WordPress plugin vulnerability directory
Check before you install: each plugin's past vulnerabilities, active exploitation and most critical records. Updated hourly.
| Component | Records | No login | Exploit code | Latest |
|---|---|---|---|---|
wp-mail-log · 10K+ installs | 9 | 3 | — | Jun 2026 |
WP2LEADS | WordPress und KlickTipp einfach verbinden – WooCommerce und KlickTipp einfach verbinden wp2leads · 70+ installs | 9 | 5 | — | Oct 2026 |
Visitor Traffic Real Time Statistics visitors-traffic-real-time-statistics · 30K+ installs | 8 | 5 | — | Oct 2026 |
BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) woo-bulk-editor · 30K+ installs | 27 | 17 | — | Oct 2026 |
Modula Image Gallery – Photo Grid & Video Gallery modula-best-grid-gallery · 100K+ installs | 19 | 4 | — | Oct 2026 |
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar mp3-music-player-by-sonaar · 20K+ installs | 19 | 5 | — | Oct 2026 |
Community by PeepSo – Download from PeepSo.comclosed peepso-core | 18 | 10 | — | Aug 2026 |
customer-area · 10K+ installs | 15 | 7 | — | Nov 2026 |
Slider by 10Web – Responsive Image Slider2 unfixed slider-wd · 10K+ installs | 14 | 3 | — | Oct 2026 |
Payment forms, Buy now buttons, and Invoicing System | GetPaid invoicing · 5K+ installs | 11 | 6 | — | Nov 2026 |
Export and Import Users and Customers users-customers-import-export-for-wp-woocommerce · 50K+ installs | 11 | 1 | — | Oct 2026 |
Falang multilanguage for WordPress falang · 1K+ installs | 9 | 4 | — | Oct 2026 |
mapster-wp-maps · 3K+ installs | 9 | 4 | — | Oct 2026 |
cornerstone · 20K+ installs | 7 | 2 | — | Jun 2026 |
wp-review-slider-pro | 7 | 1 | — | Sep 2026 |
brizy · 60K+ installs | 34 | 5 | — | Oct 2026 |
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE otter-blocks · 300K+ installs | 19 | 8 | — | Oct 2026 |
Five Star Restaurant Reservations – WordPress Booking Plugin restaurant-reservations · 10K+ installs | 16 | 14 | — | Oct 2026 |
Booking Ultra Pro Appointments Booking Calendar Plugin1 unfixed booking-ultra-pro · 400+ installs | 14 | 7 | — | Jan 2026 |
Leykaclosed leyka | 14 | 7 | — | Oct 2026 |
Complianz GDPR/CCPA Cookie Consent Banner complianz-gdpr · 1M+ installs | 13 | 8 | — | Oct 2026 |
enable-media-replace · 600K+ installs | 13 | 3 | — | Nov 2026 |
ba-book-everything · 10K+ installs | 12 | 6 | — | Oct 2026 |
name-directory · 2K+ installs | 12 | 8 | — | Oct 2026 |
Real3D Flipbook – 3D Flipbook, PDF Flipbook, PDF Viewer, PDF Embedder real3d-flipbook-lite · 10K+ installs | 12 | 5 | — | Oct 2026 |
WPCS – WordPress Currency Switcher Professional currency-switcher · 800+ installs | 11 | 6 | — | Sep 2026 |
EazyDocs – AI Powered Knowledge Base, Wiki, Documentation & FAQ Builder eazydocs · 2K+ installs | 10 | 3 | — | Apr 2025 |
Real Estate Manager – Property Listing and Agent Managementclosed real-estate-manager | 10 | 6 | — | Oct 2026 |
subscriptions-for-woocommerce · 10K+ installs | 10 | 6 | — | Sep 2026 |
teachpress · 2K+ installs | 10 | 7 | — | Jan 2026 |
Verge3D Publishing and E-Commerce verge3d · 400+ installs | 10 | 8 | — | Sep 2026 |
My Tickets – Accessible Event Ticketing my-tickets · 600+ installs | 9 | 6 | — | Mar 2026 |
Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce woo-product-feed-pro · 80K+ installs | 9 | 6 | — | Oct 2026 |
cp-contact-form-with-paypal · 800+ installs | 8 | 4 | — | Mar 2026 |
افزونه پیامک ووکامرس | Persian WooCommerce SMS persian-woocommerce-sms · 50K+ installs | 8 | 6 | — | Oct 2026 |
WPML Multilingual & Multicurrency for WooCommerce woocommerce-multilingual · 100K+ installs | 8 | 2 | — | Nov 2026 |
Video Gallery – YouTube Gallery, Playlist & Video Grid youtube-showcase · 2K+ installs | 8 | 5 | — | Oct 2026 |
powerpack-elements | 6 | 4 | — | Jun 2026 |
Creative Mail – Easier WordPress & WooCommerce Email Marketingclosed creative-mail-by-constant-contact | 5 | 5 | — | Aug 2026 |
Popup Box – Create Countdown, Coupon, Video, Contact Form Popups ays-popup-box · 50K+ installs | 19 | 9 | — | Oct 2026 |
Live Composer – Free WordPress Website Builder live-composer-page-builder · 10K+ installs | 17 | 1 | — | Sep 2026 |
AMP for WP – Accelerated Mobile Pages accelerated-mobile-pages · 70K+ installs | 16 | 6 | — | Oct 2026 |
ElementInvader Addons for Elementor elementinvader-addons-for-elementor · 3K+ installs | 16 | 2 | — | Jul 2026 |
wallet-system-for-woocommerce · 1K+ installs | 16 | 6 | — | Oct 2026 |
WP Travel – Ultimate Travel Booking System, Tour Management Engine wp-travel · 3K+ installs | 15 | 10 | — | Sep 2026 |
