Database

WordPress Vulnerability Database (page 2)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

WordPress Vulnerability Database (page 2)
Severity	Vulnerability	CVE	Installs	Published
Medium5.3	Missing Authorization Redirection for Contact Form 7<3.2.16Update to 3.2.16	CVE-2026-121873	—	Nov 11
Medium5.3	Missing Authorization WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory≤2.10.4Update to 2.10.5	CVE-2026-124413	—	Nov 11
Medium4.3	Cross-Site Request Forgery vice≤1.4No patch available	CVE-2026-125844	—	Nov 11
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting Bold Page Builder≤5.9.11Update to 5.9.12	CVE-2026-125455	—	Nov 11
Medium5.3	Missing Authorization RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress≤4.1235Update to 4.1236	CVE-2026-125438	—	Nov 11
Medium6.3	Authenticated (Subscriber+) Privilege Escalation Simpler Checkout<1.5.4Update to 1.5.4	CVE-2026-121870	—	Nov 11
High7.3	Unauthenticated Privilege Escalation Forminator Forms – Contact Form, Payment Form & Custom Form Builder<1.58.4Update to 1.58.4	CVE-2026-111579	—	Nov 11
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting Schema & Structured Data for WP & AMP<1.70Update to 1.70	CVE-2026-119035	—	Nov 11
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting Element Pack Addons for Elementor – MCP & AI-Ready Elementor Widgets, Elementor Templates, Elementor Addons≤10.0.4Update to 10.0.5	CVE-2026-125708	—	Nov 11
Medium4.3	Missing Authorization WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System≤3.0.22Update to 3.0.23	CVE-2026-124408	—	Nov 11
Medium4.3	Authenticated (Contributor+) Insecure Direct Object Reference Schema & Structured Data for WP & AMP<1.70Update to 1.70	CVE-2026-119033	—	Nov 11
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting Display Eventbrite Events≤6.9.1Update to 6.9.2	CVE-2026-123480	—	Nov 11
Medium5.3	Unauthenticated Insecure Direct Object Reference Data Tables Generator by Supsystic – Excel-like, WooCommerce & Pricing Tables<1.15.8Update to 1.15.8	CVE-2026-110016	—	Nov 11
Medium4.3	Cross-Site Request Forgery Mazino≤1.1No patch available	CVE-2026-125846	—	Nov 11
Medium6.4	Authenticated (Author+) Stored Cross-Site Scripting Dynific Addons for Elementor (formerly Anywhere Elementor)<1.3.1Update to 1.3.1	CVE-2026-117522	—	Nov 11
Medium4.3	Missing Authorization Schema & Structured Data for WP & AMP<1.70Update to 1.70	CVE-2026-119032	—	Nov 11
Low2.7	Missing Authorization Code Snippets<4.1.0Update to 4.1.0	CVE-2026-106468	—	Nov 11
Medium5.3	Unauthenticated Information Exposure Forminator Forms – Contact Form, Payment Form & Custom Form Builder<1.58.4Update to 1.58.4	CVE-2026-111597	—	Nov 11
Medium5.3	Missing Authorization ZoloBlocks – Advanced Gutenberg Blocks, Website Builder & Page Design Toolkit≤2.8.2Update to 2.8.4	CVE-2026-124421	—	Nov 11
Medium5.3	Missing Authorization Event Tickets and Registration<5.30.3.1Update to 5.30.3.1	CVE-2026-122061	—	Nov 11
Medium5.3	Missing Authorization Create≤3.1.1Update to 3.1.2	CVE-2026-125046	—	Nov 11
Medium4.3	Missing Authorization WP Job Portal – AI-Powered Recruitment System for Company or Job Board website≤2.7.2Update to 2.8.0	CVE-2026-124753	—	Nov 11
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting Element Pack Addons for Elementor – MCP & AI-Ready Elementor Widgets, Elementor Templates, Elementor Addons≤10.0.3Update to 10.0.4	CVE-2026-124752	—	Nov 11
Medium4.3	Missing Authorization Photo Engine (Media Organizer & Lightroom)<6.6.2Update to 6.6.2	CVE-2026-123666	—	Nov 11
Medium4.3	Authenticated (Contributor+) Information Exposure Dynific Addons for Elementor (formerly Anywhere Elementor)<1.3.1Update to 1.3.1	CVE-2026-117524	—	Nov 11
Medium5.3	Missing Authorization King Addons for Elementor – 100+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce Builder, Mega Menu, Popup Builder≤51.1.87Update to 51.1.90	CVE-2026-125444	—	Nov 11
Medium4.3	Missing Authorization PowerPress Podcasting plugin by Blubrry≤11.18.2Update to 11.18.3	CVE-2026-125782	—	Nov 11
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates≤3.51.0Update to 3.51.3	CVE-2026-123473	—	Nov 11
Medium4.3	Cross-Site Request Forgery Leo≤1.7.4No patch available	CVE-2026-125848	—	Nov 11
Medium4.3	Missing Authorization E2Pdf – Export Pdf Tool for WordPress≤1.32.65Update to 2.00.00	CVE-2026-122671	—	Nov 11

