WordPress Exploited Vulnerabilities
Wordpress vulnerabilities known to be exploited. Over the past 365 days, sorted by exploit discovery date.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Authentication Bypass in InfiniteWP Client Plugin for WordPress by InfiniteWP
CVE-2026-15038WordPressInfiniteWP Client👾🟡Improper Input Validation in LWS Optimize Plugin for WordPress
CVE-2026-16032WordPressLws Optimize👾🟡SQL Injection Vulnerability in CubeWP Framework WordPress Plugin
CVE-2026-17017WordPressCubeWP Framework👾🟡Authorization Bypass in Create WordPress Plugin by WordPress
CVE-2026-18037WordPressCreate👾🟡Authorization Bypass in WooCommerce Plugin by WordPress
CVE-2026-18357WordPressWPc Order Tip For WooC...👾🟡Denial of Service Vulnerability in WP MAPS PRO Plugin by WordPress
CVE-2026-18464WordPressWP Maps Pro👾🟡Remote Code Execution Vulnerability in WP MAPS PRO WordPress Plugin
CVE-2026-18465WordPressWP Maps Pro👾🟡SQL Injection Vulnerability in WP Directory Kit Plugin by WordPress
CVE-2026-18473WordPressWP Directory Kit👾🟡Authorization Flaw in WooCommerce Plugin for WordPress Allows Unauthorized Access to Order Details
CVE-2026-18603WordPressPiweb Cancel Order / R...👾🟡Authorization Bypass in GeoDirectory WordPress Plugin
CVE-2026-16988WordPressGeodirectory👾🟡Authorization Bypass in Create WordPress Plugin
CVE-2026-16992WordPressCreate👾🟡Arbitrary CSS Injection Vulnerability in Nexter Blocks Plugin for WordPress
CVE-2026-17011WordPressNexter Blocks👾🟡WordPress Plugin Vulnerability in WP Photo Album Plus Allowing Unauthorized Deletion
CVE-2026-17014WordPressWP Photo Album Plus👾🟡SQL Injection Vulnerability in Iptanus File Upload Plugin for WordPress
CVE-2026-17044WordPressIptanus File Upload👾🟡Vulnerability in WP Data Access Plugin Allows Unauthorized Database Access
CVE-2026-18032WordPressWP Data Access👾🟡Post-Meta Access Vulnerability in Slim SEO Plugin by WordPress
CVE-2026-16957WordPressSlim Seo👾🟡Authentication Bypass in Solace Extra Plugin for WordPress
CVE-2026-16965WordPressSolace Extra👾🟡Access Control Flaw in Solace Extra WordPress Plugin
CVE-2026-16948WordPressSolace Extra👾🟡Unauthorized File Deletion in AI Engine Plugin for WordPress
CVE-2026-16953WordPressAi Engine👾🟡File Path Exposure in AI Engine WordPress Plugin by Developer
CVE-2026-16955WordPressAi Engine👾🟡SQL Injection Vulnerability in WP Directory Kit Plugin Affects WordPress Users
CVE-2026-16589WordPressWP Directory Kit👾🟡Authorization Bypass in WP Directory Kit Plugin by WordPress
CVE-2026-16590WordPressWP Directory Kit👾🟡Unauthorized Access Risk in WP Directory Kit WordPress Plugin by WPScan
CVE-2026-16594WordPressWP Directory Kit👾🟡Authorization Flaw in WP Directory Kit Plugin Affects WordPress Users
CVE-2026-16595WordPressWP Directory Kit👾🟡Unauthenticated Injection Flaw in Download Monitor Plugin by WordPress
CVE-2026-16608WordPressDownload Monitor👾🟡