Log in Start free

WPDeveloper

Products

ProductCVEsExploitedLatest
Essential Addons for Elementor14–Oct 19, 2026
EmbedPress9–Aug 6, 2026
Essential Blocks for Gutenberg8–Feb 25, 2025
BetterDocs6–Jul 27, 2026
Templately6–Aug 18, 2026
NotificationX3–Oct 22, 2026
Typing Text2–Jan 7, 2025
BetterLinks2–Jan 2, 2025
Essential Addons for Elementor Pro2–Nov 18, 2023
SchedulePress2–Oct 21, 2026
ReviewX – Multi-criteria Rating & Reviews for WooCommerce1–Nov 7, 2023
Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More1–Jul 13, 2026
Secret Meta1–Mar 27, 2025
Simple 301 Redirects by BetterLinks1–Dec 9, 2024
Table Of Contents Block1–Aug 18, 2026
Document Block – Upload & Embed Docs1–Feb 4, 2025
Parallax Slider Block1–Dec 15, 2023

Exploited and recent CVEs

  • CVE-2022-51021 High 8.2 NotificationX WordPress Plugin < 2.3.12 Unauthenticated SQL Injection via notification REST endpoint 0.5%
  • CVE-2026-114120 Medium 5.4 SchedulePress before 5.3.5 Missing Authorization via wpsp_el_editor_form AJAX Action 0.3%
  • CVE-2026-110898 Medium 6.4 WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerability 0.2%
  • CVE-2026-102394 Medium 6.5 WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-81777 Medium 5.3 WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability 0.4%
  • CVE-2026-66667 High 7.1 WordPress Templately plugin <= 3.7.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-66645 Medium 6.5 WordPress Table Of Contents Block plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-61961 High 7.1 WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-65562 Medium 6.5 WordPress BetterDocs plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-57364 Medium 6.5 WordPress Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More plugin <= 2.2.0 - Other Vulnerability Type vulnerability 0.4%
  • CVE-2026-48872 High 7.5 WordPress EmbedPress plugin <= 4.5.2 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2026-25440 Medium 5.3 WordPress Essential Addons for Elementor plugin < 6.6.0 - Broken Access Control vulnerability 0.2%
  • CVE-2026-42644 Medium 5.3 WordPress BetterDocs plugin <= 4.3.10 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2026-42379 High 7.7 WordPress Templately plugin <= 3.6.1 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2026-27042 Medium 5.3 WordPress NotificationX plugin <= 3.2.1 - Broken Access Control vulnerability 0.2%
  • CVE-2026-23543 Medium 5.3 WordPress Essential Addons for Elementor plugin <= 6.5.5 - Broken Access Control vulnerability 0.3%
  • CVE-2025-69092 Medium 6.5 WordPress Essential Addons for Elementor plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-64352 Low 2.7 WordPress Essential Addons for Elementor plugin <= 6.2.4 - Broken Access Control vulnerability 0.2%
  • CVE-2025-49408 Critical 10.0 WordPress Templately Plugin <= 3.2.7 - Sensitive Data Exposure Vulnerability 0.5%
  • CVE-2025-24752 High 7.1 WordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerability 1.2%
  • CVE-2025-39589 Medium 4.3 WordPress Essential Addons for Elementor plugin <= 6.1.9 - Sensitive Data Exposure Vulnerability 0.4%
  • CVE-2025-39590 Medium 6.5 WordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-25086 High 7.1 WordPress Secret Meta plugin <= 1.2.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2025-26871 Medium 4.3 WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerability 0.4%
  • CVE-2025-22696 Medium 5.4 WordPress Document Block – Upload & Embed Docs, PDF, PPT, XLS or Any Documents plugin <= 1.1.0 - Broken Access Control vulnerability 0.3%
  • CVE-2025-22683 Medium 6.5 WordPress NotificationX plugin <= 2.9.5 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-22315 Medium 6.5 WordPress Typing Text plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-45104 High 7.3 WordPress BetterLinks plugin <= 1.6.0 - Broken Access Control vulnerability 0.5%
  • CVE-2024-56063 Medium 6.5 WordPress Essential Addons for Elementor plugin <= 6.0.7 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2022-47594 Medium 6.5 WordPress Essential Blocks for Gutenberg plugin <= 3.8.5 - Broken Access Control 0.4%