WordPress EPSS Rated Vulnerabilities
Wordpress vulnerabilities from the past 365 days which have an EPSS rating.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Local File Inclusion in WordPress Leading to Remote Code Execution
CVE-2026-87902WordPressWordPress📈👾🟡EPSS 95%🦅📰8.1HIGHRemote Code Execution Vulnerability in Sneeit Framework Plugin for WordPress
CVE-2025-6389WordPressSneeit Framework👾🟡EPSS 76%9.8CRITICALSensitive Information Exposure in AI Engine Plugin for WordPress
CVE-2025-11749WordPressAi Engine – The Chatbo...EPSS 74%9.8CRITICALSensitive Information Exposure in Gravity SMTP Plugin for WordPress
CVE-2026-4020WordPressGravity Smtp👾🟡EPSS 73%📰7.5HIGHRemote Code Execution Vulnerability in Advanced Custom Fields Extended Plugin for WordPress
CVE-2025-13486WordPressAdvanced Custom Fields...👾🟡EPSS 67%9.8CRITICALArbitrary File Upload Vulnerability in Ninja Forms File Uploads Plugin for WordPress
CVE-2026-0740WordPressNinja Forms - File Upl...👾🟡EPSS 62%9.8CRITICALUnauthorized Data Access in Post SMTP Plugin for WordPress
CVE-2025-11833WordPressPost Smtp – Complete E...💰👾EPSS 61%📰9.8CRITICALServer-Side Template Injection in Contact Form by Supsystic for WordPress
CVE-2026-4257WordPressContact Form By Supsystic👾🟡EPSS 41%9.8CRITICALRemote Code Execution Risk in Everest Forms Pro Plugin by WordPress
CVE-2026-3300WordPressEverest Forms Pro👾🟡EPSS 39%📰9.8CRITICALUnauthenticated Arbitrary File Upload in WPvivid Backup & Migration Plugin by WordPress
CVE-2026-1357WordPressWPvivid — Backup, Migr...👾🟡EPSS 35%9.8CRITICALArbitrary File Upload Vulnerability in Pix for WooCommerce Plugin by WordPress
CVE-2026-3891WordPressPix For WooCommerce👾🟡EPSS 31%9.8CRITICALImproper Privilege Management in User Registration & Membership Plugin for WordPress
CVE-2026-1492WordPressUser Registration & Me...EPSS 28%9.8CRITICALArbitrary File Upload Vulnerability in Breeze Cache Plugin for WordPress
CVE-2026-3844WordPressBreeze Cache👾🟡EPSS 27%9.8CRITICALCommand Injection Vulnerability in W3 Total Cache WordPress Plugin
CVE-2025-9501WordPressW3 Total Cache📈💰👾🟡EPSS 22%📰9CRITICALPrivilege Escalation in Modular DS by Modular Solutions
CVE-2026-23550WordPressModular Ds🥇📈👾🟡EPSS 21%10CRITICALPrivilege Escalation in WP Maps Pro Plugin by WordPress
CVE-2026-8732WordPressWP Maps Pro📈👾🟡EPSS 20%📰9.8CRITICALBlind SQL Injection Vulnerability in The Events Calendar Plugin for WordPress
CVE-2025-12197WordPressThe Events CalendarEPSS 18%7.5HIGHAuthentication Bypass Vulnerability in Burst Statistics Plugin for WordPress
CVE-2026-8181WordPressBurst Statistics – Pri...👾🟡EPSS 14%📰9.8CRITICALArbitrary File Upload Vulnerability in Starter Templates Plugin for WordPress
CVE-2025-13065WordPressStarter Templates – Ai...EPSS 13%8.8HIGHArbitrary File Deletion Vulnerability in Snow Monkey Forms Plugin by WordPress
CVE-2026-1056WordPressSnow Monkey Forms👾🟡EPSS 13%9.8CRITICALSQL Injection and Remote Code Execution in WordPress REST API
CVE-2026-63030WordPressWordPress🥇📈💰👾🟡EPSS 10%🦅📰9.8CRITICALStored Cross-Site Scripting Vulnerability in All-In-One Security Plugin by WordPress
CVE-2026-8438WordPressAll-in-one Security (a...7.2HIGHUnauthenticated Remote Code Execution Vulnerability in Avada Builder Plugin for WordPress
CVE-2026-6279WordPressAvada (fusion) Builder👾🟡9.8CRITICALPrivilege Escalation in King Addons for Elementor Plugin by WordPress
CVE-2025-8489WordPressKing Addons For Elemen...👾📰9.8CRITICALRemote Code Execution Vulnerability in Custom Block Builder Plugin for WordPress
CVE-2026-1560WordPressCustom Block Builder –...8.8HIGH