# cve.now: Wpdeveloper

The newest entries naming Wpdeveloper as an affected vendor (up to 200), of 62 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-119507](https://cve.now/CVE-2026-119507.md): WordPress NotificationX plugin \<= 3.3.6 - Content Injection vulnerability (CVSS 5.3)
- [CVE-2022-51021](https://cve.now/CVE-2022-51021.md): NotificationX WordPress Plugin \< 2.3.12 Unauthenticated SQL Injection via notification REST endpoint (CVSS 8.8)
- [CVE-2026-114120](https://cve.now/CVE-2026-114120.md): SchedulePress before 5.3.5 Missing Authorization via wpsp\_el\_editor\_form AJAX Action (CVSS 5.3)
- [CVE-2026-110898](https://cve.now/CVE-2026-110898.md): WordPress Essential Addons for Elementor plugin \<= 6.8.5 - Privilege Escalation vulnerability (CVSS 6.4)
- [CVE-2026-102394](https://cve.now/CVE-2026-102394.md): WordPress Essential Addons for Elementor plugin \<= 6.8.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2026-81777](https://cve.now/CVE-2026-81777.md): WordPress Essential Addons for Elementor plugin \<= 6.8.0 - Bypass vulnerability vulnerability (CVSS 5.3)
- [CVE-2026-66667](https://cve.now/CVE-2026-66667.md): WordPress Templately plugin \<= 3.7.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-66645](https://cve.now/CVE-2026-66645.md): WordPress Table Of Contents Block plugin \<= 1.5.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2026-61961](https://cve.now/CVE-2026-61961.md): WordPress EmbedPress plugin \<= 4.5.6 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-65562](https://cve.now/CVE-2026-65562.md): WordPress BetterDocs plugin \<= 4.6.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2026-57364](https://cve.now/CVE-2026-57364.md): WordPress Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More plugin \<= 2.2.0 - Other Vulnerability Type vulnerability (CVSS 6.5)
- [CVE-2026-48872](https://cve.now/CVE-2026-48872.md): WordPress EmbedPress plugin \<= 4.5.2 - Sensitive Data Exposure vulnerability (CVSS 7.5)
- [CVE-2026-25440](https://cve.now/CVE-2026-25440.md): WordPress Essential Addons for Elementor plugin \< 6.6.0 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-42644](https://cve.now/CVE-2026-42644.md): WordPress BetterDocs plugin \<= 4.3.10 - Sensitive Data Exposure vulnerability (CVSS 5.3)
- [CVE-2026-42379](https://cve.now/CVE-2026-42379.md): WordPress Templately plugin \<= 3.6.1 - Sensitive Data Exposure vulnerability (CVSS 7.7)
- [CVE-2026-27042](https://cve.now/CVE-2026-27042.md): WordPress NotificationX plugin \<= 3.2.1 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-23543](https://cve.now/CVE-2026-23543.md): WordPress Essential Addons for Elementor plugin \<= 6.5.5 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2025-69092](https://cve.now/CVE-2025-69092.md): WordPress Essential Addons for Elementor plugin \<= 6.5.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2025-64352](https://cve.now/CVE-2025-64352.md): WordPress Essential Addons for Elementor plugin \<= 6.2.4 - Broken Access Control vulnerability (CVSS 2.7)
- [CVE-2025-49408](https://cve.now/CVE-2025-49408.md): WordPress Templately Plugin \<= 3.2.7 - Sensitive Data Exposure Vulnerability (CVSS 10.0)
- [CVE-2025-24752](https://cve.now/CVE-2025-24752.md): WordPress Essential Addons for Elementor plugin \<= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-39589](https://cve.now/CVE-2025-39589.md): WordPress Essential Addons for Elementor plugin \<= 6.1.9 - Sensitive Data Exposure Vulnerability (CVSS 4.3)
- [CVE-2025-39590](https://cve.now/CVE-2025-39590.md): WordPress Essential Addons for Elementor plugin \<= 6.1.9 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
- [CVE-2025-25086](https://cve.now/CVE-2025-25086.md): WordPress Secret Meta plugin \<= 1.2.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-26871](https://cve.now/CVE-2025-26871.md): WordPress Essential Blocks plugin \<= 4.8.3 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2025-22696](https://cve.now/CVE-2025-22696.md): WordPress Document Block – Upload & Embed Docs, PDF, PPT, XLS or Any Documents plugin \<= 1.1.0 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-22683](https://cve.now/CVE-2025-22683.md): WordPress NotificationX plugin \<= 2.9.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2025-22315](https://cve.now/CVE-2025-22315.md): WordPress Typing Text plugin \<= 1.2.7 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2023-45104](https://cve.now/CVE-2023-45104.md): WordPress BetterLinks plugin \<= 1.6.0 - Broken Access Control vulnerability (CVSS 7.3)
- [CVE-2024-56063](https://cve.now/CVE-2024-56063.md): WordPress Essential Addons for Elementor plugin \<= 6.0.7 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2022-47594](https://cve.now/CVE-2022-47594.md): WordPress Essential Blocks for Gutenberg plugin \<= 3.8.5 - Broken Access Control (CVSS 6.5)
