Known Plugin Vulnerabilities
Track known vulnerabilities from configured sources. Default view shows all open and closed vulnerabilities, ordered by most recently updated first.
Open Vulnerabilities
36319Across tracked plugins
Affected Plugins
82With open vulnerabilities
Critical / High
0Require immediate attention
Recently Updated
0In the last 30 days
Vulnerability List
Export CSV| Plugin | Slug | Score | Vulnerability | CVE ID | Severity | Affected Versions | Patched | Updated |
|---|---|---|---|---|---|---|---|---|
| mihdan-public-post-preview | mihdan-public-post-preview |
93
|
Mihdan: Public Post Preview <= 1.9.9 - Missing Authorization | LOW | *-1.9.9 | 1.9.10 | July 1, 2026 | |
| import-users-from-csv-with-meta | import-users-from-csv-with-meta |
93
|
Import and export users and customers <= 1.20.4 - Authenticated (Subscriber+) CSV Injection | LOW | *-1.20.4 | 1.20.5 | July 1, 2026 | |
| imagemagick-engine | imagemagick-engine |
93
|
ImageMagick Engine <= 1.7.5 - Cross-Site Request Forgery to Remote Command Execution | LOW | *-1.7.5 | 1.7.6 | July 1, 2026 | |
| hbook | hbook |
91
|
Booking Calendar – Event Calendar <= 1.0.2 - Missing Authorization | LOW | *-1.0.2 | July 1, 2026 | ||
| Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder | fluentform |
78
|
Contact Form Plugin by FluentForm <= 4.3.12 - CSV Injection | LOW | *-4.3.12 | 4.3.13 | July 1, 2026 | |
| ecommerce-product-catalog | ecommerce-product-catalog |
93
|
eCommerce Product Catalog <= 3.0.71 - Reflected Cross-Site Scripting | LOW | *-3.0.71 | 3.0.72 | July 1, 2026 | |
| ecommerce-product-catalog | ecommerce-product-catalog |
93
|
eCommerce Product Catalog <= 3.0.71 - Reflected Cross-Site Scripting | LOW | *-3.0.71 | 3.0.72 | July 1, 2026 | |
| Easy Digital Downloads – eCommerce Payments and Subscriptions made easy | easy-digital-downloads |
78
|
Easy Digital Downloads <= 2.11.7 - Cross-Site Request Forgery to Arbitrary Post Deletion | LOW | *-2.11.7 | 3.0 | July 1, 2026 | |
| complianz-gdpr-premium | complianz-gdpr-premium |
93
|
Complianz Free <= 6.3.3 & Premium <= 6.3.5 - SQL Injection via Translations | LOW | *-6.3.5 | 6.3.6 | July 1, 2026 | |
| Complianz | GDPR/CCPA Cookie Consent | complianz-gdpr |
93
|
Complianz Free <= 6.3.3 & Premium <= 6.3.5 - SQL Injection via Translations | LOW | *-6.3.3 | 6.3.4 | July 1, 2026 | |
| addify-product-stock-manager | addify-product-stock-manager |
97
|
Product Stock Manager < 1.0.5 - Missing Authorization and Cross-Site Request Forgery | LOW | [*, 1.0.5) | 1.0.5 | July 1, 2026 | |
| wpb-show-core | wpb-show-core | N/A | WPB Show Core <= 2.2 - Reflected Cross-Site Scripting | LOW | * | July 1, 2026 | ||
| shortcodes-ultimate | shortcodes-ultimate | N/A | Shortcodes Ultimate <= 5.12.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting | LOW | *-5.12.0 | 5.12.1 | July 1, 2026 | |
| shortcodes-ultimate | shortcodes-ultimate | N/A | Shortcodes Ultimate <= 5.12.0 - Cross-Site Request Forgery | LOW | *-5.12.0 | 5.12.1 | July 1, 2026 | |
| page-views-count | page-views-count | N/A | Page View Count <= 2.5.5 - Cross-Site Request Forgery | LOW | *-2.5.5 | 2.5.6 | July 1, 2026 | |
