WordPress Exploited Vulnerabilities
Wordpress vulnerabilities known to be exploited. Over the past 365 days, sorted by exploit discovery date.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Authorization Flaw in Hydra Booking Plugin for WordPress
CVE-2026-92420WordPressHydra Booking — Appoin...👾🟡3.8LOWUnauthorized Profile Modification in Hydra Booking - Appointment Scheduling & Booking Calendar Plugin
CVE-2026-92421WordPressHydra Booking — Appoin...👾🟡4.7MEDIUMObject-Level Authorization Flaw in Hydra Booking Plugin by WordPress
CVE-2026-92425WordPressHydra Booking — Appoin...👾🟡5.5MEDIUMAuthentication Bypass Vulnerability in Rede Itaú for WooCommerce Plugin
CVE-2026-92430WordPressRede Itaú For WooComme...👾🟡5.3MEDIUMSecurity Flaw in Mailchimp for WooCommerce Plugin Exposes Admin Endpoints
CVE-2026-92435WordPressMailchimp For WooCommerce👾🟡5.3MEDIUMUnauthenticated Access Flaw in Online Scheduling Plugin for WordPress
CVE-2026-91847WordPressOnline Scheduling And ...👾🟡4.8MEDIUMUnauthorized Query Submission in WPGraphQL Smart Cache Plugin by WordPress
CVE-2026-92099WordPressWPgraphql Smart Cache👾🟡6.5MEDIUMImproper Form Verification in Secure Custom Fields Plugin for WordPress
CVE-2026-92403WordPressSecure Custom Fields👾🟡3.7LOWAuthorization Flaw in MgoSync Plugin for WordPress Exposes API Credentials
CVE-2026-92404WordPressMgosync👾🟡7.5HIGHStored XSS Vulnerability in Master Blocks WordPress Plugin
CVE-2026-88824WordPressMaster Blocks👾🟡8.8HIGHSQL Injection Vulnerability in VikRentItems Flexible Rental Management System by WordPress
CVE-2026-88926WordPressVikrentitems Flexible ...👾🟡8.6HIGHUnauthorized Configuration Update in Unbounce Landing Pages Plugin for WordPress
CVE-2026-85574WordPressUnbounce Landing Pages👾🟡8HIGHCross-Site Scripting Vulnerability in Ultimate Member Plugin by WordPress
CVE-2026-85680WordPressUltimate Member👾🟡8.8HIGHAuthorization Bypass in Botiga Pro WordPress Plugin
CVE-2026-86591WordPressBotiga Pro👾🟡9.8CRITICALAuthentication Bypass in UsersWP Plugin for WordPress
CVE-2026-86814WordPressUsersWP👾🟡8.1HIGHStored Cross-Site Scripting Vulnerability in Business Name Generator Plugin for WordPress
CVE-2025-15698WordPressBusiness Name Generator👾🟡3.5LOWInadequate PHP Function Restriction in JetFormBuilder Plugin for WordPress
CVE-2026-19860WordPressJetformbuilder — Dynam...👾🟡5.5MEDIUMUnauthorized User Role Manipulation in WP Import Export Lite Plugin
CVE-2026-76554WordPressWP Import Export Lite👾🟡7.2HIGHReflected Cross-Site Scripting Vulnerability in Estatik Real Estate Plugin for WordPress
CVE-2026-76790WordPressEstatik Real Estate Pl...👾🟡7.1HIGHUnrestricted File Upload Vulnerability in Ultra Addons for Contact Form 7 Plugin by WordPress
CVE-2026-84750WordPressUltra Addons For Conta...👾🟡6.5MEDIUMAuthorization Bypass in Nimble Page Builder Plugin by WordPress
CVE-2026-16557WordPressNimble Page Builder👾🟡4.3MEDIUMAuthentication Bypass Vulnerability in Clean Login WordPress Plugin
CVE-2026-90977WordPressClean Login👾🟡5.3MEDIUMUser Registration Bypass in Clean Login Plugin for WordPress
CVE-2026-90976WordPressClean Login👾🟡5.3MEDIUMLoopback Security Flaw in Hide My WP Ghost Plugin for WordPress
CVE-2026-86800WordPressHide My WP Ghost👾🟡5.3MEDIUMLocal File Inclusion in All Bootstrap Blocks Plugin for WordPress
CVE-2026-88994WordPressAll Bootstrap Blocks👾🟡6.6MEDIUM