Notfound vulnerabilities

Products

• Gallery 10
• Pie Register Premium 6
• Bridge Core 5
• Admin And Site Enhancements (ase) Pro 4
• Fs Poster 4
• Wpjobboard 4
• Xv Random Quotes 4
• Ad Inserter Pro 3
• Chaty Pro 3
• Essential Wp Real Estate 3
• Helloprint 3
• Hero Mega Menu - Responsive Wordpress Menu Plugin 3
• Rsvp Me 3
• Shuffle 3
• Team Rosters 3
• Apptivo Business Site Crm 2
• Blue Captcha 2
• Catch Duplicate Switcher 2
• Contact Form 7 Round Robin Lead Distribution 2
• Doctor Appointment Booking 2
• Easy Bet 2
• Easy Gallery 2
• Flickr Set Slideshows 2
• Fresh Framework 2
• Gnucommerce 2
• Gpx Viewer 2
• Guten Free Options 2
• G Web Pro Store Locator 2
• Include Url 2
• Links/problem Reporter 2
• Mediaview 2
• Mobile 2
• Oshine Modules 2
• Photo Video Store 2
• Pixobe Cartography 2
• Private Messages For Userpro 2
• Schedule 2
• Seo Tools 2
• Social Links 2
• Spatialmatch Idx 2

Show 9 moreShow less

• Storely 2
• Stray Random Quotes 2
• Top Bar – Popups – By Wpoptin 2
• Traveler Code 2
• Ui Slider Filter By Price 2
• Wp Contest 2
• Wp Find Your Nearest 2
• Wp User Profiles 2
• Youtube Video Grid 2

Newest

• notfound pie register premium, pie register premium +1 more Pie Register Premium <= 3.8.4.0 - Unauthenticated Arbitrary File Upload via piereg_file_upload AJAX Handler CVE-2026-84999 9.8 CriticalOctober 28, 2026
• john james jacoby wp user profiles WordPress WP User Profiles plugin <= 2.7.3 - Privilege Escalation vulnerability CVE-2026-105058 8.8 HighOctober 6, 2026
• notfound shuffle Shuffle through 2.2.1 API Key Reset Cross-Tenant Privilege Escalation CVE-2026-92716 8.6 HighSeptember 16, 2026
• edge themes shuffle WordPress Shuffle theme <= 1.8 - Local File Inclusion vulnerability CVE-2025-15637 8.1 HighAugust 20, 2026
• notfound chaty pro WordPress Chaty Pro plugin <= 3.5.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-73360 7.1 HighAugust 18, 2026
• ase admin and site enhancements (ase) pro Admin and Site Enhancements (ASE) Pro <= 8.9.0 - Unauthenticated Remote Code Execution via PHP Code Injection via cfgroup[input] Repeater Row Key CVE-2026-16610 9.8 CriticalJuly 30, 2026
• chaty pro, notfound chaty pro +1 more Chaty Pro <= 3.5.5 - Authenticated (Subscriber+) SQL Injection via 'widget_id' Parameter CVE-2026-6251 6.5 MediumJuly 28, 2026
• ase admin and site enhancements (ase) pro WordPress Admin and Site Enhancements (ASE) Pro plugin <= 8.8.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-57625 9.6 CriticalJuly 2, 2026
• bestwebsoft gallery WordPress Gallery plugin <= 4.7.8 - SQL Injection vulnerability CVE-2026-57642 8.5 HighJune 26, 2026
• jotis blue captcha Blue Captcha <= 2.0.1 - Cross-Site Request Forgery via 'blcap_action' Parameter CVE-2026-10552 4.3 MediumJune 24, 2026
• fs-code fs poster WordPress FS Poster plugin <= 6.5.8 - Subscriber+ Site Wide Broken Access Control vulnerability CVE-2025-30960 8.3 HighApril 16, 2025
• dzynit seo tools WordPress SEO Tools plugin <= 4.0.7 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-30984 7.1 HighApril 15, 2025
• notfound easy contact WordPress Easy Contact plugin <= 0.1.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-30970 7.1 HighApril 15, 2025
• notfound wpjobboard WordPress WPJobBoard plugin < 5.11.1 - CSRF to Remote Code Execution (RCE) vulnerability CVE-2025-30967 Public exploit 9.6 CriticalApril 15, 2025
• notfound wpjobboard WordPress WPJobBoard plugin < 5.11.1 - Path Traversal vulnerability CVE-2025-30966 5.4 MediumApril 15, 2025
• notfound unlimited timeline WordPress Unlimited Timeline < 1.6.1 - Broken Access Control Vulnerability CVE-2025-27008 7.5 HighApril 15, 2025
• caalami advanced custom fields: link picker field WordPress Advanced Custom Fields: Link Picker Field plugin <= 1.2.8 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-26746 7.1 HighApril 15, 2025
• notfound macro calculator with admin email optin & data WordPress Macro Calculator with Admin Email Optin & Data plugin <= 1.0 - Multiple Vulnerabilities vulnerability CVE-2025-26730 7.5 HighApril 15, 2025
• lcweb global gallery WordPress Global Gallery plugin <= 8.8.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-22263 7.1 HighApril 15, 2025
• kagla gnucommerce WordPress GNUCommerce plugin <= 1.5.4 - PHP Object Injection vulnerability CVE-2025-30985 9.8 CriticalApril 15, 2025
• notfound wpjobboard WordPress WPJobBoard plugin < 5.11.1 - Multiple Cross Site Request Forgery (CSRF) vulnerabilities vulnerability CVE-2025-30965 4.3 MediumApril 15, 2025
• fs-code fs poster WordPress FS Poster plugin <= 6.5.8 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-30962 7.1 HighApril 15, 2025
• mobeen abdullah coming soon, maintenance mode WordPress Coming Soon, Maintenance Mode plugin <= 1.1.1 - Local File Inclusion vulnerability CVE-2025-26894 7.5 HighApril 15, 2025
• hockeydata los, notfound hockeydata los +1 more WordPress hockeydata LOS plugin <= 1.2.4 - Local File Inclusion vulnerability CVE-2025-26889 7.5 HighApril 15, 2025
• exthemes wp food ordering and restaurant menu WordPress WP Food ordering and Restaurant Menu plugin <= 2.7 - Local File Inclusion vulnerability CVE-2025-31040 8.1 HighApril 11, 2025
• huseyin berberoglu wp hide categories WordPress WP Hide Categories plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability CVE-2025-31028 7.1 HighApril 11, 2025
• notfound site notify WordPress Site Notify plugin <= 1.0 - Broken Access Control Vulnerability CVE-2025-32240 6.5 MediumApril 10, 2025
• john james jacoby wp user profiles WordPress WP User Profiles plugin <= 2.6.2 - Privilege Escalation vulnerability CVE-2025-31524 8.8 HighApril 10, 2025
• apptivo business site crm, notfound apptivo business site crm +1 more WordPress Apptivo Business Site CRM plugin <= 5.3 - Arbitrary Content Deletion vulnerability CVE-2025-31909 7.5 HighApril 3, 2025
• mark o'donnell team rosters WordPress Team Rosters Plugin <= 4.7 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-31905 7.1 HighApril 3, 2025
• notfound xv random quotes WordPress XV Random Quotes plugin <= 2.0.0 - Cross Site Scripting (XSS) vulnerability CVE-2025-31903 7.1 HighApril 3, 2025
• dustinscarberry mediaview WordPress MediaView plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-31898 7.1 HighApril 3, 2025
• notfound wp identicon WordPress WP_Identicon plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-31468 7.1 HighApril 3, 2025
• miro.mannino flickr photostream WordPress Flickr Photostream plugin <= 3.1.8 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-31467 7.1 HighApril 3, 2025
• e1tekoap42 search engine keywords highlighter WordPress Search engine keywords highlighter plugin <= 0.1.3 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-31442 7.1 HighApril 3, 2025
• david wood latest custom post type updates WordPress Latest Custom Post Type Updates plugin <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-30616 7.1 HighApril 3, 2025
• notfound wptobe-signinup WordPress Wptobe-signinup plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-30611 7.1 HighApril 3, 2025
• notfound limit max ips per user WordPress Limit Max IPs Per User plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-31455 7.1 HighApril 1, 2025
• arefly delete post revision WordPress Delete Post Revision plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-31454 7.1 HighApril 1, 2025
• notfound pages order WordPress Pages Order plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-31445 7.1 HighApril 1, 2025
• conlabz gmbh wp bookmarks WordPress WP Bookmarks plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-31431 7.1 HighApril 1, 2025
• kellydiek digiwidgets image editor WordPress DigiWidgets Image Editor plugin <= 1.10 - Remote Code Execution (RCE) Vulnerability CVE-2025-30580 10.0 CriticalApril 1, 2025
• abhishek kumar frizzly WordPress Frizzly plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-30554 7.1 HighApril 1, 2025
• notfound bridge core WordPress Bridge Core plugin < 3.3.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-31409 6.5 MediumApril 1, 2025
• notfound xv random quotes WordPress XV Random Quotes plugin <= 2.0.0 - SQL Injection vulnerability CVE-2025-30971 9.3 CriticalApril 1, 2025
• notfound include url WordPress Include URL plugin <= 0.3.5 Arbitrary File Download Vulnerability CVE-2025-30594 6.5 MediumApril 1, 2025
• dourou flickr set slideshows WordPress Flickr set slideshows plugin <= 0.9 - SQL Injection Vulnerability CVE-2025-30589 8.5 HighApril 1, 2025
• makong tidekey WordPress Tidekey plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-30563 7.1 HighApril 1, 2025
• notfound kento wordpress stats WordPress Kento WordPress Stats plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-30559 7.1 HighApril 1, 2025
• notfound ok poster group WordPress OK Poster Group plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-30544 7.1 HighApril 1, 2025
• Show olderLoading…