Log in Get started
Live vulnerability tracking

WordPress security
alerts that matter

Get notified the moment a vulnerability is found in WordPress core, your plugins, or your theme. Free newsletter + personalised alerts for your sites.

Double opt-in · GDPR compliant · Unsubscribe anytime

Security overview Last 7 days
815
Critical
3176
High
6750
Medium
0
Subscribers
12863 total vulnerabilities tracked

Everything you need to stay secure

One platform for all WordPress security intelligence.

🔍
Site Scanner

Scan any WordPress site to detect installed plugins, themes and core version — then instantly check for known vulnerabilities.

📬
Daily Newsletter

Receive a curated daily digest of new WordPress vulnerabilities. Critical issues get their own immediate alert.

🎯
Personalized Alerts

Monitor your specific sites. Get an email only when a vulnerability affects plugins or themes you actually use.

🚫
Closed Plugin Tracker

Track plugins removed from the WordPress.org repository — often a sign of a serious security issue.

🔗
WP Plugin Integration

Install our free WordPress plugin on your site for automatic detection of all installed components — no manual URL entry.

🛡️
GDPR Compliant

Double opt-in, transparent data use, easy one-click unsubscribe. Your data stays in the EU. No tracking.

Latest vulnerabilities

Most recent WordPress security issues from all sources.

Scan your site →
—
MapPress Maps for WordPress < 2.97.15 - Unauthenticated Email Address Disclosure
UNKNOWN Plugin mappress CVE-2026-118168 Fixed in 2.97.15 Nov 1, 2026
—
Media Library Assistant < 3.44 - Contributor+ Stored XSS via mla_item_parameter Shortcode Attribute
UNKNOWN Plugin media-library-assistant CVE-2026-113482 Fixed in 3.44 Nov 1, 2026
—
Media Library Assistant < 3.44 - Subscriber+ Missing Authorization via mla-fill-compat-fields
UNKNOWN Plugin media-library-assistant CVE-2026-113481 Fixed in 3.44 Nov 1, 2026
—
Kali Forms < 2.4.30 - Subscriber+ Email Sending and Sender Spoofing
UNKNOWN Plugin kali-forms-contact-form-drag-and-drop-builder CVE-2026-107343 Fixed in 2.4.30 Nov 1, 2026
—
Kali Forms < 2.4.30 - Subscriber+ User Email Address Disclosure
UNKNOWN Plugin kali-forms-contact-form-drag-and-drop-builder CVE-2026-107342 Fixed in 2.4.30 Nov 1, 2026
0.0
EUVD-2026-114779 (CVE-2026-118168) — The MapPress WordPress plugin before 2.97.15 does not restrict which user's da…
UNKNOWN Plugin CVE-2026-118168 Nov 1, 2026
0.0
EUVD-2026-114776 (CVE-2026-107343) — The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2…
UNKNOWN Plugin CVE-2026-107343 Nov 1, 2026
0.0
EUVD-2026-114777 (CVE-2026-113481) — The Media Library Assistant WordPress plugin before 3.44 does not check that th…
UNKNOWN Plugin CVE-2026-113481 Nov 1, 2026
0.0
EUVD-2026-114778 (CVE-2026-113482) — The Media Library Assistant WordPress plugin before 3.44 does not escape one of…
UNKNOWN Plugin CVE-2026-113482 Nov 1, 2026
0.0
EUVD-2026-114775 (CVE-2026-107342) — The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2…
UNKNOWN Plugin CVE-2026-107342 Nov 1, 2026

Recently removed from WordPress.org

These plugins were closed/removed from the repository.

🚫
gravity-forms-pdf-extended

Author Request

Detected: Oct 28, 2026

Ready to secure your WordPress sites?

Create a free account to monitor your sites and get personalized vulnerability alerts.

Create free account Try the scanner