WordPress Exploited Vulnerabilities
Wordpress vulnerabilities known to be exploited. Over the past 365 days, sorted by exploit discovery date.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Arbitrary File Read Vulnerability in Propovoice Client Management System for WordPress
CVE-2025-8422WordPressPropovoice: All-in-one...👾🟡7.5HIGHSQL Injection Vulnerability in JS Archive List by Miguel Useche
CVE-2025-54726WordPressJs Archive List👾🟡9.3CRITICALCross-Site Scripting Vulnerability in SureForms WordPress Plugin
CVE-2025-8282WordPressSureforms👾🟡6.1MEDIUMStored Cross-Site Scripting Vulnerability in Markup Markdown Plugin by WordPress
CVE-2025-9541WordPressMarkup Markdown👾🟡4.7MEDIUMXSS Vulnerability in Admin and Site Enhancements Plugin for WordPress
CVE-2025-9487WordPressAdmin And Site Enhance...👾🟡4.7MEDIUMStored Cross-Site Scripting Vulnerability in Markup Markdown Plugin
CVE-2025-9540WordPressMarkup Markdown👾🟡4.7MEDIUMReflected Cross-Site Scripting Vulnerability in Etsy Shop WordPress Plugin
CVE-2025-9115WordPressEtsy Shop👾🟡5.6MEDIUMPHP Object Injection Vulnerability in Ninja Forms Plugin by Ninja Squad
CVE-2025-9083WordPressNinja Forms👾🟡9.8CRITICALServer-side Validation Flaw in WP Hotel Booking Plugin by WordPress
CVE-2025-8942WordPressWP Hotel Booking👾🟡9.1CRITICALWeak OTP Code Generation in Password Reset Plugin for WordPress
CVE-2025-5305WordPressPassword Reset With Co...👾🟡9.8CRITICALSQL Injection Vulnerability in CatFolders Plugin for WordPress
CVE-2025-9776WordPressCatfolders – Tame Your...👾🟡6.5MEDIUMReflected Cross-Site Scripting in Contact Form 7 reCAPTCHA Plugin for WordPress
CVE-2025-8280WordPressContact Form 7 Recaptcha👾🟡5.8MEDIUMCross-Site Scripting Vulnerability in jQuery Colorbox Plugin for WordPress
CVE-2025-3650WordPressJquery Colorbox👾🟡3.5LOWOpen Redirect Vulnerability in Wp Edit Password Protected Plugin by WordPress
CVE-2025-9034WordPressWP Edit Password Prote...👾🟡6.1MEDIUMStored Cross-Site Scripting in AI ChatBot for WordPress Plugin by WordPress
CVE-2025-9111WordPressAi Chatbot For WordPress👾🟡6.1MEDIUMImproper File Validation in Compress & Upload Plugin for WordPress
CVE-2025-8889WordPressCompress & Upload👾🟡6.5MEDIUMAuthorization Flaw in Ditty Plugin for WordPress
CVE-2025-8085WordPressDitty👾🟡8.6HIGHSQL Injection Vulnerability in ELEX WooCommerce Google Shopping Plugin for WordPress
CVE-2025-10046WordPressElex WooCommerce Googl...👾🟡4.9MEDIUMOption Update Vulnerability in OceanWP WordPress Theme
CVE-2025-8944WordPressOceanWP👾🟡4.3MEDIUMUnauthorized File Upload Vulnerability in N-Media File Manager
CVE-2016-15042WordpressN-media Post Front-end...👾🟡EPSS 72%9.8CRITICALStored Cross-Site Scripting in Sticky Side Buttons WordPress Plugin
CVE-2023-3666WordPressSticky Side Buttons👾🟡3.3LOWReflected Cross-Site Scripting Vulnerability in WP Talroo Plugin for WordPress
CVE-2025-8281WordPressWP Talroo👾🟡7.1HIGHRemote Code Execution Vulnerability in Cloudflare Image Resizing Plugin for WordPress
CVE-2025-8723WordPressCloudflare Image Resiz...👾🟡9.8CRITICALReflected Cross-Site Scripting Vulnerability in Ebook Store WordPress Plugin
CVE-2025-8113WordPressEbook Store👾🟡6.1MEDIUMJavaScript Backdoor Vulnerability in Pixterme Plugins for WordPress
CVE-2025-8047WordPressDisable-right-click-po...👾🟡9.8CRITICAL