CVE-2026-42854 |
critical
|
9.8 |
0.0057
|
espressif |
arduino-esp32 |
< 3.3.8
|
|
CVE-2026-61992 |
critical
|
9.8 |
—
|
Von Eyal Fitoussi |
GEO my WordPress |
n/a
|
|
CVE-2026-62012 |
critical
|
9.8 |
—
|
ThemeREX |
Coinpress |
n/a
|
|
CVE-2026-39795 |
critical
|
9.3 |
0.0030
|
brewlabs |
SendPress Newsletters |
0
|
|
CVE-2026-44643 |
critical
|
9.3 |
0.0048
|
peerigon |
angular-expressions |
< 1.5.2
|
|
CVE-2026-33807 |
critical
|
9.1 |
0.0043
|
fastify |
fastify\/express |
< 4.0.5
|
|
CVE-2026-33808 |
critical
|
9.1 |
0.0048
|
fastify |
fastify\/express |
< 4.0.5
|
|
CVE-2026-92797 |
high
|
8.8 |
0.0015
|
MemberPress |
Memberpress |
0
|
|
CVE-2026-41429 |
high
|
8.8 |
0.0031
|
espressif |
arduino-esp32 |
< 3.3.8
|
|
CVE-2026-116868 |
high
|
8.8 |
—
|
BuddyDev |
BuddyPress Xprofile Custom Field Types |
n/a
|
|
CVE-2017-20243 |
high
|
8.8 |
0.0026
|
gurutechteam |
Car Park Booking WordPress Plugin |
13 October 17
|
|
CVE-2026-55826 |
high
|
8.7 |
0.0034
|
stape-io |
gtm-server-side-wordpress-plugin |
>= 2.0.0, < 2.1.48
|
|
CVE-2018-25308 |
high
|
8.7 |
0.0074
|
donmik |
Buddypress Xprofile Custom Fields Type |
2.6.3
|
|
CVE-2026-111850 |
high
|
8.5 |
0.0021
|
BuddyPress |
BuddyPress |
0
|
|
CVE-2026-115965 |
high
|
8.5 |
—
|
BuddyPress |
BuddyPress |
0
|
|
CVE-2026-5821 |
high
|
8.1 |
0.0076
|
elemntor |
Image Optimizer – Compress Images and Convert to WebP or AVIF |
0
|
|
CVE-2026-40931 |
high
|
7.8 |
0.0026
|
node-modules |
compressing |
< 1.10.5
|
|
CVE-2026-34485 |
high
|
7.8 |
0.0017
|
Nokia |
Nokia 1830 Global Express (GX) |
G42, GX G31, GX G32, GX G34 releases prior to GX r9.0
|
|
CVE-2026-42349 |
high
|
7.6 |
0.0025
|
clerk |
clerk\/express |
< 1.7.79
|
|
CVE-2026-93855 |
high
|
7.5 |
0.0041
|
brewlabs |
SendPress Newsletters |
0
|
|
CVE-2026-15323 |
high
|
7.5 |
0.0086
|
King-Theme |
Product Designer for WooCommerce WordPress | Lumise |
0
|
|
CVE-2026-116393 |
high
|
7.5 |
0.0032
|
iHomefinder, Inc. |
Optima Express |
0
|
|
CVE-2026-42855 |
high
|
7.5 |
0.0035
|
espressif |
arduino-esp32 |
< 3.3.8
|
|
CVE-2026-114193 |
high
|
7.5 |
—
|
Eyal Fitoussi |
GEO my WordPress |
0
|
|
CVE-2026-115599 |
high
|
7.5 |
—
|
ThimPress |
LearnPress |
0
|
|
CVE-2026-111820 |
high
|
7.2 |
0.0024
|
deconf |
Analytics Insights – Google Analytics Dashboard for WordPress |
0
|
|
CVE-2026-110662 |
high
|
7.2 |
0.0031
|
mxchat |
MxChat – AI Chatbot & Content Generation for WordPress |
0
|
|
CVE-2026-116390 |
high
|
7.2 |
0.0030
|
stepasyuk |
Filter Everything — WordPress & WooCommerce Filters |
0
|
|
CVE-2026-96767 |
high
|
7.2 |
—
|
webaways |
NEX-Forms – Ultimate Forms Plugin for WordPress |
0
|
|
CVE-2026-110524 |
medium
|
6.8 |
0.0032
|
Unknown |
Copy Anything to Clipboard for WordPress |
0
< 5.5.5
|
|
CVE-2026-34484 |
medium
|
6.7 |
0.0014
|
Nokia |
Nokia 1830 Global Express (GX) |
G42, GX G31, GX G32, GX G34 releases prior to GX r9.0.
|
|
CVE-2026-41317 |
medium
|
6.6 |
0.0016
|
frappe |
press |
< 0.9.0
|
|
CVE-2026-115610 |
medium
|
6.5 |
—
|
PublishPress |
PublishPress Authors |
0
|
|
CVE-2026-103370 |
medium
|
6.4 |
0.0026
|
awesomesupport |
Awesome Support – WordPress HelpDesk & Support Plugin |
0
|
|
CVE-2026-77871 |
medium
|
6.4 |
0.0024
|
saadiqbal |
Post Snippets – Custom WordPress Code Snippets Customizer |
0
|
|
CVE-2026-110185 |
medium
|
5.9 |
0.0055
|
bitpressadmin |
Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More |
0
|
|
CVE-2026-42690 |
medium
|
5.4 |
—
|
ThimPress |
LearnPress |
n/a
|
|
CVE-2026-27401 |
medium
|
5.3 |
—
|
YITH |
YITH PayPal Express Checkout for WooCommerce |
0
|
|
CVE-2026-80067 |
medium
|
5.3 |
—
|
Stylemix |
MasterStudy LMS WordPress Plugin |
0
< 3.7.50
|
|
CVE-2026-80069 |
medium
|
5.3 |
—
|
Stylemix |
MasterStudy LMS WordPress Plugin |
0
< 3.7.50
|
|
CVE-2026-54852 |
medium
|
5.3 |
—
|
miniOrange |
Page Restriction WordPress (WP) |
0
|
|
CVE-2026-114696 |
medium
|
5.3 |
0.0026
|
miniOrange |
Page Restriction WordPress (WP) |
0
|
|
CVE-2026-109979 |
medium
|
4.3 |
0.0030
|
barrykooij |
Related Posts for WordPress |
0
|
|
CVE-2026-109980 |
medium
|
4.3 |
0.0022
|
barrykooij |
Related Posts for WordPress |
0
|
|
CVE-2026-11592 |
medium
|
4.3 |
0.0049
|
icegram |
Email Subscribers & Newsletters by Icegram Express – Email Marketing, Post Notifications & WooCommerce Marekting Automation for WordPress |
0
|
|
CVE-2026-8662 |
medium
|
4.3 |
0.0029
|
rapid7 |
insightconnect_compression |
< 2.0.3
|
|
CVE-2026-42707 |
medium
|
4.3 |
—
|
HivePress |
HivePress Claim Listings |
0
|
|
CVE-2026-107745 |
medium
|
4.2 |
0.0032
|
tigroumeow |
AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini |
0
|
|
CVE-2024-3586 |
low
|
3.5 |
0.0016
|
Unknown |
LetterPress |
0
< 2.4.0
|
|
CVE-2026-41430 |
low
|
1.3 |
0.0015
|
frappe |
press |
< 0.16.0
|
|