What’s Vulnerable › Products

StellarWP WPComplete vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your StellarWP WPComplete version is affected

Latest StellarWP WPComplete vulnerabilities

• CVE-2026-77820 — WPComplete <= 2.9.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'empty' Shortcode Attribute (CVSS 6.4)
• CVE-2025-49906 — WordPress WPComplete plugin <= 2.9.5.3 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2025-58974 — WordPress WPComplete Plugin <= 2.9.5.2 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
• CVE-2025-50046 — WordPress WPComplete plugin <= 2.9.5 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)