How many CVEs does wpdevteam have?

wpdevteam has 103 published CVE records since 2023, including 34 in the last two years.

How many wpdevteam CVEs are in CISA KEV?

None of wpdevteam's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which wpdevteam products have the most CVEs?

The wpdevteam products with the most published CVEs are Essential Addons for Elementor – Popular Elementor Templates & Widgets, Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns, EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more, NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar, BetterDocs – Knowledge Base Docs & FAQ Solution for Elementor & Block Editor.

What are the most common weakness types in wpdevteam CVEs?

wpdevteam's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-502 (Deserialization of Untrusted Data).

Are there public exploits for wpdevteam vulnerabilities?

Yes — 1 of wpdevteam's CVEs have a known public exploit.

How many critical wpdevteam vulnerabilities are there?

wpdevteam has 2 critical and 9 high-severity CVEs.

What is the average severity of wpdevteam CVEs?

The average CVSS base score across wpdevteam's scored CVEs is 6.2.

wpdevteam Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: wpdevteam vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Overview

wpdevteam has 103 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 6.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting wpdevteam products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on wpdevteam's vulnerability posture, as a share of its 103 published CVEs.

Average CVSS: 6.2
Critical / high: 11%
Actively exploited (KEV): 0%
Public exploit available: 1%
Patch available: 100%

Severity and exploitation

How the CVSS severity of wpdevteam's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High9

Medium92

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of wpdevteam's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of wpdevteam's CVEs has a known public exploit available.

Most affected products

The wpdevteam products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in wpdevteam CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish wpdevteam CVE records.

Wordfence103 CVEs

Disclosure activity by year

How many wpdevteam CVEs were published each year.

2023

12

2024

57

2025

14

2026

20

Latest wpdevteam CVEs

The most recently disclosed vulnerabilities affecting wpdevteam.

Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget
CWE-79
Medium · CVSS 6.4
EPSS 0.2%2026-07-21
Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reading Progress Global Color Settings
CWE-79
Medium · CVSS 6.4
EPSS 0.2%2026-07-21
Essential Addons for Elementor <= 6.6.10 - Authenticated (Contributor+) Account Takeover via Email Header Injection
CWE-640
High · CVSS 8.8
EPSS 0.4%2026-07-11
BetterDocs <= 4.6.0 - Authenticated (Custom+) SQL Injection via 'lang' Parameter
CWE-89
Medium · CVSS 6.5
EPSS 0.2%2026-07-10
Essential Addons for Elementor <= 6.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via Event Calendar Widget Popup
CWE-79
Medium · CVSS 6.4
EPSS 0.2%2026-07-08
Gutenberg Essential Blocks - Page Builder for Gutenberg Blocks & Patterns <= 6.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'configurablePrefix' Block Attribute
CWE-79
Medium · CVSS 6.4
EPSS 0.3%2026-06-25
BetterDocs <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'blockId' Block Attribute
CWE-79
Medium · CVSS 6.4
EPSS 0.3%2026-06-19
EmbedPress <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block 'url' Attribute
CWE-79
Medium · CVSS 6.4
EPSS 0.3%2026-06-06
Essential Addons for Elementor <= 6.6.4 - Missing Authorization to Unauthenticated Information Exposure via 'load_more' AJAX Handler
CWE-639
Medium · CVSS 5.3
EPSS 7.2%2026-06-06
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 6.1.3 - Authenticated (Author+) Server-Side Request Forgery
CWE-918
High · CVSS 7.2
EPSS 0.3%2026-06-04
Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.13 - Authenticated (Author+) Limited Privilege Escalation via register_user
CWE-269
Medium · CVSS 6.5
EPSS 0.2%2026-05-14
Gutenberg Essential Blocks <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes
CWE-79
Medium · CVSS 6.4
EPSS 0.4%2026-05-02

Track new wpdevteam CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor wpdevteam CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

Ashlar-Vellum104 CVEs MB connect line104 CVEs theforeman104 CVEs Artica103 CVEs Cap-go103 CVEs Crocoblock103 CVEs Dassault Systèmes102 CVEs mi102 CVEs

Browse all vendors

Frequently asked questions

Common questions about wpdevteam vulnerabilities.

How many CVEs does wpdevteam have?: wpdevteam has 103 published CVE records since 2023, including 34 in the last two years.
How many wpdevteam CVEs are in CISA KEV?: None of wpdevteam's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which wpdevteam products have the most CVEs?: The wpdevteam products with the most published CVEs are Essential Addons for Elementor – Popular Elementor Templates & Widgets, Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns, EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more, NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar, BetterDocs – Knowledge Base Docs & FAQ Solution for Elementor & Block Editor.
What are the most common weakness types in wpdevteam CVEs?: wpdevteam's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-502 (Deserialization of Untrusted Data).
Are there public exploits for wpdevteam vulnerabilities?: Yes — 1 of wpdevteam's CVEs have a known public exploit.
How many critical wpdevteam vulnerabilities are there?: wpdevteam has 2 critical and 9 high-severity CVEs.
What is the average severity of wpdevteam CVEs?: The average CVSS base score across wpdevteam's scored CVEs is 6.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.