WordPress plugin vulnerability directory
Check before you install: each plugin's past vulnerabilities, active exploitation and most critical records. Updated hourly.
| Component | Records | No login | Exploit code | Latest |
|---|---|---|---|---|
Invoct – PDF Invoices & Billing for WooCommerce kirilkirkov-pdf-invoice-manager | 1 | — | — | Feb 2026 |
Kirim.Email WooCommerce Integrationclosed kirimemail-woocommerce-integration | 1 | 1 | — | Dec 2025 |
core plugin for kitestudio themes kitestudio-core · 300+ installs | 1 | 1 | — | Jul 2022 |
Logo Carouselclosed kiwi-logo-carousel | 1 | 1 | — | Sep 2019 |
KiwiChat NextClientclosed kiwichat | 1 | — | — | May 2025 |
KJM Admin Noticesclosed kjm-admin-notices | 1 | — | — | Oct 2021 |
kk blog cardclosed kk-blog-card | 1 | — | — | Jun 2026 |
kk Youtube Videoclosed kk-youtube-video | 1 | — | — | Jun 2025 |
klamra-paycal-for-aspaclaria | 1 | — | — | Jun 2026 |
Klarna Order Management for WooCommerce klarna-order-management-for-woocommerce · 10K+ installs | 1 | — | — | Sep 2025 |
kliken-ads-pixel-for-meta · 30K+ installs | 1 | 1 | — | Oct 2026 |
klubraum-membership-request · 100+ installs | 1 | 1 | — | Jul 2026 |
KN Fix Your Titleclosed kn-fix-your | 1 | — | — | Aug 2021 |
Knews Multilingual Newslettersclosed knews | 1 | 1 | — | Oct 2026 |
ko-fi-button · 5K+ installs | 1 | — | — | Aug 2023 |
Koalendar – Easy Appointment Scheduling & Booking Plugin koalendar-free-booking-widget · 1K+ installs | 1 | — | — | Dec 2024 |
Koko Analytics – Privacy-Friendly WordPress Analytics koko-analytics · 70K+ installs | 1 | 1 | — | Sep 2024 |
Konnichiwa! Membershipclosed konnichiwa | 1 | 1 | — | Sep 2021 |
kontur-admin-style · 40+ installs | 1 | — | — | Sep 2025 |
Kopa Nictitate Toolkitclosed kopa-nictitate-toolkit | 1 | — | — | Jan 2025 |
korea-for-woocommerce · 400+ installs | 1 | — | — | Feb 2025 |
kp-agent-ready · 70+ installs | 1 | 1 | — | Sep 2026 |
KP Fastest Tawk.to Chatclosed kp-fastest-tawk-to-chat | 1 | — | — | Dec 2023 |
Kredeum NFTs, the easiest way to sell your NFTs directly on your WordPress site kredeum-nfts · 30+ installs | 1 | — | — | Dec 2024 |
kvCORE IDXclosed kvcore-idx | 1 | 1 | — | Dec 2024 |
L Squared Hub WP – Virtual Device Pluginclosed l-squared-hub-wp-virtual-device | 1 | — | — | Nov 2024 |
Label Pluginsclosed label-plugins | 1 | 1 | — | Nov 2025 |
Labinator Content Types Duplicator labinator-content-types-duplicator · 200+ installs | 1 | 1 | — | Apr 2025 |
LabToolsclosed labtools | 1 | — | — | Feb 2022 |
lafka-plugin | 1 | — | — | Apr 2025 |
Laiser Tagclosed laiser-tag | 1 | 1 | — | Jun 2026 |
lana-email-logger | 1 | 1 | — | Jul 2023 |
lana-shortcodes · 30+ installs | 1 | — | — | Jan 2024 |
lana-text-to-image · 10+ installs | 1 | — | — | Jun 2023 |
Landing pages and Domain aliases for WordPressclosed landing-pages-and-domain-aliases | 1 | — | — | Apr 2025 |
landingi-landing-pages · 2K+ installs | 1 | 1 | — | Mar 2024 |
Language Bar Flagsclosed language-bar-flags | 1 | 1 | — | Sep 2021 |
Flag Icons1 unfixed language-icons-flags-switcher · 3K+ installs | 1 | — | — | Mar 2025 |
language-switcher · 1K+ installs | 1 | 1 | — | Oct 2024 |
Lapostaclosed laposta | 1 | 1 | — | Jul 2024 |
Larsens Calenderclosed larsens-calender | 1 | — | — | Apr 2021 |
laser | 1 | — | — | Dec 2025 |
LEAV Last Email Address Validatorclosed last-email-address-validator | 1 | 1 | — | Jan 2026 |
Last Updated Shortcode1 unfixed last-updated-shortcode · 700+ installs | 1 | — | — | Sep 2025 |
Last.fm Recent Album Artworkclosed lastfm-recent-album-artwork | 1 | 1 | — | Aug 2025 |
Contact Forms – Drag & Drop Contact Form Builderclosed lastform | 1 | — | — | Feb 2022 |
lasTunesclosed lastunes | 1 | — | — | Feb 2024 |
Latest Post Accordian Sliderclosed latest-post-accordian-slider | 1 | 1 | — | Jul 2025 |
