WordPress Latest High & Critical Vulnerabilities
Latest High & Critical vulnerabilities published by wordpress
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Sensitive Information Exposure in YS LeadGen Plugin for WordPress
CVE-2026-1255WordPressYs Leadgen – Popup Bui...7.5HIGHArbitrary Shortcode Execution in ProfilePress Plugin for WordPress
CVE-2026-85658WordPressPaid Membership Plugin...8.1HIGHRemote Code Execution Vulnerability in The Welcomizer Plugin by WordPress
CVE-2026-4327WordPressThe Welcomizer8.8HIGHStored Cross-Site Scripting Vulnerability in Quill Forms Plugin for WordPress
CVE-2026-15664WordPressQuill Forms | Conversa...7.2HIGHAuthorization Flaw in MgoSync Plugin for WordPress Exposes API Credentials
CVE-2026-92404WordPressMgosync👾🟡7.5HIGHSQL Injection Vulnerability in VikRentItems Flexible Rental Management System by WordPress
CVE-2026-88926WordPressVikrentitems Flexible ...👾🟡8.6HIGHStored XSS Vulnerability in Master Blocks WordPress Plugin
CVE-2026-88824WordPressMaster Blocks👾🟡8.8HIGHAuthentication Bypass in UsersWP Plugin for WordPress
CVE-2026-86814WordPressUsersWP👾🟡8.1HIGHAuthorization Bypass in Botiga Pro WordPress Plugin
CVE-2026-86591WordPressBotiga Pro👾🟡9.8CRITICALCross-Site Scripting Vulnerability in Ultimate Member Plugin by WordPress
CVE-2026-85680WordPressUltimate Member👾🟡8.8HIGHUnauthorized Configuration Update in Unbounce Landing Pages Plugin for WordPress
CVE-2026-85574WordPressUnbounce Landing Pages👾🟡8HIGHReflected Cross-Site Scripting Vulnerability in Estatik Real Estate Plugin for WordPress
CVE-2026-76790WordPressEstatik Real Estate Pl...👾🟡7.1HIGHUnauthorized User Role Manipulation in WP Import Export Lite Plugin
CVE-2026-76554WordPressWP Import Export Lite👾🟡7.2HIGHArbitrary Function Invocation in Save as PDF Plugin by PDFCrowd for WordPress
CVE-2026-92807WordPressSave As PDF Plugin By ...8.8HIGHArbitrary Shortcode Execution in WP Recipe Maker Plugin for WordPress
CVE-2026-89274WordPressWP Recipe Maker9.1CRITICALArbitrary Shortcode Execution Vulnerability in Forminator Plugin for WordPress
CVE-2026-92229WordPressForminator Forms – Con...9.1CRITICALArbitrary File Upload Vulnerability in Gravity Forms Plugin by WordPress
CVE-2026-84434WordPressGravity Forms9.8CRITICALRemote Code Execution Vulnerability in WP Photo Album Plus Plugin for WordPress
CVE-2026-87909WordPressWP Photo Album Plus7.5HIGHStored Cross-Site Scripting Flaw in Asset CleanUp Plugin for WordPress
CVE-2026-13354WordPressAsset Cleanup: Page Sp...7.2HIGHArbitrary File Upload Vulnerability in WP Cloud Plugins by WordPress
CVE-2026-93031WordPressUse-your-drive | Googl...8.8HIGHStored Cross-Site Scripting Vulnerability in Popup Maker Plugin for WordPress
CVE-2026-87915WordPressPopup Maker – Boost Sa...7.2HIGHStored Cross-Site Scripting in Jeg Kit for Elementor by WordPress
CVE-2026-18405WordPressJeg Kit For Elementor ...7.2HIGHAuthorization Bypass in Master Addons for Elementor Plugin
CVE-2026-85410WordPressMaster Addons For Elem...8.1HIGHStored Cross-Site Scripting in Complianz GDPR/CCPA Cookie Consent Banner for WordPress
CVE-2026-83561WordPressComplianz Gdpr/ccpa Co...7.2HIGHSQL Injection Flaw in Location Manager for WordPress
CVE-2026-85705WordPressLocation Manager7.5HIGH