Log in Get started
Live vulnerability tracking

WordPress security
alerts that matter

Get notified the moment a vulnerability is found in WordPress core, your plugins, or your theme. Free newsletter + personalised alerts for your sites.

Double opt-in · GDPR compliant · Unsubscribe anytime

Security overview Last 7 days
801
Critical
3140
High
6701
Medium
0
Subscribers
12735 total vulnerabilities tracked

Everything you need to stay secure

One platform for all WordPress security intelligence.

🔍
Site Scanner

Scan any WordPress site to detect installed plugins, themes and core version — then instantly check for known vulnerabilities.

📬
Daily Newsletter

Receive a curated daily digest of new WordPress vulnerabilities. Critical issues get their own immediate alert.

🎯
Personalized Alerts

Monitor your specific sites. Get an email only when a vulnerability affects plugins or themes you actually use.

🚫
Closed Plugin Tracker

Track plugins removed from the WordPress.org repository — often a sign of a serious security issue.

🔗
WP Plugin Integration

Install our free WordPress plugin on your site for automatic detection of all installed components — no manual URL entry.

🛡️
GDPR Compliant

Double opt-in, transparent data use, easy one-click unsubscribe. Your data stays in the EU. No tracking.

Latest vulnerabilities

Most recent WordPress security issues from all sources.

Scan your site →
—
PAYable IPG < 1.3.1 - Unauthenticated Order Payment Forgery via Unsigned Callback
UNKNOWN Plugin payable-payment-gateway-for-woocommerce CVE-2026-94361 Fixed in 1.3.1 Oct 31, 2026
—
Quick Event Manager 8.4.6 - 9.18 - Unauthenticated Private and Draft Content Disclosure via ICS Download
UNKNOWN Plugin quick-event-manager CVE-2026-82214 Fixed in 9.19 Oct 31, 2026
—
Mapster WP Maps < 2.0.6 - Unauthenticated Arbitrary Post Modification via save-mapmaker REST Route
UNKNOWN Plugin mapster-wp-maps CVE-2026-118638 Fixed in 2.0.6 Oct 31, 2026
—
All-in-One Video Gallery < 5.0.0 - Unauthenticated Private and Draft Video Disclosure
UNKNOWN Plugin all-in-one-video-gallery CVE-2026-118629 Fixed in 5.0.0 Oct 31, 2026
—
Bulk Media Register < 2.01 - Author+ Arbitrary File Move via Path Traversal
UNKNOWN Plugin bulk-media-register CVE-2026-118043 Fixed in 2.01 Oct 31, 2026
—
Security Optimizer < 1.6.9 - 2FA Bypass via Missing Rate Limiting
UNKNOWN Plugin security-optimizer CVE-2026-118185 Fixed in 1.6.9 Oct 31, 2026
—
Premium Packages < 7.2.2 - Unauthenticated Order Total Manipulation
UNKNOWN Plugin premium-packages CVE-2026-118184 Fixed in 7.2.2 Oct 31, 2026
—
BuddyForms 2.8.8 - 2.10.0 - Unauthenticated Guest Attachment Deletion
UNKNOWN Plugin buddyforms CVE-2026-118437 Fixed in 2.10.1 Oct 31, 2026
—
Firelight Lightbox < 2.3.24 - Contributor+ Stored XSS via Image 'src' Attribute
UNKNOWN Plugin firelight-lightbox CVE-2026-118438 Fixed in 2.3.24 Oct 31, 2026
—
Payment Forms for Paystack < 4.0.6 - Contributor+ Sensitive Information Disclosure via Settings Page
UNKNOWN Plugin payment-forms-for-paystack CVE-2026-110042 Fixed in 4.0.6 Oct 31, 2026

Recently removed from WordPress.org

These plugins were closed/removed from the repository.

🚫
gravity-forms-pdf-extended

Author Request

Detected: Oct 28, 2026

Ready to secure your WordPress sites?

Create a free account to monitor your sites and get personalized vulnerability alerts.

Create free account Try the scanner