wordfence / famous plugins · 1,112 affected

Famous plugins · 10k+ installs

Vulnerability statistics for popular WordPress plugins with at least 10,000 active installs — high-impact issues in widely-used software.

10k+ installs only
total vulns · famous
5,088
across 1,112 plugins
critical
125
popular crit count
high
1,099
popular high count
famous plugins
1,112
≥ 10k installs · ≥ 1 vuln
01

Distribution

severity · CWE
severity distributionshare
top CWE classestop 20
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 1,776
CWE-862 · Missing Authorization 1,078
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 321
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor 286
CWE-639 · Authorization Bypass Through User-Controlled Key 269
CWE-352 · Cross-Site Request Forgery (CSRF) 191
CWE-502 · Deserialization of Untrusted Data 150
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 142
CWE-94 · Improper Control of Generation of Code ('Code Injection') 131
CWE-918 · Server-Side Request Forgery (SSRF) 104
02

Trends

monthly · yearly · patched
monthly discoverieslast 12 mo
patched status4,992 / 5,088
vulnerabilities by year 2 years
03

Most affected famous plugins

10k+ installs · top 15
top vulnerable famous pluginsby vuln count
Tutor LMS – eLearning and online course solution
tutor · 100,000 installs
1 crit 6 high 51
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
user-registration · 50,000 installs
3 crit 4 high 50
Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce
wp-event-solution · 10,000 installs
1 crit 12 high 50
Forminator Forms – Contact Form, Payment Form & Custom Form Builder
forminator · 600,000 installs
2 crit 20 high 49
LatePoint – Calendar Booking Plugin for Appointments and Events
latepoint · 100,000 installs
2 crit 17 high 48
GiveWP – Donation Plugin and Fundraising Platform
give · 100,000 installs
3 crit 8 high 44
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
learnpress · 70,000 installs
1 crit 3 high 42
Kirki – Freeform Page Builder, Website Builder & Customizer
kirki · 500,000 installs
3 crit 11 high 39
MasterStudy LMS WordPress Plugin – for Online Courses and Education
masterstudy-lms-learning-management-system · 10,000 installs
1 crit 3 high 38
Simply Schedule Appointments
simply-schedule-appointments · 50,000 installs
15 high 37
Royal Addons for Elementor – Addons and Templates Kit for Elementor
royal-elementor-addons · 600,000 installs
6 high 35
Booking for Appointments and Events Calendar – Amelia
ameliabooking · 90,000 installs
1 crit 7 high 33
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
quiz-master-next · 40,000 installs
6 high 33
Unlimited Elements for Elementor
unlimited-elements-for-elementor · 300,000 installs
12 high 31
wpForo Forum
wpforo · 20,000 installs
12 high 30
top 10 famous plugins · chartvuln count
04

Impact summary

high impact · widely used
critical · widespread10k+
125
CVEs hitting popular plugins · highest blast radius
high · widespread10k+
1,099
amber-zone risk · 10k+ install reach
browse famous→
view advanced plugins →
filterable table · 10k+ install threshold