WordPress plugin vulnerability directory
Check before you install: each plugin's past vulnerabilities, active exploitation and most critical records. Updated hourly.
| Component | Records | No login | Exploit code | Latest |
|---|---|---|---|---|
avcp · 500+ installs | 4 | 2 | — | Dec 2025 |
awesome-event-booking · 30+ installs | 4 | 4 | — | Apr 2025 |
Awesome Filterable Portfolioclosed awesome-filterable-portfolio | 4 | 2 | — | Sep 2022 |
Image Slider by Ays- Responsive Slider and Carousel ays-slider · 50+ installs | 4 | 3 | — | Mar 2026 |
BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP betterlinks · 20K+ installs | 4 | 1 | — | Aug 2026 |
Gutenberg Block Editor Toolkit – EditorsKit block-options · 20K+ installs | 4 | — | — | Apr 2024 |
booked | 4 | 2 | — | Jul 2026 |
Business Essentials for Contact Form 7 cf7-redirect-thank-you-page · 7K+ installs | 4 | 4 | — | Oct 2026 |
Void Contact Form 7 Widget For Elementor Page Builder cf7-widget-elementor · 10K+ installs | 4 | 1 | — | Aug 2024 |
coreActivity: Activity Logging for WordPress coreactivity · 10+ installs | 4 | 3 | — | May 2026 |
CorvusPay WooCommerce Payment Gateway corvuspay-woocommerce-integration · 1K+ installs | 4 | 4 | — | Jul 2026 |
Distance Based Shipping Calculator distance-based-shipping-calculator · 100+ installs | 4 | 2 | — | Feb 2025 |
Doppler Easy Multichannel Marketing enhanced with IA doppler-form · 600+ installs | 4 | 1 | — | Oct 2025 |
eagle-booking | 4 | 1 | — | Jun 2026 |
easy-form · 100+ installs | 4 | 3 | — | Mar 2026 |
easy-paypal-events-tickets · 1K+ installs | 4 | 4 | — | May 2026 |
easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution easyjobs · 4K+ installs | 4 | 2 | — | Oct 2026 |
Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search echo-knowledge-base · 10K+ installs | 4 | 3 | — | Oct 2026 |
EELV Newsletterclosed eelv-newsletter | 4 | 4 | — | Jan 2025 |
Eupago Gateway For Woocommerceclosed eupago-gateway-for-woocommerce | 4 | 4 | — | Nov 2026 |
ezoic-integration · 10K+ installs | 4 | 3 | — | Aug 2026 |
filter-gallery · 3K+ installs | 4 | — | — | Sep 2026 |
Analyticatorclosed google-analyticator | 4 | 1 | — | Jan 2023 |
HashBar – Announcement, Notification Bar & Popup Campaign hashbar-wp-notification-bar · 9K+ installs | 4 | 1 | — | Sep 2026 |
houzez-property-feed · 1K+ installs | 4 | 3 | — | Aug 2026 |
Instant Images – One-click Image Uploads from Unsplash, Openverse, Pixabay, Pexels, and Giphy instant-images · 100K+ installs | 4 | — | — | May 2024 |
Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more knit-pay · 2K+ installs | 4 | 3 | — | Oct 2026 |
layerslider | 4 | 2 | — | Sep 2026 |
MailMunch – Grow your Email List mailmunch · 5K+ installs | 4 | 2 | — | Sep 2026 |
mainwp-child-reports · 100K+ installs | 4 | 2 | — | Apr 2026 |
Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce mobile-app-for-woocommerce · 30+ installs | 4 | 2 | — | Aug 2026 |
My WP Translateclosed my-wp-translate | 4 | 2 | — | Sep 2025 |
nps-computy · 50+ installs | 4 | 2 | — | Feb 2026 |
Email Marketing for WooCommerce by Omnisend omnisend-connect · 40K+ installs | 4 | 3 | — | Jun 2026 |
oopspam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) oopspam-anti-spam · 6K+ installs | 4 | 3 | — | Mar 2026 |
Perfect Brands for WooCommerce perfect-woocommerce-brands · 40K+ installs | 4 | — | — | Nov 2025 |
pilotpress · 900+ installs | 4 | 1 | — | Oct 2026 |
podlove-subscribe-button · 2K+ installs | 4 | 1 | — | Sep 2025 |
poeditor · 500+ installs | 4 | 3 | — | Jun 2025 |
post-export-import-with-media · 1K+ installs | 4 | — | — | Oct 2026 |
premmerce · 400+ installs | 4 | 3 | — | Feb 2026 |
premmerce-user-roles · 600+ installs | 4 | 1 | — | Nov 2025 |
primer-mydata · 100+ installs | 4 | 4 | — | Feb 2026 |
Product Catalog Feed by PixelYourSite product-catalog-feed · 7K+ installs | 4 | 1 | — | Oct 2026 |
Feedify – Web Push Notifications push-notification-by-feedify · 90+ installs | 4 | 3 | — | Apr 2025 |
PWA for WP – Progressive Web Apps Made Simple pwa-for-wp · 10K+ installs | 4 | 1 | — | May 2025 |
