WordPress Plugin Vulnerabilities

Title	Number of Vulnerabilities	Last Vulnerability
GiveWP – Donation Plugin and Fundraising Platform	100	October 9, 2026
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses	92	October 5, 2026
Tutor LMS – eLearning and online course solution	92	October 6, 2026
Royal Addons for Elementor – Addons and Templates Kit for Elementor	91	September 14, 2026
Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder	89	October 1, 2026
Download Manager	88	October 9, 2026
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin	83	October 2, 2026
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker	80	October 9, 2026
Photo Gallery by 10Web – Mobile-Friendly Image Gallery	71	October 7, 2026
Essential Addons for Elementor – Popular Elementor Templates & Widgets	69	October 1, 2026
Forminator Forms – Contact Form, Payment Form & Custom Form Builder	68	October 8, 2026
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe	66	September 15, 2026
ProfileGrid – User Profiles, Groups and Communities	65	October 4, 2026
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login	62	September 3, 2026
Unlimited Elements for Elementor	59	October 5, 2026
Welcart e-Commerce	57	October 3, 2026
Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce	56	October 5, 2026
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder	56	October 4, 2026
Elementor Website Builder – more than just a page builder	54	September 25, 2026
MasterStudy LMS WordPress Plugin – for Online Courses and Education	54	October 8, 2026

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation

Showing 1-20 of 16410 plugins with known vulnerabilities

Search all WordPress Plugins with known vulnerabilities