WordPress plugin vulnerability directory
Check before you install: each plugin's past vulnerabilities, active exploitation and most critical records. Updated hourly.
| Component | Records | No login | Exploit code | Latest |
|---|---|---|---|---|
BuddyPress XProfile Custom Image Fieldclosed buddypress-xprofile-image-field | 2 | 2 | — | Nov 2026 |
case-theme-user | 2 | 2 | — | Apr 2026 |
CataBlogclosed catablog | 2 | — | — | Apr 2024 |
click5 CRM add-on to Contact Form 7closed cf7-add-on-by-click5 | 2 | 2 | — | Oct 2026 |
ChamaWP – Monetize With Donations, Memberships, Crowdfunding, Commissions & Restricted Content chama · 10+ installs | 2 | 2 | — | Aug 2026 |
Chauffeur Taxi Booking System for WordPress chauffeur-booking-system | 2 | 2 | — | May 2024 |
click-pledge-connect · 200+ installs | 2 | 2 | — | Jul 2025 |
click5 CRM add-on to Ninja Formsclosed click5-crm-add-on-to-ninja-forms | 2 | 2 | — | Oct 2026 |
CMS Commander – Manage Multiple Sitesclosed cms-commander-client | 2 | 1 | — | Mar 2026 |
coupon-referral-program | 2 | 2 | — | Feb 2024 |
csv-to-html · 300+ installs | 2 | 1 | — | Dec 2024 |
Custom Searchable Data Entry Systemclosed custom-searchable-data-entry-system | 2 | 1 | — | Oct 2025 |
directorist-booking | 2 | 1 | — | Jun 2026 |
Dropbox Folder Shareclosed dropbox-folder-share | 2 | 2 | — | Oct 2023 |
dxp-toolkit · 10+ installs | 2 | 2 | — | Oct 2026 |
Easy2Map Photosclosed easy2map-photos | 2 | 2 | — | Feb 2019 |
Export User Dataclosed export-user-data | 2 | — | — | Aug 2026 |
file-uploader-for-woocommerce · 100+ installs | 2 | 2 | — | Mar 2026 |
form-block · 300+ installs | 2 | 2 | — | Oct 2026 |
Gutenberg Forms – WordPress Form Builder Pluginclosed forms-gutenberg | 2 | 1 | — | Jul 2024 |
fresh-framework | 2 | 2 | — | Mar 2025 |
fs-license-manager | 2 | 1 | — | Mar 2026 |
FW Food Menu – Responsive food menu with ordering & delivery solutionsclosed fw-food-menu | 2 | 2 | — | Jun 2025 |
Gallerioclosed gallerio | 2 | 1 | — | Jan 2025 |
click5 CRM add-on to Gravity Formsclosed gf-add-on-by-click5 | 2 | 2 | — | Oct 2026 |
host-google-fonts-pro | 2 | 2 | — | Aug 2026 |
Houzez - Real Estate WordPress Theme houzez-crm | 2 | — | — | Jul 2024 |
Issuu Panelclosed issuu-panel | 2 | 2 | — | Oct 2026 |
jet-appointments-booking | 2 | 2 | — | Oct 2026 |
jnews-pay-writer | 2 | 1 | — | Oct 2026 |
klarna-payments-for-woocommerce · 20K+ installs | 2 | 2 | — | Oct 2026 |
knowledgebase-helpdesk-pro | 2 | 1 | — | Oct 2025 |
leadcapture | 2 | 2 | — | Aug 2025 |
Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms limit-attempts · 4K+ installs | 2 | 2 | — | Mar 2024 |
Local Delivery Drivers for WooCommerce local-delivery-drivers-for-woocommerce · 800+ installs | 2 | 2 | — | Aug 2026 |
Login As Usersclosed login-as-users | 2 | 1 | — | Nov 2024 |
Marketing Automation by AZEXOclosed marketing-automation-by-azexo | 2 | — | — | Oct 2024 |
myhome-core | 2 | 1 | — | Aug 2026 |
Neon Product Designer2 unfixed neon-product-designer-for-woocommerce · 20+ installs | 2 | 1 | — | Apr 2025 |
NIX Anti-Spam Light2 unfixed nix-anti-spam-light · 80+ installs | 2 | 2 | — | Sep 2025 |
Office Locator2 unfixed office-locator · 30+ installs | 2 | 1 | — | Apr 2025 |
otp-login · 100+ installs | 2 | 2 | — | May 2026 |
OTP-less one tap Sign inclosed otpless | 2 | 2 | — | May 2025 |
oxygen | 2 | 1 | — | Apr 2024 |
Paid Downloadsclosed paid-downloads | 2 | 2 | — | Sep 2026 |
penci-data-migrator | 2 | 2 | — | Mar 2026 |
Pie Register - Social Sites Login (Add on) pie-register-social-site | 2 | 2 | — | Dec 2024 |
Post By Emailclosed post-by-email | 2 | 2 | — | Sep 2025 |
post-to-csv · 200+ installs | 2 | 1 | — | Nov 2023 |
Post/Page Import Export – Migrate Content with Custom Fields & Taxonomies postpage-import-export-with-custom-fields-taxonomies · 400+ installs | 2 | 1 | — | Feb 2025 |
