WordPress plugin vulnerabilities: week 8, 2026
332 vulnerabilities published Feb 16 – Feb 22, 2026 in 304 plugins we track, by day.
6 critical 96 high 225 medium 5 low
Dates are when the CVE record was published (UTC). Versions and fixes reflect our data as of 2026-11-04, so a fix may have shipped since.
“Affected” is the version range the source gives. “Fixed in” is the version the source names, or (marked *) the first wordpress.org release after the last affected version. Each CVE id links to the full record on the plugin’s page.
Sunday, February 22, 2026 · 1
-
medium 5.3 The Plus Addons for Elementor
Security issue
Saturday, February 21, 2026 · 2
-
medium 4.8 LearnPress
-
medium 6.5 weMail
Friday, February 20, 2026 · 111
-
high 7.1 PixelYourSite
-
high 7.5 Authorsy
-
high 8.5 JS Help Desk
-
medium 6.5 Simple File List
-
critical 9.3 Download Manager Addons for Elementor
-
medium 6.5 Subscribe2
-
high 7.5 WP Job Portal
-
high 8.8 Banner Management For WooCommerce
-
high 7.1 Link Whisper Free
-
high 7.1 افزونه پیامک ووکامرس
-
high 7.5 WP FullCalendar
-
high 7.5 Jetpack CRM
-
high 8.8 Image Gallery
-
high 8.8 Responsive Slideshow
-
medium 6.5 Cliengo
-
high 7.5 Cnvrse
-
high 7.1 iMoney
-
high 7.5 affects latest 4.2.1 Simple Retail Menus
-
high 7.1 affects latest 1.3.2 Business Template Blocks for WPBakery (Visual…
-
high 7.1 affects latest 1.2.6 Visitor Maps Extended Referer Field
-
high 7.1 affects latest 8.1.8 RVCFDI para Woocommerce
-
high 7.1 Timeline Event History
-
high 7.5 affects latest 2.6.1 WPshop 2
-
high 8.1 Eleblog
-
high 8.8 Booking and Rental Manager for Bike
-
high 7.1 NEX-Forms
-
high 7.1 NEX-Forms
-
medium 5.3 Primer MyData for Woocommerce
-
high 7.1 SlimStat Analytics
-
medium 6.5 AhaChat Messenger Marketing
-
medium 6.5 Cool Tag Cloud
-
high 8.6 New User Approve
-
high 7.1 affects latest 5.2 Simple Archive Generator
-
high 8.8 Contact Manager
-
high 7.1 affects latest 1.3.2 iContact for Gravity Forms
-
high 7.1 affects latest 2.1.2 ID Arrays
-
medium 5.9 affects latest 1.2.8 JobBoard Job listing plugin
-
high 7.1 affects latest 1.1.1 Mopinion Feedback Form
-
high 7.7 Woo File Dropzone
-
high 7.1 affects latest 2.3 amr cron manager
-
high 7.1 affects latest 1.3.5 Asynchronous Javascript
-
high 7.1 Court Reservation
-
high 7.1 affects latest 1.2 eDS Responsive Menu
-
high 7.1 affects latest 0.6.2 FeedWordPress Advanced Filters
-
high 7.1 iSape
-
high 7.1 Membee Login
-
high 7.5 Sync Master Sheet
-
medium 6.5 Sendy
-
high 7.5 Topper Pack
-
high 7.1 Widget Logic Visual
-
medium 6.5 Checkout Gateway for IRIS
-
high 8.8 Modal Popup Box
-
high 7.1 Mollie Payments for WooCommerce
-
medium 6.5 Paid Membership Subscriptions
-
high 7.1 Directorist
-
high 7.5 Shiprocket
-
medium 6.5 AWCA
-
high 7.1 Export Media URLs
-
high 7.1 افزونه پیامک حرفه ای فراز اس ام اس
-
medium 6.5 Leadpages
-
high 7.3 LottieFiles
-
medium 6.5 Travelpayouts
-
high 7.5 NextMove Lite
-
medium 6.5 Addonify
-
medium 6.5 affects latest 1.2.17 Addonify Floating Cart For WooCommerce
-
medium 6.5 Addonify
-
high 7.3 Plugin BlueX for WooCommerce
-
medium 6.5 ConveyThis AI Multilingual Translation
-
medium 6.5 TrueAna
-
medium 6.5 Connector Wizard (formerly LC Wizard)
-
medium 6.5 Easy Hotel
-
medium 6.5 Open User Map
-
medium 6.5 Testimonial
-
medium 6.5 Atarim
-
high 7.1 GMap Targeting
-
high 7.5 YayCurrency
-
high 7.1 Educare
-
critical 9.9 GSheetConnector
-
high 7.1 NPS computy
-
high 8.5 Quiz and Survey Master (QSM)
-
medium 6.5 aDirectory
-
high 7.1 FluentCart
-
high 8.2 HAPPY
-
medium 5.9 Schedula
-
medium 6.5 Sunshine Photo Cart
-
medium 4.3 Zoho ZeptoMail
-
medium 6.5 UPI QR Code Payment Gateway for WooCommerce
-
medium 5.9 Silencesoft RSS Reader
-
medium 6.5 affects latest 1.1.3 Optimize More!
