WPDeveloper
- Total products in the ecosystem
- 15
- Total vulnerabilities (90 days)
- 8
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, WPDeveloper recorded 8 security vulnerabilities in the last 90 days across 5 products, including 2 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Essential Addons for Elementor had the most security vulnerabilities in the WPDeveloper ecosystem, with 3 vulnerabilities—approximately 37.5% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-119507WordPress NotificationX plugin <= 3.3.6 - Content Injection vulnerabilityCVE-2022-51021NotificationX WordPress Plugin < 2.3.12 Unauthenticated SQL Injection via notification REST endpointCVE-2026-114120SchedulePress before 5.3.5 Missing Authorization via wpsp_el_editor_form AJAX ActionCVE-2026-110898WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerabilityCVE-2026-102394WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerability| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-119507WordPress NotificationX plugin <= 3.3.6 - Content Injection vulnerability | Exploitation statusNot confirmed | FixYes |
| Published11/07/2026 |
| SeverityMedium |
CVE-2022-51021NotificationX WordPress Plugin < 2.3.12 Unauthenticated SQL Injection via notification REST endpoint | Exploitation statusNot exploited | FixYes | Affected productNotificationX | Published10/22/2026 | SeverityHigh |
|---|
CVE-2026-114120SchedulePress before 5.3.5 Missing Authorization via wpsp_el_editor_form AJAX Action | Exploitation statusNot exploited | FixYes | Affected productSchedulePress | Published10/21/2026 | SeverityMedium |
|---|
CVE-2026-110898WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerability | Exploitation statusNot exploited | FixYes | Affected productEssential Addons for Elementor | Published10/19/2026 | SeverityMedium |
|---|
CVE-2026-102394WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productEssential Addons for Elementor | Published10/01/2026 | SeverityMedium |
|---|
CVE-2026-81777WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability | Exploitation statusNot exploited | FixYes | Affected productEssential Addons for Elementor | Published08/28/2026 | SeverityMedium |
|---|
CVE-2026-66667WordPress Templately plugin <= 3.7.1 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productTemplately | Published08/18/2026 | SeverityHigh |
|---|
CVE-2026-66645WordPress Table Of Contents Block plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productTable Of Contents Block | Published08/18/2026 | SeverityMedium |
|---|
CVE-2026-61961WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productEmbedPress | Published08/06/2026 | SeverityHigh |
|---|
CVE-2026-65562WordPress BetterDocs plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productBetterDocs | Published07/27/2026 | SeverityMedium |
|---|
CVE-2026-57364WordPress Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More plugin <= 2.2.0 - Other Vulnerability Type vulnerability | Exploitation statusNot exploited | FixYes | Affected productBetter Payment – Instant Payments, Donations, Fundraising with Subscriptions & More | Published07/13/2026 | SeverityMedium |
|---|
CVE-2026-48872WordPress EmbedPress plugin <= 4.5.2 - Sensitive Data Exposure vulnerability | Exploitation statusNot exploited | FixYes | Affected productEmbedPress | Published06/15/2026 | SeverityHigh |
|---|
CVE-2026-25440WordPress Essential Addons for Elementor plugin < 6.6.0 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productEssential Addons for Elementor | Published06/15/2026 | SeverityMedium |
|---|
CVE-2026-42644WordPress BetterDocs plugin <= 4.3.10 - Sensitive Data Exposure vulnerability | Exploitation statusNot exploited | FixYes | Affected productBetterDocs | Published04/29/2026 | SeverityMedium |
|---|
CVE-2026-42379WordPress Templately plugin <= 3.6.1 - Sensitive Data Exposure vulnerability | Exploitation statusNot exploited | FixYes | Affected productTemplately | Published04/27/2026 | SeverityHigh |
|---|
CVE-2026-27042WordPress NotificationX plugin <= 3.2.1 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productNotificationX | Published02/19/2026 | SeverityMedium |
|---|
CVE-2026-23543WordPress Essential Addons for Elementor plugin <= 6.5.5 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productEssential Addons for Elementor | Published02/19/2026 | SeverityMedium |
|---|
CVE-2025-69092WordPress Essential Addons for Elementor plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productEssential Addons for Elementor | Published12/30/2025 | SeverityMedium |
|---|
CVE-2025-64352WordPress Essential Addons for Elementor plugin <= 6.2.4 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productEssential Addons for Elementor | Published10/31/2025 | SeverityLow |
|---|
CVE-2025-49408WordPress Templately Plugin <= 3.2.7 - Sensitive Data Exposure Vulnerability | Exploitation statusNot exploited | FixYes | Affected productTemplately | Published08/20/2025 | SeverityCritical |
|---|
CVE-2025-24752WordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productEssential Addons for Elementor | Published04/17/2025 | SeverityHigh |
|---|
CVE-2025-39590WordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) Vulnerability | Exploitation statusNot exploited | FixYes | Affected productEssential Addons for Elementor | Published04/16/2025 | SeverityMedium |
|---|
