WordPress Latest High & Critical Vulnerabilities
Latest High & Critical vulnerabilities published by wordpress
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Authorization Bypass in AI Copilot – Content Generator Plugin for WordPress
CVE-2026-14526WordPressAi Copilot – Content G...9.8CRITICALPre-auth Reflected XSS Vulnerability in WordPress
CVE-2026-64638WordPressWordPress🥇📈👾🟡8.9HIGHFile Inclusion Vulnerability in WP Maps Plugin for WordPress
CVE-2026-16263WordPressWP Maps👾🟡8.8HIGHOAuth Social Login Flaw in Estatik Real Estate Plugin by WordPress
CVE-2026-16262WordPressEstatik Real Estate Pl...👾🟡7.5HIGHPHP Object Injection Vulnerability in Ajax Search Lite Plugin by WordPress
CVE-2026-16258WordPressAjax Search Lite👾🟡9.8CRITICALAuthorization Bypass in MStore API Plugin for WordPress
CVE-2026-16041WordPressMstore Api👾🟡7.5HIGHUnauthorized Payment Processing Vulnerability in MStore API Plugin for WordPress
CVE-2026-16038WordPressMstore Api👾🟡9.1CRITICALToken Authentication Bypass in MStore API WordPress Plugin
CVE-2026-16030WordPressMstore Api👾🟡8.1HIGHSQL Injection Vulnerability in Content Views Plugin for WordPress
CVE-2026-15361WordPressContent Views👾🟡8.1HIGHRemote Code Execution Vulnerability in WooCommerce Subscriptions Plugin by WooCommerce
CVE-2026-15215WordPressSubscriptions For WooC...👾🟡8.8HIGHREST API Vulnerability in Password Protected Plugin for WordPress
CVE-2026-14943WordPressPassword Protected — L...👾🟡7.5HIGHAuthentication Bypass in WP Events Manager Plugin by WordPress
CVE-2026-14205WordPressWP Events Manager👾🟡9.8CRITICALImproper Password Reset Validation in TrueBooker Appointment Booking System by WordPress
CVE-2026-14364WordPressTruebooker – Appointme...9.8CRITICALAuthorization Bypass in TrueBooker Appointment Booking and Scheduler System for WordPress
CVE-2026-14365WordPressTruebooker – Appointme...9.8CRITICALServer-Side Price Enforcement Flaw in WPC Name Your Price for WooCommerce Plugin
CVE-2026-16620WordPressWPc Name Your Price Fo...👾🟡7.5HIGHWeakness in miniOrange 2FA Plugin for WordPress Allows Account Takeover
CVE-2026-16619WordPressMiniorange 2fa👾🟡7.5HIGHPrice Manipulation Vulnerability in CoCart WordPress Plugin
CVE-2026-10524WordPressCocart👾🟡7.5HIGHUnauthenticated Backdoor in Premium SEO WordPress Plugin by Unknown Vendor
CVE-2026-14812WordPressPremium Seo👾🟡10CRITICALAuthorization Bypass in Payment Plugins for PayPal WooCommerce by WordPress
CVE-2026-13399WordPressPayment Plugins For Pa...👾🟡7.5HIGHPayment Gateway Vulnerability in Redsys & WooCommerce Lite Plugin by WordPress
CVE-2026-12584WordPressPayment Gateway For Re...👾🟡7.5HIGHUnauthenticated Payment Processing Flaw in WooCommerce Plugin from WordPress
CVE-2026-10599WordPressIntegrate Phonepe With...👾🟡7.5HIGHSQL Injection Vulnerability in Creative Mail Plugin for WordPress
CVE-2026-3430WordPressCreative Mail👾🟡8.6HIGHCross Site Scripting Vulnerability in WooCommerce Multilingual & Multicurrency by WPML
CVE-2026-66711WordPressWooCommerce Multilingu...7.1HIGHUnauthenticated Local File Inclusion in e2pdf Plugin from WordPress
CVE-2026-66710WordPressE2PDF8.1HIGHRemote Code Execution Vulnerability in CTX Feed Plugin for WooCommerce by WebAppick
CVE-2026-66709WordPressCtx Feed9.1CRITICAL