CVE-2026-84762WordPress WP EasyPay plugin <= 4.5.3 - Bypass Vulnerability vulnerability Exploitation status Not known exploited Fix Affected product W WP EasyPay Published 09/03/2026 Severity Medium CVE-2026-73345WordPress License Manager for WooCommerce plugin <= 3.0.18 - SQL Injection vulnerability Exploitation status Not known exploited Fix Affected product L License Manager for WooCommerce Published 08/18/2026 Severity High CVE-2026-66425WordPress Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin <= 1.9.0 - Broken Authentication vulnerability Exploitation status Not known exploited Fix Affected product G Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder Published 08/06/2026 Severity Medium CVE-2026-57808WordPress WP EasyPay plugin <= 4.5.0 - Arbitrary Content Deletion vulnerability Exploitation status Not known exploited Fix Affected product W WP EasyPay Published 07/23/2026 Severity Medium CVE-2026-61968WordPress myCred plugin <= 3.1.2 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product M myCred Published 07/13/2026 Severity Medium CVE-2026-61958WordPress License Manager for WooCommerce plugin <= 3.0.17 - Arbitrary Content Deletion vulnerability Exploitation status Not known exploited Fix Affected product L License Manager for WooCommerce Published 07/13/2026 Severity Medium CVE-2026-57810WordPress APIExperts Square for WooCommerce plugin <= 4.7.4 - SQL Injection vulnerability Exploitation status Not known exploited Fix Affected product A APIExperts Square for WooCommerce Published 07/13/2026 Severity High CVE-2026-54848WordPress APIExperts Square for WooCommerce plugin <= 4.7.3 - Sensitive Data Exposure vulnerability Exploitation status Not known exploited Fix Affected product A APIExperts Square for WooCommerce Published 06/25/2026 Severity High CVE-2026-56024WordPress WP EasyPay plugin <= 4.5.0 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product W WP EasyPay Published 06/18/2026 Severity Medium CVE-2026-45215WordPress WP EasyPay plugin <= 4.3.0 - Sensitive Data Exposure vulnerability Exploitation status Not known exploited Fix Affected product W WP EasyPay Published 05/12/2026 Severity Medium CVE-2026-45211WordPress APIExperts Square for WooCommerce plugin <= 4.7.1 - SQL Injection vulnerability Exploitation status Not known exploited Fix Affected product A APIExperts Square for WooCommerce Published 05/12/2026 Severity High CVE-2026-25390WordPress New User Approve plugin <= 3.2.3 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product N New User Approve Published 03/25/2026 Severity Medium CVE-2026-25001WordPress Post Snippets plugin <= 4.0.12 - Remote Code Execution (RCE) vulnerability Exploitation status Not known exploited Fix Affected product P Post Snippets Published 03/25/2026 Severity High CVE-2026-32587WordPress WP EasyPay plugin <= 4.2.11 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product W WP EasyPay Published 03/16/2026 Severity Medium CVE-2025-69063WordPress New User Approve plugin <= 3.2.0 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product N New User Approve Published 02/20/2026 Severity High CVE-2026-27440WordPress myCred plugin <= 2.9.7.6 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product M myCred Published 02/19/2026 Severity Medium CVE-2026-24951WordPress myCred plugin <= 2.9.7.3 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product M myCred Published 02/03/2026 Severity Medium CVE-2025-68881WordPress AppExperts plugin <= 1.4.5 - SQL Injection vulnerability Exploitation status Not known exploited Fix Affected product A AppExperts Published 01/22/2026 Severity High CVE-2025-63040WordPress Post Snippets plugin <= 4.0.11 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product P Post Snippets Published 12/31/2025 Severity Medium CVE-2025-68080WordPress User Avatar - Reloaded plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product U User Avatar - Reloaded Published 12/16/2025 Severity Medium CVE-2025-63030WordPress New User Approve plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product N New User Approve Published 12/09/2025 Severity High CVE-2025-67563WordPress Post SMTP plugin <= 3.6.1 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product P Post SMTP Published 12/09/2025 Severity Medium CVE-2025-67471WordPress Quick Contact Form plugin <= 8.2.5 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product Q Quick Contact Form Published 12/09/2025 Severity Medium CVE-2025-58595WordPress All In One Login plugin <= 2.0.8 - Bypass Vulnerability vulnerability Exploitation status Not known exploited Fix Affected product A All In One Login Published 11/06/2025 Severity Critical CVE-2025-53218WordPress AppExperts plugin <= 1.4.5 - Sensitive Data Exposure vulnerability Exploitation status Not known exploited Fix Affected product A AppExperts Published 10/22/2025 