | auto-install-free-ssl |
93
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-4.5.0 | 4.5.1 | June 29, 2026 | |
| alt-manager | alt-manager |
97
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-1.6.3 | 1.6.6 | June 29, 2026 | |
| aibuddy-openai-chatgpt | aibuddy-openai-chatgpt |
95
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-1.7.2 | 1.8.5 | June 29, 2026 | |
| advanced-scrollbar | advanced-scrollbar |
97
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-1.1.3 | 1.1.10 | June 29, 2026 | |
| advanced-classifieds-and-directory-pro | advanced-classifieds-and-directory-pro |
97
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-3.2.4 | 3.2.5 | June 29, 2026 | |
| advance-wc-analytics | advance-wc-analytics |
97
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-3.12.0 | 3.16.0 | June 29, 2026 | |
| add-search-to-menu | add-search-to-menu |
97
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-5.5.8 | 5.5.9 | June 29, 2026 | |
| add-fields-to-checkout-page-woocommerce | add-fields-to-checkout-page-woocommerce |
95
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-1.3.4 | June 29, 2026 | ||
| add-expires-headers | add-expires-headers |
97
|
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | LOW | *-2.9.2 | 2.10.0 | June 29, 2026 | |
| wp-editor | wp-editor | N/A | WP Editor <= 1.2.9.2 - Cross-Site Request Forgery to Remote Code Execution via Plugin and Theme File Editor | LOW | *-1.2.9.2 | 1.2.9.3 | June 29, 2026 | |
| ultimate-dashboard | ultimate-dashboard | N/A | Ultimate Dashboard <= 3.8.14 - Cross-Site Request Forgery to Module Activation/Deactivation | LOW | *-3.8.14 | 3.8.15 | June 29, 2026 | |
| jet-engine | jet-engine |
93
|
JetEngine <= 3.8.8.1 - Unauthenticated SQL Injection | LOW | *-3.8.8.1 | 3.8.8.2 | June 29, 2026 | |
| Elementor Website Builder – more than just a page builder | elementor |
79
|
Elementor Website Builder <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API | LOW | *-4.0.4 | 4.0.5 | June 29, 2026 | |
| boldgrid-backup | boldgrid-backup |
93
|
Total Upkeep <= 1.17.1 - Missing Authorization to Unauthenticated Rollback Cancellation | LOW | *-1.17.1 | 1.17.2 | June 29, 2026 | |
| Five Star Restaurant Reservations – WordPress Booking Plugin | restaurant-reservations | N/A | Five Star Restaurant Reservations <= 2.7.16 - Unauthenticated Payment Bypass via PHP Type Juggling in 'payment_id' Parameter | LOW | *-2.7.16 | 2.7.17 | June 29, 2026 | |
| wppizza | wppizza | N/A | WPPizza – A Restaurant Plugin <= 3.19.9 - Authenticated (Subscriber+) Information Exposure | LOW | *-3.19.9 | 3.20 | June 29, 2026 | |
| wp-payment-form | wp-payment-form | N/A | Paymattic – Secure, Simple Payment & Donation with Subscription Payments, Recurring Donations, Customer Management <= 4.6.19 - Missing Authorization | LOW | *-4.6.19 | 4.6.20 | June 29, 2026 | |
| wp-event-solution | wp-event-solution | N/A | Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) <= 4.1.8 - Missing Authorization | LOW | *-4.1.8 | 4.1.9 | June 29, 2026 | |
| wallet-system-for-woocommerce | wallet-system-for-woocommerce | N/A | Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments <= 2.7.5 - Missing Authorization | LOW | *-2.7.5 | 2.7.6 | June 29, 2026 | |
| powerpack-elements | powerpack-elements | N/A | PowerPack Pro for Elementor < v2.13.0 - Missing Authorization | LOW | [*, v2.13.0) | 2.13.0 | June 29, 2026 | |
| otter-blocks | otter-blocks | N/A | Otter Blocks <= 3.1.4 - Improper Authorization to Unauthenticated Purchase Verification Bypass via Forged Cookie | LOW | *-3.1.4 | 3.1.5 | June 29, 2026 | |
| joomsport-sports-league-results-management | joomsport-sports-league-results-management |
93
|
JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.7.7 - Unauthenticated SQL Injection | LOW | *-5.7.7 | 5.7.8 | June 29, 2026 | |
| gd-rating-system | gd-rating-system |
93
|
GD Rating System <= 3.6.2 - Unauthenticated SQL Injection | LOW | *-3.6.2 | 3.7 | June 29, 2026 | |