- [CVE-2023-47760](https://cve.now/CVE-2023-47760.md): WordPress Essential Blocks plugin \<= 4.2.0 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2023-47761](https://cve.now/CVE-2023-47761.md): WordPress Simple 301 Redirects by BetterLinks plugin \<= 2.0.7 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2023-47762](https://cve.now/CVE-2023-47762.md): WordPress BetterDocs plugin \<= 2.5.2 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2023-51360](https://cve.now/CVE-2023-51360.md): WordPress Essential Blocks plugin \<= 4.2.0 - Multiple Subscriber+ Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2023-51359](https://cve.now/CVE-2023-51359.md): WordPress Essential Blocks plugin \<= 4.2.0 - Multiple Contributor+ Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2024-51672](https://cve.now/CVE-2024-51672.md): WordPress BetterLinks plugin \<= 2.1.7 - SQL Injection vulnerability (CVSS 7.6)
- [CVE-2024-38707](https://cve.now/CVE-2024-38707.md): WordPress EmbedPress plugin \<= 4.0.4 - Broken Access Control vulnerability (CVSS 6.3)
- [CVE-2024-47308](https://cve.now/CVE-2024-47308.md): WordPress Templately plugin \<= 3.1.2 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2024-50423](https://cve.now/CVE-2024-50423.md): WordPress Templately plugin \<= 3.1.5 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2024-50424](https://cve.now/CVE-2024-50424.md): WordPress Templately plugin \<= 3.1.5 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2024-50461](https://cve.now/CVE-2024-50461.md): WordPress EmbedPress plugin \<= 4.0.14 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-47385](https://cve.now/CVE-2024-47385.md): WordPress Essential Blocks plugin \<= 4.8.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-43936](https://cve.now/CVE-2024-43936.md): WordPress EmbedPress plugin \<= 4.0.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-43328](https://cve.now/CVE-2024-43328.md): WordPress EmbedPress plugin \<= 4.0.9 - Local File Inclusion vulnerability (CVSS 8.3)
- [CVE-2024-43129](https://cve.now/CVE-2024-43129.md): WordPress BetterDocs plugin \<= 3.5.8 - Local File Inclusion vulnerability (CVSS 6.5)
- [CVE-2024-43227](https://cve.now/CVE-2024-43227.md): WordPress BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer for Elementor & Gutenberg plugin \<= 3.5.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-39649](https://cve.now/CVE-2024-39649.md): WordPress Essential Addons for Elementor plugin \<= 5.9.26 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2023-51375](https://cve.now/CVE-2023-51375.md): WordPress EmbedPress plugin \<= 3.8.3 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2024-5058](https://cve.now/CVE-2024-5058.md): WordPress Typing Text plugin \<= 1.2.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-31284](https://cve.now/CVE-2024-31284.md): WordPress EmbedPress plugin \<= 3.9.8 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2024-31274](https://cve.now/CVE-2024-31274.md): WordPress EmbedPress plugin \<= 3.9.11 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2024-30467](https://cve.now/CVE-2024-30467.md): WordPress Essential Blocks plugin \<= 4.4.9 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2023-41955](https://cve.now/CVE-2023-41955.md): WordPress Essential Addons for Elementor plugin \<= 5.8.8 - Contributor+ Privilege Escalation vulnerability (CVSS 8.8)
- [CVE-2024-32717](https://cve.now/CVE-2024-32717.md): WordPress SchedulePress plugin \<= 5.0.8 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2024-31306](https://cve.now/CVE-2024-31306.md): WordPress Essential Blocks plugin \<= 4.5.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-30226](https://cve.now/CVE-2024-30226.md): WordPress BetterDocs plugin \<= 3.3.3 - Unauthenticated PHP Object Injection vulnerability (CVSS 9.0)
- [CVE-2023-49184](https://cve.now/CVE-2023-49184.md): WordPress Parallax Slider Block Plugin \<= 1.2.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9)
- [CVE-2023-32245](https://cve.now/CVE-2023-32245.md): WordPress Essential Addons for Elementor Pro Plugin \<= 5.4.8 is vulnerable to Server Side Request Forgery (SSRF) (CVSS 5.4)
- [CVE-2022-46809](https://cve.now/CVE-2022-46809.md): WordPress ReviewX Plugin \<= 1.6.7 is vulnerable to CSV Injection (CVSS 6.1)
- [CVE-2023-32241](https://cve.now/CVE-2023-32241.md): WordPress Essential Addons for Elementor Pro Plugin \<= 5.4.8 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1)
- [CVE-2023-32243](https://cve.now/CVE-2023-32243.md): WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation (CVSS 9.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/wpdeveloper
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.