WordPress vulnerabilities

124 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoCClear all

CVESoftwareSignalsCVSSPublished

CVE-2026-107776Dokan< 5.3.32.2low05 Nov 2026

CVE-2026-100109Security For WooCommerce9.8critical05 Nov 2026

CVE-2026-91049EWWW Image Optimizer<= 8.9.0—unscored05 Nov 2026

CVE-2026-90967Essential Real Estate< 5.3.5—unscored05 Nov 2026

CVE-2026-90966Essential Real Estate< 5.3.5—unscored05 Nov 2026

CVE-2026-90965Essential Real Estate< 5.3.5—unscored05 Nov 2026

CVE-2026-90964Essential Real Estate< 5.3.5—unscored05 Nov 2026

CVE-2026-90963Essential Real Estate< 5.3.5—unscored05 Nov 2026

CVE-2026-88814YITH WooCommerce Gift Cards< 4.38.1—unscored05 Nov 2026

CVE-2026-87856Subscriptions for WooCommerce< 2.1.1—unscored05 Nov 2026

CVE-2026-86795Community Events< 1.6.0—unscored05 Nov 2026

CVE-2026-86442WP Event Manager< 3.4.2—unscored05 Nov 2026

CVE-2026-85570Tutor LMS< 4.2.0—unscored05 Nov 2026

CVE-2026-85351FV Flowplayer Video Player< 7.5.56.7212—unscored05 Nov 2026

CVE-2026-85347FV Flowplayer Video Player< 7.5.56.7212—unscored05 Nov 2026

CVE-2026-85346FV Flowplayer Video Player< 7.5.56.7212—unscored05 Nov 2026

CVE-2026-19256All In One Login< 2.5.0—unscored05 Nov 2026

CVE-2026-16304WP Event Manager< 3.4.2—unscored05 Nov 2026

CVE-2026-109150WP PageNavi Style<= 1.4—unscored05 Nov 2026

CVE-2026-107787CatFolders< 2.5.7—unscored05 Nov 2026

CVE-2026-107786CatFolders< 2.5.7—unscored05 Nov 2026

CVE-2026-107775Dokan: AI Powered WooCommerce Multivendor Marketplace Solution< 5.3.3—unscored05 Nov 2026

CVE-2026-107774Dokan: AI Powered WooCommerce Multivendor Marketplace Solution< 5.3.3—unscored05 Nov 2026

CVE-2026-107773Dokan: AI Powered WooCommerce Multivendor Marketplace Solution< 5.3.3—unscored05 Nov 2026

CVE-2026-105971Car Dealer (Dealership) and Vehicle sales<= 4.73—unscored05 Nov 2026