WordPress Latest High & Critical Vulnerabilities
Latest High & Critical vulnerabilities published by wordpress
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Remote Code Execution Vulnerability in NextGEN Gallery Plugin for WordPress
CVE-2026-76012WordPressPhoto Gallery, Sliders...7.5HIGHPrivilege Escalation in Ak Framework Plugin for WordPress by Akbilisim
CVE-2026-105894WordPressAk Framework8.8HIGHStored Cross-Site Scripting Vulnerability in Independent Analytics Pro Plugin for WordPress
CVE-2026-104744WordPressIndependent Analytics Pro7.2HIGHStored Cross-Site Scripting in easy.jobs Job Listing Plugin for WordPress
CVE-2026-112365WordPressEasy.jobs – Ai Powered...7.2HIGHArbitrary File Upload Vulnerability in Avada Theme by ThemeFusion
CVE-2026-115346WordPressAvada | Website Builde...8.1HIGHPrivilege Escalation in Essential Addons for Elementor by WPStyle
CVE-2026-118205WordPressEssential Addons For E...7.4HIGHStored Cross-Site Scripting Vulnerability in ERP: Complete HR, Accounting & CRM Suite by WordPress
CVE-2026-96894WordPressErp: Complete Hr, Acco...7.2HIGHInsecure Direct Object Reference in Forminator Forms for WordPress
CVE-2026-97638WordPressForminator Forms – Con...7.5HIGHAuthorization Bypass Vulnerability in Email Templates Customizer for WooCommerce by WordPress
CVE-2026-107630WordPressEmail Templates Custom...7.5HIGHSensitive Information Exposure in Advanced Custom Fields: Extended Plugin for WordPress
CVE-2026-110305WordPressAdvanced Custom Fields...7.5HIGHArbitrary Table Deletion Vulnerability in Database Cleaner Plugin for WordPress
CVE-2025-8574WordPressDatabase Cleaner: Clea...8.7HIGHCross-Site Request Forgery Vulnerability in Meow Apps AI Engine Product
CVE-2026-65566WordPressAi Engine8.8HIGHBroken Object-Level Access Control in Kirki Plugin for WordPress
CVE-2026-112347WordPressKirki7.2HIGHPHP Object Injection Vulnerability in Gravity Forms Plugin for WordPress
CVE-2026-103039WordPressGravity Forms9.8CRITICALMissing Authorization in AI Engine Plugin for WordPress Affects User Security
CVE-2026-110732WordPressAi Engine – Mcp Server...7.5HIGHStored Cross-Site Scripting in Food Store Online Food Delivery Plugin for WordPress
CVE-2026-116622WordPressFood Store – Online Fo...7.2HIGHStored Cross-Site Scripting Vulnerability in Gravity Forms Plugin by WordPress
CVE-2026-97645WordPressGravity Forms7.2HIGHArbitrary Plugin Installation Vulnerability in Formidable Forms by WordPress
CVE-2026-89435WordPressFormidable Forms – Con...8.8HIGHStored Cross-Site Scripting Vulnerability in Gravity Forms Plugin for WordPress
CVE-2026-90437WordPressGravity Forms7.2HIGHCross-Site Scripting in WP Visitor Statistics Plugin by WordPress
CVE-2026-117571WordPressWP Visitor Statistics ...👾🟡8.8HIGHAuthentication Bypass in Firewall & Malware Scanner Plugin by WordPress
CVE-2026-114443WordPressSecurity Plugin, Firew...👾🟡7.5HIGHPHP Object Injection Vulnerability in Enable Media Replace Plugin for WordPress
CVE-2026-114422WordPressEnable Media Replace👾🟡7.5HIGHPrivilege Escalation in Export and Import Users and Customers Plugin for WordPress
CVE-2026-104368WordPressExport And Import User...8.8HIGHUnauthenticated Broken Access Control in Bricks Theme for WordPress
CVE-2026-119325WordPressBricks Theme7.5HIGHSensitive Data Exposure in WP Crowdfunding Plugin by WordPress
CVE-2026-118083WordPressWP Crowdfunding7.5HIGH