Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

Wordfence Intelligence Weekly WordPress Vulnerability Report (January 5, 2026 to January 11, 2026)

🗓️ 15 Jan 2026 16:14:36Reported by Chloe ChamberlandType 
wordfence
 wordfence🔗 www.wordfence.com👁 18 Views

Wordfence Intelligence report covers 264 vulnerabilities in plugins and themes and bug bounty details.

Related
ReporterTitlePublishedViews
Family
vulnrichment
Vulnrichment		CVE-2025-9637 Quiz and Survey Master (QSM) <= 10.3.1 - Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response Uploads
6 Jan 202609:20
–vulnrichment
vulnrichment
Vulnrichment		CVE-2026-0563 WP Google Street View (with 360° virtual tour) & Google maps + Local SEO <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpgsv_map' Shortcode
9 Jan 202606:34
–vulnrichment
vulnrichment
Vulnrichment		CVE-2026-0604 FastDup <= 2.7 - Authenticated (Contributor+) Path Traversal via 'dir_path' REST Parameter
6 Jan 202603:21
–vulnrichment
vulnrichment
Vulnrichment		CVE-2026-0627 AMP for WP <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG File Upload
9 Jan 202608:20
–vulnrichment
vulnrichment
Vulnrichment		CVE-2026-0656 iPaymu Payment Gateway for WooCommerce <= 2.0.2 - Missing Authentication to Unauthenticated Payment Bypass and Order Information Disclosure
7 Jan 202606:36
–vulnrichment
vulnrichment
Vulnrichment		CVE-2026-0674 WordPress Campaign Monitor for WordPress plugin <= 2.9.1 - Broken Access Control vulnerability
8 Jan 202609:17
–vulnrichment
vulnrichment
Vulnrichment		CVE-2026-0676 WordPress Zorka theme <= 1.5.7 - Broken Access Control vulnerability
8 Jan 202609:17
–vulnrichment
vulnrichment
Vulnrichment		CVE-2026-0831 Templately <= 3.4.8 - Unauthenticated Limited Arbitrary JSON File Write
10 Jan 202609:22
–vulnrichment
vulnrichment
Vulnrichment		CVE-2026-22468 WordPress Absolute Addons For Elementor plugin <= 1.0.14 - Broken Access Control vulnerability
22 Jan 202616:52
–vulnrichment
vulnrichment
Vulnrichment		CVE-2026-22469 WordPress DeepDigital theme <= 1.0.2 - Arbitrary Shortcode Execution vulnerability
22 Jan 202616:52
–vulnrichment
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
15 Jan 2026 16:14Current
7High risk
Vulners AI Score7
CVSS 3.19.8
EPSS0.01867
SSVC
264 vulnerabilitiesplugins and themesbug bountyfree toolsvulnerability databaseover 32000 vulnerabilities
18