WordPress plugin vulnerability directory
Check before you install: each plugin's past vulnerabilities, active exploitation and most critical records. Updated hourly.
| Component | Records | No login | Exploit code | Latest |
|---|---|---|---|---|
bbpress-notify-nospam · 2K+ installs | 2 | 2 | — | Oct 2025 |
Beacon Lead Magnets and Lead Capture beacon-by · 500+ installs | 2 | 2 | — | May 2025 |
蜜蜂采集-BeePress 微信公众号今日头条知乎专栏简书等平台文章采集插件closed beepress | 2 | 1 | — | Mar 2024 |
Before After Image Comparison – Visual Comparison for Two Images before-after-image-compare · 3K+ installs | 2 | 1 | — | Oct 2026 |
better-font-awesome · 60K+ installs | 2 | 1 | — | Feb 2023 |
biagiotti-core | 2 | 1 | — | Aug 2026 |
Billingo Official for WooCommerce billingo · 3K+ installs | 2 | — | — | Oct 2025 |
BitFire Security – Firewall, Malware Scanner, Bot Blocker, Login Protection bitfire · 300+ installs | 2 | 2 | — | Jun 2026 |
BizLibraryclosed bizlibrary | 2 | 1 | — | Jan 2025 |
Block for Font Awesome Icons – Searchable Icon Picker, SVG, FA 7 block-for-font-awesome · 1K+ installs | 2 | 1 | — | Jun 2024 |
Block for Mailchimp – grow your email list with signup forms block-for-mailchimp · 2K+ installs | 2 | 2 | — | Jun 2026 |
Bitcoin Payments – Blockonomics1 unfixed blockonomics-bitcoin-payments · 2K+ installs | 2 | 2 | — | Oct 2026 |
Blockons – Gutenberg blocks for WordPress and WooCommerce websites blockons · 600+ installs | 2 | 1 | — | Jan 2026 |
BlockStrap Page Builder – Bootstrap Blocks blockstrap-page-builder-blocks · 2K+ installs | 2 | 1 | — | Oct 2026 |
blog-in-blog · 800+ installs | 2 | — | — | May 2023 |
blue-captcha · 400+ installs | 2 | 2 | — | Jun 2026 |
Bluff Postclosed bluff-post | 2 | 2 | — | Sep 2026 |
BMLT Meeting Mapclosed bmlt-meeting-map | 2 | — | — | Jan 2025 |
Customize WordPress Emails and Alerts – Better Notifications for WP bnfw · 30K+ installs | 2 | 1 | — | May 2023 |
Bookify – Appointment Booking & Scheduling for WordPressclosed bookify | 2 | — | — | Jun 2026 |
breadcrumb-navxt · 800K+ installs | 2 | 2 | — | Sep 2026 |
Breadcrumbs by menuclosed breadcrumbs-by-menu | 2 | 2 | — | Sep 2019 |
bu-section-editing · 50+ installs | 2 | 1 | — | Jan 2025 |
Bulgarisation for WooCommerceclosed bulgarisation-for-woocommerce | 2 | 2 | — | Mar 2024 |
button · 2K+ installs | 2 | — | — | Mar 2024 |
Buying Buddy IDX CRM – Real Estate MLS Plugin buying-buddy-idx-crm · 500+ installs | 2 | 1 | — | Jun 2025 |
bwl-pro-voting-manager | 2 | — | — | Dec 2025 |
Campaign Monitor Forms by Optin Cat campaign-monitor-wp · 200+ installs | 2 | 1 | — | Dec 2024 |
CampTix Event Ticketingclosed camptix | 2 | 1 | — | Jul 2019 |
Forms by CaptainForm – Form Builder for WordPressclosed captainform | 2 | 2 | — | Dec 2023 |
captcha-eu · 300+ installs | 2 | 2 | — | Oct 2025 |
cardealerpress · 30+ installs | 2 | 1 | — | May 2025 |
CardGate Payments for WooCommerce cardgate · 200+ installs | 2 | 2 | — | Apr 2025 |
3D Tag Cloudclosed cardoza-3d-tag-cloud | 2 | 2 | — | Jan 2024 |
Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD cart-lift · 900+ installs | 2 | 2 | — | Jul 2026 |
Cart66 Cloud :: WordPress Ecommerce The Easy Wayclosed cart66-cloud | 2 | 2 | — | Apr 2025 |
cartasi-x-pay · 7K+ installs | 2 | 2 | — | Jun 2026 |
cartflows-pro | 2 | 2 | — | Nov 2023 |
Category SEO Meta Tagsclosed category-seo-meta-tags | 2 | 1 | — | Nov 2023 |
Category Specific RSS feed Subscriptionclosed category-specific-rss-feed-menu | 2 | 1 | — | May 2023 |
CatFolders Document Gallery & PDF Library catfolders-document-gallery · 3K+ installs | 2 | 1 | — | Sep 2026 |
Offload, AI & Optimize with Cloudflare Images cf-images · 1K+ installs | 2 | — | — | Jun 2026 |
cf7-antispam · 10K+ installs | 2 | 2 | — | Jul 2025 |
cf7-invisible-recaptcha · 6K+ installs | 2 | 2 | — | Nov 2023 |
Mollie for Contact Form 7closed cf7-mollie | 2 | 1 | — | Dec 2024 |
Chatra Live Chat + ChatBot + Cart Saver chatra-live-chat · 2K+ installs | 2 | — | — | Jul 2026 |
Chatterclosed chatter | 2 | 1 | — | Jan 2025 |
citadela-directory | 2 | 2 | — | Apr 2024 |
civi-framework | 2 | 2 | — | Jul 2026 |
Client Portal – Private user pages and login client-portal · 3K+ installs | 2 | 1 | — | Feb 2026 |
