WP Clinic
Log in Sign up

CVE DATABASE

WordPress Plugin CVE Database

1000 known WordPress plugin CVEs, checked against WP Clinic's local security database.

High

CVE-2024-13345

Fusion Builder [fusion-builder] < 3.11.14

Critical

CVE-2025-22630

Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets [widget-options] < 4.1.1

Medium

CVE-2024-13821

Booking Calendar [booking] < 10.10.1

High

CVE-2025-24752

Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.0.15

Low

CVE-2024-10545

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.59.9

Medium

CVE-2025-22659

Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More [themeisle-companion] < 2.10.45

Medium

CVE-2024-13403

WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More [wpforms-lite] < 1.9.3.2

Medium

CVE-2025-22642

Dynamic Conditions [dynamicconditions] < 1.7.5

Medium

CVE-2024-13699

Qi Addons For Elementor [qi-addons-for-elementor] < 1.8.8

Medium

CVE-2025-22683

NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar [notificationx] < 3.0.0

Low

CVE-2024-13585

Ajax Search Lite – Live Search & Filter [ajax-search-lite] < 4.12.5

Medium

CVE-2025-22260

Meta Tag Manager [meta-tag-manager] < 3.2

Medium

CVE-2025-22686

GSheetConnector for CF7 – Connect Contact Form 7 to Google Sheets and Send Form Submissions in Real Time [cf7-google-sheets-connector] < 5.0.18

Medium

CVE-2024-11829

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce [the-plus-addons-for-elementor-page-builder] < 6.2.0

Medium

CVE-2024-13612

Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots [bp-better-messages] < 2.7.0

Medium

CVE-2024-13157

MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar [mp3-music-player-by-sonaar] < 5.9.4

Medium

CVE-2025-24810

Simple Image Sizes [simple-image-sizes] < 3.2.4

Medium

CVE-2025-24689

Import and export users and customers [import-users-from-csv-with-meta] < 1.27.13

Medium

CVE-2025-24568

Starter Templates – AI-Powered Templates for Elementor & Gutenberg [astra-sites] < 4.4.10

Medium

CVE-2025-24623

Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) [really-simple-ssl] < 9.2.0

Medium

CVE-2025-24720

Sticky Buttons – Floating Buttons Builder [sticky-buttons] < 4.1.2

Medium

CVE-2025-24738

Call Now Button – The #1 Click to Call Button for WordPress [call-now-button] < 1.4.14

Medium

CVE-2025-24746

Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder [popup-maker] < 1.20.3

Medium

CVE-2025-24713

Button Generator – Easily Create Custom Buttons with Icons and Analytics [button-generation] < 3.1.2

Medium

CVE-2025-24753

Kadence Blocks — Page Builder Toolkit for Gutenberg Editor [kadence-blocks] < 3.3.2

Medium

CVE-2025-24736

Post Duplicator [post-duplicator] < 2.36

Medium

CVE-2025-24742

WP Go Maps – Google Map, OpenStreetMap, Leaflet Map [wp-google-maps] < 9.0.41

Medium

CVE-2025-24644

WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels [print-invoices-packing-slip-labels-for-woocommerce] < 4.7.2

Medium

CVE-2025-24573

Page Builder: Pagelayer – Drag and Drop website builder [pagelayer] < 1.9.5

Medium

CVE-2025-24662

LearnDash LMS [sfwd-lms] < 4.20.0.3

Medium

CVE-2025-24719

Countdown Timer – Widget Countdown [widget-countdown] < 2.7.2

Medium

CVE-2024-12477

Fusion Builder [fusion-builder] < 3.11.12

Medium

CVE-2024-12118

The Events Calendar [the-events-calendar] < 6.9.1

Medium

CVE-2024-13361

AI Puffer – Chat. Create. Automate. (formerly AI Power) [gpt3-ai-content-generator] < 1.8.97

Medium

CVE-2024-13360

AI Puffer – Chat. Create. Automate. (formerly AI Power) [gpt3-ai-content-generator] < 1.8.97

Medium

CVE-2024-12117

Stackable – Page Builder Gutenberg Blocks [stackable-ultimate-gutenberg-blocks] < 3.13.12

Medium

CVE-2024-13230

Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer] < 7.14.1

Medium

CVE-2024-13126

Download Manager [download-manager] < 3.3.07

Medium

CVE-2024-13517

Easy Digital Downloads – eCommerce Payments and Subscriptions made easy [easy-digital-downloads] < 3.3.3

High

CVE-2024-13333

Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution [file-manager-advanced] < 5.2.14

High

CVE-2024-13377

Gravity Forms [gravityforms] < 2.9.2

Medium

CVE-2024-13378

Gravity Forms [gravityforms] < 2.9.2

Medium

CVE-2025-22722

Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets [widget-options] < 4.0.9

Medium

CVE-2025-22759

Post and Page Builder by BoldGrid – Visual Drag and Drop Editor [post-and-page-builder] < 1.27.6

Medium

CVE-2024-10775

Piotnet Addons For Elementor [piotnet-addons-for-elementor] < 2.4.33

Low

CVE-2024-12767

Buddyboss Platform [buddyboss-platform] < 2.7.60

Medium

CVE-2024-13215

Addon Elements for Elementor (formerly Elementor Addon Elements) [addon-elements-for-elementor-page-builder] < 1.14

Medium

CVE-2024-12240

Page Builder by SiteOrigin [siteorigin-panels] < 2.31.1

Medium

CVE-2024-13323

Booking Calendar [booking] < 10.9.3

Medium

CVE-2024-12008

W3 Total Cache [w3-total-cache] < 2.8.2

Medium

CVE-2024-12006

W3 Total Cache [w3-total-cache] < 2.8.2

High

CVE-2024-12365

W3 Total Cache [w3-total-cache] < 2.8.2

Medium

CVE-2024-12304

Kadence Blocks — Page Builder Toolkit for Gutenberg Editor [kadence-blocks] < 3.4.3

Medium

CVE-2024-12472

Post Duplicator [post-duplicator] < 2.37

Medium

CVE-2024-13183

Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More [themeisle-companion] < 2.10.44

Medium

CVE-2025-24537

The Events Calendar [the-events-calendar] < 6.7.1

Medium

CVE-2025-22800

Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App [post-smtp] < 2.9.12

Medium

CVE-2024-12852

Happy Addons for Elementor [happy-elementor-addons] < 3.15.2

Medium

CVE-2024-12584

Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.6.3

Medium

CVE-2024-12045

Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 5.1.1

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.