| highlight-focus | highlight-focus |
91
|
Highlight Focus <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting | LOW | *-1.1 | July 1, 2026 | ||
| account-manager-woocommerce | account-manager-woocommerce |
95
|
Account Manager for WooCommerce <= 2.1.1 - Missing Authorization | LOW | *-2.1.1 | July 1, 2026 | ||
| woocommerce-alidropship | woocommerce-alidropship | N/A | ALD - AliExpress Dropshipping and Fulfillment for WooCommerce Premium <= 1.1.0 - Sensitive Information Disclosure | LOW | *-1.1.0 | 1.1.1 | July 1, 2026 | |
| optinly | optinly | N/A | Optinly <= 1.0.18 - Missing Authorization to Plugin Settings Change | LOW | *-1.0.18 | 1.0.19 | July 1, 2026 | |
| optinly | optinly | N/A | Optinly <= 1.0.15 - Cross-Site Request Forgery | LOW | *-1.0.15 | 1.0.16 | July 1, 2026 | |
| maps-block-apple | maps-block-apple |
93
|
loader-utils (JS package) < 2.0.3 - Prototype Pollution | LOW | *-1.0.3 | 1.1.0 | July 1, 2026 | |
| insert-special-characters | insert-special-characters |
93
|
loader-utils (JS package) < 2.0.3 - Prototype Pollution | LOW | *-1.0.5 | 1.0.6 | July 1, 2026 | |
| elasticpress | elasticpress |
93
|
loader-utils (JS package) < 2.0.3 - Prototype Pollution | LOW | *-4.3.1 | 4.4.0 | July 1, 2026 | |
| accessibility | accessibility |
97
|
Accessibility <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting | LOW | *-1.0.3 | 1.0.4 | July 1, 2026 | |
| ab-press-optimizer-lite | ab-press-optimizer-lite |
95
|
AB Press Optimizer <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting | LOW | *-1.1.1 | July 1, 2026 | ||
| 5-anker-connect | 5-anker-connect |
97
|
5 Anker Connect <= 1.2.6 - Reflected Cross-Site Scripting | LOW | *-1.2.6 | 1.2.7 | July 1, 2026 | |
| 3com-asesor-de-cookies | 3com-asesor-de-cookies |
95
|
3com – Asesor de Cookies <= 3.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting | LOW | *-3.4.3 | July 1, 2026 | ||
| wp-smart-import | wp-smart-import | N/A | WordPress Importer: Import any XML File to WordPress <= 1.0.2 - Reflected Cross-Site Scripting | LOW | *-1.0.2 | 1.0.3 | July 1, 2026 | |
| simple-page-ordering | simple-page-ordering | N/A | loader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service | LOW | *-2.4.3 | 2.4.4 | July 1, 2026 | |
| simple-page-ordering | simple-page-ordering | N/A | loader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service | LOW | *-2.4.3 | 2.4.4 | July 1, 2026 | |
| restricted-site-access | restricted-site-access | N/A | loader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service | LOW | *-7.3.4 | 7.3.5 | July 1, 2026 | |
| restricted-site-access | restricted-site-access | N/A | loader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service | LOW | *-7.3.4 | 7.3.5 | July 1, 2026 | |
| insert-special-characters | insert-special-characters |
93
|
loader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service | LOW | *-1.0.5 | 1.0.6 | July 1, 2026 | |
| insert-special-characters | insert-special-characters |
93
|
loader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service | LOW | *-1.0.5 | 1.0.6 | July 1, 2026 | |
| elasticpress | elasticpress |
93
|
loader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service | LOW | *-4.3.1 | 4.4.0 | July 1, 2026 | |
| elasticpress | elasticpress |
93
|
loader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service | LOW | *-4.3.1 | 4.4.0 | July 1, 2026 | |
| ecommerce-product-catalog | ecommerce-product-catalog |
93
|
eCommerce Product Catalog Plugin for WordPress <= 3.0.69 - Reflected Cross-Site Scripting | LOW | *-3.0.69 | 3.0.70 | July 1, 2026 | |
| wp-total-hacks | wp-total-hacks | N/A | WP Total Hacks <= 4.7.2 - Authenticated (Subscriber+) Plugin Options Update to Cross-Site Scripting | LOW | *-4.7.2 | July 1, 2026 | ||
| WP Contact Slider – Contact Form Slider Widget | wp-contact-slider | N/A | WP Contact Slider <= 2.4.7 - Authenticated (Administrator+) Stored Cross-Site Scripting | LOW | *-2.4.7 | 2.4.8 | July 1, 2026 | |
| Smart Slider 3 | smart-slider-3 |
90
|
Smart Slider 3 <= 3.5.1.9 - PHP Object Injection | LOW | *-3.5.1.9 | 3.5.1.11 | July 1, 2026 | |
| seosamba-webmasters | seosamba-webmasters | N/A | SeoSamba for WordPress Webmasters <= 1.0.5 - Cross-Site Request Forgery | LOW | *-1.0.5 | 1.0.6 | July 1, 2026 | |
| s2framework | s2framework | N/A | s2Framework <= 4.1.5 - Reflected Cross-Site Scripting | LOW | *-4.1.5 | 4.1.6 | July 1, 2026 | |
| rock-convert | rock-convert | N/A | Rock Convert <= 2.10.2 - Reflected Cross-Site Scripting | LOW | *-2.10.2 | 2.11.0 | July 1, 2026 | |
| rock-convert | rock-convert | N/A | Rock Convert <= 2.10.2 - Authenticated (Administrator+) Stored Cross-Site Scripting | LOW | *-2.10.2 | 2.11.0 | July 1, 2026 | |
| ocean-extra | ocean-extra | N/A | Ocean Extra <= 2.0.4 - Authenticated (Administrator+) PHP Object Injection | LOW | *-2.0.4 | 2.0.5 | July 1, 2026 | |
| Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More | envira-gallery-lite |
94
|
Gallery Plugin for WordPress – Envira Photo Gallery <= 1.8.4.6 - Reflected Cross-Site Scripting | LOW | [*, 1.8.4.7) | 1.8.4.7 | July 1, 2026 | |
| ecommerce-product-catalog | ecommerce-product-catalog |
93
|
eCommerce Product Catalog Plugin for WordPress <= 3.0.70 - Reflected Cross-Site Scripting | LOW | *-3.0.70 | 3.0.71 | July 1, 2026 | |
| easy-wp-smtp | easy-wp-smtp |
93
|
Easy WP SMTP <= 1.4.9 - Authenticated (Administrator+) PHP Object Injection | LOW | *-1.4.9 | 1.5.0 | July 1, 2026 | |
| customizer-export-import | customizer-export-import |
93
|
Customizer Export/Import <= 0.9.4 - Authenticated (Administrator+) PHP Object Injection | LOW | *-0.9.4 | 0.9.5 | July 1, 2026 | |
| capability-manager-enhanced | capability-manager-enhanced |
93
|
PublishPress Capabilities <= 2.5.1 - Authenticated (Administrator+) PHP Object Injection | LOW | *-2.5.1 | 2.5.2 | July 1, 2026 | |
| capabilities-pro | capabilities-pro |
93
|
PublishPress Capabilities <= 2.5.1 - Authenticated (Administrator+) PHP Object Injection | LOW | *-2.5.1 | 2.5.2 | July 1, 2026 | |
| automatic-user-roles-switcher | automatic-user-roles-switcher |
93
|
Automatic User Roles Switcher <= 1.1.1 - Missing Authorization to Privilege Escalation | LOW | *-1.1.1 | 1.1.2 | July 1, 2026 | |
| another-wordpress-classifieds-plugin | another-wordpress-classifieds-plugin |
97
|
AWP Classifieds <= 4.2.1 - Unauthenticated SQL Injection | LOW | *-4.2.1 | 4.3 | July 1, 2026 | |
| subpages-extended | subpages-extended | N/A | Subpages Extended <= 1.6.6 - Authenticated (Administrator+) Cross-Site Scripting | LOW | *-1.6.6 | July 1, 2026 | ||
| image-banner-widget | image-banner-widget |
91
|
Image/Banner Widget <= 1.4.5 - Authenticated (Administrator+) Cross-Site Scripting | LOW | *-1.4.5 | July 1, 2026 | ||
| billingo | billingo |
91
|
Official Integration for Billingo <= 3.3.9 - Reflected Cross-Site Scripting | LOW | *-3.3.9 | 3.4.0 | July 1, 2026 | |
| wp-word-count | wp-word-count | N/A | WP Word Count <= 3.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting | LOW | *-3.2.3 | 3.2.4 | July 1, 2026 | |
| adl-post-slider | adl-post-slider |
95
|
Post Slider <= 1.6.7 - Missing Authorization | LOW | *-1.6.7 | July 1, 2026 | ||
| wp-polls | wp-polls | N/A | WP-Polls <= 2.76.0 - Race Condition | LOW | *-2.76.0 | 2.77.0 | July 1, 2026 | |
| log-http-requests | log-http-requests |
93
|
Log HTTP Requests <= 1.3.1 - Stored Cross-Site Scripting | LOW | *-1.3.1 | 1.3.2 | July 1, 2026 | |
| create-block-theme | create-block-theme |
93
|
Create Block Theme <= 1.2.1 - Unauthenticated Arbitrary File Upload | LOW | *-1.2.1 | 1.2.2 | July 1, 2026 | |
| wp-humanstxt | wp-humanstxt | N/A | WP Humans.txt <= 1.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting | LOW | *-1.0.6 | July 1, 2026 | ||
| woocommerce-product-vendors | woocommerce-product-vendors | N/A | WooCommerce Products Vendor <= 2.1.65 - Insecure Direct Object Reference to Note Creation | LOW | *-2.1.65 | 2.1.66 | July 1, 2026 | |
| woocommerce-product-vendors | woocommerce-product-vendors | N/A | WooCommerce Products Vendor <= 2.1.68 - Insecure Direct Object Reference to Vendor Commission Percentage Update | LOW | *-2.1.68 | 2.1.69 | July 1, 2026 | |
| woocommerce-product-vendors | woocommerce-product-vendors | N/A | WooCommerce Products Vendor <= 2.1.65 - Unauthenticated SQL Injection | LOW | *-2.1.65 | 2.1.66 | July 1, 2026 | |
| table-generator | table-generator | N/A | Table Generator <= 1.3.0 - Missing Authorization to Table Modification | LOW | *-1.3.0 | July 1, 2026 | ||
| rock-convert | rock-convert | N/A | Rock Convert <= 2.11.0 - Authenticated (Admin+) Stored Cross-Site Scripting | LOW | *-2.11.0 | 3.0.0 | July 1, 2026 | |
| ip-blacklist-cloud | ip-blacklist-cloud |
87
|
IP Blacklist Cloud <= 5.00 - Reflected Cross-Site Scripting | LOW | *-5.00 | July 1, 2026 | ||
| fontmeister | fontmeister |
91
|
FontMeister <= 1.08 - Reflected Cross-Site Scripting | LOW | *-1.08 | July 1, 2026 | ||
| WP Super Cache | wp-super-cache |
82
|
WP Super Cache <= 1.8 - Unauthenticated Cache Poisoning | LOW | *-1.8 | 1.9 | July 1, 2026 | |
| wp-all-export-pro | wp-all-export-pro | N/A | WP ALL Export Pro <= 1.7.8 - Authenticated Remote Code Execution | LOW | *-1.7.8 | 1.7.9 | July 1, 2026 | |
| wp-all-export-pro | wp-all-export-pro | N/A | WP ALL Export Pro <= 1.7.8 - Authenticated SQL Injection | LOW | *-1.7.8 | 1.7.9 | July 1, 2026 | |
| retain | retain | N/A | Retain Live Chat <= 0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting | LOW | *-0.1 | July 1, 2026 | ||
