WordPress Exploited Vulnerabilities
Wordpress vulnerabilities known to be exploited. Over the past 365 days, sorted by exploit discovery date.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Arbitrary File Upload Vulnerability in WooCommerce Designer Pro Plugin for WordPress
CVE-2025-6440WordPressWooCommerce Designer Pro👾🟡9.8CRITICALFile Path Vulnerability in MelAbu WP Download Counter Button Plugin by WordPress
CVE-2025-11072WordPressMelabu WP Download Cou...👾🟡5.3MEDIUMPassword Reset Vulnerability in Ace User Management WordPress Plugin
CVE-2025-6027WordPressAce User Management👾🟡6.3MEDIUMElementInvader Addons for Elementor WordPress Plugin Exposes Email Functionality
CVE-2025-10873WordPressElementinvader Addons ...👾🟡5.3MEDIUMReflected XSS Vulnerability in FunnelKit WordPress Plugin
CVE-2025-10567WordPressFunnelkit👾🟡6.3MEDIUMUnauthorized Data Access in Post SMTP Plugin for WordPress
CVE-2025-11833WordPressPost Smtp – Complete S...👾📰9.8CRITICALArbitrary File Upload Vulnerability in Webkul Medical Prescription Attachment Plugin for WooCommerce
CVE-2025-29009WordPressMedical Prescription A...👾🟡10CRITICALAuthentication Bypass Vulnerability in Noo JobMonster Theme by WordPress
CVE-2025-5397WordPressNoo Jobmonster👾📰9.8CRITICALImproper Permission Checks in RealPress WordPress Plugin
CVE-2025-11191WordPressRealpress👾🟡5.3MEDIUMStored Cross-Site Scripting Vulnerability in NS Maintenance Mode Plugin for WordPress
CVE-2025-10636WordPressNs Maintenance Mode Fo...👾🟡3.5LOWArbitrary File Read Vulnerability in Anti-Malware Security and Brute-Force Firewall Plugin for WordPress
CVE-2025-11705WordPressAnti-malware Security ...👾📰6.5MEDIUMUnauthorized AJAX Action in Doppler Forms Plugin for WordPress
CVE-2025-9544WordPressDoppler Forms👾🟡6.5MEDIUMAuthorization Bypass in IDonate WordPress Plugin by WPDev
CVE-2025-11154WordPressIdonate👾🟡5.4MEDIUMServer-Side Request Forgery in Orbit Fox Plugin for WordPress
CVE-2025-10874WordPressOrbit Fox: Duplicate P...👾🟡5.5MEDIUMCross-Site Scripting Vulnerability in Jeg Kit for Elementor by WordPress
CVE-2025-9978WordPressJeg Kit For Elementor👾🟡6.8MEDIUMLocal File Inclusion Vulnerability in PixelYourSite WordPress Plugin
CVE-2025-10723WordPressPixelyoursite👾🟡2.7LOWImproper Role Management in Meta Tag Manager Plugin for WordPress
CVE-2025-5983WordPressMeta Tag Manager👾🟡6.5MEDIUMAuthorization Flaw in NS Maintenance Mode for WP Plugin by WordPress
CVE-2025-10638WordPressNs Maintenance Mode Fo...👾🟡5.3MEDIUMArbitrary File Upload Vulnerability in WooCommerce Plugin by WordPress
CVE-2025-11391WordPressPpom – Product Addons ...👾🟡9.8CRITICALArbitrary File Deletion Vulnerability in FormGent WordPress Plugin
CVE-2025-10916WordPressFormgent👾🟡9.1CRITICALSecurity Flaw in BlindMatrix e-Commerce Plugin for WordPress
CVE-2025-10406WordPressBlindmatrix E-commerce👾🟡5.5MEDIUMEval Injection Vulnerability in is-human Plugin for WordPress by an Unknown Vendor
CVE-2011-10033WordPressIs-human WordPress Plugin👾🟡9.3CRITICALServer-Side Request Forgery in Pz-LinkCard WordPress Plugin
CVE-2025-8594WordPressPz-linkcard👾🟡3.8LOWCross-Site Scripting Vulnerability in Simple SEO Plugin for WordPress
CVE-2025-10357WordPressSimple Seo👾🟡6.1MEDIUMMissing Authentication Vulnerability in Chartify Plugin for WordPress
CVE-2025-11171WordPressChartify – WordPress C...👾🟡5.3MEDIUM