Base de Datos de CVE de Plugins de WordPress

Medium

CVE-2025-49321

Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) [wp-event-solution] < 4.0.29

Medium

CVE-2024-50555

Elementor Website Builder – more than just a page builder [elementor] < 3.29.1

Medium

CVE-2025-52707

Firelight Lightbox [easy-fancybox] < 2.3.17

Medium

CVE-2025-52711

Post and Page Builder by BoldGrid – Visual Drag and Drop Editor [post-and-page-builder] < 1.27.9

Medium

CVE-2025-52713

Post and Page Builder by BoldGrid – Visual Drag and Drop Editor [post-and-page-builder] < 1.27.9

High

CVE-2025-52708

HUSKY – Products Filter Professional for WooCommerce [woocommerce-products-filter] < 1.3.7.1

Medium

CVE-2025-50010

Zapier for WordPress [zapier] < 1.5.3

High

CVE-2025-49331

eCommerce Product Catalog Plugin for WordPress [ecommerce-product-catalog] < 3.4.4

Medium

CVE-2025-49882

CubeWP Framework [cubewp-framework] < 1.1.24

Medium

CVE-2025-49875

If-So Dynamic Content – Elementor & All Page Builders Personalization [if-so] < 1.9.3.2

Medium

CVE-2025-62882

Seriously Simple Podcasting [seriously-simple-podcasting] < 3.14.0

Medium

CVE-2025-49239

Print Invoice & Delivery Notes for WooCommerce [woocommerce-delivery-notes] < 5.6.0

Medium

CVE-2025-49305

Product Catalog Simple [post-type-x] < 1.8.2

Medium

CVE-2025-49292

User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.13.9

High

CVE-2025-30999

External Store for Shopify [wp-shopify] < 1.6.0

Medium

CVE-2025-49333

Simple Membership [simple-membership] < 4.6.4

Medium

CVE-2025-49262

Sina Extension for Elementor [sina-extension-for-elementor] < 3.7.0

Medium

CVE-2025-49244

Shortcodes Ultimate – Content Elements [shortcodes-ultimate] < 7.4.0

Medium

CVE-2025-49068

Ocean Extra [ocean-extra] < 2.4.9

Critical

CVE-2025-48133

Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin [uncanny-automator] < 6.5.0

Medium

CVE-2025-49076

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce [the-plus-addons-for-elementor-page-builder] < 6.2.8

Medium

CVE-2025-49922

WPeMatico RSS Feed Fetcher [wpematico] < 2.8.4

Medium

CVE-2024-13427

Page Builder: Pagelayer – Drag and Drop website builder [pagelayer] < 2.0.1

Medium

CVE-2025-48246

The Events Calendar [the-events-calendar] < 6.12.0

Medium

CVE-2025-48247

PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links [pretty-link] < 3.6.16

Critical

CVE-2025-60245

WP User Manager – User Profile Builder & Membership [wp-user-manager] < 2.9.13

High

CVE-2025-47445

Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) [wp-event-solution] < 4.0.27

Medium

CVE-2025-47437

LiteSpeed Cache [litespeed-cache] < 7.1

Medium

CVE-2025-47656

Spiraclethemes Site Library [spiraclethemes-site-library] < 1.5.5

High

CVE-2025-47636

List category posts [list-category-posts] < 0.92.0

Critical

CVE-2025-47688

Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution [file-manager-advanced] < 5.3.2

High

CVE-2025-47439

Download Monitor [download-monitor] < 5.0.23

Medium

CVE-2025-47450

Simple File List [simple-file-list] < 6.1.14

Medium

CVE-2025-47504

EU/UK VAT Validation Manager for WooCommerce [eu-vat-for-woocommerce] < 4.4.3

Medium

CVE-2025-47506

Contextual Related Posts [contextual-related-posts] < 4.0.3

Medium

CVE-2025-47604

Inline Related Posts [intelly-related-posts] < 3.9.0

Medium

CVE-2025-47470

AI Puffer – Chat. Create. Automate. (formerly AI Power) [gpt3-ai-content-generator] < 1.9.15

Medium

CVE-2025-47471

Envo Extra [envo-extra] < 1.9.10

CVE

CVE-2025-47539

Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) [wp-event-solution] < 4.0.27

Medium

CVE-2025-47691

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 2.10.4

Medium

CVE-2025-47521

Robo Gallery – Photo & Image Slider [robo-gallery] < 5.0.3

Medium

CVE-2025-47443

Countdown Timer – Widget Countdown [widget-countdown] < 2.7.5

Medium

CVE-2024-13858

Buddyboss Platform [buddyboss-platform] < 2.8.51

Medium

CVE-2024-13859

Buddyboss Platform [buddyboss-platform] < 2.8.51

Medium

CVE-2024-13860

Buddyboss Platform [buddyboss-platform] < 2.8.51

Critical

CVE-2025-27007

OttoKit: All-in-One Automation Platform [suretriggers] < 1.0.83

Medium

CVE-2025-46261

Seriously Simple Podcasting [seriously-simple-podcasting] < 3.10.0

Medium

CVE-2025-39404

Social Sharing Plugin – Sassy Social Share [sassy-social-share] < 3.3.74

Medium

CVE-2025-39444

MaxButtons – Create buttons [maxbuttons] < 9.8.4

Medium

CVE-2025-39453

Advanced Dynamic Pricing and Discount Rules for WooCommerce [advanced-dynamic-pricing-for-woocommerce] < 4.9.5

High

CVE-2025-39452

WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System [wp-cafe] < 2.2.33

Medium

CVE-2025-39589

Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.1.10

Medium

CVE-2025-39590

Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.1.10

High

CVE-2025-39584

Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) [wp-event-solution] < 4.0.26

Medium

CVE-2025-26870

JetEngine [jet-engine] < 3.6.5

Medium

CVE-2025-32640

Web Accessibility (formally known as Ally) – WCAG Scanning, Guided Fixes, Usability Widget [pojo-accessibility] < 3.2.0

Medium

CVE-2025-32679

User Registration Using Contact Form 7 [user-registration-using-contact-form-7] < 2.5

High

CVE-2025-32117

Widgetize Pages Light [widgetize-pages-light] <= 3.0 (unfixed)

Medium

CVE-2024-13820

Melhor Envio [melhor-envio-cotacao] < 2.15.12

Critical

CVE-2025-32118

CMP – Coming Soon & Maintenance Plugin by NiteoThemes [cmp-coming-soon-maintenance] < 4.1.15