WordPress plugin vulnerabilities this week
362 vulnerabilities published since October 29 in 260 plugins we track, newest first.
21 critical 117 high 215 medium 6 low 3 not scored yet
Data as of 2026-11-04. Dates are when the CVE record was published (UTC). Records for plugins outside our catalogue are not shown.
“Affected” is the version range the source gives. “Fixed in” is the version the source names, or (marked *) the first wordpress.org release after the last affected version. Each CVE id links to the full record on the plugin’s page.
Tuesday, November 3, 2026 · 35
-
medium 4.3 WCFM Membership
-
medium 5.3 WCFM Membership
-
medium 6.5 Posts Table with Search & Sort
-
medium 5.3 Uncanny Automator
-
medium 5.3 Better Search
-
medium 5.3 ClickCease Click Fraud Protection
-
medium 5.3 Dokan
-
medium 6.5 Paid Membership Subscriptions
-
medium 5.3 Dokan
-
medium 5.3 affects latest 1.58.3 Forminator Forms
-
medium 4.3 affects latest 1.58.3 Forminator Forms
-
medium 5.3 Eupago Gateway For Woocommerce
Security issue
-
not scored yet DT LMS
Security issue
-
not scored yet weMail
Security issue
-
not scored yet weMail
Security issue
-
medium 5.3 AI Alt Text Generator
-
high 8.1 FluentCart
-
medium 6.4 Photo Engine (Media Organizer & Lightroom)
-
high 7.5 Contact Form Extender for Divi
-
medium 5.3 JetFormBuilder
-
high 8.1 SureCart
-
medium 4.3 Academy LMS
-
high 8.1 Easy Digital Downloads
-
medium 6.4 SEO Engine
-
medium 5.3 WP Compress
-
critical 9.1 BuddyPress XProfile Custom Image Field
-
medium 6.4 News Kit Addons For Elementor
-
medium 5.9 affects latest 1.5.3 WP Fastest Cache
Monday, November 2, 2026 · 3
-
critical 9.8 s2Member
-
critical 9.8 Ultra Addons for Contact Form 7
-
medium 5.3 PayHere Payment Gateway
Security issue
Sunday, November 1, 2026 · 7
-
critical 9.3 Bookit
-
high 7.1 Iptanus File Upload
-
medium 6.5 JetFormBuilder
-
medium 6.8 Media Library Assistant
-
medium 4.3 Media Library Assistant
-
medium 4.3 Kali Forms
-
medium 4.3 Kali Forms
Saturday, October 31, 2026 · 74
-
high 7.2 Debug Log Manager
-
medium 6.4 GeoDirectory
-
medium 6.4 FlexStock
-
medium 4.3 Germanized for WooCommerce
Security issue
-
high 7.5 WP Directory Kit
-
medium 6.1 Ninja Forms
-
medium 6.4 Smart Post
-
critical 9.8 SimpleForm
-
high 7.2 WP Activity Log
-
critical 9.1 Acadlix LMS
-
medium 5.3 All in One SEO
-
medium 5.3 Booking for Appointments and Events Calendar
-
high 7.2 FeedWordPress
-
medium 5.3 Newsletters
-
critical 9.8 Uncanny Toolkit for LearnDash
-
high 8.8 User Frontend
-
critical 9.8 Project Manager
-
medium 5.4 Content Pilot
-
medium 5.9 WP Data Access
-
medium 6.4 SEOPress
-
high 7.2 Shield Security
-
high 7.2 WPO365
-
medium 6.5 Redux Framework
-
high 8.8 Rox Appointment Booking
-
medium 6.1 User Frontend
-
medium 6.5 WP2LEADS
-
medium 4.3 Perfect Images
-
critical 9.1 Popup Builder
-
medium 5.3 Seraphinite Accelerator
-
medium 5.4 W3 Total Cache
-
medium 6.1 Product Filter for WooCommerce by WBW
-
medium 5.3 Product Filter for WooCommerce by WBW
-
high 7.5 Mail logging & Catcher
-
high 7.2 ThirstyAffiliates
-
medium 5.3 Welcart e-Commerce
-
high 7.2 Welcart e-Commerce
-
high 7.2 User Submitted Posts
-
medium 6.5 UsersWP
-
high 7.5 FunnelKit Automations
-
high 7.2 Relevanssi
-
critical 9.1 WP Booking System
-
medium 6.4 WP Job Portal
-
critical 9.8 PDF Invoice for WooCommerce + Drag and Drop Te…
-
high 7.2 W3 Total Cache
-
medium 6.1 Webmention
-
medium 5.4 Revopic
-
medium 5.3 PDF Invoices & Packing Slips for WooCommerce
-
medium 4.3 Hustle
-
medium 6.4 Discussion Board
-
high 7.2 SureCart
-
medium 6.5 Spectra Legacy
-
medium 5.3 All-in-One Video Gallery
-
high 7.5 Mapster WP Maps
-
medium 5.3 Quick Event Manager
-
high 8.1 WordPress
-
low 3.7 BuddyForms
-
medium 6.8 Firelight Lightbox
-
high 7.5 Security Optimizer
-
medium 5.3 Premium Packages
-
medium 4.2 Essential Addons for Elementor
-
medium 5.4 Photo Gallery, Sliders, Proofing and Themes
-
high 7.2 PPWP
-
medium 4.9 Payment Forms for Paystack
-
