Log in Get started
Live vulnerability tracking

WordPress security
alerts that matter

Get notified the moment a vulnerability is found in WordPress core, your plugins, or your theme. Free newsletter + personalised alerts for your sites.

Double opt-in · GDPR compliant · Unsubscribe anytime

Security overview Last 7 days
312
Critical
1075
High
1941
Medium
0
Subscribers
3646 total vulnerabilities tracked

Everything you need to stay secure

One platform for all WordPress security intelligence.

🔍
Site Scanner

Scan any WordPress site to detect installed plugins, themes and core version — then instantly check for known vulnerabilities.

📬
Daily Newsletter

Receive a curated daily digest of new WordPress vulnerabilities. Critical issues get their own immediate alert.

🎯
Personalized Alerts

Monitor your specific sites. Get an email only when a vulnerability affects plugins or themes you actually use.

🚫
Closed Plugin Tracker

Track plugins removed from the WordPress.org repository — often a sign of a serious security issue.

🔗
WP Plugin Integration

Install our free WordPress plugin on your site for automatic detection of all installed components — no manual URL entry.

🛡️
GDPR Compliant

Double opt-in, transparent data use, easy one-click unsubscribe. Your data stays in the EU. No tracking.

Latest vulnerabilities

Most recent WordPress security issues from all sources.

Scan your site →
—
Masteriyo LMS < 2.3.3 - Instructor+ Stored XSS via Quiz Description
UNKNOWN Plugin masteriyo-lms CVE-2026-19712 Fixed in 2.3.3 Aug 16, 2026
—
Simple JWT Login < 3.6.8 - Unauthenticated Account Takeover via Missing Google id_token Audience Validation
UNKNOWN Plugin simple-jwt-login CVE-2026-19714 Fixed in 3.6.8 Aug 16, 2026
—
CatFolders Document Gallery < 2.0.7 - Unauthenticated Attachment Disclosure via REST API
UNKNOWN Plugin catfolders-document-gallery-pdf-library CVE-2026-19717 Fixed in 2.0.7 Aug 16, 2026
—
WPvivid Backup & Migration < 0.9.131 - Unauthenticated Path Traversal via send_to_site_connect
UNKNOWN Plugin wpvivid-backup-migration-staging CVE-2026-19725 Fixed in 0.9.131 Aug 16, 2026
—
Visualizer < 4.0.7 - Contributor+ Cross-User Chart Configuration Disclosure
UNKNOWN Plugin visualizer CVE-2026-19726 Fixed in 4.0.7 Aug 16, 2026
—
Extra Product Options Builder for WooCommerce < 1.2.176 - Unauthenticated Customer File Disclosure via getpublicfileupload
UNKNOWN Plugin extra-product-options-builder-for-woocommerce CVE-2026-19728 Fixed in 1.2.176 Aug 16, 2026
—
Premium Packages – Sell Digital Products Securely < 7.0.7 - Subscriber+ Arbitrary Amount Withdrawal Request
UNKNOWN Plugin premium-packages CVE-2026-19711 Fixed in 7.0.7 Aug 16, 2026
—
All-in-One WP Migration and Backup < 7.108 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via REST Import
UNKNOWN Plugin all-in-one-wp-migration-and-backup CVE-2026-17533 Fixed in 7.108 Aug 16, 2026
—
ECS < 4.3.10 - Contributor+ Arbitrary Post Meta Disclosure via Dynamic Repeater ACF Source
UNKNOWN Plugin ecs CVE-2026-19613 Fixed in 4.3.10 Aug 16, 2026
—
WP Directory Kit < 1.5.7 - Admin+ SQL Injection via section Parameter
UNKNOWN Plugin wp-directory-kit CVE-2026-18653 Fixed in 1.5.7 Aug 16, 2026

Recently removed from WordPress.org

These plugins were closed/removed from the repository.