| related-posts-for-wp | related-posts-for-wp | N/A | Related Posts for WordPress <= 2.1.1 - Reflected Cross-Site Scripting | LOW | *-2.1.1 | 2.1.2 | July 1, 2026 | |
| quick-restaurant-menu | quick-restaurant-menu | N/A | Quick Restaurant Menu <= 2.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting | LOW | *-2.0.0 | 2.0.1 | July 1, 2026 | |
| post-to-csv | post-to-csv | N/A | Post to CSV by BestWebSoft <= 1.3.8 - Authenticated (Author+) CSV Injection | LOW | *-1.3.8 | 1.3.9 | July 1, 2026 | |
| learnpress | learnpress |
93
|
LearnPress <= 4.1.7.1 - Unauthenticated PHP Object Injection | LOW | *-4.1.7.1 | 4.1.7.2 | July 1, 2026 | |
| Anti Spam for Contact Forms, Comments & Online Stores – CleanTalk | cleantalk-spam-protect |
71
|
AntiSpam by CleanTalk <= 5.185 - Authenticated (Administrator+) SQL Injection | LOW | *-5.185 | 5.185.1 | July 1, 2026 | |
| casso-tu-dong-xac-nhan-thanh-toan-chuyen-khoan-ngan-hang | casso-tu-dong-xac-nhan-thanh-toan-chuyen-khoan-ngan-hang |
93
|
Casso – Tự động xác nhận thanh toán chuyển khoản ngân hàng <= 2.8.6 - Authenticated (Admin+) Cross-Site Scripting | LOW | *-2.8.6 | 2.8.7 | July 1, 2026 | |
| buddyforms-review | buddyforms-review |
93
|
BuddyForms Moderation <= 1.4.16 - Authenticated Stored Cross-Site Scripting | LOW | *-1.4.16 | 1.4.17 | July 1, 2026 | |
| blog2social | blog2social |
93
|
Blog2Social <= 6.9.9 - Authenticated (Subscriber+) Server-Side Request Forgery | LOW | *-6.9.9 | 6.9.10 | July 1, 2026 | |
| blog2social | blog2social |
93
|
Blog2Social <= 6.9.9 - Authenticated (Subscriber+) SQL Injection | LOW | *-6.9.9 | 6.9.10 | July 1, 2026 | |
| beebee-mini | beebee-mini |
93
|
Beebee Mini <= 1.2.0 - Unauthorized File Upload via ACF | LOW | *-1.2.0 | 1.3.0 | July 1, 2026 | |
| shortcodes-ultimate | shortcodes-ultimate | N/A | Shortcodes Ultimate <= 5.12.0 - Cross-Site Request Forgery | LOW | *-5.12.0 | 5.12.1 | July 1, 2026 | |
| woocommerce-amazon-affiliates-light-version | woocommerce-amazon-affiliates-light-version | N/A | WZone - Lite <= 3.1 - Cross-Site Request Forgery | LOW | *-3.1 | July 1, 2026 | ||
| osm | osm | N/A | OSM - OpenStreetMap <= 6.0 - Cross-Site Request Forgery | LOW | *-6.0 | 6.0.1 | July 1, 2026 | |
| media-library-plus | media-library-plus |
93
|
Media Library Folders <= 7.1.1 - Cross-Site Request Forgery | LOW | *-7.1.1 | 7.1.2 | July 1, 2026 | |
| lbstopattack | lbstopattack |
93
|
Plugin LBstopattack <= 1.1.2 - Cross-Site Request Forgery | LOW | *-1.1.2 | 1.1.3 | July 1, 2026 | |
| Kadence WooCommerce Email Designer | kadence-woocommerce-email-designer |
90
|
Kadence WooCommerce Email Designer <= 1.5.6 - PHP Object Injection | LOW | *-1.5.6 | 1.5.7 | July 1, 2026 | |
| crm-perks-forms | crm-perks-forms |
93
|
CRM Perks Forms <= 1.1.0 - Reflected Cross-Site Scripting | LOW | *-1.1.0 | 1.1.1 | July 1, 2026 | |
| contact-bank | contact-bank |
91
|
Contact Bank <= 3.0.30 - Authenticated (Administrator+) Stored Cross-Site Scripting | LOW | *-3.0.30 | July 1, 2026 | ||
| All-In-One Security (AIOS) – Security and Firewall | all-in-one-wp-security-and-firewall |
72
|
