How many StellarWP WPComplete CVEs are in CISA KEV?

None of StellarWP WPComplete's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of StellarWP WPComplete are affected?

10 distinct StellarWP WPComplete versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in StellarWP WPComplete CVEs?

StellarWP WPComplete's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization).

What is the average severity of StellarWP WPComplete CVEs?

The average CVSS base score across StellarWP WPComplete's scored CVEs is 6.2.

StellarWP WPComplete Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: StellarWP WPComplete vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Overview

StellarWP WPComplete has 4 published CVE records since 2025, of which none are in CISA's KEV catalog and none have a known public exploit. The average CVSS base score across scored CVEs is 6.2.

Severity and exploitation

How the CVSS severity of StellarWP WPComplete's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High0

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of StellarWP WPComplete's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No StellarWP WPComplete CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every StellarWP WPComplete version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 2.9.51 CVE
<= 2.9.5.21 CVE
<= 2.9.5.31 CVE
<= 2.9.9.01 CVE
>= 2.9.5.11 CVE
>= 2.9.5.31 CVE
>= 2.9.5.41 CVE

Fixed in

2.9.5.11 CVE
2.9.5.31 CVE
2.9.5.41 CVE

Find a version

4 CVEs

Sort

WPComplete <= 2.9.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'empty' Shortcode Attribute
CVE-2026-77820
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.3% (27th pct)2026-09-19
WordPress WPComplete plugin <= 2.9.5.3 - Broken Access Control vulnerability
CVE-2025-49906
Patch
CWE-862
Medium · CVSS 5.3
EPSS 0.3% (28th pct)2025-10-22
WordPress WPComplete Plugin <= 2.9.5.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58974
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.2% (12th pct)2025-09-22
WordPress WPComplete plugin <= 2.9.5 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-50046
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.2% (15th pct)2025-06-20

Common weakness types

The CWE weakness categories most often found in StellarWP WPComplete CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many StellarWP WPComplete CVEs were published each year.

2025

2026

Other StellarWP products

Browse vulnerabilities for other products by StellarWP.

GiveWP – Donation Plugin and Fundraising Platform34 CVEs Kadence Blocks — Page Builder Toolkit for Gutenberg Editor30 CVEs The Events Calendar26 CVEs Event Tickets and Registration8 CVEs GiveWP8 CVEs LearnDash LMS7 CVEs

Frequently asked questions

Common questions about StellarWP WPComplete vulnerabilities.

How many CVEs does StellarWP WPComplete have?: StellarWP WPComplete has 4 published CVE records since 2025.
How many StellarWP WPComplete CVEs are in CISA KEV?: None of StellarWP WPComplete's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for StellarWP WPComplete vulnerabilities?: No StellarWP WPComplete CVEs currently have a tracked public exploit in this dataset.
Which versions of StellarWP WPComplete are affected?: 10 distinct StellarWP WPComplete versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in StellarWP WPComplete CVEs?: StellarWP WPComplete's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization).
What is the average severity of StellarWP WPComplete CVEs?: The average CVSS base score across StellarWP WPComplete's scored CVEs is 6.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track StellarWP WPComplete vulnerabilities

Get an alert for each new StellarWP WPComplete CVE, with AI-written analysis and remediation steps.

Create an account See pricing