WordPress plugin vulnerability directory
Check before you install: each plugin's past vulnerabilities, active exploitation and most critical records. Updated hourly.
| Component | Records | No login | Exploit code | Latest |
|---|---|---|---|---|
real-estate-manager-pro | 4 | 3 | — | Aug 2026 |
Responsive Menu – Mobile Menu & Hamburger Menu Builder responsive-menu · 70K+ installs | 4 | 3 | — | Mar 2022 |
wp-all-export-pro | 4 | 1 | — | Feb 2025 |
bdthemes-element-pack-lite · 100K+ installs | 47 | 5 | — | Oct 2026 |
bold-page-builder · 40K+ installs | 46 | 1 | — | Sep 2026 |
The Plus Addons for Elementor – Mega Menu, Header Footer, Post Grid, AI Widgets & Templates the-plus-addons-for-elementor-page-builder · 100K+ installs | 41 | 1 | — | Oct 2026 |
Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons bdthemes-prime-slider-lite · 100K+ installs | 19 | 1 | — | Oct 2026 |
wp-crowdfunding · 2K+ installs | 19 | 3 | — | Oct 2026 |
Appointment Hour Booking – Booking Calendar appointment-hour-booking · 10K+ installs | 16 | 10 | — | Oct 2026 |
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid the-post-grid · 100K+ installs | 16 | 3 | — | Oct 2026 |
custom-field-template · 30K+ installs | 15 | 3 | — | Sep 2026 |
PixelYourSite – Your smart PIXEL (TAG) & API Manager pixelyoursite · 400K+ installs | 14 | 9 | — | Sep 2026 |
wordpress-simple-paypal-shopping-cart · 10K+ installs | 14 | 7 | — | Oct 2026 |
so-widgets-bundle · 400K+ installs | 13 | — | — | Oct 2026 |
Starter Templates: AI-Powered Website Templates for Elementor & Gutenberg astra-sites · 1M+ installs | 12 | 2 | — | Oct 2026 |
Coupon Affiliates – Affiliate Plugin for WooCommerce woo-coupon-usage · 5K+ installs | 12 | 10 | — | Jun 2026 |
Sky Addons for Elementor – 160+ Widgets, GSAP Animations, Templates & Theme Builder sky-elementor-addons · 2K+ installs | 11 | 1 | — | Sep 2026 |
The Pack Elementor addon1 unfixed the-pack-addon · 2K+ installs | 11 | 1 | — | Sep 2025 |
Conversios – GA4, Google Ads & Meta Conversion Tracking with Product Feed for WooCommerce enhanced-e-commerce-for-woocommerce-store · 10K+ installs | 10 | 5 | — | Oct 2025 |
pepro-ultimate-invoice · 5K+ installs | 9 | 8 | — | Jul 2026 |
WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels print-invoices-packing-slip-labels-for-woocommerce · 50K+ installs | 9 | 5 | — | Oct 2026 |
WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce woosquare · 1K+ installs | 9 | 6 | — | Oct 2026 |
wp-abstracts-manuscripts-manager · 300+ installs | 9 | 6 | — | Oct 2025 |
Asset CleanUp: Page Speed Booster wp-asset-clean-up · 100K+ installs | 9 | 5 | — | Sep 2026 |
wplegalpages · 10K+ installs | 9 | 6 | — | Aug 2026 |
YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports yaysmtp · 10K+ installs | 9 | 2 | — | Oct 2026 |
AliNext – AliExpress Dropshipping Plugin for WooCommerce ali2woo-lite · 4K+ installs | 8 | 4 | — | Jun 2026 |
formcraft-form-builder · 2K+ installs | 8 | 3 | — | Dec 2024 |
jet-blog | 8 | 3 | — | Oct 2026 |
KB Support – Customer Support Ticket & Helpdesk Plugin, Knowledge Base Pluginclosed kb-support | 8 | 4 | — | Apr 2025 |
MultiParcels Shipping For WooCommerce multiparcels-shipping-for-woocommerce · 4K+ installs | 8 | 2 | — | Aug 2026 |
SEO Redirection Plugin – 301 Redirect Manager seo-redirection · 10K+ installs | 8 | 4 | — | Aug 2026 |
UiPress lite | Effortless custom dashboards, admin themes and pages uipress-lite · 6K+ installs | 8 | — | — | Mar 2026 |
CURCY – Multi Currency for WooCommerce woo-multi-currency · 20K+ installs | 8 | 6 | — | Oct 2026 |
Message Filter for Contact Form 7 cf7-message-filter · 1K+ installs | 7 | 3 | — | Jul 2026 |
SysBasics Customize My Account for WooCommerce – Live My Account Customizer customize-my-account-for-woocommerce · 7K+ installs | 7 | 5 | — | Jul 2026 |
FULL – Clienteclosed full-customer | 7 | 3 | — | May 2025 |
ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) google-analytics-dashboard-for-wp · 200K+ installs | 7 | — | — | Apr 2026 |
http-headers · 40K+ installs | 7 | — | — | Apr 2026 |
Stream – Activity Log & Audit Trail stream · 70K+ installs | 7 | 2 | — | Aug 2026 |
VPSUForm – Drag & Drop Contact Form Builder with Email Automation v-form · 200+ installs | 7 | 3 | — | Dec 2025 |
Smush – Image Optimization, Compression, Lazy Load, WebP & CDN wp-smushit · 1M+ installs | 7 | 2 | — | Oct 2026 |
aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder ablocks · 2K+ installs | 6 | 1 | — | Oct 2026 |
administrator-z · 300+ installs | 6 | 1 | — | Apr 2025 |
bm-builder | 6 | — | — | Sep 2026 |
ClickWhaleclosed clickwhale | 6 | 2 | — | Sep 2025 |
cmb2 · 300K+ installs | 6 | 3 | — | Oct 2026 |
Feather Login Page — Custom Login Designerclosed feather-login-page | 6 | 4 | — | Dec 2025 |
Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database form-vibes · 10K+ installs | 6 | 2 | — | Jul 2026 |
Grid Plus – Unlimited grid layoutclosed grid-plus | 6 | 3 | — | Oct 2025 |
Logo Slider – Logo Carousel, Logo Showcase, Logo Gallery & Client Logos gs-logo-slider · 30K+ installs | 6 | 3 | — | Oct 2026 |
Hero Mega Menu - Responsive WordPress Menu Plugin hmenu | 6 | 2 | — | Mar 2025 |
paymob-for-woocommerce · 5K+ installs | 6 | 5 | — | Sep 2026 |
portfolio-manager-powered-by-behance · 300+ installs | 6 | 1 | — | Dec 2025 |
Quill Forms | Conversational Multi Step Forms, Surveys & quizzes quillforms · 3K+ installs | 6 | 3 | — | Sep 2026 |
TheGem Theme Elements (for Elementor) thegem-elements-elementor | 6 | — | — | Jul 2026 |
Ultimate Bootstrap Elements for Elementor ultimate-bootstrap-elements-for-elementor · 6K+ installs | 6 | 1 | — | Apr 2025 |
ultimate-wp-mail · 700+ installs | 6 | 2 | — | Sep 2025 |
Unite Gallery Liteclosed unite-gallery-lite | 6 | 2 | — | Aug 2024 |
WP Coder – Insert & Manage Code Snippets wp-coder · 10K+ installs | 6 | 3 | — | Oct 2026 |
WP Custom Cursors | WordPress Cursor Plugin wp-custom-cursors · 8K+ installs | 6 | 3 | — | Jan 2024 |
Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit aiomatic-automatic-ai-content-writer | 5 | 1 | — | Jun 2025 |
artplacer-widget · 100+ installs | 5 | — | — | Jan 2026 |
bsk-gravityforms-blacklist · 1K+ installs | 5 | 3 | — | Jan 2025 |
debounce-io-email-validator · 300+ installs | 5 | 5 | — | Apr 2025 |
dofollow-case-by-case · 1K+ installs | 5 | 4 | — | Oct 2026 |
EZ SQL Reports Shortcode Widget and DB Backup elisqlreports · 500+ installs | 5 | 3 | — | Jun 2025 |
facebook-for-woocommerce · 400K+ installs | 5 | 5 | — | Aug 2026 |
faq-builder-ays · 100+ installs | 5 | 3 | — | Sep 2026 |
houzez-theme-functionality | 5 | 1 | — | Jan 2026 |
Mediamatic – Media Library Folders mediamatic · 1K+ installs | 5 | 3 | — | May 2023 |
Music Store – WordPress eCommerce music-store · 200+ installs | 5 | 4 | — | Oct 2026 |
Nexter Extension – Security, Performance, Code Snippets & Site Toolkit nexter-extension · 10K+ installs | 5 | 2 | — | Oct 2026 |
simply-rets · 200+ installs | 5 | 3 | — | Oct 2026 |
Social Share Buttons by Supsysticclosed social-share-buttons-by-supsystic | 5 | 1 | — | Sep 2024 |
string-locator · 100K+ installs | 5 | 4 | — | Oct 2026 |
u-design-core | 5 | 1 | — | Oct 2026 |
upsell-order-bump-offer-for-woocommerce · 2K+ installs | 5 | 4 | — | Oct 2026 |
BuddyPress Integration for WooCommerce wc4bp · 700+ installs | 5 | — | — | Mar 2025 |
wp-helper-lite · 1K+ installs | 5 | 5 | — | Aug 2026 |
wp-spell-check · 2K+ installs | 5 | 3 | — | Oct 2026 |
wp-w3all-phpbb-integration · 200+ installs | 5 | 3 | — | Oct 2026 |
All push notification for WPclosed all-push-notification | 4 | 3 | — | Feb 2026 |
Assistant – Every Day Productivity Apps assistant · 4K+ installs | 4 | 2 | — | Sep 2025 |
blog-designer-pro | 4 | 3 | — | Oct 2025 |
CoCart – Headless REST API for WooCommerce cart-rest-api-for-woocommerce · 900+ installs | 4 | 4 | — | Oct 2026 |
change-wp-admin-login · 60K+ installs | 4 | 4 | — | Oct 2026 |
cmsmasters-content-composer | 4 | 1 | — | Feb 2026 |
Contact Form by WD – responsive drag & drop contact form builder toolclosed contact-form-maker | 4 | 2 | — | Jun 2026 |
droip | 4 | 1 | — | Jul 2025 |
easy-social-share-buttons3 | 4 | 2 | — | Nov 2025 |
email-log · 80K+ installs | 4 | 2 | — | Sep 2026 |
global-gallery | 4 | 3 | — | Aug 2026 |
Go Pricing - WordPress Responsive Pricing Tables go_pricing | 4 | — | — | May 2023 |
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more iubenda-cookie-law-solution · 200K+ installs | 4 | 3 | — | Sep 2026 |
lasso · 2K+ installs | 4 | 2 | — | Aug 2026 |
listeo-core | 4 | 3 | — | Apr 2026 |
WowOptin – Popup Maker and Optin Formsclosed optin | 4 | 3 | — | Jul 2026 |
Pay with Contact Form 73 unfixed pay-with-contact-form-7 · 90+ installs | 4 | 3 | — | Aug 2026 |
picu – Online Photo Proofing Gallery picu · 2K+ installs | 4 | 4 | — | Oct 2026 |