WordPress Plugin CVE Database

Medium

CVE-2025-14428

All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements [mystickyelements] < 2.3.4

Medium

CVE-2025-69092

Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.5.4

Medium

CVE-2025-14783

Easy Digital Downloads – eCommerce Payments and Subscriptions made easy [easy-digital-downloads] < 3.6.3

CVE

CVE-2025-69333

JetEngine [jet-engine] < 3.8.1.2

High

CVE-2025-13592

Advanced Ads – Ad Manager & AdSense [advanced-ads] < 2.0.15

Medium

CVE-2025-69021

Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 6.0.8

High

CVE-2025-68036

CubeWP Framework [cubewp-framework] < 1.1.28

Medium

CVE-2025-68995

All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements [mystickyelements] < 2.3.4

Medium

CVE-2025-68997

Comments – wpDiscuz [wpdiscuz] < 7.6.44

Medium

CVE-2026-27368

Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode [coming-soon] < 6.19.9

Medium

CVE-2025-68505

Interactive Content – H5P [h5p] < 1.16.2

Medium

CVE-2025-68508

Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content [brave-popup-builder] < 0.8.4

Critical

CVE-2025-13773

Print Invoice & Delivery Notes for WooCommerce [woocommerce-delivery-notes] < 5.9.0

Medium

CVE-2025-15033

WooCommerce [woocommerce] < 10.4.3

Medium

CVE-2025-14163

Premium Addons for Elementor – Powerful Elementor Templates & Widgets [premium-addons-for-elementor] < 4.11.54

Medium

CVE-2025-14155

Premium Addons for Elementor – Powerful Elementor Templates & Widgets [premium-addons-for-elementor] < 4.11.54

Medium

CVE-2025-14635

Happy Addons for Elementor [happy-elementor-addons] < 3.20.4

Medium

CVE-2025-68589

WP Telegram Widget and Join Link [wptelegram-widget] < 2.2.13

Medium

CVE-2026-24952

Seriously Simple Podcasting [seriously-simple-podcasting] < 3.14.2

Low

CVE-2025-12654

WPvivid — Backup, Migration & Staging [wpvivid-backuprestore] < 0.9.121

High

CVE-2025-14800

Redirection for Contact Form 7 [wpcf7-redirect] < 3.2.8

Medium

CVE-2025-13220

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 2.11.1

Medium

CVE-2025-14298

FiboSearch – Ajax Search for WooCommerce [ajax-search-for-woocommerce] < 1.32.1

Medium

CVE-2025-12492

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 2.11.1

Medium

CVE-2025-13754

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin [simply-schedule-appointments] < 1.6.9.17

High

CVE-2025-13641

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 4.0.0

Medium

CVE-2025-14719

Relevanssi – A Better Search [relevanssi] < 4.26.0

Medium

CVE-2025-13498

Download Manager [download-manager] < 3.3.33

Medium

CVE-2025-12976

Events Manager – Calendar, Bookings, Tickets, and more! [events-manager] < 7.2.3

Medium

CVE-2025-13110

HUSKY – Products Filter Professional for WooCommerce [woocommerce-products-filter] < 1.3.7.4

Medium

CVE-2025-13977

Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.5.4

Medium

CVE-2025-11369

Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 5.7.3

Medium

CVE-2025-13217

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 2.11.1

Medium

CVE-2025-14081

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 2.11.1

Medium

CVE-2025-13750

Converter for Media – Optimize images | Convert WebP & AVIF [webp-converter-for-media] < 6.4.0

Medium

CVE-2025-14154

Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots [bp-better-messages] < 2.10.3

Medium

CVE-2025-11220

Elementor Website Builder – more than just a page builder [elementor] < 3.33.4

High

CVE-2025-67999

Newsletter – Send awesome emails from WordPress [newsletter] < 9.1.0

Medium

CVE-2025-12900

FileBird – WordPress Media Library Folders & File Manager [filebird] < 6.5.2

Medium

CVE-2025-67986

Document Library Lite [document-library-lite] < 1.2.0

Medium

CVE-2025-67985

Document Library Lite [document-library-lite] < 1.2.0

High

CVE-2025-14383

Booking Calendar [booking] < 10.14.9

Medium

CVE-2025-11991

JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder] < 3.5.4

Medium

CVE-2025-66129

Pochipp [pochipp] < 1.18.1

Medium

CVE-2025-12537

Addon Elements for Elementor (formerly Elementor Addon Elements) [addon-elements-for-elementor-page-builder] < 1.14.4

Medium

CVE-2025-14056

Custom Post Type UI [custom-post-type-ui] < 1.18.2

Medium

CVE-2025-14477

404 Solution [404-solution] < 3.1.1

Medium

CVE-2025-13820

Comments – wpDiscuz [wpdiscuz] < 7.6.40

Medium

CVE-2025-12407

Events Manager – Calendar, Bookings, Tickets, and more! [events-manager] < 7.2.2.3

Medium

CVE-2025-12408

Events Manager – Calendar, Bookings, Tickets, and more! [events-manager] < 7.2.2.3

Medium

CVE-2025-13993

MailerLite – Signup forms (official) [official-mailerlite-sign-up-forms] < 1.7.17

Medium

CVE-2025-12965

Magical Posts Display – Elementor Advanced Posts widgets [magical-posts-display] < 1.2.55

Medium

CVE-2025-13320

WP User Manager – User Profile Builder & Membership [wp-user-manager] < 2.9.13

Medium

CVE-2025-10163

List category posts [list-category-posts] < 0.92.0

Medium

CVE-2025-11467

RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator [feedzy-rss-feeds] < 5.1.2

Medium

CVE-2025-67563

Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App [post-smtp] < 3.6.2

High

CVE-2025-67962

Broken Link Checker by AIOSEO – Find & Fix Broken Internal, External & Video Links [broken-link-checker-seo] < 1.2.7

Medium

CVE-2025-67537

ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin [thirstyaffiliates] < 3.11.9

Medium

CVE-2025-67592

My Calendar – Accessible Event Manager [my-calendar] < 3.6.17

Medium

CVE-2025-67589

PDF Invoices & Packing Slips for WooCommerce [woocommerce-pdf-invoices-packing-slips] < 5.0.0