WP
Vendor
wpdevteam
15 products with CVEs on record
115
CVEs
0
On KEV
6
New 30D
Products
NF
NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar
wpdevteam
9.8
7 CVEs0 on KEV2 new
GE
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
wpdevteam
9.8
23 CVEs0 on KEV1 new
EP
EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents
wpdevteam
6.4
2 CVEs0 on KEV1 new
EA
easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution
wpdevteam
6.4
1 CVEs0 on KEV1 new
XC
xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN
wpdevteam
6.4
1 CVEs0 on KEV1 new
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
8.8
49 CVEs0 on KEV0 new
EP
EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more
wpdevteam
7.5
17 CVEs0 on KEV0 new
BK
BetterDocs – Knowledge Base Docs & FAQ Solution for Elementor & Block Editor
wpdevteam
6.5
5 CVEs0 on KEV0 new
BA
BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot
wpdevteam
6.5
2 CVEs0 on KEV0 new
EB
Essential Blocks Pro
wpdevteam
9.8
2 CVEs0 on KEV0 new
TE
Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud!
wpdevteam
8.8
2 CVEs0 on KEV0 new
BA
BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot
wpdevteam
6.4
1 CVEs0 on KEV0 new
BL
BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP
wpdevteam
4.3
1 CVEs0 on KEV0 new
EP
EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more
wpdevteam
6.4
1 CVEs0 on KEV0 new
SA
SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher
wpdevteam
5.3
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-108366
New
EA
easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution
wpdevteam
6.4
0%
Oct 28easy.jobs <= 2.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon' Block Attribute
CVE-2026-109985
XC
xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN
wpdevteam
6.4
0%
Oct 17xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'post_content' Parameter
CVE-2026-109513
NF
NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar
wpdevteam
7.2
0%
Oct 16NotificationX <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via 'name' Parameter via popup-submit REST Route
CVE-2026-110721
NF
NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar
wpdevteam
5.3
0%
Oct 16NotificationX <= 3.3.3 - Missing Authorization to Unauthenticated Arbitrary Content Injection via 'nx_id' Parameter on /popup-submit REST Route
CVE-2026-92727
EP
EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents
wpdevteam
6.4
0%
Oct 3EmbedPress <= 4.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slidesShow' Block Attribute
CVE-2026-96256
GE
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
wpdevteam
6.4
0%
Oct 1Gutenberg Essential Blocks <= 6.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker' Attribute
CVE-2026-89330
EP
EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents
wpdevteam
6.1
0%
Sep 18EmbedPress <= 4.6.5 - Reflected Cross-Site Scripting via 'hash' and 'unique' Parameters
CVE-2026-75980
BA
BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot
wpdevteam
6.4
0%
Sep 1BetterDocs <= 4.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading 'id' Attribute in Post Content
CVE-2026-19801
BL
BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP
wpdevteam
4.3
0%
Aug 25BetterLinks <= 3.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Short URL Creation via create_fbs_link AJAX Action
CVE-2026-18438
TE
Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud!
wpdevteam
8.8
1%
Aug 15Templately <= 3.7.1 - Authenticated (Contributor+) Arbitrary File Upload to Remote Code Execution via Gutenberg Cloud Import Attachment Filename Mismatch
CVE-2026-15145
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
6.4
0%
Jul 21Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget
CVE-2026-15156
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
6.4
0%
Jul 21Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reading Progress Global Color Settings
CVE-2026-15155
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
8.8
1%
Jul 11Essential Addons for Elementor <= 6.6.10 - Authenticated (Contributor+) Account Takeover via Email Header Injection
CVE-2026-15104
BA
BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot
wpdevteam
6.5
0%
Jul 10BetterDocs <= 4.6.0 - Authenticated (Custom+) SQL Injection via 'lang' Parameter
CVE-2026-6459
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
6.4
0%
Jul 8Essential Addons for Elementor <= 6.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via Event Calendar Widget Popup
CVE-2026-10833
GE
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
wpdevteam
6.4
0%
Jun 25Gutenberg Essential Blocks - Page Builder for Gutenberg Blocks & Patterns <= 6.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'configurablePrefix' Block Attribute
CVE-2026-12157
BA
BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot
wpdevteam
6.4
0%
Jun 19BetterDocs <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'blockId' Block Attribute
CVE-2026-7796
EP
EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more
wpdevteam
6.4
0%
Jun 6EmbedPress <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block 'url' Attribute
CVE-2026-7665
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
5.3
7%
Jun 6Essential Addons for Elementor <= 6.6.4 - Missing Authorization to Unauthenticated Information Exposure via 'load_more' AJAX Handler
CVE-2026-10586
GE
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
wpdevteam
7.2
0%
Jun 4Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 6.1.3 - Authenticated (Author+) Server-Side Request Forgery
CVE-2026-5193
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
6.5
0%
May 14Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.13 - Authenticated (Author+) Limited Privilege Escalation via register_user
CVE-2026-4658
GE
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
wpdevteam
6.4
0%
May 2Gutenberg Essential Blocks <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes
CVE-2026-6393
BK
BetterDocs – Knowledge Base Docs & FAQ Solution for Elementor & Block Editor
wpdevteam
4.3
0%
Apr 24BetterDocs <= 4.3.11 - Missing Authorization to Authenticated (Subscriber+) Unauthorized AI API Usage
CVE-2026-3875
BK
BetterDocs – Knowledge Base Docs & FAQ Solution for Elementor & Block Editor
wpdevteam
6.4
0%
Apr 16BetterDocs <= 4.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
CVE-2026-1512
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
6.4
0%
Feb 14Essential Addons for Elementor <= 6.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Box Widget
CVE-2026-0554
NF
NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar
wpdevteam
4.3
0%
Jan 20NotificationX <= 3.1.11 - Missing Authorization to Authenticated (Contributor+) Analytics Reset
CVE-2025-15380
NF
NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar
wpdevteam
7.2
0%
Jan 20NotificationX <= 3.2.0 - Unauthenticated DOM-Based Cross-Site Scripting via 'nx-preview'
CVE-2026-1004
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
5.3
0%
Jan 16Essential Addons for Elementor <= 6.5.5 - Missing Authorization to Unauthenticated Sensitive Information Exposure
CVE-2026-0831
TE
Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud!
