WordPress Exploited Vulnerabilities
Wordpress vulnerabilities known to be exploited. Over the past 365 days, sorted by exploit discovery date.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Reflected Cross-Site Scripting Vulnerability in WP Talroo Plugin for WordPress
CVE-2025-8281WordPressWP Talroo👾🟡7.1HIGHRemote Code Execution Vulnerability in Cloudflare Image Resizing Plugin for WordPress
CVE-2025-8723WordPressCloudflare Image Resiz...👾🟡9.8CRITICALReflected Cross-Site Scripting Vulnerability in Ebook Store WordPress Plugin
CVE-2025-8113WordPressEbook Store👾🟡6.1MEDIUMJavaScript Backdoor Vulnerability in Pixterme Plugins for WordPress
CVE-2025-8047WordPressDisable-right-click-po...👾🟡9.8CRITICALREST API Content Exposure in PPWP – Password Protect Pages WordPress Plugin
CVE-2025-5998WordPressPpWP – Password Protec...👾🟡6.5MEDIUMReflected Cross-Site Scripting Vulnerability in Injection Guard Plugin for WordPress
CVE-2025-8046WordPressInjection Guard👾🟡6.1MEDIUMCSRF Vulnerability in Quiz and Survey Master Plugin for WordPress
CVE-2025-6790WordPressQuiz And Survey Master...👾🟡4.3MEDIUMReflected Cross-Site Scripting Vulnerability in WP Shopify Plugin
CVE-2025-7808WordPressWP Shopify👾🟡6.1MEDIUMStored Cross-Site Scripting in Structured Content Plugin for WordPress
CVE-2025-3414WordPressStructured Content (js...👾🟡5.4MEDIUMLocal File Inclusion Vulnerability in LatePoint WordPress Plugin by LatePoint
CVE-2025-6715WordPressLatepoint👾🟡9.8CRITICALCSRF Vulnerability in CBX Restaurant Booking Plugin for WordPress
CVE-2025-7965WordPressCbx Restaurant Booking👾🟡4.3MEDIUMStored Cross-Site Scripting Vulnerability in OpenStreetMap for Gutenberg and WPBakery Page Builder
CVE-2025-6572WordPressOpenstreetmap For Gute...👾🟡5.9MEDIUMUnauthenticated File Upload Vulnerability in WP-Property Plugin for WordPress
CVE-2012-10027WordPressWordPress Plugin👾🟡9.3CRITICALArbitrary File Upload Vulnerability in Asset-Manager Plugin for WordPress
CVE-2012-10026WordPressWordPress Plugin👾🟡10CRITICALRemote File Inclusion in Advanced Custom Fields Plugin Affects WordPress Vendor
CVE-2012-10025WordPressWordPress Plugin👾🟡10CRITICALPrivilege Escalation in Sala - Startup & SaaS WordPress Theme by WordPress
CVE-2025-4606WordPressSala - Startup & Saas ...👾🟡9.8CRITICALArbitrary File Upload Vulnerability in AI Engine Plugin for WordPress
CVE-2025-7847WordPressAi Engine👾🟡8.8HIGHReflected Cross-Site Scripting Vulnerability in SureForms Plugin for WordPress
CVE-2025-5921WordPressSureforms👾🟡5.8MEDIUMArbitrary File Upload Vulnerability in Alone Charity Theme for WordPress
CVE-2025-5394WordPressAlone – Charity Multip...🥇📈💰👾🟡EPSS 21%📰9.8CRITICALReflected Cross-Site Scripting Vulnerability in My Reservation System Plugin for WordPress
CVE-2025-7022WordPressMy Reservation System👾🟡6.1MEDIUMReflected Cross-Site Scripting in Qwizcards Plugin by WordPress
CVE-2025-6174WordPressQwizcards | Online Qui...👾🟡6.1MEDIUMUnauthorized File Upload and Deletion in Ajax Load More Plugin by WordPress
CVE-2015-10140WordPressAjax Load More👾🟡8.8HIGHUser Enumeration Bypass in Stop User Enumeration Plugin for WordPress
CVE-2025-4302WordPressStop User Enumeration👾🟡5.3MEDIUMArbitrary File Upload Vulnerability in HT Contact Form Widget for Elementor Page Builder
CVE-2025-7340WordPressHt Contact Form Widget...👾🟡9.8CRITICALStored Cross-Site Scripting Vulnerability in GeoDirectory Plugin for WordPress
CVE-2025-6200WordPressGeodirectory👾🟡5.9MEDIUM