QuickCal - Appointment Booking Calendar for WordPress quickcal | 4 | 2 | — | Sep 2026 |
rehub-framework | 4 | 1 | — | Jan 2026 |
Solidres – Hotel booking plugin for WordPressclosed solidres | 4 | — | — | Feb 2025 |
Sprout Clients – CRM and Lead Management sprout-clients · 30+ installs | 4 | 2 | — | Jul 2026 |
stockholm-core | 4 | 1 | — | Dec 2025 |
Subscribe To Comments Reloadedclosed subscribe-to-comments-reloaded | 4 | 4 | — | May 2026 |
sully · 30+ installs | 4 | — | — | Jul 2024 |
surferseo · 6K+ installs | 4 | 1 | — | Oct 2026 |
Swiss Toolkit For WPclosed swiss-toolkit-for-wp | 4 | — | — | Jul 2026 |
Table of Contents Plus – Automatic Table of Contents for Posts & Pages table-of-contents-plus · 200K+ installs | 4 | 2 | — | Nov 2024 |
Timeline Event Historyclosed timeline-event-history | 4 | 2 | — | Feb 2026 |
ultimate-elementor | 4 | — | — | Aug 2026 |
user-activity-log-pro | 4 | 2 | — | Nov 2024 |
WC Affiliate – WooCommerce Affiliate Plugin wc-affiliate · 300+ installs | 4 | 1 | — | May 2025 |
wc-fields-factory · 7K+ installs | 4 | — | — | Oct 2026 |
webmention · 900+ installs | 4 | 3 | — | Oct 2026 |
webp-express · 300K+ installs | 4 | 3 | — | Oct 2026 |
Product Carousel Slider & Grid Ultimate for WooCommerce woo-product-carousel-slider-and-grid-ultimate · 6K+ installs | 4 | — | — | Jan 2025 |
wp-all-import-pro | 4 | 1 | — | Feb 2025 |
wp-dbmanager · 50K+ installs | 4 | — | — | Aug 2022 |
Malcure Malware Shield — Removal, Repair, Monitor wp-malware-removal · 10K+ installs | 4 | — | — | Sep 2026 |
wp-media-folder | 4 | 1 | — | Oct 2026 |
WP Meteor Website Speed Optimization Addon wp-meteor · 20K+ installs | 4 | 4 | — | Oct 2026 |
wp-payment-form · 3K+ installs | 4 | 4 | — | Oct 2026 |
WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping wp-product-feed-manager · 10K+ installs | 4 | — | — | Sep 2026 |
wp-rocket | 4 | 3 | — | Oct 2026 |
wptools | 4 | 2 | — | Jun 2025 |
xili-tidy-tags2 unfixed xili-tidy-tags · 1K+ installs | 4 | 3 | — | Sep 2025 |
Zoho SalesIQ – Live chat, chatbots, and visitor tracking zoho-salesiq · 10K+ installs | 4 | 4 | — | Aug 2019 |
academy-pro | 3 | 2 | — | Jun 2026 |
Access Demo Importerclosed access-demo-importer | 3 | 2 | — | Apr 2022 |
advanced-forms · 3K+ installs | 3 | 2 | — | Jul 2026 |
atec-debug · 70+ installs | 3 | — | — | Sep 2025 |
Availability Calendarclosed availability-calendar | 3 | 1 | — | Nov 2023 |
aweber-web-form-widget · 8K+ installs | 3 | — | — | May 2025 |
Banner Systemclosed banner-system | 3 | 1 | — | Dec 2024 |
bizcalendar-web · 30+ installs | 3 | 1 | — | Aug 2025 |
blog-floating-button · 8K+ installs | 3 | 3 | — | Aug 2026 |
bmi-adultkid-calculator · 700+ installs | 3 | 2 | — | Sep 2025 |
brizy-pro | 3 | 2 | — | Apr 2025 |
CF7 Views – Complete Entry Management for Contact Form 7 cf7-views · 1K+ installs | 3 | 2 | — | Oct 2026 |
Classic Addons – WPBakery Page Builder classic-addons-wpbakery-page-builder-addons · 3K+ installs | 3 | — | — | Jan 2025 |
Click n Chat (Chat Widget Integration) click-n-chat · 40+ installs | 3 | 3 | — | Oct 2026 |
Cloud SAML SSO – Single Sign On Login cloud-sso-single-sign-on · 80+ installs | 3 | 3 | — | Sep 2025 |
CodePeople Post Map for Google Maps codepeople-post-map · 3K+ installs | 3 | 1 | — | Jul 2026 |
comments-ratings · 2K+ installs | 3 | 2 | — | Nov 2023 |
Contact Form vCard Generatorclosed contact-form-vcard-generator | 3 | 3 | — | Jan 2026 |
cookie-notice-consent · 1K+ installs | 3 | 2 | — | Nov 2025 |
credova-financial · 100+ installs | 3 | 3 | — | May 2025 |
Cryptocurrency Donation Box – Bitcoin & Crypto Donationsclosed cryptocurrency-donation-box | 3 | 2 | — | Oct 2026 |
customizer-export-import · 100K+ installs | 3 | — | — | Sep 2024 |
Database Backup and Table Integrity Check with Automated Schedulingclosed database-backup | 3 | — | — | Mar 2025 |
Database Cleaner: Cleanup, Optimization & Repair database-cleaner · 10K+ installs | 3 | 1 | — | Oct 2026 |
Database for CF7closed database-for-cf7 | 3 | 2 | — | Oct 2026 |