CVE Tools
Track your stack

Wpdeveloper

106 CVEs tracked since 2021. Since Jun 2021, none of them reached CISA KEV.

Wpdeveloper CVEs per month

Jun 2021 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Wpdeveloper CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2021-0650
2021-072 or fewer
2021-083 or fewer
2021-092 or fewer
2021-102 or fewer
2021-112 or fewer
2021-122 or fewer
2022-012 or fewer
2022-022 or fewer
2022-033 or fewer
2022-043 or fewer
2022-053 or fewer
2022-063 or fewer
2022-073 or fewer
2022-083 or fewer
2022-093 or fewer
2022-102 or fewer
2022-113 or fewer
2022-123 or fewer
2023-013 or fewer
2023-023 or fewer
2023-03no snapshot
2023-043 or fewer
2023-053 or fewer
2023-0670
2023-073 or fewer
2023-084 or fewer
2023-093 or fewer
2023-104 or fewer
2023-114 or fewer
2023-124 or fewer
2024-0140
2024-02100
2024-03110
2024-04100
2024-05160
2024-06100
2024-074 or fewer
2024-0870
2024-093 or fewer
2024-1060
2024-1180
2024-1280
2025-014 or fewer
2025-0240
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Wpdeveloper's monthly top three, with their CVEs summed over those months.

  1. Essential Addons For Elementor379 months
  2. Embedpress2210 months
  3. Essential Blocks187 months
  4. Essential Blocks For Gutenberg52 months
  5. Simple 301 Redirects51 month
  6. Reviewx43 months
  7. Betterdocs32 months
  8. Templately21 month
  9. Document Block – Upload & Embed Docs11 month
  10. Notificationx11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Wpdeveloper.

  1. CVE-2022-51021NotificationX WordPress Plugin < 2.3.12 Unauthenticated SQL Injection via notification REST endpoint8.2
  2. CVE-2026-114120SchedulePress before 5.3.5 Missing Authorization via wpsp_el_editor_form AJAX Action5.4
  3. CVE-2026-110898WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerability6.4
  4. CVE-2026-102394WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerability6.5
  5. CVE-2026-81777WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability5.3
  6. CVE-2026-66667WordPress Templately plugin <= 3.7.1 - Cross Site Scripting (XSS) vulnerability7.1
  7. CVE-2026-66645WordPress Table Of Contents Block plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability6.5
  8. CVE-2026-61961WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerability7.1
  9. CVE-2026-65562WordPress BetterDocs plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability6.5
  10. CVE-2026-57364WordPress Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More plugin <= 2.2.0 - Other Vulnerability Type vulnerability6.5
  11. CVE-2026-48872WordPress EmbedPress plugin <= 4.5.2 - Sensitive Data Exposure vulnerability7.5
  12. CVE-2026-25440WordPress Essential Addons for Elementor plugin < 6.6.0 - Broken Access Control vulnerability5.3
  13. CVE-2026-42644WordPress BetterDocs plugin <= 4.3.10 - Sensitive Data Exposure vulnerability5.3
  14. CVE-2026-42379WordPress Templately plugin <= 3.6.1 - Sensitive Data Exposure vulnerability7.7
  15. CVE-2026-27042WordPress NotificationX plugin <= 3.2.1 - Broken Access Control vulnerability5.3

The record

Peak rank
#71 in Mar 2024
Busiest month shown
May 2024, 16 CVEs
Months with a KEV entry
0 since Jun 2021
Monthly snapshots
13 since 2021
Wpdeveloper's full record, month by month