CVE DATABASE
WordPress Plugin CVE Database
1000 known WordPress plugin CVEs, checked against WP Clinic's local security database.
Medium
CVE-2025-49321
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) [wp-event-solution] < 4.0.29
Medium
CVE-2024-50555
Elementor Website Builder – more than just a page builder [elementor] < 3.29.1
Medium
CVE-2025-52707
Firelight Lightbox [easy-fancybox] < 2.3.17
Medium
CVE-2025-52711
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor [post-and-page-builder] < 1.27.9
Medium
CVE-2025-52713
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor [post-and-page-builder] < 1.27.9
High
CVE-2025-52708
HUSKY – Products Filter Professional for WooCommerce [woocommerce-products-filter] < 1.3.7.1
Medium
CVE-2025-50010
Zapier for WordPress [zapier] < 1.5.3
High
CVE-2025-49331
eCommerce Product Catalog Plugin for WordPress [ecommerce-product-catalog] < 3.4.4
Medium
CVE-2025-49882
CubeWP Framework [cubewp-framework] < 1.1.24
Medium
CVE-2025-49875
If-So Dynamic Content – Elementor & All Page Builders Personalization [if-so] < 1.9.3.2
Medium
CVE-2025-62882
Seriously Simple Podcasting [seriously-simple-podcasting] < 3.14.0
Medium
CVE-2025-49239
Print Invoice & Delivery Notes for WooCommerce [woocommerce-delivery-notes] < 5.6.0
Medium
CVE-2025-49305
Product Catalog Simple [post-type-x] < 1.8.2
Medium
CVE-2025-49292
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.13.9
High
CVE-2025-30999
External Store for Shopify [wp-shopify] < 1.6.0
Medium
CVE-2025-49333
Simple Membership [simple-membership] < 4.6.4
Medium
CVE-2025-49262
Sina Extension for Elementor [sina-extension-for-elementor] < 3.7.0
Medium
CVE-2025-49244
Shortcodes Ultimate – Content Elements [shortcodes-ultimate] < 7.4.0
Medium
CVE-2025-49068
Ocean Extra [ocean-extra] < 2.4.9
Critical
CVE-2025-48133
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin [uncanny-automator] < 6.5.0
Medium
CVE-2025-49076
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce [the-plus-addons-for-elementor-page-builder] < 6.2.8
Medium
CVE-2025-49922
WPeMatico RSS Feed Fetcher [wpematico] < 2.8.4
Medium
CVE-2024-13427
Page Builder: Pagelayer – Drag and Drop website builder [pagelayer] < 2.0.1
Medium
CVE-2025-48246
The Events Calendar [the-events-calendar] < 6.12.0
Medium
CVE-2025-48247
PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links [pretty-link] < 3.6.16
Critical
CVE-2025-60245
WP User Manager – User Profile Builder & Membership [wp-user-manager] < 2.9.13
High
CVE-2025-47445
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) [wp-event-solution] < 4.0.27
Medium
CVE-2025-47437
LiteSpeed Cache [litespeed-cache] < 7.1
Medium
CVE-2025-47656
Spiraclethemes Site Library [spiraclethemes-site-library] < 1.5.5
High
CVE-2025-47636
List category posts [list-category-posts] < 0.92.0
Critical
CVE-2025-47688
Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution [file-manager-advanced] < 5.3.2
High
CVE-2025-47439
Download Monitor [download-monitor] < 5.0.23
Medium
CVE-2025-47450
Simple File List [simple-file-list] < 6.1.14
Medium
CVE-2025-47504
EU/UK VAT Validation Manager for WooCommerce [eu-vat-for-woocommerce] < 4.4.3
Medium
CVE-2025-47506
Contextual Related Posts [contextual-related-posts] < 4.0.3
Medium
CVE-2025-47604
Inline Related Posts [intelly-related-posts] < 3.9.0
Medium
CVE-2025-47470
AI Puffer – Chat. Create. Automate. (formerly AI Power) [gpt3-ai-content-generator] < 1.9.15
Medium
CVE-2025-47471
Envo Extra [envo-extra] < 1.9.10
CVE
CVE-2025-47539
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) [wp-event-solution] < 4.0.27
Medium
CVE-2025-47691
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 2.10.4
Medium
CVE-2025-47521
Robo Gallery – Photo & Image Slider [robo-gallery] < 5.0.3
Medium
CVE-2025-47443
Countdown Timer – Widget Countdown [widget-countdown] < 2.7.5
Medium
CVE-2024-13858
Buddyboss Platform [buddyboss-platform] < 2.8.51
Medium
CVE-2024-13859
Buddyboss Platform [buddyboss-platform] < 2.8.51
Medium
CVE-2024-13860
Buddyboss Platform [buddyboss-platform] < 2.8.51
Critical
CVE-2025-27007
OttoKit: All-in-One Automation Platform [suretriggers] < 1.0.83
Medium
CVE-2025-46261
Seriously Simple Podcasting [seriously-simple-podcasting] < 3.10.0
Medium
CVE-2025-39404
Social Sharing Plugin – Sassy Social Share [sassy-social-share] < 3.3.74
Medium
CVE-2025-39444
MaxButtons – Create buttons [maxbuttons] < 9.8.4
Medium
CVE-2025-39453
Advanced Dynamic Pricing and Discount Rules for WooCommerce [advanced-dynamic-pricing-for-woocommerce] < 4.9.5
High
CVE-2025-39452
WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System [wp-cafe] < 2.2.33
Medium
CVE-2025-39589
Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.1.10
Medium
CVE-2025-39590
Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.1.10
High
CVE-2025-39584
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) [wp-event-solution] < 4.0.26
Medium
CVE-2025-26870
JetEngine [jet-engine] < 3.6.5
Medium
CVE-2025-32640
Web Accessibility (formally known as Ally) – WCAG Scanning, Guided Fixes, Usability Widget [pojo-accessibility] < 3.2.0
Medium
CVE-2025-32679
User Registration Using Contact Form 7 [user-registration-using-contact-form-7] < 2.5
High
CVE-2025-32117
Widgetize Pages Light [widgetize-pages-light] <= 3.0 (unfixed)
Medium
CVE-2024-13820
Melhor Envio [melhor-envio-cotacao] < 2.15.12
Critical
CVE-2025-32118
CMP – Coming Soon & Maintenance Plugin by NiteoThemes [cmp-coming-soon-maintenance] < 4.1.15
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.