WordPress Latest High & Critical Vulnerabilities
Latest High & Critical vulnerabilities published by wordpress
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Cross-Site Scripting Vulnerability in Tag Groups Plugin for WordPress
CVE-2026-9833WordPressTag Groups Is The Adva...👾🟡7.1HIGHServer-Side Request Forgery Vulnerability in Kirki WordPress Plugin by David E. Heddings
CVE-2026-13147WordPressKirki👾🟡9.1CRITICALReflected Cross-Site Scripting Vulnerability in LearnPress WordPress Plugin
CVE-2026-12970WordPressLearnpress👾🟡7.1HIGHCross-Site Scripting Vulnerability in SlimStat Analytics WordPress Plugin
CVE-2026-12592WordPressSlimstat Analytics👾🟡7.5HIGHUnauthenticated SQL Injection Risk in Modern Event Calendar Pro and Lite by WordPress
CVE-2026-11349WordPressModern Event Calendar Pro👾🟡8.6HIGHStored XSS Vulnerability in Unlimited Elements For Elementor Plugin
CVE-2026-10081WordPressUnlimited Elements For...👾🟡8.8HIGHSQL Injection and Remote Code Execution in WordPress REST API
CVE-2026-63030WordPressWordPress🥇📈👾🟡📰9.8CRITICALOAuth Token Misconfiguration in AI Copilot Plugin for WordPress
CVE-2026-9810WordPressAi Copilot👾🟡9.8CRITICALUser Registration & Membership Plugin Flaw Allows Unauthorized Role Assignments
CVE-2026-11961WordPressUser Registration & Me...👾🟡8.1HIGHAuthentication Bypass in PhonePe Payment Solutions WordPress Plugin
CVE-2026-11575WordPressPhonepe Payment Solutions👾🟡7.5HIGHPrivilege Escalation Vulnerability in Aimogen Pro Plugin for WordPress
CVE-2026-15982WordPressAimogen Pro - All-in-o...9.8CRITICALSensitive Information Exposure in LearnPress WordPress LMS Plugin
CVE-2026-13765WordPressLearnpress – WordPress...7.5HIGHArbitrary File Upload Vulnerability in ProfilePress Plugin for WordPress
CVE-2026-13352WordPressPaid Membership Plugin...8.8HIGHStored Cross-Site Scripting Vulnerability in Kali Forms Plugin for WordPress
CVE-2026-15395WordPressKali Forms — Contact F...7.2HIGHPrivilege Escalation in Bricksforge Plugin for WordPress
CVE-2026-14956WordPressBricksforge9.8CRITICALPrivilege Escalation Vulnerability in WPFunnels Plugin for WooCommerce
CVE-2026-15103WordPressWPfunnels – Funnel Bui...8.8HIGHCross-Site Request Forgery Vulnerability in Loco Translate for WordPress
CVE-2026-15005WordPressLoco Translate8.8HIGHPrivilege Escalation in Digits WordPress Login Plugin Exposes User Roles
CVE-2026-13741WordPressDigits: WordPress Mobi...8.8HIGHArbitrary File Deletion Vulnerability in Uncanny Automator Plugin for WordPress
CVE-2026-15008WordPressUncanny Automator – Ea...8.1HIGHStored Cross-Site Scripting in Breakdance Plugin for WordPress
CVE-2026-7543WordPressBreakdance7.2HIGHAuthentication Bypass Vulnerability in WordPress SAML Single Sign-On Plugin by miniOrange
CVE-2026-15013WordPressSaml Single Sign On – ...9.8CRITICALStored Cross-Site Scripting Vulnerability in RPB Chessboard Plugin for WordPress
CVE-2026-13042WordPressRpb Chessboard7.2HIGHSQL Injection Vulnerability in Advance Product Search for WooCommerce Plugin
CVE-2026-12753WordPressAdvance Product Search...7.5HIGHDirectory Traversal Vulnerability in Gravity Forms Plugin for WordPress
CVE-2026-12997WordPressGravity Forms7.5HIGHSQL Injection Vulnerability in Quotes Llama WordPress Plugin
CVE-2026-12512WordPressQuotes Llama👾🟡8.6HIGH