WordPress Plugin CVE Database

Medium

CVE-2026-25420

MailerLite – Signup forms (official) [official-mailerlite-sign-up-forms] < 1.7.19

High

CVE-2025-67974

Privacy Policy Generator – WPLP Legal Pages [wplegalpages] < 3.5.5

High

CVE-2026-25316

CartFlows – Funnel Builder & Checkout Plugin for WooCommerce [cartflows] < 2.2.0

Medium

CVE-2026-25313

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder [fluentform] < 6.1.15

Medium

CVE-2026-24539

Protección de datos – RGPD [proteccion-datos-rgpd] < 0.69

High

CVE-2025-68999

Happy Addons for Elementor [happy-elementor-addons] < 3.20.6

Medium

CVE-2025-14069

Schema & Structured Data for WP & AMP [schema-and-structured-data-for-wp] < 1.54.1

Medium

CVE-2025-14745

WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content [wp-rss-aggregator] < 5.0.11

High

CVE-2025-68047

Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) [wp-event-solution] < 4.1.4

High

CVE-2024-11976

BuddyPress [buddypress] < 14.3.4

Medium

CVE-2025-15522

Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin [uncanny-automator] < 7.0.0

High

CVE-2025-15380

NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar [notificationx] < 3.2.1

Medium

CVE-2025-15043

The Events Calendar [the-events-calendar] < 6.15.13.1

Medium

CVE-2025-69315

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin [simply-schedule-appointments] < 1.6.9.17

Critical

CVE-2025-67945

MailerLite – WooCommerce integration [woo-mailerlite] < 3.1.3

Critical

CVE-2025-14533

Advanced Custom Fields: Extended [acf-extended] < 0.9.2.2

Medium

CVE-2026-25453

Advanced iFrame [advanced-iframe] < 2026.0

Medium

CVE-2026-24580

Ecwid by Lightspeed Ecommerce Shopping Cart [ecwid-shopping-cart] < 7.0.6

Critical

CVE-2025-69312

Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons] < 1.4.20

Medium

CVE-2026-25308

Simple Membership [simple-membership] < 4.7.0

Medium

CVE-2025-69300

Premium Addons for Elementor – Powerful Elementor Templates & Widgets [premium-addons-for-elementor] < 4.11.64

Medium

CVE-2026-24982

Spectra Legacy – Gutenberg Blocks [ultimate-addons-for-gutenberg] < 2.19.18

Medium

CVE-2025-12129

CubeWP Framework [cubewp-framework] < 1.1.28

Medium

CVE-2025-12984

Advanced Ads – Ad Manager & AdSense [advanced-ads] < 2.0.16

Medium

CVE-2025-12825

User Registration Using Contact Form 7 [user-registration-using-contact-form-7] < 2.6

Medium

CVE-2026-27042

NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar [notificationx] < 3.2.2

Medium

CVE-2025-14384

All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) [all-in-one-seo-pack] < 4.9.3

Medium

CVE-2026-25472

Fusion Builder [fusion-builder] < 3.14.2

Medium

CVE-2025-14982

Booking Calendar [booking] < 10.14.12

Medium

CVE-2025-15370

Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning [wp-simple-firewall] < 21.0.10

Medium

CVE-2026-24596

Related Posts Thumbnails Plugin for WordPress [related-posts-thumbnails] < 4.3.3

Medium

CVE-2025-14375

WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content [wp-rss-aggregator] < 5.0.11

High

CVE-2025-12166

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin [simply-schedule-appointments] < 1.6.9.13

Medium

CVE-2025-69001

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder [fluentform] < 6.1.12

Medium

CVE-2023-54332

Jetpack – WP Security, Backup, Speed, & Growth [jetpack] == 11.4

Medium

CVE-2020-36919

WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More [wpforms-lite] == 1.7.8

Medium

CVE-2026-24360

Seriously Simple Podcasting [seriously-simple-podcasting] < 3.14.2

Medium

CVE-2026-24613

Ecwid by Lightspeed Ecommerce Shopping Cart [ecwid-shopping-cart] < 7.0.7

Critical

CVE-2025-15030

User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.15.2

Medium

CVE-2026-24967

Booking for Appointments and Events Calendar – Amelia [ameliabooking] < 2.0

Medium

CVE-2025-14555

Countdown Timer – Widget Countdown [widget-countdown] < 2.7.8

Medium

CVE-2025-13393

Featured Image from URL (FIFU) [featured-image-from-url] < 5.3.2

High

CVE-2025-14975

Custom Login Page Customizer [login-customizer] < 2.5.4

Medium

CVE-2025-14720

Booking for Appointments and Events Calendar – Amelia [ameliabooking] < 2.0.0

Medium

CVE-2025-14146

Booking Calendar [booking] < 10.14.11

High

CVE-2025-14657

Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) [wp-event-solution] < 4.0.52

Medium

CVE-2025-14782

Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.49.2

Medium

CVE-2025-12640

Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager [folders] < 3.1.6

Medium

CVE-2025-47500

Stackable – Page Builder Gutenberg Blocks [stackable-ultimate-gutenberg-blocks] < 3.19.6

Medium

CVE-2025-14275

Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress [jeg-elementor-kit] < 3.0.2

Medium

CVE-2025-13722

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder [fluentform] < 6.1.8

Medium

CVE-2025-69352

The Events Calendar [the-events-calendar] < 6.15.13

Medium

CVE-2025-69345

Post and Page Builder by BoldGrid – Visual Drag and Drop Editor [post-and-page-builder] < 1.27.10

Medium

CVE-2025-12067

Table Field Add-on for ACF and SCF [advanced-custom-fields-table-field] < 1.3.31

High

CVE-2025-15364

Download Manager [download-manager] < 3.3.41

Medium

CVE-2025-11723

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin [simply-schedule-appointments] < 1.6.9.6

Medium

CVE-2026-24356

GetGenie – AI Content Writer with Keyword Research & SEO Tracking [getgenie] < 4.3.1

Medium

CVE-2025-14371

Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms [simple-tags] < 3.42.0

Medium

CVE-2026-24636

Sugar Calendar – Events Calendar, Event Tickets, and Events Management Platform [sugar-calendar-lite] < 3.10.0

High

CVE-2025-67923

JetEngine [jet-engine] < 3.7.8