🚫
klassiek-centraal-agenda
klassiek-centraal-agenda

Not found on WordPress.org

Detected: Aug 11, 2026

🚫
no-zoom
no-zoom

Not found on WordPress.org

Detected: Aug 8, 2026

🚫
ccwr-pricing-tables
ccwr-pricing-tables

Not found on WordPress.org

Detected: Aug 8, 2026

🚫
wp-alerts-scanner-1
wp-alerts-scanner-1

Not found on WordPress.org

Detected: Aug 8, 2026

🚫
Broken Link Checker
broken-link-checker

Plugin closed by WordPress.org

Detected: Aug 6, 2026

🚫
Laposta
laposta

Plugin closed by WordPress.org

Detected: Aug 5, 2026

🚫
jet-search
jet-search

Not found on WordPress.org

Detected: Aug 5, 2026

🚫
jet-smart-filters
jet-smart-filters

Not found on WordPress.org

Detected: Aug 5, 2026

🚫
jet-engine
jet-engine

Not found on WordPress.org

Detected: Aug 5, 2026

🚫
fusion-core
fusion-core

Not found on WordPress.org

Detected: Aug 5, 2026

🚫
fusion-white-label-branding
fusion-white-label-branding

Not found on WordPress.org

Detected: Aug 5, 2026

🚫
fusion-builder
fusion-builder

Not found on WordPress.org

Detected: Aug 5, 2026

🚫
seo-by-rank-math-pro
seo-by-rank-math-pro

Not found on WordPress.org

Detected: Aug 5, 2026

🚫
fibofilters-pro
fibofilters-pro

Not found on WordPress.org

Detected: Aug 5, 2026

🚫
ajax-search-for-woocommerce-premium
ajax-search-for-woocommerce-premium

Not found on WordPress.org

Detected: Aug 5, 2026

🚫
acd-bobo-jump
acd-bobo-jump

Not found on WordPress.org

Detected: Aug 5, 2026

🚫
acd-cursor
acd-cursor

Not found on WordPress.org

Detected: Aug 5, 2026

🚫
XXwoocommerce-global-addon-extender
XXwoocommerce-global-addon-extender

Not found on WordPress.org

Detected: Aug 5, 2026

🚫
wpe-secure-updater
wpe-secure-updater

Not found on WordPress.org

Detected: Aug 5, 2026

🚫
woocommerce-tm-extra-product-options
woocommerce-tm-extra-product-options

Not found on WordPress.org

Detected: Aug 5, 2026

🚫
woocommerce-product-addons
woocommerce-product-addons

Not found on WordPress.org

Detected: Aug 5, 2026

🚫
woo-discount-rules-pro
woo-discount-rules-pro

Not found on WordPress.org

Detected: Aug 5, 2026

🚫
deurklink-custom-components-wordpress-plugin
deurklink-custom-components-wordpress-plugin

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
deurklink-maatwerk-wordpress-plugin
deurklink-maatwerk-wordpress-plugin

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
business-reviews-bundle
business-reviews-bundle

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
wpae-acf-add-on
wpae-acf-add-on

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
woocommerce-xcore-plugin-1.12.4
woocommerce-xcore-plugin-1.12.4

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
woocommerce-profitmetrics
woocommerce-profitmetrics

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
woocommerce-moneybird
woocommerce-moneybird

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
woocommerce-moneybird-payment-settings-main
woocommerce-moneybird-payment-settings-main

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
woocommerce-advanced-bulk-edit
woocommerce-advanced-bulk-edit

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
woo-update-manager
woo-update-manager

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
WooCommerce UPC, EAN, and ISBN
woo-add-gtin

Plugin closed by WordPress.org

Detected: Aug 4, 2026

🚫
webstack-wordpress-plugin
webstack-wordpress-plugin

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
wc-postcode-checker
wc-postcode-checker

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
wc-dynamic-pricing-and-discounts
wc-dynamic-pricing-and-discounts

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
that-motorreizen-import
that-motorreizen-import

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
siteorigin-premium
siteorigin-premium

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
settings
settings

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
salient-widgets
salient-widgets

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
salient-shortcodes
salient-shortcodes

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
salient-social
salient-social

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
salient-home-slider
salient-home-slider

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
salient-nectar-slider
salient-nectar-slider

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
salient-demo-importer
salient-demo-importer

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
profitmetrics
profitmetrics

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
oxygen-gutenberg
oxygen-gutenberg

