WP
Vendor
wpdevteam
25
CVEs
0
On KEV
6
New 30D
Products
NF7.2
NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar
wpdevteam
2 CVEs0 on KEV2 new
GE7.2
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
wpdevteam
5 CVEs0 on KEV1 new
EP6.4
EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents
wpdevteam
2 CVEs0 on KEV1 new
EA6.4
easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution
wpdevteam
1 CVEs0 on KEV1 new
XC6.4
xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN
wpdevteam
1 CVEs0 on KEV1 new
EA8.8
Essential Addons for Elementor – Popular Elementor Templates & Widgets
wpdevteam
6 CVEs0 on KEV0 new
BA6.5
BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot
wpdevteam
2 CVEs0 on KEV0 new
BK6.4
BetterDocs – Knowledge Base Docs & FAQ Solution for Elementor & Block Editor
wpdevteam
2 CVEs0 on KEV0 new
BA6.4
BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot
wpdevteam
1 CVEs0 on KEV0 new
BL4.3
BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP
wpdevteam
1 CVEs0 on KEV0 new
EP6.4
EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more
wpdevteam
1 CVEs0 on KEV0 new
TE8.8
Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud!
wpdevteam
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-108366 New | EA easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution wpdevteam | 6.4 | Oct 28 | easy.jobs <= 2.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon' Block Attribute |
| CVE-2026-109985 | XC xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN wpdevteam | 6.4 | Oct 17 | xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'post_content' Parameter |
| CVE-2026-109513 | NF NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar wpdevteam | 7.2 | Oct 16 | NotificationX <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via 'name' Parameter via popup-submit REST Route |
| CVE-2026-110721 | NF NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar wpdevteam | 5.3 | Oct 16 | NotificationX <= 3.3.3 - Missing Authorization to Unauthenticated Arbitrary Content Injection via 'nx_id' Parameter on /popup-submit REST Route |
| CVE-2026-92727 | EP EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents wpdevteam | 6.4 | Oct 3 | EmbedPress <= 4.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slidesShow' Block Attribute |
| CVE-2026-96256 | GE Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns wpdevteam | 6.4 | Oct 1 | Gutenberg Essential Blocks <= 6.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker' Attribute |
| CVE-2026-89330 | EP EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents wpdevteam | 6.1 | Sep 18 | EmbedPress <= 4.6.5 - Reflected Cross-Site Scripting via 'hash' and 'unique' Parameters |
| CVE-2026-75980 | BA BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot wpdevteam | 6.4 | Sep 1 | BetterDocs <= 4.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading 'id' Attribute in Post Content |
| CVE-2026-19801 | BL BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP wpdevteam | 4.3 | Aug 25 | BetterLinks <= 3.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Short URL Creation via create_fbs_link AJAX Action |
| CVE-2026-18438 | TE Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! wpdevteam | 8.8 | Aug 15 | Templately <= 3.7.1 - Authenticated (Contributor+) Arbitrary File Upload to Remote Code Execution via Gutenberg Cloud Import Attachment Filename Mismatch |
| CVE-2026-15145 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 6.4 | Jul 21 | Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget |
| CVE-2026-15156 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 6.4 | Jul 21 | Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reading Progress Global Color Settings |
| CVE-2026-15155 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 8.8 | Jul 11 | Essential Addons for Elementor <= 6.6.10 - Authenticated (Contributor+) Account Takeover via Email Header Injection |
| CVE-2026-15104 | BA BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot wpdevteam | 6.5 | Jul 10 | BetterDocs <= 4.6.0 - Authenticated (Custom+) SQL Injection via 'lang' Parameter |
| CVE-2026-6459 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 6.4 | Jul 8 | Essential Addons for Elementor <= 6.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via Event Calendar Widget Popup |
| CVE-2026-10833 | GE Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns wpdevteam | 6.4 | Jun 25 | Gutenberg Essential Blocks - Page Builder for Gutenberg Blocks & Patterns <= 6.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'configurablePrefix' Block Attribute |
| CVE-2026-12157 | BA BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot wpdevteam | 6.4 | Jun 19 | BetterDocs <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'blockId' Block Attribute |
| CVE-2026-7796 | EP EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more wpdevteam | 6.4 | Jun 6 | EmbedPress <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block 'url' Attribute |
| CVE-2026-7665 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 5.3 | Jun 6 | Essential Addons for Elementor <= 6.6.4 - Missing Authorization to Unauthenticated Information Exposure via 'load_more' AJAX Handler |
| CVE-2026-10586 | GE Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns wpdevteam | 7.2 | Jun 4 | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 6.1.3 - Authenticated (Author+) Server-Side Request Forgery |
| CVE-2026-5193 | EA Essential Addons for Elementor – Popular Elementor Templates & Widgets wpdevteam | 6.5 | May 14 | Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.13 - Authenticated (Author+) Limited Privilege Escalation via register_user |
| CVE-2026-4658 | GE Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns wpdevteam | 6.4 | May 2 | Gutenberg Essential Blocks <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes |
| CVE-2026-6393 | BK BetterDocs – Knowledge Base Docs & FAQ Solution for Elementor & Block Editor wpdevteam | 4.3 | Apr 24 | BetterDocs <= 4.3.11 - Missing Authorization to Authenticated (Subscriber+) Unauthorized AI API Usage |
| CVE-2026-3875 | BK BetterDocs – Knowledge Base Docs & FAQ Solution for Elementor & Block Editor wpdevteam | 6.4 | Apr 16 | BetterDocs <= 4.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes |
| CVE-2024-12045 | GE Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns wpdevteam | 4.8 | Jan 8 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting |