Login Request a demo
WP
Product
WP Plugin Manager
by HasThemes · last CVE Nov 13, 2025
2
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 0Medium 2Low 0
Severity
All severities2Critical0High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WP Plugin Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-64271
6.5
0%
Nov 13
WordPress WP Plugin Manager plugin <= 1.4.7 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 1.4.7
CVE-2023-1088
4.3
0%
Mar 27
The WP Plugin Manager WordPress plugin before 1.1.8 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary…
Affected: before 1.1.8
Showing 2