What’s Vulnerable › Products

WP Plugin Manager vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your WP Plugin Manager version is affected

Latest WP Plugin Manager vulnerabilities

• CVE-2025-64271 — WordPress WP Plugin Manager plugin <= 1.4.7 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 6.5)
• CVE-2023-1088 — WP Plugin Manager < 1.1.8 - Arbitrary Plugin Activation via CSRF (CVSS 4.3)