WordPress Plugin CVE Database

Medium

CVE-2026-7533

Easy Digital Downloads – eCommerce Payments and Subscriptions made easy [easy-digital-downloads] < 3.6.8

Medium

CVE-2026-9228

Timetable and Event Schedule by MotoPress [mp-timetable] < 2.4.17

Medium

CVE-2026-7526

PDF Embedder [pdf-embedder] < 5.0.0

High

CVE-2026-7797

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin [simply-schedule-appointments] < 1.6.11.9

Medium

CVE-2026-6937

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin [simply-schedule-appointments] < 1.6.11.9

Medium

CVE-2026-49054

The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid [the-post-grid] < 7.9.3

Medium

CVE-2026-42744

Quads Ads Manager for Google AdSense [quick-adsense-reloaded] < 3.0.3

Medium

CVE-2026-9241

FOX – Currency Switcher Professional for WooCommerce [woocommerce-currency-switcher] < 1.4.7

High

CVE-2026-42736

Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots [bp-better-messages] < 2.15.0

Medium

CVE-2025-14481

Yoast SEO – Advanced SEO with real-time guidance and built-in AI [wordpress-seo] < 26.6

High

CVE-2026-3375

LiteSpeed Cache [litespeed-cache] < 7.8

High

CVE-2026-8832

WPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager [insert-headers-and-footers] < 2.3.6

Medium

CVE-2026-7493

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin [simply-schedule-appointments] < 1.6.11.7

Medium

CVE-2026-24592

Auto Affiliate Links [wp-auto-affiliate-links] < 6.8.9

Medium

CVE-2026-42732

Quads Ads Manager for Google AdSense [quick-adsense-reloaded] < 3.0.3

High

CVE-2026-9284

WooCommerce PayPal Payments [woocommerce-paypal-payments] < 4.0.2

Medium

CVE-2026-7798

FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution [fluent-crm] < 3.0.0

Critical

CVE-2026-6279

Fusion Builder [fusion-builder] < 3.15.3

Medium

CVE-2026-1543

Fusion Builder [fusion-builder] < 3.15.3

CVE

CVE-2026-9065

SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments [surecart] < 4.2.1

Medium

CVE-2026-6566

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 4.2.1

Medium

CVE-2026-8096

Kirki – Freeform Page Builder, Website Builder & Customizer [kirki] < 6.0.7

High

CVE-2026-8073

Kirki – Freeform Page Builder, Website Builder & Customizer [kirki] < 6.0.7

Medium

CVE-2026-5075

All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) [all-in-one-seo-pack] < 4.9.7.1

Medium

CVE-2026-6728

Slider Revolution [revslider] < 7.0.10

Medium

CVE-2025-15369

Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.5.1

Medium

CVE-2026-45442

Presto Player [presto-player] < 4.1.4

CVE

CVE-2026-3220

Speed Optimizer – The All-In-One Performance-Boosting Plugin [sg-cachepress] < 7.7.9

CVE

CVE-2026-6381

WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters [wp-google-map-plugin] < 4.9.3

High

CVE-2026-8719

AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 3.5.0

Medium

CVE-2020-37233

BuddyPress [buddypress] <= 6.2.0 (unfixed)

High

CVE-2026-45438

Smart Coupons For WooCommerce Coupons [wt-smart-coupons-for-woocommerce] < 2.3.0

Medium

CVE-2026-6415

Advanced Custom Fields: Font Awesome Field [advanced-custom-fields-font-awesome] < 6.0.0

High

CVE-2026-4094

FOX – Currency Switcher Professional for WooCommerce [woocommerce-currency-switcher] < 1.4.6

Medium

CVE-2026-5193

Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.6.0

High

CVE-2026-5396

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder [fluentform] < 6.2.0

High

CVE-2026-5395

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder [fluentform] < 6.2.1

High

CVE-2026-3718

ManageWP Worker [worker] < 4.9.32

High

CVE-2026-23970

Redirection for Contact Form 7 [wpcf7-redirect] < 3.2.9

Medium

CVE-2026-5243

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce [the-plus-addons-for-elementor-page-builder] < 6.4.12

Medium

CVE-2026-5365

Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress [latepoint] < 5.4.0

Medium

CVE-2026-6206

MW WP Form [mw-wp-form] < 5.1.3

Medium

CVE-2020-37174

HUSKY – Products Filter Professional for WooCommerce [woocommerce-products-filter] <= 1.2.3 (unfixed)

Medium

CVE-2026-7525

My Calendar – Accessible Event Manager [my-calendar] < 3.7.10

Medium

CVE-2020-37169

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] <= 2.1.3 (unfixed)

Medium

CVE-2026-6828

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder [fluentform] < 6.2.2

Medium

CVE-2026-2515

Hostinger Reach – AI-Powered Email Marketing for WordPress [hostinger-reach] < 1.3.9

Medium

CVE-2025-15463

Advanced Custom Fields: Extended [acf-extended] < 0.9.2.4

High

CVE-2026-5371

MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) [google-analytics-for-wordpress] < 10.1.3

Medium

CVE-2026-4782

Fusion Builder [fusion-builder] < 3.15.3

High

CVE-2026-4798

Fusion Builder [fusion-builder] < 3.15.2

Medium

CVE-2022-50958

Jetpack – WP Security, Backup, Speed, & Growth [jetpack] <= 9.1 (unfixed)

High

CVE-2026-42667

Online Scheduling and Appointment Booking System – Bookly [bookly-responsive-appointment-booking-tool] < 27.5

Medium

CVE-2021-47924

Ultimate Product Catalog [ultimate-product-catalogue] <= 5.8.2 (unfixed)

Medium

CVE-2022-50970

AAWP [aawp] <= 3.16 (unfixed)

Medium

CVE-2026-7652

Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress [latepoint] < 5.5.1

CVE

CVE-2026-4935

OttoKit: All-in-One Automation Platform [suretriggers] < 1.1.23

Medium

CVE-2026-25468

Happy Addons for Elementor [happy-elementor-addons] < 3.21.0

Medium

CVE-2026-27416

PDF Poster – Display PDF Files with Custom Viewer [pdf-poster] < 2.5.0

Medium

CVE-2026-27329

YITH WooCommerce Wishlist [yith-woocommerce-wishlist] < 4.13.0