high 7.2 Meow Lightbox
-
high 7.2 Ninja Forms
-
medium 5.4 Ninja Forms
-
medium 6.5 Ninja Forms
Friday, October 30, 2026 · 101
-
high 7.1 All In One Login
-
critical 9.8 affects latest 1.25 LeadSnap
-
high 8.8 affects latest 3.3.10 Solid Testimonials
-
high 8.8 Enable Media Replace
-
medium 5.3 Booktics
-
medium 6.5 Unlimited Elements for Elementor
-
medium 4.3 Bookit
-
medium 5.3 CF7 Mate
-
medium 4.3 Event Tickets and Registration
-
medium 5.3 FluentCRM
-
medium 4.3 Unlimited Elements for Elementor
-
high 7.1 User Profile Builder
-
medium 6.3 User Profile Builder
-
medium 6.5 Booking and Rental Manager for Bike
-
high 7.1 Fast Velocity Minify
-
medium 5.3 GIFTiT
-
high 7.1 BA Book Everything
-
medium 6.5 Ultimate Addons for Elementor
-
critical 9.3 Transliterator
-
high 7.5 WP Easy Pay
-
critical 9.8 FunnelKit Automations
-
medium 6.5 User Registration & Membership
-
high 7.2 Product Feed Manager for WooCommerce
-
high 8.8 MasterStudy LMS WordPress Plugin
-
high 8.8 affects latest 6.5.2 WP BASE Booking of Appointments, Services and…
-
medium 6.5 WP Customer Area
-
high 7.5 Flexible Chat
-
medium 6.5 GiveWP
-
critical 9.1 Widget Options
-
high 7.5 WP REST Cache
-
high 7.1 eCommerce Product Catalog
-
medium 6.5 Masteriyo LMS
-
high 7.1 Mang Board
-
critical 9.8 SMS Alert
-
high 7.5 HUSKY
-
medium 6.5 HUSKY
-
medium 6.5 MultiVendorX
-
medium 5.0 SureDash
-
medium 5.3 YITH WooCommerce Product Add-Ons
-
high 7.1 Ad Inserter
-
medium 4.3 Booktics
-
high 7.2 ERP
-
high 7.5 Forminator Forms
-
medium 6.4 Meow Gallery
-
medium 6.5 Meow Gallery
-
medium 6.4 CP Multi View Events Calendar
-
medium 6.4 GeoDirectory
-
high 7.4 Essential Addons for Elementor
-
medium 6.5 GeoDirectory
-
medium 4.7 Like Button Rating ♥ LikeBtn
-
medium 6.5 Majestic Support
-
medium 6.4 Themify Builder
-
high 7.5 Advanced Custom Fields
-
high 7.2 easy.jobs
-
medium 6.4 FV Flowplayer Video Player
-
medium 4.3 OpenStation
-
medium 5.4 FV Flowplayer Video Player
-
medium 5.4 FV Flowplayer Video Player
-
medium 4.9 JS Help Desk
-
medium 6.5 Ad Inserter
-
medium 6.4 Redux Framework
-
high 8.7 Database Cleaner
-
high 8.8 AI Engine
-
medium 4.3 Event Tickets and Registration
-
medium 5.4 WC Shop Sync
-
medium 6.5 Media Player Addons for Elementor
-
medium 5.4 The Events Calendar
-
medium 5.4 FluentCRM
-
medium 5.3 JetFormBuilder
-
medium 6.5 The Events Calendar
-
medium 5.4 Easy Appointment Booking & Scheduling Plugin
-
medium 6.5 Blocksy Companion
-
medium 5.3 JetFormBuilder
-
medium 6.5 The Events Calendar
-
medium 5.3 The Events Calendar
-
medium 5.3 Timetics
-
high 8.8 Formidable Forms
-
high 7.2 Food Store
-
high 7.5 AI Engine
-
medium 4.3 Content Egg
-
medium 4.3 Content Egg
-
medium 6.5 JoomSport
-
medium 6.8 Firelight Lightbox
-
medium 6.4 Events Made Easy
-
medium 6.4 Cool FormKit Lite
-
medium 6.5 Page and Post Restriction
-
medium 5.3 BuddyForms
-
medium 5.3 BuddyForms
-
medium 5.4 Fraud Prevention For WooCommerce and EDD
-
medium 4.1 WP Visitor Statistics (Real Time Traffic)
-
medium 4.7 User Frontend
-
high 7.5 Enable Media Replace
-
medium 6.5 Forminator Forms
Security issue
Thursday, October 29, 2026 · 142
-
critical 9.8 Zoho Flow
-
high 7.1 affects latest 3.11.0 Bitcoin Payments
-
high 7.1 affects latest 4.1.0 Video Gallery
-
high 7.1 Auction Nudge
-
high 7.1 Easy Property Listings
-
critical 9.8 GEO my WP
-
medium 6.5 Podamibe Custom User Gravatar
-
high 7.1 affects latest 1.165 Cincopa video and media plug-in
-
medium 5.3 Document Library Lite
-
medium 4.3 Kirki
-
medium 5.4 LearnPress
-
high 7.1 affects latest 2.2.2 WP Crowdfunding
-
high 7.2 YayMail
-
high 7.1 Eventer
-
high 7.1 affects latest 1.23.3 GlobalPayments Gateway Provider for WooCommerce
-
medium 6.5 Hotel Booking
-
high 7.5 affects latest 2.2.2 WP Crowdfunding
-
high 7.2 affects latest 2.21.0 Finale Lite
-
high 7.2 FV Flowplayer Video Player
-
high 8.8 Frisbii Pay
-
high 7.2 Spexo Addons for Elementor
-
high 8.8 Social Snap
-
high 8.8 10WebSocial
-
high 8.8 WP Media folders
-