wpdevteam
5.3
0%
Jan 10Templately <= 3.4.8 - Unauthenticated Limited Arbitrary JSON File Write
CVE-2025-14980
BK
BetterDocs – Knowledge Base Docs & FAQ Solution for Elementor & Block Editor
wpdevteam
6.5
0%
Jan 9BetterDocs <= 4.3.3 - Authenticated (Contributor+) Sensitive Information Exposure
CVE-2025-13977
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
6.4
0%
Dec 17Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-11369
GE
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
wpdevteam
4.3
0%
Dec 17Essential Blocks <= 5.7.2 - Missing Authorization To Authenticated (Author+) Information Disclosure
CVE-2025-11270
GE
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
wpdevteam
6.4
0%
Oct 18Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-11361
GE
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
wpdevteam
6.4
0%
Oct 18Essential Blocks <= 5.7.1 - Authenticated (Author+) Server-Side Request Forgery
CVE-2025-7499
BK
BetterDocs – Knowledge Base Docs & FAQ Solution for Elementor & Block Editor
wpdevteam
5.3
0%
Aug 16BetterDocs <= 4.1.1 - Missing Authorization to Private And Password-Protected Posts Information Disclosure
CVE-2025-8451
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
6.4
0%
Aug 15Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'data-gallery-items'
CVE-2025-6244
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
5.4
0%
Jul 8Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Calendar` And `Business Reviews` Widgets
CVE-2024-5647
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
6.4
0%
Jul 3Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library
CVE-2024-9993
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
5.4
0%
Jun 7Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Event Calendar Widget
CVE-2024-9994
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
5.4
0%
Jun 7Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Pricing Table Widget
CVE-2025-4682
GE
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
wpdevteam
6.4
0%
May 27Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider and Post Carousel Widgets
CVE-2025-1664
GE
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
wpdevteam
5.4
0%
Mar 8Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-13803
GE
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
wpdevteam
5.4
0%
Feb 26Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-12045
GE
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
wpdevteam
4.8
0%
Jan 8Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting
CVE-2024-11727
NF
NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar
wpdevteam
4.4
0%
Dec 12NotificationX – Live Sales Notification, WooCommerce Sales Popup, FOMO, Social Proof, Announcement Banner & Floating Notification Top Bar <= 2.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
CVE-2024-11203
EP
EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more
wpdevteam
5.4
0%
Nov 28EmbedPress – Embed PDF, 3D Flipbook, Social Feeds, Google Docs, Vimeo, Wistia, YouTube Videos, Audios, Google Maps in Gutenberg Block & Elementor <= 4.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'provider_name'
CVE-2024-8978
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
5.7
0%
Nov 15Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Contributor+) Sensitive Information Exposure
CVE-2024-8979
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
5.7
1%
Nov 15Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation
CVE-2024-8961
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
5.4
0%
Nov 15Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2021-4447
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
8.8
0%
Oct 16Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation
CVE-2021-4446
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
4.3
0%
Oct 16Essential Addons for Elementor <= 4.6.4 - Missing Authorization
CVE-2024-8742
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
5.4
0%
Sep 13Essential Addons for Elementor <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery Widget
CVE-2024-8440
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
5.4
0%
Sep 11Essential Addons for Elementor -- Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget
CVE-2024-7092
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
5.4
0%
Aug 13Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via no_more_items_text Parameter
CVE-2024-6557
SA
SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher
wpdevteam
5.3
0%
Jul 16SchedulePress <= 5.1.3 - Unauthenticated Full Path Disclosure
CVE-2024-1565
EP
EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more
wpdevteam
5.4
0%
Jun 13EmbedPress <= 3.9.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via PDF Widget URL
CVE-2024-5189
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
5.4
0%
Jun 11Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-5188
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
5.4
0%
Jun 6Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-5571
EP
EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more
wpdevteam
5.4
0%
Jun 5EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via EmbedPress PDF Widget
CVE-2024-5073
EA
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
5.4
0%
May 30Essential Addons for Elementor <= 5.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Feed