Base de Datos de CVE de Plugins de WordPress

CVE

CVE-2025-66058

Post Grid [post-grid] < 2.3.18

Medium

CVE-2025-60448

Ultimate Addons for Elementor [header-footer-elementor] < 2.5.0

Medium

CVE-2025-10874

Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More [themeisle-companion] < 3.0.2

Medium

CVE-2025-60452

Responsive Lightbox & Gallery [responsive-lightbox] < 2.5.3

Medium

CVE-2025-49940

Fusion Builder [fusion-builder] < 3.13.3

Medium

CVE-2025-63070

Download Manager [download-manager] < 3.3.33

Medium

CVE-2025-11163

SmartCrawl SEO checker, analyzer & optimizer [smartcrawl-seo] < 3.14.4

Medium

CVE-2025-63069

Ivory Search – WordPress Search Plugin [add-search-to-menu] < 5.5.13

High

CVE-2025-62022

BuddyPress [buddypress] < 14.4.0

Medium

CVE-2025-60098

Theme My Login [theme-my-login] < 7.1.13

Medium

CVE-2025-60093

Download Manager [download-manager] < 3.3.25

Medium

CVE-2025-60092

Download Manager [download-manager] < 3.3.26

Medium

CVE-2025-60095

Stackable – Page Builder Gutenberg Blocks [stackable-ultimate-gutenberg-blocks] < 3.19.0

Medium

CVE-2025-60094

Stackable – Page Builder Gutenberg Blocks [stackable-ultimate-gutenberg-blocks] < 3.19.0

Medium

CVE-2025-10037

Featured Image from URL (FIFU) [featured-image-from-url] < 5.2.8

Medium

CVE-2025-10036

Featured Image from URL (FIFU) [featured-image-from-url] < 5.2.8

High

CVE-2025-58592

TranslatePress – Translate Multilingual sites with AI Translation [translatepress-multilingual] < 2.10.3

Medium

CVE-2025-58031

Nextend Social Login and Register [nextend-facebook-connect] < 3.1.20

Medium

CVE-2025-58650

All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) [all-in-one-seo-pack] < 4.8.7.2

Medium

CVE-2025-53459

Quads Ads Manager for Google AdSense [quick-adsense-reloaded] <= 2.0.92

Medium

CVE-2025-49938

JetEngine [jet-engine] < 3.7.4

Low

CVE-2025-64352

Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.3.0

Medium

CVE-2025-64351

Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.253

Low

CVE-2025-64350

Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.253

High

CVE-2025-10001

WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets [wp-all-import] < 3.9.4

Medium

CVE-2025-58805

Widgetize Pages Light [widgetize-pages-light] <= 3.0 (unfixed)

Medium

CVE-2025-58799

Custom WooCommerce Checkout Fields Editor [add-fields-to-checkout-page-woocommerce] <= 1.3.4 (unfixed)

Medium

CVE-2025-58593

Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More [themeisle-companion] < 3.0.1

Medium

CVE-2025-58602

If-So Dynamic Content – Elementor & All Page Builders Personalization [if-so] < 1.9.4.1

High

CVE-2025-60077

YayPricing – WooCommerce Dynamic Pricing & Discounts [yaypricing] < 3.5.4

Medium

CVE-2026-28131

Addon Elements for Elementor (formerly Elementor Addon Elements) [addon-elements-for-elementor-page-builder] < 1.14.5

Medium

CVE-2025-58195

Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.18

Medium

CVE-2025-58198

Xpro Theme Builder For Elementor – FREE [xpro-theme-builder] < 1.2.10

Medium

CVE-2025-58193

Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin [uncanny-automator] < 6.8.0

High

CVE-2025-54735

CubeWP Framework [cubewp-framework] < 1.1.25

Medium

CVE-2025-55716

WP Statistics – Simple, privacy-friendly Google Analytics alternative [wp-statistics] < 14.15.2

Medium

CVE-2025-55712

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce [the-plus-addons-for-elementor-page-builder] < 6.3.14

Medium

CVE-2025-55710

Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms [simple-tags] < 3.37.3

High

CVE-2025-49869

Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) [wp-event-solution] < 4.0.32

Low

CVE-2025-54940

Advanced Custom Fields (ACF®) [advanced-custom-fields] < 6.4.3

High

CVE-2025-54007

Post Grid [post-grid] < 2.3.12

CVE

CVE-2012-10025

Advanced Custom Fields (ACF®) [advanced-custom-fields] < 3.5.2

Medium

CVE-2025-49923

Seriously Simple Podcasting [seriously-simple-podcasting] < 3.12.0

High

CVE-2025-52737

WP Store Locator [wp-store-locator] < 2.2.261

Medium

CVE-2025-54706

Magical Posts Display – Elementor Advanced Posts widgets [magical-posts-display] < 1.2.53

Medium

CVE-2025-54688

JetEngine [jet-engine] < 3.7.2

High

CVE-2025-54021

Simple File List [simple-file-list] < 6.1.15

Medium

CVE-2025-52712

Post and Page Builder by BoldGrid – Visual Drag and Drop Editor [post-and-page-builder] < 1.27.9

High

CVE-2025-24000

Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App [post-smtp] < 3.3.0

Medium

CVE-2025-53196

JetEngine [jet-engine] < 3.7.1.1

High

CVE-2025-53990

JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder] < 3.5.2

High

CVE-2025-53194

JetEngine [jet-engine] < 3.7.1.1

High

CVE-2025-60240

AnyComment [anycomment] <= 0.3.6 (unfixed)

Critical

CVE-2020-36847

Simple File List [simple-file-list] < 4.2.3

CVE

CVE-2025-34085

Simple File List [simple-file-list] < 4.2.3

Medium

CVE-2025-49884

Internal Linking of Related Contents [internal-linking-of-related-contents] < 1.1.9

Medium

CVE-2024-11937

Premium Addons for Elementor – Powerful Elementor Templates & Widgets [premium-addons-for-elementor] < 4.10.70

Medium

CVE-2025-53253

WP Edit [wp-edit] <= 4.0.4 (unfixed)

Medium

CVE-2025-53262

Writesonic [writesonic] < 1.0.6

Medium

CVE-2025-53195

JetEngine [jet-engine] < 3.7.1.1