WordPress Exploited Vulnerabilities
Wordpress vulnerabilities known to be exploited. Over the past 365 days, sorted by exploit discovery date.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Stored Cross-Site Scripting Vulnerability in Ninja Forms WordPress Plugin
CVE-2025-2524WordPressNinja Forms👾🟡4.8MEDIUMStored Cross-Site Scripting Vulnerability in Ninja Forms by WordPress
CVE-2025-2560WordPressNinja Forms👾🟡4.8MEDIUMStored Cross-Site Scripting Vulnerability in Ninja Forms Plugin by WordPress
CVE-2025-2561WordPressNinja Forms👾🟡4.8MEDIUMStored Cross-Site Scripting Vulnerability in Qi Blocks WordPress Plugin
CVE-2025-1626WordPressQi Blocks👾🟡5.4MEDIUMStored Cross-Site Scripting in Qi Blocks WordPress Plugin
CVE-2025-1627WordPressQi Blocks👾🟡5.4MEDIUMStored Cross-Site Scripting in Qi Blocks WordPress Plugin
CVE-2025-1625WordPressQi Blocks👾🟡5.4MEDIUMFile Upload Vulnerability in CSV Mass Importer Plugin for WordPress
CVE-2025-4190WordPressCsv Mass Importer👾🟡7.2HIGHFlawed CSRF Check in Wholesale Market Plugin for WooCommerce Vulnerable to Exploitation
CVE-2022-4363WordPressWholesale Market👾🟡6.5MEDIUMStored Cross-Site Scripting Vulnerability in Simple Lightbox Plugin by WordPress
CVE-2025-3516WordPressSimple Lightbox👾🟡5.9MEDIUMStored Cross-Site Scripting Vulnerability in WordPress Contact Form Plugin
CVE-2025-3201WordPressContact Form Builder W...👾🟡5.9MEDIUMUnrestricted Upload of File with Dangerous Type Vulnerability Affects Computer Repair Shop
CVE-2024-51793WordPressComputer Repair Shop👾🟡EPSS 53%9.8CRITICALUser Data Exposure in Sensei LMS WordPress Plugin by Eduma
CVE-2024-8009WordPressSensei Lms👾🟡7.5HIGHCross-Site Scripting Vulnerability in Event Tickets with Ticket Scanner Plugin by WordPress
CVE-2024-6711WordPressEvent Tickets With Tic...👾🟡6.1MEDIUMStored Cross-Site Scripting in Carousel, Slider, Gallery Plugin by WP Carousel
CVE-2024-4002WordPressCarousel, Slider, Gall...👾🟡6.1MEDIUMStored Cross-Site Scripting Vulnerability in Advanced Cron Manager Plugin for WordPress
CVE-2024-4004WordPressAdvanced Cron Manager👾🟡6.1MEDIUMCross-Site Scripting Vulnerability in Responsive Gallery Grid Plugin for WordPress
CVE-2024-4091WordPressResponsive Gallery Grid👾🟡6.1MEDIUMPermission Validation Flaw in EventPrime WordPress Plugin
CVE-2024-4665WordPressEventprime👾🟡5.3MEDIUMStored Cross-Site Scripting Vulnerability in WordPress Plugin by Vendor
CVE-2024-2643WordPressFloating Notification ...👾🟡Stored Cross-Site Scripting Vulnerability in Easy Property Listings WordPress Plugin
CVE-2024-2869WordPressEasy Property Listings👾🟡4.8MEDIUMStored Cross-Site Scripting Vulnerability in Save as Image Plugin by Pdfcrowd for WordPress
CVE-2024-3062WordPressSave As Image Plugin B...👾🟡4.8MEDIUMStored XSS Vulnerability in Genesis Blocks WordPress Plugin
CVE-2024-3901WordPressGenesis Blocks👾🟡6.1MEDIUMStored Cross-Site Scripting in Smart Post Show WordPress Plugin
CVE-2024-3996WordPressSmart Post Show👾🟡6.1MEDIUMStored Cross-Site Scripting Vulnerability in Ultimate Noindex Nofollow Tool II WordPress Plugin
CVE-2024-1663WordPressUltimate Noindex Nofol...👾🟡Access Control Flaw in BuddyBoss Platform WordPress Plugin Affects User Privacy
CVE-2024-12767WordPressBuddyboss-platform👾🟡7.5HIGHUser Activity Tracking and Log Plugin Vulnerability in WordPress
CVE-2024-0970WordPressUser Activity Tracking...👾🟡7.5HIGH