Log in Get started
Live vulnerability tracking

WordPress security
alerts that matter

Get notified the moment a vulnerability is found in WordPress core, your plugins, or your theme. Free newsletter + personalised alerts for your sites.

Double opt-in · GDPR compliant · Unsubscribe anytime

Security overview Last 7 days
785
Critical
3060
High
6552
Medium
0
Subscribers
12439 total vulnerabilities tracked

Everything you need to stay secure

One platform for all WordPress security intelligence.

🔍
Site Scanner

Scan any WordPress site to detect installed plugins, themes and core version — then instantly check for known vulnerabilities.

📬
Daily Newsletter

Receive a curated daily digest of new WordPress vulnerabilities. Critical issues get their own immediate alert.

🎯
Personalized Alerts

Monitor your specific sites. Get an email only when a vulnerability affects plugins or themes you actually use.

🚫
Closed Plugin Tracker

Track plugins removed from the WordPress.org repository — often a sign of a serious security issue.

🔗
WP Plugin Integration

Install our free WordPress plugin on your site for automatic detection of all installed components — no manual URL entry.

🛡️
GDPR Compliant

Double opt-in, transparent data use, easy one-click unsubscribe. Your data stays in the EU. No tracking.

Latest vulnerabilities

Most recent WordPress security issues from all sources.

Scan your site →
—
CVE-2026-103299 — The Payment Gateway WordPress plugin through 2.2.0 does not ensure a shared secret is configured be
UNKNOWN Plugin CVE-2026-103299 Oct 26, 2026
—
nexi Alpha Bank for WooCommerce <= 2.2.0 - Unauthenticated Payment Confirmation Forgery via Empty Shared Secret
UNKNOWN Plugin payment-gateway CVE-2026-103299 Oct 26, 2026
0.0
EUVD-2026-109622 (CVE-2026-103299) — The Payment Gateway WordPress plugin through 2.2.0 does not ensure a shared se…
UNKNOWN Plugin CVE-2026-103299 Oct 26, 2026
—
Qi Addons For Elementor [qi-addons-for-elementor] < 1.11.2
UNKNOWN Plugin qi-addons-for-elementor CVE-2026-115183 Fixed in 1.11.2 Oct 25, 2026
—
Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 5.0.0
UNKNOWN Plugin duplicator CVE-2026-115251 Fixed in 5.0.0 Oct 25, 2026
—
Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.8.7
UNKNOWN Plugin essential-addons-for-elementor-lite CVE-2026-110537 Fixed in 6.8.7 Oct 23, 2026
—
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 4.0.5
UNKNOWN Plugin profile-builder CVE-2026-111982 Fixed in 4.0.5 Oct 23, 2026
—
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 4.0.5
UNKNOWN Plugin profile-builder CVE-2026-111966 Fixed in 4.0.5 Oct 23, 2026
—
LiteSpeed Cache [litespeed-cache] < 7.9.2
UNKNOWN Plugin litespeed-cache CVE-2026-113501 Fixed in 7.9.2 Oct 23, 2026
—
LiteSpeed Cache [litespeed-cache] < 7.9.2
UNKNOWN Plugin litespeed-cache CVE-2026-113499 Fixed in 7.9.2 Oct 23, 2026

Recently removed from WordPress.org

These plugins were closed/removed from the repository.

🚫
gravity-forms-pdf-extended

Author Request

Detected: Oct 28, 2026

Ready to secure your WordPress sites?

Create a free account to monitor your sites and get personalized vulnerability alerts.

Create free account Try the scanner