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
mijndomeinmailer
mijndomeinmailer

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
KP Fastest Tawk.to Chat
kp-fastest-tawk-to-chat

Plugin closed by WordPress.org

Detected: Aug 4, 2026

🚫
image-map-pro
image-map-pro

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
gravityformsquiz
gravityformsquiz

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
gravityformsadvancedpostcreation
gravityformsadvancedpostcreation

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
snapshot-backups
snapshot-backups

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
salient-portfolio
salient-portfolio

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
salient-core
salient-core

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
js_composer_salient
js_composer_salient

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
gravityformsuserregistration
gravityformsuserregistration

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
gravityformssurvey
gravityformssurvey

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
gravityformsmailchimp
gravityformsmailchimp

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
gravityformsactivecampaign
gravityformsactivecampaign

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
gravityforms-old
gravityforms-old

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
epub-embed
epub-embed

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
Easy Responsive Tabs
easy-responsive-tabs

Plugin closed by WordPress.org

Detected: Aug 4, 2026

🚫
CxWordpress
CxWordpress

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
acf-svg-icon-master
acf-svg-icon-master

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
ACF-Image-Select-master
ACF-Image-Select-master

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
wpconsent-premium
wpconsent-premium

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
wp-defender-old
wp-defender-old

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
WordPress MU Domain Mapping
wordpress-mu-domain-mapping

Plugin closed by WordPress.org

Detected: Aug 4, 2026

🚫
woocommerce-scanlaser
woocommerce-scanlaser

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
Widget Logic
widget-logic

Plugin closed by WordPress.org

Detected: Aug 4, 2026

🚫
wc-tree-table-rate-shipping
wc-tree-table-rate-shipping

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
sm_books.php
sm_books.php

Not found on WordPress.org

Detected: Aug 4, 2026

🚫
RSS Post Importer
rss-post-importer

Plugin closed by WordPress.org

Detected: Aug 4, 2026

🚫
Recent Posts Widget Extended
recent-posts-widget-extended

Plugin closed by WordPress.org

Detected: Aug 4, 2026

🚫
wpai-woocommerce-add-on
wpai-woocommerce-add-on

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wpae-woocommerce-add-on
wpae-woocommerce-add-on

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wp-sync-db
wp-sync-db

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wp-sync-db-media-files
wp-sync-db-media-files

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
woocommerce-scheduler
woocommerce-scheduler

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
woocommerce-multistore
woocommerce-multistore

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
woocommerce-multisite-product-sync
woocommerce-multisite-product-sync

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
seedprod-coming-soon-pro-5
seedprod-coming-soon-pro-5

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
rtw-multishop-aug-2026
rtw-multishop-aug-2026

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
rtw-multishop
rtw-multishop

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
Rollback Auto Update
rollback-update-failure

Plugin closed by WordPress.org

Detected: Aug 3, 2026

🚫
Order Delivery Date for WP e-Commerce
order-delivery-date

Plugin closed by WordPress.org

Detected: Aug 3, 2026

🚫
multistore-discounts-old
multistore-discounts-old

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
multistore-discounts
multistore-discounts

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
elex-woocommerce-dynamic-pricing-and-discounts-premium
elex-woocommerce-dynamic-pricing-and-discounts-premium

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
addify-product-dynamic-pricing-and-discounts-web-pkg-1.3.0
addify-product-dynamic-pricing-and-discounts-web-pkg-1.3.0

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
SparkPost
sparkpost

Plugin closed by WordPress.org

Detected: Aug 3, 2026

🚫
Reuse Builder
reuse-builder

Plugin closed by WordPress.org

Detected: Aug 3, 2026

🚫
redq-reuse-form
redq-reuse-form

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
reactivepro
reactivepro

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
masterslider
masterslider

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
js_composer
js_composer

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
ithemes-security-pro
ithemes-security-pro

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
iframe popup
iframe-popup

Plugin closed by WordPress.org

Detected: Aug 3, 2026

🚫
image-map-pro-wordpress
image-map-pro-wordpress

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
hustle
hustle

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
hello.php
hello.php

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
gravityformsturnstile
gravityformsturnstile

