PatchTheCVECVEs published by Wordfence
CVEs published by Wordfence (CVE Numbering Authority). 16 tracked.
- CVE-2026-110018 HIGH 8.8 The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder plugin
- CVE-2026-115807 HIGH 7.1 The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for Word
- CVE-2026-115806 CRITICAL 9.8 The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all versi
- CVE-2026-14488 CRITICAL 9.1 The Meta Box AIO plugin for WordPress is vulnerable to Missing Authorization via the template_redirect dispatc
- CVE-2026-14270 HIGH 8.8 The Extra Checkout Options (addon for Extra Product Options & Add-Ons for WooCommerce) plugin for WordPress is
- CVE-2026-8457 CRITICAL 9.8 The WooCommerce - Social Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up
- CVE-2026-109219 CRITICAL 9.8 The Mang Board plugin for WordPress is vulnerable to Arbitrary File Upload in version 2.4.4 via the mbw_file_u
- CVE-2026-115497 HIGH 7.5 The Music Store – WordPress eCommerce plugin for WordPress is vulnerable to Directory Traversal in all version
- CVE-2026-109198 HIGH 7.2 The Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA plugin for WordPress is vulnerable to Stored Cros
- CVE-2026-15748 CRITICAL 9.8 The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and in
- CVE-2026-11801 HIGH 7.5 The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to authorization bypass in all versions
- CVE-2026-75091 HIGH 7.2 The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Sto
- CVE-2026-16094 MEDIUM 4.9 The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin for WordPress is vulnerable to
- CVE-2026-96563 MEDIUM 6.4 The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Si
- CVE-2026-82814 HIGH 8.8 The Duplicator and Duplicator Pro plugins for WordPress are vulnerable to PHP Object Injection in all versions
- CVE-2026-114570 MEDIUM 4.9 WordPress Core is vulnerable to Stored Cross-Site Scripting via Quick Edit in all versions up to, and includin