Base de Datos de CVE de Plugins de WordPress

CVE

CVE-2026-12525

Redux Framework [redux-framework] < 4.5.13

Medium

CVE-2026-15457

Kirki – Freeform Page Builder, Website Builder & Customizer [kirki] < 6.0.14

Medium

CVE-2026-9656

HubSpot All-In-One Marketing – Forms, Popups, Live Chat [leadin] < 11.3.64

CVE

CVE-2026-12510

AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 3.5.5

Medium

CVE-2026-14782

Booking for Appointments and Events Calendar – Amelia [ameliabooking] < 2.4.4

Medium

CVE-2026-12434

List category posts [list-category-posts] < 0.96.0

High

CVE-2026-12753

Advance Product Search- Voice & Ajax Search for WooCommerce [th-advance-product-search] < 1.4.5

High

CVE-2026-15005

Loco Translate [loco-translate] < 2.8.6

High

CVE-2026-15008

Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin [uncanny-automator] < 7.4.0

High

CVE-2026-12997

Gravity Forms [gravityforms] < 2.10.5

CVE

CVE-2026-12511

AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 3.5.5

Medium

CVE-2026-12385

Smart Slider 3 [smart-slider-3] < 3.5.1.38

Low

CVE-2026-61971

User Profile Picture [metronet-profile-picture] <= 2.6.3 (unfixed)

Medium

CVE-2026-12536

Fusion Builder [fusion-builder] < 3.15.6

Medium

CVE-2026-12141

Premium Addons for Elementor – Powerful Elementor Templates & Widgets [premium-addons-for-elementor] < 4.11.85

Medium

CVE-2026-11898

White Label CMS [white-label-cms] < 2.7.13

Medium

CVE-2026-15297

Brevo – Email, SMS, Web Push, Chat, and more. [mailin] < 3.1.78

Medium

CVE-2026-15286

Kadence Blocks — Page Builder Toolkit for Gutenberg Editor [kadence-blocks] < 3.6.0

Medium

CVE-2026-11591

Widgets for Google Reviews [wp-reviews-plugin-for-google] < 13.3.1

Medium

CVE-2026-11426

Under Construction [under-construction-page] < 5.81

Medium

CVE-2026-15285

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce [the-plus-addons-for-elementor-page-builder] < 6.4.12

Medium

CVE-2026-13116

PDF Invoices & Packing Slips for WooCommerce [woocommerce-pdf-invoices-packing-slips] < 5.15.0

High

CVE-2026-9282

W3 Total Cache [w3-total-cache] < 2.10.0

High

CVE-2026-7655

SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments [surecart] < 4.3.0

High

CVE-2026-15290

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 2.10.2

Medium

CVE-2026-15287

rtMedia for WordPress, BuddyPress and bbPress [buddypress-media] < 4.6.19

Medium

CVE-2026-5069

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder [fluentform] < 6.2.2

High

CVE-2026-57715

FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution [fluent-crm] < 3.1.8

Medium

CVE-2026-15026

Import and export users and customers [import-users-from-csv-with-meta] < 2.4.1

Medium

CVE-2026-57812

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin [simply-schedule-appointments] < 1.6.12.6

Medium

CVE-2026-59523

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin [simply-schedule-appointments] < 1.6.12.0

Medium

CVE-2026-11818

WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System [wp-cafe] < 3.0.15

Medium

CVE-2026-13039

Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) [wp-event-solution] < 4.1.16

Medium

CVE-2026-12924

Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) [wp-event-solution] < 4.1.16

Medium

CVE-2026-13710

Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress [jeg-elementor-kit] < 3.2.7

High

CVE-2026-8848

Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder [popup-maker] < 1.23.0

Medium

CVE-2026-57693

Ad Inserter – Ad Manager & AdSense Ads [ad-inserter] < 2.8.12

Medium

CVE-2026-14343

Download Manager [download-manager] < 3.3.62

Medium

CVE-2026-12002

Smash Balloon Social Photo Feed – Easy Social Feeds Plugin [instagram-feed] < 6.11.2

High

CVE-2026-57713

Events Manager – Calendar, Bookings, Tickets, and more! [events-manager] < 7.3.7

Critical

CVE-2026-57714

Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress [latepoint] < 5.6.4

Critical

CVE-2026-57702

Booking for Appointments and Events Calendar – Amelia [ameliabooking] < 2.4.3

Medium

CVE-2026-57413

Instant AI Image Generator – Create & Import Images [ai-image] < 2.1.5

High

CVE-2026-57815

Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.55.1

High

CVE-2026-57814

Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.55.0.2

Medium

CVE-2026-6459

Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.6.3

Medium

CVE-2025-14785

Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode [coming-soon] < 6.20.3

High

CVE-2026-57382

Simple File List [simple-file-list] < 6.3.9

High

CVE-2026-5356

Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress [latepoint] < 5.4.1

Medium

CVE-2026-6742

Advanced iFrame [advanced-iframe] < 2026.2

High

CVE-2026-6854

My Calendar – Accessible Event Manager [my-calendar] < 3.7.9

Medium

CVE-2026-11798

Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer] <= 7.14.5 (unfixed)

High

CVE-2026-57727

Kirki – Freeform Page Builder, Website Builder & Customizer [kirki] <= 6.0.13 (unfixed)

Critical

CVE-2026-57726

Kirki – Freeform Page Builder, Website Builder & Customizer [kirki] < 6.0.13

High

CVE-2026-57725

Kirki – Freeform Page Builder, Website Builder & Customizer [kirki] < 6.0.12

Critical

CVE-2026-57724

Kirki – Freeform Page Builder, Website Builder & Customizer [kirki] < 6.0.13

CVE

CVE-2026-6382

File Manager [wp-file-manager] < 8.0.4

CVE

CVE-2026-11962

FileOrganizer – WordPress File Manager [fileorganizer] < 1.2.0

CVE

CVE-2026-11766

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 2.12.0

CVE

CVE-2026-11855

Simple Membership [simple-membership] < 4.7.5