CVE DATABASE
WordPress Plugin CVE Database
1000 known WordPress plugin CVEs, checked against WP Clinic's local security database.
CVE
CVE-2025-66058
Post Grid [post-grid] < 2.3.18
Medium
CVE-2025-60448
Ultimate Addons for Elementor [header-footer-elementor] < 2.5.0
Medium
CVE-2025-10874
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More [themeisle-companion] < 3.0.2
Medium
CVE-2025-60452
Responsive Lightbox & Gallery [responsive-lightbox] < 2.5.3
Medium
CVE-2025-49940
Fusion Builder [fusion-builder] < 3.13.3
Medium
CVE-2025-63070
Download Manager [download-manager] < 3.3.33
Medium
CVE-2025-11163
SmartCrawl SEO checker, analyzer & optimizer [smartcrawl-seo] < 3.14.4
Medium
CVE-2025-63069
Ivory Search – WordPress Search Plugin [add-search-to-menu] < 5.5.13
High
CVE-2025-62022
BuddyPress [buddypress] < 14.4.0
Medium
CVE-2025-60098
Theme My Login [theme-my-login] < 7.1.13
Medium
CVE-2025-60093
Download Manager [download-manager] < 3.3.25
Medium
CVE-2025-60092
Download Manager [download-manager] < 3.3.26
Medium
CVE-2025-60095
Stackable – Page Builder Gutenberg Blocks [stackable-ultimate-gutenberg-blocks] < 3.19.0
Medium
CVE-2025-60094
Stackable – Page Builder Gutenberg Blocks [stackable-ultimate-gutenberg-blocks] < 3.19.0
Medium
CVE-2025-10037
Featured Image from URL (FIFU) [featured-image-from-url] < 5.2.8
Medium
CVE-2025-10036
Featured Image from URL (FIFU) [featured-image-from-url] < 5.2.8
High
CVE-2025-58592
TranslatePress – Translate Multilingual sites with AI Translation [translatepress-multilingual] < 2.10.3
Medium
CVE-2025-58031
Nextend Social Login and Register [nextend-facebook-connect] < 3.1.20
Medium
CVE-2025-58650
All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) [all-in-one-seo-pack] < 4.8.7.2
Medium
CVE-2025-53459
Quads Ads Manager for Google AdSense [quick-adsense-reloaded] <= 2.0.92
Medium
CVE-2025-49938
JetEngine [jet-engine] < 3.7.4
Low
CVE-2025-64352
Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.3.0
Medium
CVE-2025-64351
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.253
Low
CVE-2025-64350
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.253
High
CVE-2025-10001
WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets [wp-all-import] < 3.9.4
Medium
CVE-2025-58805
Widgetize Pages Light [widgetize-pages-light] <= 3.0 (unfixed)
Medium
CVE-2025-58799
Custom WooCommerce Checkout Fields Editor [add-fields-to-checkout-page-woocommerce] <= 1.3.4 (unfixed)
Medium
CVE-2025-58593
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More [themeisle-companion] < 3.0.1
Medium
CVE-2025-58602
If-So Dynamic Content – Elementor & All Page Builders Personalization [if-so] < 1.9.4.1
High
CVE-2025-60077
YayPricing – WooCommerce Dynamic Pricing & Discounts [yaypricing] < 3.5.4
Medium
CVE-2026-28131
Addon Elements for Elementor (formerly Elementor Addon Elements) [addon-elements-for-elementor-page-builder] < 1.14.5
Medium
CVE-2025-58195
Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.18
Medium
CVE-2025-58198
Xpro Theme Builder For Elementor – FREE [xpro-theme-builder] < 1.2.10
Medium
CVE-2025-58193
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin [uncanny-automator] < 6.8.0
High
CVE-2025-54735
CubeWP Framework [cubewp-framework] < 1.1.25
Medium
CVE-2025-55716
WP Statistics – Simple, privacy-friendly Google Analytics alternative [wp-statistics] < 14.15.2
Medium
CVE-2025-55712
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce [the-plus-addons-for-elementor-page-builder] < 6.3.14
Medium
CVE-2025-55710
Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms [simple-tags] < 3.37.3
High
CVE-2025-49869
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) [wp-event-solution] < 4.0.32
Low
CVE-2025-54940
Advanced Custom Fields (ACF®) [advanced-custom-fields] < 6.4.3
High
CVE-2025-54007
Post Grid [post-grid] < 2.3.12
CVE
CVE-2012-10025
Advanced Custom Fields (ACF®) [advanced-custom-fields] < 3.5.2
Medium
CVE-2025-49923
Seriously Simple Podcasting [seriously-simple-podcasting] < 3.12.0
High
CVE-2025-52737
WP Store Locator [wp-store-locator] < 2.2.261
Medium
CVE-2025-54706
Magical Posts Display – Elementor Advanced Posts widgets [magical-posts-display] < 1.2.53
Medium
CVE-2025-54688
JetEngine [jet-engine] < 3.7.2
High
CVE-2025-54021
Simple File List [simple-file-list] < 6.1.15
Medium
CVE-2025-52712
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor [post-and-page-builder] < 1.27.9
High
CVE-2025-24000
Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App [post-smtp] < 3.3.0
Medium
CVE-2025-53196
JetEngine [jet-engine] < 3.7.1.1
High
CVE-2025-53990
JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder] < 3.5.2
High
CVE-2025-53194
JetEngine [jet-engine] < 3.7.1.1
High
CVE-2025-60240
AnyComment [anycomment] <= 0.3.6 (unfixed)
Critical
CVE-2020-36847
Simple File List [simple-file-list] < 4.2.3
CVE
CVE-2025-34085
Simple File List [simple-file-list] < 4.2.3
Medium
CVE-2025-49884
Internal Linking of Related Contents [internal-linking-of-related-contents] < 1.1.9
Medium
CVE-2024-11937
Premium Addons for Elementor – Powerful Elementor Templates & Widgets [premium-addons-for-elementor] < 4.10.70
Medium
CVE-2025-53253
WP Edit [wp-edit] <= 4.0.4 (unfixed)
Medium
CVE-2025-53262
Writesonic [writesonic] < 1.0.6
Medium
CVE-2025-53195
JetEngine [jet-engine] < 3.7.1.1
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.