WordPress plugin vulnerability directory
Check before you install: each plugin's past vulnerabilities, active exploitation and most critical records. Updated daily.
| Component | Records | No login | Exploit code | Latest |
|---|---|---|---|---|
Featured Image from URL (FIFU) featured-image-from-url · 60K+ installs | 12 | 4 | 1 | Oct 2026 |
Radio Player – Live Shoutcast, Icecast and Any Audio Stream Playerclosed radio-player | 11 | 8 | 1 | Jan 2026 |
Ajax Load More – Infinite Scroll, Load More, & Lazy Load ajax-load-more · 30K+ installs | 10 | 3 | 1 | Jul 2026 |
coming-soon · 600K+ installs | 10 | 5 | 1 | Jul 2026 |
WP ULike – Like Buttons, Voting & Engagement Analytics wp-ulike · 60K+ installs | 10 | 3 | 1 | Mar 2026 |
smart-slider-3 · 800K+ installs | 9 | — | 1 | Sep 2026 |
bulletproof-security · 20K+ installs | 7 | 2 | 1 | Jan 2026 |
photoblocks-grid-gallery · 3K+ installs | 7 | 1 | 1 | Sep 2026 |
NextScripts: Social Networks Auto-Poster social-networks-auto-poster-facebook-twitter-g · 20K+ installs | 7 | 4 | 1 | Mar 2026 |
Email Subscription Popup — Newsletter & GDPR Consent email-subscribe · 1K+ installs | 6 | 3 | 1 | Oct 2025 |
uncanny-learndash-toolkit · 20K+ installs | 6 | 3 | 1 | Sep 2025 |
Ultimate Gift Cards for WooCommerce woo-gift-cards-lite · 7K+ installs | 6 | 5 | 1 | Sep 2026 |
woocommerce-for-japan · 10K+ installs | 6 | 6 | 1 | Jun 2026 |
Accordion – Multiple Accordion or FAQs Builderclosed accordions-or-faqs | 5 | 1 | 1 | Jul 2024 |
autoptimize · 800K+ installs | 5 | 2 | 1 | Oct 2026 |
AI ChatBot with ChatGPT and Content Generator by AYS ays-chatgpt-assistant · 300+ installs | 5 | 5 | 1 | Mar 2026 |
EAN Barcode Generator for WooCommerce: UPC, ISBN & GTIN Inventory ean-for-woocommerce · 10K+ installs | 5 | — | 1 | May 2025 |
Flo Forms – Easy Drag & Drop Form Builderclosed flo-forms | 5 | 2 | 1 | Nov 2025 |
Frontend Post Submission Manager Lite – Guest Post and Frontend Submission Forms frontend-post-submission-manager-lite · 1K+ installs | 5 | 4 | 1 | Sep 2026 |
iwp-client · 200K+ installs | 5 | 2 | 1 | Sep 2026 |
Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation optinmonster · 1M+ installs | 5 | 4 | 1 | May 2024 |
payment-forms-for-paystack · 2K+ installs | 5 | — | 1 | Aug 2026 |
Radius Blocks – WordPress Gutenberg Blocksclosed radius-blocks | 5 | 1 | 1 | Dec 2025 |
Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated slim-seo · 70K+ installs | 5 | — | 1 | Sep 2026 |
Custom Field For WP Job Manager custom-field-for-wp-job-manager · 800+ installs | 4 | 2 | 1 | Mar 2025 |
simple-share-buttons-adder · 40K+ installs | 4 | 2 | 1 | Feb 2024 |
URL Shortify – Simple and Easy URL Shortener url-shortify · 10K+ installs | 4 | 2 | 1 | Aug 2026 |
WP 404 Auto Redirect to Similar Post wp-404-auto-redirect-to-similar-post · 30K+ installs | 4 | 2 | 1 | Feb 2026 |
LiquidPoll – Polls, Surveys, NPS and Feedback Reviewsclosed wp-poll | 4 | 2 | 1 | Dec 2024 |
