blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

CVEs stored22,604
Affected records46,307
Newest source updateNovember 9, 2026
CVE-2026-87971 October 7, 2026
The If-So Dynamic Content WordPress plugin before 1.10.2 does not validate the URL scheme of a request-supplied value before reflecting it into a link on an admin page, allowing attackers to execute arbitrary JavaScript… Full details
HIGH 7.1
CVE-2026-87782 October 7, 2026
The Koinonia Link WordPress plugin before 1.1.5 does not check that a user is allowed to change roles before saving a role selection submitted with a profile update, allowing any authenticated user, such as… Full details
HIGH 8.8
CVE-2026-86833 October 7, 2026
The MetForm WordPress plugin before 4.3.1 does not sanitize or escape submitted form-field values before inserting them into the HTML body of its email notifications, allowing unauthenticated attackers to inject arbitrary markup into the… Full details
MEDIUM 5.4
CVE-2026-86816 October 7, 2026
The WPCafe WordPress plugin before 3.0.21 does not restrict access to some of its REST API endpoints, allowing unauthenticated attackers to read WooCommerce product data, including per-product sales counts, exact stock levels, and private… Full details
MEDIUM 5.3
CVE-2026-82212 October 7, 2026
The Nexi XPay Build WordPress plugin through 7.6.2 does not correctly validate the security token on its payment notification route, accepting the request when the target order has no stored token, which allows unauthenticated… Full details
HIGH 7.5
CVE-2026-82211 October 7, 2026
The Nexi XPay Build WordPress plugin through 7.6.2 does not verify the payment result supplied to several of its unauthenticated routes, allowing attackers to mark arbitrary orders as paid or failed, to cancel them,… Full details
HIGH 8.2
CVE-2026-105322 October 7, 2026
The Magee Shortcodes WordPress plugin through 2.1.1 does not restrict the recipient of some of its unauthenticated contact-form actions, allowing unauthenticated users to send arbitrary emails to any address through the site (mail relay). Full details
MEDIUM 5.3
CVE-2026-105316 October 7, 2026
The Magee Shortcodes WordPress plugin through 2.1.1 does not sanitise and escape user input in some of its AJAX actions, which are available to unauthenticated users, before reflecting it back in the response, leading… Full details
HIGH 7.1
CVE-2026-104953 October 7, 2026
The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL… Full details
MEDIUM 6.8
CVE-2026-104678 October 7, 2026
The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing users with only Contributor-level access to create, modify, duplicate and delete the site-wide media player… Full details
LOW 2.7
CVE-2026-104677 October 7, 2026
The WP Coder WordPress plugin before 4.5.2 does not restrict access to its PHP code-execution feature to administrators, gating it on a content capability that the Editor role holds by default, which allows Editor-level… Full details
HIGH 7.2
CVE-2026-104667 October 7, 2026
The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders… Full details
MEDIUM 6.8
CVE-2026-104653 October 7, 2026
The Envira Gallery WordPress plugin before 1.16.1 does not sanitise or escape user-supplied gallery display configuration values before storing them and outputting them in an image tag attribute, allowing users with the Author role… Full details
MEDIUM 6.8
CVE-2026-104652 October 7, 2026
The Envira Gallery WordPress plugin before 1.16.1 does not sanitise and escape a gallery item identifier before outputting it in an image tag attribute, allowing users with the Author role and above to inject… Full details
MEDIUM 6.8
CVE-2026-104651 October 7, 2026
The Yaad Sarig Payment Gateway For WC WordPress plugin before 2.2.13 does not verify authorization or that the requesting user owns the target order in several of its order payment-processing actions, allowing any authenticated… Full details
MEDIUM 4.3
CVE-2026-104050 October 7, 2026
The Academy LMS WordPress plugin before 4.0.0 does not verify that a quiz question belongs to the course the requesting user is authorized to access before returning that question's answer options, allowing any authenticated… Full details
MEDIUM 4.3
CVE-2026-104049 October 7, 2026
The Academy LMS WordPress plugin before 4.0.0 does not verify course enrollment or object ownership when returning a lesson's content through one of its REST API routes, allowing users with a self-registerable student account… Full details
MEDIUM 4.3
CVE-2026-103681 October 7, 2026
The Frontend Dashboard WordPress plugin before 3.0.0 does not perform a capability check in one of its AJAX actions, allowing authenticated users with low privileges, such as subscribers, to delete the Frontend Dashboard WordPress… Full details
MEDIUM 4.3
CVE-2026-103378 October 7, 2026
The Geliver Akıllı Kargo Pazaryeri WordPress plugin before 3.1.1 does not prevent unauthenticated access to a log file it stores within its own web-accessible directory, into which it writes the site's carrier integration key… Full details
MEDIUM 6.5
CVE-2026-103323 October 7, 2026
The Integration for Epos Now and WooCommerce WordPress plugin before 4.11.2 does not perform an authorization check on one of its REST endpoints, allowing unauthenticated users to retrieve the site's scheduled background tasks and… Full details
MEDIUM 5.9
CVE-2026-102173 October 7, 2026
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via registration metadata in all versions up to, and including, 6.3.1 This is due to… Full details
HIGH 7.2
CVE-2026-66666 October 6, 2026
Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedded Sensitive Data. This issue affects WordPress: from 7.1 through 7.1.2, from 7.0 through 7.0.6, from 6.9 through 6.9.9, from 6.8… Full details
MEDIUM 6.9
CVE-2026-41559 October 6, 2026
Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore Full details
HIGH 7.5
CVE-2026-32579 October 6, 2026
Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress Full details
CRITICAL 10
CVE-2026-105059 October 6, 2026
