Title	CVE ID	CVSS	Vector	Date
Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator <= 1.5.3 - Missing Authorization	CVE-2025-63079	4.3	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N	June 26, 2026
PostX <= 5.0.3 - Missing Authorization	CVE-2025-69313	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	January 19, 2026
Blockons <= 1.2.15 - Missing Authorization	CVE-2025-14360	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	January 8, 2026
Cookies and Content Security Policy <= 2.34 - Unauthenticated Information Exposure	CVE-2025-63019	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	January 5, 2026
CubeWP <= 1.1.27 - Missing Authorization	CVE-2025-68036	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	December 26, 2025
Project Manager <= 3.0.1 - Authenticated (Subscriber+) Information Exposure	CVE-2025-68040	4.3	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N	December 26, 2025
Custom Related Posts <= 1.8.0 - Unauthenticated Information Exposure	CVE-2025-68033	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	December 25, 2025
Restrict Elementor Widgets, Columns and Sections <= 1.12 - Missing Authorization	CVE-2025-64244	4.3	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N	December 13, 2025
Timetics <= 1.0.44 - Missing Authorization	CVE-2025-64268	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	November 22, 2025
TempTool [Show Current Template Info] <= 1.3.1 - Authenticated (Contributor+) Information Exposure	CVE-2025-62955	4.3	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	October 14, 2025
Ajax Load More <= 7.6.0.2 - Unauthenticated Sensitive Information Exposure	CVE-2025-59582	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	September 22, 2025
Getwid <= 2.1.2 - Authenticated (Contributor+) Sensitive Information Exposure	CVE-2025-58252	4.3	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N	September 22, 2025
Lazy Blocks <= 4.1.0 - Missing Authorization	CVE-2025-58258	4.3	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	September 22, 2025
Recipe Card Blocks for Gutenberg & Elementor <= 3.4.8 - Incorrect Authorization	CVE-2025-62019	7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N	September 11, 2025
Paid Member Subscriptions <= 2.15.9 - Missing Authorization	CVE-2025-58600	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	September 3, 2025
Nexter Blocks <= 4.5.4 - Missing Authorization	CVE-2025-54739	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	August 14, 2025

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation