WordPress plugin vulnerability directory
Check before you install: each plugin's past vulnerabilities, active exploitation and most critical records. Updated hourly.
| Component | Records | No login | Exploit code | Latest |
|---|---|---|---|---|
wp-user-extra-fields | 8 | 5 | — | Feb 2026 |
Kadence WooCommerce Email Designer kadence-woocommerce-email-designer · 90K+ installs | 7 | 3 | — | Sep 2026 |
ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin woolentor-addons · 80K+ installs | 30 | 8 | — | Sep 2026 |
charitable · 10K+ installs | 22 | 11 | — | Oct 2026 |
mw-wp-form · 200K+ installs | 12 | 9 | — | Oct 2026 |
JS Job Manager7 unfixed js-jobs · 100+ installs | 11 | 6 | — | Sep 2025 |
TableOn – WordPress Posts Table Filterable posts-table-filterable · 200+ installs | 9 | 6 | — | Aug 2026 |
Security Plugin, Firewall & Malware Scanner with Auto Removal security-malware-firewall · 40K+ installs | 6 | 5 | — | Aug 2026 |
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell wpfunnels · 5K+ installs | 23 | 15 | — | Oct 2026 |
E-cab Taxi Booking Manager for Woocommerce ecab-taxi-booking-manager · 2K+ installs | 12 | 9 | — | Oct 2026 |
loginpress-pro | 7 | 7 | — | Jul 2026 |
Private Contentclosed private-content | 6 | 4 | — | Jul 2026 |
wpjam-basic · 4K+ installs | 6 | 1 | — | Aug 2026 |
FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More formgent · 1K+ installs | 5 | 4 | — | Sep 2026 |
material-dashboard · 40+ installs | 5 | 4 | — | Aug 2026 |
workreap | 5 | 2 | — | Jan 2026 |
Booktics – Appointment Booking Calendar for Service Businesses booktics · 800+ installs | 13 | 10 | — | Oct 2026 |
DirectoryPress – Business Directory And Classified Ad Listing directorypress · 700+ installs | 12 | 7 | — | Oct 2026 |
SendPress Newslettersclosed sendpress | 11 | 5 | — | Oct 2026 |
solace-extra · 10K+ installs | 10 | 4 | — | Sep 2026 |
Listdom: AI-powered Business Directory with Classifieds Ads Listings listdom · 1K+ installs | 9 | 5 | — | Oct 2026 |
motopress-hotel-booking-lite · 10K+ installs | 9 | 5 | — | Sep 2026 |
Database Addon for Contact Form 7 – CFDB7 contact-form-cfdb7 · 600K+ installs | 8 | 8 | — | Oct 2026 |
Security Optimizer – The All-In-One Protection Plugin sg-security · 1M+ installs | 7 | 5 | — | Aug 2026 |
Eventerclosed eventer | 6 | 5 | — | Jul 2026 |
Five Star Restaurant Menu and Food Ordering food-and-drink-menu · 5K+ installs | 6 | 4 | — | Jun 2026 |
Small Package Quotes – Worldwide Express Edition small-package-quotes-wwe-edition · 100+ installs | 5 | 5 | — | Apr 2025 |
WooCommerce Stripe Payment Gateway woocommerce-gateway-stripe · 700K+ installs | 5 | 5 | — | Jun 2026 |
WooCommerce Support Ticket System woocommerce-support-ticket-system | 5 | 3 | — | Mar 2026 |
wpbot-pro | 5 | 2 | — | Jun 2026 |
boost | 4 | 4 | — | Aug 2026 |
Miniorange OTP Verification with Firebaseclosed miniorange-firebase-sms-otp-verification | 4 | 4 | — | Sep 2025 |
VikAppointments Services Booking Calendar vikappointments · 500+ installs | 4 | 4 | — | Oct 2026 |
Product Table for WooCommerce by WBWclosed woo-product-tables | 4 | 4 | — | Apr 2025 |
ebook-store · 700+ installs | 16 | 11 | — | Jul 2026 |
Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider ml-slider · 500K+ installs | 11 | 2 | — | Aug 2026 |
Countdown, Coming Soon, Maintenance – Countdown & Clock1 unfixed countdown-builder · 10K+ installs | 9 | 3 | — | Apr 2025 |
buddyboss-platform | 8 | 2 | — | Oct 2026 |
contentstudio · 600+ installs | 8 | 5 | — | Jan 2026 |
Piotnet Formsclosed piotnetforms | 8 | 5 | — | Oct 2026 |
Accessibility Suite by Ability, Incclosed online-accessibility | 7 | — | — | Apr 2026 |
WholesaleX – All-in-One B2B Solution with Wholesale Pricing wholesalex · 2K+ installs | 7 | 5 | — | Oct 2026 |
woocommerce-product-vendors | 6 | 4 | — | Oct 2024 |
ar-for-wordpress · 300+ installs | 5 | 4 | — | Jul 2026 |
cooked-pro | 5 | 4 | — | Oct 2024 |
payu-india · 7K+ installs | 5 | 5 | — | Jul 2026 |
tumult-hype-animations · 1K+ installs | 5 | 2 | — | Jan 2026 |
User registration & user profile – UserPlusclosed userplus | 5 | 3 | — | Nov 2024 |
WordPress Auction Pluginclosed wp-auctions | 5 | 1 | — | Jan 2025 |
Admin and Site Enhancements (ASE) Pro admin-site-enhancements-pro | 4 | 2 | — | Jul 2026 |
affs | 4 | 3 | — | Oct 2026 |
Memphis Documents Libraryclosed memphis-documents-library | 4 | 4 | — | Oct 2026 |
search-everything · 10K+ installs | 4 | 2 | — | Aug 2019 |
Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shopclosed woo-altcoin-payment-gateway | 4 | 4 | — | Mar 2025 |
Store Toolkit – WooCommerce Extensions, Quick Enhancements & Handy Tools woocommerce-store-toolkit · 8K+ installs | 4 | 4 | — | Nov 2025 |
Video Gallery – YouTube Playlist, Channel Gallery by YotuWP yotuwp-easy-youtube-embed · 10K+ installs | 4 | 2 | — | Jun 2024 |
cleverreach-wp · 4K+ installs | 3 | 3 | — | Jan 2026 |
CoSchool LMS – A complete Learning Management System to Create and Sell Your Courses Online3 unfixed coschool · 40+ installs | 3 | 2 | — | Nov 2025 |
eduadmin-booking · 60+ installs | 3 | 2 | — | Oct 2026 |
felan-framework | 3 | 3 | — | May 2026 |
gdlr-hostel | 3 | 3 | — | May 2025 |
gdlr-hotel | 3 | 3 | — | May 2025 |
revy | 3 | 2 | — | May 2025 |
rss-feed-post-generator-echo | 3 | 3 | — | Jun 2025 |
simple-login-log · 5K+ installs | 3 | 3 | — | Aug 2025 |
taskbot | 3 | 1 | — | Oct 2026 |
totaldonations | 3 | 3 | — | Oct 2026 |
Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform ultimate-multisite · 90+ installs | 3 | 3 | — | Oct 2026 |
vibebp | 3 | 2 | — | Dec 2024 |
workreap_core | 3 | 1 | — | Oct 2026 |
wp-webhooks · 20K+ installs | 3 | 2 | — | Dec 2025 |
Timetable and Event Schedule by MotoPress mp-timetable · 30K+ installs | 9 | 1 | — | May 2026 |
Geo Controller – Geolocation & Geotargeting cf-geoplugin · 1K+ installs | 8 | 5 | — | Aug 2026 |
jet-smart-filters | 7 | 2 | — | Oct 2026 |
MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. mailoptin · 10K+ installs | 7 | 3 | — | Oct 2026 |
WP Multistore Locator — WP Store Locator Plugin: Effortless Integration With Snazzy Mapsclosed wp-multi-store-locator | 6 | 4 | — | Apr 2025 |
WP Smart Import : Import any XML File to WordPress wp-smart-import · 900+ installs | 6 | 5 | — | May 2025 |
ngg-smart-image-search · 400+ installs | 5 | 2 | — | Aug 2026 |
WP Frontend Profile1 unfixed wp-front-end-profile · 100+ installs | 5 | 5 | — | Apr 2026 |
analyticswp | 4 | 4 | — | May 2025 |
Bulk Featured Image3 unfixed bulk-featured-image · 800+ installs | 3 | — | — | Sep 2025 |
fable-extra · 4K+ installs | 3 | 2 | — | May 2025 |
LTL Freight Quotes – Unishippers Edition ltl-freight-quotes-unishippers-edition · 60+ installs | 3 | 3 | — | Feb 2025 |
ova-events-manager | 3 | 3 | — | Nov 2025 |
teddy-bear-customize-addon | 3 | 3 | — | Sep 2026 |
ultimate_ai | 3 | 2 | — | Aug 2026 |
Advanced Reporting & Statistics for WooCommerce – Orders, Products & Customers Reportingclosed webd-woocommerce-advanced-reporting-statistics | 3 | 3 | — | Mar 2026 |
User Email Verification for WooCommerceclosed woo-confirmation-email | 3 | 3 | — | Sep 2023 |
TicketBAI Facturas para WooCommerce wp-ticketbai · 70+ installs | 3 | 2 | — | Jun 2025 |
Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit aimogen-pro-allinone-ai-content-writer-editor-chatbot-automation-toolkit | 2 | 2 | — | Jul 2026 |
api2cart-bridge-connector · 30+ installs | 2 | 2 | — | Nov 2022 |
Password Reset with Code for WordPress REST API bdvs-password-reset · 900+ installs | 2 | 2 | — | Sep 2025 |
bSecure – Your Universal Checkout bsecure · 60+ installs | 2 | 2 | — | Jul 2025 |
custom-api-for-wp · 1K+ installs | 2 | 1 | — | Aug 2025 |
cwicly | 2 | — | — | Aug 2026 |
Eventrclosed eventr | 2 | 2 | — | Sep 2017 |
Gift Cards For WooCommerce Pro giftware | 2 | 2 | — | Aug 2026 |
homey-login-register | 2 | 2 | — | Mar 2025 |
Insurify – Order & Shipping Protectionclosed insurify | 2 | 2 | — | Oct 2026 |
iwjob | 2 | 2 | — | Jan 2026 |