Wordfence Intelligence Weekly WordPress Vulnerability Report (March 25, 2024 to March 31, 2024)
🎉 Did you know we’re running a Bug Bounty Extravaganza again?
Earn over 6x our usual bounty rates, up to $10,000, for all vulnerabilities submitted through May 27th, 2024 when you opt to have Wordfence handle responsible disclosure!
Last week, there were 435 vulnerabilities disclosed in 339 WordPress Plugins and 8 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 84 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to make the internet more secure. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 15,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
New Firewall Rules Deployed Last Week
The Wordfence Threat Intelligence Team reviews each vulnerability to determine impact and severity, along with assessing the likelihood of exploitation, to verify that the Wordfence Firewall provides sufficient protection.
The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our Premium, Care, and Response customers last week:
- WAF-RULE-685 – Data redacted while we work with the vendor on a patch.
- WAF-RULE-687 – Data redacted while we work with the vendor on a patch.
Wordfence Premium, Care, and Response customers received this protection immediately, while users still running the free version of Wordfence will receive this enhanced protection after a 30 day delay.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 368 |
| Unpatched | 67 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Low Severity | 1 |
| Medium Severity | 366 |
| High Severity | 33 |
| Critical Severity | 35 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 255 |
| Missing Authorization | 42 |
| Cross-Site Request Forgery (CSRF) | 37 |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 34 |
| Deserialization of Untrusted Data | 14 |
| Exposure of Sensitive Information to an Unauthorized Actor | 9 |
| Server-Side Request Forgery (SSRF) | 7 |
| Unrestricted Upload of File with Dangerous Type | 7 |
| Use of Less Trusted Source | 6 |
| Authorization Bypass Through User-Controlled Key | 5 |
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 5 |
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 3 |
| Improper Input Validation | 3 |
| Guessable CAPTCHA | 1 |
| Improper Control of Generation of Code ('Code Injection') | 1 |
| Improper Neutralization of Special Elements used in a Command ('Command Injection') | 1 |
| Improper Privilege Management | 1 |
| Incomplete Denylist to Cross-Site Scripting | 1 |
| Incorrect Privilege Assignment | 1 |
| URL Redirection to Untrusted Site ('Open Redirect') | 1 |
| Use of Insufficiently Random Values | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 53 | |
| 34 | |
| 32 | |
| 24 | |
| 16 | |
| 16 | |
| 15 | |
| 14 | |
| 14 | |
| 12 | |
| 12 | |
| 11 | |
| 9 | |
| 9 | |
| 8 | |
| 8 | |
| 8 | |
| 7 | |
| 6 | |
| 6 | |
| 6 | |
| 6 | |
| 5 | |
| 5 | |
| 5 | |
| 4 | |
| 4 | |
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| 10Web Map Builder for Google Maps | wd-google-maps |
| Action Network | wp-action-network |
| Add Shortcodes Actions And Filters | add-actions-and-filters |
| Addon Elements for Elementor (formerly Elementor Addon Elements) | addon-elements-for-elementor-page-builder |
| AdsPlace'r – Ad Manager, Inserter, AdSense Ads | adsplacer |
| Advanced Search | advance-search |
| Advanced Sermons | advanced-sermons |
| Aesop Story Engine | aesop-story-engine |
| affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display | affiliate-toolkit-starter |
| AI Engine – The Chatbot, AI Framework & MCP for WordPress | ai-engine |
| AI Twitter Feeds (Twitter widget & shortcode) | ai-twitter-feeds |
| AI WP Writer – SEO content generator, chatGPT, Gemini | ai-wp-writer |
| Ajax Load More – Infinite Scroll, Load More, & Lazy Load | ajax-load-more |
| All In One Redirection | all-in-one-redirection |
| Announcement & Notification Banner – Bulletin | bulletin-announcements |
| Aparat for WordPress | wp-aparat |
| Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin | simply-schedule-appointments |
| Appointment Calendar | appointment-calendar |
| ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup | armember-membership |
| Awesome Support – WordPress HelpDesk & Support Plugin | awesome-support |
| BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net | woo-bulk-editor |
| Beaver Builder Page Builder – Drag and Drop Website Builder | beaver-builder-lite-version |
| Better Addons for Elementor | better-elementor-addons |
| BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot | betterdocs |
| Bold Page Builder | bold-page-builder |
| BoldGrid Easy SEO – Simple and Effective SEO | boldgrid-easy-seo |
| Booking Activities | booking-activities |
| Booking Package | booking-package |
| Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools | woocommerce-jetpack |
| Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content | brave-popup-builder |
| Breeze Cache | breeze |
| Broken Images | wp-broken-images |
| bSlider – Create Responsive Image, Post, Product, and Video Sliders | b-slider |
