WordPress Vulnerability Scanner WPSec

WordPress Plugin Vulnerability Advisories

Security advisories for WordPress plugins, published by WPSec.

PublishedIDPluginVulnerabilitySeverityFixed in
2026-10-01 WPSEC-2026-0002 Wordfence Security – Firewall & Malware Scan Wordfence Security – Firewall & Malware Scan <= 9.0.1 - Unauthenticated Author Information Disclosure via REST API Username Enumeration Protection Bypass Medium 5.3 9.0.2
2026-10-01 WPSEC-2026-0001 Essential Addons for Elementor – Popular Elementor Templates & Widgets Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Woo Product Grid Pagination Medium 6.4 6.8.5

802 advisories · page 9 of 9 · RSS · JSON · About · Sister project: WPSec AttackSurface

License: CC BY 4.0