{"schema_version":1,"title":"WordPress Plugin vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 20 vulnerabilities in WordPress Plugin: 0 in the last 7 days and 4 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-110012, was published on 16 October 2026. 1 vulnerability in the last four weeks, down 67% on the four before (3).","url":"https://junglewise.ai/threats/vendors/wordpress-plugin","json_url":"https://junglewise.ai/threats/vendors/wordpress-plugin.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/wordpress-plugin","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":true,"counts":{"high":3,"all_time":20,"critical":3,"exploited":0,"last_7_days":0,"last_30_days":1,"last_90_days":4,"last_365_days":20},"latest":[{"cve":"CVE-2026-110012","cvss":4.3,"epss":0.0015,"slug":"cve-2026-110012-the-salon-booking-system-wordpress-plugin-before-10-31-3-does","title":"The Salon Booking System insufficient API access control","severity":"medium","exploited":false,"published_at":"2026-10-16T07:17:10.14+00:00","url":"https://junglewise.ai/threats/cve-2026-110012-the-salon-booking-system-wordpress-plugin-before-10-31-3-does"},{"cve":"CVE-2026-91829","cvss":7.1,"epss":0.0016,"slug":"cve-2026-91829-the-subscribe-to-comments-wordpress-plugin-before-2-3-3-does-not","title":"Subscribe to Comments reflected XSS in ref parameter","severity":"high","exploited":false,"published_at":"2026-10-11T07:17:29.193+00:00","url":"https://junglewise.ai/threats/cve-2026-91829-the-subscribe-to-comments-wordpress-plugin-before-2-3-3-does-not"},{"cve":"CVE-2026-11399","cvss":4.3,"epss":0.0016,"slug":"cve-2026-11399-the-helpdesk-support-ticket-system-for-woocommerce-plugin-for","title":"Helpdesk Support Ticket System for WooCommerce insecure direct object reference","severity":"medium","exploited":false,"published_at":"2026-10-03T06:16:42.23+00:00","url":"https://junglewise.ai/threats/cve-2026-11399-the-helpdesk-support-ticket-system-for-woocommerce-plugin-for"},{"cve":"CVE-2026-94122","cvss":7.2,"slug":"cve-2026-94122-editor-php-object-injection-in-responsive-slider-gallery-1-5-5","title":"Responsive Slider Gallery PHP Object Injection in editor","severity":"high","exploited":false,"published_at":"2026-09-30T13:17:24.7+00:00","url":"https://junglewise.ai/threats/cve-2026-94122-editor-php-object-injection-in-responsive-slider-gallery-1-5-5"},{"cve":"CVE-2026-9616","cvss":4.3,"slug":"cve-2026-9616-wordpress-generate-security-txt-authorization-bypass-in-ajax","title":"WordPress Generate Security.txt authorization bypass in AJAX actions","severity":"medium","exploited":false,"published_at":"2026-06-24T07:16:29.73+00:00","url":"https://junglewise.ai/threats/cve-2026-9616-wordpress-generate-security-txt-authorization-bypass-in-ajax"},{"cve":"CVE-2026-10780","cvss":4.3,"slug":"cve-2026-10780-wordpress-static-block-idor-in-static-block-content-shortcode","title":"WordPress Static Block IDOR in static_block_content shortcode","severity":"medium","exploited":false,"published_at":"2026-06-16T06:16:58.013+00:00","url":"https://junglewise.ai/threats/cve-2026-10780-wordpress-static-block-idor-in-static-block-content-shortcode"},{"cve":"CVE-2026-49067","cvss":9.3,"slug":"cve-2026-49067-wordpress-advanced-301-and-302-redirect-unauthenticated-sql","title":"WordPress Advanced 301 and 302 Redirect unauthenticated SQL injection","severity":"critical","exploited":false,"published_at":"2026-06-15T21:17:19.53+00:00","url":"https://junglewise.ai/threats/cve-2026-49067-wordpress-advanced-301-and-302-redirect-unauthenticated-sql"},{"cve":"CVE-2026-8940","cvss":4.3,"slug":"cve-2026-8940-wordpress-wp-meta-sort-posts-csrf-in-msp-options-php","title":"WordPress WP Meta Sort Posts CSRF in msp-options.php","severity":"medium","exploited":false,"published_at":"2026-06-09T05:16:40.953+00:00","url":"https://junglewise.ai/threats/cve-2026-8940-wordpress-wp-meta-sort-posts-csrf-in-msp-options-php"},{"cve":"CVE-2026-8841","cvss":6.4,"slug":"cve-2026-8841-wordpress-extra-settings-for-rocketchat-stored-xss-in-rocketchat","title":"WordPress Extra Settings for RocketChat Stored XSS in rocketchat shortcode","severity":"medium","exploited":false,"published_at":"2026-06-09T05:16:39.507+00:00","url":"https://junglewise.ai/threats/cve-2026-8841-wordpress-extra-settings-for-rocketchat-stored-xss-in-rocketchat"},{"cve":"CVE-2026-10738","cvss":6.4,"slug":"cve-2026-10738-wordpress-jquery-hover-footnotes-stored-xss-via-footnote","title":"WordPress jQuery Hover Footnotes Stored XSS via Footnote Qualifier","severity":"medium","exploited":false,"published_at":"2026-06-09T05:16:29.963+00:00","url":"https://junglewise.ai/threats/cve-2026-10738-wordpress-jquery-hover-footnotes-stored-xss-via-footnote"},{"cve":"CVE-2026-9008","cvss":4.3,"slug":"cve-2026-9008-wordpress-page-list-plugin-missing-authorization-in-shortcode","title":"WordPress Page-list plugin missing authorization in shortcode","severity":"medium","exploited":false,"published_at":"2026-06-06T02:16:22.683+00:00","url":"https://junglewise.ai/threats/cve-2026-9008-wordpress-page-list-plugin-missing-authorization-in-shortcode"},{"cve":"CVE-2026-1829","cvss":8.8,"slug":"cve-2026-1829-wordpress-content-visibility-for-divi-builder-rce-in-et-pb-text","title":"WordPress Content Visibility for Divi Builder RCE in et_pb_text shortcode","severity":"high","exploited":false,"published_at":"2026-06-02T20:16:33.477+00:00","url":"https://junglewise.ai/threats/cve-2026-1829-wordpress-content-visibility-for-divi-builder-rce-in-et-pb-text"},{"cve":"CVE-2026-9730","cvss":4.3,"slug":"cve-2026-9730-wordpress-remove-nofollow-commenter-url-csrf-in-gmz-comment","title":"WordPress Remove NoFollow Commenter URL CSRF in gmz_comment_settings_save","severity":"medium","exploited":false,"published_at":"2026-06-02T09:16:17.567+00:00","url":"https://junglewise.ai/threats/cve-2026-9730-wordpress-remove-nofollow-commenter-url-csrf-in-gmz-comment"},{"cve":"CVE-2026-1450","cvss":6.1,"slug":"cve-2026-1450-wordpress-rognone-plugin-reflected-xss-in-mode-parameter","title":"WordPress rognone plugin reflected XSS in mode parameter","severity":"medium","exploited":false,"published_at":"2026-06-02T09:16:15.43+00:00","url":"https://junglewise.ai/threats/cve-2026-1450-wordpress-rognone-plugin-reflected-xss-in-mode-parameter"},{"cve":"CVE-2026-10100","cvss":4.4,"slug":"cve-2026-10100-wordpress-simple-custom-login-page-stored-xss-in-color-settings","title":"WordPress Simple Custom Login Page Stored XSS in color settings","severity":"medium","exploited":false,"published_at":"2026-06-02T03:16:15.077+00:00","url":"https://junglewise.ai/threats/cve-2026-10100-wordpress-simple-custom-login-page-stored-xss-in-color-settings"},{"cve":"CVE-2026-6401","cvss":4.3,"slug":"cve-2026-6401-wordpress-bottom-bar-csrf-in-settings-update","title":"WordPress Bottom Bar CSRF in settings update","severity":"medium","exploited":false,"published_at":"2026-05-20T02:16:38.213+00:00","url":"https://junglewise.ai/threats/cve-2026-6401-wordpress-bottom-bar-csrf-in-settings-update"},{"cve":"CVE-2026-6399","cvss":4.4,"slug":"cve-2026-6399-wordpress-general-options-stored-xss-in-contact-number-field","title":"WordPress General Options stored XSS in Contact Number field","severity":"medium","exploited":false,"published_at":"2026-05-20T02:16:37.92+00:00","url":"https://junglewise.ai/threats/cve-2026-6399-wordpress-general-options-stored-xss-in-contact-number-field"},{"cve":"CVE-2026-6271","cvss":9.8,"slug":"cve-2026-6271-wordpress-career-section-arbitrary-file-upload-in-cv-upload","title":"WordPress Career Section arbitrary file upload in CV upload handler","severity":"critical","exploited":false,"published_at":"2026-05-14T07:16:20.65+00:00","url":"https://junglewise.ai/threats/cve-2026-6271-wordpress-career-section-arbitrary-file-upload-in-cv-upload"},{"cve":"CVE-2026-6252","cvss":6.4,"slug":"cve-2026-6252-wordpress-meta-field-block-stored-xss-in-tagname-attribute","title":"WordPress Meta Field Block stored XSS in tagName attribute","severity":"medium","exploited":false,"published_at":"2026-05-14T07:16:20.513+00:00","url":"https://junglewise.ai/threats/cve-2026-6252-wordpress-meta-field-block-stored-xss-in-tagname-attribute"},{"cve":"CVE-2021-47940","cvss":9.8,"epss":0.004,"slug":"cve-2021-47940-wordpress-download-from-files-arbitrary-file-upload-in-ajax","title":"WordPress Download From Files arbitrary file upload in AJAX handler","severity":"critical","exploited":false,"published_at":"2026-05-10T13:16:30.363+00:00","url":"https://junglewise.ai/threats/cve-2021-47940-wordpress-download-from-files-arbitrary-file-upload-in-ajax"}],"vendor":{"hub":true,"name":"WordPress