Top 10 Offending IPs from IP Threat Feed
Past 24 hours
# IP Address Blocked Attacks
1 45.74.31.170 1,753,380
2 149.118.57.35 981,085
3 64.89.161.90 713,066
4 178.128.117.117 616,889
5 93.123.109.167 595,198
6 45.148.10.238 576,563
7 91.92.243.235 553,984
8 195.178.110.155 549,707
9 45.148.10.60 530,892
10 45.148.10.80 509,817
Top 5 Generic Vulnerabilities Blocked by Wordfence
Past 24 hours
# Vulnerability
1 SQL Injection
2 Directory Traversal
3 XSS: Cross Site Scripting
4 LFI: Local File Inclusion
5 Directory Traversal via HTTP Headers
Top 10 Unique WordPress Vulnerabilities Blocked by Wordfence
Past 24 hours
# Vulnerability
1 WordPress Core <= 7.1.1 - Unauthenticated Local File Inclusion via locate_template() Path Traversal
2 WPGraphQL <= 0.2.3 - Multiple Vulnerable Actions
3 Gravity SMTP <= 2.1.4 - Unauthenticated Sensitive Information Exposure via REST API
4 WordPress Core < 7.0.2 - Unauthenticated Remote Code Execution
5 WAF-RULE-945
6 WAF-RULE-868
7 WooCommerce Payments <= 5.6.1 Authentication Bypass and Privilege Escalation
8 WAF-RULE-947
9 Gwolle Guestbook <= 1.5.3 - Remote File Inclusion
10 UpdraftPlus WordPress Backup Plugin < 1.22.3 - Sensitive Information Disclosure

Search All Vulnerabilities

Tip: You can search by CVE ID, software name or slug, or the researcher name. Expand to read about more advanced search options.

If you want to perform more advanced lookups, you can use keywords to further refine your search.

For example, woocommerce researcher:"chloe chamberland" would search for any vulnerabilities discovered by Chloe Chamberland in software that has WooCommerce in the title.

Keywords are added in keyword:value format. If the value contains spaces, you must enclose it in quotation marks.

You can use the following keywords to add criteria to your search:

title
Searches through the title of each vulnerability for matches.
date
Returns vulnerabilities by publication date. Use YYYY-MM-DD, YYYY-MM or YYYY format.
cvss-rating
Use low, medium, high or critical to limit the search to vulnerabilities with the specified rating.
researcher
Returns vulnerabilities credited to researchers containing the given text.
software
Returns vulnerabilities discovered in software containing the given text.
software-slug
Returns vulnerabilities discovered in software exactly matching the given slug.
software-type
Use plugin, theme or core to limit the search to the specified type of software.
By selecting “Search” you acknowledge that you have read and agree to the Wordfence Intelligence Terms and Conditions.

Recently Added Vulnerabilities

Submit Vulnerability View All
GiveWP <= 4.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via givewp_campaign_grid Shortcode Attributes
6.4
CVE-2026-97643
Oct 9, 2026
Researcher: Wordfence PRISM
GeoDirectory <= 2.8.187 - Unauthenticated Local File Inclusion via 'design_type' Parameter
8.1
CVE-2026-104899
Oct 9, 2026
Researcher: Wordfence PRISM
FV Player 8 <= 8.1.7 - Authenticated (Subscriber+) Arbitrary File Upload via videos[].fv_wp_flowplayer_field_src Parameter
8.8
CVE-2026-83526
Oct 9, 2026
Researcher: Supakiad S. (m3ez)
FooSales <= 1.43.0 - Authenticated (Custom+) Privilege Escalation via create_update_customer REST Endpoint
8.8
CVE-2026-77183
Oct 9, 2026
Researcher: Supakiad S. (m3ez)
Church Admin <= 5.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'email' Parameter
6.4
CVE-2026-94421
Oct 9, 2026
Researcher: 刀 妖
Getwid <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-image-points'
6.4
CVE-2026-91862
Oct 9, 2026
Researcher: nthng
Table Field Add-on for ACF and SCF <= 1.3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table Cell Content
6.4
CVE-2026-78068
Oct 9, 2026
Researcher: Omar Elshopky (3l5h0pky)
Embed Any Document <= 2.7.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'embeddoc' Shortcode
6.4
CVE-2026-18558
Oct 9, 2026
Researcher: Deva Parekh
Booking Calendar <= 11.4.3 - Unauthenticated Sensitive Information Exposure in 'WPBC_FLEXTIMELINE_NAV' AJAX Action
5.3
CVE-2026-18496
Oct 9, 2026
Researcher: Jonah Burgess (CryptoCat)
Graphene <= 2.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Fields
6.4
CVE-2026-17025
Oct 9, 2026
Researcher: stealthcopter
# Title CVE ID CVSS Researchers Date
1 GiveWP <= 4.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via givewp_campaign_grid Shortcode Attributes CVE-2026-97643 6.4 Wordfence PRISM October 9, 2026
2 GeoDirectory <= 2.8.187 - Unauthenticated Local File Inclusion via 'design_type' Parameter CVE-2026-104899 8.1 Wordfence PRISM October 9, 2026
3 FV Player 8 <= 8.1.7 - Authenticated (Subscriber+) Arbitrary File Upload via videos[].fv_wp_flowplayer_field_src Parameter CVE-2026-83526 8.8 Supakiad S. (m3ez) October 9, 2026
4 FooSales <= 1.43.0 - Authenticated (Custom+) Privilege Escalation via create_update_customer REST Endpoint CVE-2026-77183 8.8 Supakiad S. (m3ez) October 9, 2026
5 Church Admin <= 5.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'email' Parameter CVE-2026-94421 6.4 刀 妖 October 9, 2026
6 Getwid <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-image-points' CVE-2026-91862 6.4 nthng October 9, 2026
7 Table Field Add-on for ACF and SCF <= 1.3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table Cell Content CVE-2026-78068 6.4 Omar Elshopky (3l5h0pky) October 9, 2026
8 Embed Any Document <= 2.7.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'embeddoc' Shortcode CVE-2026-18558 6.4 Deva Parekh October 9, 2026
9 Booking Calendar <= 11.4.3 - Unauthenticated Sensitive Information Exposure in 'WPBC_FLEXTIMELINE_NAV' AJAX Action CVE-2026-18496 5.3 Jonah Burgess (CryptoCat) October 9, 2026
10 Graphene <= 2.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Fields CVE-2026-17025 6.4 stealthcopter October 9, 2026
Submit Vulnerability

Researcher Hall of Fame (Past 30 days)

View All
Rank Name
Vulnerabilities since Sep 9, 2026
Vulns
1 Ananda Dhakal 173
2 Wordfence PRISM 52
3 Intrudify 46
4 Artus KG 36
5 Karthik Ramakrishnan 35
6 Jakub Herman 32
7 nh4tvd 31
8 daroo 21
9 Rafie Muhammad 19
10 Pablo González Pérez 18

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation