WordPress Exploited Vulnerabilities
Wordpress vulnerabilities known to be exploited. Over the past 365 days, sorted by exploit discovery date.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
User Enumeration Bypass in Stop User Enumeration Plugin for WordPress
CVE-2025-4302WordPressStop User Enumeration👾🟡5.3MEDIUMStored Cross-Site Scripting Vulnerability in GeoDirectory Plugin for WordPress
CVE-2025-6200WordPressGeodirectory👾🟡5.9MEDIUMArbitrary Post Title Disclosure in Order Delivery Date WordPress Plugin by WordPress
CVE-2025-2942WordPressOrder Delivery Date👾🟡4.3MEDIUMStored Cross-Site Scripting Vulnerability in Hostel Plugin by WordPress
CVE-2025-6236WordPressHostel👾🟡4.8MEDIUMReflected Cross-Site Scripting Vulnerability in Hostel Plugin by WordPress
CVE-2025-6234WordPressHostel👾🟡6.1MEDIUMSQL Injection Vulnerability in Events Manager Plugin for WordPress
CVE-2025-6970WordPressEvents Manager – Calen...👾🟡7.5HIGHAuthentication Bypass in WordPress Pie Register Plugin
CVE-2025-34077WordPressWordPress Pie Register...👾🟡10CRITICALCross-site Scripting Vulnerability in Melipayamak by Melipayamak
CVE-2025-30940WordPressMelipayamak👾📰5.9MEDIUMCross-Site Request Forgery Vulnerability in 07FLYCMS and Related Products
CVE-2025-7078WordPress07flycms👾🟡5.3MEDIUMImproper Access Control in Sharable Password Protected Posts by WordPress
CVE-2025-5920WordPressSharable Password Prot...👾🟡7.5HIGHUnrestricted File Upload Vulnerability in AiBud WP Plugin
CVE-2025-23968WordPressAibud WP👾🟡9.1CRITICALPrivilege Escalation Vulnerability in Opal Estate Pro Plugin for WordPress
CVE-2025-6934WordPressOpal Estate Pro – Prop...👾🟡9.8CRITICALArbitrary File Deletion in Forminator Forms Plugin for WordPress
CVE-2025-6463WordPressForminator Forms – Con...👾📰8.8HIGHXSS Vulnerability in WP Lightbox 2 Plugin by WordPress
CVE-2025-3745WordPressWP Lightbox 2👾🟡6.3MEDIUMStored Cross-Site Scripting in Contact Form Plugin by WordPress
CVE-2025-5730WordPressContact Form Plugin👾🟡4.3MEDIUMStored Cross-Site Scripting Vulnerability in Event RSVP and Simple Event Management Plugin for WordPress
CVE-2025-5540WordPressEvent Rsvp And Simple ...👾📰5.4MEDIUMAccess Control Flaw in BuddyPress Docs Plugin
CVE-2025-5526WordPressBuddypress Docs👾🟡4.3MEDIUMStored Cross-Site Scripting in WP Map Block WordPress Plugin
CVE-2025-5194WordPressWP Map Block👾🟡4.8MEDIUMStored Cross-Site Scripting Vulnerability in Responsive Lightbox & Gallery Plugin by WordPress
CVE-2025-5093WordPressResponsive Lightbox & ...👾🟡5.4MEDIUMStored Cross-Site Scripting Vulnerability in Firelight Lightbox Plugin for WordPress
CVE-2025-5035WordPressFirelight Lightbox👾🟡5.4MEDIUMPrivilege Escalation Vulnerability in Simple User Registration Plugin for WordPress
CVE-2025-4334WordPressSimple User Registration👾🟡9.8CRITICALSQL Injection vulnerability in TI WooCommerce Wishlist
CVE-2024-43917WordPressTi WooCommerce Wishlist👾🟡EPSS 82%9.8CRITICALArbitrary File Upload Vulnerability in ZoomSounds Plugin by WordPress
CVE-2021-4457WordPressZoomsounds👾🟡9.1CRITICALArbitrary File Upload Vulnerability in Download Plugin for WordPress
CVE-2025-6586WordPressDownload Plugin👾🟡7.2HIGHArbitrary File Upload Vulnerability in Drag and Drop Multiple File Upload for Contact Form 7 by WordPress
CVE-2025-3515WordPressDrag And Drop Multiple...👾🟡8.1HIGH