Severity Medium CVE-2025-58788WordPress License Manager for WooCommerce Plugin <= 3.0.12 - SQL Injection Vulnerability Exploitation status Not known exploited Fix Affected product L License Manager for WooCommerce Published 09/05/2025 Severity High CVE-2025-48142WordPress Bookify <= 1.0.9 - Privilege Escalation Vulnerability Exploitation status Not known exploited Fix Affected product B Bookify Published 08/20/2025 Severity High CVE-2025-54668WordPress myCred plugin <= 2.9.4.3 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product M myCred Published 08/14/2025 Severity Medium CVE-2025-54667WordPress myCred plugin <= 2.9.4.3 - Race Condition Vulnerability Exploitation status Not known exploited Fix Affected product M myCred Published 08/14/2025 Severity Medium CVE-2025-24000WordPress Post SMTP plugin <= 3.2.0 - Account Takeover Vulnerability Exploitation status Not known exploited Fix Affected product P Post SMTP Published 08/07/2025 Severity High CVE-2025-49857WordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product M myCred Published 06/17/2025 Severity Medium CVE-2025-49872WordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product M myCred Published 06/17/2025 Severity Medium CVE-2025-48245WordPress Quick Contact Form plugin <= 8.2.1 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product Q Quick Contact Form Published 05/23/2025 Severity High CVE-2025-47688WordPress Advanced File Manager plugin <= 5.3.1 - Broken Access Control to Notice Dismissal vulnerability Exploitation status Not known exploited Fix Affected product A Advanced File Manager Published 05/07/2025 Severity Medium CVE-2025-32522WordPress License Manager for WooCommerce plugin <= 3.0.9 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product L License Manager for WooCommerce Published 04/17/2025 Severity High CVE-2025-31805WordPress Gutena Kit plugin <= 2.0.7 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product G Gutena Kit – Gutenberg Blocks and Templates Published 04/01/2025 Severity Medium CVE-2025-30609WordPress AppExperts plugin <= 1.4.3 - Sensitive Data Exposure Vulnerability Exploitation status Not known exploited Fix Affected product A AppExperts Published 03/24/2025 Severity Medium CVE-2025-22736WordPress User Management plugin <= 1.2 - Privilege Escalation vulnerability Exploitation status Not known exploited Fix Affected product U User Management Published 01/15/2025 Severity High CVE-2025-22800WordPress Post SMTP plugin <= 2.9.11 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product P Post SMTP Published 01/13/2025 Severity Medium CVE-2024-54323WordPress New User Approve plugin <= 2.6.2 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product N New User Approve Published 12/13/2024 Severity Medium CVE-2022-47182WordPress APIExperts Square for WooCommerce plugin <= 4.4.1 - Broken Access Control Exploitation status Not known exploited Fix Affected product A APIExperts Square for WooCommerce Published 12/13/2024 Severity Medium CVE-2023-25035WordPress Quick Contact Form plugin <= 8.0.3.1 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product Q Quick Contact Form Published 12/09/2024 Severity Medium CVE-2024-52436WordPress Post SMTP plugin <= 2.9.9 - SQL Injection vulnerability Exploitation status Not known exploited Fix Affected product P Post SMTP Published 11/18/2024 Severity High CVE-2024-52403WordPress User Management plugin <= 1.1 - Arbitrary File Upload vulnerability Exploitation status Not known exploited Fix Affected product U User Management Published 11/16/2024 Severity Critical CVE-2024-49702WordPress myCred Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product M myCred Elementor Published 10/24/2024 Severity Medium CVE-2024-47338WordPress WPExperts Square For GiveWP plugin <= 1.3 - SQL Injection vulnerability Exploitation status Not known exploited Fix Affected product W WPExperts Square For GiveWP Published 10/06/2024 Severity High CVE-2024-43214WordPress myCred plugin <= 2.7.2 - Sensitive Data Exposure vulnerability Exploitation status Not known exploited Fix Affected product M myCred Published 08/26/2024 Severity Medium CVE-2024-43354WordPress myCred plugin <= 2.7.2 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix Affected product M myCred Published 08/19/2024 Severity Critical CVE-2024-43353WordPress myCred plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product M myCred Published 08/18/2024 Severity Medium CVE-2024-32711WordPress myCred plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product M myCred Published 04/24/2024 Severity Medium CVE-2022-47181WordPress Email Templates Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF) Exploitation status Not known exploited Fix Affected product E Email Templates Customizer and Designer for WordPress and WooCommerce Published 11/07/2023 Severity High 
