WordPress EPSS Rated Vulnerabilities
Wordpress vulnerabilities from the past 365 days which have an EPSS rating.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Sensitive Information Exposure in AI Engine Plugin for WordPress
CVE-2025-11749WordPressAi Engine – The Chatbo...EPSS 75%9.8CRITICALRemote Code Execution Vulnerability in Advanced Custom Fields Extended Plugin for WordPress
CVE-2025-13486WordPressAdvanced Custom Fields...👾🟡EPSS 73%9.8CRITICALArbitrary File Upload Vulnerability in Ninja Forms File Uploads Plugin for WordPress
CVE-2026-0740WordPressNinja Forms - File Upl...👾🟡EPSS 54%9.8CRITICALUnauthorized Data Access in Post SMTP Plugin for WordPress
CVE-2025-11833WordPressPost Smtp – Complete E...💰👾EPSS 51%📰9.8CRITICALRemote Code Execution Vulnerability in Sneeit Framework Plugin for WordPress
CVE-2025-6389WordPressSneeit Framework👾🟡EPSS 43%9.8CRITICALServer-Side Template Injection in Contact Form by Supsystic for WordPress
CVE-2026-4257WordPressContact Form By Supsystic👾🟡EPSS 41%9.8CRITICALRemote Code Execution Risk in Everest Forms Pro Plugin by WordPress
CVE-2026-3300WordPressEverest Forms Pro👾🟡EPSS 40%📰9.8CRITICALSensitive Information Exposure in Gravity SMTP Plugin for WordPress
CVE-2026-4020WordPressGravity Smtp👾🟡EPSS 39%📰7.5HIGHArbitrary File Upload Vulnerability in StoryChief Plugin for WordPress
CVE-2025-7441WordPressStorychiefEPSS 39%9.8CRITICALArbitrary File Upload Vulnerability in Breeze Cache Plugin for WordPress
CVE-2026-3844WordPressBreeze Cache👾🟡EPSS 36%9.8CRITICALUnauthenticated Arbitrary File Upload in WPvivid Backup & Migration Plugin by WordPress
CVE-2026-1357WordPressWPvivid — Backup, Migr...👾🟡EPSS 32%9.8CRITICALArbitrary File Upload Vulnerability in WooCommerce Designer Pro Plugin for WordPress
CVE-2025-6440WordPressWooCommerce Designer Pro👾🟡EPSS 31%9.8CRITICALImproper Privilege Management in User Registration & Membership Plugin for WordPress
CVE-2026-1492WordPressUser Registration & Me...EPSS 25%9.8CRITICALPrivilege Escalation in Modular DS by Modular Solutions
CVE-2026-23550WordPressModular Ds🥇📈👾🟡EPSS 20%10CRITICALCommand Injection Vulnerability in W3 Total Cache WordPress Plugin
CVE-2025-9501WordPressW3 Total Cache📈💰👾🟡EPSS 20%📰9CRITICALBlind SQL Injection Vulnerability in The Events Calendar Plugin for WordPress
CVE-2025-12197WordPressThe Events CalendarEPSS 16%7.5HIGHOS Command Injection in WP Database Backup Plugin by WordPress
CVE-2019-25224WordPressWP Database Backup – U...EPSS 16%9.8CRITICALAuthorization Flaw in Ditty Plugin for WordPress
CVE-2025-8085WordPressDitty👾🟡EPSS 16%8.6HIGHUnrestricted File Upload Vulnerability in StoreKeeper for WooCommerce by StoreKeeper B.V.
CVE-2025-48148WordPressStorekeeper For WooCom...EPSS 14%10CRITICALAuthentication Bypass Vulnerability in Burst Statistics Plugin for WordPress
CVE-2026-8181WordPressBurst Statistics – Pri...👾🟡EPSS 14%📰9.8CRITICALRemote Code Execution Vulnerability in Cloudflare Image Resizing Plugin for WordPress
CVE-2025-8723WordPressCloudflare Image Resiz...👾🟡EPSS 13%9.8CRITICALArbitrary File Deletion Vulnerability in Snow Monkey Forms Plugin by WordPress
CVE-2026-1056WordPressSnow Monkey Forms👾🟡EPSS 12%9.8CRITICALSensitive Information Exposure in Featured Image from URL for WordPress
CVE-2025-9985WordPressFeatured Image From Ur...EPSS 11%5.3MEDIUMPrivilege Escalation in WP Maps Pro Plugin by WordPress
CVE-2026-8732WordPressWP Maps Pro📈👾🟡📰9.8CRITICALLocal File Inclusion Vulnerability in Prodigy Commerce Plugin for WordPress
CVE-2026-0926WordPressProdigy Commerce👾🟡9.8CRITICAL