Plugin CVE Rankings

Most Vulnerable WordPress Plugins

Plugins ranked by known CVE count from our vulnerability database. Popular plugins aren't necessarily the riskiest — check your own stack.

# Plugin Known CVEs Active Installs
1 Matomo Analytics – Powerful, Privacy-First Insights for WordPress (matomo) 431 100K+
2 AntiVirus (antivirus) 368 30K+
3 Fusion Page Builder (fusion) 239 3K+
4 Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery (nextgen-gallery) 203 300K+
5 WP EasyCart: Shopping Cart and eCommerce Store (wp-easycart) 119 3K+
6 Royal Addons for Elementor – Addons and Templates Kit for Elementor (royal-elementor-addons) 96 600K+
7 Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder (popup-maker) 84 600K+
8 Download Manager (download-manager) 81 100K+
9 Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates (premium-addons-for-elementor) 72 600K+
10 Calendar (calendar) 70 4K+
11 LearnPress – WordPress LMS Plugin for Create and Sell Online Courses (learnpress) 67 70K+
12 HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates (happy-elementor-addons) 64 400K+
13 Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder (ninja-forms) 59 500K+
14 SiteGuard WP Plugin (siteguard) 54 600K+
15 Tutor LMS – eLearning and online course solution (tutor) 50 100K+
16 Spiffy Calendar (spiffy-calendar) 47 2K+
17 Unlimited Elements for Elementor (unlimited-elements-for-elementor) 45 300K+
18 Brizy – Page Builder (brizy) 44 60K+
19 Bold Page Builder (bold-page-builder) 43 40K+
20 Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns (essential-blocks) 42 100K+
21 Seriously Simple Podcasting (seriously-simple-podcasting) 42 20K+
22 WP Job Portal – AI-Powered Recruitment System for Company or Job Board website (wp-job-portal) 42 8K+
23 Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types (wicked-folders) 41 20K+
24 Caddy – WooCommerce Side Cart & Free Shipping Bar (caddy) 41 3K+
25 Colibri Page Builder (colibri-page-builder) 39 80K+
26 Photo Gallery by 10Web – Mobile-Friendly Image Gallery (photo-gallery) 38 100K+
27 Quiz Maker by AYS (quiz-maker) 37 20K+
28 WP Fastest Cache – WordPress Cache Plugin (wp-fastest-cache) 37 1.0M+
29 EmbedPress (embedpress) 36 100K+
30 Comments – wpDiscuz (wpdiscuz) 34 60K+
31 Livemesh Addons by Elementor (addons-for-elementor) 30 40K+
32 Exclusive Addons for Elementor (exclusive-addons-for-elementor) 30 50K+
33 InstaWP Connect – 1-click WP Staging & Migration (instawp-connect) 30 40K+
34 WP Recipe Maker (wp-recipe-maker) 29 50K+
35 AI (ai) 29 60K+
36 LiteSpeed Cache (litespeed-cache) 28 7.0M+
37 WP Directory Kit (wpdirectorykit) 28 2K+
38 MStore API – Create Native Android & iOS Apps On The Cloud (mstore-api) 28 2K+
39 Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder (form-maker) 28 30K+
40 Media Library Assistant (media-library-assistant) 28 70K+
41 Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls (poll-maker) 27 6K+
42 AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini (ai-engine) 27 90K+
43 Pods – Custom Content Types and Fields (pods) 26 100K+
44 Shortcodes and extra features for Phlox theme (auxin-elements) 26 80K+
45 WP Meta SEO (wp-meta-seo) 26 10K+
46 Master Slider – Responsive Touch Slider (master-slider) 25 60K+
47 ToneDen Shortcode (lasso) 25 2K+
48 Shortcodes Ultimate – Content Elements (shortcodes-ultimate) 24 400K+
49 GeoDirectory – WP Business Directory Plugin and Classified Listings Directory (geodirectory) 24 10K+
50 Create (mediavine-create) 24 6K+

Are any of these plugins on your site?

A free scan detects your plugins and cross-references them against every CVE in our database.

Scan My Site Free