Latest Tweets Widgetclosed latest-tweets-widget | 1 | 1 | — | Jun 2022 |
LatestCheckinsclosed latestcheckins | 1 | 1 | — | Aug 2025 |
LaTeX for WordPressclosed latex | 1 | — | — | Jun 2022 |
Launcher: Coming Soon & Maintenance Modeclosed launcher | 1 | — | — | Sep 2022 |
Lava Ajax Searchclosed lava-ajax-search | 1 | — | — | Mar 2025 |
layers · 80+ installs | 1 | — | — | Sep 2025 |
layouts-for-wpbakery · 3K+ installs | 1 | 1 | — | Aug 2026 |
lazy-facebook-comments · 900+ installs | 1 | — | — | May 2023 |
Lazy load videos and sticky control lazy-load-videos-and-sticky-control · 80+ installs | 1 | — | — | Nov 2024 |
Lazyest Backupclosed lazyest-backup | 1 | — | — | Feb 2013 |
Lazyest Galleryclosed lazyest-gallery | 1 | — | — | Apr 2014 |
LazyLoad Background Imagesclosed lazyload-background-images | 1 | — | — | Jan 2025 |
lbstopattack · 10+ installs | 1 | 1 | — | Oct 2022 |
Leaderclosed leader | 1 | — | — | Dec 2024 |
leadlovers forms1 unfixed leadlovers-forms · 100+ installs | 1 | 1 | — | Apr 2026 |
leadpages · 10K+ installs | 1 | 1 | — | Feb 2026 |
LeadQuizzes1 unfixed leadquizzes · 50+ installs | 1 | — | — | Apr 2025 |
Leadrebel1 unfixed leadrebel · 50+ installs | 1 | 1 | — | Apr 2026 |
The integration of the AMO.CRMclosed leads-for-amo-crm | 1 | 1 | — | Sep 2025 |
WP LOL Rotationclosed league-of-legends-rotation | 1 | — | — | Aug 2025 |
leartes-try-exchange-rates · 500+ installs | 1 | — | — | Apr 2025 |
leco-client-portal | 1 | — | — | Jun 2026 |
ledenbeheer-external-connection · 10+ installs | 1 | — | — | Dec 2024 |
Left right image slideshow gallery left-right-image-slideshow-gallery · 60+ installs | 1 | — | — | Oct 2023 |
Legal Text Connector of the IT-Recht Kanzlei legal-texts-connector-it-recht-kanzlei · 10K+ installs | 1 | 1 | — | Aug 2026 |
legalweb-cloud · 300+ installs | 1 | — | — | Nov 2024 |
Legoeso PDF Managerclosed legoeso-pdf-manager | 1 | — | — | Feb 2025 |
leira-cron-jobs · 2K+ installs | 1 | 1 | — | Sep 2024 |
leira-roles · 1K+ installs | 1 | 1 | — | Sep 2024 |
lenix-elementor-leads-addon · 10K+ installs | 1 | 1 | — | Feb 2025 |
LessButtons Social Sharing and Statisticsclosed lessbuttons | 1 | 1 | — | May 2025 |
Lesson Plan Bookclosed lesson-plan-book | 1 | 1 | — | Jan 2026 |
illow – Cookies Consentclosed lgpd-compliant-cookie-banner | 1 | 1 | — | Apr 2025 |
OWL Carousel – WordPress Owl Carousel Sliderclosed lgx-owl-carousel | 1 | — | — | Feb 2024 |
lh-copy-media-file · 800+ installs | 1 | 1 | — | Oct 2024 |
LH QR Codesclosed lh-qr-codes | 1 | — | — | Nov 2024 |
LH Signingclosed lh-signing | 1 | 1 | — | Sep 2025 |
liaison-site-prober | 1 | 1 | — | Apr 2026 |
WP Libre Form 2 (WordPress plugin) libreform | 1 | 1 | — | Sep 2022 |
lifterlms-gateway-paypal | 1 | 1 | — | May 2022 |
Light Messagesclosed light-messages | 1 | 1 | — | Aug 2021 |
Lightbox Galleryclosed lightbox-gallery | 1 | — | — | Feb 2023 |
lightbox-photoswipe · 20K+ installs | 1 | — | — | Jul 2026 |
Lightbox Plus Colorboxclosed lightbox-plus | 1 | 1 | — | Aug 2019 |
Image and Video Lightbox, Image PopUp lightbox-popup · 1K+ installs | 1 | — | — | Apr 2023 |
Lightweight Cookie Notice – Cookie Banner for Cookie Consent lightweight-cookie-notice-free · 5K+ installs | 1 | 1 | — | Oct 2026 |
Like dislike plus counter | Like Dislike Buttonsclosed like-dislike-plus-counter | 1 | — | — | Mar 2025 |
Like DisLike Votingclosed like-dislike-voting | 1 | 1 | — | Dec 2025 |
Like-itclosed like-it | 1 | 1 | — | Nov 2025 |
Like & Share My Siteclosed like-share-my-site | 1 | 1 | — | Jul 2025 |
LikeBot – Decentralized like-systemclosed likebot | 1 | — | — | Feb 2025 |
Web3Press – Migrating to 3ook.com Decentralized Bookstore likecoin · 300+ installs | 1 | — | — | May 2025 |