Log in Get started
Live vulnerability tracking

WordPress security
alerts that matter

Get notified the moment a vulnerability is found in WordPress core, your plugins, or your theme. Free newsletter + personalised alerts for your sites.

Double opt-in · GDPR compliant · Unsubscribe anytime

Security overview Last 7 days
213
Critical
781
High
1483
Medium
0
Subscribers
2685 total vulnerabilities tracked

Everything you need to stay secure

One platform for all WordPress security intelligence.

🔍
Site Scanner

Scan any WordPress site to detect installed plugins, themes and core version — then instantly check for known vulnerabilities.

📬
Daily Newsletter

Receive a curated daily digest of new WordPress vulnerabilities. Critical issues get their own immediate alert.

🎯
Personalized Alerts

Monitor your specific sites. Get an email only when a vulnerability affects plugins or themes you actually use.

🚫
Closed Plugin Tracker

Track plugins removed from the WordPress.org repository — often a sign of a serious security issue.

🔗
WP Plugin Integration

Install our free WordPress plugin on your site for automatic detection of all installed components — no manual URL entry.

🛡️
GDPR Compliant

Double opt-in, transparent data use, easy one-click unsubscribe. Your data stays in the EU. No tracking.

Latest vulnerabilities

Most recent WordPress security issues from all sources.

Scan your site →
—
Webinfos <= 1.2 - Unauthenticated Arbitrary File Upload
UNKNOWN Plugin webinfos CVE-2026-12872 Aug 3, 2026
—
CVE-2026-12872 — The Webinfos WordPress plugin through 1.2 does not validate the type or name of uploaded files, nor
UNKNOWN Plugin CVE-2026-12872 Aug 3, 2026
—
Simple Restrict < 1.2.9 - Contributor+ Restricted Content Disclosure via REST API
UNKNOWN Plugin simple-restrict CVE-2026-15939 Fixed in 1.2.9 Aug 2, 2026
—
Pouco Import Users <= 1.0.0 - Unauthenticated Privilege Escalation
UNKNOWN Plugin pouco-import-users CVE-2026-16256 Aug 2, 2026
—
Clever Mega Menu for Visual Composer <= 1.0.1 - Subscriber+ Menu Item Meta Update via save_clever_menu_item
UNKNOWN Plugin clever-mega-menu-for-visual-composer CVE-2026-11872 Aug 2, 2026
—
Meta Box < 5.13.1 - Contributor+ Arbitrary Attachment Deletion via IDOR
UNKNOWN Plugin meta-box CVE-2026-15248 Fixed in 5.13.1 Aug 2, 2026
—
FluentBoards < 1.95.3 - Subscriber+ Cross-Board Task Disclosure via IDOR
UNKNOWN Plugin fluentboards CVE-2026-14938 Fixed in 1.95.3 Aug 2, 2026
—
CVE-2026-16256 — The POUCO Import Users WordPress plugin through 1.0.0 does not perform any capability or nonce check
UNKNOWN Plugin CVE-2026-16256 Aug 2, 2026
—
CVE-2026-15939 — The Simple Restrict WordPress plugin before 1.2.9 does not enforce its content-restriction permissio
UNKNOWN Plugin CVE-2026-15939 Aug 2, 2026
—
CVE-2026-15248 — The Meta Box WordPress plugin before 5.13.1 does not verify that a user is authorized to delete the
UNKNOWN Plugin CVE-2026-15248 Aug 2, 2026

Recently removed from WordPress.org

These plugins were closed/removed from the repository.

🚫
deurklink-custom-components-wordpress-plugin
deurklink-custom-components-wordpress-plugin

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
deurklink-maatwerk-wordpress-plugin
deurklink-maatwerk-wordpress-plugin

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
business-reviews-bundle
business-reviews-bundle

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
wpae-acf-add-on
wpae-acf-add-on

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
woocommerce-xcore-plugin-1.12.4
woocommerce-xcore-plugin-1.12.4

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
woocommerce-profitmetrics
woocommerce-profitmetrics

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
woocommerce-moneybird
woocommerce-moneybird

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
woocommerce-moneybird-payment-settings-main
woocommerce-moneybird-payment-settings-main

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
woocommerce-advanced-bulk-edit
woocommerce-advanced-bulk-edit

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
woo-update-manager
woo-update-manager

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
WooCommerce UPC, EAN, and ISBN
woo-add-gtin

