WordPress Latest High & Critical Vulnerabilities
Latest High & Critical vulnerabilities published by wordpress
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
SQL Injection Vulnerability in wp-post-author by WordPress
CVE-2026-108125WordPress7.1HIGHLocal File Inclusion Vulnerability in Fuelthemes The Voux Theme
CVE-2026-94067WordPressThe Voux8.1HIGHCross-site Scripting Vulnerability in Pond Theme by SpabRice
CVE-2026-94066WordPressPond7.1HIGHCross-site Scripting Vulnerability in Education Center Theme by ThemeREX
CVE-2026-94063WordPressEducation Center7.1HIGHObject Injection Vulnerability in BuddhaThemes ColorFolio Theme for WordPress
CVE-2026-94065WordPressColorfolio8.8HIGHObject Injection Vulnerability in BuddhaThemes Neo | Barber Shop WordPress Theme
CVE-2026-94064WordPressNeo | Barber Shop Word...8.8HIGHCSRF Vulnerability in MIGHTYminnow Dashboard Notes Plugin
CVE-2026-62026WordPressDashboard Notes7.1HIGHPHP Remote File Inclusion Vulnerability in Fuelthemes Werkstatt Theme
CVE-2026-94062WordPressWerkstatt8.1HIGHCross-site Scripting Vulnerability in Whistle - Sports Club by DesignThemes
CVE-2026-94061WordPressWhistle - Sports Club7.1HIGHReflected Cross-Site Scripting Vulnerability in Bracketweb's Voldor Theme
CVE-2026-94060WordPressVoldor7.1HIGHReflected Cross-site Scripting Vulnerability in Bracketweb Ogency Theme
CVE-2026-94059WordPressOgency7.1HIGHCross-site Scripting Vulnerability in Bracketweb Treck
CVE-2026-94058WordPressTreck7.1HIGHMissing Authorization in ThemeHunk Th Shop Mania Affects Access Control
CVE-2026-105883WordPressTh Shop Mania7.1HIGHObject Injection in ExpressTech Quiz And Survey Master Plugin
CVE-2026-104392WordPressQuiz And Survey Master8.8HIGHCross-Site Scripting Vulnerability in Delight Star Inc. WP Associate Post R2
CVE-2026-105870WordPressWP Associate Post R27.1HIGHDeserialization Vulnerability in mklacroix Product Configurator for WooCommerce
CVE-2026-105872WordPressProduct Configurator F...7.2HIGHCross-site Scripting Vulnerability in AcyMailing SMTP Newsletter by Datasolution
CVE-2026-105318WordPressAcymailing Smtp Newsle...7.1HIGHSQL Injection Vulnerability in Shinetheme Traveler Plugin
CVE-2026-93947WordPressTraveler9.3CRITICALCross-site Scripting Vulnerability in Gloria Admin Panel by Bkninja
CVE-2026-94158WordPressGloria Admin Panel7.1HIGHArbitrary File Upload Vulnerability in PX-lab Zombify Product
CVE-2026-94503WordPressZombify10CRITICALReflected XSS Vulnerability in ThemeGoods Grand Restaurant Theme
CVE-2026-94161WordPressGrand Restaurant7.1HIGHCross-site Scripting Vulnerability in KlbTheme Total Donations Plugin
CVE-2026-94159WordPressTotal Donations7.1HIGHCross-Site Scripting Vulnerability in Extend Themes Kubio AI Page Builder
CVE-2026-94167WordPressKubio Ai Page Builder7.1HIGHCross-site Scripting Vulnerability in Heateor Support Sassy Social Share Plugin
CVE-2026-94170WordPressSassy Social Share7.1HIGHPath Traversal Vulnerability in PDF for Contact Form 7 Plugin by WordPress
CVE-2026-94664WordPressPDF For Contact Form 77.5HIGH