Log in Get started
Live vulnerability tracking

WordPress security
alerts that matter

Get notified the moment a vulnerability is found in WordPress core, your plugins, or your theme. Free newsletter + personalised alerts for your sites.

Double opt-in · GDPR compliant · Unsubscribe anytime

Security overview Last 7 days
882
Critical
3354
High
7184
Medium
0
Subscribers
13603 total vulnerabilities tracked

Everything you need to stay secure

One platform for all WordPress security intelligence.

🔍
Site Scanner

Scan any WordPress site to detect installed plugins, themes and core version — then instantly check for known vulnerabilities.

📬
Daily Newsletter

Receive a curated daily digest of new WordPress vulnerabilities. Critical issues get their own immediate alert.

🎯
Personalized Alerts

Monitor your specific sites. Get an email only when a vulnerability affects plugins or themes you actually use.

🚫
Closed Plugin Tracker

Track plugins removed from the WordPress.org repository — often a sign of a serious security issue.

🔗
WP Plugin Integration

Install our free WordPress plugin on your site for automatic detection of all installed components — no manual URL entry.

🛡️
GDPR Compliant

Double opt-in, transparent data use, easy one-click unsubscribe. Your data stays in the EU. No tracking.

Latest vulnerabilities

Most recent WordPress security issues from all sources.

Scan your site →
—
CVE-2026-115212 — The mView 豆瓣电影 WordPress plugin through 1.0.3 does not validate the type, name, or source of
UNKNOWN Plugin CVE-2026-115212 Nov 9, 2026
—
CVE-2026-115204 — The AZEXO Store Locator WordPress plugin through 1.4 does not perform capability or nonce checks on
UNKNOWN Plugin CVE-2026-115204 Nov 9, 2026
—
WP Duplicate <= 1.1.11 - Unauthenticated Arbitrary File Upload via Authentication Bypass
UNKNOWN Plugin wp-duplicate CVE-2026-123751 Nov 9, 2026
—
Advanced Appointment Booking & Scheduling < 2.7 - Unauthenticated Arbitrary User Registration
UNKNOWN Plugin advanced-appointment-booking-scheduling CVE-2026-81422 Fixed in 2.7 Nov 9, 2026
—
WooCommerce Stripe Payment Gateway 10.9.0 - 11.0.1 - Customer Password Stored in Plaintext via Express Checkout
UNKNOWN Plugin woocommerce-stripe-payment-gateway CVE-2026-123145 Fixed in 11.1.0 Nov 9, 2026
—
GemBooking < 1.7.1 - Staff+ Arbitrary Post Deletion and Site Settings Update via REST Context Check Bypass
UNKNOWN Plugin gembooking CVE-2026-123131 Fixed in 1.7.1 Nov 9, 2026
—
Event Tickets Manager for WooCommerce 1.5.4 - 1.5.9 - Unauthenticated Site-wide Event Ticket Price Manipulation
UNKNOWN Plugin event-tickets-manager-for-woocommerce CVE-2026-123129 Fixed in 1.6.0 Nov 9, 2026
—
GemBooking < 1.7.1 - Unauthenticated Team Member Double-Booking via Cross-Object Race Condition
UNKNOWN Plugin gembooking CVE-2026-123128 Fixed in 1.7.1 Nov 9, 2026
—
Vigilant < 2.11.0 - 2FA Bypass via Third-Party Login Forms
UNKNOWN Plugin vigilant CVE-2026-123091 Fixed in 2.11.0 Nov 9, 2026
—
UniPAY Payment Gateway For WooCommerce < 2.4 - Unauthenticated Order Key and Customer PII Disclosure
UNKNOWN Plugin unipay-payment-gateway-for-woocommerce CVE-2026-123088 Fixed in 2.4 Nov 9, 2026

Recently removed from WordPress.org

These plugins were closed/removed from the repository.

🚫
gravity-forms-pdf-extended

Author Request

Detected: Oct 28, 2026

Ready to secure your WordPress sites?

Create a free account to monitor your sites and get personalized vulnerability alerts.

Create free account Try the scanner