WordPress EPSS Rated Vulnerabilities
Wordpress vulnerabilities from the past 365 days which have an EPSS rating.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
SQL Injection and Remote Code Execution in WordPress REST API
CVE-2026-63030WordPressWordPress🥇📈👾🟡EPSS 97%🦅📰9.8CRITICALSQL Injection Vulnerability in WordPress Core Affecting Multiple Versions
CVE-2026-60137WordPressWordPress👾🟡EPSS 78%🦅📰5.9MEDIUMRemote Code Execution Vulnerability in Sneeit Framework Plugin for WordPress
CVE-2025-6389WordPressSneeit Framework👾🟡EPSS 76%9.8CRITICALSensitive Information Exposure in AI Engine Plugin for WordPress
CVE-2025-11749WordPressAi Engine – The Chatbo...EPSS 74%9.8CRITICALRemote Code Execution Vulnerability in Advanced Custom Fields Extended Plugin for WordPress
CVE-2025-13486WordPressAdvanced Custom Fields...👾🟡EPSS 67%9.8CRITICALArbitrary File Upload Vulnerability in Ninja Forms File Uploads Plugin for WordPress
CVE-2026-0740WordPressNinja Forms - File Upl...👾🟡EPSS 62%9.8CRITICALUnauthorized Data Access in Post SMTP Plugin for WordPress
CVE-2025-11833WordPressPost Smtp – Complete E...💰👾EPSS 51%📰9.8CRITICALServer-Side Template Injection in Contact Form by Supsystic for WordPress
CVE-2026-4257WordPressContact Form By Supsystic👾🟡EPSS 41%9.8CRITICALSensitive Information Exposure in Gravity SMTP Plugin for WordPress
CVE-2026-4020WordPressGravity Smtp👾🟡EPSS 39%📰7.5HIGHRemote Code Execution Risk in Everest Forms Pro Plugin by WordPress
CVE-2026-3300WordPressEverest Forms Pro👾🟡EPSS 39%📰9.8CRITICALUnauthenticated Arbitrary File Upload in WPvivid Backup & Migration Plugin by WordPress
CVE-2026-1357WordPressWPvivid — Backup, Migr...👾🟡EPSS 32%9.8CRITICALArbitrary File Upload Vulnerability in WooCommerce Designer Pro Plugin for WordPress
CVE-2025-6440WordPressWooCommerce Designer Pro👾🟡EPSS 31%9.8CRITICALPre-auth Reflected XSS Vulnerability in WordPress
CVE-2026-64638WordPressWordPress🥇📈👾🟡EPSS 31%📰8.9HIGHArbitrary File Upload Vulnerability in Breeze Cache Plugin for WordPress
CVE-2026-3844WordPressBreeze Cache👾🟡EPSS 27%9.8CRITICALArbitrary File Upload Vulnerability in Pix for WooCommerce Plugin by WordPress
CVE-2026-3891WordPressPix For WooCommerce👾🟡EPSS 25%9.8CRITICALImproper Privilege Management in User Registration & Membership Plugin for WordPress
CVE-2026-1492WordPressUser Registration & Me...EPSS 24%9.8CRITICALPrivilege Escalation in WP Maps Pro Plugin by WordPress
CVE-2026-8732WordPressWP Maps Pro📈👾🟡EPSS 21%📰9.8CRITICALPrivilege Escalation in Modular DS by Modular Solutions
CVE-2026-23550WordPressModular Ds🥇📈👾🟡EPSS 20%10CRITICALCommand Injection Vulnerability in W3 Total Cache WordPress Plugin
CVE-2025-9501WordPressW3 Total Cache📈💰👾🟡EPSS 20%📰9CRITICALAuthorization Flaw in Ditty Plugin for WordPress
CVE-2025-8085WordPressDitty👾🟡EPSS 17%8.6HIGHBlind SQL Injection Vulnerability in The Events Calendar Plugin for WordPress
CVE-2025-12197WordPressThe Events CalendarEPSS 17%7.5HIGHAuthentication Bypass Vulnerability in Burst Statistics Plugin for WordPress
CVE-2026-8181WordPressBurst Statistics – Pri...👾🟡EPSS 14%📰9.8CRITICALArbitrary File Upload Vulnerability in Starter Templates Plugin for WordPress
CVE-2025-13065WordPressStarter Templates – Ai...EPSS 13%8.8HIGHServer-Side Request Forgery in Planyo Online Reservation System Plugin for WordPress
CVE-2026-3576WordPressPlanyo Online Reservat...EPSS 12%7.2HIGHArbitrary File Deletion Vulnerability in Snow Monkey Forms Plugin by WordPress
CVE-2026-1056WordPressSnow Monkey Forms👾🟡EPSS 12%9.8CRITICAL