WordPress plugin vulnerability directory
Check before you install: each plugin's past vulnerabilities, active exploitation and most critical records. Updated hourly.
| Component | Records | No login | Exploit code | Latest |
|---|---|---|---|---|
Caddy – WooCommerce Side Cart & Free Shipping Bar caddy · 3K+ installs | 1 | 1 | — | Dec 2023 |
CAFEHAUS APIclosed cafe-api | 1 | 1 | — | Jul 2026 |
WP Calais Auto Tagger1 unfixed calais-auto-tagger · 40+ installs | 1 | 1 | — | Apr 2025 |
Calculation for contact form 7 calculation-for-contact-form-7 · 1K+ installs | 1 | 1 | — | Sep 2026 |
Calculator Builder – Create an Online Calculator calculator-builder · 1K+ installs | 1 | 1 | — | Feb 2025 |
Calendar Plus1 unfixed calendar-plus · 100+ installs | 1 | 1 | — | Oct 2025 |
calendarista | 1 | — | — | Mar 2024 |
Calendiclosed calendi | 1 | 1 | — | Jan 2025 |
WordPress Call me Nowclosed call-me-now | 1 | 1 | — | Jan 2025 |
Call Now PHT Blogclosed call-now-coccoc-pht-blog | 1 | 1 | — | Apr 2025 |
Call To Action Popupclosed call-to-action-popup | 1 | 1 | — | Jan 2025 |
Callback Requestclosed callback-request | 1 | 1 | — | Mar 2025 |
CallPhone'rclosed callphoner | 1 | 1 | — | Mar 2025 |
CAMOO SMSclosed camoo-sms | 1 | 1 | — | Jan 2025 |
Canalplanclosed canalplan-ac | 1 | 1 | — | Mar 2025 |
Canonical Attachments1 unfixed canonical-attachments · 300+ installs | 1 | 1 | — | Apr 2025 |
Canva – Design beautiful blog graphicsclosed canva | 1 | 1 | — | Apr 2024 |
Captchelfie – Captcha by Selfieclosed captchelfie-captcha-by-selfie | 1 | 1 | — | Jan 2025 |
CaptionPix1 unfixed captionpix · 100+ installs | 1 | 1 | — | Aug 2025 |
capturly-optimize-your-website · 100+ installs | 1 | 1 | — | Apr 2025 |
AJAX Post Searchclosed cardoza-ajax-search | 1 | — | — | Jan 2015 |
WordPress Pollclosed cardoza-wordpress-poll | 1 | 1 | — | Aug 2020 |
caret-country-access-limit · 10+ installs | 1 | 1 | — | Oct 2023 |
CAS Maestroclosed cas-maestro | 1 | 1 | — | Mar 2025 |
Cashtomerclosed cashtomer | 1 | — | — | Sep 2021 |
SpiderCatalogclosed catalog | 1 | — | — | Nov 2021 |
catch-duplicate-switcher · 50+ installs | 1 | 1 | — | Mar 2025 |
Product Filter – Filter WooCommerce Products by Category Tabsclosed category-and-product-woocommerce-tabs | 1 | — | — | Nov 2025 |
Category Widgetclosed category-widget | 1 | 1 | — | May 2025 |
Category Custom Fieldsclosed categorycustomfields | 1 | 1 | — | Jan 2025 |
Causes – Donation Pluginclosed causes | 1 | 1 | — | Jan 2025 |
Cazambaclosed cazamba | 1 | 1 | — | Mar 2025 |
CBX Currency Converterclosed cbcurrencyconverter | 1 | 1 | — | Nov 2023 |
CBX Accounting & Bookkeepingclosed cbxwpsimpleaccounting | 1 | 1 | — | Jan 2025 |
cdnvoteclosed cdnvote | 1 | — | — | Jan 2015 |
CedCommerce Integration for Good Market1 unfixed ced-good-market-integration · 50+ installs | 1 | 1 | — | Dec 2025 |
cf7-autoresponder-addon | 1 | 1 | — | Oct 2025 |
Builder for Contact Form 7 by Webconstruct – Drag & Drop Contact Form Builderclosed cf7-builder | 1 | 1 | — | Mar 2025 |
Contact Form 7 Calendarclosed cf7-calendar | 1 | 1 | — | Apr 2025 |
Form To Online Bookingclosed cf7-calendly-integration | 1 | 1 | — | Feb 2025 |
Contact Form 7 – CCAvenue Add-onclosed cf7-cc-avenue-add-on | 1 | 1 | — | Jan 2025 |
cf7-database · 7K+ installs | 1 | 1 | — | Mar 2024 |
WP Dynamics CRM for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms cf7-dynamics-crm · 300+ installs | 1 | 1 | — | Jan 2025 |
Contact Form 7 Editor Button1 unfixed cf7-editor-button · 200+ installs | 1 | 1 | — | Jul 2025 |
Email Addon for Contact Form 7 cf7-email-add-on · 3K+ installs | 1 | — | — | Nov 2024 |
Spam Blocker | Stop Spam for Contact Form 7, WP Forms and Formidable Formsclosed cf7-manual-spam-blocker | 1 | 1 | — | Apr 2025 |
Contact Form 7 Material Designclosed cf7-material-design | 1 | 1 | — | Mar 2025 |
Contact Form 7 – Paystack Add-onclosed cf7-paystack-add-on | 1 | 1 | — | Feb 2025 |
Contact Form 7 Submission Summary & PDF Print cf7-summary-and-print · 300+ installs | 1 | 1 | — | Aug 2024 |
cf7-to-zapier · 30K+ installs | 1 | 1 | — | Jun 2026 |
UTM tags + Landing page + "gclid" tracking for Contact Form 7closed cf7-utm-tracking | 1 | 1 | — | Mar 2025 |
Cf7Save Extensionclosed cf7save-extension | 1 | 1 | — | Jan 2025 |
CG Scroll To Topclosed cg-scroll-to-top | 1 | 1 | — | Apr 2025 |
CGM Event Calendarclosed cgm-event-calendar | 1 | 1 | — | Apr 2025 |
Chameleon CSSclosed chameleon-css | 1 | — | — | Nov 2021 |
chameleon-jobs · 10+ installs | 1 | 1 | — | Dec 2024 |
Change default login logo,url and titleclosed change-default-login-logo-url-and-title | 1 | 1 | — | Apr 2024 |
change-table-prefix · 1K+ installs | 1 | 1 | — | Feb 2024 |
Chat On Desk Order Notifications – WooCommerce chat-on-desk | 1 | 1 | — | Aug 2026 |
chat2 · 80+ installs | 1 | 1 | — | Apr 2025 |
Chatway Live Chat – AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons chatway-live-chat · 30K+ installs | 1 | — | — | Jun 2026 |
check-pincode-for-woocommerce · 300+ installs | 1 | 1 | — | Dec 2024 |
CheckBotclosed checkbot | 1 | 1 | — | May 2025 |
Checkfront Online Booking System checkfront-wp-booking · 1K+ installs | 1 | 1 | — | Oct 2023 |
Checkimate — WooCommerce Checkout, Abandoned Cart Recovery & Order Bumpsclosed checkimate | 1 | 1 | — | Aug 2026 |
Checkout Field Visibility for eCommerce checkout-field-visibility-for-woocommerce · 30+ installs | 1 | 1 | — | Apr 2025 |
cherry-plugin | 1 | 1 | — | Oct 2026 |
child-theme-wizard · 10K+ installs | 1 | 1 | — | Jun 2026 |
Child Themes1 unfixed child-themes · 60+ installs | 1 | 1 | — | Oct 2025 |
chillpay-payment-gateway · 100+ installs | 1 | 1 | — | Apr 2025 |
Choose User Role at Registration choose-user-role-at-registration | 1 | 1 | — | Sep 2026 |
Lewe ChordPress – ChordPro Text Formatter1 unfixed chordpress · 100+ installs | 1 | 1 | — | Jun 2025 |
Chronoformsclosed chronoforms | 1 | 1 | — | May 2023 |
Chronosly Events Calendarclosed chronosly-events-calendar | 1 | 1 | — | Nov 2023 |
circular_countdown | 1 | — | — | May 2025 |
CJ Custom Contentclosed cj-custom-content | 1 | 1 | — | Jan 2025 |
CK and SyntaxHighlighterclosed ck-and-syntaxhighlighter | 1 | 1 | — | Dec 2024 |
classyfriedsclosed classyfrieds | 1 | — | — | May 2021 |
Cleanup – Directory Listing & Classifieds WordPress Plugin cleanup-light | 1 | 1 | — | Jan 2025 |
Clearblue® Ovulation Calculatorclosed clearblue-ovulation-calculator | 1 | 1 | — | Nov 2025 |
clearsale-total · 100+ installs | 1 | 1 | — | Jun 2026 |
clerkio · 400+ installs | 1 | 1 | — | Dec 2022 |
clevernode-related-content · 10+ installs | 1 | 1 | — | Dec 2024 |
Clickbank WordPress Plugin (Niche Storefront)closed clickbank-niche-storefronts | 1 | 1 | — | Aug 2025 |
Simple Documentationclosed client-documentation | 1 | 1 | — | Feb 2025 |
Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) clink-gateway-for-woocommerce | 1 | 1 | — | Aug 2026 |
clotya-core | 1 | 1 | — | Mar 2024 |
WP Cloudclosed cloud | 1 | 1 | — | Feb 2025 |
CloudSearch1 unfixed cloud-search · 60+ installs | 1 | 1 | — | Oct 2025 |
CloudFlare(R) Cache Purgeclosed cloudflare-cache-purge | 1 | 1 | — | Jan 2025 |
cloudsecure-wp-security · 100K+ installs | 1 | 1 | — | Jun 2026 |
WordPress Membership SwiftCloud.ioclosed club-management-software | 1 | — | — | Sep 2021 |
CMC MIGRATEclosed cmc-migrate | 1 | 1 | — | Jan 2025 |
cnvrse | 1 | 1 | — | Feb 2026 |
CNZZ&51LA for WordPressclosed cnzz51la-for-wordpress | 1 | 1 | — | Jan 2025 |
Cobwebo URL Pluginclosed cobwebo-url | 1 | 1 | — | Mar 2025 |
Code Generateclosed code-generator | 1 | 1 | — | Oct 2024 |
Codescar Radio Widget1 unfixed codescar-radio-widget · 70+ installs | 1 | 1 | — | Apr 2025 |
codoc · 2K+ installs | 1 | 1 | — | Jul 2024 |
College publisher Importclosed college-publisher-import | 1 | — | — | May 2021 |