Travelly – Tour & Travel Booking Manager for WooCommerce tour-booking-manager · 1K+ installs | 13 | 6 | — | Oct 2026 |
WP 2FA – Two-factor authentication for WordPress wp-2fa · 100K+ installs | 13 | 8 | — | Oct 2026 |
Smart Forms – when you need more than just a contact formclosed smart-forms | 12 | 3 | — | Oct 2026 |
siteorigin-panels · 400K+ installs | 11 | 2 | — | Oct 2026 |
wp-downloadmanager · 3K+ installs | 11 | 1 | — | Aug 2026 |
wp-google-places-review-slider · 30K+ installs | 11 | 5 | — | Jul 2026 |
Advanced Ads – Ad Manager & AdSense advanced-ads · 90K+ installs | 10 | 1 | — | Oct 2026 |
FluentCart – Online Store Builder & eCommerce Checkout fluent-cart · 9K+ installs | 10 | 6 | — | Nov 2026 |
new-user-approve · 20K+ installs | 10 | 8 | — | Sep 2026 |
WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors wc-vendors · 3K+ installs | 10 | 2 | — | Sep 2026 |
WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars wp-post-author · 10K+ installs | 10 | 2 | — | Oct 2026 |
LearnPress – Backup & Migration Tool learnpress-import-export · 5K+ installs | 9 | 6 | — | Jun 2026 |
Restaurant Menu and Food Ordering mp-restaurant-menu · 2K+ installs | 9 | 4 | — | Sep 2026 |
ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF shortpixel-image-optimiser · 300K+ installs | 9 | — | — | Oct 2026 |
Wishlist2 unfixed wishlist · 300+ installs | 9 | 3 | — | Jun 2025 |
wp-auto-affiliate-links · 2K+ installs | 9 | 5 | — | May 2026 |
YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons · 20K+ installs | 9 | 7 | — | Oct 2026 |
Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance advanced-database-cleaner · 100K+ installs | 8 | 5 | — | Oct 2025 |
CM Download Manager – Organize, Protect & Share Files in WordPress cm-download-manager · 100+ installs | 8 | 4 | — | Apr 2025 |
document-gallery · 8K+ installs | 8 | 7 | — | Oct 2026 |
Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors publishpress-authors · 20K+ installs | 8 | 1 | — | Oct 2026 |
Better Find and Replace – AI-Powered Suggestions real-time-auto-find-and-replace · 40K+ installs | 8 | 2 | — | Apr 2026 |
Affiliate Program Suite — SliceWP Affiliates slicewp · 10K+ installs | 8 | 6 | — | Oct 2026 |
Thanko Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer · 3K+ installs | 8 | 4 | — | Oct 2026 |
adrotate · 20K+ installs | 7 | 1 | — | Jun 2026 |
Product Feed Manager for WooCommerce – RexFeed – Sell on 200+ Shopping Channels best-woocommerce-feed · 10K+ installs | 7 | 3 | — | Oct 2026 |
contact-form-to-any-api · 8K+ installs | 7 | 3 | — | Aug 2026 |
masterstudy-lms-learning-management-system-pro | 7 | 3 | — | Jun 2026 |
Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers popup-builder-block · 70K+ installs | 7 | 3 | — | Feb 2026 |
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget post-grid-carousel-ultimate · 1K+ installs | 7 | — | — | Aug 2026 |
Filr – Secure document library filr-protection · 700+ installs | 6 | — | — | Mar 2026 |
mailchimp-forms-by-mailmunch · 10K+ installs | 6 | 4 | — | Aug 2026 |
Royal MCP – Secure AI Connector for Claude, ChatGPT & any LLM via MCP royal-mcp · 10K+ installs | 6 | 1 | — | Oct 2026 |
StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce storegrowth-sales-booster · 2K+ installs | 6 | 6 | — | Oct 2026 |
Revopic – Photo Reviews for WooCommerce woo-photo-reviews · 10K+ installs | 6 | 6 | — | Oct 2026 |
workscout-core | 6 | 5 | — | Jul 2026 |
wp-db-backup · 60K+ installs | 6 | 4 | — | May 2026 |
wp-mail-catcher · 20K+ installs | 6 | 4 | — | Oct 2026 |
WPIDE – File Manager & Code Editor wpide · 40K+ installs | 6 | 3 | — | Aug 2026 |
PublishPress Capabilities: User Role Access Control, Admin Area Permissions capability-manager-enhanced · 100K+ installs | 5 | 1 | — | Oct 2026 |
fs-poster | 5 | 2 | — | Sep 2026 |
Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress gallery-plugin · 10K+ installs | 5 | — | — | Aug 2026 |
idonate-pro | 5 | 4 | — | Dec 2025 |
post-meta-data-manager · 1K+ installs | 5 | 2 | — | Mar 2025 |
Side Menu Lite – Sticky Floating Side Menu side-menu-lite · 7K+ installs | 5 | 3 | — | Jan 2025 |
vod-infomaniak · 20K+ installs | 5 | 4 | — | Oct 2026 |
wp-extra · 6K+ installs | 5 | 1 | — | Dec 2023 |
wp-file-download | 5 | 2 | — | Oct 2026 |
amazonsimpleadmin · 1K+ installs | 4 | 4 | — | Sep 2026 |
Dtrackerclosed dtracker | 4 | 4 | — | Sep 2017 |
handl-utm-grabber · 10K+ installs | 4 | 2 | — | Jul 2026 |
hotel-listing | 4 | 2 | — | Jan 2026 |
WP Human Resource Managementclosed hrm | 4 | 2 | — | Jul 2025 |
institutions-directory | 4 | 2 | — | Jan 2026 |
lawyer-directory | 4 | 2 | — | Mar 2026 |