high 8.8 affects latest 1.3.1 BuddyPress Xprofile Custom Field Types
-
high 8.8 affects latest 1.0.1 Dynamic QR Code
-
high 7.2 affects latest 1.4.5 myPOS Checkout
-
high 8.8 affects latest 1.5.0 News Kit Addons For Elementor
-
high 8.8 affects latest 4.4.0 Extra Fees for WooCommerce
-
high 7.2 WPCargo Track & Trace
-
high 7.2 affects latest 1.7.0 Zippy
-
medium 6.5 The Plus Addons for Elementor
-
high 7.1 Chained Quiz
-
medium 6.4 HappyAddons for Elementor
-
medium 5.4 EventPrime
-
medium 5.3 Page and Post Restriction
-
medium 5.3 User Profile Builder
-
medium 5.3 ShopBuilder
-
medium 4.3 User Frontend
-
medium 5.3 User Frontend
-
medium 5.3 Kit (formerly ConvertKit)
-
medium 4.3 ERP
-
medium 6.5 Kadence Blocks
-
medium 5.3 User Registration & Membership
-
medium 4.3 WPFunnels
-
medium 6.5 HTML5 Video Player
-
medium 4.3 MasterStudy LMS WordPress Plugin
-
medium 6.5 Media Library Assistant
-
medium 6.5 HappyAddons for Elementor
-
medium 6.5 StreamCast
-
medium 5.3 WP User Manager
-
medium 5.3 WPFunnels
-
medium 5.3 WPFunnels
-
medium 5.3 SureForms
-
medium 4.3 Easy Appointment Booking & Scheduling Plugin
-
medium 5.3 Custom Price for WooCommerce
-
medium 4.3 SureDash
-
medium 5.3 E-cab Taxi Booking Manager for Woocommerce
-
medium 6.5 Strong Testimonials
-
medium 6.5 SureDash
-
medium 5.3 Brave
-
medium 6.5 Import and export users and customers
-
medium 4.3 HivePress Claim Listings
-
medium 6.5 PDF Poster
-
medium 5.3 Kali Forms
-
medium 5.3 User Registration & Membership
-
high 8.8 InstaWP Connect
-
medium 5.3 SureForms
-
medium 6.5 The Post Grid
-
medium 6.5 Video Gallery Block
-
medium 6.5 Kali Forms
-
medium 6.5 Kali Forms
-
medium 5.3 Simple CAPTCHA with Cloudflare Turnstile
-
medium 6.5 Cozy Blocks
-
medium 4.3 WP Job Portal
-
medium 6.5 Ad Inserter
-
medium 5.3 Product Feed Manager for WooCommerce
-
medium 6.5 Site Reviews
-
medium 5.3 MW WP Form
-
high 7.2 NEX-Forms
-
medium 5.3 YITH PayPal Express Checkout for WooCommerce
-
high 7.2 NewsmanApp
-
medium 4.9 Meta Box
-
high 8.5 BuddyPress
-
high 8.8 OTP Login With Phone Number, OTP Verification
Security issue
-
critical 9.3 Motors
-
high 7.1 Broadcast Live Video
-
high 7.5 LearnPress
-
high 7.1 TableOn
-
high 7.5 GEO my WP
-
high 7.1 HANDMADE
-
medium 5.3 Everest Forms
-
medium 6.1 Everest Forms
-
medium 5.4 HT Mega Addons for Elementor
-
medium 6.5 JoomSport
-
medium 5.4 LiteSpeed Cache
-
medium 4.7 RSS Aggregator by Feedzy
-
medium 5.4 Greenshift
-
medium 5.4 Greenshift
-
medium 6.4 LiteSpeed Cache
-
high 7.2 Mapster WP Maps
-
medium 6.4 Sequential Order Numbers for WooCommerce
-
medium 4.7 Media Library Assistant
-
medium 5.4 Extensions for Leaflet Map
-
low 3.7 Contact Form by Supsystic
Security issue
-
high 8.8 Community Events
-
medium 5.3 Link Library
-
medium 5.3 Link Library
-
medium 6.4 Password Protected
-
medium 6.5 PAYCOMET for WooCommerce
-
low 3.8 Video Player for YouTube
-
medium 5.3 Contact Form by Supsystic
-
high 7.2 Contact Form by Supsystic
-
medium 4.3 Contact Form by Supsystic
-
medium 5.4 Contact Form by Supsystic
-
medium 5.3 Recipe Card Blocks Lite
-
medium 4.9 Photo Engine (Media Organizer & Lightroom)
-
high 7.5 All-In-One Security (AIOS)
-
medium 6.8 Enable SVG, WebP, and ICO Upload
-
medium 6.8 Enable SVG, WebP, and ICO Upload
-
medium 5.3 GeoDirectory
-
medium 4.3 WP Photo Album Plus
-
critical 9.0 Frontend Dashboard
-
low 3.5 Appointment Booking Plugin
-
medium 4.3 Wallet System for WooCommerce
-
low 3.7 WP Post Author
-
low 3.7 WP Post Author
-
high 7.2 DSGVO All in one for WP
-
high 7.2 Food Store
-
high 7.2 Schema App Structured Data
-
high 8.1 SSL Wireless SMS Notification
-
high 7.5 Social Web Suite
-
high 7.5 SendPress Newsletters
-
high 7.5 Wild Apricot Login
-
critical 9.8 Bot for Telegram on WooCommerce
Ran a vulnerable version? Check your site for signs of a hack
The free scan reads the public side of your site and looks for spam pages, hidden redirects, injected scripts and blacklist entries. No login, no install, about a minute.
