Log in Get started
Live vulnerability tracking

WordPress security
alerts that matter

Get notified the moment a vulnerability is found in WordPress core, your plugins, or your theme. Free newsletter + personalised alerts for your sites.

Double opt-in · GDPR compliant · Unsubscribe anytime

Security overview Last 7 days
893
Critical
3391
High
7233
Medium
0
Subscribers
13837 total vulnerabilities tracked

Everything you need to stay secure

One platform for all WordPress security intelligence.

🔍
Site Scanner

Scan any WordPress site to detect installed plugins, themes and core version — then instantly check for known vulnerabilities.

📬
Daily Newsletter

Receive a curated daily digest of new WordPress vulnerabilities. Critical issues get their own immediate alert.

🎯
Personalized Alerts

Monitor your specific sites. Get an email only when a vulnerability affects plugins or themes you actually use.

🚫
Closed Plugin Tracker

Track plugins removed from the WordPress.org repository — often a sign of a serious security issue.

🔗
WP Plugin Integration

Install our free WordPress plugin on your site for automatic detection of all installed components — no manual URL entry.

🛡️
GDPR Compliant

Double opt-in, transparent data use, easy one-click unsubscribe. Your data stays in the EU. No tracking.

Latest vulnerabilities

Most recent WordPress security issues from all sources.

Scan your site →
—
YITH WooCommerce Gift Cards <= 4.39.0 - Unauthenticated Gift Card Balance Inflation via Discounted Purchase
UNKNOWN Plugin yith-woocommerce-gift-cards CVE-2026-88813 Nov 11, 2026
—
Security For WooCommerce <= 1.0.16 - Unauthenticated wp-config Keys and Salts Reset and Denial of Service
UNKNOWN Plugin security-for-woocommerce CVE-2026-123702 Nov 11, 2026
—
Security For WooCommerce <= 1.0.16 - Unauthenticated Plugin Settings Reset
UNKNOWN Plugin security-for-woocommerce CVE-2026-123701 Nov 11, 2026
—
Security For WooCommerce <= 1.0.16 - Unauthenticated Arbitrary User Logout via usfw_user_force_logout
UNKNOWN Plugin security-for-woocommerce CVE-2026-123703 Nov 11, 2026
—
Security For WooCommerce <= 1.0.16 - Unauthenticated Administrator Email Address Disclosure
UNKNOWN Plugin security-for-woocommerce CVE-2026-123704 Nov 11, 2026
—
Security For WooCommerce <= 1.0.16 - Unauthenticated Server Configuration Information Disclosure
UNKNOWN Plugin security-for-woocommerce CVE-2026-123705 Nov 11, 2026
—
Security For WooCommerce <= 1.0.16 - Unauthenticated Two-Factor Code and Secret Disclosure
UNKNOWN Plugin security-for-woocommerce CVE-2026-123697 Nov 11, 2026
—
Security For WooCommerce <= 1.0.16 - Unauthenticated Two-Factor Authentication Reset
UNKNOWN Plugin security-for-woocommerce CVE-2026-123696 Nov 11, 2026
—
Security For WooCommerce <= 1.0.16 - Unauthenticated Privilege Escalation via REST API Options Update and User Token Disclosure
UNKNOWN Plugin security-for-woocommerce CVE-2026-123695 Nov 11, 2026
—
Security For WooCommerce <= 1.0.16 - Unauthenticated Plugin Settings Disclosure via REST API
UNKNOWN Plugin security-for-woocommerce CVE-2026-123698 Nov 11, 2026

Recently removed from WordPress.org

These plugins were closed/removed from the repository.

🚫
advanced-ads

Closed by WordPress.org

Detected: Nov 11, 2026

🚫
gravity-forms-pdf-extended

Author Request

Detected: Oct 28, 2026

Ready to secure your WordPress sites?

Create a free account to monitor your sites and get personalized vulnerability alerts.

Create free account Try the scanner