WPDeveloper vulnerabilities

CVEs per yearBy the year they were published

1. 20235
2. 202428
3. 202512
4. 202616

Newest CVEs

• CVE-2022-51021

  NotificationX WordPress Plugin < 2.3.12 Unauthenticated SQL Injection via notification REST endpoint

  WPDeveloper · NotificationX

  High8.8
• CVE-2026-114120

  SchedulePress before 5.3.5 Missing Authorization via wpsp_el_editor_form AJAX Action

  WPDeveloper · SchedulePress

  Medium5.3
• CVE-2026-110898

  WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerability

  WPDeveloper · Essential Addons for Elementor

  Medium6.4
• CVE-2026-102394

  WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerability

  WPDeveloper · Essential Addons for Elementor

  Medium6.5
• CVE-2026-81777

  WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability

  WPDeveloper · Essential Addons for Elementor

  Medium5.3
• CVE-2026-66667

  WordPress Templately plugin <= 3.7.1 - Cross Site Scripting (XSS) vulnerability

  WPDeveloper · Templately

  High7.1
• CVE-2026-66645

  WordPress Table Of Contents Block plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

  WPDeveloper · Table Of Contents Block

  Medium6.5
• CVE-2026-61961

  WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerability

  WPDeveloper · EmbedPress

  High7.1
• CVE-2026-65562

  WordPress BetterDocs plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability

  WPDeveloper · BetterDocs

  Medium6.5
• CVE-2026-57364

  WordPress Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More plugin <= 2.2.0 - Other Vulnerability Type vulnerability

  WPDeveloper · Better Payment – Instant Payments, Donations, Fundraising with Subscriptions &amp; More

  Medium6.5