Earlier weeks
Every week with at least one record, with the number of records.
- Nov 2 – Nov 8, 202638
- Oct 26 – Nov 1, 2026476
- Oct 19 – Oct 25, 2026203
- Oct 12 – Oct 18, 2026397
- Oct 5 – Oct 11, 2026490
- Sep 28 – Oct 4, 2026387
- Sep 21 – Sep 27, 2026201
- Sep 14 – Sep 20, 2026252
- Sep 7 – Sep 13, 2026203
- Aug 31 – Sep 6, 2026223
- Aug 24 – Aug 30, 2026158
- Aug 17 – Aug 23, 2026202
2026 · 45 weeks, 8289 records
- W45 · Nov 2 – Nov 8, 202638
- W44 · Oct 26 – Nov 1, 2026476
- W43 · Oct 19 – Oct 25, 2026203
- W42 · Oct 12 – Oct 18, 2026397
- W41 · Oct 5 – Oct 11, 2026490
- W40 · Sep 28 – Oct 4, 2026387
- W39 · Sep 21 – Sep 27, 2026201
- W38 · Sep 14 – Sep 20, 2026252
- W37 · Sep 7 – Sep 13, 2026203
- W36 · Aug 31 – Sep 6, 2026223
- W35 · Aug 24 – Aug 30, 2026158
- W34 · Aug 17 – Aug 23, 2026202
- W33 · Aug 10 – Aug 16, 2026254
- W32 · Aug 3 – Aug 9, 2026253
- W31 · Jul 27 – Aug 2, 2026269
- W30 · Jul 20 – Jul 26, 2026187
- W29 · Jul 13 – Jul 19, 2026182
- W28 · Jul 6 – Jul 12, 2026175
- W27 · Jun 29 – Jul 5, 2026174
- W26 · Jun 22 – Jun 28, 2026202
- W25 · Jun 15 – Jun 21, 2026327
- W24 · Jun 8 – Jun 14, 202660
- W23 · Jun 1 – Jun 7, 202691
- W22 · May 25 – May 31, 2026191
- W21 · May 18 – May 24, 202673
- W20 · May 11 – May 17, 2026106
- W19 · May 4 – May 10, 202656
- W18 · Apr 27 – May 3, 202655
- W17 · Apr 20 – Apr 26, 202672
- W16 · Apr 13 – Apr 19, 2026106
- W15 · Apr 6 – Apr 12, 2026224
- W14 · Mar 30 – Apr 5, 202643
- W13 · Mar 23 – Mar 29, 2026154
- W12 · Mar 16 – Mar 22, 2026147
- W11 · Mar 9 – Mar 15, 2026141
- W10 · Mar 2 – Mar 8, 202697
- W9 · Feb 23 – Mar 1, 202644
- W8 · Feb 16 – Feb 22, 2026332
- W7 · Feb 9 – Feb 15, 202695
- W6 · Feb 2 – Feb 8, 2026112
- W5 · Jan 26 – Feb 1, 202646
- W4 · Jan 19 – Jan 25, 2026280
- W3 · Jan 12 – Jan 18, 202689
- W2 · Jan 5 – Jan 11, 2026227
- W1 · Dec 29, 2025 – Jan 4, 2026195
2025 · 52 weeks, 3920 records
- W52 · Dec 22 – Dec 28, 202598
- W51 · Dec 15 – Dec 21, 2025200
- W50 · Dec 8 – Dec 14, 2025311
- W49 · Dec 1 – Dec 7, 2025118
- W48 · Nov 24 – Nov 30, 202554
- W47 · Nov 17 – Nov 23, 2025172
- W46 · Nov 10 – Nov 16, 2025119
- W45 · Nov 3 – Nov 9, 2025175
- W44 · Oct 27 – Nov 2, 202587
- W43 · Oct 20 – Oct 26, 202591
- W42 · Oct 13 – Oct 19, 202524
- W41 · Oct 6 – Oct 12, 202526
- W40 · Sep 29 – Oct 5, 202527
- W39 · Sep 22 – Sep 28, 2025141
- W38 · Sep 15 – Sep 21, 202520
- W37 · Sep 8 – Sep 14, 202538
- W36 · Sep 1 – Sep 7, 202552
- W35 · Aug 25 – Aug 31, 202547
- W34 · Aug 18 – Aug 24, 202557
- W33 · Aug 11 – Aug 17, 202592
- W32 · Aug 4 – Aug 10, 202511
- W31 · Jul 28 – Aug 3, 202528
- W30 · Jul 21 – Jul 27, 202521
- W29 · Jul 14 – Jul 20, 202545
- W28 · Jul 7 – Jul 13, 202525
- W27 · Jun 30 – Jul 6, 202529
- W26 · Jun 23 – Jun 29, 202545
- W25 · Jun 16 – Jun 22, 202569
- W24 · Jun 9 – Jun 15, 202534
- W23 · Jun 2 – Jun 8, 202578
- W22 · May 26 – Jun 1, 202514
- W21 · May 19 – May 25, 202566
- W20 · May 12 – May 18, 202575
- W19 · May 5 – May 11, 202597
- W18 · Apr 28 – May 4, 202522
- W17 · Apr 21 – Apr 27, 202553
- W16 · Apr 14 – Apr 20, 2025115
- W15 · Apr 7 – Apr 13, 202570
- W14 · Mar 31 – Apr 6, 2025168
- W13 · Mar 24 – Mar 30, 2025128
- W12 · Mar 17 – Mar 23, 202527
- W11 · Mar 10 – Mar 16, 202547
- W10 · Mar 3 – Mar 9, 202553
- W9 · Feb 24 – Mar 2, 202582
- W8 · Feb 17 – Feb 23, 202557
- W7 · Feb 10 – Feb 16, 202560
- W6 · Feb 3 – Feb 9, 202534
- W5 · Jan 27 – Feb 2, 202565
- W4 · Jan 20 – Jan 26, 2025106
- W3 · Jan 13 – Jan 19, 202555
- W2 · Jan 6 – Jan 12, 2025103
- W1 · Dec 30, 2024 – Jan 5, 202589
2024 · 52 weeks, 3970 records
- W52 · Dec 23 – Dec 29, 202417
- W51 · Dec 16 – Dec 22, 202451
- W50 · Dec 9 – Dec 15, 2024226
- W49 · Dec 2 – Dec 8, 202469
- W48 · Nov 25 – Dec 1, 202435
- W47 · Nov 18 – Nov 24, 202483
- W46 · Nov 11 – Nov 17, 202452
- W45 · Nov 4 – Nov 10, 202454
- W44 · Oct 28 – Nov 3, 2024170
- W43 · Oct 21 – Oct 27, 202447
- W42 · Oct 14 – Oct 20, 202488
- W41 · Oct 7 – Oct 13, 202441
- W40 · Sep 30 – Oct 6, 2024103
- W39 · Sep 23 – Sep 29, 202458
- W38 · Sep 16 – Sep 22, 202427
- W37 · Sep 9 – Sep 15, 202447
- W36 · Sep 2 – Sep 8, 202434
- W35 · Aug 26 – Sep 1, 202474
- W34 · Aug 19 – Aug 25, 202446
- W33 · Aug 12 – Aug 18, 202491
- W32 · Aug 5 – Aug 11, 202418
- W31 · Jul 29 – Aug 4, 202445
- W30 · Jul 22 – Jul 28, 202459
- W29 · Jul 15 – Jul 21, 202476
- W28 · Jul 8 – Jul 14, 202481
- W27 · Jul 1 – Jul 7, 202429
- W26 · Jun 24 – Jun 30, 202433
- W25 · Jun 17 – Jun 23, 202474
- W24 · Jun 10 – Jun 16, 2024108
- W23 · Jun 3 – Jun 9, 2024202
- W22 · May 27 – Jun 2, 202436
- W21 · May 20 – May 26, 202472
- W20 · May 13 – May 19, 2024200
- W19 · May 6 – May 12, 202441
- W18 · Apr 29 – May 5, 2024144
- W17 · Apr 22 – Apr 28, 202487
- W16 · Apr 15 – Apr 21, 2024130
- W15 · Apr 8 – Apr 14, 2024183
- W14 · Apr 1 – Apr 7, 202448
- W13 · Mar 25 – Mar 31, 2024227
- W12 · Mar 18 – Mar 24, 202473
- W11 · Mar 11 – Mar 17, 2024136
- W10 · Mar 4 – Mar 10, 202426
- W9 · Feb 26 – Mar 3, 2024103
- W8 · Feb 19 – Feb 25, 202410
- W7 · Feb 12 – Feb 18, 202414
- W6 · Feb 5 – Feb 11, 202480
- W5 · Jan 29 – Feb 4, 202445
- W4 · Jan 22 – Jan 28, 202421
- W3 · Jan 15 – Jan 21, 202434
- W2 · Jan 8 – Jan 14, 202478
- W1 · Jan 1 – Jan 7, 202444
2023 · 52 weeks, 1478 records
- W52 · Dec 25 – Dec 31, 202375
- W51 · Dec 18 – Dec 24, 202363
- W50 · Dec 11 – Dec 17, 202339
- W49 · Dec 4 – Dec 10, 202314
- W48 · Nov 27 – Dec 3, 202345
- W47 · Nov 20 – Nov 26, 202344
- W46 · Nov 13 – Nov 19, 202341
- W45 · Nov 6 – Nov 12, 202355
- W44 · Oct 30 – Nov 5, 202328
- W43 · Oct 23 – Oct 29, 202313
- W42 · Oct 16 – Oct 22, 202380
- W41 · Oct 9 – Oct 15, 202314
- W40 · Oct 2 – Oct 8, 202320
- W39 · Sep 25 – Oct 1, 202337
- W38 · Sep 18 – Sep 24, 20233
- W37 · Sep 11 – Sep 17, 20238
- W36 · Sep 4 – Sep 10, 202317
- W35 · Aug 28 – Sep 3, 202328
- W34 · Aug 21 – Aug 27, 202312
- W33 · Aug 14 – Aug 20, 202325
- W32 · Aug 7 – Aug 13, 202321
- W31 · Jul 31 – Aug 6, 20239
- W30 · Jul 24 – Jul 30, 202313
- W29 · Jul 17 – Jul 23, 202324
- W28 · Jul 10 – Jul 16, 202346
- W27 · Jul 3 – Jul 9, 20236
- W26 · Jun 26 – Jul 2, 202336
- W25 · Jun 19 – Jun 25, 202338
- W24 · Jun 12 – Jun 18, 202320
- W23 · Jun 5 – Jun 11, 2023110
- W22 · May 29 – Jun 4, 202322
- W21 · May 22 – May 28, 202347
- W20 · May 15 – May 21, 202330
- W19 · May 8 – May 14, 202322
- W18 · May 1 – May 7, 202323
- W17 · Apr 24 – Apr 30, 202310