Bread & Butter – Identify Website Visitors, Score Leads & Gate Content bread-butter · 70+ installs | 3 | 1 | 1 | Apr 2026 |
Forget About Shortcode Buttons forget-about-shortcode-buttons · 20K+ installs | 3 | 2 | 1 | Jun 2026 |
GigPressclosed gigpress | 3 | — | 1 | Aug 2019 |
Instantio — Side Cart & One-Page Checkout for WooCommerce instantio · 700+ installs | 3 | 2 | 1 | Apr 2026 |
Login Page Styler – Custom WordPress Login Page Customizer & Security login-page-styler · 2K+ installs | 3 | — | 1 | Jan 2025 |
Web Accessibility (formally known as Ally) – WCAG Scanning, Guided Fixes, Usability Widget pojo-accessibility · 500K+ installs | 3 | 2 | 1 | Mar 2026 |
reepay-checkout-gateway · 1K+ installs | 3 | — | 1 | Jun 2026 |
siteguard · 500K+ installs | 3 | 3 | 1 | Aug 2026 |
WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons social-icons-widget-by-wpzoom · 90K+ installs | 3 | 1 | 1 | Oct 2026 |
subscribe-to-comments · 10K+ installs | 3 | 1 | 1 | Aug 2026 |
swift-performance-lite · 6K+ installs | 3 | 2 | 1 | Jan 2025 |
Time Clock – A WordPress Employee & Volunteer Time Clock Plugin time-clock · 500+ installs | 3 | 1 | 1 | Oct 2025 |
uix-shortcodes · 300+ installs | 3 | 2 | 1 | Apr 2025 |
User Language Switchclosed user-language-switch | 3 | 1 | 1 | Feb 2026 |
WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Appsclosed wordpress-mobile-pack | 3 | 2 | 1 | Jul 2023 |
WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses wp-courses · 500+ installs | 3 | — | 1 | Aug 2026 |
WP Like Buttonclosed wp-like-button | 3 | 2 | 1 | Dec 2024 |
wp-lister-for-amazon · 800+ installs | 3 | 2 | 1 | Jul 2024 |
WordPress Survey & Poll – Quiz, Survey and Poll Plugin for WordPressclosed wp-survey-and-poll | 3 | — | 1 | Jan 2025 |
Custom Product Tabs for WooCommerce yikes-inc-easy-custom-woocommerce-product-tabs · 80K+ installs | 3 | 1 | 1 | Jan 2025 |
Zip Attachmentsclosed zip-attachments | 3 | 3 | 1 | Oct 2025 |
AB Google Map Travel (AB-MAP)1 unfixed ab-google-map-travel · 60+ installs | 2 | 1 | 1 | Mar 2025 |
AdPushclosed adsense-plugin | 2 | 2 | 1 | Jul 2024 |
aeropage-sync-for-airtable · 40+ installs | 2 | — | 1 | Apr 2025 |
Alex Reservations – Restaurant Reservations, Tables & White-Label Booking System alex-reservations · 200+ installs | 2 | — | 1 | Nov 2025 |
Ultimate Before After Image Slider & Gallery – BEAF beaf-before-and-after-gallery · 30K+ installs | 2 | 1 | 1 | May 2025 |
Beautiful Cookie Consent Banner beautiful-and-responsive-cookie-consent · 40K+ installs | 2 | 2 | 1 | Jul 2025 |
BJ Lazy Loadclosed bj-lazy-load | 2 | 1 | 1 | May 2026 |
Blue Wrench Video Widgetclosed blue-wrench-videos-widget | 2 | 1 | 1 | Jan 2025 |
Bot for Telegram on WooCommerce bot-for-telegram-on-woocommerce · 300+ installs | 2 | — | 1 | May 2025 |
Bulgarisation for WooCommerceclosed bulgarisation-for-woocommerce | 2 | 2 | 1 | Mar 2024 |
bws-smtp · 1K+ installs | 2 | 1 | 1 | Mar 2025 |
catch-themes-demo-import · 5K+ installs | 2 | — | 1 | Jul 2026 |
