CVE Tools
Track your stack

Wpweb

12 CVEs tracked since 2024. Since Jul 2024, none of them reached CISA KEV.

Wpweb CVEs per month

Jul 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Wpweb CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2024-07120
2024-084 or fewer
2024-093 or fewer
2024-104 or fewer
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Wpweb's monthly top three, with their CVEs summed over those months.

  1. Social Auto Poster71 month
  2. Woocommerce - Social Login31 month
  3. Woocommerce - Pdf Vouchers11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Wpweb.

  1. CVE-2026-8457WooCommerce - Social Login <= 2.8.7 - Unauthenticated Authentication Bypass via Forged Apple 'id_token' JWT9.8
  2. CVE-2025-68547WordPress Follow My Blog Post plugin <= 2.4.0 - Arbitrary Content Deletion vulnerability7.5
  3. CVE-2025-64258WordPress Follow My Blog Post plugin <= 2.3.9 - Sensitive Data Exposure vulnerability7.5
  4. CVE-2025-39472WordPress WooCommerce Social Login plugin < 2.8.3 - Cross Site Request Forgery (CSRF) vulnerability4.3
  5. CVE-2024-56265WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Cross Site Scripting (XSS) vulnerability7.1
  6. CVE-2024-54383WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Broken Authentication vulnerability9.8
  7. CVE-2024-10114Social Login - WordPress / WooCommerce Plugin <= 2.7.7 - Authentication Bypass via WordPress.com OAuth provider8.1
  8. CVE-2024-49272WordPress Social Auto Poster plugin <= 5.3.15 - Cross Site Request Forgery (CSRF) vulnerability4.3
  9. CVE-2024-47369WordPress Social Auto Poster plugin <= 5.3.15 - Reflected Cross Site Scripting (XSS) vulnerability7.1
  10. CVE-2024-43131WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated Arbitrary Post/Page Deletion vulnerability7.5
  11. CVE-2024-39651WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Arbitrary File Deletion vulnerability8.6
  12. CVE-2024-7503WooCommerce - Social Login <= 2.7.5 - Authentication Bypass to Account Takeover9.8
  13. CVE-2024-6751Social Auto Poster <= 5.3.14 - Cross-Site Request Forgery via Multiple Functions6.3
  14. CVE-2024-6755Social Auto Poster <= 5.3.14 - Missing Authorization to Unauthenticated Arbitrary Post Deletion6.5
  15. CVE-2024-7027WooCommerce - PDF Vouchers <= 4.9.3 - Authentication Bypass to Voucher Vendor7.3

The record

Peak rank
#66 in Jul 2024
Busiest month shown
Jul 2024, 12 CVEs
Months with a KEV entry
0 since Jul 2024
Monthly snapshots
1 since 2024
Wpweb's full record, month by month