All In One WP Security & Firewall 5.0.0 - 5.0.7 - Protection Bypass via IP Spoofing | LOW | 5.0.0-5.0.7 | 5.0.8 | July 1, 2026 | |
| Redirection for Contact Form 7 | wpcf7-redirect | N/A | Redirection for Contact Form 7 <= 2.4.0 - Missing Authorization | LOW | *-2.4.0 | 2.7.0 | July 1, 2026 | |
| wp-analytify | wp-analytify | N/A | Analytify – Google Analytics Dashboard For WordPress <= 4.2.2 - Cross-Site Request Forgery | LOW | *-4.2.2 | 4.2.3 | July 1, 2026 | |
| quiz-master-next | quiz-master-next | N/A | Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 7.3.4 - Insecure Direct Object Reference | LOW | *-7.3.4 | 7.3.5 | July 1, 2026 | |
| profile-builder | profile-builder | N/A | Profile Builder – User Profile & User Registration Forms <= 3.6.4 - Cross-Site Request Forgery | LOW | *-3.6.4 | 3.6.5 | July 1, 2026 | |
| media-library-assistant | media-library-assistant |
93
|
Media Library Assistant <= 3.00 - Information Disclosure | LOW | *-3.00 | 3.01 | July 1, 2026 | |
| hreflang-tags-by-dcgws | hreflang-tags-by-dcgws |
91
|
HREFLANG Tags Lite <= 2.0.0 - Missing Authorization to Data Reset | LOW | *-2.0.0 | July 1, 2026 | ||
| form-maker | form-maker |
93
|
Form Maker <= 1.15.5 - Authenticated (Administrator+) SQL Injection | LOW | *-1.15.5 | 1.15.6 | July 1, 2026 | |
| booking-ultra-pro | booking-ultra-pro |
91
|
Booking Ultra Pro <= 1.1.5 - Missing Authorization | LOW | *-1.1.5 | 1.1.6 | July 1, 2026 |
LOW
mihdan-public-post-preview
mihdan-public-post-preview
LOW
import-users-from-csv-with-meta
import-users-from-csv-with-meta
LOW
imagemagick-engine
imagemagick-engine
LOW
hbook
hbook
LOW
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
fluentform
LOW
ecommerce-product-catalog
ecommerce-product-catalog
LOW
ecommerce-product-catalog
ecommerce-product-catalog
LOW
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy
easy-digital-downloads
LOW
complianz-gdpr-premium
complianz-gdpr-premium
LOW
Complianz | GDPR/CCPA Cookie Consent
complianz-gdpr
LOW
addify-product-stock-manager
addify-product-stock-manager
LOW
wpb-show-core
wpb-show-core
LOW
shortcodes-ultimate
shortcodes-ultimate
LOW
shortcodes-ultimate
shortcodes-ultimate
LOW
page-views-count
page-views-count
LOW
highlight-focus
highlight-focus
LOW
account-manager-woocommerce
account-manager-woocommerce
LOW
woocommerce-alidropship
woocommerce-alidropship
LOW
optinly
optinly
LOW
optinly
optinly
LOW
maps-block-apple
maps-block-apple
LOW
insert-special-characters
insert-special-characters
LOW
elasticpress
elasticpress
LOW
accessibility
accessibility
LOW
ab-press-optimizer-lite
ab-press-optimizer-lite
LOW
5-anker-connect
5-anker-connect
LOW
3com-asesor-de-cookies
3com-asesor-de-cookies
LOW
wp-smart-import
wp-smart-import
LOW
simple-page-ordering
simple-page-ordering
LOW
simple-page-ordering
simple-page-ordering
LOW
restricted-site-access
restricted-site-access
LOW
restricted-site-access
restricted-site-access
LOW
insert-special-characters
insert-special-characters
LOW
insert-special-characters
insert-special-characters
LOW
elasticpress
elasticpress
LOW
elasticpress
elasticpress
LOW
ecommerce-product-catalog
ecommerce-product-catalog
LOW
