WordPress Latest Vulnerabilities
Latest vulnerabilities published by wordpress
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Cross-Site Request Forgery Vulnerability in Restrict File Access Plugin by WordPress
CVE-2025-7667WordPressRestrict File Access8.1HIGHStored Cross-Site Scripting in Companion Auto Update Plugin for WordPress
CVE-2025-4369WordPressCompanion Auto Update5.5MEDIUMArbitrary File Upload Vulnerability in HT Contact Form Widget for Elementor Page Builder
CVE-2025-7340WordPressHt Contact Form Widget...9.8CRITICALArbitrary File Moving Vulnerability in HT Contact Form Widget for WordPress
CVE-2025-7360WordPressHt Contact Form Widget...9.1CRITICALStored Cross-Site Scripting Vulnerability in Strong Testimonials Plugin for WordPress
CVE-2025-7367WordPressStrong Testimonials6.4MEDIUMArbitrary File Deletion Vulnerability in HT Contact Form Widget for WordPress
CVE-2025-7341WordPressHt Contact Form Widget...9.1CRITICALArbitrary File Upload Vulnerability in Alone Charity Theme for WordPress
CVE-2025-5394WordPressAlone – Charity Multip...9.8CRITICALArbitrary File Deletion in Alone Charity Non-profit Theme for WordPress
CVE-2025-5393WordPressAlone – Charity Multip...9.1CRITICALArbitrary File Upload Vulnerability in AIT CSV Import/Export Plugin for WordPress
CVE-2020-36849WordPressAit Csv Import/export9.8CRITICALSensitive Information Exposure in Total Upkeep WordPress Backup Plugin by BoldGrid
CVE-2020-36848WordPressTotal Upkeep – WordPre...7.5HIGHSQL Injection Vulnerability in Modern Events Calendar Lite Plugin for WordPress
CVE-2021-4458WordPressModern Events Calendar...5.9MEDIUMPath Traversal Vulnerability in RSFirewall! Plugin for WordPress
CVE-2025-7518WordPressRsfirewall!4.9MEDIUMRemote Code Execution Vulnerability in Simple-File-List Plugin for WordPress
CVE-2020-36847WordPressSimple File List9.8CRITICALPHP Object Injection in Friends Plugin for WordPress
CVE-2025-7504WordPressFriends7.5HIGHArbitrary File Upload Vulnerability in BeeTeam368 Extensions Plugin for WordPress
CVE-2025-6423WordPressBeeteam368 Extensions8.8HIGHPrivilege Escalation Vulnerability in Nokri Job Board WordPress Theme
CVE-2025-1313WordPressNokri – Job Board Word...8.8HIGHArbitrary File Upload Vulnerability in WPBookit Plugin by WordPress
CVE-2025-6057WordPressWPbookit8.8HIGHArbitrary File Upload Vulnerability in WPBookit Plugin for WordPress
CVE-2025-6058WordPressWPbookit9.8CRITICALCSV Injection Vulnerability in Broken Link Notifier Plugin for WordPress
CVE-2025-6838WordPressBroken Link Notifier4.1MEDIUMServer-Side Request Forgery Vulnerability in Broken Link Notifier Plugin for WordPress
CVE-2025-6851WordPressBroken Link Notifier7.2HIGHSQL Injection Vulnerability in WPGYM WordPress Gym Management System
CVE-2025-7442WordPressWPgym - WordPress Gym ...7.5HIGHStored Cross-Site Scripting Vulnerability in FooGallery Plugin for WordPress
CVE-2025-6068WordPressFoogallery – Responsiv...6.4MEDIUMStored Cross-Site Scripting in WPC Smart Compare for WooCommerce Plugin
CVE-2025-5530WordPressWPc Smart Compare For ...6.4MEDIUMInformation Exposure Vulnerability in WoodMart Plugin for WordPress
CVE-2025-6745WordPressWoodmart5.3MEDIUMSensitive Information Exposure in WP Register Profile With Shortcode Plugin for WordPress
CVE-2025-4593WordPressWP Register Profile Wi...6.5MEDIUM