WP
Vendor
WPDeveloper
151
CVEs
0
On KEV
4
New 30D
Products
EA9.8
Essential Addons for Elementor
WPDeveloper
59 CVEs0 on KEV2 new
NO9.8
NotificationX
WPDeveloper
5 CVEs0 on KEV1 new
SC5.4
SchedulePress
WPDeveloper
1 CVEs0 on KEV1 new
EM9.8
EmbedPress
WPDeveloper
28 CVEs0 on KEV0 new
EB9.8
Essential Blocks
Wpdeveloper
25 CVEs0 on KEV0 new
RE9.8
Reviewx
Wpdeveloper
8 CVEs0 on KEV0 new
BE9.0
BetterDocs
WPDeveloper
6 CVEs0 on KEV0 new
S38.8
Simple 301 Redirects
Wpdeveloper
5 CVEs0 on KEV0 new
BE8.8
BetterLinks
WPDeveloper
3 CVEs0 on KEV0 new
TE7.7
Templately
WPDeveloper
2 CVEs0 on KEV0 new
TC8.8
Twitter Cards Meta
Wpdeveloper
2 CVEs0 on KEV0 new
TT5.4
Typing Text
WPDeveloper
2 CVEs0 on KEV0 new
BP6.5
Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More
WPDeveloper
1 CVEs0 on KEV0 new
CB4.3
Countdown Block
Wpdeveloper
1 CVEs0 on KEV0 new
EB9.8
Essential Blocks Pro
Wpdeveloper
1 CVEs0 on KEV0 new
PS5.4
Parallax Slider Block
Wpdeveloper
1 CVEs0 on KEV0 new
TO6.5
Table Of Contents Block
WPDeveloper
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-51021 New | NO NotificationX WPDeveloper | 8.2 | Oct 22 | NotificationX WordPress Plugin < 2.3.12 Unauthenticated SQL Injection via notification REST endpoint |
| CVE-2026-114120 | SC SchedulePress WPDeveloper | 5.4 | Oct 21 | SchedulePress before 5.3.5 Missing Authorization via wpsp_el_editor_form AJAX Action |
| CVE-2026-110898 | EA Essential Addons for Elementor WPDeveloper | 6.4 | Oct 19 | WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerability |
| CVE-2026-102394 | EA Essential Addons for Elementor WPDeveloper | 6.5 | Oct 1 | WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-81777 | EA Essential Addons for Elementor WPDeveloper | 5.3 | Aug 28 | WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability |
| CVE-2026-66667 | TE Templately WPDeveloper | 7.1 | Aug 18 | WordPress Templately plugin <= 3.7.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-66645 | TO Table Of Contents Block WPDeveloper | 6.5 | Aug 18 | WordPress Table Of Contents Block plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-61961 | EM EmbedPress WPDeveloper | 7.1 | Aug 6 | WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-65562 | BE BetterDocs WPDeveloper | 6.5 | Jul 27 | WordPress BetterDocs plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-57364 | BP Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More WPDeveloper | 6.5 | Jul 13 | WordPress Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More plugin <= 2.2.0 - Other Vulnerability Type vulnerability |
| CVE-2026-48872 | EM EmbedPress WPDeveloper | 7.5 | Jun 15 | WordPress EmbedPress plugin <= 4.5.2 - Sensitive Data Exposure vulnerability |
| CVE-2026-25440 | EA Essential Addons for Elementor WPDeveloper | 5.3 | Jun 15 | WordPress Essential Addons for Elementor plugin < 6.6.0 - Broken Access Control vulnerability |
| CVE-2026-42644 | BE BetterDocs WPDeveloper | 5.3 | Apr 29 | WordPress BetterDocs plugin <= 4.3.10 - Sensitive Data Exposure vulnerability |
| CVE-2026-42379 | TE Templately WPDeveloper | 7.7 | Apr 27 | WordPress Templately plugin <= 3.6.1 - Sensitive Data Exposure vulnerability |
| CVE-2025-69092 | EA Essential Addons For Elementor Wpdeveloper | 6.5 | Dec 30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor… |
| CVE-2025-64352 | EA Essential Addons For Elementor Wpdeveloper | 2.7 | Oct 31 | Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Exploiting Incorrectly Configured Access Control… |
| CVE-2025-6244 | EA Essential Addons For Elementor Wpdeveloper | 5.4 | Jul 8 | The Essential Addons for Elementor – Popular Elementor Templates and Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the via `Calendar` And `Business… |
| CVE-2024-9994 | EA Essential Addons For Elementor Wpdeveloper | 5.4 | Jun 7 | The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… |
| CVE-2024-9993 | EA Essential Addons For Elementor Wpdeveloper | 5.4 | Jun 7 | The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… |
| CVE-2025-24752 | EA Essential Addons For Elementor Wpdeveloper | 6.1 | Apr 17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor… |
| CVE-2025-39590 | EA Essential Addons For Elementor Wpdeveloper | 6.5 | Apr 16 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor… |
| CVE-2025-39589 | EA Essential Addons For Elementor Wpdeveloper | 4.3 | Apr 16 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows… |
| CVE-2025-1664 | EB Essential Blocks Wpdeveloper | 5.4 | Mar 8 | The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Parallax slider in all… |
| CVE-2024-13803 | EB Essential Blocks Wpdeveloper | 5.4 | Feb 26 | The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-marker’ parameter in all… |
| CVE-2025-26871 | EB Essential Blocks Wpdeveloper | 8.8 | Feb 25 | Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
| CVE-2025-22683 | NO Notificationx Wpdeveloper | 5.4 | Feb 3 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper NotificationX notificationx allows Stored XSS.This issue affects… |
| CVE-2024-12045 | EB Essential Blocks Wpdeveloper | 4.8 | Jan 8 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting |
| CVE-2025-22315 | TT Typing Text WPDeveloper | 5.4 | Jan 7 | WordPress Typing Text plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2023-45104 | BE BetterLinks WPDeveloper | 8.8 | Jan 2 | WordPress BetterLinks plugin <= 1.6.0 - Broken Access Control vulnerability |
| CVE-2024-56063 | EA Essential Addons for Elementor WPDeveloper | 5.4 | Dec 31 | WordPress Essential Addons for Elementor plugin <= 6.0.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2023-40670 | RE Reviewx Wpdeveloper | 4.3 | Dec 13 | Missing Authorization vulnerability in ReviewX Team ReviewX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from n/a through… |
| CVE-2022-47594 | EB Essential Blocks Wpdeveloper | 6.5 | Dec 13 | Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
| CVE-2023-51360 | EB Essential Blocks Wpdeveloper | 8.8 | Dec 9 | Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
| CVE-2023-51359 | EB Essential Blocks Wpdeveloper | 8.8 | Dec 9 | Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
| CVE-2023-47762 | BE Betterdocs Wpdeveloper | 4.3 | Dec 9 | Missing Authorization vulnerability in WPDeveloper BetterDocs betterdocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BetterDocs:… |
| CVE-2023-47760 | EB Essential Blocks Wpdeveloper | 8.8 | Dec 9 | Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
| CVE-2024-11203 | EM Embedpress Wpdeveloper | 5.4 | Nov 28 | The EmbedPress – Embed PDF, 3D Flipbook, Social Feeds, Google Docs, Vimeo, Wistia, YouTube Videos, Audios, Google Maps in Gutenberg Block & Elementor plugin for WordPress is… |
| CVE-2024-8979 | EA Essential Addons For Elementor Wpdeveloper | 5.7 | Nov 15 | The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in… |
| CVE-2024-8978 | EA Essential Addons For Elementor Wpdeveloper | 5.7 | Nov 15 | The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in… |
| CVE-2024-8961 | EA Essential Addons For Elementor Wpdeveloper | 5.4 | Nov 15 | The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… |
| CVE-2024-51672 | BE Betterlinks Wpdeveloper | 7.2 | Nov 4 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPDeveloper BetterLinks betterlinks allows SQL Injection.This issue affects… |
| CVE-2024-43323 | RE Reviewx Wpdeveloper | 9.8 | Nov 1 | Missing Authorization vulnerability in ReviewX ReviewX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from n/a through 1.6.28 |
| CVE-2024-38707 | EM Embedpress Wpdeveloper | 8.8 | Nov 1 | Missing Authorization vulnerability in WPDeveloper EmbedPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EmbedPress: from n/a… |
| CVE-2024-50461 | EM Embedpress Wpdeveloper | 5.4 | Oct 28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper EmbedPress embedpress allows Stored XSS.This issue affects… |
| CVE-2021-4447 | EA Essential Addons For Elementor Wpdeveloper | 8.8 | Oct 16 | The Essential Addons for Elementor plugin for WordPress is vulnerable to privilege escalation in versions up to and including 4.6.4 due to a lack of restrictions on who can add a… |
| CVE-2021-4446 | EA Essential Addons For Elementor Wpdeveloper | 4.3 | Oct 16 | The Essential Addons for Elementor plugin for WordPress is vulnerable to authorization bypass in versions up to and including 4.6.4 due to missing capability checks and nonce… |
| CVE-2024-47385 | EB Essential Blocks Wpdeveloper | 5.4 | Oct 5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Stored… |
| CVE-2024-8742 | EA Essential Addons For Elementor Wpdeveloper | 5.4 | Sep 13 | The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… |
| CVE-2024-8440 | EA Essential Addons For Elementor Wpdeveloper | 5.4 | Sep 11 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… |
| CVE-2024-43936 | EM Embedpress Wpdeveloper | 5.4 | Aug 29 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper EmbedPress allows Stored XSS.This issue affects… |
| CVE-2024-43328 | EM Embedpress Wpdeveloper | 9.8 | Aug 19 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPDeveloper EmbedPress allows PHP Local File Inclusion.This issue affects… |
| CVE-2024-43129 | BE Betterdocs Wpdeveloper | 8.8 | Aug 13 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPDeveloper BetterDocs allows PHP Local File Inclusion.This issue affects… |
| CVE-2024-7092 | EA Essential Addons For Elementor Wpdeveloper | 5.4 | Aug 13 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… |
| CVE-2024-43227 | BE Betterdocs Wpdeveloper | 5.4 | Aug 12 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper BetterDocs allows Stored XSS.This issue affects… |
| CVE-2024-5595 | EB Essential Blocks Wpdeveloper | 5.4 | Aug 2 | The Essential Blocks WordPress plugin before 4.7.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed,… |
| CVE-2024-39649 | EA Essential Addons For Elementor Wpdeveloper | 5.4 | Aug 1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor… |
| CVE-2023-51375 | EM Embedpress Wpdeveloper | 8.8 | Jun 21 | Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.8.3 |
| CVE-2024-5058 | TT Typing Text Wpdeveloper | 5.4 | Jun 21 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper Typing Text allows Stored XSS.This issue affects Typing… |
| CVE-2024-1565 | EM Embedpress Wpdeveloper | 5.4 | Jun 13 | The EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to Stored… |
| CVE-2024-5189 | EA Essential Addons For Elementor Wpdeveloper | 5.4 | Jun 11 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… |