| favicon-rotator | favicon-rotator |
93
|
Favicon Rotator <= 1.2.11 - Unauthenticated Stored Cross-Site Scripting | LOW | *-1.2.11 | 1.2.12 | June 29, 2026 | |
| contest-gallery | contest-gallery |
93
|
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.7 - Missing Authorization | LOW | *-28.1.7 | 29.0.0 | June 29, 2026 | |
| contest-gallery | contest-gallery |
93
|
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting | LOW | *-28.1.6 | 29.0.0 | June 29, 2026 | |
| contest-gallery | contest-gallery |
93
|
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.7 - Authenticated (Subscriber+) Sensitive Information Exposure | LOW | *-28.1.7 | 29.0.0 | June 29, 2026 | |
| classified-listing | classified-listing |
93
|
Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.9 - Missing Authorization | LOW | *-5.3.9 | 5.3.10 | June 29, 2026 | |
| classified-listing | classified-listing |
93
|
Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 - Missing Authorization | LOW | *-5.3.8 | 5.3.9 | June 29, 2026 | |
| classified-listing | classified-listing |
93
|
Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 - Unauthenticated Stored Cross-Site Scripting | LOW | *-5.3.8 | 5.3.9 | June 29, 2026 | |
| automatorwp | automatorwp |
93
|
AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress <= 5.6.7 - Unauthenticated Stored Cross-Site Scripting | LOW | *-5.6.7 | 5.6.8 | June 29, 2026 | |
| advanced-form-integration | advanced-form-integration |
97
|
AFI – The Easiest Integration Plugin <= 1.126.12 - Missing Authorization | LOW | *-1.126.12 | 1.127.0 | June 29, 2026 | |
| Complianz | GDPR/CCPA Cookie Consent | complianz-gdpr |
93
|
Complianz – GDPR/CCPA Cookie Consent <= 7.4.5 - Missing Authorization to Unauthenticated Private Post Content Disclosure via Consent Area REST Endpoint | LOW | *-7.4.5 | 7.4.6 | June 29, 2026 | |
| WP Meteor Website Speed Optimization Addon | wp-meteor |
95
|
WP Meteor Website Speed Optimization Addon <= 3.4.16 - Unauthenticated Stored Cross-Site Scripting via Comment | LOW | *-3.4.16 | 3.4.17 | June 29, 2026 | |
| Check & Log Email – Easy Email Testing & Mail logging | check-email |
84
|
Check & Log Email – Easy Email Testing & Mail logging < 2.0.13 - Unauthenticated Stored Cross-Site Scripting | LOW | [*, 2.0.13) | 2.0.13 | June 29, 2026 | |
| Booking for Appointments and Events Calendar – Amelia | ameliabooking |
97
|
Booking for Appointments and Events Calendar – Amelia <= 2.2 - Missing Authorization | LOW | *-2.2 | 2.2.1 | June 29, 2026 | |
| Booking Package | booking-package |
85
|
Booking Package <= 1.7.06 - Unauthenticated Price Manipulation via 'amount' Parameter | LOW | *-1.7.06 | 1.7.07 | June 29, 2026 | |
| timeline-blocks | timeline-blocks | N/A | Timeline Blocks for Gutenberg <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag' Block Attribute | LOW | *-1.1.10 | 1.1.11 | June 29, 2026 | |
| social-post-embed | social-post-embed | N/A | Social Post Embed <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Threads Embed | LOW | *-2.0.1 | 2.0.2 | June 29, 2026 | |
| WPC Smart Messages for WooCommerce | wpc-smart-messages | N/A | WPC Smart Messages for WooCommerce <= 4.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute | LOW | *-4.2.8 | 4.2.9 | June 29, 2026 | |
| LatePoint – Calendar Booking Plugin for Appointments and Events | latepoint |
83
|
LatePoint <= 5.4.1 - Authenticated (Agent+) Privilege Escalation to Administrator via 'connect-customer-to-wp-user' Ability | LOW | *-5.4.1 | 5.4.2 | June 29, 2026 | |
| User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration | wp-user-frontend | N/A | User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Missing Authorization | LOW | *-4.3.1 | 4.3.2 | June 29, 2026 | |
| thegem-elements-elementor | thegem-elements-elementor | N/A | TheGem Theme Elements < 5.12.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | LOW | [*, 5.12.1.1) | 5.12.1.1 | June 29, 2026 | |
