WordPress Plugin CVE Database

Medium

CVE-2026-59520

CrawlWP SEO – Instant Search Engine Indexing & SEO Performance Monitor [mihdan-index-now] < 3.0.17

CVE

CVE-2026-11578

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder [fluentform] < 6.2.5

Medium

CVE-2026-57764

Surbma | Yoast SEO Breadcrumb Shortcode [surbma-yoast-breadcrumb-shortcode] <= 1.2 (unfixed)

Medium

CVE-2026-57680

Kirki – Freeform Page Builder, Website Builder & Customizer [kirki] < 6.0.12

High

CVE-2026-9148

Comments – wpDiscuz [wpdiscuz] < 7.6.57

Medium

CVE-2026-11900

Ad Inserter – Ad Manager & AdSense Ads [ad-inserter] < 2.8.17

Medium

CVE-2026-11398

Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress [latepoint] < 5.6.2

Medium

CVE-2026-8489

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 2.12.0

CVE

CVE-2026-11880

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder [fluentform] < 6.2.1

Medium

CVE-2026-12122

Kirki – Freeform Page Builder, Website Builder & Customizer [kirki] < 6.0.12

Medium

CVE-2026-12472

Kirki – Freeform Page Builder, Website Builder & Customizer [kirki] < 6.0.12

High

CVE-2026-57736

HubSpot All-In-One Marketing – Forms, Popups, Live Chat [leadin] <= 11.3.56 (unfixed)

Medium

CVE-2026-12657

Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress [latepoint] < 5.6.3

CVE

CVE-2026-10750

Royal MCP – Secure AI Connector for Claude, ChatGPT & Gemini [royal-mcp] < 1.4.26

High

CVE-2026-57349

WPeMatico RSS Feed Fetcher [wpematico] < 2.8.18

Medium

CVE-2026-13252

RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator [feedzy-rss-feeds] < 5.2.2

High

CVE-2026-57360

eCommerce Product Catalog Plugin for WordPress [ecommerce-product-catalog] < 3.5.5

Medium

CVE-2026-11896

My Calendar – Accessible Event Manager [my-calendar] < 3.7.15

High

CVE-2026-5821

Image Optimization – Compress Images and Convert to WebP or AVIF [image-optimization] < 1.7.5

Medium

CVE-2026-13459

JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder] < 3.6.3.1

High

CVE-2026-57350

WP Debugging [wp-debugging] < 2.12.3

Medium

CVE-2026-12127

WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More [wpforms-lite] < 1.10.2.1

Medium

CVE-2026-12902

Kadence Blocks — Page Builder Toolkit for Gutenberg Editor [kadence-blocks] < 3.7.8

Medium

CVE-2026-12904

Kadence Blocks — Page Builder Toolkit for Gutenberg Editor [kadence-blocks] < 3.7.8

Medium

CVE-2026-13733

Download Manager [download-manager] < 3.3.61

High

CVE-2026-57672

wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin [wpdatatables] < 6.5.1.2

High

CVE-2026-57678

Slider Revolution [revslider] < 7.1.0

High

CVE-2026-13228

Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress [latepoint] < 5.6.4

Critical

CVE-2026-57623

W3 Total Cache [w3-total-cache] < 2.10.0

Medium

CVE-2025-66076

Woostify Sites Library [woostify-sites-library] <= 1.6.2 (unfixed)

Medium

CVE-2026-57335

Quads Ads Manager for Google AdSense [quick-adsense-reloaded] < 3.0.4

Medium

CVE-2026-57627

Kirki – Freeform Page Builder, Website Builder & Customizer [kirki] < 6.0.12

Medium

CVE-2026-13295

Page Builder by SiteOrigin [siteorigin-panels] < 2.34.4

Medium

CVE-2026-11356

Ivory Search – WordPress Search Plugin [add-search-to-menu] < 5.5.16

Medium

CVE-2025-63041

Forget About Shortcode Buttons [forget-about-shortcode-buttons] <= 2.1.3 (unfixed)

High

CVE-2026-57628

WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets [wp-all-import] < 4.1.0

High

CVE-2026-57317

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin [simply-schedule-appointments] < 1.6.12.4

Medium

CVE-2026-13245

MaxButtons – Create buttons [maxbuttons] < 9.8.6

High

CVE-2026-57314

SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments [surecart] < 4.3.3

Medium

CVE-2026-57316

GetGenie – AI Content Writer with Keyword Research & SEO Tracking [getgenie] < 4.4.3

High

CVE-2026-57631

Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 6.0.2

High

CVE-2026-57321

Interactive Content – H5P [h5p] < 1.17.8

High

CVE-2026-57655

Child Theme Wizard [child-theme-wizard] < 1.5

Medium

CVE-2026-57619

Elementor Website Builder – more than just a page builder [elementor] < 4.1.4

Critical

CVE-2026-56070

Advance Product Search- Voice & Ajax Search for WooCommerce [th-advance-product-search] < 1.4.5

High

CVE-2026-56051

TablePress – Tables in WordPress made easy [tablepress] < 3.3.2

High

CVE-2026-56060

Print Invoice & Delivery Notes for WooCommerce [woocommerce-delivery-notes] < 7.1.2

Medium

CVE-2026-57313

SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments [surecart] < 4.2.3

Medium

CVE-2026-56048

Payment Gateway Based Fees and Discounts for WooCommerce [checkout-fees-for-woocommerce] < 3.1.0

Medium

CVE-2026-57622

WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System [wp-cafe] < 3.0.15

High

CVE-2026-57319

FOX – Currency Switcher Professional for WooCommerce [woocommerce-currency-switcher] < 1.4.9

Critical

CVE-2026-56068

JetEngine [jet-engine] < 3.8.11

High

CVE-2026-56041

Responsive Lightbox & Gallery [responsive-lightbox] < 2.7.7

CVE

CVE-2026-10753

Site Kit by Google – Analytics, Search Console, AdSense, Speed [google-site-kit] < 1.176.0

CVE

CVE-2026-9710

Cornerstone [cornerstone] < 7.8.8 (closed)

CVE

CVE-2026-9709

Cornerstone [cornerstone] < 7.8.9 (closed)

CVE

CVE-2026-10749

Post Duplicator [post-duplicator] < 3.0.15

High

CVE-2026-56042

Advanced Order Export For WooCommerce [woo-order-export-lite] < 4.0.10

Medium

CVE-2026-10833

Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 6.2.0

High

CVE-2026-56071

Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.53.2