- W16 · Apr 17 – Apr 23, 202319
- W15 · Apr 10 – Apr 16, 20236
- W14 · Apr 3 – Apr 9, 202356
- W13 · Mar 27 – Apr 2, 202324
- W12 · Mar 20 – Mar 26, 202319
- W11 · Mar 13 – Mar 19, 202323
- W10 · Mar 6 – Mar 12, 202310
- W9 · Feb 27 – Mar 5, 202325
- W8 · Feb 20 – Feb 26, 202315
- W7 · Feb 13 – Feb 19, 202322
- W6 · Feb 6 – Feb 12, 202334
- W5 · Jan 30 – Feb 5, 202311
- W4 · Jan 23 – Jan 29, 202318
- W3 · Jan 16 – Jan 22, 202326
- W2 · Jan 9 – Jan 15, 202318
- W1 · Jan 2 – Jan 8, 202314
2022 · 52 weeks, 606 records
- W52 · Dec 26, 2022 – Jan 1, 202322
- W51 · Dec 19 – Dec 25, 202211
- W50 · Dec 12 – Dec 18, 202213
- W49 · Dec 5 – Dec 11, 20229
- W48 · Nov 28 – Dec 4, 202228
- W47 · Nov 21 – Nov 27, 20229
- W46 · Nov 14 – Nov 20, 202237
- W45 · Nov 7 – Nov 13, 202211
- W44 · Oct 31 – Nov 6, 202210
- W43 · Oct 24 – Oct 30, 20227
- W42 · Oct 17 – Oct 23, 20224
- W41 · Oct 10 – Oct 16, 202212
- W40 · Oct 3 – Oct 9, 20225
- W39 · Sep 26 – Oct 2, 202210
- W38 · Sep 19 – Sep 25, 202215
- W37 · Sep 12 – Sep 18, 20226
- W36 · Sep 5 – Sep 11, 202223
- W35 · Aug 29 – Sep 4, 20227
- W34 · Aug 22 – Aug 28, 202222
- W33 · Aug 15 – Aug 21, 20221
- W32 · Aug 8 – Aug 14, 20224
- W31 · Aug 1 – Aug 7, 202215
- W30 · Jul 25 – Jul 31, 20229
- W29 · Jul 18 – Jul 24, 202212
- W28 · Jul 11 – Jul 17, 202212
- W27 · Jul 4 – Jul 10, 20221
- W26 · Jun 27 – Jul 3, 20226
- W25 · Jun 20 – Jun 26, 20224
- W24 · Jun 13 – Jun 19, 202223
- W23 · Jun 6 – Jun 12, 20227
- W22 · May 30 – Jun 5, 20226
- W21 · May 23 – May 29, 20223
- W20 · May 16 – May 22, 202215
- W19 · May 9 – May 15, 20227
- W18 · May 2 – May 8, 20228
- W17 · Apr 25 – May 1, 20226
- W16 · Apr 18 – Apr 24, 202213
- W15 · Apr 11 – Apr 17, 202217
- W14 · Apr 4 – Apr 10, 20226
- W13 · Mar 28 – Apr 3, 20229
- W12 · Mar 21 – Mar 27, 202210
- W11 · Mar 14 – Mar 20, 202214
- W10 · Mar 7 – Mar 13, 202216
- W9 · Feb 28 – Mar 6, 202213
- W8 · Feb 21 – Feb 27, 202227
- W7 · Feb 14 – Feb 20, 202212
- W6 · Feb 7 – Feb 13, 20229
- W5 · Jan 31 – Feb 6, 202213
- W4 · Jan 24 – Jan 30, 202217
- W3 · Jan 17 – Jan 23, 202215
- W2 · Jan 10 – Jan 16, 20223
- W1 · Jan 3 – Jan 9, 202212
2021 · 48 weeks, 321 records
- W52 · Dec 27, 2021 – Jan 2, 20223
- W51 · Dec 20 – Dec 26, 20215
- W50 · Dec 13 – Dec 19, 202113
- W49 · Dec 6 – Dec 12, 20216
- W48 · Nov 29 – Dec 5, 202113
- W47 · Nov 22 – Nov 28, 20219
- W46 · Nov 15 – Nov 21, 202118
- W45 · Nov 8 – Nov 14, 202114
- W44 · Nov 1 – Nov 7, 202115
- W43 · Oct 25 – Oct 31, 20217
- W42 · Oct 18 – Oct 24, 202112
- W41 · Oct 11 – Oct 17, 202110
- W40 · Oct 4 – Oct 10, 20218
- W39 · Sep 27 – Oct 3, 202110
- W38 · Sep 20 – Sep 26, 20219
- W37 · Sep 13 – Sep 19, 20215
- W36 · Sep 6 – Sep 12, 20214
- W35 · Aug 30 – Sep 5, 20217
- W34 · Aug 23 – Aug 29, 20215
- W33 · Aug 16 – Aug 22, 202110
- W32 · Aug 9 – Aug 15, 20212
- W31 · Aug 2 – Aug 8, 202114
- W30 · Jul 26 – Aug 1, 20213
- W29 · Jul 19 – Jul 25, 20214
- W28 · Jul 12 – Jul 18, 202111
- W27 · Jul 5 – Jul 11, 20216
- W26 · Jun 28 – Jul 4, 20211
- W25 · Jun 21 – Jun 27, 20217
- W24 · Jun 14 – Jun 20, 20212
- W23 · Jun 7 – Jun 13, 20211
- W22 · May 31 – Jun 6, 20215
- W21 · May 24 – May 30, 20213
- W20 · May 17 – May 23, 20212