-
high 7.1 Storyform
-
high 7.1 WP Wizard Cloak
-
high 7.6 Page Builder
-
high 7.1 bbpress Simple Advert Units
-
high 7.1 Easy Taxonomy Images
-
high 7.7 Inpersttion For Theme
-
medium 6.5 Elementor Website Builder
-
medium 6.5 LiteSpeed Cache
-
medium 5.9 Master Addons for Elementor
-
medium 5.3 SecuPress with Simple SSL
-
medium 4.3 Seraphinite Accelerator
-
medium 6.5 Nexter Blocks
-
medium 5.3 Shared Files
-
medium 6.4 Master Addons for Elementor
-
medium 6.4 Quiz Maker by AYS
Thursday, February 19, 2026 · 154
-
medium 5.3 Website Builder by SeedProd
-
medium 5.4 DirectoryPress
-
medium 5.9 Photo Gallery by 10Web
-
medium 4.3 YayMail
-
high 7.5 wpForo Forum
-
medium 6.4 Dealia
-
medium 4.4 Client Testimonial Slider
-
medium 5.3 MP3 Audio Player
-
medium 6.5 Simple Membership
Security issue
-
medium 6.5 Page Builder Gutenberg Blocks
-
medium 6.5 WPAdverts
-
medium 4.3 Kenta Companion
-
medium 6.5 Shortcoder
-
medium 4.3 Kadence Central
-
medium 5.3 NotificationX
-
medium 5.4 RealPress
-
medium 6.5 Advanced iFrame
-
medium 6.5 Bold Page Builder
-
medium 5.3 LeadConnector
-
medium 6.5 affects latest 1.6.7 Omnipress
-
medium 4.4 TS Poll
-
low 3.8 Real3D Flipbook
-
high 7.6 Bit Form
-
medium 4.3 UpsellWP
-
medium 4.3 News Kit Addons For Elementor
-
medium 4.3 MailerLite
-
medium 5.4 affects latest 1.2.10 Popularis Extra
-
medium 5.3 Broken Link Notifier
-
medium 4.3 Cookiebot
-
medium 4.3 Echo Knowledge Base
-
medium 4.3 Revision Manager TMC
-
medium 4.3 affects latest 0.2.2 WP-CORS
-
medium 4.3 affects latest 1.1.1 JAMstack Deployments
-
medium 5.3 WP Job Manager
-
medium 5.4 WP Wand
-
medium 4.3 Serious Slider
-
medium 5.3 EventPrime
-
medium 4.7 Search & Replace Everything
-
medium 4.3 Image Photo Gallery Final Tiles Grid
-
medium 4.3 Image Optimizer
-
high 7.6 Nelio A/B Testing
-
medium 5.3 Web Accessibility (formally known as Ally)
-
medium 5.5 URL Shortify
-
medium 5.3 WP-Lister Lite for eBay
-
medium 6.5 Academy LMS
-
medium 6.5 Calculated Fields Form
-
medium 4.3 FooGallery Photo Gallery
-
medium 5.9 FooGallery Photo Gallery
-
medium 5.3 Sprout Invoices
-
medium 5.3 WP Compress
-
medium 5.3 Alt Text AI
-
medium 5.9 WSMS (formerly WP SMS)
-
medium 5.3 Endless Posts Navigation
-
medium 4.3 Quiz and Survey Master (QSM)
-
medium 6.5 WP Activity Log
-
medium 4.3 OSM
-
medium 5.3 Quiz and Survey Master (QSM)
-
medium 5.4 PublishPress Revisions
-
medium 5.3 FormsDB
-
medium 5.3 SupportCandy
-
medium 4.3 WiserReview Product Reviews for WooCommerce
-
medium 4.3 Zita Site Library for Elementor
-
high 7.2 CartFlows
-
medium 4.9 Extend Link
-
medium 4.3 Fluent Forms
-
medium 5.3 hCaptcha for WP
-
medium 4.3 Simple Membership
-
medium 4.3 TOP Table Of Contents
-
medium 4.3 Client Portal
-
medium 5.9 CM Business Directory
-
medium 4.3 Ninja Tables
