Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how wp compares to other vendors in security performance

View Risk Score →

WP Pie Forms for WPPie Forms for WP <= 1.6 - Unauthenticated Arbitrary File Upload

Risk 75
Severity
8.1
First published (updated )
CVE-2025-12528

WP Count Down TimerWP Count Down Timer <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Risk 39
Severity
6.4
First published (updated )
CVE-2025-12668

WP BBCodeWP BBCode <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Risk 39
Severity
6.4
First published (updated )
CVE-2025-11873

WP AD GalleryWP AD Gallery <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Risk 39
Severity
6.4
First published (updated )
CVE-2025-11834

WP Google Map PluginWP Google Map Plugin <= 1.0 - Authenticated (Contributor+) SQL Injection

Risk 38
Severity
6.5
First published (updated )
CVE-2025-11365
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WP ViewSTLWP ViewSTL <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Risk 39
Severity
6.4
First published (updated )
CVE-2025-10135

WP Private Content PlusWP Private Content Plus <= 3.6.2 - Password Protection Bypass

Risk 40
Severity
6.5
First published (updated )
CVE-2025-10720

WP Photo Album PlusWP Photo Album Plus <= 9.0.11.006 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_upload

Risk 25
Severity
5.4
EPSS
0.03%
First published (updated )
CVE-2025-8726

Wp cycle text announcementWp cycle text announcement <= 8.1 - Authenticated (Contributor+) SQL Injection

Risk 27
Severity
6.5
EPSS
0.04%
First published (updated )
CVE-2025-9198

WP ScriptcaseWP Scriptcase <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter

Risk 28
Severity
6.4
EPSS
0.03%
First published (updated )
CVE-2025-8691
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WP TalrooWP Talroo <= 2.4 - Reflected XSS

Risk 36
Severity
7.1
EPSS
0.04%
First published (updated )
CVE-2025-8281

WP Private Content PlusWP Private Content Plus <= 3.6.2 - Unauthenticated Sensitive Information Exposure

Risk 27
Severity
5.3
First published (updated )
CVE-2025-4390

Wp chart generatorWp chart generator <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpchart Shortcode

Risk 28
Severity
6.4
EPSS
0.04%
First published (updated )
CVE-2025-8685

WP Shortcodes UltimateShortcodes Ultimate <= 7.4.0 - Authenticted (Contributor+) Stored Cross-Site Scripting via 'data-url' Attribute

Risk 28
Severity
6.4
EPSS
0.03%
First published (updated )
CVE-2025-5567

WP Front-end login and registerWP Front-end login and register <= 2.1.0 - Reflected Cross-Site Scripting

Risk 38
Severity
6.1
First published (updated )
CVE-2024-11405
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WP Lightbox 2WP Lightbox 2 < 3.0.6.8 - Unauthenticated Stored XSS

Risk 45
Severity
6.3
First published (updated )
CVE-2025-3745

WP MultiTaskingWP MultiTasking <= 0.1.12 - Permalink Suffix Update via CSRF

Risk 22
Severity
4.3
First published (updated )
CVE-2024-6860

BleepingComputerThe 4 WordPress flaws hackers targeted the most in Q1 2025

Exploited
Zeroday
First published (updated )
News
BleepingComputer

BleepingComputerWordPress security plugin WP Ghost vulnerable to remote code execution bug

First published (updated )
News
BleepingComputer

WP PManagerWP Programmmanager <= 1.2 - Reflected XSS

Risk 50
Severity
7.1
First published (updated )
CVE-2024-13875
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WP FoodbakeryWP Foodbakery <= 4.7 - Unauthenticated Arbitrary File Upload

Risk 86
Severity
9.8
First published (updated )
CVE-2024-13011

WP MediaTaggerWP MediaTagger <= 4.1.1 - Reflected XSS

Risk 38
Severity
6.1
First published (updated )
CVE-2024-13112

Wp photo text slider 50Wp photo text slider 50 <= 8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Risk 39
Severity
6.4
First published (updated )
CVE-2024-11884

weDevs Wp Project Manager WordpressWP Project Manager <= 2.6.14 - Missing Authorization to Project Milestone and Task Creation/Deletion

Risk 27
Severity
5.3
First published (updated )
CVE-2024-10520

WP WP-StravaWP-Strava <= 2.12.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

Risk 38
Severity
6.1
First published (updated )
CVE-2024-10038
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WP Baidu MapWP Baidu Map <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Risk 29
Severity
6.4
EPSS
0.05%
First published (updated )
CVE-2024-9886

Tipsandtricks-hq Wp Estore WordpressWP eStore < 8.5.6 - Reflected XSS in Product Editing

Risk 25
Severity
5.4
EPSS
0.04%
First published (updated )
CVE-2024-6134

WP eMemberWP eMember <= v10.7.0 - Stored XSS via CSRF

Risk 38
Severity
6.1
First published (updated )
CVE-2024-5081

WP Schema ProWordPress Schema Pro plugin <= 2.7.8 - Broken Access Control vulnerability

Risk 37
Severity
6.5
First published (updated )
CVE-2023-36683

Delower Wp To Do WordpressWP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_addcomment

Risk 16
Severity
4.3
EPSS
0.04%
First published (updated )
CVE-2024-3943
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203