- W19 · May 10 – May 16, 20217
- W18 · May 3 – May 9, 202110
- W17 · Apr 26 – May 2, 20211
- W16 · Apr 19 – Apr 25, 20212
- W15 · Apr 12 – Apr 18, 20216
- W14 · Apr 5 – Apr 11, 202121
- W13 · Mar 29 – Apr 4, 20211
- W12 · Mar 22 – Mar 28, 20211
- W11 · Mar 15 – Mar 21, 202112
- W10 · Mar 8 – Mar 14, 20211
- W9 · Mar 1 – Mar 7, 20211
- W6 · Feb 8 – Feb 14, 20212
- W5 · Feb 1 – Feb 7, 20211
- W2 · Jan 11 – Jan 17, 20211
- W1 · Jan 4 – Jan 10, 202110
2020 · 36 weeks, 83 records
- W52 · Dec 21 – Dec 27, 20203
- W51 · Dec 14 – Dec 20, 20202
- W49 · Nov 30 – Dec 6, 20203
- W46 · Nov 9 – Nov 15, 20201
- W45 · Nov 2 – Nov 8, 20202
- W43 · Oct 19 – Oct 25, 20203
- W40 · Sep 28 – Oct 4, 20201
- W38 · Sep 14 – Sep 20, 20201
- W37 · Sep 7 – Sep 13, 20201
- W36 · Aug 31 – Sep 6, 20202
- W35 · Aug 24 – Aug 30, 20201
- W31 · Jul 27 – Aug 2, 20201
- W26 · Jun 22 – Jun 28, 20202
- W25 · Jun 15 – Jun 21, 20201
- W24 · Jun 8 – Jun 14, 20201
- W23 · Jun 1 – Jun 7, 20201
- W22 · May 25 – May 31, 20206
- W20 · May 11 – May 17, 20202
- W19 · May 4 – May 10, 20201
- W18 · Apr 27 – May 3, 20202
- W17 · Apr 20 – Apr 26, 20203
- W16 · Apr 13 – Apr 19, 20203
- W15 · Apr 6 – Apr 12, 20204
- W14 · Mar 30 – Apr 5, 20201
- W13 · Mar 23 – Mar 29, 20201
- W12 · Mar 16 – Mar 22, 20203
- W11 · Mar 9 – Mar 15, 20204
- W10 · Mar 2 – Mar 8, 20207
- W9 · Feb 24 – Mar 1, 20205
- W8 · Feb 17 – Feb 23, 20204
- W7 · Feb 10 – Feb 16, 20201
- W6 · Feb 3 – Feb 9, 20201
- W5 · Jan 27 – Feb 2, 20202
- W4 · Jan 20 – Jan 26, 20203
- W3 · Jan 13 – Jan 19, 20202
- W1 · Dec 30, 2019 – Jan 5, 20202
2019 · 35 weeks, 313 records
- W52 · Dec 23 – Dec 29, 20193
- W50 · Dec 9 – Dec 15, 20191
- W49 · Dec 2 – Dec 8, 20191
- W48 · Nov 25 – Dec 1, 20193
- W46 · Nov 11 – Nov 17, 20194
- W43 · Oct 21 – Oct 27, 20191
- W42 · Oct 14 – Oct 20, 20194
- W41 · Oct 7 – Oct 13, 20197
- W40 · Sep 30 – Oct 6, 20192
- W39 · Sep 23 – Sep 29, 20197
- W38 · Sep 16 – Sep 22, 201914
- W37 · Sep 9 – Sep 15, 20198
- W36 · Sep 2 – Sep 8, 20197
- W35 · Aug 26 – Sep 1, 201946
- W34 · Aug 19 – Aug 25, 201985
- W33 · Aug 12 – Aug 18, 201966
- W32 · Aug 5 – Aug 11, 201911
- W31 · Jul 29 – Aug 4, 20195
- W30 · Jul 22 – Jul 28, 20193
- W29 · Jul 15 – Jul 21, 20193
- W28 · Jul 8 – Jul 14, 20193
- W27 · Jul 1 – Jul 7, 20195
- W25 · Jun 17 – Jun 23, 20191
- W23 · Jun 3 – Jun 9, 20191
- W22 · May 27 – Jun 2, 20192
- W21 · May 20 – May 26, 20192
- W20 · May 13 – May 19, 20191
- W18 · Apr 29 – May 5, 20191
- W16 · Apr 15 – Apr 21, 20193
- W15 · Apr 8 – Apr 14, 20191
- W14 · Apr 1 – Apr 7, 20191
- W11 · Mar 11 – Mar 17, 20191
- W10 · Mar 4 – Mar 10, 20195
- W4 · Jan 21 – Jan 27, 20191
- W2 · Jan 7 – Jan 13, 20194
2018 · 29 weeks, 52 records
- W50 · Dec 10 – Dec 16, 20181
- W49 · Dec 3 – Dec 9, 20181
- W48 · Nov 26 – Dec 2, 20181
- W46 · Nov 12 – Nov 18, 20182
- W41 · Oct 8 – Oct 14, 20181
- W40 · Oct 1 – Oct 7, 20182
- W36 · Sep 3 – Sep 9, 20181
- W35 · Aug 27 – Sep 2, 20181
- W26 · Jun 25 – Jul 1, 20182
- W25 · Jun 18 – Jun 24, 20183
- W24 · Jun 11 – Jun 17, 20181
- W23 · Jun 4 – Jun 10, 20181
- W22 · May 28 – Jun 3, 20181
- W21 · May 21 – May 27, 20181
- W20 · May 14 – May 20, 20189
- W18 · Apr 30 – May 6, 20181
