WordPress Exploited Vulnerabilities
Wordpress vulnerabilities known to be exploited. Over the past 365 days, sorted by exploit discovery date.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Unauthenticated File Upload Vulnerability in WP-Property Plugin for WordPress
CVE-2012-10027WordPressWordPress Plugin👾🟡9.3CRITICALArbitrary File Upload Vulnerability in Asset-Manager Plugin for WordPress
CVE-2012-10026WordPressWordPress Plugin👾🟡10CRITICALRemote File Inclusion in Advanced Custom Fields Plugin Affects WordPress Vendor
CVE-2012-10025WordPressWordPress Plugin👾🟡10CRITICALPrivilege Escalation in Sala - Startup & SaaS WordPress Theme by WordPress
CVE-2025-4606WordPressSala - Startup & Saas ...👾🟡9.8CRITICALArbitrary File Upload Vulnerability in AI Engine Plugin for WordPress
CVE-2025-7847WordPressAi Engine👾🟡8.8HIGHReflected Cross-Site Scripting Vulnerability in SureForms Plugin for WordPress
CVE-2025-5921WordPressSureforms👾🟡5.8MEDIUMArbitrary File Upload Vulnerability in Alone Charity Theme for WordPress
CVE-2025-5394WordPressAlone – Charity Multip...🥇📈💰👾🟡📰9.8CRITICALReflected Cross-Site Scripting Vulnerability in My Reservation System Plugin for WordPress
CVE-2025-7022WordPressMy Reservation System👾🟡6.1MEDIUMReflected Cross-Site Scripting in Qwizcards Plugin by WordPress
CVE-2025-6174WordPressQwizcards | Online Qui...👾🟡6.1MEDIUMUnauthorized File Upload and Deletion in Ajax Load More Plugin by WordPress
CVE-2015-10140WordPressAjax Load More👾🟡8.8HIGHUser Enumeration Bypass in Stop User Enumeration Plugin for WordPress
CVE-2025-4302WordPressStop User Enumeration👾🟡5.3MEDIUMArbitrary File Upload Vulnerability in HT Contact Form Widget for Elementor Page Builder
CVE-2025-7340WordPressHt Contact Form Widget...👾🟡9.8CRITICALStored Cross-Site Scripting Vulnerability in GeoDirectory Plugin for WordPress
CVE-2025-6200WordPressGeodirectory👾🟡5.9MEDIUMArbitrary Post Title Disclosure in Order Delivery Date WordPress Plugin by WordPress
CVE-2025-2942WordPressOrder Delivery Date👾🟡4.3MEDIUMStored Cross-Site Scripting Vulnerability in Hostel Plugin by WordPress
CVE-2025-6236WordPressHostel👾🟡4.8MEDIUMReflected Cross-Site Scripting Vulnerability in Hostel Plugin by WordPress
CVE-2025-6234WordPressHostel👾🟡6.1MEDIUMSQL Injection Vulnerability in Events Manager Plugin for WordPress
CVE-2025-6970WordPressEvents Manager – Calen...👾🟡EPSS 14%7.5HIGHAuthentication Bypass in WordPress Pie Register Plugin
CVE-2025-34077WordPressWordPress Pie Register...👾🟡EPSS 16%10CRITICALCross-site Scripting Vulnerability in Melipayamak by Melipayamak
CVE-2025-30940WordPressMelipayamak👾📰5.9MEDIUMCross-Site Request Forgery Vulnerability in 07FLYCMS and Related Products
CVE-2025-7078WordPress07flycms👾🟡5.3MEDIUMImproper Access Control in Sharable Password Protected Posts by WordPress
CVE-2025-5920WordPressSharable Password Prot...👾🟡7.5HIGHUnrestricted File Upload Vulnerability in AiBud WP Plugin
CVE-2025-23968WordPressAibud WP👾🟡9.1CRITICALPrivilege Escalation Vulnerability in Opal Estate Pro Plugin for WordPress
CVE-2025-6934WordPressOpal Estate Pro – Prop...👾🟡9.8CRITICALArbitrary File Deletion in Forminator Forms Plugin for WordPress
CVE-2025-6463WordPressForminator Forms – Con...👾📰8.8HIGHXSS Vulnerability in WP Lightbox 2 Plugin by WordPress
CVE-2025-3745WordPressWP Lightbox 2👾🟡6.3MEDIUM