Plugin closed by WordPress.org

Detected: Aug 4, 2026

🚫
webstack-wordpress-plugin
webstack-wordpress-plugin

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
wc-postcode-checker
wc-postcode-checker

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
wc-dynamic-pricing-and-discounts
wc-dynamic-pricing-and-discounts

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
that-motorreizen-import
that-motorreizen-import

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
siteorigin-premium
siteorigin-premium

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
settings
settings

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
salient-widgets
salient-widgets

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
salient-shortcodes
salient-shortcodes

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
salient-social
salient-social

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
salient-home-slider
salient-home-slider

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
salient-nectar-slider
salient-nectar-slider

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
salient-demo-importer
salient-demo-importer

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
profitmetrics
profitmetrics

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
oxygen-gutenberg
oxygen-gutenberg

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
mijndomeinmailer
mijndomeinmailer

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
KP Fastest Tawk.to Chat
kp-fastest-tawk-to-chat

Plugin closed by WordPress.org

Detected: Aug 4, 2026

🚫
image-map-pro
image-map-pro

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
gravityformsquiz
gravityformsquiz

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
gravityformsadvancedpostcreation
gravityformsadvancedpostcreation

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
snapshot-backups
snapshot-backups

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
salient-portfolio
salient-portfolio

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
salient-core
salient-core

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
js_composer_salient
js_composer_salient

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
gravityformsuserregistration
gravityformsuserregistration

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
gravityformssurvey
gravityformssurvey

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
gravityformsmailchimp
gravityformsmailchimp

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
gravityformsactivecampaign
gravityformsactivecampaign

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
gravityforms-old
gravityforms-old

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
epub-embed
epub-embed

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
Easy Responsive Tabs
easy-responsive-tabs

Plugin closed by WordPress.org

Detected: Aug 4, 2026

🚫
CxWordpress
CxWordpress

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
acf-svg-icon-master
acf-svg-icon-master

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
ACF-Image-Select-master
ACF-Image-Select-master

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
wpconsent-premium
wpconsent-premium

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
wp-defender-old
wp-defender-old

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
WordPress MU Domain Mapping
wordpress-mu-domain-mapping

Plugin closed by WordPress.org

Detected: Aug 4, 2026

🚫
woocommerce-scanlaser
woocommerce-scanlaser

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
Widget Logic
widget-logic

Plugin closed by WordPress.org

Detected: Aug 4, 2026

🚫
wc-tree-table-rate-shipping
wc-tree-table-rate-shipping

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
sm_books.php
sm_books.php

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
RSS Post Importer
rss-post-importer

Plugin closed by WordPress.org

Detected: Aug 4, 2026

🚫
Recent Posts Widget Extended
recent-posts-widget-extended

Plugin closed by WordPress.org

Detected: Aug 4, 2026

🚫
wpai-woocommerce-add-on
wpai-woocommerce-add-on

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wpae-woocommerce-add-on
wpae-woocommerce-add-on

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wp-sync-db
wp-sync-db

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wp-sync-db-media-files
wp-sync-db-media-files

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
woocommerce-scheduler
woocommerce-scheduler

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
woocommerce-multistore
woocommerce-multistore

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
woocommerce-multisite-product-sync
woocommerce-multisite-product-sync

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
seedprod-coming-soon-pro-5
seedprod-coming-soon-pro-5

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
rtw-multishop-aug-2026
rtw-multishop-aug-2026

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
rtw-multishop
rtw-multishop

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
Rollback Auto Update
rollback-update-failure

Plugin closed by WordPress.org

Detected: Aug 3, 2026

🚫
Order Delivery Date for WP e-Commerce
order-delivery-date

Plugin closed by WordPress.org

Detected: Aug 3, 2026

🚫
multistore-discounts-old
multistore-discounts-old

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
multistore-discounts
multistore-discounts

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
elex-woocommerce-dynamic-pricing-and-discounts-premium
elex-woocommerce-dynamic-pricing-and-discounts-premium

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
addify-product-dynamic-pricing-and-discounts-web-pkg-1.3.0
addify-product-dynamic-pricing-and-discounts-web-pkg-1.3.0

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
SparkPost
sparkpost

Plugin closed by WordPress.org

Detected: Aug 3, 2026

🚫
Reuse Builder
reuse-builder

Plugin closed by WordPress.org

Detected: Aug 3, 2026

🚫
redq-reuse-form
redq-reuse-form

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
reactivepro
reactivepro

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
masterslider
masterslider

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
js_composer
js_composer

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
ithemes-security-pro
ithemes-security-pro

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
iframe popup
iframe-popup

Plugin closed by WordPress.org

Detected: Aug 3, 2026

🚫
image-map-pro-wordpress
image-map-pro-wordpress

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
hustle
hustle

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
hello.php
hello.php

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
gravityformsturnstile
gravityformsturnstile

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
grve-blade-vc-extension
grve-blade-vc-extension

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
gravityforms-multilingual
gravityforms-multilingual

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
gravityformsrecaptcha
gravityformsrecaptcha

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
gravity-forms-user-verification2
gravity-forms-user-verification2

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
gravityforms
gravityforms

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
gravity-forms-user-verification
gravity-forms-user-verification

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
filebird-pro
filebird-pro

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
envato-market
envato-market

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
Enable jQuery Migrate Helper
enable-jquery-migrate-helper

Plugin closed by WordPress.org

Detected: Aug 3, 2026

🚫
dynamic-content-for-elementor
dynamic-content-for-elementor

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
ct-ultimate-gdpr
ct-ultimate-gdpr

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
borlabs-cookie
borlabs-cookie

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
Better Delete Revision
better-delete-revision

Plugin closed by WordPress.org

Detected: Aug 3, 2026

🚫
auxin-pro-tools
auxin-pro-tools

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
advanced-custom-fields-pro
advanced-custom-fields-pro

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
acfml
acfml

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
acf-extended-pro
acf-extended-pro

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wpmudev-updates
wpmudev-updates

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wpml-import
wpml-import

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wpml-string-translation
wpml-string-translation

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wpml-all-import
wpml-all-import

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wpai-gravity-forms-import-addon
wpai-gravity-forms-import-addon

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wpai-acf-add-on
wpai-acf-add-on

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wp-smush-pro
wp-smush-pro

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wp-seo-multilingual
wp-seo-multilingual

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wp-rocket
wp-rocket

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wp-mail-smtp-pro
wp-mail-smtp-pro

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wp-job-manager-search-and-filtering
wp-job-manager-search-and-filtering

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wp-job-manager-applications
wp-job-manager-applications

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wp-alerts-scanner.php
wp-alerts-scanner.php

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wordpress-store-locator
wordpress-store-locator

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wp-hummingbird
wp-hummingbird

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
WP Defender
wp-defender

Plugin closed by WordPress.org

Detected: Aug 3, 2026

🚫
wp-all-import-pro
wp-all-import-pro

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wp-all-export-pro
wp-all-export-pro

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wordpress-seo-premium
wordpress-seo-premium

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
warpdrive
warpdrive

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
Widget Clone
widget-clone

Plugin closed by WordPress.org

Detected: Aug 3, 2026

🚫
ultimate-branding
ultimate-branding

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
tablepress-responsive-tables
tablepress-responsive-tables

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
revslider
revslider

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
Quick Page/Post Redirect Plugin
quick-pagepost-redirect-plugin

Plugin closed by WordPress.org

Detected: Aug 3, 2026

🚫
PB MailCrypt &#8211; AntiSpam Email Encryption
pb-mailcrypt-antispam-email-encryption

Plugin closed by WordPress.org

Detected: Aug 3, 2026

🚫
object-cache-pro
object-cache-pro

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
MetaSlider Schedule Slides
meta-slider-schedule-slides

Plugin closed by WordPress.org

Detected: Aug 3, 2026

🚫
search-filter-pro
search-filter-pro

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
search-filter-wpml
search-filter-wpml

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
relevanssi-premium
relevanssi-premium

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
rtw-wpml-ai-translation
rtw-wpml-ai-translation

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
yooessentials
yooessentials

Not found on WordPress.org

Detected: Jul 29, 2026

🚫
WPML Multilingual CMS
sitepress-multilingual-cms

Plugin closed by WordPress.org

Detected: Jul 29, 2026

🚫
Pixel Caffeine
pixel-caffeine

Plugin closed by WordPress.org

Detected: Jul 29, 2026

🚫
Advanced Ads – Ad Manager &amp; AdSense
advanced-ads

Plugin closed by WordPress.org

Detected: Jul 27, 2026

🚫
oxygen
oxygen

Not found on WordPress.org

Detected: Jul 24, 2026

Ready to secure your WordPress sites?

Create a free account to monitor your sites and get personalized vulnerability alerts.

Create free account Try the scanner