Log in Start free

wpdevteam

Products

ProductCVEsExploitedLatest
Essential Addons for Elementor – Popular Elementor Templates & Widgets50–Oct 30, 2026
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns23–Oct 1, 2026
EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more17–Nov 28, 2024
NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar7–Oct 16, 2026
BetterDocs – Knowledge Base Docs & FAQ Solution for Elementor & Block Editor5–Apr 24, 2026
BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot2–Jul 10, 2026
easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution2–Oct 30, 2026
EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents2–Oct 3, 2026
Essential Blocks Pro2–Oct 20, 2023
Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud!2–Aug 15, 2026
BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP1–Aug 25, 2026
BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot1–Sep 1, 2026
SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher1–Jul 16, 2024
EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more1–Jun 6, 2026
xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN1–Oct 17, 2026

Exploited and recent CVEs

  • CVE-2026-112365 High 7.2 easy.jobs <= 2.8.4 - Unauthenticated Stored Cross-Site Scripting via 'cover_letter' Parameter 0.5%
  • CVE-2026-118205 High 7.4 Essential Addons for Elementor <= 6.8.7 - Unauthenticated Privilege Escalation to 'page_id' Parameter via Elementor Revision 0.5%
  • CVE-2026-108366 Medium 6.4 easy.jobs <= 2.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon' Block Attribute 0.2%
  • CVE-2026-109985 Medium 6.4 xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'post_content' Parameter 0.2%
  • CVE-2026-109513 High 7.2 NotificationX <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via 'name' Parameter via popup-submit REST Route 0.2%
  • CVE-2026-110721 Medium 5.3 NotificationX <= 3.3.3 - Missing Authorization to Unauthenticated Arbitrary Content Injection via 'nx_id' Parameter on /popup-submit REST Route 0.2%
  • CVE-2026-92727 Medium 6.4 EmbedPress <= 4.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slidesShow' Block Attribute 0.2%
  • CVE-2026-96256 Medium 6.4 Gutenberg Essential Blocks <= 6.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker' Attribute 0.3%
  • CVE-2026-89330 Medium 6.1 EmbedPress <= 4.6.5 - Reflected Cross-Site Scripting via 'hash' and 'unique' Parameters 0.4%
  • CVE-2026-75980 Medium 6.4 BetterDocs <= 4.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading 'id' Attribute in Post Content 0.3%
  • CVE-2026-19801 Medium 4.3 BetterLinks <= 3.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Short URL Creation via create_fbs_link AJAX Action 0.4%
  • CVE-2026-18438 High 8.8 Templately <= 3.7.1 - Authenticated (Contributor+) Arbitrary File Upload to Remote Code Execution via Gutenberg Cloud Import Attachment Filename Mismatch 1.3%
  • CVE-2026-15145 Medium 6.4 Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget 0.4%
  • CVE-2026-15156 Medium 6.4 Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reading Progress Global Color Settings 0.3%
  • CVE-2026-15155 High 8.8 Essential Addons for Elementor <= 6.6.10 - Authenticated (Contributor+) Account Takeover via Email Header Injection 0.7%
  • CVE-2026-15104 Medium 6.5 BetterDocs <= 4.6.0 - Authenticated (Custom+) SQL Injection via 'lang' Parameter 0.4%
  • CVE-2026-6459 Medium 6.4 Essential Addons for Elementor <= 6.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via Event Calendar Widget Popup 0.3%
  • CVE-2026-10833 Medium 6.4 Gutenberg Essential Blocks - Page Builder for Gutenberg Blocks & Patterns <= 6.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'configurablePrefix' Block Attribute 0.3%
  • CVE-2026-12157 Medium 6.4 BetterDocs <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'blockId' Block Attribute 0.3%
  • CVE-2026-7796 Medium 6.4 EmbedPress <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block 'url' Attribute 0.3%
  • CVE-2026-7665 Medium 5.3 Essential Addons for Elementor <= 6.6.4 - Missing Authorization to Unauthenticated Information Exposure via 'load_more' AJAX Handler 6.8%
  • CVE-2026-10586 High 7.2 Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 6.1.3 - Authenticated (Author+) Server-Side Request Forgery 0.3%
  • CVE-2026-5193 Medium 6.5 Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.13 - Authenticated (Author+) Limited Privilege Escalation via register_user 0.2%
  • CVE-2026-4658 Medium 6.4 Gutenberg Essential Blocks <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes 0.4%
  • CVE-2026-6393 Medium 4.3 BetterDocs <= 4.3.11 - Missing Authorization to Authenticated (Subscriber+) Unauthorized AI API Usage 0.3%
  • CVE-2026-3875 Medium 6.4 BetterDocs <= 4.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.2%
  • CVE-2026-1512 Medium 6.4 Essential Addons for Elementor <= 6.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Box Widget 0.3%
  • CVE-2026-0554 Medium 4.3 NotificationX <= 3.1.11 - Missing Authorization to Authenticated (Contributor+) Analytics Reset 0.3%
  • CVE-2025-15380 High 7.2 NotificationX <= 3.2.0 - Unauthenticated DOM-Based Cross-Site Scripting via 'nx-preview' 0.3%
  • CVE-2026-1004 Medium 5.3 Essential Addons for Elementor <= 6.5.5 - Missing Authorization to Unauthenticated Sensitive Information Exposure 0.4%