CVE DATABASE
WordPress Plugin CVE Database
1000 known WordPress plugin CVEs, checked against WP Clinic's local security database.
CVE
CVE-2026-12525
Redux Framework [redux-framework] < 4.5.13
Medium
CVE-2026-15457
Kirki – Freeform Page Builder, Website Builder & Customizer [kirki] < 6.0.14
Medium
CVE-2026-9656
HubSpot All-In-One Marketing – Forms, Popups, Live Chat [leadin] < 11.3.64
CVE
CVE-2026-12510
AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 3.5.5
Medium
CVE-2026-14782
Booking for Appointments and Events Calendar – Amelia [ameliabooking] < 2.4.4
Medium
CVE-2026-12434
List category posts [list-category-posts] < 0.96.0
High
CVE-2026-12753
Advance Product Search- Voice & Ajax Search for WooCommerce [th-advance-product-search] < 1.4.5
High
CVE-2026-15005
Loco Translate [loco-translate] < 2.8.6
High
CVE-2026-15008
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin [uncanny-automator] < 7.4.0
High
CVE-2026-12997
Gravity Forms [gravityforms] < 2.10.5
CVE
CVE-2026-12511
AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 3.5.5
Medium
CVE-2026-12385
Smart Slider 3 [smart-slider-3] < 3.5.1.38
Low
CVE-2026-61971
User Profile Picture [metronet-profile-picture] <= 2.6.3 (unfixed)
Medium
CVE-2026-12536
Fusion Builder [fusion-builder] < 3.15.6
Medium
CVE-2026-12141
Premium Addons for Elementor – Powerful Elementor Templates & Widgets [premium-addons-for-elementor] < 4.11.85
Medium
CVE-2026-11898
White Label CMS [white-label-cms] < 2.7.13
Medium
CVE-2026-15297
Brevo – Email, SMS, Web Push, Chat, and more. [mailin] < 3.1.78
Medium
CVE-2026-15286
Kadence Blocks — Page Builder Toolkit for Gutenberg Editor [kadence-blocks] < 3.6.0
Medium
CVE-2026-11591
Widgets for Google Reviews [wp-reviews-plugin-for-google] < 13.3.1
Medium
CVE-2026-11426
Under Construction [under-construction-page] < 5.81
Medium
CVE-2026-15285
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce [the-plus-addons-for-elementor-page-builder] < 6.4.12
Medium
CVE-2026-13116
PDF Invoices & Packing Slips for WooCommerce [woocommerce-pdf-invoices-packing-slips] < 5.15.0
High
CVE-2026-9282
W3 Total Cache [w3-total-cache] < 2.10.0
High
CVE-2026-7655
SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments [surecart] < 4.3.0
High
CVE-2026-15290
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 2.10.2
Medium
CVE-2026-15287
rtMedia for WordPress, BuddyPress and bbPress [buddypress-media] < 4.6.19
Medium
CVE-2026-5069
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder [fluentform] < 6.2.2
High
CVE-2026-57715
FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution [fluent-crm] < 3.1.8
Medium
CVE-2026-15026
Import and export users and customers [import-users-from-csv-with-meta] < 2.4.1
Medium
CVE-2026-57812
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin [simply-schedule-appointments] < 1.6.12.6
Medium
CVE-2026-59523
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin [simply-schedule-appointments] < 1.6.12.0
Medium
CVE-2026-11818
WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System [wp-cafe] < 3.0.15
Medium
CVE-2026-13039
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) [wp-event-solution] < 4.1.16
Medium
CVE-2026-12924
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) [wp-event-solution] < 4.1.16
Medium
CVE-2026-13710
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress [jeg-elementor-kit] < 3.2.7
High
CVE-2026-8848
Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder [popup-maker] < 1.23.0
Medium
CVE-2026-57693
Ad Inserter – Ad Manager & AdSense Ads [ad-inserter] < 2.8.12
Medium
CVE-2026-14343
Download Manager [download-manager] < 3.3.62
Medium
CVE-2026-12002
Smash Balloon Social Photo Feed – Easy Social Feeds Plugin [instagram-feed] < 6.11.2
High
CVE-2026-57713
Events Manager – Calendar, Bookings, Tickets, and more! [events-manager] < 7.3.7
Critical
CVE-2026-57714
Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress [latepoint] < 5.6.4
Critical
CVE-2026-57702
Booking for Appointments and Events Calendar – Amelia [ameliabooking] < 2.4.3
Medium
CVE-2026-57413
Instant AI Image Generator – Create & Import Images [ai-image] < 2.1.5
High
CVE-2026-57815
Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.55.1
High
CVE-2026-57814
Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.55.0.2
Medium
CVE-2026-6459
Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.6.3
Medium
CVE-2025-14785
Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode [coming-soon] < 6.20.3
High
CVE-2026-57382
Simple File List [simple-file-list] < 6.3.9
High
CVE-2026-5356
Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress [latepoint] < 5.4.1
Medium
CVE-2026-6742
Advanced iFrame [advanced-iframe] < 2026.2
High
CVE-2026-6854
My Calendar – Accessible Event Manager [my-calendar] < 3.7.9
Medium
CVE-2026-11798
Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer] <= 7.14.5 (unfixed)
High
CVE-2026-57727
Kirki – Freeform Page Builder, Website Builder & Customizer [kirki] <= 6.0.13 (unfixed)
Critical
CVE-2026-57726
Kirki – Freeform Page Builder, Website Builder & Customizer [kirki] < 6.0.13
High
CVE-2026-57725
Kirki – Freeform Page Builder, Website Builder & Customizer [kirki] < 6.0.12
Critical
CVE-2026-57724
Kirki – Freeform Page Builder, Website Builder & Customizer [kirki] < 6.0.13
CVE
CVE-2026-6382
File Manager [wp-file-manager] < 8.0.4
CVE
CVE-2026-11962
FileOrganizer – WordPress File Manager [fileorganizer] < 1.2.0
CVE
CVE-2026-11766
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 2.12.0
CVE
CVE-2026-11855
Simple Membership [simple-membership] < 4.7.5
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.