| templately | templately | N/A | Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! <= 3.6.1 - Authenticated (Contributor+) Information Exposure | LOW | *-3.6.1 | 3.6.2 | June 29, 2026 | |
| sureforms-pro | sureforms-pro | N/A | SureForms Pro <= 2.8.0 - Missing Authorization | LOW | *-2.8.0 | 2.8.1 | June 29, 2026 | |
| Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin | simply-schedule-appointments | N/A | Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.11.2 - Unauthenticated Sensitive Information Exposure | LOW | [*, 1.6.11.2) | 1.6.11.2 | June 29, 2026 | |
| profile-builder-pro | profile-builder-pro | N/A | Profile Builder Pro <= 3.15.0 - Unauthenticated Stored Cross-Site Scripting | LOW | *-3.15.0 | 3.15.1 | June 29, 2026 | |
| order-delivery-date-for-woocommerce | order-delivery-date-for-woocommerce | N/A | Order Delivery Date for WooCommerce <= 4.5.1 - Unauthenticated SQL Injection | LOW | *-4.5.1 | 4.5.2 | June 29, 2026 | |
| funnel-builder | funnel-builder |
93
|
FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.15.0.1 - Unauthenticated SQL Injection | LOW | *-3.15.0.1 | 3.15.0.2 | June 29, 2026 | |
| highland-software-custom-role-manager | highland-software-custom-role-manager |
93
|
Highland Software Custom Role Manager <= 1.0.0 - Authenticated (Subscriber+) Privilege Escalation | LOW | *-1.0.0 | 1.0.1 | June 29, 2026 | |
| webdesignby-recaptcha | webdesignby-recaptcha | N/A | reCaptcha by WebDesignBy < 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting | LOW | [*, 2.0) | 2.0 | June 29, 2026 | |
| mycred | mycred | N/A | Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred <= 3.0.3 - Missing Authorization | LOW | *-3.0.3 | 3.0.4 | June 29, 2026 | |
| ht-mega-for-elementor | ht-mega-for-elementor |
93
|
HT Mega Addons for Elementor – Elementor Widgets & Template Builder < 3.0.7 - Unauthenticated Information Exposure | LOW | [*, 3.0.7) | 3.0.7 | June 29, 2026 | |
| groundhogg | groundhogg |
93
|
Groundhogg — CRM, Newsletters, and Marketing Automation < 4.4.1 - Missing Authorization | LOW | [*, 4.4.1) | 4.4.1 | June 29, 2026 | |
| iteras | iteras |
93
|
ITERAS <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | LOW | *-1.8.2 | 1.8.3 | June 29, 2026 | |
| leadin | leadin |
93
|
HubSpot All-In-One Marketing - Forms, Popups, Live Chat <= 11.3.32 - Missing Authorization to Authenticated (Contributor+) Installed Plugin Disclosure | LOW | *-11.3.32 | 11.3.33 | June 29, 2026 | |
| liaison-site-prober | liaison-site-prober |
93
|
Liaison Site Prober <= 1.2.1 - Missing Authorization to Unauthenticated Information Exposure in '/logs' REST API Endpoint | LOW | *-1.2.1 | 1.2.2 | June 29, 2026 |
LOW
html5-audio-player
html5-audio-player
LOW
gs-testimonial
gs-testimonial
LOW
gs-team-members
gs-team-members
LOW
AI Puffer – Chat. Create. Automate. (formerly AI Power)
gpt3-ai-content-generator
LOW
goal-tracker-ga
goal-tracker-ga
LOW
go-fetch-jobs-wp-job-manager
go-fetch-jobs-wp-job-manager
LOW
glossary-by-codeat
glossary-by-codeat
LOW
geo-mashup
geo-mashup
LOW
ga-for-wp
ga-for-wp
LOW
fullworks-anti-spam
fullworks-anti-spam
LOW
fullscreen-background
fullscreen-background
LOW
Gallery by FooGallery
foogallery
LOW
foobox-image-lightbox
foobox-image-lightbox
LOW
foobar-notifications-lite
foobar-notifications-lite
LOW
five-star-ratings-shortcode
five-star-ratings-shortcode
LOW
featured-images-for-rss-feeds
featured-images-for-rss-feeds
LOW
events-addon-for-elementor
events-addon-for-elementor
LOW
embedder-for-google-reviews
embedder-for-google-reviews
LOW
elespare
elespare
LOW
eazydocs
eazydocs
LOW
easy-marijuana-age-verify
easy-marijuana-age-verify
LOW
Easy Social Feed – Social Photos Gallery and Post Feed for WordPress
easy-facebook-likebox
LOW
easy-age-verify
easy-age-verify
LOW
dynamic-copyright-year
dynamic-copyright-year
LOW
dracula-dark-mode
dracula-dark-mode
LOW
display-a-meta-field-as-block
display-a-meta-field-as-block
LOW
delete-old-posts-programmatically
