Log in Get started
Live vulnerability tracking

WordPress security
alerts that matter

Get notified the moment a vulnerability is found in WordPress core, your plugins, or your theme. Free newsletter + personalised alerts for your sites.

Double opt-in · GDPR compliant · Unsubscribe anytime

Security overview Last 7 days
762
Critical
2906
High
6069
Medium
0
Subscribers
11678 total vulnerabilities tracked

Everything you need to stay secure

One platform for all WordPress security intelligence.

🔍
Site Scanner

Scan any WordPress site to detect installed plugins, themes and core version — then instantly check for known vulnerabilities.

📬
Daily Newsletter

Receive a curated daily digest of new WordPress vulnerabilities. Critical issues get their own immediate alert.

🎯
Personalized Alerts

Monitor your specific sites. Get an email only when a vulnerability affects plugins or themes you actually use.

🚫
Closed Plugin Tracker

Track plugins removed from the WordPress.org repository — often a sign of a serious security issue.

🔗
WP Plugin Integration

Install our free WordPress plugin on your site for automatic detection of all installed components — no manual URL entry.

🛡️
GDPR Compliant

Double opt-in, transparent data use, easy one-click unsubscribe. Your data stays in the EU. No tracking.

Latest vulnerabilities

Most recent WordPress security issues from all sources.

Scan your site →
—
CVE-2026-111593 — Rejected reason: This CVE ID was reserved for a reported issue in the PDF Invoices & Packing Slips f
UNKNOWN Plugin CVE-2026-111593 Oct 16, 2026
—
Smush – Image Optimization, Compression, Lazy Load, WebP & CDN [wp-smushit] < 4.3.4
UNKNOWN Plugin wp-smushit CVE-2026-110039 Fixed in 4.3.4 Oct 16, 2026
—
CVE-2026-107913 — Rejected reason: This CVE ID is a duplicate of CVE-2026-39749 and was never published. Both IDs were
UNKNOWN Plugin CVE-2026-107913 Oct 14, 2026
—
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.280
UNKNOWN Plugin seo-by-rank-math CVE-2026-104751 Fixed in 1.0.280 Oct 14, 2026
3.7
Patreon WordPress < 1.10.0 - Unauthenticated Taxonomy and Term Enumeration
LOW Plugin patreon-wordpress CVE-2026-92431 Fixed in 1.10.0 Oct 17, 2026
3.7
CVE-2026-92431 — The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its fu
LOW Plugin CVE-2026-92431 Oct 17, 2026
3.7
EUVD-2026-103252 (CVE-2026-92431) — The Patreon WordPress plugin before 1.10.0 does not perform an authorization ch…
LOW Plugin CVE-2026-92431 Oct 17, 2026
3.7
Appointment Booking Plugin <= 5.7.4 - Unauthenticated Sensitive Information Disclosure via ORM Operator Injection in 'customer[uuid]' Parameter
LOW Plugin appointment-booking-plugin-latepoint-calendar-scheduling-for-wordpress CVE-2026-111602 Oct 17, 2026
3.7
CVE-2026-111602 — The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPr
LOW Plugin CVE-2026-111602 Oct 17, 2026
3.7
EUVD-2026-103218 (CVE-2026-111602) — The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPres…
LOW Plugin CVE-2026-111602 Oct 17, 2026

Ready to secure your WordPress sites?

Create a free account to monitor your sites and get personalized vulnerability alerts.

Create free account Try the scanner