WordPress plugin vulnerability directory
Check before you install: each plugin's past vulnerabilities, active exploitation and most critical records. Updated hourly.
| Component | Records | No login | Exploit code | Latest |
|---|---|---|---|---|
Opal Woo Custom Product Variation opal-woo-custom-product-variation · 300+ installs | 2 | 2 | — | May 2025 |
Opti-Behavior – Self-Hosted Heatmaps, Funnels, A/B Testing & Smart Insights opti-behavior · 2K+ installs | 2 | 2 | — | Oct 2026 |
Parallax Section Block – Add Parallax Scrolling Effects to Sections parallax-section · 3K+ installs | 2 | 1 | — | Oct 2026 |
CWILL (Formerly ParcelPanel) – Shipment Tracking, Tracking & Order Tracking for WooCommerce parcelpanel · 7K+ installs | 2 | 1 | — | Aug 2024 |
PDF Invoices and Packing Slips For WooCommerce pdf-invoices-and-packing-slips-for-woocommerce · 1K+ installs | 2 | — | — | Mar 2024 |
PDF Smart Viewer for Elementor pdf-smart-viewer-for-elementor · 1K+ installs | 2 | 2 | — | Oct 2026 |
Photo Video Storeclosed photo-video-store | 2 | 2 | — | Mar 2025 |
phpinfo() WP – Site Health, PHP Compatibility & Server Audit phpinfo-wp · 3K+ installs | 2 | 2 | — | Jun 2024 |
pressapps-accordion-faq | 2 | 1 | — | Jun 2026 |
prolancer-element | 2 | — | — | Aug 2026 |
Product Feed on WooCommerce for Google, Awin, Shareasale, Bing, and Moreclosed purple-xmls-google-product-feed-for-woocommerce | 2 | — | — | Apr 2024 |
Qe SEO Handymanclosed qe-seo-handyman | 2 | — | — | Jan 2023 |
WooCommerce Recover Abandoned Cart rac | 2 | 2 | — | Dec 2025 |
real-estate-pro | 2 | 2 | — | Jan 2026 |
Role Based Pricing for WooCommerce role-based-pricing-for-woocommerce | 2 | — | — | Nov 2022 |
MultiMailer2 unfixed scand-multi-mailer · 20+ installs | 2 | 2 | — | Apr 2025 |
sendpulse-web-push · 500+ installs | 2 | 2 | — | Oct 2024 |
silvasoft-boekhouden · 300+ installs | 2 | 1 | — | Apr 2025 |
Simple Archive Generator2 unfixed simple-archive-generator · 40+ installs | 2 | 2 | — | Feb 2026 |
Simple Contact Forms2 unfixed simple-contact-forms · 20+ installs | 2 | 2 | — | Nov 2025 |
Easy Galleryclosed simple-gallery-odihost | 2 | 1 | — | Mar 2025 |
Small Package Quotes – USPS Edition small-package-quotes-usps-edition · 10+ installs | 2 | 1 | — | Aug 2025 |
smsa-shipping-official · 300+ installs | 2 | 1 | — | Jan 2025 |
so-css · 100K+ installs | 2 | 2 | — | Oct 2026 |
Social Media Share Buttonsclosed social-media-builder | 2 | — | — | Mar 2024 |
SpatialMatch IDXclosed spatialmatch-free-lifestyle-search | 2 | 2 | — | Mar 2025 |
Speed Booster Pack ⚡ PageSpeed Optimization Suite speed-booster-pack · 8K+ installs | 2 | — | — | Jan 2022 |
Spice Blocks1 unfixed spice-blocks · 900+ installs | 2 | 2 | — | Jun 2025 |
Starfish Review Generation & Marketing for WordPress starfish-reviews · 100+ installs | 2 | — | — | Feb 2026 |
stars-smtp-mailer · 10+ installs | 2 | 1 | — | Jan 2025 |
stylish-google-sheet-reader · 200+ installs | 2 | 1 | — | Apr 2025 |
Subscribe to Download Lite – Email Before Download Plugin subscribe-to-download-lite · 400+ installs | 2 | — | — | Apr 2025 |
Subscribe to Unlock Lite – Opt In Content Locker Plugin for WordPress subscribe-to-unlock-lite · 500+ installs | 2 | — | — | Dec 2025 |
superfly-menu | 2 | 1 | — | Aug 2024 |
Syncee Premium Dropshipping & Wholesale syncee-global-dropshipping · 1K+ installs | 2 | 2 | — | Jun 2026 |
Tax Rate Uploadclosed tax-rate-upload | 2 | 2 | — | Apr 2024 |
Testimonial Slider And Showcase Pro testimonial-slider-showcase-pro | 2 | 1 | — | Oct 2025 |
themify-ptb | 2 | 1 | — | Apr 2024 |
Sticky Anythingclosed toast-stick-anything | 2 | 2 | — | Apr 2024 |
tonda-core | 2 | 1 | — | Aug 2026 |
top_bar_promoter | 2 | 1 | — | Jan 2026 |
transbank-webpay-plus-rest · 10K+ installs | 2 | 1 | — | Jun 2026 |
AuthPressclosed two-factor-login-telegram | 2 | — | — | Oct 2024 |
Tz Weekly Radio Scheduleclosed tz-wrs-core | 2 | 2 | — | Sep 2026 |
Master Blocks – Ultimate Blocks for Marketers ultimate-blocks-for-gutenberg · 100+ installs | 2 | 1 | — | Sep 2026 |
ultra-portfolio | 2 | 1 | — | Jan 2026 |
