WordPress Exploited Vulnerabilities
Wordpress vulnerabilities known to be exploited. Over the past 365 days, sorted by exploit discovery date.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Unauthorized Deactivation of ThumbPress Plugin by Authenticated Users
CVE-2026-13432WordPressThumbpress👾🟡5.4MEDIUMInsufficient User Permissions in Elementor Website Builder Plugin for WordPress
CVE-2026-8825WordPressElementor Website Builder👾🟡4.9MEDIUMCross-Site Scripting Vulnerability in Tag Groups Plugin for WordPress
CVE-2026-9833WordPressTag Groups Is The Adva...👾🟡7.1HIGHAuthorization Vulnerability in PayPlus Payment Gateway Plugin for WordPress
CVE-2026-12972WordPressPayplus Payment Gateway👾🟡5.3MEDIUMAuthorization Bypass in PayPlus Payment Gateway Plugin for WordPress
CVE-2026-12973WordPressPayplus Payment Gateway👾🟡6.5MEDIUMPasswordless Email OTP Vulnerability in Social Login by WordPress
CVE-2026-13142WordPressSocial Login, Passkeys...👾🟡Server-Side Request Forgery Vulnerability in Kirki WordPress Plugin by David E. Heddings
CVE-2026-13147WordPressKirki👾🟡9.1CRITICALLocal File Deletion Vulnerability in MailerSend WordPress Plugin by MailerSend
CVE-2026-13156WordPressMailersend👾🟡5.4MEDIUMCross-Site Scripting Vulnerability in SlimStat Analytics WordPress Plugin
CVE-2026-12592WordPressSlimstat Analytics👾🟡7.5HIGHAuthorization Bypass Vulnerability in Kirki WordPress Plugin
CVE-2026-12723WordPressKirki👾🟡5.3MEDIUMInjection Vulnerability in Kirki WordPress Plugin Affects Unauthorized Users
CVE-2026-12724WordPressKirki👾🟡4.3MEDIUMImproper Input Validation in All-in-One WP Migration and Backup Plugin by WordPress
CVE-2026-12898WordPressAll-in-one WP Migratio...👾🟡6.5MEDIUMReflected Cross-Site Scripting Vulnerability in LearnPress WordPress Plugin
CVE-2026-12970WordPressLearnpress👾🟡7.1HIGHAccess Control Vulnerability in All in One SEO Plugin by WordPress
CVE-2026-10755WordPressAll In One Seo👾🟡2.7LOWUnauthenticated SQL Injection Risk in Modern Event Calendar Pro and Lite by WordPress
CVE-2026-11349WordPressModern Event Calendar Pro👾🟡8.6HIGHUnauthorized Cancellation Vulnerability in WP Travel Plugin by WordPress
CVE-2026-11868WordPressWP Travel👾🟡5.3MEDIUMStored XSS Vulnerability in Unlimited Elements For Elementor Plugin
CVE-2026-10081WordPressUnlimited Elements For...👾🟡8.8HIGHExecution of Arbitrary Shortcodes in Reviews Feed Plugin for WordPress
CVE-2026-10724WordPressReviews Feed👾🟡4.8MEDIUMSQL Injection Vulnerability in WordPress Core Affecting Multiple Versions
CVE-2026-60137WordPressWordPress👾🟡5.9MEDIUMSQL Injection and Remote Code Execution in WordPress REST API
CVE-2026-63030WordPressWordPress🥇📈👾🟡📰9.8CRITICALUser Registration & Membership Plugin Flaw Allows Unauthorized Role Assignments
CVE-2026-11961WordPressUser Registration & Me...👾🟡8.1HIGHUser Registration & Membership Plugin Vulnerability in WordPress
CVE-2026-11966WordPressUser Registration & Me...👾🟡5.3MEDIUMInsecure User Privilege Management in WPS Bookings for WooCommerce Plugin
CVE-2026-12393WordPressWPs Bookings For WooCo...👾🟡5.4MEDIUMUnauthorized Access Vulnerability in Royal Addons for Elementor Plugin
CVE-2026-13402WordPressRoyal Addons For Eleme...👾🟡5.3MEDIUMOAuth Token Misconfiguration in AI Copilot Plugin for WordPress
CVE-2026-9810WordPressAi Copilot👾🟡9.8CRITICAL