Log in Get started
Live vulnerability tracking

WordPress security
alerts that matter

Get notified the moment a vulnerability is found in WordPress core, your plugins, or your theme. Free newsletter + personalised alerts for your sites.

Double opt-in · GDPR compliant · Unsubscribe anytime

Security overview Last 7 days
687
Critical
2620
High
5616
Medium
0
Subscribers
10809 total vulnerabilities tracked

Everything you need to stay secure

One platform for all WordPress security intelligence.

🔍
Site Scanner

Scan any WordPress site to detect installed plugins, themes and core version — then instantly check for known vulnerabilities.

📬
Daily Newsletter

Receive a curated daily digest of new WordPress vulnerabilities. Critical issues get their own immediate alert.

🎯
Personalized Alerts

Monitor your specific sites. Get an email only when a vulnerability affects plugins or themes you actually use.

🚫
Closed Plugin Tracker

Track plugins removed from the WordPress.org repository — often a sign of a serious security issue.

🔗
WP Plugin Integration

Install our free WordPress plugin on your site for automatic detection of all installed components — no manual URL entry.

🛡️
GDPR Compliant

Double opt-in, transparent data use, easy one-click unsubscribe. Your data stays in the EU. No tracking.

Latest vulnerabilities

Most recent WordPress security issues from all sources.

Scan your site →
—
Download Manager [download-manager] < 3.3.72
UNKNOWN Plugin download-manager CVE-2026-102401 Fixed in 3.3.72 Oct 9, 2026
—
Download Manager [download-manager] < 3.3.72
UNKNOWN Plugin download-manager CVE-2026-103964 Fixed in 3.3.72 Oct 9, 2026
—
Code Snippets [code-snippets] < 3.10.0
UNKNOWN Plugin code-snippets CVE-2026-106095 Fixed in 3.10.0 Oct 9, 2026
—
Code Snippets [code-snippets] < 3.10.0
UNKNOWN Plugin code-snippets CVE-2026-106097 Fixed in 3.10.0 Oct 9, 2026
—
BackWPup – WordPress Backup & Restore Plugin [backwpup] < 5.7.7
UNKNOWN Plugin backwpup CVE-2026-86828 Fixed in 5.7.7 Oct 8, 2026
—
BackWPup – WordPress Backup & Restore Plugin [backwpup] < 5.7.7
UNKNOWN Plugin backwpup CVE-2026-86826 Fixed in 5.7.7 Oct 8, 2026
—
BackWPup – WordPress Backup & Restore Plugin [backwpup] >= 3.3 - < 5.7.7
UNKNOWN Plugin backwpup CVE-2026-86827 Fixed in 5.7.7 Oct 8, 2026
2.2
Portfolio Filter Gallery 2.0.2 - 2.2.0 - Contributor+ Cross-User Video Thumbnail Deletion via pfg_delete_video_thumbnail
LOW Plugin portfolio-filter-gallery CVE-2026-105977 Fixed in 2.2.1 Oct 10, 2026
3.5
Rank Math SEO < 1.0.280 - Admin+ Stored XSS via Redirection Source URL
LOW Plugin rank-math-seo CVE-2026-104754 Fixed in 1.0.280 Oct 10, 2026
3.7
EUVD-2026-96208 (CVE-2026-104006) — The SpeedyCache – Cache, Optimization, Performance plugin for WordPress is vuln…
LOW Plugin CVE-2026-104006 Oct 10, 2026

Ready to secure your WordPress sites?

Create a free account to monitor your sites and get personalized vulnerability alerts.

Create free account Try the scanner