Log in Get started
Live vulnerability tracking

WordPress security
alerts that matter

Get notified the moment a vulnerability is found in WordPress core, your plugins, or your theme. Free newsletter + personalised alerts for your sites.

Double opt-in · GDPR compliant · Unsubscribe anytime

Security overview Last 7 days
893
Critical
3386
High
7222
Medium
0
Subscribers
13678 total vulnerabilities tracked

Everything you need to stay secure

One platform for all WordPress security intelligence.

🔍
Site Scanner

Scan any WordPress site to detect installed plugins, themes and core version — then instantly check for known vulnerabilities.

📬
Daily Newsletter

Receive a curated daily digest of new WordPress vulnerabilities. Critical issues get their own immediate alert.

🎯
Personalized Alerts

Monitor your specific sites. Get an email only when a vulnerability affects plugins or themes you actually use.

🚫
Closed Plugin Tracker

Track plugins removed from the WordPress.org repository — often a sign of a serious security issue.

🔗
WP Plugin Integration

Install our free WordPress plugin on your site for automatic detection of all installed components — no manual URL entry.

🛡️
GDPR Compliant

Double opt-in, transparent data use, easy one-click unsubscribe. Your data stays in the EU. No tracking.

Latest vulnerabilities

Most recent WordPress security issues from all sources.

Scan your site →
—
Zion Builder <= 3.6.17 - Author+ Stored XSS via SVG Upload
UNKNOWN Plugin zion-builder CVE-2026-104676 Nov 10, 2026
—
All in One Visual Composer Addons <= 1.2 - Contributor+ LFI via vca_tabs_style Shortcode Attribute
UNKNOWN Plugin all-in-one-addons-for-wpbakery-page-builder-formerly-visual-composer CVE-2026-110516 Nov 10, 2026
—
BulletProof Security <= 7.2 - Unauthenticated Sensitive Data Disclosure via Security Log
UNKNOWN Plugin bulletproof-security CVE-2026-119273 Nov 10, 2026
—
CVE-2026-104676 — The Zion Builder WordPress plugin through 3.6.17 does not sanitize uploaded SVG files or validate t
UNKNOWN Plugin CVE-2026-104676 Nov 10, 2026
—
CVE-2026-110516 — The All in One Addons For WPBakery Page Builder (formerly Visual Composer) WordPress plugin through
UNKNOWN Plugin CVE-2026-110516 Nov 10, 2026
—
CVE-2026-119273 — The BulletProof Security WordPress plugin through 7.2 does not sufficiently protect its security log
UNKNOWN Plugin CVE-2026-119273 Nov 10, 2026
0.0
EUVD-2026-120811 (CVE-2026-104676) — The Zion Builder WordPress plugin through 3.6.17 does not sanitize uploaded SV…
UNKNOWN Plugin CVE-2026-104676 Nov 10, 2026
0.0
EUVD-2026-120812 (CVE-2026-110516) — The All in One Addons For WPBakery Page Builder (formerly Visual Composer) Wor…
UNKNOWN Plugin CVE-2026-110516 Nov 10, 2026
0.0
EUVD-2026-120813 (CVE-2026-119273) — The BulletProof Security WordPress plugin through 7.2 does not sufficiently pro…
UNKNOWN Plugin CVE-2026-119273 Nov 10, 2026
—
Anti-Spam, Spam FireWall by CleanTalk [cleantalk-spam-protect] < 6.91
UNKNOWN Plugin cleantalk-spam-protect CVE-2026-115673 Fixed in 6.91 Nov 6, 2026

Recently removed from WordPress.org

These plugins were closed/removed from the repository.

🚫
gravity-forms-pdf-extended

Author Request

Detected: Oct 28, 2026

Ready to secure your WordPress sites?

Create a free account to monitor your sites and get personalized vulnerability alerts.

Create free account Try the scanner