WP
Vendor
wpdevteam
115
CVEs
0
On KEV
6
New 30D
Products
NF9.8
NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar
wpdevteam
7 CVEs0 on KEV2 new
GE9.8
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
wpdevteam
23 CVEs0 on KEV1 new
EP6.4
EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents
wpdevteam
2 CVEs0 on KEV1 new
EA6.4
easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution
wpdevteam
1 CVEs0 on KEV1 new
XC6.4
xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN
wpdevteam
1 CVEs0 on KEV1 new
EA8.8
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
49 CVEs0 on KEV0 new
EP7.5
EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more
wpdevteam
17 CVEs0 on KEV0 new
BK6.5
BetterDocs – Knowledge Base Docs & FAQ Solution for Elementor & Block Editor
wpdevteam
5 CVEs0 on KEV0 new
BA6.5
BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot
wpdevteam
2 CVEs0 on KEV0 new
EB9.8
Essential Blocks Pro
wpdevteam
2 CVEs0 on KEV0 new
TE8.8
Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud!
wpdevteam
2 CVEs0 on KEV0 new
BA6.4
BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot
wpdevteam
1 CVEs0 on KEV0 new
BL4.3
BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP
wpdevteam
1 CVEs0 on KEV0 new
EP6.4
EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more
wpdevteam
1 CVEs0 on KEV0 new
SA5.3
SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher
wpdevteam
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-108366 New | EA easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution wpdevteam | 6.4 | Oct 28 | easy.jobs <= 2.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon' Block Attribute |
| CVE-2026-109985 | XC xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN wpdevteam | 6.4 | Oct 17 | xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'post_content' Parameter |
| CVE-2026-109513 | NF NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar wpdevteam | 7.2 | Oct 16 | NotificationX <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via 'name' Parameter via popup-submit REST Route |
| CVE-2026-110721 | NF NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar wpdevteam | 5.3 | Oct 16 | NotificationX <= 3.3.3 - Missing Authorization to Unauthenticated Arbitrary Content Injection via 'nx_id' Parameter on /popup-submit REST Route |
| CVE-2026-92727 | EP EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents wpdevteam | 6.4 | Oct 3 | EmbedPress <= 4.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slidesShow' Block Attribute |
| CVE-2026-96256 | GE Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns wpdevteam | 6.4 | Oct 1 | Gutenberg Essential Blocks <= 6.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker' Attribute |
| CVE-2026-89330 | EP EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents wpdevteam | 6.1 | Sep 18 | EmbedPress <= 4.6.5 - Reflected Cross-Site Scripting via 'hash' and 'unique' Parameters |
| CVE-2026-75980 | BA BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot wpdevteam | 6.4 | Sep 1 | BetterDocs <= 4.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading 'id' Attribute in Post Content |
| CVE-2026-19801 | BL BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP wpdevteam | 4.3 | Aug 25 | BetterLinks <= 3.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Short URL Creation via create_fbs_link AJAX Action |
| CVE-2026-18438 | TE Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! wpdevteam | 8.8 | Aug 15 | Templately <= 3.7.1 - Authenticated (Contributor+) Arbitrary File Upload to Remote Code Execution via Gutenberg Cloud Import Attachment Filename Mismatch |
| CVE-2026-15145 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 6.4 | Jul 21 | Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget |
| CVE-2026-15156 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 6.4 | Jul 21 | Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reading Progress Global Color Settings |
| CVE-2026-15155 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 8.8 | Jul 11 | Essential Addons for Elementor <= 6.6.10 - Authenticated (Contributor+) Account Takeover via Email Header Injection |
| CVE-2026-15104 | BA BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot wpdevteam | 6.5 | Jul 10 | BetterDocs <= 4.6.0 - Authenticated (Custom+) SQL Injection via 'lang' Parameter |
| CVE-2026-6459 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 6.4 | Jul 8 | Essential Addons for Elementor <= 6.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via Event Calendar Widget Popup |
| CVE-2026-10833 | GE Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns wpdevteam | 6.4 | Jun 25 | Gutenberg Essential Blocks - Page Builder for Gutenberg Blocks & Patterns <= 6.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'configurablePrefix' Block Attribute |
| CVE-2026-12157 | BA BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot wpdevteam | 6.4 | Jun 19 | BetterDocs <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'blockId' Block Attribute |
| CVE-2026-7796 | EP EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more wpdevteam | 6.4 | Jun 6 | EmbedPress <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block 'url' Attribute |
| CVE-2026-7665 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 5.3 | Jun 6 | Essential Addons for Elementor <= 6.6.4 - Missing Authorization to Unauthenticated Information Exposure via 'load_more' AJAX Handler |
| CVE-2026-10586 | GE Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns wpdevteam | 7.2 | Jun 4 | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 6.1.3 - Authenticated (Author+) Server-Side Request Forgery |
| CVE-2026-5193 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 6.5 | May 14 | Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.13 - Authenticated (Author+) Limited Privilege Escalation via register_user |
| CVE-2026-4658 | GE Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns wpdevteam | 6.4 | May 2 | Gutenberg Essential Blocks <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes |
| CVE-2026-6393 | BK BetterDocs – Knowledge Base Docs & FAQ Solution for Elementor & Block Editor wpdevteam | 4.3 | Apr 24 | BetterDocs <= 4.3.11 - Missing Authorization to Authenticated (Subscriber+) Unauthorized AI API Usage |
| CVE-2026-3875 | BK BetterDocs – Knowledge Base Docs & FAQ Solution for Elementor & Block Editor wpdevteam | 6.4 | Apr 16 | BetterDocs <= 4.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes |
| CVE-2026-1512 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 6.4 | Feb 14 | Essential Addons for Elementor <= 6.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Box Widget |
| CVE-2026-0554 | NF NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar wpdevteam | 4.3 | Jan 20 | NotificationX <= 3.1.11 - Missing Authorization to Authenticated (Contributor+) Analytics Reset |
| CVE-2025-15380 | NF NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar wpdevteam | 7.2 | Jan 20 | NotificationX <= 3.2.0 - Unauthenticated DOM-Based Cross-Site Scripting via 'nx-preview' |
| CVE-2026-1004 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 5.3 | Jan 16 | Essential Addons for Elementor <= 6.5.5 - Missing Authorization to Unauthenticated Sensitive Information Exposure |
| CVE-2026-0831 | TE Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! wpdevteam | 5.3 | Jan 10 | Templately <= 3.4.8 - Unauthenticated Limited Arbitrary JSON File Write |
| CVE-2025-14980 | BK BetterDocs – Knowledge Base Docs & FAQ Solution for Elementor & Block Editor wpdevteam | 6.5 | Jan 9 | BetterDocs <= 4.3.3 - Authenticated (Contributor+) Sensitive Information Exposure |
| CVE-2025-13977 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 6.4 | Dec 17 | Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2025-11369 | GE Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns wpdevteam | 4.3 | Dec 17 | Essential Blocks <= 5.7.2 - Missing Authorization To Authenticated (Author+) Information Disclosure |
| CVE-2025-11270 | GE Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns wpdevteam | 6.4 | Oct 18 | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2025-11361 | GE Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns wpdevteam | 6.4 | Oct 18 | Essential Blocks <= 5.7.1 - Authenticated (Author+) Server-Side Request Forgery |
| CVE-2025-7499 | BK BetterDocs – Knowledge Base Docs & FAQ Solution for Elementor & Block Editor wpdevteam | 5.3 | Aug 16 | BetterDocs <= 4.1.1 - Missing Authorization to Private And Password-Protected Posts Information Disclosure |
| CVE-2025-8451 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 6.4 | Aug 15 | Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'data-gallery-items' |
| CVE-2025-6244 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 5.4 | Jul 8 | Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Calendar` And `Business Reviews` Widgets |
| CVE-2024-5647 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 6.4 | Jul 3 | Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library |
| CVE-2024-9993 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 5.4 | Jun 7 | Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Event Calendar Widget |
| CVE-2024-9994 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 5.4 | Jun 7 | Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Pricing Table Widget |
| CVE-2025-4682 | GE Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns wpdevteam | 6.4 | May 27 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider and Post Carousel Widgets |
| CVE-2025-1664 | GE Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns wpdevteam | 5.4 | Mar 8 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-13803 | GE Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns wpdevteam | 5.4 | Feb 26 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-12045 | GE Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns wpdevteam | 4.8 | Jan 8 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting |
| CVE-2024-11727 | NF NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar wpdevteam | 4.4 | Dec 12 | NotificationX – Live Sales Notification, WooCommerce Sales Popup, FOMO, Social Proof, Announcement Banner & Floating Notification Top Bar <= 2.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting |
| CVE-2024-11203 | EP EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more wpdevteam | 5.4 | Nov 28 | EmbedPress – Embed PDF, 3D Flipbook, Social Feeds, Google Docs, Vimeo, Wistia, YouTube Videos, Audios, Google Maps in Gutenberg Block & Elementor <= 4.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'provider_name' |
| CVE-2024-8978 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 5.7 | Nov 15 | Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Contributor+) Sensitive Information Exposure |
| CVE-2024-8979 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 5.7 | Nov 15 | Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation |
| CVE-2024-8961 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 5.4 | Nov 15 | Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2021-4447 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 8.8 | Oct 16 | Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation |
| CVE-2021-4446 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 4.3 | Oct 16 | Essential Addons for Elementor <= 4.6.4 - Missing Authorization |
| CVE-2024-8742 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 5.4 | Sep 13 | Essential Addons for Elementor <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery Widget |
| CVE-2024-8440 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 5.4 | Sep 11 | Essential Addons for Elementor -- Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget |
| CVE-2024-7092 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 5.4 | Aug 13 | Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via no_more_items_text Parameter |
| CVE-2024-6557 | SA SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher wpdevteam | 5.3 | Jul 16 | SchedulePress <= 5.1.3 - Unauthenticated Full Path Disclosure |
| CVE-2024-1565 | EP EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more wpdevteam | 5.4 | Jun 13 | EmbedPress <= 3.9.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via PDF Widget URL |
| CVE-2024-5189 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 5.4 | Jun 11 | Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.23 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-5188 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 5.4 | Jun 6 | Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.22 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-5571 | EP EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more wpdevteam | 5.4 | Jun 5 | EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via EmbedPress PDF Widget |
| CVE-2024-5073 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 5.4 | May 30 | Essential Addons for Elementor <= 5.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Feed |