Clinked Client Portal1 unfixed clinked-client-portal · 70+ installs | 2 | 1 | — | Apr 2025 |
Cloak Front End Emailclosed cloak-front-end-email | 2 | 1 | — | Apr 2025 |
CM Ad Changer – A simple tool to control and optimize your site’s banners cm-ad-changer · 100+ installs | 2 | 2 | — | May 2026 |
CM E-Mail Blacklist – Simple email filtering for safer registration cm-email-blacklist · 700+ installs | 2 | 1 | — | Jan 2026 |
codemonkeys-hipaa-forms · 800+ installs | 2 | 1 | — | Oct 2026 |
collapsing-archives · 3K+ installs | 2 | — | — | Mar 2026 |
Maintenance Mode by Supsysticclosed coming-soon-by-supsystic | 2 | 2 | — | May 2023 |
comment-reply-email · 500+ installs | 2 | 1 | — | Jul 2024 |
Conditional Shipping for WooCommerce conditional-shipping-for-woocommerce · 10K+ installs | 2 | 2 | — | Apr 2025 |
Connector to CiviCRM with CiviMcRestFace connector-civicrm-mcrestface · 100+ installs | 2 | 2 | — | Apr 2025 |
Contact Form 7 Styleclosed contact-form-7-style | 2 | 2 | — | Jul 2023 |
WDContactFormBuilderclosed contact-form-builder | 2 | 1 | — | Nov 2023 |
Contact Formclosed contact-form-ready | 2 | 1 | — | Jun 2025 |
Contact Form Submissionsclosed contact-form-submissions | 2 | 1 | — | Mar 2022 |
Contact Us By Lord Linusclosed contact-us-by-lord-linus | 2 | 1 | — | Mar 2025 |
content-audit · 70+ installs | 2 | 1 | — | Aug 2019 |
Content Manager Light2 unfixed content-manager-light · 80+ installs | 2 | 1 | — | Jul 2025 |
content-no-cache · 200+ installs | 2 | 2 | — | Jun 2025 |
Convert Post Typesclosed convert-post-types | 2 | 2 | — | Apr 2024 |
CookieHint WP2 unfixed cookiehint-wp · 50+ installs | 2 | 1 | — | Dec 2025 |
Cookies and Content Security Policy cookies-and-content-security-policy · 10K+ installs | 2 | 2 | — | Jan 2026 |
Cool Timeline (Horizontal & Vertical Timeline) cool-timeline · 20K+ installs | 2 | 1 | — | Jul 2023 |
copyscape-premium · 700+ installs | 2 | 2 | — | Feb 2026 |
corona-virus-covid-19-banner · 600+ installs | 2 | 1 | — | May 2024 |
Countdown and CountUp, WooCommerce Sales Timerclosed countdown-wpdevart-extended | 2 | 1 | — | Nov 2023 |
Country Blockerclosed country-blocker | 2 | 2 | — | Dec 2024 |
Coupon X – Discount Popups, Promo Codes Pop Ups for WooCommerce & Announcement Popups coupon-x-discount-pop-up · 1K+ installs | 2 | — | — | Jan 2025 |
CPT Shortcode Generatorclosed cpt-shortcode | 2 | 1 | — | Oct 2023 |
Custom Dashboard Widgetclosed create-custom-dashboard-widget | 2 | 1 | — | Jan 2025 |
Crisp – Live Chat and AI Chatbot crisp · 10K+ installs | 2 | 1 | — | Mar 2024 |
Crony Cronjob Managerclosed crony | 2 | 1 | — | Apr 2024 |
Crowdfunding for WooCommerceclosed crowdfunding-for-woocommerce | 2 | 1 | — | Jul 2025 |
css3_accordions | 2 | 1 | — | May 2025 |
CSS3 Compare Pricing Tables for WordPress css3_web_pricing_tables_grids | 2 | 1 | — | Jul 2025 |
Custom Admin Menuclosed custom-admin-menu | 2 | — | — | Dec 2025 |
Custom Order Numbers for WooCommerce custom-order-numbers-for-woocommerce · 20K+ installs | 2 | 2 | — | Nov 2025 |
Custom Order Statuses for WooCommerceclosed custom-order-statuses-for-woocommerce | 2 | 1 | — | Apr 2024 |
daisycon · 400+ installs | 2 | — | — | May 2025 |
DarkMySite – Advanced Dark Mode Plugin for WordPress darkmysite · 900+ installs | 2 | 2 | — | Jun 2025 |
dashboard-to-do-list · 1K+ installs | 2 | 1 | — | Jun 2024 |
Data Dashclosed data-dash | 2 | 1 | — | Apr 2025 |
database-collation-fix · 1K+ installs | 2 | 2 | — | Aug 2026 |
debug-assistant · 20+ installs | 2 | 1 | — | Nov 2023 |
WebToffee eCommerce Marketing Automation – Email marketing, Popups, Email customizer decorator-woocommerce-email-customizer · 10K+ installs | 2 | — | — | Dec 2025 |
Designer – Elementor Addons1 unfixed designer · 100+ installs | 2 | — | — | Jan 2025 |
designsetgo · 8K+ installs | 2 | — | — | Oct 2026 |
Devnex Addons For Elementorclosed devnex-addons-for-elementor | 2 | — | — | Jun 2025 |
devvn-image-hotspot · 20K+ installs | 2 | — | — | Feb 2026 |
Shipping by Weight for WooCommerce dn-shipping-by-weight · 60+ installs | 2 | 2 | — | Apr 2025 |
Domain For Sale – Landing Page Per Domain, Domain Mapping, Offers & Listings domain-for-sale · 200+ installs | 2 | 1 | — | Sep 2026 |