Plugin","slug":"wordpress-plugin","url":"https://junglewise.ai/threats/vendors/wordpress-plugin"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2021-47940","cvss":9.8,"epss":0.004,"slug":"cve-2021-47940-wordpress-download-from-files-arbitrary-file-upload-in-ajax","title":"WordPress Download From Files arbitrary file upload in AJAX handler","severity":"critical","exploited":false,"published_at":"2026-05-10T13:16:30.363+00:00","url":"https://junglewise.ai/threats/cve-2021-47940-wordpress-download-from-files-arbitrary-file-upload-in-ajax"},{"cve":"CVE-2026-6271","cvss":9.8,"slug":"cve-2026-6271-wordpress-career-section-arbitrary-file-upload-in-cv-upload","title":"WordPress Career Section arbitrary file upload in CV upload handler","severity":"critical","exploited":false,"published_at":"2026-05-14T07:16:20.65+00:00","url":"https://junglewise.ai/threats/cve-2026-6271-wordpress-career-section-arbitrary-file-upload-in-cv-upload"},{"cve":"CVE-2026-49067","cvss":9.3,"slug":"cve-2026-49067-wordpress-advanced-301-and-302-redirect-unauthenticated-sql","title":"WordPress Advanced 301 and 302 Redirect unauthenticated SQL injection","severity":"critical","exploited":false,"published_at":"2026-06-15T21:17:19.53+00:00","url":"https://junglewise.ai/threats/cve-2026-49067-wordpress-advanced-301-and-302-redirect-unauthenticated-sql"},{"cve":"CVE-2026-1829","cvss":8.8,"slug":"cve-2026-1829-wordpress-content-visibility-for-divi-builder-rce-in-et-pb-text","title":"WordPress Content Visibility for Divi Builder RCE in et_pb_text shortcode","severity":"high","exploited":false,"published_at":"2026-06-02T20:16:33.477+00:00","url":"https://junglewise.ai/threats/cve-2026-1829-wordpress-content-visibility-for-divi-builder-rce-in-et-pb-text"},{"cve":"CVE-2026-94122","cvss":7.2,"slug":"cve-2026-94122-editor-php-object-injection-in-responsive-slider-gallery-1-5-5","title":"Responsive Slider Gallery PHP Object Injection in editor","severity":"high","exploited":false,"published_at":"2026-09-30T13:17:24.7+00:00","url":"https://junglewise.ai/threats/cve-2026-94122-editor-php-object-injection-in-responsive-slider-gallery-1-5-5"},{"cve":"CVE-2026-91829","cvss":7.1,"epss":0.0016,"slug":"cve-2026-91829-the-subscribe-to-comments-wordpress-plugin-before-2-3-3-does-not","title":"Subscribe to Comments reflected XSS in ref parameter","severity":"high","exploited":false,"published_at":"2026-10-11T07:17:29.193+00:00","url":"https://junglewise.ai/threats/cve-2026-91829-the-subscribe-to-comments-wordpress-plugin-before-2-3-3-does-not"},{"cve":"CVE-2026-8841","cvss":6.4,"slug":"cve-2026-8841-wordpress-extra-settings-for-rocketchat-stored-xss-in-rocketchat","title":"WordPress Extra Settings for RocketChat Stored XSS in rocketchat shortcode","severity":"medium","exploited":false,"published_at":"2026-06-09T05:16:39.507+00:00","url":"https://junglewise.ai/threats/cve-2026-8841-wordpress-extra-settings-for-rocketchat-stored-xss-in-rocketchat"},{"cve":"CVE-2026-10738","cvss":6.4,"slug":"cve-2026-10738-wordpress-jquery-hover-footnotes-stored-xss-via-footnote","title":"WordPress jQuery Hover Footnotes Stored XSS via Footnote Qualifier","severity":"medium","exploited":false,"published_at":"2026-06-09T05:16:29.963+00:00","url":"https://junglewise.ai/threats/cve-2026-10738-wordpress-jquery-hover-footnotes-stored-xss-via-footnote"},{"cve":"CVE-2026-6252","cvss":6.4,"slug":"cve-2026-6252-wordpress-meta-field-block-stored-xss-in-tagname-attribute","title":"WordPress Meta Field Block stored XSS in tagName attribute","severity":"medium","exploited":false,"published_at":"2026-05-14T07:16:20.513+00:00","url":"https://junglewise.ai/threats/cve-2026-6252-wordpress-meta-field-block-stored-xss-in-tagname-attribute"},{"cve":"CVE-2026-1450","cvss":6.1,"slug":"cve-2026-1450-wordpress-rognone-plugin-reflected-xss-in-mode-parameter","title":"WordPress rognone plugin reflected XSS in mode parameter","severity":"medium","exploited":false,"published_at":"2026-06-02T09:16:15.43+00:00","url":"https://junglewise.ai/threats/cve-2026-1450-wordpress-rognone-plugin-reflected-xss-in-mode-parameter"}],"generated_at":"2026-11-11T03:07:00.183524+00:00","technologies":[]}