WP
Product
WPComplete
by stellarwp · last CVE Sep 19, 2026
4
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 4Low 0
Watch

Add WPComplete to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-58974
6.5
0%
Sep 22
WordPress WPComplete Plugin <= 2.9.5.2 - Cross Site Scripting (XSS) Vulnerability
Affected: through 2.9.5.2
CVE-2025-50046
6.5
0%
Jun 20
WordPress WPComplete plugin <= 2.9.5 - Cross Site Scripting (XSS) Vulnerability
Affected: through 2.9.5
CVE-2026-77820
6.4
0%
Sep 19
WPComplete <= 2.9.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'empty' Shortcode Attribute
Affected: through 2.9.9.0
CVE-2025-49906
5.3
0%
Oct 22
WordPress WPComplete plugin <= 2.9.5.3 - Broken Access Control vulnerability
Affected: through 2.9.5.3
Showing 4