WordPress plugin vulnerability directory
Check before you install: each plugin's past vulnerabilities, active exploitation and most critical records. Updated hourly.
| Component | Records | No login | Exploit code | Latest |
|---|---|---|---|---|
Analytics Insights – Google Analytics Dashboard for WordPress analytics-insights · 10K+ installs | 1 | 1 | 1 | Feb 2024 |
Anti Plagiarismclosed anti-plagiarism | 1 | 1 | 1 | Oct 2016 |
api-bearer-auth · 300+ installs | 1 | 1 | 1 | Sep 2019 |
Audio Playerclosed audio-player | 1 | — | 1 | Feb 2013 |
Birth Chart Compatibilityclosed birth-chart-compatibility | 1 | 1 | 1 | Jul 2025 |
Analytics by BestWebSoft – Google Analytics Dashboard and Statistic Plugin for WordPress bws-google-analytics · 1K+ installs | 1 | 1 | 1 | Aug 2019 |
bws-google-maps · 100+ installs | 1 | 1 | 1 | Aug 2019 |
bws-linkedin · 200+ installs | 1 | 1 | 1 | Aug 2019 |
bws-pinterest · 400+ installs | 1 | 1 | 1 | Aug 2019 |
WP Page Permalink Extensionclosed change-wp-page-permalinks | 1 | — | 1 | Jan 2026 |
Live Chat from ClickDesk – Live Chat – Help Desk Plugin for Websitesclosed clickdesk-live-support-chat-plugin | 1 | — | 1 | Sep 2012 |
compress-then-upload · 10+ installs | 1 | — | 1 | Sep 2025 |
CF7 Skins for Contact Form 7closed contact-form-7-skins | 1 | 1 | 1 | Feb 2022 |
Contact Form Check Testerclosed contact-form-check-tester | 1 | — | 1 | May 2021 |
Contact Form Multi by BestWebSoft – Multiple Forms Plugin for Single WordPress Website contact-form-multi · 300+ installs | 1 | 1 | 1 | Aug 2019 |
cron | 1 | 1 | 1 | Jan 2023 |
crowdsignal-forms · 200K+ installs | 1 | — | 1 | Dec 2025 |
WordPress Calls to Actionclosed cta | 1 | 1 | 1 | Sep 2017 |
Custom Admin Page by BestWebSoft – Configurable WordPress Dashboard Pages Plugin custom-admin-page · 400+ installs | 1 | 1 | 1 | Aug 2019 |
Custom Field Managerclosed custom-field-manager | 1 | — | 1 | May 2025 |
A5 Custom Login Pageclosed custom-login-page | 1 | — | 1 | Jan 2025 |
Custom Search by BestWebSoft – WordPress Custom Search Plugin custom-search-plugin · 900+ installs | 1 | 1 | 1 | Aug 2019 |
Dan's Embedder for Google Calendarclosed dans-gcal | 1 | — | 1 | Feb 2024 |
Defa Online Image Protector Free Editionclosed defa-online-image-protector | 1 | 1 | 1 | Oct 2016 |
Copyright Proofclosed digiproveblog | 1 | 1 | 1 | Aug 2022 |
domain-check · 100+ installs | 1 | 1 | 1 | Feb 2022 |
Download Shortcodeclosed download-shortcode | 1 | — | 1 | Sep 2014 |
ds-cf7-math-captcha · 10K+ installs | 1 | 1 | 1 | Sep 2024 |
duplicate-page · 3M+ installs | 1 | — | 1 | Oct 2021 |
duplicate-page-or-post · 9K+ installs | 1 | — | 1 | Feb 2022 |
Easy Cookies Policyclosed easy-cookies-policy | 1 | — | 1 | Jul 2021 |
ECT Home Page Productsclosed ect-homepage-products | 1 | — | 1 | Jan 2025 |
EG-Seriesclosed eg-series | 1 | — | 1 | May 2025 |
ELEX WooCommerce Google Shopping (Google Product Feed) elex-woocommerce-google-product-feed-plugin-basic · 1K+ installs | 1 | — | 1 | Sep 2025 |
Embed Swaggerclosed embed-swagger | 1 | 1 | 1 | Feb 2022 |
Encrypted Contact Formclosed encrypted-contact-form | 1 | — | 1 | Jun 2015 |
English WordPress Adminclosed english-wp-admin | 1 | 1 | 1 | Apr 2022 |
External Media without Importclosed external-media-without-import | 1 | — | 1 | May 2022 |
Fantastic ElasticSearchclosed fantastic-elasticsearch | 1 | — | 1 | Jan 2025 |
Feedback Modal for Websiteclosed feedback-modal-for-website | 1 | 1 | 1 | Dec 2025 |
Flexible Custom Post Typeclosed flexible-custom-post-type | 1 | — | 1 | Aug 2012 |
FlowForms – Conversational Form Builder flowforms · 300+ installs | 1 | — | 1 | Jul 2026 |
Frontend Uploaderclosed frontend-uploader | 1 | 1 | 1 | Oct 2021 |
Giga Messenger – Expressclosed giga-messenger-bots | 1 | — | 1 | Feb 2025 |
Glossyclosed glossy | 1 | — | 1 | Feb 2025 |
GN Publisher: Google News Compatible RSS Feeds gn-publisher · 20K+ installs | 1 | 1 | 1 | Feb 2023 |
GoodMeet – Google Meet Integration for Webinar, Meeting & Video Conference goodmeet · 90+ installs | 1 | 1 | 1 | Jul 2026 |
