WordPress
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 1000 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 18, 2025 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →WordPress Visual Composer Website Builder plugin <= 45.16.1 - Cross Site Scripting (XSS) vulnerability
WordPress Starter Templates plugin <= 4.7.5 - Insecure Direct Object References (IDOR) vulnerability
WordPress Passster plugin <= 4.3.13 - Broken Access Control vulnerability
WordPress Masteriyo - LMS plugin <= 3.4.0 - PHP Object Injection vulnerability
WordPress Everest Forms plugin <= 3.6.0 - PHP Object Injection vulnerability
WordPress Gato GraphQL plugin <= 19.2.3 - Privilege Escalation vulnerability
WordPress Quiz And Survey Master plugin <= 11.2.5 - Insecure Direct Object References (IDOR) vulnerability
Simple CAPTCHA with Cloudflare Turnstile 1.2.2 - 1.42.1 - Unauthenticated Arbitrary Shortcode Execution via Contact Form 7 Field Repopulation
Featured Image with URL < 1.0.6 - Contributor+ Stored XSS via Image Alt Text
AI Builder 2.4.1 - 2.7.7 - Contributor+ Stored XSS via Post JavaScript
Monitor WordPress in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.