Log in Get started
Live vulnerability tracking

WordPress security
alerts that matter

Get notified the moment a vulnerability is found in WordPress core, your plugins, or your theme. Free newsletter + personalised alerts for your sites.

Double opt-in · GDPR compliant · Unsubscribe anytime

Security overview Last 7 days
767
Critical
2980
High
6269
Medium
0
Subscribers
11982 total vulnerabilities tracked

Everything you need to stay secure

One platform for all WordPress security intelligence.

🔍
Site Scanner

Scan any WordPress site to detect installed plugins, themes and core version — then instantly check for known vulnerabilities.

📬
Daily Newsletter

Receive a curated daily digest of new WordPress vulnerabilities. Critical issues get their own immediate alert.

🎯
Personalized Alerts

Monitor your specific sites. Get an email only when a vulnerability affects plugins or themes you actually use.

🚫
Closed Plugin Tracker

Track plugins removed from the WordPress.org repository — often a sign of a serious security issue.

🔗
WP Plugin Integration

Install our free WordPress plugin on your site for automatic detection of all installed components — no manual URL entry.

🛡️
GDPR Compliant

Double opt-in, transparent data use, easy one-click unsubscribe. Your data stays in the EU. No tracking.

Latest vulnerabilities

Most recent WordPress security issues from all sources.

Scan your site →
—
Elementor Website Builder – more than just a page builder [elementor] < 4.3.5
UNKNOWN Plugin elementor CVE-2026-81812 Fixed in 4.3.5 Oct 21, 2026
—
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 4.0.1
UNKNOWN Plugin profile-builder CVE-2026-111948 Fixed in 4.0.1 Oct 21, 2026
—
Download Manager [download-manager] < 3.3.71
UNKNOWN Plugin download-manager CVE-2026-86611 Fixed in 3.3.71 Oct 21, 2026
—
Elementor Website Builder – more than just a page builder [elementor] < 4.3.5
UNKNOWN Plugin elementor CVE-2026-81813 Fixed in 4.3.5 Oct 21, 2026
—
Redirection for Contact Form 7 [wpcf7-redirect] >= 2.2.7 - < 3.2.12
UNKNOWN Plugin wpcf7-redirect CVE-2026-111574 Fixed in 3.2.12 Oct 21, 2026
—
CVE-2026-111593 — Rejected reason: This CVE ID was reserved for a reported issue in the PDF Invoices & Packing Slips f
UNKNOWN Plugin CVE-2026-111593 Oct 16, 2026
2.7
MasterStudy LMS 3.7.13 - 3.7.54 - Instructor+ Arbitrary User Display Name Update via Student Enrollment
LOW Plugin masterstudy-lms-wordpress-plugin CVE-2026-88849 Fixed in 3.7.55 Oct 22, 2026
3.7
Infility Global < 2.16.25 - Unauthenticated Google Translate API Key Update
LOW Plugin infility-global CVE-2026-109931 Fixed in 2.16.25 Oct 22, 2026
2.7
MB Custom Post Types & Custom Taxonomies 2.4.0 - 2.12.2 - Contributor+ Post Type Definition and Non-Public Post Metadata Disclosure via Export
LOW Plugin mb-custom-post-types-custom-taxonomies CVE-2026-110011 Fixed in 2.12.3 Oct 22, 2026
2.7
EUVD-2026-108019 (CVE-2026-88849) — The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.55 does not v…
LOW Plugin CVE-2026-88849 Oct 22, 2026

Ready to secure your WordPress sites?

Create a free account to monitor your sites and get personalized vulnerability alerts.

Create free account Try the scanner