- W17 · Apr 23 – Apr 29, 20183
- W14 · Apr 2 – Apr 8, 20181
- W13 · Mar 26 – Apr 1, 20183
- W12 · Mar 19 – Mar 25, 20182
- W11 · Mar 12 – Mar 18, 20183
- W10 · Mar 5 – Mar 11, 20183
- W9 · Feb 26 – Mar 4, 20182
- W8 · Feb 19 – Feb 25, 20181
- W6 · Feb 5 – Feb 11, 20181
- W5 · Jan 29 – Feb 4, 20181
- W4 · Jan 22 – Jan 28, 20181
- W3 · Jan 15 – Jan 21, 20181
- W1 · Jan 1 – Jan 7, 20181
2017 · 18 weeks, 40 records
- W49 · Dec 4 – Dec 10, 20171
- W46 · Nov 13 – Nov 19, 20172
- W43 · Oct 23 – Oct 29, 20172
- W40 · Oct 2 – Oct 8, 20171
- W39 · Sep 25 – Oct 1, 20173
- W38 · Sep 18 – Sep 24, 20171
- W37 · Sep 11 – Sep 17, 20172
- W36 · Sep 4 – Sep 10, 20173
- W35 · Aug 28 – Sep 3, 20171
- W34 · Aug 21 – Aug 27, 20171
- W33 · Aug 14 – Aug 20, 20173
- W32 · Aug 7 – Aug 13, 20172
- W31 · Jul 31 – Aug 6, 20172
- W27 · Jul 3 – Jul 9, 20175
- W21 · May 22 – May 28, 20172
- W19 · May 8 – May 14, 20171
- W17 · Apr 24 – Apr 30, 20177
- W1 · Jan 2 – Jan 8, 20171
2016 · 3 weeks, 3 records
2015 · 15 weeks, 27 records
- W40 · Sep 28 – Oct 4, 20152
- W36 · Aug 31 – Sep 6, 20151
- W26 · Jun 22 – Jun 28, 20151
- W25 · Jun 15 – Jun 21, 20151
- W22 · May 25 – May 31, 20153
- W21 · May 18 – May 24, 20152
- W16 · Apr 13 – Apr 19, 20151
- W12 · Mar 16 – Mar 22, 20152
- W10 · Mar 2 – Mar 8, 20154
- W9 · Feb 23 – Mar 1, 20151
- W6 · Feb 2 – Feb 8, 20153
- W4 · Jan 19 – Jan 25, 20152
- W3 · Jan 12 – Jan 18, 20152
- W2 · Jan 5 – Jan 11, 20151
- W1 · Dec 29, 2014 – Jan 4, 20151
2014 · 18 weeks, 27 records
- W52 · Dec 22 – Dec 28, 20141
- W51 · Dec 15 – Dec 21, 20141
- W49 · Dec 1 – Dec 7, 20143
- W45 · Nov 3 – Nov 9, 20143
- W43 · Oct 20 – Oct 26, 20141
- W42 · Oct 13 – Oct 19, 20142
- W41 · Oct 6 – Oct 12, 20141
- W40 · Sep 29 – Oct 5, 20141
- W37 · Sep 8 – Sep 14, 20141
- W33 · Aug 11 – Aug 17, 20141
- W32 · Aug 4 – Aug 10, 20141
- W28 · Jul 7 – Jul 13, 20142
- W27 · Jun 30 – Jul 6, 20142
- W23 · Jun 2 – Jun 8, 20143
- W22 · May 26 – Jun 1, 20141
- W14 · Mar 31 – Apr 6, 20141
- W11 · Mar 10 – Mar 16, 20141
- W6 · Feb 3 – Feb 9, 20141
2013 · 1 week, 2 records
Download the unpatched plugin list
The full list as a spreadsheet (CSV) or a printable page: plugin, latest version, installs, CVE, type, severity and the recommended action. Handy for checking client sites. Enter your email and the download starts right away.
We keep your email on file and do not share it. The list is a snapshot from 2026-11-04.
Browse vulnerabilities
Common types: Cross-site scripting (XSS) · Missing authorization · Cross-site request forgery (CSRF) · SQL injection · Sensitive data exposure · PHP object injection · Privilege escalation · Remote code execution
Where this data comes from
- Vulnerabilities: NIST National Vulnerability Database (NVD), checked 2026-11-04. This product uses data from the NVD API but is not endorsed or certified by the NVD.
- Plugin versions, update dates and install counts: the wordpress.org Plugins API.
- These lists cover the 3,948 plugins in our catalogue, not every plugin on wordpress.org. We only list a CVE for a plugin when its references or its advisory name that exact plugin, so a few real issues may be missing. Spot an error? Email Daniel.