SecAlerts
w

wpdeveloper

Security Risk Profile

36
/100
low

Security Risk Score

Comprehensive risk assessment based on 158 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from August 12, 2019 to present

158
Total CVEs
43
Critical+High
0
Exploited
20
Unpatched

Threat Assessment

Avg CVSS
6.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
20
Critical/High
Risk Level
36/100
low
📈 5 in Last 30 Days

Severity Distribution

Critical
12
High
31
Medium
112
Low
3

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
1
<5%
53

Age Distribution

Common Weaknesses (CWE)

1
XSS
83
2
Infoleak
7
3
CSRF
5
4
SQL Injection
4
5
Path Traversal
4

Most Affected Products

1. WPDeveloper Essential Addons For Elementor Wordpress55
2. WPDeveloper Embedpress Wordpress25
3. WPDeveloper Essential Blocks Wordpress23
4. WPDeveloper Essential Addons for Elementor15
5. WPDeveloper Reviewx Wordpress8

Recent Vulnerabilities

See more →
CVE-2026-110508
CVSS 5.3medium

Essential Addons for Elementor 6.7.3 - 6.8.6 - Unauthenticated Registration Approval Bypass via OTP Verification

Oct 28, 2026🔧 No Patch
CVE-2026-110509
CVSS 5.3medium

Essential Addons for Elementor < 6.8.7 - Unauthenticated Private Post Meta Disclosure via load_more AJAX Handler

Oct 28, 2026🔧 No Patch
CVE-2026-110510
CVSS 3.5low

Essential Addons for Elementor < 6.8.7 - Author+ Content Injection via Pricing Table and Post Timeline Title Tag

Oct 23, 2026🔧 No Patch
CVE-2026-110537
CVSS 3.8low

Essential Addons for Elementor < 6.8.7 - Admin+ Cross-Site User Approval State Change via Bulk Action

Oct 23, 2026🔧 No Patch
CVE-2026-110898
CVSS 6.4medium

WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerability

Oct 19, 2026🔧 No Patch
CVE-2026-102394
CVSS 6.5medium

WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerability

Oct 1, 2026🔧 No Patch
CVE-2026-96256
CVSS 6.4medium

Gutenberg Essential Blocks <= 6.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker' Attribute

Oct 1, 2026🔧 No Patch
CVE-2026-81777
CVSS 5.3medium

WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability

Aug 28, 2026🔧 No Patch
CVE-2026-57364
CVSS 6.5medium

WordPress Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More plugin <= 2.2.0 - Other Vulnerability Type vulnerability

Jul 13, 2026🔧 No Patch
CVE-2026-10833
CVSS 6.4medium

Gutenberg Essential Blocks - Page Builder for Gutenberg Blocks & Patterns <= 6.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'configurablePrefix' Block Attribute

Jun 25, 2026🔧 No Patch

Monitor wpdeveloper in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.