Top 10 Offending IPs from IP Threat Feed
Past 24 hours
# IP Address Blocked Attacks
1 45.74.31.170 1,681,888
2 149.118.57.35 941,453
3 64.89.161.90 699,178
4 178.128.117.117 584,414
5 45.148.10.238 572,551
6 93.123.109.167 571,487
7 91.92.243.235 553,861
8 195.178.110.155 504,124
9 45.148.10.80 491,101
10 91.92.243.245 482,274
Top 5 Generic Vulnerabilities Blocked by Wordfence
Past 24 hours
# Vulnerability
1 Directory Traversal
2 SQL Injection
3 XSS: Cross Site Scripting
4 LFI: Local File Inclusion
5 Directory Traversal via HTTP Headers
Top 10 Unique WordPress Vulnerabilities Blocked by Wordfence
Past 24 hours
# Vulnerability
1 WordPress Core <= 7.1.1 - Unauthenticated Local File Inclusion via locate_template() Path Traversal
2 WPGraphQL <= 0.2.3 - Multiple Vulnerable Actions
3 Gravity SMTP <= 2.1.4 - Unauthenticated Sensitive Information Exposure via REST API
4 WordPress Core < 7.0.2 - Unauthenticated Remote Code Execution
5 WAF-RULE-945
6 WAF-RULE-868
7 WooCommerce Payments <= 5.6.1 Authentication Bypass and Privilege Escalation
8 WAF-RULE-947
9 Gwolle Guestbook <= 1.5.3 - Remote File Inclusion
10 UpdraftPlus WordPress Backup Plugin < 1.22.3 - Sensitive Information Disclosure

Search All Vulnerabilities

Tip: You can search by CVE ID, software name or slug, or the researcher name. Expand to read about more advanced search options.

If you want to perform more advanced lookups, you can use keywords to further refine your search.

For example, woocommerce researcher:"chloe chamberland" would search for any vulnerabilities discovered by Chloe Chamberland in software that has WooCommerce in the title.

Keywords are added in keyword:value format. If the value contains spaces, you must enclose it in quotation marks.

You can use the following keywords to add criteria to your search:

title
Searches through the title of each vulnerability for matches.
date
Returns vulnerabilities by publication date. Use YYYY-MM-DD, YYYY-MM or YYYY format.
cvss-rating
Use low, medium, high or critical to limit the search to vulnerabilities with the specified rating.
researcher
Returns vulnerabilities credited to researchers containing the given text.
software
Returns vulnerabilities discovered in software containing the given text.
software-slug
Returns vulnerabilities discovered in software exactly matching the given slug.
software-type
Use plugin, theme or core to limit the search to the specified type of software.
By selecting “Search” you acknowledge that you have read and agree to the Wordfence Intelligence Terms and Conditions.

Recently Added Vulnerabilities

Submit Vulnerability View All
Download Manager <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_packages Shortcode
6.4
CVE-2026-9696
Oct 9, 2026
Researcher: theviper17y
Appointment Booking Calendar <= 1.6.11.11 - Incorrect Authorization to Unauthenticated Sensitive Field Modification via Appointment Public Token
5.3
CVE-2026-6723
Oct 9, 2026
Researcher: awhacken
GeoDirectory <= 2.8.188 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Contact Email Custom Field
6.4
CVE-2026-104993
Oct 9, 2026
Researcher: Tai Ha (superx)
Avada (Fusion) Builder <= 7.16.1 - Unauthenticated Arbitrary WordPress Action Invocation via '{action_hook}' Dynamic-Data Token in Form Field
9.1
CVE-2026-97670
Oct 9, 2026
Researchers: Chloe Chamberland, Wordfence Argus
Hello Plus <= 1.7.7 - Authenticated (Contributor+) Missing Authorization to Template Activation via hello_plus_set_as_entire_site
5.4
CVE-2026-5727
Oct 9, 2026
Researcher: normaandersonfrank
FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Unquoted popup Shortcode Attribute
6.4
CVE-2026-97630
Oct 9, 2026
Researcher: Thaer Assfour
Form Maker by 10Web <= 1.15.48 - Reflected Cross-Site Scripting via 'inputs' Parameter Array Key
6.1
CVE-2026-103998
Oct 9, 2026
Researcher: Kuba
Fluent Forms <= 6.2.14 - Reflected Cross-Site Scripting via '{get.*}' Editor SmartCode Parameter
4.7
CVE-2026-101324
Oct 9, 2026
Researcher: Santh
FireBox <= 3.1.13 - Authenticated (Author+) SQL Injection via FireBox Form Display Condition
5.3
CVE-2026-104724
Oct 9, 2026
Researcher: Wordfence PRISM
Filter Everything — WordPress & WooCommerce Filters <= 1.9.6 - Reflected Cross-Site Scripting via Elementor Posts Widget Pagination URL
6.1
CVE-2026-87869
Oct 9, 2026
Researcher: Omar Elshopky (3l5h0pky)
# Title CVE ID CVSS Researchers Date
1 Download Manager <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpdm_packages Shortcode CVE-2026-9696 6.4 theviper17y October 9, 2026
2 Appointment Booking Calendar <= 1.6.11.11 - Incorrect Authorization to Unauthenticated Sensitive Field Modification via Appointment Public Token CVE-2026-6723 5.3 awhacken October 9, 2026
3 GeoDirectory <= 2.8.188 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Contact Email Custom Field CVE-2026-104993 6.4 Tai Ha (superx) October 9, 2026
4 Avada (Fusion) Builder <= 7.16.1 - Unauthenticated Arbitrary WordPress Action Invocation via '{action_hook}' Dynamic-Data Token in Form Field CVE-2026-97670 9.1 Chloe Chamberland, Wordfence Argus October 9, 2026
5 Hello Plus <= 1.7.7 - Authenticated (Contributor+) Missing Authorization to Template Activation via hello_plus_set_as_entire_site CVE-2026-5727 5.4 normaandersonfrank October 9, 2026
6 FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Unquoted popup Shortcode Attribute CVE-2026-97630 6.4 Thaer Assfour October 9, 2026
7 Form Maker by 10Web <= 1.15.48 - Reflected Cross-Site Scripting via 'inputs' Parameter Array Key CVE-2026-103998 6.1 Kuba October 9, 2026
8 Fluent Forms <= 6.2.14 - Reflected Cross-Site Scripting via '{get.*}' Editor SmartCode Parameter CVE-2026-101324 4.7 Santh October 9, 2026
9 FireBox <= 3.1.13 - Authenticated (Author+) SQL Injection via FireBox Form Display Condition CVE-2026-104724 5.3 Wordfence PRISM October 9, 2026
10 Filter Everything — WordPress & WooCommerce Filters <= 1.9.6 - Reflected Cross-Site Scripting via Elementor Posts Widget Pagination URL CVE-2026-87869 6.1 Omar Elshopky (3l5h0pky) October 9, 2026
Submit Vulnerability

Researcher Hall of Fame (Past 30 days)

View All
Rank Name
Vulnerabilities since Sep 9, 2026
Vulns
1 Ananda Dhakal 173
2 Wordfence PRISM 50
3 Intrudify 46
4 Artus KG 36
5 Karthik Ramakrishnan 35
6 Jakub Herman 32
7 nh4tvd 31
8 daroo 21
9 Rafie Muhammad 19
10 Francisco José Ramírez Vicente 18

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation