Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how notfound compares to other vendors in security performance

View Risk Score →

Dzynit SEO Tools (seo-automatic-seo-tools)WordPress SEO Tools plugin <= 4.0.7 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )
CVE-2025-30984

NotFound WordPress Unlimited TimelineWordPress Unlimited Timeline < 1.6.1 - Broken Access Control Vulnerability

Risk 43
Severity
7.5
First published (updated )
CVE-2025-27008

NotFound Advanced Custom Fields: Link Picker FieldWordPress Advanced Custom Fields: Link Picker Field plugin <= 1.2.8 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )
CVE-2025-26746

NotFound Macro Calculator with Admin Email Optin & Data (WordPress plugin)WordPress Macro Calculator with Admin Email Optin & Data plugin <= 1.0 - Multiple Vulnerabilities vulnerability

Risk 43
Severity
7.5
First published (updated )
CVE-2025-26730

Mobeen Abdullah Coming Soon, Maintenance ModeWordPress Coming Soon, Maintenance Mode plugin <= 1.1.1 - Local File Inclusion vulnerability

Risk 69
Severity
7.5
First published (updated )
CVE-2025-26894
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Huseyin Berberoglu WP Hide CategoriesWordPress WP Hide Categories plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability

Risk 50
Severity
7.1
First published (updated )
CVE-2025-31028

Exthemes WP Food ordering and Restaurant MenuWordPress WP Food ordering and Restaurant Menu plugin <= 2.7 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
First published (updated )
CVE-2025-31040

John James Jacoby WP User ProfilesWordPress WP User Profiles plugin <= 2.6.2 - Privilege Escalation vulnerability

Risk 56
Severity
8.8
EPSS
0.04%
First published (updated )
CVE-2025-31524

NotFound ULTIMATE VIDEO GALLERYWordPress ULTIMATE VIDEO GALLERY Plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )
CVE-2025-22566

NotFound WP Azure offloadWordPress WP Azure offload plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )
CVE-2025-22360
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

NotFound AppReviewWordPress AppReview plugin <= 0.2.9 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )
CVE-2025-23714

NotFound WP Database AuditWordPress WP Database Audit plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )
CVE-2025-23633

NotFound PrivateContentWordPress PrivateContent plugin <= 8.11.5 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 36
Severity
7.1
EPSS
0.04%
First published (updated )
CVE-2025-26972

NotFound GPX ViewerWordPress GPX Viewer plugin <= 2.2.11 - Path Traversal vulnerability

Risk 22
Severity
4.9
EPSS
0.06%
First published (updated )
CVE-2025-27274

NotFound Chaty ProWordPress Chaty Pro Plugin <= 3.3.3 - Arbitrary File Upload vulnerability

Risk 61
Severity
10
EPSS
0.07%
First published (updated )
CVE-2025-26776
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

SmartDataSoft Essential Wp Real Estate WordpressWordPress Essential WP Real Estate Plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 27
Severity
7.1
EPSS
0.05%
First published (updated )
CVE-2025-23857

NotFound WPJobBoardWordPress WPJobBoard plugin <= 5.10.1 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 36
Severity
7.1
EPSS
0.04%
First published (updated )
CVE-2025-24781

NotFound Bridge CoreWordPress Bridge Core plugin <= 3.3 - Broken Access Control vulnerability

Risk 16
Severity
4.3
EPSS
0.04%
First published (updated )
CVE-2025-24744

NotFound Admin and Site Enhancements (ASE) ProWordPress Admin and Site Enhancements (ASE) Pro Plugin <= 7.6.1.1 - Broken Access Control vulnerability

Risk 16
Severity
4.3
EPSS
0.04%
First published (updated )
CVE-2025-24653

NotFound ARPrice WordPress pluginWordPress ARPrice plugin <= 4.1.3 - PHP Object Injection vulnerability

Risk 57
Severity
8.8
EPSS
2.31%
First published (updated )
CVE-2024-49699
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

NotFound ARPriceWordPress ARPrice plugin <= 4.1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 36
Severity
7.1
EPSS
0.05%
First published (updated )
CVE-2024-49700

NotFound ARPriceWordPress ARPrice plugin <= 4.1.3 - Unauthenticated PHP Object Injection vulnerability

Risk 61
Severity
9.8
EPSS
0.07%
First published (updated )
CVE-2024-49688

NotFound Hero Mega Menu - Responsive WordPress Menu PluginWordPress Hero Menu plugin <= 1.16.5 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 36
Severity
7.1
EPSS
0.05%
First published (updated )
CVE-2024-49300

NotFound ARPriceWordPress ARPrice plugin <= 4.1.3 - Unauthenticated SQL Injection vulnerability

Risk 43
Severity
9.3
EPSS
0.05%
First published (updated )
CVE-2024-49655

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203