Log in Get started
Live vulnerability tracking

WordPress security
alerts that matter

Get notified the moment a vulnerability is found in WordPress core, your plugins, or your theme. Free newsletter + personalised alerts for your sites.

Double opt-in · GDPR compliant · Unsubscribe anytime

Security overview Last 7 days
762
Critical
2891
High
6002
Medium
0
Subscribers
11635 total vulnerabilities tracked

Everything you need to stay secure

One platform for all WordPress security intelligence.

🔍
Site Scanner

Scan any WordPress site to detect installed plugins, themes and core version — then instantly check for known vulnerabilities.

📬
Daily Newsletter

Receive a curated daily digest of new WordPress vulnerabilities. Critical issues get their own immediate alert.

🎯
Personalized Alerts

Monitor your specific sites. Get an email only when a vulnerability affects plugins or themes you actually use.

🚫
Closed Plugin Tracker

Track plugins removed from the WordPress.org repository — often a sign of a serious security issue.

🔗
WP Plugin Integration

Install our free WordPress plugin on your site for automatic detection of all installed components — no manual URL entry.

🛡️
GDPR Compliant

Double opt-in, transparent data use, easy one-click unsubscribe. Your data stays in the EU. No tracking.

Latest vulnerabilities

Most recent WordPress security issues from all sources.

Scan your site →
—
ThirstyAffiliates < 3.12.1 - Unauthenticated Non-Public Affiliate Link Destination Disclosure and Click Statistic Injection
UNKNOWN Plugin thirstyaffiliates CVE-2026-97314 Fixed in 3.12.1 Oct 17, 2026
—
Frontend Admin by DynamiApps <= 3.29.13 - Admin+ PHP Object Injection
UNKNOWN Plugin acf-frontend-admin-by-dynamiapps CVE-2026-81344 Oct 17, 2026
—
Frontend Admin by DynamiApps <= 3.29.13 - Unauthenticated ACF Options Page Field Update via Form Submission
UNKNOWN Plugin acf-frontend-admin-by-dynamiapps CVE-2026-81343 Oct 17, 2026
—
WP User Manager 2.9 - 2.9.19 - Unauthenticated Account Creation via Stripe Registration Payment Bypass
UNKNOWN Plugin wp-user-manager CVE-2026-110527 Fixed in 2.9.20 Oct 17, 2026
—
PeachPay 1.117.9 - 1.120.69 - Unauthenticated Order Key Disclosure via ConvesioPay BTCPay Status Check
UNKNOWN Plugin peachpay-payments-express-checkout-for-woocommerce-supports-stripe-paypal-square-authorize-net-nmi CVE-2026-103376 Fixed in 1.120.70 Oct 17, 2026
—
Ukr-To-Lat <= 1.3.5 - Contributor+ SQLi via Term Name
UNKNOWN Plugin ukr-to-lat CVE-2026-104122 Oct 17, 2026
—
Patreon WordPress < 1.10.0 - Open Redirect via 'state' Parameter
UNKNOWN Plugin patreon-wordpress CVE-2026-92432 Fixed in 1.10.0 Oct 17, 2026
—
WP Data Access < 5.5.88 - Subscriber+ SSRF
UNKNOWN Plugin wp-data-access CVE-2026-106470 Fixed in 5.5.88 Oct 17, 2026
—
Contact Form 7 Signature Addon <= 4.2.2 - Unauthenticated Arbitrary File Read via Path Traversal in Email Attachments
UNKNOWN Plugin contact-form-7-signature-addon CVE-2026-104246 Oct 17, 2026
—
BSK PDF Manager <= 3.8.1 - Contributor+ SQLi via tags_specific Shortcode Attribute
UNKNOWN Plugin bsk-pdf-manager CVE-2026-91074 Oct 17, 2026

Ready to secure your WordPress sites?

Create a free account to monitor your sites and get personalized vulnerability alerts.

Create free account Try the scanner