delete-old-posts-programmatically
LOW
custom-php-settings
custom-php-settings
LOW
custom-page-templates-by-vegacorp
custom-page-templates-by-vegacorp
LOW
Contact Form 7 Multi-Step Forms
contact-form-7-multi-step-module
LOW
code-manager
code-manager
LOW
cf7-styler
cf7-styler
LOW
Message Filter for Contact Form 7
cf7-message-filter
LOW
bulletin-announcements
bulletin-announcements
LOW
bulk-image-alt-text-with-yoast
bulk-image-alt-text-with-yoast
LOW
Better Messages – Live Chat, Chat Rooms, Real-Time Messaging & Private Messages
bp-better-messages
LOW
blog-designer-pack
blog-designer-pack
LOW
blockspare
blockspare
LOW
bbp-core
bbp-core
LOW
basepress
basepress
LOW
bBlocks – Essential Gutenberg Blocks & Patterns Collection
b-blocks
LOW
automatic-youtube-gallery
automatic-youtube-gallery
LOW
automatic-internal-links-for-seo
automatic-internal-links-for-seo
LOW
auto-install-free-ssl
auto-install-free-ssl
LOW
alt-manager
alt-manager
LOW
aibuddy-openai-chatgpt
aibuddy-openai-chatgpt
LOW
advanced-scrollbar
advanced-scrollbar
LOW
advanced-classifieds-and-directory-pro
advanced-classifieds-and-directory-pro
LOW
advance-wc-analytics
advance-wc-analytics
LOW
add-search-to-menu
add-search-to-menu
LOW
add-fields-to-checkout-page-woocommerce
add-fields-to-checkout-page-woocommerce
LOW
add-expires-headers
add-expires-headers
LOW
wp-editor
wp-editor
LOW
ultimate-dashboard
ultimate-dashboard
LOW
jet-engine
jet-engine
LOW
Elementor Website Builder – more than just a page builder
elementor
LOW
boldgrid-backup
boldgrid-backup
LOW
Five Star Restaurant Reservations – WordPress Booking Plugin
restaurant-reservations
LOW
wppizza
wppizza
LOW
wp-payment-form
wp-payment-form
LOW
wp-event-solution
wp-event-solution
LOW
wallet-system-for-woocommerce
wallet-system-for-woocommerce
LOW
powerpack-elements
powerpack-elements
LOW
otter-blocks
otter-blocks
LOW
joomsport-sports-league-results-management
joomsport-sports-league-results-management
LOW
gd-rating-system
gd-rating-system
LOW
favicon-rotator
favicon-rotator
LOW
contest-gallery
contest-gallery
LOW
contest-gallery
contest-gallery
LOW
contest-gallery
contest-gallery
LOW
classified-listing
classified-listing
LOW
classified-listing
classified-listing
LOW
classified-listing
classified-listing
LOW
automatorwp
automatorwp
LOW
advanced-form-integration
advanced-form-integration
LOW
Complianz | GDPR/CCPA Cookie Consent
complianz-gdpr
LOW
WP Meteor Website Speed Optimization Addon
wp-meteor
LOW
Check & Log Email – Easy Email Testing & Mail logging
check-email
LOW
Booking for Appointments and Events Calendar – Amelia
ameliabooking
LOW
Booking Package
booking-package
LOW
timeline-blocks
timeline-blocks
LOW
social-post-embed
social-post-embed
LOW
WPC Smart Messages for WooCommerce
wpc-smart-messages
LOW
LatePoint – Calendar Booking Plugin for Appointments and Events
latepoint
LOW
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration
wp-user-frontend
LOW
thegem-elements-elementor
thegem-elements-elementor
LOW
templately
templately
LOW
sureforms-pro
sureforms-pro
LOW
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin
simply-schedule-appointments
LOW
profile-builder-pro
profile-builder-pro
LOW
order-delivery-date-for-woocommerce
order-delivery-date-for-woocommerce
LOW
funnel-builder
funnel-builder
LOW
highland-software-custom-role-manager
highland-software-custom-role-manager
LOW
webdesignby-recaptcha
webdesignby-recaptcha
LOW
mycred
mycred
LOW
ht-mega-for-elementor
ht-mega-for-elementor
LOW
groundhogg
groundhogg
LOW
iteras
iteras
LOW
leadin
leadin
LOW
liaison-site-prober
liaison-site-prober
Showing 1101 to 1200 of 36189 results
Important: Review Required
Vulnerability data is aggregated from automated feeds and public sources. Results may include false positives or outdated information. Always verify details and apply updates in a staging environment before deploying to production.
Data updated daily from trusted sources. Last updated: June 29, 2026 at 07:20 UTC.