Log in Get started
Live vulnerability tracking

WordPress security
alerts that matter

Get notified the moment a vulnerability is found in WordPress core, your plugins, or your theme. Free newsletter + personalised alerts for your sites.

Double opt-in · GDPR compliant · Unsubscribe anytime

Security overview Last 7 days
778
Critical
3026
High
6387
Medium
0
Subscribers
12217 total vulnerabilities tracked

Everything you need to stay secure

One platform for all WordPress security intelligence.

🔍
Site Scanner

Scan any WordPress site to detect installed plugins, themes and core version — then instantly check for known vulnerabilities.

📬
Daily Newsletter

Receive a curated daily digest of new WordPress vulnerabilities. Critical issues get their own immediate alert.

🎯
Personalized Alerts

Monitor your specific sites. Get an email only when a vulnerability affects plugins or themes you actually use.

🚫
Closed Plugin Tracker

Track plugins removed from the WordPress.org repository — often a sign of a serious security issue.

🔗
WP Plugin Integration

Install our free WordPress plugin on your site for automatic detection of all installed components — no manual URL entry.

🛡️
GDPR Compliant

Double opt-in, transparent data use, easy one-click unsubscribe. Your data stays in the EU. No tracking.

Latest vulnerabilities

Most recent WordPress security issues from all sources.

Scan your site →
—
Payment Integration Wompi <= 4.0.1 - Unauthenticated Payment Confirmation Forgery via IPN Callback
UNKNOWN Plugin payment-integration-wompi CVE-2026-103312 Oct 27, 2026
—
Payex Payment Gateway for WooCommerce <= 1.2.10 - Unauthenticated Payment Confirmation Forgery via Empty-Default Secret Key
UNKNOWN Plugin payex-payment-gateway-for-woocommerce CVE-2026-103332 Oct 27, 2026
0.0
EUVD-2026-110607 (CVE-2026-103332) — The Payex Payment Gateway for Woocommerce WordPress plugin through 1.2.10 does …
UNKNOWN Plugin CVE-2026-103332 Oct 27, 2026
0.0
EUVD-2026-110608 (CVE-2026-103312) — The Payment Integration Wompi WordPress plugin through 4.0.1 does not verify th…
UNKNOWN Plugin CVE-2026-103312 Oct 27, 2026
—
CVE-2026-103332 — The Payex Payment Gateway for Woocommerce WordPress plugin through 1.2.10 does not properly verify t
UNKNOWN Plugin CVE-2026-103332 Oct 27, 2026
—
CVE-2026-103312 — The Payment Integration Wompi WordPress plugin through 4.0.1 does not verify the authenticity of inc
UNKNOWN Plugin CVE-2026-103312 Oct 27, 2026
—
CVE-2026-103299 — The Payment Gateway WordPress plugin through 2.2.0 does not ensure a shared secret is configured be
UNKNOWN Plugin CVE-2026-103299 Oct 26, 2026
—
nexi Alpha Bank for WooCommerce <= 2.2.0 - Unauthenticated Payment Confirmation Forgery via Empty Shared Secret
UNKNOWN Plugin payment-gateway CVE-2026-103299 Oct 26, 2026
0.0
EUVD-2026-109622 (CVE-2026-103299) — The Payment Gateway WordPress plugin through 2.2.0 does not ensure a shared se…
UNKNOWN Plugin CVE-2026-103299 Oct 26, 2026
—
Qi Addons For Elementor [qi-addons-for-elementor] < 1.11.2
UNKNOWN Plugin qi-addons-for-elementor CVE-2026-115183 Fixed in 1.11.2 Oct 25, 2026

Ready to secure your WordPress sites?

Create a free account to monitor your sites and get personalized vulnerability alerts.

Create free account Try the scanner