How many CVEs have patched find?

8 published CVEs changed find in wordpress-plugins/plugins, in 6 distinct patches totalling 881 changed lines, between 2024 and 2026.

What is the latest CVE that changed find?

CVE-2026-4683 (Smartcat Translator for WPML <= 3.1.77 - Missing Authorization to Unauthenticated Plugin Settings Update), published 2026-05-15, changed lines 22 to 23 of smartcat-wpml/trunk/admin/assets/js/smartcat-ui.js.

How does find compare to the rest of wordpress-plugins/plugins?

wordpress-plugins/plugins has 851 CVEs with a located fix in total; 8 of them changed find.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

find in wordpress-plugins/plugins: Patched by 8 CVEs

Smartcat Translator for WPML <= 3.1.77 - Missing Authorization to Unauthenticated Plugin Settings Update

CVE-2026-4683 · smartcat-wpml/trunk/admin/assets/js/smartcat-ui.js · lines 22–23 · +2 −2

Medium · CVSS 6.5

EPSS 0.5%2026-05-15

All-in-One Video Gallery <= 4.6.4 - Missing Authorization to Unauthenticated Bunny Stream Video Creation/Deletion

CVE-2025-14947 · all-in-one-video-gallery/trunk/admin/assets/js/admin.js · lines 895–946 · +52 −0

Medium · CVSS 6.5

EPSS 0.4%2026-01-23

CubeWP <= 1.1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via cubewp_shortcode_taxonomy Shortcode

CVE-2025-8615 · cubewp-framework/trunk/cube/assets/frontend/js/cubewp-alerts.js · lines 171–184 · +2 −3 in 2 hunks

Medium · CVSS 6.4

EPSS 0.2%2026-01-17

Jupiter X Core <= 4.7.5 - Limited Unauthenticated Authentication Bypass to Account Takeover

CVE-2024-7781 · jupiterx-core/trunk/includes/extensions/raven/assets/js/frontend.js · lines 5417–10482 · +58 −26 in 6 hunks

Critical · CVSS 9.8

EPSS 1.0%2024-09-26

Elementor Addon Elements <= 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

CVE-2024-7122 · addon-elements-for-elementor-page-builder/tags/1.13.7/assets/js/eae.js · lines 572–672 · +25 −9 in 3 hunks

Medium · CVSS 6.4

EPSS 0.4%2024-08-30

Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and eae_slider_animation Parameters

CVE-2024-4401 · addon-elements-for-elementor-page-builder/trunk/assets/js/eae.js · lines 558–683 · +123 −111

Medium · CVSS 6.4

EPSS 0.3%2024-08-30

Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

CVE-2024-4570 · addon-elements-for-elementor-page-builder/trunk/assets/js/eae.js · lines 558–683 · +123 −111

Medium · CVSS 6.4

EPSS 0.3%2024-06-27

Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

CVE-2024-4569 · addon-elements-for-elementor-page-builder/trunk/assets/js/eae.js · lines 558–683 · +123 −111

Medium · CVSS 6.4

EPSS 0.4%2024-06-27

find

Overview

CVEs that patched it

Other functions in these files

Other hotspots in the repository

Frequently asked questions

References

Track wordpress-plugins/plugins CVEs