google-listings-and-ads · 800K+ installs | 1 | 1 | 1 | Nov 2024 |
gp-unique-id | 1 | 1 | 1 | May 2024 |
Gwyn's Imagemap Selectorclosed gwyns-imagemap-selector | 1 | 1 | 1 | May 2022 |
Heat Trackrclosed heat-trackr | 1 | 1 | 1 | Oct 2016 |
hello-world · 200+ installs | 1 | — | 1 | Oct 2024 |
Hero Maps Proclosed hero-maps-pro | 1 | 1 | 1 | Oct 2016 |
iBuildAppclosed ibuildapp | 1 | — | 1 | Feb 2025 |
Indexisto WordPress Site Searchclosed indexisto | 1 | 1 | 1 | Oct 2016 |
indieweb · 600+ installs | 1 | — | 1 | Jan 2026 |
Scientific and Interactive Blocks – inseri core inseri-core · 70+ installs | 1 | 1 | 1 | Mar 2026 |
InventoryPressclosed inventorypress | 1 | — | 1 | Jul 2023 |
iq-block-country- | 1 | — | 1 | Sep 2021 |
Ird Sliderclosed ird-slider | 1 | — | 1 | Oct 2025 |
JH 404 Loggerclosed jh-404-logger | 1 | 1 | 1 | Apr 2021 |
JW Player for Flash & HTML5 Videoclosed jw-player-plugin-for-wordpress | 1 | — | 1 | Jun 2014 |
keepinmind-dashboard-notes · 300+ installs | 1 | — | 1 | Jun 2026 |
Kish Guest Postingclosed kish-guest-posting | 1 | — | 1 | Oct 2012 |
AI Engine for WordPress: ChatGPT, GPT Content Generatorclosed liquid-chatgpt | 1 | — | 1 | Nov 2025 |
List Site Contributorsclosed list-site-contributors | 1 | 1 | 1 | Jan 2026 |
logdash-activity-log · 100+ installs | 1 | 1 | 1 | May 2025 |
Mail On Updateclosed mail-on-update | 1 | — | 1 | May 2014 |
MailerSend – Official SMTP Integration mailersend-official-smtp-integration · 2K+ installs | 1 | 1 | 1 | Jul 2026 |
Mapping multiple URLs redirect same pageclosed mapping-multiple-urls-redirect-same-page | 1 | 1 | 1 | Mar 2022 |
Membership Databaseclosed member-database | 1 | — | 1 | May 2023 |
microsoft-clarity · 200K+ installs | 1 | 1 | 1 | Feb 2024 |
mpOperationLogsclosed mpoperationlogs | 1 | 1 | 1 | Oct 2023 |
Musicboxclosed musicbox | 1 | — | 1 | Feb 2025 |
Navis DocumentCloudclosed navis-documentcloud | 1 | — | 1 | Sep 2015 |
New Year Fireworkclosed new-year-firework | 1 | 1 | 1 | Oct 2016 |
NewPath WildApricotPress Add-on – Member Directoryclosed newpath-wildapricotpress-add-on-member-directory | 1 | 1 | 1 | Aug 2026 |
NewsTickerclosed news-list | 1 | — | 1 | Feb 2025 |
PagBank / PagSeguro e Vindi para WooCommerce pagbank-connect · 3K+ installs | 1 | — | 1 | Sep 2025 |
MiniMax – Page Layout Builderclosed page-layout-builder | 1 | 1 | 1 | Oct 2016 |
parsi-font · 7K+ installs | 1 | 1 | 1 | Oct 2016 |
PayPal Currency Converter BASIC for WooCommerce paypal-currency-converter-basic-for-woocommerce · 400+ installs | 1 | — | 1 | Jun 2015 |
Privacy Policy Geniusclosed policy-genius | 1 | — | 1 | Jan 2025 |
Pondol Form to Mailclosed pondol-formmail | 1 | 1 | 1 | Oct 2016 |
Post Syncclosed post-sync | 1 | — | 1 | Feb 2025 |
Product Video Gallery for Woocommerce product-video-gallery-slider-for-woocommerce · 10K+ installs | 1 | — | 1 | Jul 2026 |
PromoBar by BestWebSoft – Customizable Advertisement Banner for WordPress Website promobar · 60+ installs | 1 | 1 | 1 | Aug 2019 |
Recencio Book Reviewsclosed recencio-book-reviews | 1 | — | 1 | Apr 2024 |
redirect-404-to-parent · 60+ installs | 1 | 1 | 1 | May 2021 |
Redirect After Loginclosed redirect-after-login | 1 | — | 1 | Jun 2023 |
reservit-hotel · 300+ installs | 1 | — | 1 | Mar 2025 |
responsive-cookie-consent · 1K+ installs | 1 | — | 1 | Apr 2018 |
RVM – Responsive Vector Mapsclosed responsive-vector-maps | 1 | — | 1 | Feb 2022 |
safe-editor · 60+ installs | 1 | 1 | 1 | Sep 2019 |
SagePay Server Gateway for WooCommerce sagepay-server-gateway-for-woocommerce · 70+ installs | 1 | 1 | 1 | Jan 2018 |
searchwp-live-ajax-search · 50K+ installs | 1 | 1 | 1 | Aug 2022 |
Securimage-WP-Fixedclosed securimage-wp-fixed | 1 | 1 | 1 | Aug 2021 |
Select All Categories and Taxonomies, Change Checkbox to Radio Buttons select-all-categories-and-taxonomies-change-checkbox-to-radio-buttons · 3K+ installs | 1 | 1 | 1 | May 2021 |
sender · 80+ installs | 1 | 1 | 1 | Aug 2019 |
Simpel Reserveren 3closed simpel-reserveren | 1 | 1 | 1 | Oct 2016 |