Medium5.3
Missing Authorization
Redirection for Contact Form 7
<3.2.16Update to 3.2.16
CVE-2026-121873Nov 11
Medium5.3
Missing Authorization
WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory
≤2.10.4Update to 2.10.5
CVE-2026-124413Nov 11
Medium4.3
Cross-Site Request Forgery
vice
≤1.4No patch available
CVE-2026-125844Nov 11
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
Bold Page Builder
≤5.9.11Update to 5.9.12
CVE-2026-125455Nov 11
Medium5.3
Missing Authorization
RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress
≤4.1235Update to 4.1236
CVE-2026-125438Nov 11
Medium6.3
Authenticated (Subscriber+) Privilege Escalation
Simpler Checkout
<1.5.4Update to 1.5.4
CVE-2026-121870Nov 11
High7.3
Unauthenticated Privilege Escalation
Forminator Forms – Contact Form, Payment Form & Custom Form Builder
<1.58.4Update to 1.58.4
CVE-2026-111579Nov 11
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
Schema & Structured Data for WP & AMP
<1.70Update to 1.70
CVE-2026-119035Nov 11
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
Element Pack Addons for Elementor – MCP & AI-Ready Elementor Widgets, Elementor Templates, Elementor Addons
≤10.0.4Update to 10.0.5
CVE-2026-125708Nov 11
Medium4.3
Missing Authorization
WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System
≤3.0.22Update to 3.0.23
CVE-2026-124408Nov 11
Medium4.3
Authenticated (Contributor+) Insecure Direct Object Reference
Schema & Structured Data for WP & AMP
<1.70Update to 1.70
CVE-2026-119033Nov 11
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
Display Eventbrite Events
≤6.9.1Update to 6.9.2
CVE-2026-123480Nov 11
Medium5.3
Unauthenticated Insecure Direct Object Reference
Data Tables Generator by Supsystic – Excel-like, WooCommerce & Pricing Tables
<1.15.8Update to 1.15.8
CVE-2026-110016Nov 11
Medium4.3
Cross-Site Request Forgery
Mazino
≤1.1No patch available
CVE-2026-125846Nov 11
Medium6.4
Authenticated (Author+) Stored Cross-Site Scripting
Dynific Addons for Elementor (formerly Anywhere Elementor)
<1.3.1Update to 1.3.1
CVE-2026-117522Nov 11
Medium4.3
Missing Authorization
Schema & Structured Data for WP & AMP
<1.70Update to 1.70
CVE-2026-119032Nov 11
Low2.7
Missing Authorization
Code Snippets
<4.1.0Update to 4.1.0
CVE-2026-106468Nov 11
Medium5.3
Unauthenticated Information Exposure
Forminator Forms – Contact Form, Payment Form & Custom Form Builder
<1.58.4Update to 1.58.4
CVE-2026-111597Nov 11
Medium5.3
Missing Authorization
ZoloBlocks – Advanced Gutenberg Blocks, Website Builder & Page Design Toolkit
≤2.8.2Update to 2.8.4
CVE-2026-124421Nov 11
Medium5.3
Missing Authorization
Event Tickets and Registration
<5.30.3.1Update to 5.30.3.1
CVE-2026-122061Nov 11
Medium5.3
Missing Authorization
Create
≤3.1.1Update to 3.1.2
CVE-2026-125046Nov 11
Medium4.3
Missing Authorization
WP Job Portal – AI-Powered Recruitment System for Company or Job Board website
≤2.7.2Update to 2.8.0
CVE-2026-124753Nov 11
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
Element Pack Addons for Elementor – MCP & AI-Ready Elementor Widgets, Elementor Templates, Elementor Addons
≤10.0.3Update to 10.0.4
CVE-2026-124752Nov 11
Medium4.3
Missing Authorization
Photo Engine (Media Organizer & Lightroom)
<6.6.2Update to 6.6.2
CVE-2026-123666Nov 11
Medium4.3
Authenticated (Contributor+) Information Exposure
Dynific Addons for Elementor (formerly Anywhere Elementor)
<1.3.1Update to 1.3.1
CVE-2026-117524Nov 11
Medium5.3
Missing Authorization
King Addons for Elementor – 100+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce Builder, Mega Menu, Popup Builder
≤51.1.87Update to 51.1.90
CVE-2026-125444Nov 11
Medium4.3
Missing Authorization
PowerPress Podcasting plugin by Blubrry
≤11.18.2Update to 11.18.3
CVE-2026-125782Nov 11
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates
≤3.51.0Update to 3.51.3
CVE-2026-123473Nov 11
Medium4.3
Cross-Site Request Forgery
Leo
≤1.7.4No patch available
CVE-2026-125848Nov 11
Medium4.3
Missing Authorization
E2Pdf – Export Pdf Tool for WordPress
≤1.32.65Update to 2.00.00
CVE-2026-122671Nov 11