Advisories · Technology

WordLift.

Every CVE that names WordLift among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-110891 CVE record

CVSS 5.4 Medium

WordPress WordLift plugin <= 3.54.15 - Broken Access Control vulnerability
- WordLift
- Broken access control
Not analysed yet 15 Oct 2026
CVE-2025-53582 CVE record

CVSS 6.5 Medium

WordPress WordLift Plugin <= 3.54.5 - Cross Site Scripting (XSS) Vulnerability
- WordLift
- Cross-site scripting (XSS)
Not analysed yet 14 Aug 2025
CVE-2025-30624 CVE record

CVSS 4.3 Medium

WordPress WordLift plugin <= 3.54.4 - Broken Access Control Vulnerability
- WordLift
- Broken access control
Not analysed yet 6 Jun 2025