Known Vulnerabilities for Wordpress-users by Wordpress
Listed below are 1 of the newest known vulnerabilities associated with "Wordpress-users" by "Wordpress".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-47365 json | Argument injection vulnerability in WordPress Toolkit before 6.11.0 as used in cPanel & WHM, allows remote authenticated user... | Not Provided | 2026-06-12 | 2026-06-12 |
| CVE-2026-15787 json | The Ultimate Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Navigation Menu Widge... | Not Provided | 2026-07-22 | 2026-07-22 |
| CVE-2026-15407 json | The Themify Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.7.7. T... | Not Provided | 2026-07-16 | 2026-07-18 |
| CVE-2026-15350 json | The The Cache Purger plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.3.20.... | Not Provided | 2026-07-16 | 2026-07-16 |
| CVE-2026-15291 json | The Chat Help – Click to Chat Button & Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all ver... | Not Provided | 2026-07-10 | 2026-07-10 |
| CVE-2026-15073 json | The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to generic SQL Injection via the... | Not Provided | 2026-07-11 | 2026-07-15 |
| CVE-2026-15026 json | The Import and export users and customers plugin for WordPress is vulnerable to Sensitive Information Exposure in all version... | Not Provided | 2026-07-10 | 2026-07-10 |
| CVE-2026-14343 json | The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'note_before' and 'note_after' Sho... | Not Provided | 2026-07-09 | 2026-07-09 |
| CVE-2026-14322 json | The Timetics WordPress plugin before 1.0.57 does not enforce a pending or unpaid status for new bookings created through a p... | Not Provided | 2026-07-22 | 2026-07-22 |
| CVE-2026-14185 json | The WPBot WordPress plugin before 8.2.0 does not perform a capability or nonce check in one of its retrieval-augmented-gener... | Not Provided | 2026-07-21 | 2026-07-21 |