Founding clients: 20% off for 6 months on any plan. Three spots. Claim yours →
Free site check
Security advisories · Live feed

WordPress vulnerabilities, explained in plain English.

New plugin and theme vulnerabilities, updated every few hours. What's affected, how serious it is, and what to do.

Check if my site is affected →
8New this week
2Critical
2No fix available yet
6Already patched
8 advisories · newest first
9.8Critical
Acme Forms <= 3.2.1: Unauthenticated SQL injection PluginAffected <= 3.2.1Published Oct 17, 2026
Patched in 3.2.2 8.1High
Acme Booking <= 2.4.0: Privilege escalation to administrator PluginAffected <= 2.4.0Published Oct 17, 2026
Patched in 2.4.1 9.1Critical
Acme Gallery <= 1.9.7: Unauthenticated arbitrary file upload PluginAffected <= 1.9.7Published Oct 16, 2026
No fix yet 6.4Medium
Acme Popups <= 5.0.3: Stored cross-site scripting via shortcode PluginAffected <= 5.0.3Published Oct 16, 2026
Patched in 5.0.4 7.5High
Acme Starter Theme <= 1.3: Sensitive information exposure ThemeAffected <= 1.3Published Oct 15, 2026
Patched in 1.4 5.3Medium
Acme SEO <= 4.1.2: Missing authorization on settings export PluginAffected <= 4.1.2Published Oct 15, 2026
Patched in 4.1.3 3.5Low
Acme Slider <= 2.0.0: Cross-site request forgery on slide reorder PluginAffected <= 2.0.0Published Oct 14, 2026
No fix yet 6.1Medium
Acme Membership <= 3.7.5: Reflected cross-site scripting PluginAffected <= 3.7.5Published Oct 14, 2026
Patched in 3.7.6
123Next →

Sample data shown for design. Plugin names are placeholders.

Is your site running any of these?
Find out for free.

Send us your address. We check every plugin and theme against the latest advisories and email you a plain-English report in 48 hours.

Check my site for free