-
medium 5.3 Frontend File Manager Plugin
-
medium 5.3 Alma
-
medium 5.4 Better Business Reviews
-
medium 5.9 HurryTimer
-
high 7.6 Media Search Enhanced
-
medium 6.4 Smart Auto Upload Images
-
medium 5.3 Wheel of Life
-
medium 5.3 Ultimate Gift Cards for WooCommerce
-
medium 6.5 Aruba HiSpeed Cache
-
medium 5.3 DirectoryPress
-
medium 5.3 Essential Addons for Elementor
-
critical 9.8 Event Booking Manager for WooCommerce
-
medium 5.3 Everest Forms
-
high 7.5 Mail Mint
-
high 7.2 YITH WooCommerce Compare
-
medium 4.3 Dealia
-
medium 5.4 News Element Elementor Blog Magazine
-
medium 4.4 Slidorion
-
medium 6.1 xmlrpc attacks blocker
-
medium 6.4 Advance Block Extend
-
critical 9.8 s2Member
-
medium 6.4 Easy Author Image
-
medium 4.4 salavat counter Plugin
-
critical 9.8 Slider Future
-
medium 4.4 TalkJS
-
medium 4.4 Tennis Court Bookings
-
high 8.8 Orderable
-
medium 4.4 PostmarkApp Email Integrator
-
critical 9.8 Prodigy Commerce
-
high 8.8 Toret Manager
-
medium 6.4 Groups
-
medium 6.5 Shield Security
-
medium 6.1 Shield Security
-
medium 6.4 XO Event Calendar
-
high 8.8 IDonate
-
medium 6.4 Advanced Custom Fields
-
high 7.2 BackWPup
-
medium 6.4 Image Hotspot by DevVN
-
medium 4.3 Virusdie
-
high 7.2 WP Customer Reviews
-
medium 4.3 Shield Security
-
medium 6.4 YaMaps for WordPress Plugin
-
medium 6.1 iXML
-
low 2.7 OneClick Chat to Order
-
medium 4.3 Remove Post Type Slug
-
medium 4.3 GEO Plugin by Squirrly SEO
-
medium 5.3 Razorpay for WooCommerce
-
medium 5.3 Breadcrumb NavXT
-
medium 5.3 Breeze Cache
-
medium 6.4 Easy Table of Contents
-
medium 6.4 Album and Image Gallery Plus Lightbox
-
medium 6.4 Apollo13 Framework Extensions
-
medium 6.4 s2Member
-
high 8.8 WP AUDIO GALLERY
-
medium 6.5 Two Factor (2FA) Authentication via Email
-
medium 5.3 Web Accessibility by accessiBe
-
medium 4.3 affects latest 1.0 Country Blocker for AdSense
-
medium 4.3 Page Title, Description & Open Graph Updater
-
medium 4.3 Advanced Ads
-
medium 6.4 StatCounter
-
medium 5.3 Popup Builder
Security issue
-
high 7.2 Product Feed Manager for WooCommerce
-
medium 4.4 Easy SVG Support
-
high 7.5 Library Management System
-
medium 6.4 Smartsupp
-
high 8.8 Tablesome Table
-
medium 4.3 Mailchimp List Subscribe Form
-
medium 4.3 ACF Photo Gallery Field
-
medium 6.4 Printful Integration for WooCommerce
-
medium 6.5 Aruba HiSpeed Cache
-
high 7.5 WPLP Cookie Consent
-
medium 4.3 Mesmerize Companion
-
medium 6.1 Aruba HiSpeed Cache
Wednesday, February 18, 2026 · 55
-
medium 4.3 Booking Calendar
-
high 8.8 Advanced AJAX Product Filters
-
medium 6.1 Ultimate Member
-
medium 4.3 The Plus Addons for Elementor
-
low 3.7 WP All Export
-
medium 6.5 WP Ultimate CSV Importer
-
medium 4.9 Bookster
-
medium 6.5 Brevo
Security issue
-
medium 6.5 Blog2Social
-
