WordPress Exploited Vulnerabilities
Wordpress vulnerabilities known to be exploited. Over the past 365 days, sorted by exploit discovery date.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Unauthorized Access Vulnerability in BuddyForms WordPress Plugin
CVE-2026-118100WordPressBuddyforms👾🟡Improper Access Control in BuddyForms Plugin Affects WordPress Users
CVE-2026-118101WordPressBuddyforms👾🟡Stored Cross-Site Scripting in Firelight Lightbox Plugin for WordPress
CVE-2026-118165WordPressFirelight Lightbox👾🟡Reflected Cross-Site Scripting Vulnerability in User Frontend Plugin by WordPress
CVE-2026-115277WordPressUser Frontend👾🟡Cross-Site Scripting in WP Visitor Statistics Plugin by WordPress
CVE-2026-117571WordPressWP Visitor Statistics ...👾🟡SQL Injection Vulnerability in WP Visitor Statistics WordPress Plugin
CVE-2026-117572WordPressWP Visitor Statistics ...👾🟡Stored Cross-Site Scripting in Joinchat WordPress Plugin by Joinchat
CVE-2026-118071WordPressJoinchat👾🟡Unauthorized Access Vulnerability in Fraud Prevention Plugin for WooCommerce & EDD
CVE-2026-118072WordPressFraud Prevention For W...👾🟡PHP Object Injection Vulnerability in Enable Media Replace Plugin for WordPress
CVE-2026-114422WordPressEnable Media Replace👾🟡Authentication Bypass in Firewall & Malware Scanner Plugin by WordPress
CVE-2026-114443WordPressSecurity Plugin, Firew...👾🟡File Disclosure Vulnerability in Security Plugin for WordPress by WPScan
CVE-2026-114444WordPressSecurity Plugin, Firew...👾🟡Email Header Injection Vulnerability in Contact Form by Supsystic for WordPress
CVE-2026-115303WordPressContact Form By Supsystic👾🟡3.7LOWFile Upload Vulnerability in Chat AI with Dispatcher Plugin for WordPress
CVE-2026-115245WordPressChat Ai With Dispatcher👾🟡9.8CRITICALAuthorization Failure in Photo Engine Plugin for WordPress
CVE-2026-115259WordPressPhoto Engine (media Or...👾🟡4.9MEDIUMImproper Access Control in Video Player for YouTube Plugin by WordPress
CVE-2026-85007WordPressVideo Player For Youtube👾🟡3.8LOWArbitrary Web Script Injection in Community Events Plugin for WordPress
CVE-2026-86794WordPressCommunity Events👾🟡8.8HIGHComment Management Vulnerability in WP Photo Album Plus Plugin
CVE-2026-110983WordPressWP Photo Album Plus👾🟡4.3MEDIUMTwo-Factor Authentication Vulnerability in WordPress Plugins
CVE-2026-111739WordPressTwo Factor Authentication👾🟡7.5HIGHAuthentication Flaw in LogixFast Auth WordPress Plugin
CVE-2026-113616WordPressLogixfast Auth👾🟡9.8CRITICALFile Path Manipulation Vulnerability in Automated Import Products to Cart Plugin by WordPress
CVE-2026-113617WordPressAutomated Import Produ...👾🟡9.9CRITICALExposure of Protected Listings in GeoDirectory WordPress Plugin
CVE-2026-114270WordPressGeodirectory👾🟡5.3MEDIUMProfile Update Bypass Vulnerability in WP Post Author by WordPress
CVE-2026-108685WordPressWP Post Author👾🟡3.7LOWUnauthorized Access Vulnerability in WP Post Author Plugin by WordPress
CVE-2026-108686WordPressWP Post Author👾🟡3.7LOWAuthorization Bypass in Wallet System for WooCommerce by WordPress
CVE-2026-108763WordPressWallet System For WooC...👾🟡4.3MEDIUMUnauthorized Account Creation in Hide Price Until Login Plugin for WordPress
CVE-2026-110030WordPressHide Price Until Login👾🟡5.3MEDIUM