WordPress Latest Vulnerabilities
Latest vulnerabilities published by wordpress
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Unauthorized Functionality Access in WP Legal Pages Plugin by WordPress
CVE-2025-8565WordPressPrivacy Policy Generat...8.1HIGHStored Cross-Site Scripting in Ghost Kit Plugin for WordPress
CVE-2025-9992WordPressGhost Kit – Page Build...6.4MEDIUMInsecure Direct Object Reference in Chained Quiz Plugin for WordPress
CVE-2025-10493WordPressChained Quiz5.3MEDIUMPHP Object Injection Vulnerability in Ninja Forms Plugin by Ninja Squad
CVE-2025-9083WordPressNinja Forms👾🟡Server-side Validation Flaw in WP Hotel Booking Plugin by WordPress
CVE-2025-8942WordPressWP Hotel Booking👾🟡Weak OTP Code Generation in Password Reset Plugin for WordPress
CVE-2025-5305WordPressPassword Reset With Co...👾🟡Unauthorized Data Modification in Sydney Theme for WordPress
CVE-2025-8999WordPressSydney5.3MEDIUMStored Cross-Site Scripting Vulnerability in Blocksy Companion Plugin for WordPress
CVE-2025-9565WordPressBlocksy Companion6.4MEDIUMArbitrary File Upload Vulnerability in StoreEngine eCommerce Plugin for WordPress
CVE-2025-9216WordPressStoreengine – Powerful...8.8HIGHStored Cross-Site Scripting in Media Player Addons for Elementor by WordPress
CVE-2025-9203WordPressMedia Player Addons Fo...6.4MEDIUMPath Traversal Vulnerability in StoreEngine WordPress eCommerce Plugin
CVE-2025-9215WordPressStoreengine – Powerful...6.5MEDIUMRemote Code Execution Vulnerability in WP Import – Ultimate CSV XML Importer for WordPress
CVE-2025-10057WordPressWP Import – Ultimate C...8.8HIGHArbitrary File Deletion Vulnerability in WP Import Plugin for WordPress
CVE-2025-10058WordPressWP Import – Ultimate C...8.1HIGHSQL Injection Vulnerability in Quiz Maker Plugin for WordPress
CVE-2025-10042WordPressQuiz Maker5.9MEDIUMStored Cross-Site Scripting in Memberlite Shortcodes Plugin for WordPress
CVE-2025-10125WordPressMemberlite Shortcodes6.4MEDIUMCross-Site Request Forgery in Hack Repair Guy's Plugin Archiver for WordPress
CVE-2025-10188WordPressThe Hack Repair Guy's ...5.4MEDIUMCross-Site Request Forgery Vulnerability in User Sync Plugin for WordPress
CVE-2025-9891WordPressUser Sync4.3MEDIUMCross-Site Request Forgery Vulnerability in USS Upyun Plugin for WordPress
CVE-2025-9629WordPressUss Upyun4.3MEDIUMLocal File Inclusion Vulnerability in Developer Loggers for Simple History Plugin by WordPress
CVE-2025-10050WordPressDeveloper Loggers For ...6.6MEDIUMStored Cross-Site Scripting Vulnerability in Appointmind Plugin by WordPress
CVE-2025-9851WordPressAppointmind5.4MEDIUMLocal File Inclusion Vulnerability in Catch Dark Mode Plugin for WordPress
CVE-2025-10143WordPressCatch Dark Mode7.5HIGHStored Cross-Site Scripting Vulnerability in Productive Style Plugin for WordPress
CVE-2025-8394WordPressProductive Style – Opt...6.4MEDIUMStored Cross-Site Scripting Vulnerability in Social Media Shortcodes Plugin for WordPress
CVE-2025-10166WordPressSocial Media Shortcodes6.4MEDIUMUnauthorized Plugin Installation Vulnerability in Blaze Demo Importer Plugin for WordPress
CVE-2025-8446WordPressBlaze Demo Importer4.3MEDIUMInformation Exposure Vulnerability in The Events Calendar Plugin for WordPress
CVE-2025-9808WordPressThe Events Calendar5.3MEDIUM