Log in Get started
Live vulnerability tracking

WordPress security
alerts that matter

Get notified the moment a vulnerability is found in WordPress core, your plugins, or your theme. Free newsletter + personalised alerts for your sites.

Double opt-in · GDPR compliant · Unsubscribe anytime

Security overview Last 7 days
775
Critical
3020
High
6346
Medium
0
Subscribers
12188 total vulnerabilities tracked

Everything you need to stay secure

One platform for all WordPress security intelligence.

🔍
Site Scanner

Scan any WordPress site to detect installed plugins, themes and core version — then instantly check for known vulnerabilities.

📬
Daily Newsletter

Receive a curated daily digest of new WordPress vulnerabilities. Critical issues get their own immediate alert.

🎯
Personalized Alerts

Monitor your specific sites. Get an email only when a vulnerability affects plugins or themes you actually use.

🚫
Closed Plugin Tracker

Track plugins removed from the WordPress.org repository — often a sign of a serious security issue.

🔗
WP Plugin Integration

Install our free WordPress plugin on your site for automatic detection of all installed components — no manual URL entry.

🛡️
GDPR Compliant

Double opt-in, transparent data use, easy one-click unsubscribe. Your data stays in the EU. No tracking.

Latest vulnerabilities

Most recent WordPress security issues from all sources.

Scan your site →
0.0
EUVD-2026-109618 (CVE-2026-103298) — The CCAvenue Payment Gateway for WooCommerce WordPress plugin through 3.1 does …
UNKNOWN Plugin CVE-2026-103298 Oct 26, 2026
0.0
EUVD-2026-109622 (CVE-2026-103299) — The Payment Gateway WordPress plugin through 2.2.0 does not ensure a shared se…
UNKNOWN Plugin CVE-2026-103299 Oct 26, 2026
0.0
EUVD-2026-109621 (CVE-2026-103319) — The OPay Payment Gateway for WooCommerce WordPress plugin through 2.5.5 does no…
UNKNOWN Plugin CVE-2026-103319 Oct 26, 2026
0.0
EUVD-2026-109619 (CVE-2026-103306) — The Online Payments with iK Pay Gateway WordPress plugin before 3.0.4 does not …
UNKNOWN Plugin CVE-2026-103306 Oct 26, 2026
0.0
EUVD-2026-109620 (CVE-2026-103381) — The Mintpay for WooCommerce WordPress plugin through 2.2.3 does not verify the …
UNKNOWN Plugin CVE-2026-103381 Oct 26, 2026
—
Duplicator 1.5.17 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via One-Click Upgrade
UNKNOWN Plugin duplicator CVE-2026-115251 Fixed in 5.0.0 Oct 25, 2026
—
Datawiza Proxy Auth Plugin 1.1.0 - Unauthenticated Privilege Escalation via X-User and Role Headers
UNKNOWN Plugin datawiza-proxy-auth-plugin CVE-2026-115214 Fixed in 1.1.1 Oct 25, 2026
—
WP VR 8.3.0 - 9.0.2 - Contributor+ Arbitrary Tour Update via IDOR
UNKNOWN Plugin wpvr CVE-2026-114742 Fixed in 9.0.3 Oct 25, 2026
—
WP VR 8.5.55 - 9.1.2 - Contributor+ Arbitrary Tour Creation and Publishing via Setup Wizard
UNKNOWN Plugin wpvr CVE-2026-114740 Fixed in 9.1.3 Oct 25, 2026
—
WP VR 9.0.0 - 9.0.2 - Contributor+ Arbitrary Tour Update and Disclosure via IDOR
UNKNOWN Plugin wpvr CVE-2026-114741 Fixed in 9.0.3 Oct 25, 2026

Ready to secure your WordPress sites?

Create a free account to monitor your sites and get personalized vulnerability alerts.

Create free account Try the scanner