Product Rearrange for WooCommerce products-rearrange-woocommerce · 300+ installs | 2 | 2 | — | Mar 2026 |
pt-luxa-addons | 2 | — | — | Jun 2026 |
qode-tours | 2 | 1 | — | Oct 2026 |
3D Work In Progressclosed renee-work-in-progress | 2 | — | — | Oct 2024 |
rewardsystem | 2 | 2 | — | Jul 2026 |
s2member-pro | 2 | 1 | — | Mar 2025 |
Scheduleclosed schedule | 2 | 1 | — | Mar 2025 |
Advance Seat Reservation Management for WooCommerce scw-seat-reservation | 2 | 2 | — | Dec 2025 |
search-and-replace · 100K+ installs | 2 | 1 | — | Jul 2024 |
Transliterator – Multilingual and Multi-script Text Conversion serbian-transliteration · 3K+ installs | 2 | 2 | — | Oct 2026 |
Shortcode IMDBclosed shortcode-imdb | 2 | 1 | — | Nov 2023 |
SIS Handballclosed sis-handball | 2 | 1 | — | Nov 2023 |
SiteBuilder Dynamic Componentsclosed sitebuilder-dynamic-components | 2 | 2 | — | Oct 2024 |
SiteVault – Backup, Restore, Migration & Cloning sitevault-backup-restore-migration · 40+ installs | 2 | 2 | — | Oct 2026 |
smio-push-notification | 2 | 2 | — | Jun 2025 |
STAGGS – Product Configurator Toolkit staggs · 400+ installs | 2 | 2 | — | May 2025 |
Support Ticketclosed support-ticket | 2 | 2 | — | Aug 2025 |
TerraClassifieds – Simple Classifieds Pluginclosed terraclassifieds | 2 | 2 | — | Mar 2024 |
traveler-code | 2 | 1 | — | Feb 2025 |
universam-demo · 10+ installs | 2 | 2 | — | Oct 2025 |
User Session Synchronizerclosed user-session-synchronizer | 2 | 2 | — | Aug 2026 |
Virtual Botclosed virtual-bot | 2 | 2 | — | Jan 2025 |
virtual-hdm-for-taxservice-am · 20+ installs | 2 | 2 | — | Nov 2025 |
Widget Logicclosed widget-logic | 2 | 1 | — | Nov 2025 |
Woocommerce Quote Calculatorclosed woo-quote-calculator-order | 2 | 1 | — | Nov 2024 |
WooCommerce Vehicle Parts Finder woo-vehicle-parts-finder | 2 | 2 | — | Oct 2025 |
woocommerce-appointments | 2 | 2 | — | Oct 2026 |
Docket (WooCommerce Collections / Wishlist / Watchlist) woocommerce-collections | 2 | 2 | — | Aug 2024 |
Simple Registration for WooCommerce woocommerce-simple-registration · 4K+ installs | 2 | 2 | — | Oct 2025 |
Wordable – Export Google Docs to WordPressclosed wordable | 2 | 1 | — | Oct 2026 |
WP Business Intelligence Liteclosed wp-business-intelligence-lite | 2 | 1 | — | Jul 2026 |
WP e-Commerce Style Emailclosed wp-e-commerce-style-email | 2 | 2 | — | Mar 2025 |
wp-lead-capture | 2 | 1 | — | Jan 2026 |
AidWP – Donation & Payment Forms (Stripe Powered) wp-stripe-donation · 800+ installs | 2 | 2 | — | Oct 2024 |
WP Super Edit2 unfixed wp-super-edit · 2K+ installs | 2 | 2 | — | May 2026 |
wpcrmclosed wpcrm | 2 | 2 | — | Jun 2025 |
WordPress Events Calendar Registration & Tickets wpeventplus | 2 | 2 | — | May 2025 |
click5 CRM add-on to WPFormsclosed wpf-add-on-by-click5 | 2 | 2 | — | Oct 2026 |
xserver-migrator · 10K+ installs | 2 | 2 | — | Oct 2026 |
Themesflat Addons For Elementor themesflat-addons-for-elementor · 40K+ installs | 14 | 1 | — | Apr 2026 |
Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation · 700+ installs | 10 | 8 | — | Oct 2026 |
Structured Content (JSON-LD) #wpsc structured-content · 30K+ installs | 10 | — | — | Jul 2026 |
booking-calendar-contact-form · 500+ installs | 8 | 4 | — | Apr 2026 |
shariff · 30K+ installs | 8 | 1 | — | May 2026 |
Builderall for WordPressclosed builderall-cheetah-for-wp | 7 | 1 | — | Sep 2026 |
WP OAuth Server (OAuth Authentication) oauth2-provider · 3K+ installs | 7 | 4 | — | Sep 2026 |
duplicate-post · 3M+ installs | 6 | 2 | — | Jun 2026 |
points-and-rewards-for-woocommerce · 6K+ installs | 6 | 2 | — | Sep 2026 |
Stylish Price List – Price Table Builder & QR Code Restaurant Menu stylish-price-list · 3K+ installs | 6 | 2 | — | Dec 2025 |
WP Fusion Lite – Marketing Automation and CRM Integration for WordPress wp-fusion-lite · 4K+ installs | 6 | 3 | — | Oct 2026 |