WordPress Exploited Vulnerabilities
Wordpress vulnerabilities known to be exploited. Over the past 365 days, sorted by exploit discovery date.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Security Flaw in BlindMatrix e-Commerce Plugin for WordPress
CVE-2025-10406WordPressBlindmatrix E-commerce👾🟡5.5MEDIUMEval Injection Vulnerability in is-human Plugin for WordPress by an Unknown Vendor
CVE-2011-10033WordPressIs-human WordPress Plugin👾🟡9.3CRITICALServer-Side Request Forgery in Pz-LinkCard WordPress Plugin
CVE-2025-8594WordPressPz-linkcard👾🟡3.8LOWCross-Site Scripting Vulnerability in Simple SEO Plugin for WordPress
CVE-2025-10357WordPressSimple Seo👾🟡6.1MEDIUMMissing Authentication Vulnerability in Chartify Plugin for WordPress
CVE-2025-11171WordPressChartify – WordPress C...👾🟡5.3MEDIUMGlobal Content Protection Bypass in WP Private Content Plus Plugin
CVE-2025-10720WordPressWP Private Content Plus👾🟡Stored Cross-Site Scripting Vulnerability in Plus Addons for Elementor by WPDeveloper
CVE-2025-9698WordPressThe Plus Addons For El...👾🟡6.8MEDIUMBooking Manager Plugin Vulnerability in WordPress
CVE-2025-10124WordPressBooking Manager👾🟡6.5MEDIUMPrivilege Escalation Vulnerability in Service Finder Bookings Plugin by WordPress
CVE-2025-5947WordPressService Finder Bookings📈👾📰9.8CRITICALSQL Injection Vulnerability in Find Me On Plugin for WordPress
CVE-2025-10635WordPressFind Me On👾🟡7.7HIGHPath Traversal Vulnerability in OrderConvo Plugin for WooCommerce by WordPress
CVE-2025-10162WordPressAdmin And Customer Mes...👾🟡7.5HIGHStored XSS Vulnerability in Responsive Lightbox & Gallery Plugin by WordPress
CVE-2025-9710WordPressResponsive Lightbox & ...👾🟡6.3MEDIUMCross-Site Scripting Vulnerability in Ultimate Addons for Elementor Plugin by WordPress
CVE-2025-9703WordPressUltimate Addons For El...👾🟡4.3MEDIUMUnauthorized Data Access in Vayu Blocks for WordPress and WooCommerce
CVE-2025-2568WordPressVayu Blocks – Gutenber...👾🟡5.3MEDIUMSQL Injection Vulnerability in Ajax WooSearch Plugin by WordPress
CVE-2025-9697WordPressAjax Woosearch👾🟡9.8CRITICALSQL Injection Vulnerability in CTL Behance Importer Lite Plugin
CVE-2025-9587WordPressCtl Behance Importer Lite👾🟡6.5MEDIUMArbitrary File Upload in vcita Online Booking & Scheduling Calendar for WordPress
CVE-2025-54677WordPressOnline Booking & Sched...👾🟡9.1CRITICALCross-site Scripting Vulnerability in WP Chill Passster
CVE-2025-57926WordPressPassster👾🟡6.5MEDIUMSQL Injection Vulnerability in Themeisle WP Full Stripe Free Plugin
CVE-2025-58789WordPressWP Full Stripe Free👾🟡7.6HIGHSQL Injection Vulnerability in License Manager for WooCommerce by Saad Iqbal
CVE-2025-58788WordPressLicense Manager For Wo...👾🟡7.6HIGHStored XSS Vulnerability in Schema & Structured Data for WP & AMP Plugin
CVE-2025-9512WordPressSchema & Structured Da...👾🟡6.1MEDIUMStored Cross-Site Scripting Vulnerability in Postie Plugin for WordPress
CVE-2024-5200WordPressPostie👾🟡6.1MEDIUMArbitrary File Read Vulnerability in Propovoice Client Management System for WordPress
CVE-2025-8422WordPressPropovoice: All-in-one...👾🟡7.5HIGHSQL Injection Vulnerability in JS Archive List by Miguel Useche
CVE-2025-54726WordPressJs Archive List👾🟡9.3CRITICALCross-Site Scripting Vulnerability in SureForms WordPress Plugin
CVE-2025-8282WordPressSureforms👾🟡6.1MEDIUM