Log in Get started
Live vulnerability tracking

WordPress security
alerts that matter

Get notified the moment a vulnerability is found in WordPress core, your plugins, or your theme. Free newsletter + personalised alerts for your sites.

Double opt-in · GDPR compliant · Unsubscribe anytime

Security overview Last 7 days
772
Critical
3009
High
6303
Medium
0
Subscribers
12071 total vulnerabilities tracked

Everything you need to stay secure

One platform for all WordPress security intelligence.

🔍
Site Scanner

Scan any WordPress site to detect installed plugins, themes and core version — then instantly check for known vulnerabilities.

📬
Daily Newsletter

Receive a curated daily digest of new WordPress vulnerabilities. Critical issues get their own immediate alert.

🎯
Personalized Alerts

Monitor your specific sites. Get an email only when a vulnerability affects plugins or themes you actually use.

🚫
Closed Plugin Tracker

Track plugins removed from the WordPress.org repository — often a sign of a serious security issue.

🔗
WP Plugin Integration

Install our free WordPress plugin on your site for automatic detection of all installed components — no manual URL entry.

🛡️
GDPR Compliant

Double opt-in, transparent data use, easy one-click unsubscribe. Your data stays in the EU. No tracking.

Latest vulnerabilities

Most recent WordPress security issues from all sources.

Scan your site →
—
Otter Blocks < 3.2.8 - Unauthenticated Restricted Block Content Disclosure via REST API
UNKNOWN Plugin otter-blocks CVE-2026-109935 Fixed in 3.2.8 Oct 23, 2026
—
CVE-2026-109935 — The Otter Blocks WordPress plugin before 3.2.8 does not enforce its block visibility conditions whe
UNKNOWN Plugin CVE-2026-109935 Oct 23, 2026
0.0
EUVD-2026-108588 (CVE-2026-109935) — The Otter Blocks WordPress plugin before 3.2.8 does not enforce its block visi…
UNKNOWN Plugin CVE-2026-109935 Oct 23, 2026
—
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 4.0.1
UNKNOWN Plugin profile-builder CVE-2026-111948 Fixed in 4.0.1 Oct 21, 2026
—
Download Manager [download-manager] < 3.3.71
UNKNOWN Plugin download-manager CVE-2026-86611 Fixed in 3.3.71 Oct 21, 2026
—
Elementor Website Builder – more than just a page builder [elementor] < 4.3.5
UNKNOWN Plugin elementor CVE-2026-81813 Fixed in 4.3.5 Oct 21, 2026
—
Elementor Website Builder – more than just a page builder [elementor] < 4.3.5
UNKNOWN Plugin elementor CVE-2026-81812 Fixed in 4.3.5 Oct 21, 2026
—
Redirection for Contact Form 7 [wpcf7-redirect] >= 2.2.7 - < 3.2.12
UNKNOWN Plugin wpcf7-redirect CVE-2026-111574 Fixed in 3.2.12 Oct 21, 2026
3.1
LiteSpeed Cache < 7.9.2 - Subscriber+ Pinned Administrative Notice Dismissal
LOW Plugin litespeed-cache CVE-2026-113501 Fixed in 7.9.2 Oct 23, 2026
3.7
Popup Builder < 4.4.6 - Unauthenticated Popup Trashing via post_type Parameter
LOW Plugin popup-builder CVE-2026-112230 Fixed in 4.4.6 Oct 23, 2026

Ready to secure your WordPress sites?

Create a free account to monitor your sites and get personalized vulnerability alerts.

Create free account Try the scanner