WP
Vendor
WPDeveloper
23 products with CVEs on record
173
CVEs
0
On KEV
4
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2022-51021
NO
NotificationX
WPDeveloper
8.2
0%
Oct 22NotificationX WordPress Plugin < 2.3.12 Unauthenticated SQL Injection via notification REST endpoint
CVE-2026-114120
SC
SchedulePress
WPDeveloper
5.4
0%
Oct 21SchedulePress before 5.3.5 Missing Authorization via wpsp_el_editor_form AJAX Action
CVE-2026-110898
EA
Essential Addons for Elementor
WPDeveloper
6.4
0%
Oct 19WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerability
CVE-2026-102394
EA
Essential Addons for Elementor
WPDeveloper
6.5
0%
Oct 1WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-81777
EA
Essential Addons for Elementor
WPDeveloper
5.3
0%
Aug 28WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability
CVE-2026-66667
TE
Templately
WPDeveloper
7.1
0%
Aug 18WordPress Templately plugin <= 3.7.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66645
TO
Table Of Contents Block
WPDeveloper
6.5
0%
Aug 18WordPress Table Of Contents Block plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-61961
EM
EmbedPress
WPDeveloper
7.1
0%
Aug 6WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65562
BE
BetterDocs
WPDeveloper
6.5
0%
Jul 27WordPress BetterDocs plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57364
BP
Better Payment – Instant Payments, Donations, Fundraising with Subscriptions &amp; More
WPDeveloper
6.5
0%
Jul 13WordPress Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More plugin <= 2.2.0 - Other Vulnerability Type vulnerability
CVE-2026-48872
EM
EmbedPress
WPDeveloper
7.5
0%
Jun 15WordPress EmbedPress plugin <= 4.5.2 - Sensitive Data Exposure vulnerability
CVE-2026-25440
EA
Essential Addons for Elementor
WPDeveloper
5.3
0%
Jun 15WordPress Essential Addons for Elementor plugin < 6.6.0 - Broken Access Control vulnerability
CVE-2026-42644
BE
BetterDocs
WPDeveloper
5.3
0%
Apr 29WordPress BetterDocs plugin <= 4.3.10 - Sensitive Data Exposure vulnerability
CVE-2026-42379
TE
Templately
WPDeveloper
7.7
0%
Apr 27WordPress Templately plugin <= 3.6.1 - Sensitive Data Exposure vulnerability
CVE-2026-27042
NO
NotificationX
WPDeveloper
5.3
0%
Feb 19WordPress NotificationX plugin <= 3.2.1 - Broken Access Control vulnerability
CVE-2026-23543
EA
Essential Addons for Elementor
WPDeveloper
5.3
0%
Feb 19WordPress Essential Addons for Elementor plugin <= 6.5.5 - Broken Access Control vulnerability
CVE-2025-69092
EA
Essential Addons for Elementor
WPDeveloper
6.5
0%
Dec 30WordPress Essential Addons for Elementor plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-64352
EA
Essential Addons for Elementor
WPDeveloper
2.7
0%
Oct 31WordPress Essential Addons for Elementor plugin <= 6.2.4 - Broken Access Control vulnerability
CVE-2025-49408
TE
Templately
WPDeveloper
10.0
0%
Aug 20WordPress Templately Plugin <= 3.2.7 - Sensitive Data Exposure Vulnerability
CVE-2025-6244
EA
Essential Addons For Elementor
Wpdeveloper
5.4
0%
Jul 8Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Calendar` And `Business Reviews` Widgets
CVE-2024-9993
EA
Essential Addons For Elementor
Wpdeveloper
5.4
0%
Jun 7Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Event Calendar Widget
CVE-2024-9994
EA
Essential Addons For Elementor
Wpdeveloper
5.4
0%
Jun 7Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Pricing Table Widget
CVE-2025-24752
EA
Essential Addons for Elementor
WPDeveloper
6.1
1%
Apr 17WordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-39589
EA
Essential Addons for Elementor
WPDeveloper
4.3
0%
Apr 16WordPress Essential Addons for Elementor plugin <= 6.1.9 - Sensitive Data Exposure Vulnerability
CVE-2025-39590
EA
Essential Addons for Elementor
WPDeveloper
6.5
0%
Apr 16WordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-25086
SM
Secret Meta
WPDeveloper
7.1
0%
Mar 27WordPress Secret Meta plugin <= 1.2.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-1664
EB
Essential Blocks
Wpdeveloper
5.4
0%
Mar 8Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-13803
EB
Essential Blocks
Wpdeveloper
5.4
0%
Feb 26Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-26871
EB
Essential Blocks for Gutenberg
WPDeveloper
8.8
0%
Feb 25WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerability
CVE-2025-22696
DB
Document Block – Upload & Embed Docs
WPDeveloper
5.4
0%
Feb 4WordPress Document Block – Upload & Embed Docs, PDF, PPT, XLS or Any Documents plugin <= 1.1.0 - Broken Access Control vulnerability
CVE-2025-22683
NO
NotificationX
WPDeveloper
5.4
0%
Feb 3WordPress NotificationX plugin <= 2.9.5 - Cross Site Scripting (XSS) vulnerability
CVE-2024-12045
EB
Essential Blocks
Wpdeveloper
4.8
0%
Jan 8Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting
CVE-2025-22315
TT
Typing Text
WPDeveloper
5.4
0%
Jan 7WordPress Typing Text plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability
CVE-2023-45104
BE
BetterLinks
WPDeveloper
8.8
0%
Jan 2WordPress BetterLinks plugin <= 1.6.0 - Broken Access Control vulnerability
CVE-2024-56063
EA
Essential Addons for Elementor
WPDeveloper
5.4
0%
Dec 31WordPress Essential Addons for Elementor plugin <= 6.0.7 - Cross Site Scripting (XSS) vulnerability
CVE-2023-40670
RE
Reviewx
Wpdeveloper
4.3
0%
Dec 13WordPress ReviewX plugin <= 1.6.17 - Broken Access Control vulnerability
CVE-2022-47594
EB
Essential Blocks for Gutenberg
WPDeveloper
6.5
0%
Dec 13WordPress Essential Blocks for Gutenberg plugin <= 3.8.5 - Broken Access Control
CVE-2023-47760
EB
Essential Blocks for Gutenberg
WPDeveloper
8.8
0%
Dec 9WordPress Essential Blocks plugin <= 4.2.0 - Broken Access Control vulnerability
CVE-2023-47761
S3
Simple 301 Redirects by BetterLinks
WPDeveloper
4.3
0%
Dec 9WordPress Simple 301 Redirects by BetterLinks plugin <= 2.0.7 - Broken Access Control vulnerability
CVE-2023-47762
BE
BetterDocs
WPDeveloper
4.3
0%
Dec 9WordPress BetterDocs plugin <= 2.5.2 - Broken Access Control vulnerability
CVE-2023-51360
EB
Essential Blocks for Gutenberg
WPDeveloper
8.8
1%
Dec 9WordPress Essential Blocks plugin <= 4.2.0 - Multiple Subscriber+ Broken Access Control vulnerability
CVE-2023-51359
EB
Essential Blocks for Gutenberg
WPDeveloper
8.8
1%
Dec 9WordPress Essential Blocks plugin <= 4.2.0 - Multiple Contributor+ Broken Access Control vulnerability
CVE-2024-11203
EM
Embedpress
Wpdeveloper
5.4
0%
Nov 28EmbedPress – Embed PDF, 3D Flipbook, Social Feeds, Google Docs, Vimeo, Wistia, YouTube Videos, Audios, Google Maps in Gutenberg Block & Elementor <= 4.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'provider_name'
CVE-2024-8978
EA
Essential Addons For Elementor
Wpdeveloper
5.7
0%
Nov 15Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Contributor+) Sensitive Information Exposure
CVE-2024-8979
EA
Essential Addons For Elementor
Wpdeveloper
5.7
1%
Nov 15Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation
CVE-2024-8961
EA
Essential Addons For Elementor
Wpdeveloper
5.4
0%
Nov 15Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-51672
BE
BetterLinks
WPDeveloper
7.2
0%
Nov 4WordPress BetterLinks plugin <= 2.1.7 - SQL Injection vulnerability
CVE-2024-38707
EM
EmbedPress
WPDeveloper
8.8
0%
Nov 1WordPress EmbedPress plugin <= 4.0.4 - Broken Access Control vulnerability
CVE-2024-43323
RE
Reviewx
Wpdeveloper
9.8
0%
Nov 1WordPress ReviewX plugin <= 1.6.28 - Broken Access Control vulnerability
CVE-2024-47308
TE
Templately
WPDeveloper
9.8
2%
Nov 1WordPress Templately plugin <= 3.1.2 - Broken Access Control vulnerability
CVE-2024-50423
TE
Templately
WPDeveloper
5.4
0%
Oct 29WordPress Templately plugin <= 3.1.5 - Broken Access Control vulnerability
CVE-2024-50424
TE
Templately
WPDeveloper
6.5
0%
Oct 29WordPress Templately plugin <= 3.1.5 - Broken Access Control vulnerability
CVE-2024-50461
EM
EmbedPress
WPDeveloper
5.4
0%
Oct 28WordPress EmbedPress plugin <= 4.0.14 - Cross Site Scripting (XSS) vulnerability
CVE-2021-4447
EA
Essential Addons For Elementor
Wpdeveloper
8.8
0%
Oct 16Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation
CVE-2021-4446
EA
Essential Addons For Elementor
Wpdeveloper
4.3
0%
Oct 16Essential Addons for Elementor <= 4.6.4 - Missing Authorization
CVE-2024-47385
EB
Essential Blocks for Gutenberg
WPDeveloper
5.4
0%
Oct 5WordPress Essential Blocks plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability
CVE-2024-8742
EA
Essential Addons For Elementor
Wpdeveloper
5.4
0%
Sep 13Essential Addons for Elementor <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery Widget
CVE-2024-8440
EA
Essential Addons For Elementor
Wpdeveloper
5.4
0%
Sep 11Essential Addons for Elementor -- Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget
CVE-2024-43936
EM
EmbedPress
WPDeveloper
5.4
0%
Aug 29WordPress EmbedPress plugin <= 4.0.8 - Cross Site Scripting (XSS) vulnerability
CVE-2024-43328
EM
EmbedPress
WPDeveloper
9.8
0%
Aug 19WordPress EmbedPress plugin <= 4.0.9 - Local File Inclusion vulnerability