WordPress Latest High & Critical Vulnerabilities
Latest High & Critical vulnerabilities published by wordpress
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
PHP Object Injection Vulnerability in MasterStudy Learning Management System by MasterStudy
CVE-2026-118090WordPressMasterstudy Lms8.8HIGHPHP Object Injection Vulnerability in Product Feed Manager by Patchstack
CVE-2026-118089WordPressProduct Feed Manager7.2HIGHPrivilege Escalation in WP BASE Booking Plugin by WordPress
CVE-2026-118086WordPressWP Base Booking8.8HIGHUnauthenticated Broken Access Control Vulnerability in WP REST Cache by WordPress
CVE-2026-116862WordPressWP Rest Cache7.5HIGHSensitive Data Exposure in Flexible Chat by WordPress
CVE-2026-116861WordPressFlexible Chat7.5HIGHRemote Code Execution in Widget Options by Widget Options Plugin
CVE-2026-116852WordPressWidget Options9.1CRITICALUnauthenticated XSS Vulnerability in eCommerce Product Catalog by WordPress
CVE-2026-116851WordPressEcommerce Product Catalog7.1HIGHUnauthenticated Cross Site Scripting Vulnerability in Mang Board Plugin for WordPress
CVE-2026-116847WordPressMang Board WP7.1HIGHCross Site Scripting Vulnerability in VikRentCar Plugin by WordPress
CVE-2026-116405WordPressVikrentcar7.1HIGHUnauthenticated Broken Access Control in HUSKY by Patchstack
CVE-2026-116401WordPressHusky7.5HIGHUnauthenticated Privilege Escalation in SMS Alert Order Notifications by PatchStack
CVE-2026-116386WordPressSms Alert Order Notifi...9.8CRITICALUnauthenticated Cross Site Scripting in Ad Inserter Plugin by WordPress
CVE-2026-105077WordPressAd Inserter7.1HIGHCross Site Scripting Vulnerability in All In One Login Plugin by WordPress
CVE-2026-94175WordPressAll In One Login7.1HIGHUnauthenticated PHP Object Injection in LeadSnap Plugin by LeadSnap
CVE-2026-90888WordPressLeadsnap9.8CRITICALPHP Object Injection Vulnerability in GS Testimonial Slider by WordPress
CVE-2026-78527WordPressGs Testimonial Slider8.8HIGHPHP Object Injection Vulnerability in Enable Media Replace Plugin by WordPress
CVE-2026-73186WordPressEnable Media Replace8.8HIGHUnauthenticated Cross Site Scripting Vulnerability in Profile Builder Plugin by WordPress
CVE-2026-54855WordPressProfile Builder7.1HIGHUnauthenticated Cross Site Scripting Vulnerability in Fast Velocity Minify Plugin
CVE-2026-48201WordPressFast Velocity Minify7.1HIGHUnauthenticated Cross Site Scripting in BA Book Everything Plugin for WordPress
CVE-2026-39786WordPressBa Book Everything7.1HIGHUnauthenticated PHP Object Injection in FunnelKit Automations by FunnelKit
CVE-2026-39738WordPressFunnelkit Automations9.8CRITICALUnauthenticated Path Traversal in WP EasyPay by WordPress
CVE-2026-39734WordPressWP Easypay7.5HIGHUnauthenticated SQL Injection in Serbian Transliteration Plugin by WordPress
CVE-2026-39732WordPressTransliterator9.3CRITICALCross Site Scripting Vulnerability in VikRentCar Plugin by WordPress
CVE-2026-28160WordPressVikrentcar7.1HIGHObject Injection Vulnerability in Royal Event Theme by ThemeREX
CVE-2026-119526WordPressRoyal Event9.8CRITICALRemote Code Execution Vulnerability in NextGEN Gallery Plugin for WordPress
CVE-2026-76012WordPressPhoto Gallery, Sliders...7.5HIGH