Popup for CF7 with Sweet Alertclosed cf7-sweet-alert-popup | 2 | 2 | 1 | Jul 2026 |
CommentLuvclosed commentluv | 2 | 1 | 1 | Dec 2023 |
Essential Grid Portfolio – Photo Galleryclosed essential-grid | 2 | 1 | 1 | Jun 2024 |
External Loginclosed external-login | 2 | 1 | 1 | Oct 2025 |
gpx-viewer · 900+ installs | 2 | — | 1 | Mar 2025 |
h5pxapikatchu · 500+ installs | 2 | 2 | 1 | Nov 2025 |
Htaccess by BestWebSoft – WordPress Website Access Control Plugin htaccess · 300+ installs | 2 | 2 | 1 | Feb 2020 |
Custom Block Builder – Lazy Blocks lazy-blocks · 20K+ installs | 2 | — | 1 | Feb 2026 |
Minterpressclosed minterpress | 2 | — | 1 | Jan 2025 |
Order Attachments for WooCommerceclosed order-attachments-for-woocommerce | 2 | 1 | 1 | Feb 2025 |
Planyo online reservation system1 unfixed planyo-online-reservation-system · 400+ installs | 2 | 1 | 1 | Jul 2026 |
Rating by BestWebSoft1 unfixed rating-bws · 300+ installs | 2 | 1 | 1 | Apr 2025 |
ReFlex Gallery » WordPress Photo Gallery reflex-gallery · 100+ installs | 2 | 1 | 1 | Aug 2019 |
seo-local-rank · 400+ installs | 2 | 2 | 1 | Mar 2026 |
Simply Static – The Static Site Generator simply-static · 30K+ installs | 2 | 1 | 1 | Apr 2024 |
Starter Sites & Templates by Neve templates-patterns-collection · 100K+ installs | 2 | 2 | 1 | Feb 2024 |
tune-library · 10+ installs | 2 | 1 | 1 | Feb 2026 |
Termly – GDPR/CCPA Cookie Consent Banner uk-cookie-consent · 80K+ installs | 2 | 1 | 1 | Jun 2024 |
Popup – MailChimp, GetResponse and ActiveCampaign Intergrationsclosed ultimate-popup-creator | 2 | 2 | 1 | Jan 2025 |
user-photo · 3K+ installs | 2 | — | 1 | Jun 2022 |
wc-price-history · 5K+ installs | 2 | — | 1 | Jan 2025 |
WHIZZclosed whizz | 2 | 2 | 1 | Apr 2017 |
wp-jobs · 60+ installs | 2 | 1 | 1 | Sep 2017 |
Perfect Images: Regenerate Thumbnails, Image Sizes, WebP & AVIF wp-retina-2x · 60K+ installs | 2 | 2 | 1 | Dec 2023 |
Skitter Slideshowclosed wp-skitter-slideshow | 2 | 1 | 1 | Mar 2025 |
WP01 – Speed, Security, SEO consultantclosed wp01 | 2 | 1 | 1 | Mar 2025 |
wsecure · 200+ installs | 2 | — | 1 | Sep 2023 |
10Web AI Assistant – AI content writing assistantclosed ai-assistant-by-10web | 1 | — | 1 | Feb 2024 |
All Video Gallery Plugin for WordPressclosed all-video-gallery | 1 | — | 1 | Aug 2014 |
audioigniter · 10K+ installs | 1 | 1 | 1 | May 2026 |
backupbuddy | 1 | 1 | 1 | Mar 2023 |
better-search-replace · 1M+ installs | 1 | 1 | 1 | Feb 2024 |
BlueSnap Payment Gateway for WooCommerce bluesnap-payment-gateway-for-woocommerce · 90+ installs | 1 | 1 | 1 | Feb 2026 |
bwl-advanced-faq-manager | 1 | — | 1 | Apr 2024 |
codepress-admin-columns · 100K+ installs | 1 | — | 1 | Jun 2026 |
cp-reservation-calendar · 10+ installs | 1 | — | 1 | Sep 2015 |
Drag and Drop File Upload for Contact Form 7 drag-and-drop-file-upload-for-contact-form-7 · 90+ installs | 1 | 1 | 1 | Apr 2026 |
easy-timer · 1K+ installs | 1 | — | 1 | Sep 2025 |