Plugin CVE Rankings

Most Vulnerable WordPress Plugins

Plugins ranked by known CVE count from our vulnerability database. Popular plugins aren't necessarily the riskiest — check your own stack.

# Plugin Known CVEs Active Installs
1 Matomo Analytics – Powerful, Privacy-First Insights for WordPress (matomo) 431 100K+
2 AntiVirus (antivirus) 362 30K+
3 Fusion Page Builder (fusion) 220 3K+
4 Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery (nextgen-gallery) 199 300K+
5 Shopping Cart & eCommerce Store (wp-easycart) 119 3K+
6 Royal Addons for Elementor – Addons and Templates Kit for Elementor (royal-elementor-addons) 95 600K+
7 Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder (popup-maker) 79 700K+
8 Download Manager (download-manager) 70 100K+
9 Premium Addons for Elementor – Elementor Templates, Widgets & MCP Tools (premium-addons-for-elementor) 66 600K+
10 Happy Addons for Elementor (happy-elementor-addons) 64 400K+
11 Tutor LMS – eLearning and online course solution (tutor) 48 100K+
12 Spiffy Calendar (spiffy-calendar) 47 2K+
13 Calendar (calendar) 44 4K+
14 Bold Page Builder (bold-page-builder) 43 40K+
15 Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types (wicked-folders) 41 20K+
16 Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns (essential-blocks) 40 200K+
17 WP Job Portal – AI-Powered Recruitment System for Company or Job Board website (wp-job-portal) 40 8K+
18 Brizy – Page Builder (brizy) 40 70K+
19 Unlimited Elements For Elementor (unlimited-elements-for-elementor) 39 300K+
20 Photo Gallery by 10Web – Mobile-Friendly Image Gallery (photo-gallery) 38 100K+
21 LearnPress – WordPress LMS Plugin for Create and Sell Online Courses (learnpress) 37 70K+
22 Colibri Page Builder (colibri-page-builder) 37 90K+
23 EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents (embedpress) 36 100K+
24 Ninja Forms – The Contact Form Builder That Grows With You (ninja-forms) 36 600K+
25 WP Fastest Cache – WordPress Cache Plugin (wp-fastest-cache) 36 1.0M+
26 Comments – wpDiscuz (wpdiscuz) 34 60K+
27 Quiz Maker by AYS (quiz-maker) 33 20K+
28 Caddy – WooCommerce Side Cart & Free Shipping Bar (caddy) 33 3K+
29 Seriously Simple Podcasting (seriously-simple-podcasting) 32 30K+
30 Livemesh Addons by Elementor (addons-for-elementor) 30 40K+
31 InstaWP Connect – 1-click WP Staging & Migration (instawp-connect) 30 40K+
32 Exclusive Addons for Elementor (exclusive-addons-for-elementor) 30 50K+
33 MStore API – Create Native Android & iOS Apps On The Cloud (mstore-api) 27 3K+
34 Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls (poll-maker) 27 7K+
35 WP Meta SEO (wp-meta-seo) 26 10K+
36 WP Recipe Maker (wp-recipe-maker) 26 50K+
37 Shortcodes and extra features for Phlox theme (auxin-elements) 26 80K+
38 Pods – Custom Content Types and Fields (pods) 25 100K+
39 LiteSpeed Cache (litespeed-cache) 25 7.0M+
40 Shortcodes Ultimate – Content Elements (shortcodes-ultimate) 24 400K+
41 Master Slider – Responsive Touch Slider (master-slider) 23 60K+
42 LightStart – Maintenance Mode, Coming Soon and Landing Page Builder (wp-maintenance-mode) 23 400K+
43 Qi Blocks (qi-blocks) 22 60K+
44 Media Library Assistant (media-library-assistant) 22 70K+
45 Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App (post-smtp) 22 300K+
46 ElementInvader Addons for Elementor (elementinvader-addons-for-elementor) 22 3K+
47 Create (mediavine-create) 22 6K+
48 WP Directory Kit (wpdirectorykit) 22 2K+
49 Simple Custom CSS and JS (custom-css-js) 22 600K+
50 The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid (the-post-grid) 21 100K+

Are any of these plugins on your site?

A free scan detects your plugins and cross-references them against every CVE in our database.

Scan My Site Free