unbounce · 10K+ installs | 2 | — | — | Sep 2026 |
universal-video-player | 2 | 2 | — | Jan 2026 |
user-registration-stripe | 2 | 2 | — | Jun 2026 |
userpro-messaging | 2 | 2 | — | Jan 2025 |
uxper-booking | 2 | 1 | — | Aug 2025 |
Social Login, Passkeys, Magic Link & Email OTP – Passwordless Login by VentraConnect ventraconnect-social-login · 90+ installs | 2 | 2 | — | Aug 2026 |
Video Blogster Lite2 unfixed video-blogster-lite · 600+ installs | 2 | 2 | — | Oct 2025 |
Web Invoice – Invoicing and billing for WordPressclosed web-invoice | 2 | — | — | Jan 2023 |
PDF Invoices & Packing Slips for WooCommerce – Challan webappick-pdf-invoice-for-woocommerce · 7K+ installs | 2 | 1 | — | Oct 2026 |
Widget Logic Visualclosed widget-logic-visual | 2 | 1 | — | Jul 2026 |
wip-custom-login · 700+ installs | 2 | 1 | — | Jan 2024 |
woo-conditional-product-fees-for-checkout · 7K+ installs | 2 | 1 | — | Oct 2026 |
WooCommerce Login Redirectclosed woo-login-redirect | 2 | 2 | — | Dec 2023 |
Premmerce Permalink Manager for WooCommerce woo-permalink-manager · 40K+ installs | 2 | 2 | — | Sep 2026 |
woocommerce-product-addons | 2 | 1 | — | Dec 2023 |
woocommerce-square · 80K+ installs | 2 | 1 | — | Jan 2026 |
wooenvato | 2 | 1 | — | May 2026 |
WordPress Usersclosed wordpress-users | 2 | 1 | — | Jan 2024 |
WoWPthclosed wowpth | 2 | — | — | Mar 2025 |
WP App Barclosed wp-app-bar | 2 | 2 | — | Mar 2026 |
WP AUDIO GALLERYclosed wp-audio-gallery | 2 | — | — | Feb 2026 |
WP-CopyProtect [Protect your blog posts]closed wp-copyprotect | 2 | 2 | — | Oct 2023 |
WP Dispatcherclosed wp-dispatcher | 2 | — | — | Oct 2025 |
wp-dynamic-keywords-injector · 1K+ installs | 2 | 2 | — | Apr 2024 |
WP Forms Connectorclosed wp-forms-connector | 2 | 2 | — | Jun 2026 |
eForm - WordPress Form Builder wp-fsqm-pro | 2 | 2 | — | Jun 2025 |
wp-limit-login-attempts · 10K+ installs | 2 | 1 | — | Jan 2023 |
wp-media-folder-addon | 2 | 2 | — | Jul 2026 |
WP Mega Menu1 unfixed wp-megamenu · 8K+ installs | 2 | — | — | Sep 2026 |
WP Post Corrector1 unfixed wp-post-corrector · 40+ installs | 2 | 1 | — | Jun 2025 |
WP Profitshareclosed wp-profitshare | 2 | 1 | — | Apr 2025 |
Solid Mail – SMTP email and logging made by SolidWP wp-smtp · 60K+ installs | 2 | 1 | — | May 2025 |
wp-sort-order · 6K+ installs | 2 | 1 | — | Aug 2026 |
WP-Stateless – Google Cloud Storage wp-stateless · 4K+ installs | 2 | — | — | Sep 2026 |
WP-TopBarclosed wp-topbar | 2 | 1 | — | May 2023 |
Email Notifications for Updates wp-update-mail-notification · 100+ installs | 2 | — | — | Apr 2025 |
wp-upload-files-anywhere | 2 | 2 | — | Feb 2026 |
wp-user-switch · 1K+ installs | 2 | — | — | Jul 2024 |
WP Video Postsclosed wp-video-posts | 2 | 2 | — | Apr 2025 |
WPC Name Your Price for WooCommerce wpc-name-your-price · 6K+ installs | 2 | 2 | — | Aug 2026 |
WPNakama – Editorial Workflow & Content Planning for WP wpnakama · 10+ installs | 2 | 2 | — | Feb 2026 |
WPOptin – AI-Powered Top Bars, PopUps & Lead Generationclosed wpoptin | 2 | 2 | — | Mar 2025 |
WSM Downloaderclosed wsm-downloader | 2 | 2 | — | Aug 2022 |
xelion-webchat · 90+ installs | 2 | — | — | Apr 2025 |
xili-dictionary1 unfixed xili-dictionary · 100+ installs | 2 | 2 | — | Jun 2025 |
Yahoo! WebPlayer2 unfixed yahoo-media-player · 40+ installs | 2 | 2 | — | Aug 2025 |
YDS Support Ticket Systemclosed yds-support-ticket-system | 2 | 1 | — | Dec 2024 |
Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android Appclosed yournewsapp | 2 | 2 | — | Dec 2025 |
ZIP Code Based Content Protection zip-code-based-content-protection · 10+ installs | 2 | 1 | — | Mar 2026 |
Addon Elements for Elementor (formerly Elementor Addon Elements) addon-elements-for-elementor-page-builder · 80K+ installs | 28 | 3 | — | Oct 2026 |
Page Builder: Pagelayer – Drag and Drop website builder pagelayer · 400K+ installs | 25 | 4 | — | Jun 2026 |
Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types wicked-folders · 20K+ installs | 22 | 10 | — | Mar 2026 |
colibri-page-builder · 80K+ installs | 19 | 3 | — | Oct 2026 |
wp-members · 50K+ installs | 19 | 7 | — | Oct 2026 |