Log in Get started
Live vulnerability tracking

WordPress security
alerts that matter

Get notified the moment a vulnerability is found in WordPress core, your plugins, or your theme. Free newsletter + personalised alerts for your sites.

Double opt-in · GDPR compliant · Unsubscribe anytime

Security overview Last 7 days
820
Critical
3196
High
6817
Medium
0
Subscribers
12921 total vulnerabilities tracked

Everything you need to stay secure

One platform for all WordPress security intelligence.

🔍
Site Scanner

Scan any WordPress site to detect installed plugins, themes and core version — then instantly check for known vulnerabilities.

📬
Daily Newsletter

Receive a curated daily digest of new WordPress vulnerabilities. Critical issues get their own immediate alert.

🎯
Personalized Alerts

Monitor your specific sites. Get an email only when a vulnerability affects plugins or themes you actually use.

🚫
Closed Plugin Tracker

Track plugins removed from the WordPress.org repository — often a sign of a serious security issue.

🔗
WP Plugin Integration

Install our free WordPress plugin on your site for automatic detection of all installed components — no manual URL entry.

🛡️
GDPR Compliant

Double opt-in, transparent data use, easy one-click unsubscribe. Your data stays in the EU. No tracking.

Latest vulnerabilities

Most recent WordPress security issues from all sources.

Scan your site →
—
WATI Chat and Notification <= 1.1.8 - Unauthenticated Customer Order PII Disclosure via Leaked API Token
UNKNOWN Plugin wati-chat-and-notification CVE-2026-103379 Nov 3, 2026
—
weMail <= 2.1.6 - Editor+ Incorrect Authorization via User::can()
UNKNOWN Plugin wemail CVE-2026-104647 Nov 3, 2026
—
weMail <= 2.1.6 - Editor+ API Key Disclosure
UNKNOWN Plugin wemail CVE-2026-104648 Nov 3, 2026
—
DT Directory Lite Addon <= 1.1 - Unauthenticated Plugin Settings Update
UNKNOWN Plugin dt-directory-lite-addon CVE-2026-105993 Nov 3, 2026
—
DT LMS <= 1.2 - Unauthenticated Arbitrary Course Completion Revocation
UNKNOWN Plugin dt-lms CVE-2026-106004 Nov 3, 2026
—
Gallery for Social Photo <= 1.0.0.41 - Unauthenticated SSRF via next_url Parameter
UNKNOWN Plugin gallery-for-social-photo CVE-2026-105967 Nov 3, 2026
—
AZEXO Store Locator <= 1.4 - Subscriber+ Arbitrary Post Deletion via azt_delete_item
UNKNOWN Plugin azexo-store-locator CVE-2026-115205 Nov 3, 2026
—
CVE-2026-105993 — The DT Directory Lite Addon WordPress plugin through 1.1 does not perform nonce or capability checks
UNKNOWN Plugin CVE-2026-105993 Nov 3, 2026
—
CVE-2026-115205 — The AZEXO Store Locator WordPress plugin through 1.4 does not have a capability check or any authori
UNKNOWN Plugin CVE-2026-115205 Nov 3, 2026
—
CVE-2026-106004 — The DT LMS WordPress plugin through 1.2 does not perform capability or nonce checks on one of its A
UNKNOWN Plugin CVE-2026-106004 Nov 3, 2026

Recently removed from WordPress.org

These plugins were closed/removed from the repository.

🚫
gravity-forms-pdf-extended

Author Request

Detected: Oct 28, 2026

Ready to secure your WordPress sites?

Create a free account to monitor your sites and get personalized vulnerability alerts.

Create free account Try the scanner