WordPress Exploited Vulnerabilities
Wordpress vulnerabilities known to be exploited. Over the past 365 days, sorted by exploit discovery date.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
SQL Injection Vulnerability in TAX SERVICE Electronic HDM Plugin by WordPress
CVE-2025-12061WordPressTax Service Electronic...👾🟡8.6HIGHArbitrary File Upload Vulnerability in AI Feeds Plugin for WordPress
CVE-2025-13597WordPressAi Feeds👾🟡9.8CRITICALArbitrary File Upload Vulnerability in CIBELES AI Plugin for WordPress
CVE-2025-13595WordPressCibeles Ai👾🟡9.8CRITICALRemote Code Execution Vulnerability in Sneeit Framework Plugin for WordPress
CVE-2025-6389WordPressSneeit Framework👾🟡9.8CRITICALWeak Backup Code Generation in WP 2FA Plugin by WordPress
CVE-2025-12628WordPressWP 2fa👾🟡6.3MEDIUMReflected Cross-Site Scripting Vulnerability in Broken Link Manager Plugin
CVE-2025-12629WordPressBroken Link Manager👾🟡7.1HIGHBackup Migration Plugin Vulnerability in WordPress
CVE-2025-12394WordPressBackup Migration👾🟡5.9MEDIUMOpen Redirect Vulnerability in Frontend Posting Plugin by WordPress
CVE-2025-12569WordPressGuest Posting / Fronte...👾🟡4.7MEDIUMReflected Cross-Site Scripting Vulnerability in WordPress eCommerce Plugin
CVE-2024-14015WordPressWordPress Ecommerce Pl...👾🟡7.1HIGHVulnerability in Mstoreapp Mobile App by Mstoreapp Allows Unauthenticated Access
CVE-2025-11127WordPressMstoreapp Mobile App👾🟡9.8CRITICALArbitrary File Read Vulnerability in AI Engine for WordPress by ChatGPT
CVE-2025-13380WordPressAi Engine For WordPres...👾🟡6.5MEDIUMSQL Injection Vulnerability in Attention-Bar Plugin for WordPress
CVE-2025-12502WordPressAttention-bar👾🟡6.8MEDIUMArbitrary File Upload Vulnerability in WavePlayer Plugin for WordPress
CVE-2025-12057WordPressWaveplayer👾🟡9.8CRITICALCommand Injection Vulnerability in W3 Total Cache WordPress Plugin
CVE-2025-9501WordPressW3 Total Cache📈💰👾🟡📰9CRITICALLocal File Inclusion Vulnerability in Creta Testimonial Showcase Plugin by Creta Technology
CVE-2025-10686WordPressCreta Testimonial Show...👾🟡7.2HIGHStored Cross-Site Scripting Vulnerability in WP Statistics Plugin by WordPress
CVE-2025-9816WordPressWP Statistics – Simple...👾🟡7.2HIGHReflected Cross-Site Scripting in Team Members Showcase Plugin by WordPress
CVE-2025-11560WordPressTeam Members Showcase👾🟡4.8MEDIUMAge-Restriction WordPress Plugin Vulnerability Affects Users
CVE-2025-11855WordPressAge-restriction👾🟡7.5HIGHCross-Site Scripting Vulnerabilities in WP Go Maps Plugin by WordPress
CVE-2025-11307WordPressWP Go Maps (formerly W...👾🟡8.8HIGHAuthorization Flaw in Make Email Customizer for WooCommerce Plugin by WordPress
CVE-2025-11237WordPressMake Email Customizer ...👾🟡5.3MEDIUMArbitrary File Upload Vulnerability in WooCommerce Designer Pro Plugin for WordPress
CVE-2025-6440WordPressWooCommerce Designer Pro👾🟡9.8CRITICALFile Path Vulnerability in MelAbu WP Download Counter Button Plugin by WordPress
CVE-2025-11072WordPressMelabu WP Download Cou...👾🟡5.3MEDIUMPassword Reset Vulnerability in Ace User Management WordPress Plugin
CVE-2025-6027WordPressAce User Management👾🟡6.3MEDIUMElementInvader Addons for Elementor WordPress Plugin Exposes Email Functionality
CVE-2025-10873WordPressElementinvader Addons ...👾🟡5.3MEDIUMReflected XSS Vulnerability in FunnelKit WordPress Plugin
CVE-2025-10567WordPressFunnelkit👾🟡6.3MEDIUM