Database
WordPress vulnerabilities listed in CISA KEV (page 6)
Plugin and theme vulnerabilities that CISA lists in its Known Exploited Vulnerabilities catalog. If you run any of these versions, patch first and check for signs of compromise.
- Medium5.3Missing Authorization
WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory
≤2.10.4Update to 2.10.5
- Medium4.3Missing Authorization
FloristPress for Woo – Customize your eCommerce store for your Florist
≤7.8.5Update to 7.8.6
- Medium5.3Missing Authorization
Premium Blocks – Gutenberg Blocks, Patterns & Templates
≤2.3.18Update to 2.3.19
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
ShopEngine – All-in-One Elementor WooCommerce Builder with eCommerce Templates & Woo Widgets
≤4.9.8Update to 4.9.9
- Medium5.3Missing Authorization
CURCY – Multi Currency for WooCommerce
≤2.2.20Update to 2.2.21
- Medium5.3Missing Authorization
Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
≤4.0.2Update to 4.0.3
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI
≤3.6.3Update to 3.6.4
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Appointment Booking Plugin for WooCommerce | Online Booking Calendar & Service Manager
≤1.4.3Update to 1.4.4
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
JetEngine
≤3.9.0.2Update to 3.9.1
- High7.2Unauthenticated Stored Cross-Site Scripting
TranslatePress – Translate Multilingual sites with AI Translation
≤3.3.8Update to 3.3.9
- High7.5Unauthenticated Denial of Service
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more
≤3.13.6Update to 3.13.7
- High7.2Unauthenticated Stored Cross-Site Scripting
Iptanus File Upload
≤5.2.2Update to 5.2.3
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
Directorist: AI-Powered Business Directory, Listings & Classified Ads
≤8.10.7Update to 8.11
- Medium5.3Missing Authorization
Autopay dla WooCommerce
≤2.3.0Update to 2.3.1
- Medium5.3Missing Authorization
Formidable Forms Signature Online Contract Automation
≤2.0.5Update to 2.0.6
- Medium5.3Missing Authorization
Radius Booking – Appointment Booking Calendar & Scheduling for Services & Events
≤1.0.20Update to 1.0.21
- Medium4.3Missing Authorization
HivePress – Business Directory, Listings & Classified Ads Plugin
≤1.8.1Update to 1.8.2
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
Mang Board
≤2.4.7Update to 2.4.8
- Medium6.1Reflected Cross-Site Scripting
Mang Board
≤2.4.7Update to 2.4.8
- Medium5.3Missing Authorization
JS Help Desk – AI-Powered Support & Ticketing System
≤5.0.3Update to 5.0.4
- Medium4.3Missing Authorization
Motors – Car Dealership & Classified Listings Plugin
≤1.4.128Update to 1.4.129
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
WP Customer Area
≤8.4.3Update to 8.4.4
- High7.2Unauthenticated Stored Cross-Site Scripting
Featured Image from URL (FIFU)
≤6.1.4Update to 6.1.5
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
TI WooCommerce Wishlist
≤2.14.0Update to 2.14.1
- High7.2Unauthenticated Stored Cross-Site Scripting
RSVP and Event Management
≤2.7.17Update to 2.7.18
- Medium5.3Missing Authorization
MapSVG – Vector maps, Google Maps, Image maps – with AI assistant
≤8.16.3Update to 9.0.0
- Medium5.3Missing Authorization
2Way VideoCalls and Random Chat – HTML5 Webcam Videochat
≤6.1.9Update to 6.1.10
- Medium5.3Missing Authorization
The Innovative Form Builder – IvyForms
≤1.5.1Update to 1.5.2
- Medium4.3Missing Authorization
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI
≤3.6.3Update to 3.6.4
- Medium4.3Missing Authorization
Contextual Related Posts
≤4.5.3Update to 4.5.4