WP Clinic
Log in Sign up

CVE DATABASE

WordPress Plugin CVE Database

1000 known WordPress plugin CVEs, checked against WP Clinic's local security database.

High

CVE-2026-53674

BuddyPress [buddypress] <= 14.4.0 (unfixed)

High

CVE-2026-53673

BuddyPress [buddypress] <= 14.4.0 (unfixed)

Critical

CVE-2026-49080

wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin [wpdatatables] < 7.4

Medium

CVE-2026-7542

Slider Revolution [revslider] < 7.0.11

Critical

CVE-2026-49772

The Events Calendar [the-events-calendar] < 6.16.3

Medium

CVE-2021-47983

Accept Stripe Payments [stripe-payments] <= 2.0.39 (unfixed)

Critical

CVE-2026-49075

JetEngine [jet-engine] < 3.8.10

High

CVE-2026-49074

JetEngine [jet-engine] < 3.8.10

Critical

CVE-2026-49076

JetEngine [jet-engine] < 3.8.10

Critical

CVE-2026-49084

JetEngine [jet-engine] < 3.8.9.1

Medium

CVE-2026-7665

Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.6.5

Medium

CVE-2026-9197

Smart Slider 3 [smart-slider-3] < 3.5.1.37

Medium

CVE-2026-7795

Click to Chat – HoliThemes [click-to-chat-for-whatsapp] < 4.40

Low

CVE-2025-12656

WPvivid — Backup, Migration & Staging [wpvivid-backuprestore] < 0.9.129

Medium

CVE-2026-7792

WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More [wpforms-lite] < 1.10.0.5

High

CVE-2026-5415

Advanced Google reCAPTCHA [advanced-google-recaptcha] < 5.39

High

CVE-2026-5411

Advanced Google reCAPTCHA [advanced-google-recaptcha] < 5.39

Medium

CVE-2026-9280

Ad Inserter – Ad Manager & AdSense Ads [ad-inserter] < 2.8.16

Medium

CVE-2026-9594

WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters [wp-google-map-plugin] < 4.9.5

CVE

CVE-2026-8385

WP Go Maps – Google Map, OpenStreetMap, Leaflet Map [wp-google-maps] < 10.0.10

Medium

CVE-2026-7796

EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents [embedpress] < 4.5.4

Medium

CVE-2026-9719

Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress [latepoint] < 5.6.1

High

CVE-2026-49083

Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress [latepoint] < 5.5.2

Medium

CVE-2026-8976

RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator [feedzy-rss-feeds] < 5.1.8

High

CVE-2026-9290

WP User Manager – User Profile Builder & Membership [wp-user-manager] < 2.9.18

Critical

CVE-2026-49766

WP User Manager – User Profile Builder & Membership [wp-user-manager] < 2.9.17

High

CVE-2026-49113

Cornerstone [cornerstone] < 7.8.8 (closed)

High

CVE-2026-10586

Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 6.1.4

Critical

CVE-2026-49781

OttoKit: All-in-One Automation Platform [suretriggers] < 1.1.28

Medium

CVE-2026-48969

Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) [really-simple-ssl] < 9.5.10

High

CVE-2026-48970

Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) [really-simple-ssl] < 9.5.10.1

Medium

CVE-2026-34892

Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.271.1

High

CVE-2026-49056

WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels [print-invoices-packing-slip-labels-for-woocommerce] < 4.9.5

Medium

CVE-2026-49782

Elementor Website Builder – more than just a page builder [elementor] < 4.1.1

CVE

CVE-2026-8293

Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) [really-simple-ssl] < 9.5.10.1

High

CVE-2026-48889

Booking for Appointments and Events Calendar – Amelia [ameliabooking] < 2.4

Medium

CVE-2026-3722

Auto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Title For Image SEO) [auto-image-attributes-from-filename-with-bulk-updater] < 4.9.1

Critical

CVE-2026-8206

Kirki – Freeform Page Builder, Website Builder & Customizer [kirki] < 6.0.7

High

CVE-2026-48839

WP Statistics – Simple, privacy-friendly Google Analytics alternative [wp-statistics] < 14.16.7

Medium

CVE-2026-9050

Slider Revolution [revslider] < 6.7.56

Medium

CVE-2026-9048

Slider Revolution [revslider] < 7.0.15

High

CVE-2026-48872

EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents [embedpress] < 4.5.3

High

CVE-2026-48871

MW WP Form [mw-wp-form] < 5.1.4

Critical

CVE-2026-48866

Gravity Forms [gravityforms] < 2.10.1

Medium

CVE-2026-8382

Advanced Custom Fields (ACF®) [advanced-custom-fields] < 6.8.2

Medium

CVE-2026-42752

Accept Stripe Payments [stripe-payments] < 2.0.99

High

CVE-2026-7465

Spectra Legacy – Gutenberg Blocks [ultimate-addons-for-gutenberg] < 2.19.26

High

CVE-2026-48838

Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App [post-smtp] < 3.6.3

High

CVE-2026-48835

WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More [wpforms-lite] < 1.10.0.5

Critical

CVE-2026-8809

Advanced Custom Fields: Extended [acf-extended] < 0.9.2.6

Medium

CVE-2025-12714

Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.271.1

High

CVE-2026-27407

AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 3.5.0

High

CVE-2026-6075

Media Library Assistant [media-library-assistant] < 3.36

Medium

CVE-2026-9243

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce [the-plus-addons-for-elementor-page-builder] < 6.4.16

High

CVE-2026-39447

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin [simply-schedule-appointments] < 1.6.11.0

Medium

CVE-2026-49053

ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] <= 3.9.6 (unfixed)

Medium

CVE-2026-49052

ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] <= 3.9.6 (unfixed)

High

CVE-2026-42749

Disable Comments & Delete All Comments [comments-plus] < 1.3.1

Medium

CVE-2026-49044

Advanced Custom Fields: Font Awesome Field [advanced-custom-fields-font-awesome] < 6.0.0

Medium

CVE-2026-49059

Meta for WooCommerce [facebook-for-woocommerce] < 3.7.1

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

Browse all security findings WordPress Plugin Security Directory