Known vulnerabilities in StellarWP WPComplete
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-77820 | The WPComplete plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'empty' Shortcode Attribute in… | 6.4 Medium | Sep 19, 2026 |
| CVE-2025-49906 | Missing Authorization vulnerability in StellarWP WPComplete wpcomplete allows Accessing Functionality Not Properly… | 5.3 Medium | Oct 22, 2025 |
| CVE-2025-58974 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP… | 6.5 Medium | Sep 22, 2025 |
| CVE-2025-50046 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP… | 6.5 Medium | Jun 20, 2025 |
Other StellarWP products
GiveWP – Donation Plugin and Fundraising Platform 34
Kadence Blocks — Page Builder Toolkit for Gutenberg Editor 30
The Events Calendar 21
GiveWP 10
Event Tickets and Registration 8
LearnDash LMS 7
Membership Plugin – Restrict Content 7
Kadence WooCommerce Email Designer 4
Bookit — Booking & Appointment Calendar 3
Event Tickets 3
Gutenberg Blocks by Kadence Blocks 3
Restrict Content 2