WordPress Plugin CVE Database

Medium

CVE-2025-11745

Ad Inserter – Ad Manager & AdSense Ads [ad-inserter] < 2.8.8

Critical

CVE-2025-11749

AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 3.1.4

High

CVE-2025-12384

Document Embedder – Embed PDFs, Word, Excel, and Other Files [document-emberdder] < 2.0.1

Medium

CVE-2025-12192

The Events Calendar [the-events-calendar] < 6.15.10

High

CVE-2025-12197

The Events Calendar [the-events-calendar] < 6.15.10

Medium

CVE-2025-11162

Spectra Legacy – Gutenberg Blocks [ultimate-addons-for-gutenberg] < 2.19.15

Medium

CVE-2025-11917

WPeMatico RSS Feed Fetcher [wpematico] < 2.8.12

Medium

CVE-2025-12045

Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More [themeisle-companion] < 3.0.3

Medium

CVE-2025-12324

TablePress – Tables in WordPress made easy [tablepress] < 3.2.5

Medium

CVE-2025-67535

WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters [wp-google-map-plugin] < 4.8.7

Critical

CVE-2025-11833

Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App [post-smtp] < 3.6.1

Medium

CVE-2025-11377

List category posts [list-category-posts] < 0.93.0

Medium

CVE-2025-11502

Schema & Structured Data for WP & AMP [schema-and-structured-data-for-wp] < 1.52

High

CVE-2025-10487

Advanced Ads – Ad Manager & AdSense [advanced-ads] < 2.0.13

Medium

CVE-2025-12367

SiteSEO – SEO Simplified [siteseo] < 1.3.2

Medium

CVE-2025-11174

Document Library Lite [document-library-lite] < 1.1.7

Medium

CVE-2025-11816

Privacy Policy Generator – WPLP Legal Pages [wplegalpages] < 3.5.2

Medium

CVE-2025-64357

Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance [advanced-database-cleaner] < 3.1.7

Medium

CVE-2025-12175

The Events Calendar [the-events-calendar] < 6.15.10

Medium

CVE-2025-64358

Smart Coupons For WooCommerce Coupons [wt-smart-coupons-for-woocommerce] < 2.2.4

CVE

CVE-2025-49042

WooCommerce [woocommerce] < 10.0.3

CVE

CVE-2025-64296

Meta for WooCommerce [facebook-for-woocommerce] < 3.5.8

Medium

CVE-2025-11632

Call Now Button – The #1 Click to Call Button for WordPress [call-now-button] < 1.5.5

Medium

CVE-2025-10008

Translate WordPress with Weglot – Multilingual AI Translation [weglot] < 5.2

Medium

CVE-2025-12450

LiteSpeed Cache [litespeed-cache] < 7.6

Medium

CVE-2025-11587

Call Now Button – The #1 Click to Call Button for WordPress [call-now-button] < 1.5.4

High

CVE-2025-64353

Polylang [polylang] < 3.7.4

High

CVE-2025-11735

HUSKY – Products Filter Professional for WooCommerce [woocommerce-products-filter] < 1.3.7.2

High

CVE-2025-64198

Easy Social Share Buttons [easy-social-share-buttons3] < 10.7.1

Medium

CVE-2025-64354

Gutenberg [gutenberg] < 21.9.0

Medium

CVE-2025-10580

Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets [widget-options] < 4.1.3

Medium

CVE-2025-11497

Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance [advanced-database-cleaner] < 3.1.7

Medium

CVE-2025-10637

Social Feed Gallery [insta-gallery] < 4.9.3

Medium

CVE-2025-11128

RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator [feedzy-rss-feeds] < 5.1.1

Medium

CVE-2025-67554

Compliance by Hu-manity.co [cookie-notice] < 2.5.9

Medium

CVE-2025-12033

Simple Banner – Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website [simple-banner] < 3.1.0

Medium

CVE-2025-48086

Ajax Search Lite – Live Search & Filter [ajax-search-lite] < 4.13.4

High

CVE-2025-11307

WP Go Maps – Google Map, OpenStreetMap, Leaflet Map [wp-google-maps] < 9.0.48

Medium

CVE-2026-28044

WP Rocket [wp-rocket] < 3.20.0.2

Medium

CVE-2025-11738

Media Library Assistant [media-library-assistant] < 3.30

Medium

CVE-2025-11510

FileBird – WordPress Media Library Folders & File Manager [filebird] < 6.5.0

Medium

CVE-2025-11703

WP Go Maps – Google Map, OpenStreetMap, Leaflet Map [wp-google-maps] < 9.0.49

Medium

CVE-2025-11270

Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 5.7.2

Medium

CVE-2025-11361

Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 5.7.2

High

CVE-2025-62059

SureRank SEO – Smart Assistant with Meta Tags, Social Preview, XML Sitemap, and Schema [surerank] < 1.4.0

Medium

CVE-2025-62048

SmartCrawl SEO checker, analyzer & optimizer [smartcrawl-seo] < 3.14.4

High

CVE-2025-62015

Advanced Coupons for WooCommerce Coupons & Store Credit [advanced-coupons-for-woocommerce-free] < 4.6.9

Medium

CVE-2025-62061

Product Catalog Simple [post-type-x] < 1.8.5

Medium

CVE-2025-10700

Web Accessibility (formally known as Ally) – WCAG Scanning, Guided Fixes, Usability Widget [pojo-accessibility] < 3.8.1

Medium

CVE-2025-62951

Interactive Content – H5P [h5p] < 1.16.1

Medium

CVE-2025-58595

All In One Login — Login Page Security and Customization for WordPress with Google reCAPTCHA, Social Login, Temporary Login, 2FA, and more. [change-wp-admin-login] < 2.0.9

Medium

CVE-2025-49937

Smash Balloon Social Post Feed – Simple Social Feeds for WordPress [custom-facebook-feed] < 4.3.3

Medium

CVE-2025-63065

Media Library Assistant [media-library-assistant] < 3.30

High

CVE-2025-48091

AnyComment [anycomment] <= 0.3.6 (unfixed)

Medium

CVE-2025-10249

Slider Revolution [revslider] < 6.7.38

Medium

CVE-2025-11166

WP Go Maps – Google Map, OpenStreetMap, Leaflet Map [wp-google-maps] < 9.0.47

Medium

CVE-2026-28080

Rank Math SEO PRO [seo-by-rank-math-pro] < 3.0.97

Medium

CVE-2025-48099

Search & Filter [search-filter] < 1.2.18

Medium

CVE-2025-63072

Cornerstone [cornerstone] <= 7.7.3 (unfixed + closed)

High

CVE-2025-62924

Post Grid [post-grid] < 2.3.18