medium 6.5 WP-DownloadManager
-
medium 5.3 RegistrationMagic
Security issue
-
medium 5.3 User Submitted Posts
-
medium 4.4 Video Share VOD
-
medium 6.4 Complianz GDPR/CCPA Cookie Consent Banner
-
high 7.5 WPNakama
-
medium 5.3 Business Directory Plugin
-
medium 4.4 Community Events
-
medium 5.4 SiteOrigin Widgets Bundle
-
medium 6.4 WP Event Aggregator
-
medium 4.3 Dam Spam
-
medium 4.3 Kali Forms
-
low 2.7 WP-DownloadManager
-
medium 4.4 YayMail
-
medium 5.3 YayMail
-
medium 4.3 EventPrime
-
low 2.7 YayMail
-
medium 4.3 Kadence Blocks
-
medium 4.4 Private Comment
-
high 7.2 CartSuite
-
high 7.2 Product Addons for Woocommerce
-
high 7.2 YayMail
-
medium 6.1 Download Manager
-
medium 6.4 InteractiveCalculator for WordPress
-
medium 4.3 Kadence Blocks
-
medium 4.3 Taskbuilder
-
medium 4.3 WP Plugin Info Card
-
medium 4.4 Membership Plugin
-
medium 6.5 Taskbuilder
-
high 7.5 Video Conferencing with Zoom
-
medium 4.3 PDF Invoices & Packing Slips for WooCommerce
-
medium 6.4 Popup Box
-
medium 4.3 Tickera
-
medium 4.3 Keybase.io Verification
-
medium 6.4 VK All in One Expansion Unit
-
high 7.5 Business Directory Plugin
-
medium 4.3 EmailKit
-
high 7.2 Rent Fetch
-
high 8.6 ShopLentor
Security issue
-
medium 6.1 Frontend Post Submission Manager Lite
-
medium 4.7 URL Shortify
-
medium 6.4 Display During Conditional Shortcode
-
medium 6.4 affects latest 2.0.8 Filestack
-
medium 4.3 Order Splitter for WooCommerce
-
medium 4.3 Frontend User Notes
-
medium 4.4 WP 404 Auto Redirect to Similar Post
Tuesday, February 17, 2026 · 8
-
medium 6.5 SP Project & Document Manager
-
medium 4.3 Kadence Blocks
-
high 7.2 WP RSS Aggregator
-
medium 5.8 Frontend File Manager Plugin
-
medium 5.3 EventPrime
-
medium 4.4 Forminator Forms
Monday, February 16, 2026 · 1
-
high 8.8 WowRevenue
Ran a vulnerable version? Check your site for signs of a hack
The free scan reads the public side of your site and looks for spam pages, hidden redirects, injected scripts and blacklist entries. No login, no install, about a minute.
Browse vulnerabilities
Common types: Cross-site scripting (XSS) · Missing authorization · Cross-site request forgery (CSRF) · SQL injection · Sensitive data exposure · PHP object injection · Privilege escalation · Remote code execution
Where this data comes from
- Vulnerabilities: NIST National Vulnerability Database (NVD), checked 2026-11-04. This product uses data from the NVD API but is not endorsed or certified by the NVD.
- Plugin versions, update dates and install counts: the wordpress.org Plugins API.
- These lists cover the 3,948 plugins in our catalogue, not every plugin on wordpress.org. We only list a CVE for a plugin when its references or its advisory name that exact plugin, so a few real issues may be missing. Spot an error? Email Daniel.