WordPress EPSS Rated Vulnerabilities
Wordpress vulnerabilities from the past 365 days which have an EPSS rating.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Authentication Bypass Vulnerability in Two-Factor Authentication
CVE-2024-10924WordpressReally Simple Security...📈👾🟡EPSS 93%📰9.8CRITICALSQL Injection Vulnerability in Tutor LMS Plugin for WordPress Could Leak Sensitive Data
CVE-2024-10400WordpressTutor Lms – Elearning ...👾🟡EPSS 92%7.5HIGHWordPress Plugin Vulnerable to Path Traversal Attacks
CVE-2024-9935WordpressPDF Generator Addon Fo...👾🟡EPSS 92%7.5HIGHCode Injection Vulnerability Affects WP Query Console
CVE-2024-50498WordPressWP Query Console👾🟡EPSS 92%9.8CRITICALUnauthenticated Arbitrary File Uploads Vulnerability in GutenKit Page Builder
CVE-2024-9234WordpressGutenkit – Page Builde...👾🟡EPSS 92%9.8CRITICALArbitrary File Read Vulnerability in Error Log Viewer by WP Guru Plugin
CVE-2024-12849WordpressError Log Viewer By WP...👾🟡EPSS 92%7.5HIGHUnauthenticated Attackers Can Read or Delete Files via Path Traversal Flaw in WordPress File Upload Plugin
CVE-2024-9047WordpressWordPress File Upload👾🟡EPSS 92%9.8CRITICALUnauthenticated File Upload Vulnerability Affects WP Time Capsule Backup and Staging Plugin
CVE-2024-8856WordpressBackup And Staging By ...👾🟡EPSS 91%📰9.8CRITICALAuth Bypass Vulnerability in LiteSpeed Cache
CVE-2024-44000WordPressLitespeed Cache👾🟡EPSS 91%9.8CRITICALWordPress Integrate Google Drive plugin <= 1.1.99 - Unauthenticated Broken Access Control vulnerability
CVE-2023-32117WordPressIntegrate Google DriveEPSS 91%9.8CRITICALAuthentication Bypass Vulnerability in WordPress Crypto Plugin
CVE-2024-9989WordpressCrypto ToolEPSS 91%9.8CRITICALAuthorization Flaw in Hunk Companion Plugin for WordPress
CVE-2024-11972WordpressHunk Companion👾🟡EPSS 91%9.8CRITICALLocal File Inclusion Vulnerability in HUSKY Products Filter for WooCommerce by WordPress
CVE-2025-1661WordPressHusky – Products Filte...📈👾🟡EPSS 90%9.8CRITICALUnauthorized Plugin Installation/Activation Vulnerability Affects Hunk Companion for WordPress
CVE-2024-9707WordpressHunk Companion👾🟡EPSS 87%9.8CRITICALUnauthenticated Arbitrary File Upload Vulnerability Affects Wux Blog Editor Plugin
CVE-2024-9932Wordpress👾🟡EPSS 86%9.8CRITICALSevere SSRF Vulnerability in SoftLab Radio Player Affects Multiple Versions
CVE-2024-54385WordPressRadio Player👾🟡EPSS 86%7.2HIGHLocal File Inclusion Vulnerability in WP Umbrella Plugin for WordPress
CVE-2024-12209WordpressWP Umbrella: Update Ba...👾🟡EPSS 85%9.8CRITICALUnauthenticated SQL Injection Vulnerability in LearnPress LMS Plugin
CVE-2024-8522WordpressLearnpress – WordPress...👾🟡EPSS 83%7.5HIGHAuthentication Bypass Vulnerability in SureTriggers Automation Platform Plugin for WordPress
CVE-2025-3102WordPressOttokit: All-in-one Au...👾EPSS 82%📰8.1HIGHUnauthorized Access to Arbitrary Shortcodes via wp_ajax_nopriv_shortcode_Api_Add AJAX Action
CVE-2024-9061WordpressWP Popup Builder👾🟡EPSS 81%9.8CRITICALWordPress Yet Another Related Posts Plugin (YARPP) plugin <= 5.30.10 - Broken Access Control vulnerability
CVE-2024-43919WordPressYarpp👾🟡EPSS 81%9.8CRITICALUnauthenticated Local File Inclusion Vulnerability in Chartify for WordPress
CVE-2024-10571WordpressChartify👾🟡EPSS 80%9.8CRITICALPrivilege Escalation in User Registration & Membership Plugin by WordPress
CVE-2025-2563WordPressUser Registration & Me...📈👾🟡EPSS 79%📰8.1HIGHSQL Injection Vulnerability in The Events Calendar Plugin for WordPress
CVE-2024-8275WordpressThe Events CalendarEPSS 78%9.8CRITICALAuthentication Bypass Through Alternate Path or Channel Vulnerability
CVE-2024-50477WordPressStacks Mobile App Builder👾🟡EPSS 77%9.8CRITICAL