Wpdeveloper vulnerabilities

Products

• Essential Addons For Elementor 55
• Embedpress 35
• Essential Blocks 25
• Essential Addons For Elementor 24
• Essential Blocks For Gutenberg 8
• Reviewx 8
• Templately 8
• Betterdocs 7
• Notificationx 6
• Simple 301 Redirects By Betterlinks 6
• Simple 301 Redirects 5
• Betterlinks 3
• Schedulepress 3
• Essential Addons For Elementor Pro 2
• Twitter Cards Meta 2
• Typing Text 2
• Typing Text 2

Newest

• unknown essential addons for elementor Essential Addons for Elementor 6.6.0 - 6.8.7 - Author+ Privilege Escalation via register_user_role CVE-2026-110808 4.2 MediumOctober 31, 2026
• unknown essential addons for elementor Essential Addons for Elementor 6.7.3 - 6.8.6 - Unauthenticated Registration Approval Bypass via OTP Verification CVE-2026-110508 5.3 MediumOctober 28, 2026
• unknown essential addons for elementor Essential Addons for Elementor < 6.8.7 - Unauthenticated Private Post Meta Disclosure via load_more AJAX Handler CVE-2026-110509 5.3 MediumOctober 28, 2026
• unknown essential addons for elementor Essential Addons for Elementor < 6.8.7 - Admin+ Cross-Site User Approval State Change via Bulk Action CVE-2026-110537 3.8 LowOctober 23, 2026
• unknown essential addons for elementor Essential Addons for Elementor < 6.8.7 - Author+ Content Injection via Pricing Table and Post Timeline Title Tag CVE-2026-110510 3.5 LowOctober 23, 2026
• wpdeveloper notificationx NotificationX WordPress Plugin < 2.3.12 Unauthenticated SQL Injection via notification REST endpoint CVE-2022-51021 8.8 HighOctober 22, 2026
• wpdeveloper schedulepress SchedulePress before 5.3.5 Missing Authorization via wpsp_el_editor_form AJAX Action CVE-2026-114120 5.3 MediumOctober 21, 2026
• wpdeveloper essential addons for elementor WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerability CVE-2026-110898 6.4 MediumOctober 19, 2026
• unknown embedpress EmbedPress < 4.6.8 - Unauthenticated YouTube API Quota Consumption and Database Bloating CVE-2026-85000 5.3 MediumOctober 14, 2026
• wpdeveloper essential addons for elementor WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-102394 6.5 MediumOctober 1, 2026
• unknown embedpress EmbedPress 4.4.9 - 4.6.6 - Contributor+ Stored XSS via Elementor Widget showTitle Attribute CVE-2026-85001 6.8 MediumSeptember 30, 2026
• unknown embedpress EmbedPress < 4.6.7 - Contributor+ Stored XSS via Instagram Carousel Block Attributes CVE-2026-85002 6.8 MediumSeptember 27, 2026
• unknown embedpress EmbedPress 4.6.0 - 4.6.3 - Unauthenticated Google Reviews API Quota Consumption and Database Bloat CVE-2026-84936 5.3 MediumSeptember 5, 2026
• unknown embedpress EmbedPress 4.6.0 - 4.6.3 - Contributor+ Google Reviews Modification CVE-2026-84927 2.7 LowSeptember 5, 2026
• unknown embedpress EmbedPress 4.6.0 - 4.6.3 - Contributor+ Administrator Email Disclosure via Google Reviews REST Route CVE-2026-84926 2.7 LowSeptember 5, 2026
• wpdeveloper essential addons for elementor WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability CVE-2026-81777 5.3 MediumAugust 28, 2026
• wpdeveloper templately WordPress Templately plugin <= 3.7.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-66667 7.1 HighAugust 18, 2026
• achal jain table of contents block WordPress Table Of Contents Block plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-66645 6.5 MediumAugust 18, 2026
• unknown essential addons for elementor Essential Addons for Elementor < 6.7.2 - Unauthenticated Privilege Escalation via Custom Profile Field Mass Assignment CVE-2026-18039 8.1 HighAugust 14, 2026
• unknown templately Templately < 3.7.1 - Unauthenticated Administrator Templately Cloud Connection Overwrite CVE-2026-15359 6.5 MediumAugust 7, 2026
• wpdeveloper embedpress WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-61961 7.1 HighAugust 6, 2026
• unknown embedpress EmbedPress < 4.6.1 - Unauthenticated Blind SSRF CVE-2026-10526 5.8 MediumAugust 4, 2026
• unknown essential addons for elementor Essential Addons for Elementor - Lite < 6.6.10 - Unauthenticated Draft/Private WooCommerce Product Disclosure via Compare Table CVE-2026-13345 5.3 MediumJuly 30, 2026
• unknown essential addons for elementor Essential Addons for Elementor - Lite < 6.6.10 - Contributor+ Stored XSS via Pricing Table Title Tag CVE-2026-13344 4.8 MediumJuly 30, 2026
• wpdeveloper betterdocs WordPress BetterDocs plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-65562 6.5 MediumJuly 27, 2026
• unknown betterdocs BetterDocs < 4.5.5 - Unauthenticated Stored XSS via AI Doc Summarizer Prompt Injection CVE-2026-11371 6.1 MediumJuly 16, 2026
• wpdeveloper better payment – instant payments, donations, fundraising with subscriptions &amp; more WordPress Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More plugin <= 2.2.0 - Other Vulnerability Type vulnerability CVE-2026-57364 6.5 MediumJuly 13, 2026
• wpdeveloper embedpress WordPress EmbedPress plugin <= 4.5.2 - Sensitive Data Exposure vulnerability CVE-2026-48872 7.5 HighJune 15, 2026
• wpdeveloper essential addons for elementor WordPress Essential Addons for Elementor plugin < 6.6.0 - Broken Access Control vulnerability CVE-2026-25440 5.3 MediumJune 15, 2026
• wpdeveloper betterdocs WordPress BetterDocs plugin <= 4.3.10 - Sensitive Data Exposure vulnerability CVE-2026-42644 5.3 MediumApril 29, 2026
• wpdeveloper templately WordPress Templately plugin <= 3.6.1 - Sensitive Data Exposure vulnerability CVE-2026-42379 7.7 HighApril 27, 2026
• wpdeveloper notificationx WordPress NotificationX plugin <= 3.2.1 - Broken Access Control vulnerability CVE-2026-27042 5.3 MediumFebruary 19, 2026
• wpdeveloper essential addons for elementor WordPress Essential Addons for Elementor plugin <= 6.5.5 - Broken Access Control vulnerability CVE-2026-23543 5.3 MediumFebruary 19, 2026
• wpdeveloper essential addons for elementor WordPress Essential Addons for Elementor plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability CVE-2025-69092 6.5 MediumDecember 30, 2025
• wpdeveloper essential addons for elementor WordPress Essential Addons for Elementor plugin <= 6.2.4 - Broken Access Control vulnerability CVE-2025-64352 2.7 LowOctober 31, 2025
• wpdeveloper templately WordPress Templately Plugin <= 3.2.7 - Sensitive Data Exposure Vulnerability CVE-2025-49408 10.0 CriticalAugust 20, 2025
• wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 more Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Calendar` And `Business Reviews` Widgets CVE-2025-6244 6.4 MediumJuly 8, 2025
• wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 more Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Event Calendar Widget CVE-2024-9993 6.4 MediumJune 7, 2025
• wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 more Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Pricing Table Widget CVE-2024-9994 6.4 MediumJune 7, 2025
• wpdeveloper essential addons for elementor WordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-24752 Public exploit 7.1 HighApril 17, 2025
• wpdeveloper essential addons for elementor WordPress Essential Addons for Elementor plugin <= 6.1.9 - Sensitive Data Exposure Vulnerability CVE-2025-39589 4.3 MediumApril 16, 2025
• wpdeveloper essential addons for elementor WordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) Vulnerability CVE-2025-39590 6.5 MediumApril 16, 2025
• wpdeveloper secret meta WordPress Secret Meta plugin <= 1.2.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-25086 7.1 HighMarch 27, 2025
• wpdeveloper essential blocks, wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns +1 more Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-1664 6.4 MediumMarch 8, 2025
• wpdeveloper essential blocks, wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns +1 more Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-13803 6.4 MediumFebruary 26, 2025
• wpdeveloper essential blocks for gutenberg, essential blocks +1 more WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerability CVE-2025-26871 4.3 MediumFebruary 25, 2025
• embedpress document block – upload & embed docs WordPress Document Block – Upload & Embed Docs, PDF, PPT, XLS or Any Documents plugin <= 1.1.0 - Broken Access Control vulnerability CVE-2025-22696 5.4 MediumFebruary 4, 2025
• wpdeveloper notificationx WordPress NotificationX plugin <= 2.9.5 - Cross Site Scripting (XSS) vulnerability CVE-2025-22683 6.5 MediumFebruary 3, 2025
• wpdeveloper essential blocks, wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns +1 more Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-12045 4.4 MediumJanuary 8, 2025
• wpdeveloper typing text WordPress Typing Text plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability CVE-2025-22315 6.5 MediumJanuary 7, 2025
• Show olderLoading…