CVE Tools
Track your stack

Wpdevteam

45 CVEs tracked since 2023. Since Jun 2023, none of them reached CISA KEV.

Wpdevteam CVEs per month

Jun 2023 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Wpdevteam CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2023-0660
2023-073 or fewer
2023-084 or fewer
2023-093 or fewer
2023-104 or fewer
2023-114 or fewer
2023-124 or fewer
2024-014 or fewer
2024-02100
2024-0390
2024-0490
2024-05110
2024-064 or fewer
2024-074 or fewer
2024-084 or fewer
2024-093 or fewer
2024-104 or fewer
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Wpdevteam's monthly top three, with their CVEs summed over those months.

  1. Essential Addons For Elementor – Popular Elementor Templates & Widgets234 months
  2. Embedpress – Pdf Embedder, Embed Youtube Videos, 3d Flipbook, Social Feeds, Docs & More115 months
  3. Gutenberg Essential Blocks – Page Builder For Gutenberg Blocks & Patterns83 months
  4. Betterdocs – Knowledge Base Docs & Faq Solution For Elementor & Block Editor11 month
  5. Notificationx – Fomo, Live Sales Notification, Woocommerce Sales Popup, Gdpr, Social Proof, Announcement Banner & Floating Notification Bar11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Wpdevteam.

  1. CVE-2026-109985xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'post_content' Parameter6.4
  2. CVE-2026-109513NotificationX <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via 'name' Parameter via popup-submit REST Route7.2
  3. CVE-2026-110721NotificationX <= 3.3.3 - Missing Authorization to Unauthenticated Arbitrary Content Injection via 'nx_id' Parameter on /popup-submit REST Route5.3
  4. CVE-2026-92727EmbedPress <= 4.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slidesShow' Block Attribute6.4
  5. CVE-2026-96256Gutenberg Essential Blocks <= 6.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker' Attribute6.4
  6. CVE-2026-89330EmbedPress <= 4.6.5 - Reflected Cross-Site Scripting via 'hash' and 'unique' Parameters6.1
  7. CVE-2026-75980BetterDocs <= 4.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading 'id' Attribute in Post Content6.4
  8. CVE-2026-19801BetterLinks <= 3.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Short URL Creation via create_fbs_link AJAX Action4.3
  9. CVE-2026-18438Templately <= 3.7.1 - Authenticated (Contributor+) Arbitrary File Upload to Remote Code Execution via Gutenberg Cloud Import Attachment Filename Mismatch8.8
  10. CVE-2026-15145Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget6.4
  11. CVE-2026-15156Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reading Progress Global Color Settings6.4
  12. CVE-2026-15155Essential Addons for Elementor <= 6.6.10 - Authenticated (Contributor+) Account Takeover via Email Header Injection8.8
  13. CVE-2026-15104BetterDocs <= 4.6.0 - Authenticated (Custom+) SQL Injection via 'lang' Parameter6.5
  14. CVE-2026-6459Essential Addons for Elementor <= 6.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via Event Calendar Widget Popup6.4
  15. CVE-2026-10833Gutenberg Essential Blocks - Page Builder for Gutenberg Blocks & Patterns <= 6.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'configurablePrefix' Block Attribute6.4

The record

Peak rank
#76 in Feb 2024
Busiest month shown
May 2024, 11 CVEs
Months with a KEV entry
0 since Jun 2023
Monthly snapshots
5 since 2023
Wpdevteam's full record, month by month