Wordable vulnerabilities

Products

• Wordable 2
• Wordable – Export Google Docs to WordPress 1

Latest Wordable CVEs

Newest publication first

1. CVE-2026-40801 WordPress Wordable plugin <= 8.2.10 - Broken Access Control vulnerability

   Published 2026-10-10

   High·CVSS 8.1

   Subscriber Broken Access Control in Wordable <= 8.2.10 versions.

2. CVE-2020-36724 Wordable <= 3.1.1 - Authentication Bypass

   Published 2023-06-07

   Critical·CVSS 9.8

   The Wordable plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.1.1. This is due to the use of a user supplied hashing algorithm passed to the hash_hmac() function and the use of a loose comparison on the hash which allows an attacker...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.