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
grve-blade-vc-extension
grve-blade-vc-extension

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
gravityforms-multilingual
gravityforms-multilingual

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
gravityformsrecaptcha
gravityformsrecaptcha

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
gravity-forms-user-verification2
gravity-forms-user-verification2

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
gravityforms
gravityforms

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
gravity-forms-user-verification
gravity-forms-user-verification

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
filebird-pro
filebird-pro

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
envato-market
envato-market

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
Enable jQuery Migrate Helper
enable-jquery-migrate-helper

Plugin closed by WordPress.org

Detected: Aug 3, 2026

🚫
dynamic-content-for-elementor
dynamic-content-for-elementor

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
ct-ultimate-gdpr
ct-ultimate-gdpr

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
borlabs-cookie
borlabs-cookie

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
Better Delete Revision
better-delete-revision

Plugin closed by WordPress.org

Detected: Aug 3, 2026

🚫
auxin-pro-tools
auxin-pro-tools

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
advanced-custom-fields-pro
advanced-custom-fields-pro

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
acfml
acfml

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
acf-extended-pro
acf-extended-pro

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wpmudev-updates
wpmudev-updates

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wpml-import
wpml-import

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wpml-string-translation
wpml-string-translation

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wpml-all-import
wpml-all-import

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wpai-gravity-forms-import-addon
wpai-gravity-forms-import-addon

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wpai-acf-add-on
wpai-acf-add-on

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wp-smush-pro
wp-smush-pro

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wp-seo-multilingual
wp-seo-multilingual

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wp-rocket
wp-rocket

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wp-mail-smtp-pro
wp-mail-smtp-pro

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wp-job-manager-search-and-filtering
wp-job-manager-search-and-filtering

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wp-job-manager-applications
wp-job-manager-applications

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wp-alerts-scanner.php
wp-alerts-scanner.php

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wordpress-store-locator
wordpress-store-locator

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wp-hummingbird
wp-hummingbird

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
WP Defender
wp-defender

Plugin closed by WordPress.org

Detected: Aug 3, 2026

🚫
wp-all-import-pro
wp-all-import-pro

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wp-all-export-pro
wp-all-export-pro

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
wordpress-seo-premium
wordpress-seo-premium

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
warpdrive
warpdrive

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
Widget Clone
widget-clone

Plugin closed by WordPress.org

Detected: Aug 3, 2026

🚫
ultimate-branding
ultimate-branding

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
tablepress-responsive-tables
tablepress-responsive-tables

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
revslider
revslider

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
Quick Page/Post Redirect Plugin
quick-pagepost-redirect-plugin

Plugin closed by WordPress.org

Detected: Aug 3, 2026

🚫
PB MailCrypt &#8211; AntiSpam Email Encryption
pb-mailcrypt-antispam-email-encryption

Plugin closed by WordPress.org

Detected: Aug 3, 2026

🚫
object-cache-pro
object-cache-pro

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
MetaSlider Schedule Slides
meta-slider-schedule-slides

Plugin closed by WordPress.org

Detected: Aug 3, 2026

🚫
search-filter-pro
search-filter-pro

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
search-filter-wpml
search-filter-wpml

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
relevanssi-premium
relevanssi-premium

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
rtw-wpml-ai-translation
rtw-wpml-ai-translation

Not found on WordPress.org

Detected: Aug 3, 2026

🚫
yooessentials
yooessentials

Not found on WordPress.org

Detected: Jul 29, 2026

🚫
WPML Multilingual CMS
sitepress-multilingual-cms

Plugin closed by WordPress.org

Detected: Jul 29, 2026

🚫
Pixel Caffeine
pixel-caffeine

Plugin closed by WordPress.org

Detected: Jul 29, 2026

🚫
Advanced Ads – Ad Manager &amp; AdSense
advanced-ads

Plugin closed by WordPress.org

Detected: Jul 27, 2026

🚫
oxygen
oxygen

Not found on WordPress.org

Detected: Jul 24, 2026

Ready to secure your WordPress sites?

Create a free account to monitor your sites and get personalized vulnerability alerts.

Create free account Try the scanner