CVE-2025-39589WordPress Essential Addons for Elementor plugin <= 6.1.9 - Sensitive Data Exposure Vulnerability | Exploitation statusNot exploited | FixYes | Affected productEssential Addons for Elementor | Published04/16/2025 | SeverityMedium |
|---|
CVE-2025-25086WordPress Secret Meta plugin <= 1.2.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productSecret Meta | Published03/27/2025 | SeverityHigh |
|---|
CVE-2025-26871WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productEssential Blocks for Gutenberg | Published02/25/2025 | SeverityMedium |
|---|
CVE-2025-22696WordPress Document Block – Upload & Embed Docs, PDF, PPT, XLS or Any Documents plugin <= 1.1.0 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productDocument Block – Upload & Embed Docs | Published02/04/2025 | SeverityMedium |
|---|
CVE-2025-22683WordPress NotificationX plugin <= 2.9.5 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productNotificationX | Published02/03/2025 | SeverityMedium |
|---|
CVE-2025-22315WordPress Typing Text plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productTyping Text | Published01/07/2025 | SeverityMedium |
|---|
CVE-2023-45104WordPress BetterLinks plugin <= 1.6.0 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productBetterLinks | Published01/02/2025 | SeverityHigh |
|---|
CVE-2024-56063WordPress Essential Addons for Elementor plugin <= 6.0.7 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productEssential Addons for Elementor | Published12/31/2024 | SeverityMedium |
|---|
CVE-2022-47594WordPress Essential Blocks for Gutenberg plugin <= 3.8.5 - Broken Access Control | Exploitation statusNot exploited | FixYes | Affected productEssential Blocks for Gutenberg | Published12/13/2024 | SeverityMedium |
|---|
CVE-2023-51360WordPress Essential Blocks plugin <= 4.2.0 - Multiple Subscriber+ Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productEssential Blocks for Gutenberg | Published12/09/2024 | SeverityMedium |
|---|
CVE-2023-51359WordPress Essential Blocks plugin <= 4.2.0 - Multiple Contributor+ Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productEssential Blocks for Gutenberg | Published12/09/2024 | SeverityMedium |
|---|
CVE-2023-47762WordPress BetterDocs plugin <= 2.5.2 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productBetterDocs | Published12/09/2024 | SeverityMedium |
|---|
CVE-2023-47761WordPress Simple 301 Redirects by BetterLinks plugin <= 2.0.7 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productSimple 301 Redirects by BetterLinks | Published12/09/2024 | SeverityMedium |
|---|
CVE-2023-47760WordPress Essential Blocks plugin <= 4.2.0 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productEssential Blocks for Gutenberg | Published12/09/2024 | SeverityMedium |
|---|
CVE-2024-51672WordPress BetterLinks plugin <= 2.1.7 - SQL Injection vulnerability | Exploitation statusNot exploited | FixYes | Affected productBetterLinks | Published11/04/2024 | SeverityHigh |
|---|
CVE-2024-47308WordPress Templately plugin <= 3.1.2 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productTemplately | Published11/01/2024 | SeverityMedium |
|---|
CVE-2024-38707WordPress EmbedPress plugin <= 4.0.4 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productEmbedPress | Published11/01/2024 | SeverityMedium |
|---|
CVE-2024-50424WordPress Templately plugin <= 3.1.5 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productTemplately | Published10/29/2024 | SeverityMedium |
|---|
CVE-2024-50423WordPress Templately plugin <= 3.1.5 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productTemplately | Published10/29/2024 | SeverityMedium |
|---|
CVE-2024-50461WordPress EmbedPress plugin <= 4.0.14 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productEmbedPress | Published10/28/2024 | SeverityMedium |
|---|
CVE-2024-47385WordPress Essential Blocks plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productEssential Blocks for Gutenberg | Published10/05/2024 | SeverityMedium |
|---|
CVE-2024-43936WordPress EmbedPress plugin <= 4.0.8 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productEmbedPress | Published08/29/2024 | SeverityMedium |
|---|
CVE-2024-43328WordPress EmbedPress plugin <= 4.0.9 - Local File Inclusion vulnerability | Exploitation statusNot exploited | FixYes | Affected productEmbedPress | Published08/19/2024 | SeverityHigh |
|---|
CVE-2024-43129WordPress BetterDocs plugin <= 3.5.8 - Local File Inclusion vulnerability | Exploitation statusNot exploited | FixYes | Affected productBetterDocs | Published08/13/2024 | SeverityMedium |
|---|
CVE-2024-43227WordPress BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer for Elementor & Gutenberg plugin <= 3.5.8 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productBetterDocs | Published08/12/2024 | SeverityMedium |
|---|
CVE-2024-39649WordPress Essential Addons for Elementor plugin <= 5.9.26 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productEssential Addons for Elementor | Published08/01/2024 | SeverityMedium |
|---|
CVE-2024-5058WordPress Typing Text plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productTyping Text | Published06/21/2024 | SeverityMedium |
|---|
CVE-2023-51375WordPress EmbedPress plugin <= 3.8.3 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productEmbedPress | Published06/21/2024 | SeverityMedium |
|---|
59 Results | Page 1 of 2