Top 10 Offending IPs from IP Threat Feed
Past 24 hours
# IP Address Blocked Attacks
1 45.138.12.22 981,093
2 93.123.109.228 862,336
3 64.89.161.160 827,022
4 45.138.12.65 814,910
5 85.239.151.82 800,652
6 188.166.253.199 750,802
7 43.228.157.194 738,752
8 23.132.164.122 672,166
9 185.4.113.19 664,901
10 159.223.38.64 644,298
Top 5 Generic Vulnerabilities Blocked by Wordfence
Past 24 hours
# Vulnerability
1 Directory Traversal
2 SQL Injection
3 XSS: Cross Site Scripting
4 LFI: Local File Inclusion
5 Directory Traversal (Requesting WP Config File)
Top 10 Unique WordPress Vulnerabilities Blocked by Wordfence
Past 24 hours
# Vulnerability
1 Gravity SMTP <= 2.1.4 - Unauthenticated Sensitive Information Exposure via REST API
2 WAF-RULE-868
3 WAF-RULE-945
4 Gwolle Guestbook <= 1.5.3 - Remote File Inclusion
5 WordPress Core < 7.0.2 - Unauthenticated Remote Code Execution
6 Rank Math SEO <= 1.0.40.2 - Unprotected REST API Endpoints
7 WPGraphQL <= 0.2.3 - Multiple Vulnerable Actions
8 WooCommerce Payments <= 5.6.1 Authentication Bypass and Privilege Escalation
9 WordPress Core <= 7.1.1 - Unauthenticated Local File Inclusion via locate_template() Path Traversal
10 Slider Revolution < 3.0.96 & Showbiz Pro < 1.7.1 - Missing Authorization to Arbitrary File Upload

Search All Vulnerabilities

Tip: You can search by CVE ID, software name or slug, or the researcher name. Expand to read about more advanced search options.

If you want to perform more advanced lookups, you can use keywords to further refine your search.

For example, woocommerce researcher:"chloe chamberland" would search for any vulnerabilities discovered by Chloe Chamberland in software that has WooCommerce in the title.

Keywords are added in keyword:value format. If the value contains spaces, you must enclose it in quotation marks.

You can use the following keywords to add criteria to your search:

title
Searches through the title of each vulnerability for matches.
date
Returns vulnerabilities by publication date. Use YYYY-MM-DD, YYYY-MM or YYYY format.
cvss-rating
Use low, medium, high or critical to limit the search to vulnerabilities with the specified rating.
researcher
Returns vulnerabilities credited to researchers containing the given text.
software
Returns vulnerabilities discovered in software containing the given text.
software-slug
Returns vulnerabilities discovered in software exactly matching the given slug.
software-type
Use plugin, theme or core to limit the search to the specified type of software.
By selecting “Search” you acknowledge that you have read and agree to the Wordfence Intelligence Terms and Conditions.

Recently Added Vulnerabilities

Submit Vulnerability View All
FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Arbitrary File Upload via 'video_url' Parameter
8.8
CVE-2026-86461
Oct 14, 2026
Researcher: Osman Hussein
SimpleForm <= 3.10.0 - Unauthenticated Privilege Escalation to wp_capabilities Mass Assignment via simpleform_wp_register
9.8
CVE-2026-104748
Oct 13, 2026
Researcher: Sebastian Albrecht (mySebbe)
Record of Consent Extension for Complianz <= 2.5 - Unauthenticated Stored Cross-Site Scripting via 'uid' Parameter
7.2
CVE-2026-107631
Oct 13, 2026
Researcher: OKISO
ShopMagic <= 4.9.0 - Unauthenticated Local File Inclusion via 'billing.first_name' Parameter
8.1
CVE-2026-103367
Oct 13, 2026
Researcher: crow
PeproDev Branches Map <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-9373
Oct 13, 2026
Researcher: Nabil Irawan
Post Export Import with Media <= 1.17.1 - Authenticated (Administrator+) PHP Object Injection via 'page_data[meta]' Parameter
7.2
CVE-2026-104764
Oct 13, 2026
Researcher: Wordfence PRISM
Meow Lightbox <= 5.6.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Output Buffering parser noise substitution via comment body + display_name
6.4
CVE-2026-107756
Oct 13, 2026
Researcher: crow
Mang Board <= 2.4.3 - Unauthenticated Local File Inclusion via '<mode>_type' Parameter
8.1
CVE-2026-104909
Oct 13, 2026
Researcher: Wordfence PRISM
Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'user_name' Parameter
7.2
CVE-2026-107751
Oct 13, 2026
Researcher: leon figueira
Mang Board <= 2.4.3 - Authenticated (Custom+) Stored Cross-Site Scripting via 'content' Parameter
6.4
CVE-2026-104761
Oct 13, 2026
Researcher: Wordfence PRISM
# Title CVE ID CVSS Researchers Date
1 FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Arbitrary File Upload via 'video_url' Parameter CVE-2026-86461 8.8 Osman Hussein October 14, 2026
2 SimpleForm <= 3.10.0 - Unauthenticated Privilege Escalation to wp_capabilities Mass Assignment via simpleform_wp_register CVE-2026-104748 9.8 Sebastian Albrecht (mySebbe) October 13, 2026
3 Record of Consent Extension for Complianz <= 2.5 - Unauthenticated Stored Cross-Site Scripting via 'uid' Parameter CVE-2026-107631 7.2 OKISO October 13, 2026
4 ShopMagic <= 4.9.0 - Unauthenticated Local File Inclusion via 'billing.first_name' Parameter CVE-2026-103367 8.1 crow October 13, 2026
5 PeproDev Branches Map <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-9373 6.4 Nabil Irawan October 13, 2026
6 Post Export Import with Media <= 1.17.1 - Authenticated (Administrator+) PHP Object Injection via 'page_data[meta]' Parameter CVE-2026-104764 7.2 Wordfence PRISM October 13, 2026
7 Meow Lightbox <= 5.6.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Output Buffering parser noise substitution via comment body + display_name CVE-2026-107756 6.4 crow October 13, 2026
8 Mang Board <= 2.4.3 - Unauthenticated Local File Inclusion via '<mode>_type' Parameter CVE-2026-104909 8.1 Wordfence PRISM October 13, 2026
9 Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'user_name' Parameter CVE-2026-107751 7.2 leon figueira October 13, 2026
10 Mang Board <= 2.4.3 - Authenticated (Custom+) Stored Cross-Site Scripting via 'content' Parameter CVE-2026-104761 6.4 Wordfence PRISM October 13, 2026
Submit Vulnerability

Researcher Hall of Fame (Past 30 days)

View All
Rank Name
Vulnerabilities since Sep 14, 2026
Vulns
1 Ananda Dhakal 184
2 Wordfence PRISM 70
3 Intrudify 47
4 nh4tvd 36
5 João Pedro S Alcântara 33
6 Jakub Herman 31
7 Karthik Ramakrishnan 31
8 Artus KG 29
9 Naoki Kawahigashi 28
10 Enrico Marcolini 24

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation