WP
Vendor
WPDeveloper
173
CVEs
0
On KEV
4
New 30D
Products
EA9.8
Essential Addons for Elementor
WPDeveloper
60 CVEs0 on KEV2 new
NO9.8
NotificationX
WPDeveloper
6 CVEs0 on KEV1 new
SC6.5
SchedulePress
WPDeveloper
3 CVEs0 on KEV1 new
EM9.8
EmbedPress
WPDeveloper
28 CVEs0 on KEV0 new
EB9.8
Essential Blocks
Wpdeveloper
25 CVEs0 on KEV0 new
EB8.8
Essential Blocks for Gutenberg
WPDeveloper
8 CVEs0 on KEV0 new
RE9.8
Reviewx
Wpdeveloper
8 CVEs0 on KEV0 new
BE9.0
BetterDocs
WPDeveloper
6 CVEs0 on KEV0 new
TE10.0
Templately
WPDeveloper
6 CVEs0 on KEV0 new
S38.8
Simple 301 Redirects
Wpdeveloper
5 CVEs0 on KEV0 new
BE8.8
BetterLinks
WPDeveloper
3 CVEs0 on KEV0 new
EA8.8
Essential Addons for Elementor Pro
WPDeveloper
2 CVEs0 on KEV0 new
TC8.8
Twitter Cards Meta
Wpdeveloper
2 CVEs0 on KEV0 new
TT5.4
Typing Text
WPDeveloper
2 CVEs0 on KEV0 new
BP6.5
Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More
WPDeveloper
1 CVEs0 on KEV0 new
CB4.3
Countdown Block
Wpdeveloper
1 CVEs0 on KEV0 new
DB5.4
Document Block – Upload & Embed Docs
WPDeveloper
1 CVEs0 on KEV0 new
EB9.8
Essential Blocks Pro
Wpdeveloper
1 CVEs0 on KEV0 new
PS5.4
Parallax Slider Block
WPDeveloper
1 CVEs0 on KEV0 new
RM9.8
ReviewX – Multi-criteria Rating & Reviews for WooCommerce
WPDeveloper
1 CVEs0 on KEV0 new
SM7.1
Secret Meta
WPDeveloper
1 CVEs0 on KEV0 new
S34.3
Simple 301 Redirects by BetterLinks
WPDeveloper
1 CVEs0 on KEV0 new
TO6.5
Table Of Contents Block
WPDeveloper
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-51021 | NO NotificationX WPDeveloper | 8.2 | Oct 22 | NotificationX WordPress Plugin < 2.3.12 Unauthenticated SQL Injection via notification REST endpoint |
| CVE-2026-114120 | SC SchedulePress WPDeveloper | 5.4 | Oct 21 | SchedulePress before 5.3.5 Missing Authorization via wpsp_el_editor_form AJAX Action |
| CVE-2026-110898 | EA Essential Addons for Elementor WPDeveloper | 6.4 | Oct 19 | WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerability |
| CVE-2026-102394 | EA Essential Addons for Elementor WPDeveloper | 6.5 | Oct 1 | WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-81777 | EA Essential Addons for Elementor WPDeveloper | 5.3 | Aug 28 | WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability |
| CVE-2026-66667 | TE Templately WPDeveloper | 7.1 | Aug 18 | WordPress Templately plugin <= 3.7.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-66645 | TO Table Of Contents Block WPDeveloper | 6.5 | Aug 18 | WordPress Table Of Contents Block plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-61961 | EM EmbedPress WPDeveloper | 7.1 | Aug 6 | WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-65562 | BE BetterDocs WPDeveloper | 6.5 | Jul 27 | WordPress BetterDocs plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-57364 | BP Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More WPDeveloper | 6.5 | Jul 13 | WordPress Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More plugin <= 2.2.0 - Other Vulnerability Type vulnerability |
| CVE-2026-48872 | EM EmbedPress WPDeveloper | 7.5 | Jun 15 | WordPress EmbedPress plugin <= 4.5.2 - Sensitive Data Exposure vulnerability |
| CVE-2026-25440 | EA Essential Addons for Elementor WPDeveloper | 5.3 | Jun 15 | WordPress Essential Addons for Elementor plugin < 6.6.0 - Broken Access Control vulnerability |
| CVE-2026-42644 | BE BetterDocs WPDeveloper | 5.3 | Apr 29 | WordPress BetterDocs plugin <= 4.3.10 - Sensitive Data Exposure vulnerability |
| CVE-2026-42379 | TE Templately WPDeveloper | 7.7 | Apr 27 | WordPress Templately plugin <= 3.6.1 - Sensitive Data Exposure vulnerability |
| CVE-2026-27042 | NO NotificationX WPDeveloper | 5.3 | Feb 19 | WordPress NotificationX plugin <= 3.2.1 - Broken Access Control vulnerability |
| CVE-2026-23543 | EA Essential Addons for Elementor WPDeveloper | 5.3 | Feb 19 | WordPress Essential Addons for Elementor plugin <= 6.5.5 - Broken Access Control vulnerability |
| CVE-2025-69092 | EA Essential Addons for Elementor WPDeveloper | 6.5 | Dec 30 | WordPress Essential Addons for Elementor plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-64352 | EA Essential Addons for Elementor WPDeveloper | 2.7 | Oct 31 | WordPress Essential Addons for Elementor plugin <= 6.2.4 - Broken Access Control vulnerability |
| CVE-2025-49408 | TE Templately WPDeveloper | 10.0 | Aug 20 | WordPress Templately Plugin <= 3.2.7 - Sensitive Data Exposure Vulnerability |
| CVE-2025-6244 | EA Essential Addons For Elementor Wpdeveloper | 5.4 | Jul 8 | Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Calendar` And `Business Reviews` Widgets |
| CVE-2024-9993 | EA Essential Addons For Elementor Wpdeveloper | 5.4 | Jun 7 | Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Event Calendar Widget |
| CVE-2024-9994 | EA Essential Addons For Elementor Wpdeveloper | 5.4 | Jun 7 | Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Pricing Table Widget |
| CVE-2025-24752 | EA Essential Addons for Elementor WPDeveloper | 6.1 | Apr 17 | WordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-39589 | EA Essential Addons for Elementor WPDeveloper | 4.3 | Apr 16 | WordPress Essential Addons for Elementor plugin <= 6.1.9 - Sensitive Data Exposure Vulnerability |
| CVE-2025-39590 | EA Essential Addons for Elementor WPDeveloper | 6.5 | Apr 16 | WordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-25086 | SM Secret Meta WPDeveloper | 7.1 | Mar 27 | WordPress Secret Meta plugin <= 1.2.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-1664 | EB Essential Blocks Wpdeveloper | 5.4 | Mar 8 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-13803 | EB Essential Blocks Wpdeveloper | 5.4 | Feb 26 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2025-26871 | EB Essential Blocks for Gutenberg WPDeveloper | 8.8 | Feb 25 | WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerability |
| CVE-2025-22696 | DB Document Block – Upload & Embed Docs WPDeveloper | 5.4 | Feb 4 | WordPress Document Block – Upload & Embed Docs, PDF, PPT, XLS or Any Documents plugin <= 1.1.0 - Broken Access Control vulnerability |
| CVE-2025-22683 | NO NotificationX WPDeveloper | 5.4 | Feb 3 | WordPress NotificationX plugin <= 2.9.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-12045 | EB Essential Blocks Wpdeveloper | 4.8 | Jan 8 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting |
| CVE-2025-22315 | TT Typing Text WPDeveloper | 5.4 | Jan 7 | WordPress Typing Text plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2023-45104 | BE BetterLinks WPDeveloper | 8.8 | Jan 2 | WordPress BetterLinks plugin <= 1.6.0 - Broken Access Control vulnerability |
| CVE-2024-56063 | EA Essential Addons for Elementor WPDeveloper | 5.4 | Dec 31 | WordPress Essential Addons for Elementor plugin <= 6.0.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2023-40670 | RE Reviewx Wpdeveloper | 4.3 | Dec 13 | WordPress ReviewX plugin <= 1.6.17 - Broken Access Control vulnerability |
| CVE-2022-47594 | EB Essential Blocks for Gutenberg WPDeveloper | 6.5 | Dec 13 | WordPress Essential Blocks for Gutenberg plugin <= 3.8.5 - Broken Access Control |
| CVE-2023-47760 | EB Essential Blocks for Gutenberg WPDeveloper | 8.8 | Dec 9 | WordPress Essential Blocks plugin <= 4.2.0 - Broken Access Control vulnerability |
| CVE-2023-47761 | S3 Simple 301 Redirects by BetterLinks WPDeveloper | 4.3 | Dec 9 | WordPress Simple 301 Redirects by BetterLinks plugin <= 2.0.7 - Broken Access Control vulnerability |
| CVE-2023-47762 | BE BetterDocs WPDeveloper | 4.3 | Dec 9 | WordPress BetterDocs plugin <= 2.5.2 - Broken Access Control vulnerability |
| CVE-2023-51360 | EB Essential Blocks for Gutenberg WPDeveloper | 8.8 | Dec 9 | WordPress Essential Blocks plugin <= 4.2.0 - Multiple Subscriber+ Broken Access Control vulnerability |
| CVE-2023-51359 | EB Essential Blocks for Gutenberg WPDeveloper | 8.8 | Dec 9 | WordPress Essential Blocks plugin <= 4.2.0 - Multiple Contributor+ Broken Access Control vulnerability |
| CVE-2024-11203 | EM Embedpress Wpdeveloper | 5.4 | Nov 28 | EmbedPress – Embed PDF, 3D Flipbook, Social Feeds, Google Docs, Vimeo, Wistia, YouTube Videos, Audios, Google Maps in Gutenberg Block & Elementor <= 4.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'provider_name' |
| CVE-2024-8978 | EA Essential Addons For Elementor Wpdeveloper | 5.7 | Nov 15 | Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Contributor+) Sensitive Information Exposure |
| CVE-2024-8979 | EA Essential Addons For Elementor Wpdeveloper | 5.7 | Nov 15 | Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation |
| CVE-2024-8961 | EA Essential Addons For Elementor Wpdeveloper | 5.4 | Nov 15 | Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-51672 | BE BetterLinks WPDeveloper | 7.2 | Nov 4 | WordPress BetterLinks plugin <= 2.1.7 - SQL Injection vulnerability |
| CVE-2024-38707 | EM EmbedPress WPDeveloper | 8.8 | Nov 1 | WordPress EmbedPress plugin <= 4.0.4 - Broken Access Control vulnerability |
| CVE-2024-43323 | RE Reviewx Wpdeveloper | 9.8 | Nov 1 | WordPress ReviewX plugin <= 1.6.28 - Broken Access Control vulnerability |
| CVE-2024-47308 | TE Templately WPDeveloper | 9.8 | Nov 1 | WordPress Templately plugin <= 3.1.2 - Broken Access Control vulnerability |
| CVE-2024-50423 | TE Templately WPDeveloper | 5.4 | Oct 29 | WordPress Templately plugin <= 3.1.5 - Broken Access Control vulnerability |
| CVE-2024-50424 | TE Templately WPDeveloper | 6.5 | Oct 29 | WordPress Templately plugin <= 3.1.5 - Broken Access Control vulnerability |
| CVE-2024-50461 | EM EmbedPress WPDeveloper | 5.4 | Oct 28 | WordPress EmbedPress plugin <= 4.0.14 - Cross Site Scripting (XSS) vulnerability |
| CVE-2021-4447 | EA Essential Addons For Elementor Wpdeveloper | 8.8 | Oct 16 | Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation |
| CVE-2021-4446 | EA Essential Addons For Elementor Wpdeveloper | 4.3 | Oct 16 | Essential Addons for Elementor <= 4.6.4 - Missing Authorization |
| CVE-2024-47385 | EB Essential Blocks for Gutenberg WPDeveloper | 5.4 | Oct 5 | WordPress Essential Blocks plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-8742 | EA Essential Addons For Elementor Wpdeveloper | 5.4 | Sep 13 | Essential Addons for Elementor <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery Widget |
| CVE-2024-8440 | EA Essential Addons For Elementor Wpdeveloper | 5.4 | Sep 11 | Essential Addons for Elementor -- Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget |
| CVE-2024-43936 | EM EmbedPress WPDeveloper | 5.4 | Aug 29 | WordPress EmbedPress plugin <= 4.0.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-43328 | EM EmbedPress WPDeveloper | 9.8 | Aug 19 | WordPress EmbedPress plugin <= 4.0.9 - Local File Inclusion vulnerability |
