WordPress EPSS Rated Vulnerabilities
Wordpress vulnerabilities from the past 365 days which have an EPSS rating.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
SQL Injection and Remote Code Execution in WordPress REST API
CVE-2026-63030WordPressWordPress🥇📈👾🟡EPSS 95%🦅📰9.8CRITICALSensitive Information Exposure in AI Engine Plugin for WordPress
CVE-2025-11749WordPressAi Engine – The Chatbo...EPSS 74%9.8CRITICALRemote Code Execution Vulnerability in Advanced Custom Fields Extended Plugin for WordPress
CVE-2025-13486WordPressAdvanced Custom Fields...👾🟡EPSS 74%9.8CRITICALSQL Injection Vulnerability in WordPress Core Affecting Multiple Versions
CVE-2026-60137WordPressWordPress👾🟡EPSS 73%🦅📰5.9MEDIUMRemote Code Execution Vulnerability in Sneeit Framework Plugin for WordPress
CVE-2025-6389WordPressSneeit Framework👾🟡EPSS 73%9.8CRITICALArbitrary File Upload Vulnerability in Ninja Forms File Uploads Plugin for WordPress
CVE-2026-0740WordPressNinja Forms - File Upl...👾🟡EPSS 57%9.8CRITICALUnauthorized Data Access in Post SMTP Plugin for WordPress
CVE-2025-11833WordPressPost Smtp – Complete E...💰👾EPSS 51%📰9.8CRITICALSensitive Information Exposure in Gravity SMTP Plugin for WordPress
CVE-2026-4020WordPressGravity Smtp👾🟡EPSS 41%📰7.5HIGHServer-Side Template Injection in Contact Form by Supsystic for WordPress
CVE-2026-4257WordPressContact Form By Supsystic👾🟡EPSS 41%9.8CRITICALRemote Code Execution Risk in Everest Forms Pro Plugin by WordPress
CVE-2026-3300WordPressEverest Forms Pro👾🟡EPSS 40%📰9.8CRITICALArbitrary File Upload Vulnerability in StoryChief Plugin for WordPress
CVE-2025-7441WordPressStorychiefEPSS 39%9.8CRITICALArbitrary File Upload Vulnerability in Breeze Cache Plugin for WordPress
CVE-2026-3844WordPressBreeze Cache👾🟡EPSS 36%9.8CRITICALUnauthenticated Arbitrary File Upload in WPvivid Backup & Migration Plugin by WordPress
CVE-2026-1357WordPressWPvivid — Backup, Migr...👾🟡EPSS 32%9.8CRITICALArbitrary File Upload Vulnerability in WooCommerce Designer Pro Plugin for WordPress
CVE-2025-6440WordPressWooCommerce Designer Pro👾🟡EPSS 31%9.8CRITICALImproper Privilege Management in User Registration & Membership Plugin for WordPress
CVE-2026-1492WordPressUser Registration & Me...EPSS 24%9.8CRITICALPrivilege Escalation in Modular DS by Modular Solutions
CVE-2026-23550WordPressModular Ds🥇📈👾🟡EPSS 20%10CRITICALCommand Injection Vulnerability in W3 Total Cache WordPress Plugin
CVE-2025-9501WordPressW3 Total Cache📈💰👾🟡EPSS 20%📰9CRITICALPrivilege Escalation in WP Maps Pro Plugin by WordPress
CVE-2026-8732WordPressWP Maps Pro📈👾🟡EPSS 19%📰9.8CRITICALAuthorization Flaw in Ditty Plugin for WordPress
CVE-2025-8085WordPressDitty👾🟡EPSS 17%8.6HIGHBlind SQL Injection Vulnerability in The Events Calendar Plugin for WordPress
CVE-2025-12197WordPressThe Events CalendarEPSS 17%7.5HIGHUnrestricted File Upload Vulnerability in StoreKeeper for WooCommerce by StoreKeeper B.V.
CVE-2025-48148WordPressStorekeeper For WooCom...EPSS 15%10CRITICALRemote Code Execution Vulnerability in Cloudflare Image Resizing Plugin for WordPress
CVE-2025-8723WordPressCloudflare Image Resiz...👾🟡EPSS 14%9.8CRITICALAuthentication Bypass Vulnerability in Burst Statistics Plugin for WordPress
CVE-2026-8181WordPressBurst Statistics – Pri...👾🟡EPSS 14%📰9.8CRITICALArbitrary File Upload Vulnerability in Starter Templates Plugin for WordPress
CVE-2025-13065WordPressStarter Templates – Ai...EPSS 13%8.8HIGHArbitrary File Deletion Vulnerability in Snow Monkey Forms Plugin by WordPress
CVE-2026-1056WordPressSnow Monkey Forms👾🟡EPSS 12%9.8CRITICAL