WordPress Plugin CVE Database

Medium

CVE-2025-32195

Ecwid by Lightspeed Ecommerce Shopping Cart [ecwid-shopping-cart] < 7.0.1

Medium

CVE-2025-32134

URL Shortify – Simple and Easy URL Shortener [url-shortify] < 1.10.6

Medium

CVE-2025-32163

Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.11

Medium

CVE-2025-32201

Xpro Theme Builder For Elementor – FREE [xpro-theme-builder] < 1.2.8.5

Medium

CVE-2025-32235

MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar [mp3-music-player-by-sonaar] < 5.9.5

Medium

CVE-2024-13898

Simple Banner – Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website [simple-banner] < 3.0.5

Medium

CVE-2025-31627

Media Library Assistant [media-library-assistant] < 3.25

Medium

CVE-2025-22288

Smush – Image Optimization, Compression, Lazy Load, WebP & CDN [wp-smushit] < 3.17.1

Medium

CVE-2024-11180

ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 3.4.8

Medium

CVE-2025-30912

Float menu – awesome floating side menu [float-menu] < 6.1.3

Medium

CVE-2025-30766

Happy Addons for Elementor [happy-elementor-addons] < 3.16.3

High

CVE-2025-30773

TranslatePress – Translate Multilingual sites with AI Translation [translatepress-multilingual] < 2.9.7

Medium

CVE-2025-30836

Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress [latepoint] < 5.1.7

High

CVE-2025-30814

The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid [the-post-grid] < 7.7.18

High

CVE-2025-30829

WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System [wp-cafe] < 2.2.32

High

CVE-2025-30855

Quads Ads Manager for Google AdSense [quick-adsense-reloaded] < 2.0.88

Critical

CVE-2025-30876

Quads Ads Manager for Google AdSense [quick-adsense-reloaded] < 2.0.88

Medium

CVE-2025-30914

MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor [metform] < 3.9.3

Medium

CVE-2024-13207

Buttonizer – Social Media Share Buttons, Social Icons, & Social Feeds [facebook-pagelike-widget] < 6.4.2

High

CVE-2024-13889

WordPress Importer [wordpress-importer] < 0.8.4

Medium

CVE-2024-13411

Zapier for WordPress [zapier] < 1.5.2

Medium

CVE-2024-13666

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder [fluentform] < 6.0.0

High

CVE-2025-26890

HUSKY – Products Filter Professional for WooCommerce [woocommerce-products-filter] < 1.3.6.5

High

CVE-2024-10942

All-in-One WP Migration and Backup [all-in-one-wp-migration] < 7.90

Medium

CVE-2025-26762

WooCommerce [woocommerce] < 9.7.1

Medium

CVE-2024-13430

Page Builder: Pagelayer – Drag and Drop website builder [pagelayer] < 1.9.9

Medium

CVE-2024-13838

Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin [uncanny-automator] < 6.3

Medium

CVE-2024-10144

Robo Gallery – Photo & Image Slider [robo-gallery] < 3.2.22

Medium

CVE-2024-13844

Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App [post-smtp] < 3.1.3

Medium

CVE-2024-13640

Print Invoice & Delivery Notes for WooCommerce [woocommerce-delivery-notes] < 5.5.0

Medium

CVE-2024-13649

Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.6.8

Medium

CVE-2024-12743

MailPoet – Newsletters, Email Marketing, and Automation [mailpoet] < 5.5.2

Medium

CVE-2024-13805

Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution [file-manager-advanced] < 5.3.0

Medium

CVE-2024-13431

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin [simply-schedule-appointments] < 1.6.8.5

CVE

CVE-2025-22623

Ad Inserter – Ad Manager & AdSense Ads [ad-inserter] < 2.8.1

Low

CVE-2024-12769

Simple Banner – Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website [simple-banner] < 3.0.4

Medium

CVE-2024-13384

Robo Gallery – Photo & Image Slider [robo-gallery] < 3.2.24

High

CVE-2024-13611

Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots [bp-better-messages] < 2.7.0

Medium

CVE-2024-13697

Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots [bp-better-messages] < 2.7.5

Medium

CVE-2024-13796

Post Grid [post-grid] < 2.3.7

Medium

CVE-2025-1249

Events Manager – Calendar, Bookings, Tickets, and more! [events-manager] < 6.6.4.2

Medium

CVE-2024-13402

Buddyboss Platform [buddyboss-platform] < 2.8.00

Medium

CVE-2024-13217

Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress [jeg-elementor-kit] < 2.6.12

Medium

CVE-2024-13803

Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 5.3.0

Medium

CVE-2024-54444

Elementor Website Builder – more than just a page builder [elementor] < 3.25.11

Low

CVE-2025-26977

FileBird – WordPress Media Library Folders & File Manager [filebird] < 6.4.6

Medium

CVE-2025-26965

Booking for Appointments and Events Calendar – Amelia [ameliabooking] < 1.2.17

High

CVE-2025-26964

Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) [wp-event-solution] < 4.0.21

Medium

CVE-2025-26871

Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.8.4

High

CVE-2024-13869

WPvivid — Backup, Migration & Staging [wpvivid-backuprestore] < 0.9.113

Medium

CVE-2024-13798

Post Grid [post-grid] < 2.3.6

Medium

CVE-2024-13900

Head, Footer and Post Injections [header-footer] < 3.3.1

High

CVE-2024-11260

Events Manager – Calendar, Bookings, Tickets, and more! [events-manager] < 6.6.4

Medium

CVE-2024-12276

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 2.10.0

Medium

CVE-2024-13445

Elementor Website Builder – more than just a page builder [elementor] < 3.27.5

Medium

CVE-2024-13795

Ecwid by Lightspeed Ecommerce Shopping Cart [ecwid-shopping-cart] < 6.12.28

Critical

CVE-2025-26763

Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider [ml-slider] < 3.95.0

Medium

CVE-2025-26758

Spotlight Social Feeds – Block, Shortcode, and Widget [spotlight-social-photo-feeds] < 1.7.2

Medium

CVE-2024-13227

Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.236

Medium

CVE-2024-13229

Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.236