wp-total-hacks
wp-total-hacks
LOW
WP Contact Slider – Contact Form Slider Widget
wp-contact-slider
LOW
Smart Slider 3
smart-slider-3
LOW
seosamba-webmasters
seosamba-webmasters
LOW
s2framework
s2framework
LOW
rock-convert
rock-convert
LOW
rock-convert
rock-convert
LOW
ocean-extra
ocean-extra
LOW
Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More
envira-gallery-lite
LOW
ecommerce-product-catalog
ecommerce-product-catalog
LOW
easy-wp-smtp
easy-wp-smtp
LOW
customizer-export-import
customizer-export-import
LOW
capability-manager-enhanced
capability-manager-enhanced
LOW
capabilities-pro
capabilities-pro
LOW
automatic-user-roles-switcher
automatic-user-roles-switcher
LOW
another-wordpress-classifieds-plugin
another-wordpress-classifieds-plugin
LOW
subpages-extended
subpages-extended
LOW
image-banner-widget
image-banner-widget
LOW
billingo
billingo
LOW
wp-word-count
wp-word-count
LOW
adl-post-slider
adl-post-slider
LOW
wp-polls
wp-polls
LOW
log-http-requests
log-http-requests
LOW
create-block-theme
create-block-theme
LOW
wp-humanstxt
wp-humanstxt
LOW
woocommerce-product-vendors
woocommerce-product-vendors
LOW
woocommerce-product-vendors
woocommerce-product-vendors
LOW
woocommerce-product-vendors
woocommerce-product-vendors
LOW
table-generator
table-generator
LOW
rock-convert
rock-convert
LOW
ip-blacklist-cloud
ip-blacklist-cloud
LOW
fontmeister
fontmeister
LOW
WP Super Cache
wp-super-cache
LOW
wp-all-export-pro
wp-all-export-pro
LOW
wp-all-export-pro
wp-all-export-pro
LOW
retain
retain
LOW
related-posts-for-wp
related-posts-for-wp
LOW
quick-restaurant-menu
quick-restaurant-menu
LOW
post-to-csv
post-to-csv
LOW
learnpress
learnpress
LOW
Anti Spam for Contact Forms, Comments & Online Stores – CleanTalk
cleantalk-spam-protect
LOW
casso-tu-dong-xac-nhan-thanh-toan-chuyen-khoan-ngan-hang
casso-tu-dong-xac-nhan-thanh-toan-chuyen-khoan-ngan-hang
LOW
buddyforms-review
buddyforms-review
LOW
blog2social
blog2social
LOW
blog2social
blog2social
LOW
beebee-mini
beebee-mini
LOW
shortcodes-ultimate
shortcodes-ultimate
LOW
woocommerce-amazon-affiliates-light-version
woocommerce-amazon-affiliates-light-version
LOW
osm
osm
LOW
media-library-plus
media-library-plus
LOW
lbstopattack
lbstopattack
LOW
Kadence WooCommerce Email Designer
kadence-woocommerce-email-designer
LOW
crm-perks-forms
crm-perks-forms
LOW
contact-bank
contact-bank
LOW
All-In-One Security (AIOS) – Security and Firewall
all-in-one-wp-security-and-firewall
LOW
Redirection for Contact Form 7
wpcf7-redirect
LOW
wp-analytify
wp-analytify
LOW
quiz-master-next
quiz-master-next
LOW
profile-builder
profile-builder
LOW
media-library-assistant
media-library-assistant
LOW
hreflang-tags-by-dcgws
hreflang-tags-by-dcgws
LOW
form-maker
form-maker
LOW
booking-ultra-pro
booking-ultra-pro
Showing 28001 to 28100 of 36319 results
Important: Review Required
Vulnerability data is aggregated from automated feeds and public sources. Results may include false positives or outdated information. Always verify details and apply updates in a staging environment before deploying to production.
Data updated daily from trusted sources. Last updated: July 1, 2026 at 12:55 UTC.