Missing Authorization vulnerability in royalnavneet Delete All Comments of wordpress delete-all-comments-of-website allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Delete All Comments of wordpress: from n/a through 7.1. Full details
MEDIUM 6.5
CVE-2026-94299 October 6, 2026
The elegro Crypto Payment WordPress plugin through 1.0.1 does not require a shared secret to be configured before trusting incoming payment notification requests, allowing unauthenticated attackers to forge payment confirmations and change the status… Full details
MEDIUM 6.5
CVE-2026-94278 October 6, 2026
The File Media Renamer WordPress plugin through 1.3 does not verify that the requesting user is authorised to modify a given media attachment, allowing any user with file-upload privileges to rename attachments belonging to… Full details
MEDIUM 5.5
CVE-2026-94271 October 6, 2026
The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the payment with the payment provider when handling the return from the hosted checkout, and does not check the payment status or amount,… Full details
MEDIUM 5.3
CVE-2026-94270 October 6, 2026
The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the authenticity of incoming payment provider notifications, and ships with that verification disabled by default, allowing unauthenticated attackers to mark an unpaid order… Full details
MEDIUM 5.3
CVE-2026-89289 October 6, 2026
The Fast Courier WordPress plugin through 5.2.3 does not restrict an unauthenticated REST route that writes order fulfillment data, allowing unauthenticated attackers to overwrite the courier status and customer-facing tracking details of any WooCommerce… Full details
MEDIUM 5.3
CVE-2026-86786 October 6, 2026
The Slider Pro WordPress plugin through 1.0.0 does not perform any capability or authorisation check on one of its AJAX actions, allowing unauthenticated users to retrieve the title, excerpt and permalink of non-public posts,… Full details
MEDIUM 5.3
CVE-2026-105701 October 6, 2026
The ACPT (Premium) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.66 via the render function. This is due to missing capability check on the REST… Full details
HIGH 8.8
CVE-2026-75962 October 6, 2026
The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_email' parameter in all… Full details
HIGH 7.2
CVE-2026-97305 October 5, 2026
Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from… Full details
MEDIUM 6.9
CVE-2026-105397 October 5, 2026
LearnPress plugin for WordPress through 4.4.9.1 contains a stored cross-site scripting vulnerability that allows authenticated instructors to inject scripts via quiz question hint and explanation fields. Attackers with the Instructor role can submit unsanitized… Full details
MEDIUM 5.1
CVE-2026-84169 October 5, 2026
The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does not verify that a payment-confirmation request actually belongs to the order and customer it claims to confirm, allowing unauthenticated attackers to mark an… Full details
MEDIUM 5.3
CVE-2026-78371 October 5, 2026
The File Uploads Addon for WooCommerce WordPress plugin before 1.7.6 does not verify that the person requesting a customer-uploaded file is the customer who uploaded it, allowing unauthenticated attackers who know or guess a… Full details
MEDIUM 5.9
CVE-2026-13607 October 5, 2026
The File Uploads Addon for WooCommerce WordPress plugin through 1.7.6 stores customer-uploaded files in a publicly web-accessible uploads directory and the access restriction it generates is ineffective, so an unauthenticated attacker who knows or… Full details
MEDIUM 5.9
CVE-2026-97332 October 4, 2026
The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite installations, where the rewrite rule it relies on to route file requests through its access check… Full details
MEDIUM 5.3
CVE-2026-93549 October 4, 2026
The CoCart WordPress plugin before 4.9.7 does not scope its REST API authentication filter to its own endpoints, which disables WordPress core's REST nonce protection for every route, allowing an attacker to perform a… Full details
HIGH 8.8
CVE-2026-86817 October 4, 2026
The Five Star Business Profile and Schema WordPress plugin before 2.4.0 does not properly restrict the callbacks used to resolve schema field default values, allowing authenticated users with Author-level access and above to store… Full details
MEDIUM 4.9
CVE-2026-17005 October 4, 2026
The Horizontal scrolling announcements WordPress plugin through 2.6 does not sanitise and escape one of its announcement settings before outputting it into an attribute context on the front end, allowing users granted access to… Full details
MEDIUM 6.8
CVE-2026-104119 October 4, 2026
The Simple Shopping Cart WordPress plugin before 5.2.6 does not escape some of its settings field values before outputting them on an admin settings page, allowing high-privilege users such as administrators to perform Stored… Full details
LOW 3.5
CVE-2026-104118 October 4, 2026
The Razorpay for WooCommerce WordPress plugin before 4.8.8 does not perform ownership or authorization checks on a REST API route used during checkout, allowing unauthenticated attackers to modify the shipping information stored on arbitrary… Full details
MEDIUM 5.3
CVE-2026-92767 October 3, 2026
The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'offset' Shortcode Attribute in all versions up to, and including, 2.0.5 due to insufficient input sanitization and output escaping. This… Full details
MEDIUM 6.4
CVE-2026-92084 October 3, 2026
The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.11.0.5. This is due to the… Full details
CRITICAL 9.1
CVE-2026-97660 October 3, 2026
The WPC Product Options for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via wpcpo-* Array Key via Multipart Field Name in all versions up to, and including, 4.0.5 due to insufficient… Full details
HIGH 7.2
CVE-2026-97343 October 3, 2026
The Burst Statistics – Simple WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Improper Authentication leading to Account Persistence in all versions up to, and including, 3.7.1. This is due to… Full details
MEDIUM 4.3