WordPress Plugin CVE Database

High

CVE-2025-67950

All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) [all-in-one-seo-pack] < 4.9.1.1

Medium

CVE-2025-63044

Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.20

High

CVE-2025-13065

Starter Templates – AI-Powered Templates for Elementor & Gutenberg [astra-sites] < 4.4.42

Medium

CVE-2025-13748

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder [fluentform] < 6.1.8

High

CVE-2025-12510

Widgets for Google Reviews [wp-reviews-plugin-for-google] < 13.2.5

Medium

CVE-2025-13922

Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms [simple-tags] < 3.41.0

Medium

CVE-2025-68494

Premium Addons for Elementor – Powerful Elementor Templates & Widgets [premium-addons-for-elementor] < 4.11.54

Medium

CVE-2025-63077

Happy Addons for Elementor [happy-elementor-addons] < 3.20.4

Medium

CVE-2025-12804

Booking Calendar [booking] < 10.14.7

Medium

CVE-2025-12887

Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App [post-smtp] < 3.6.2

Medium

CVE-2025-12826

Custom Post Type UI [custom-post-type-ui] < 1.18.1

Medium

CVE-2025-13401

Autoptimize [autoptimize] < 3.1.14

Medium

CVE-2025-11379

WebP Express [webp-express] < 0.25.11

Medium

CVE-2025-13109

HUSKY – Products Filter Professional for WooCommerce [woocommerce-products-filter] < 1.3.7.3

Medium

CVE-2025-13359

Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms [simple-tags] < 3.41.0

Medium

CVE-2025-13354

Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms [simple-tags] < 3.41.0

Medium

CVE-2025-13407

Gravity Forms [gravityforms] < 2.9.23.1

Critical

CVE-2025-13486

Advanced Custom Fields: Extended [acf-extended] < 0.9.2

Medium

CVE-2025-66121

Security Optimizer – The All-In-One Protection Plugin [sg-security] < 1.5.9

Medium

CVE-2025-66120

CatFolders – WordPress Media Library Folders & Categories [catfolders] < 2.5.4

Medium

CVE-2025-13737

Nextend Social Login and Register [nextend-facebook-connect] < 3.1.22

Medium

CVE-2025-64295

All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) [all-in-one-seo-pack] < 4.8.7

Medium

CVE-2025-12971

Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager [folders] < 3.1.6

Medium

CVE-2025-67588

Elementor Website Builder – more than just a page builder [elementor] < 3.33.1

High

CVE-2025-12684

URL Shortify – Simple and Easy URL Shortener [url-shortify] < 1.11.3

High

CVE-2025-13355

URL Shortify – Simple and Easy URL Shortener [url-shortify] < 1.11.4

Medium

CVE-2025-12800

Shortcodes Ultimate – Content Elements [shortcodes-ultimate] < 7.4.6

Medium

CVE-2025-11186

Compliance by Hu-manity.co [cookie-notice] < 2.5.9

Medium

CVE-2025-66066

Envo Extra [envo-extra] < 1.9.12

Medium

CVE-2025-12935

FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution [fluent-crm] < 2.9.85

Medium

CVE-2026-23543

Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.5.6

Medium

CVE-2025-12359

Responsive Lightbox & Gallery [responsive-lightbox] < 2.5.4

High

CVE-2025-13035

Code Snippets [code-snippets] < 3.9.2

Medium

CVE-2025-12814

SiteSEO – SEO Simplified [siteseo] < 1.3.3

Medium

CVE-2025-13085

SiteSEO – SEO Simplified [siteseo] < 1.3.3

Medium

CVE-2025-13031

WPeMatico RSS Feed Fetcher [wpematico] < 2.8.13

Medium

CVE-2025-12427

YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 4.10.1

Medium

CVE-2025-12777

YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 4.10.1

Medium

CVE-2025-13054

User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.14.9

Medium

CVE-2025-11427

WP Migrate Lite – Migration Made Easy [wp-migrate-db] < 2.7.7

Medium

CVE-2025-11734

Broken Link Checker by AIOSEO – Find & Fix Broken Internal, External & Video Links [broken-link-checker-seo] < 1.2.6

Medium

CVE-2025-11267

VK All in One Expansion Unit [vk-all-in-one-expansion-unit] < 9.112.2

Medium

CVE-2025-11265

VK All in One Expansion Unit [vk-all-in-one-expansion-unit] < 9.112.2

High

CVE-2025-12974

Gravity Forms [gravityforms] < 2.9.22

High

CVE-2025-12482

Booking for Appointments and Events Calendar – Amelia [ameliabooking] < 1.2.36

Medium

CVE-2025-12847

All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) [all-in-one-seo-pack] < 4.9.0

Medium

CVE-2025-64381

Booking Calendar [booking] < 10.14.8

Medium

CVE-2025-64384

JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder] < 3.5.4

High

CVE-2025-12844

AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 3.1.9

High

CVE-2025-12733

WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets [wp-all-import] < 4.0.0

Low

CVE-2025-12954

Timetable and Event Schedule by MotoPress [mp-timetable] < 2.4.16

Medium

CVE-2025-12366

Page Builder: Pagelayer – Drag and Drop website builder [pagelayer] < 2.0.6

Medium

CVE-2025-66061

Seriously Simple Podcasting [seriously-simple-podcasting] < 3.14.0

Medium

CVE-2025-66059

Seriously Simple Podcasting [seriously-simple-podcasting] < 3.14.0

Medium

CVE-2025-66060

Seriously Simple Podcasting [seriously-simple-podcasting] < 3.14.0

Medium

CVE-2025-12177

Download Manager [download-manager] < 3.3.31

Medium

CVE-2025-11972

Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms [simple-tags] < 3.40.1

Medium

CVE-2025-66056

Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin [uncanny-automator] < 6.10.0

Critical

CVE-2025-12352

Gravity Forms [gravityforms] < 2.9.21

Medium

CVE-2025-11271

Easy Digital Downloads – eCommerce Payments and Subscriptions made easy [easy-digital-downloads] < 3.5.3