| BuddyPress Moderation | youzify-moderation |
| Builderall for WordPress | builderall-cheetah-for-wp |
| Bulk NoIndex & NoFollow Toolkit | bulk-noindex-nofollow-toolkit-by-mad-fish |
| Button | button |
| Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More | calculated-fields-form |
| Calendarista | calendarista |
| Calendarista Basic Edition – WordPress appointment booking system | calendarista-basic-edition |
| Carousel Anything For WPBakery Page Builder – Touch Slider and Carousel | carousel-anything |
| CartFlows – Funnel Builder & Checkout Plugin for WooCommerce | cartflows |
| CGC Maintenance Mode | cgc-maintenance-mode |
| Change default login logo,url and title | change-default-login-logo-url-and-title |
| Chatbot for WordPress by Collect.chat ⚡️ | collectchat |
| Chauffeur Taxi Booking System for WordPress | chauffeur-booking-system |
| Check & Log Email – Easy Email Testing & Mail logging | check-email |
| Christmas Greetings | christmas-greetings |
| Church Admin | church-admin |
| CM Download Manager – Organize, Protect & Share Files in WordPress | cm-download-manager |
| CMP – Coming Soon & Maintenance Plugin by NiteoThemes | cmp-coming-soon-maintenance |
| Co-marquage service-public.fr | co-marquage-service-public |
| Colibri Page Builder | colibri-page-builder |
| Comic Easel | comic-easel |
| Compact WP Audio Player | compact-wp-audio-player |
| Contact Form 7 Newsletter | contact-form-7-newsletter |
| Contact Form to Any API | contact-form-to-any-api |
| Contact Forms by Cimatti | contact-forms |
| Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | contest-gallery |
| Conversios: Google Analytics (GA4), Google Ads, Conversion and Analytics Tracking for Multi-Channels | enhanced-e-commerce-for-woocommerce-store |
| Convert Post Types | convert-post-types |
| coreActivity: Activity Logging for WordPress | coreactivity |
| Creative Image Slider – Responsive Slider Plugin | creative-image-slider |
| CRM Perks Forms – WordPress Form Builder | crm-perks-forms |
| Crypto Converter ⚡ Widget | crypto-converter-widget |
| CubeWP Framework | cubewp-framework |
| Custom Field Bulk Editor | custom-field-bulk-editor |
| Custom WooCommerce Checkout Fields Editor | add-fields-to-checkout-page-woocommerce |
| DD Rating | dd-rating |
| DearFlip – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer | 3d-flipbook-dflip-lite |
| DecaLog | decalog |
| DELUCKS SEO | delucks-seo |
| Doneren met Mollie | doneren-met-mollie |
| Dracula Dark Mode – Accessibility, Reading Mode & Dark Mode for WordPress | dracula-dark-mode |
| Dropdown multisite selector | dropdown-multisite-selector |
| DX-Watermark | dx-watermark |
| Easy Appointments | easy-appointments |
| Easy Form Builder by WhiteStudio — Drag & Drop Form Builder | easy-form-builder |
| Easy PopUp Show | easy-popup-show |
| Easy Social Feed – Social Photos Gallery and Post Feed for WordPress | easy-facebook-likebox |
| Easy Social Share Buttons for WordPress | easy-social-share-buttons3 |
| Easy Textillate | easy-textillate |
| Ecwid by Lightspeed Ecommerce Shopping Cart | ecwid-shopping-cart |
| Element Pack – Widgets, Templates & Addons for Elementor | bdthemes-element-pack-lite |
| Elementor Website Builder Pro | elementor-pro |
| Elementor Website Builder – more than just a page builder | elementor |
| ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor | elementskit-lite |
| Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | email-subscribers |
| ePoll – Best WordPress Voting Plugin for Poll & Contest | epoll-wp-voting |
| ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce | erp |
| Essential Addons for Elementor – Popular Elementor Templates & Widgets | essential-addons-for-elementor-lite |
| Event Tickets and Registration | event-tickets |
| EventPrime – Events Calendar, Bookings and Tickets | eventprime-event-calendar-management |
| Events Manager – Calendar, Bookings, Tickets, and more! | events-manager |
| Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin | everest-backup |
| Exchange Rates Widget | exchange-rates-widget |
| Exclusive Addons for Elementor | exclusive-addons-for-elementor |
| Export and Import Users and Customers | users-customers-import-export-for-wp-woocommerce |
| Falang multilanguage for WordPress | falang |
| Fancy Comments WordPress | fancy-facebook-comments |
| Fancy Product Designer | fancy-product-designer |
| Favicon Rotator | favicon-rotator |
| Favorites | favorites |
| FG PrestaShop to WooCommerce | fg-prestashop-to-woocommerce |
| File Manager for Google Drive – Integrate Google Drive | integrate-google-drive |
| Filter Custom Fields & Taxonomies Light | filter-custom-fields-taxonomies-light |
| Finale Lite – Sales Countdown Timer & Discount for WooCommerce | finale-woocommerce-sales-countdown-timer-discount |
| FlatPM – Ad Manager, AdSense and Custom Code | flatpm-wp |
| FlexMeeting – Webinar & Meeting Plugin for Jitsi Meet | webinar-and-video-conference-with-jitsi-meet |
| Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any Theme | UNKNOWN-CVE-2023-5509-1 |
| FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution | fluent-crm |
| Forminator Forms – Contact Form, Payment Form & Custom Form Builder | forminator |
| FOX – Currency Switcher Professional for WooCommerce | woocommerce-currency-switcher |
| Frontend Dashboard | frontend-dashboard |
| Fullscreen Galleria | fullscreen-galleria |
| FV Flowplayer Video Player | fv-wordpress-flowplayer |
| Gallery – Image and Video Gallery with Thumbnails | gallery-album |
| GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress | gamipress |
| Geo Controller | cf-geoplugin |
| GEO Plugin by Squirrly SEO | squirrly-seo |
| GetResponse for WordPress | getresponse-integration |
| Gratisfaction- Loyalty, Rewards , Referral, Birthday and Giveaway Program | gratisfaction-all-in-one-loyalty-contests-referral-program-for-woocommerce |
| Grid Shortcodes | grid-shortcodes |
| GS Pinterest Portfolio – Pins Grid, Masonry, User Profile, Popup & Board Widgets | gs-pinterest-portfolio |
| Gutenberg Block Editor Toolkit – EditorsKit | block-options |
| Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | essential-blocks |
| Hacklog Down As PDF | down-as-pdf |
| Hash Elements | hash-elements |
| Header Image Slider | header-image-slider |
| HeartThis | heart-this |
| Hercules Core | hercules-core |
| Hot Random Image | hot-random-image |
| HT Mega Addons for Elementor – Elementor Widgets & Template Builder | ht-mega-for-elementor |
| Hubbub Lite – Fast, free social sharing and follow buttons | social-pug |
| HUSKY – Products Filter Professional for WooCommerce | woocommerce-products-filter |
| iCalendrier | icalendrier |
| iFlyChat – WordPress Chat | iflychat |
| Image Hover Effects – Elementor Addon | image-hover-effects-addon-for-elementor |
| Iptanus File Upload | wp-file-upload |
| JCH Optimize | jch-optimize |
| Kadence Blocks — Page Builder Toolkit for Gutenberg Editor | kadence-blocks |
| Kanban Boards for WordPress | kanban |
| Klarna for WooCommerce | klarna-payments-for-woocommerce |
| Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages | page-builder-add |
| Landingi Landing Pages | landingi-landing-pages |
| Layouts for Elementor | layouts-for-elementor |
| Lightbox slider – Responsive Lightbox Gallery | simple-lightbox-gallery |
| Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms | limit-attempts |
| Link Whisper Free | link-whisper |
| LionScripts: IP Blocker Lite | ip-address-blocker |
| List category posts | list-category-posts |
| Locatoraid Store Locator | locatoraid |
| Lordicon Animated Icons | lordicon-interactive-icons |
| LWS Optimize – All-in-One Speed Booster & Cache Tools | lws-optimize |
| Mailmunch Forms for Mailchimp | mailchimp-forms-by-mailmunch |
| Mailster WordPress Newsletter Plugin | mailster |
| Mang Board WP | mangboard |
| Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits | master-addons |
| MasterStudy LMS WordPress Plugin – for Online Courses and Education | masterstudy-lms-learning-management-system |
| Max Mega Menu | megamenu |
| MDTF – Meta Data and Taxonomies Filter | wp-meta-data-filter-and-taxonomy-filter |
| Media Cloud for Bunny CDN, Amazon S3, Cloudflare R2, Google Cloud Storage, DigitalOcean and more | ilab-media-tools |
| Media Library Assistant | media-library-assistant |
| Media Library Folders | media-library-plus |
| Meta Box | meta-box |
| Meta Tag Manager | meta-tag-manager |
| Mighty Classic Pros And Cons | joomdev-wp-pros-cons |
| Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress | molongui-authorship |
| Move Addons for Elementor | move-addons |
| MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar | mp3-music-player-by-sonaar |
| MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO | multiple-pages-generator-by-porthas |
| MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions | dc-woocommerce-multi-vendor |
| MyBookTable Bookstore by Stormhill Media | mybooktable |
| Nelio Content – Editorial Calendar & Social Media Auto-Posting | nelio-content |
| New Order Notification for WooCommerce | new-order-notification-for-woocommerce |
| News Wall | news-wall |
| Newsletter – Send awesome emails from WordPress | newsletter |
| Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder | the-plus-addons-for-block-editor |
| Ninja Forms – The Contact Form Builder That Grows With You | ninja-forms |
| NPS computy | nps-computy |
| Off-Canvas Sidebars & Menus (Slidebars) | off-canvas-sidebars |
| OneClick Chat to Order | oneclick-whatsapp-order |
| OpenID | openid |
| OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer) | stepbyteservice-openstreetmap |
| OSS Aliyun | oss-aliyun |
| Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE | otter-blocks |
| Page Builder: Pagelayer – Drag and Drop website builder | pagelayer |
| pageMash > Page Management | pagemash |
| Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions | paid-memberships-pro |
| Paid Memberships Pro – Mailchimp Add On | pmpro-mailchimp |
| Paid Memberships Pro – Payfast Gateway Add On | pmpro-payfast |
| PDF Builder for WPForms | pdf-builder-for-wpforms |
| PDF Invoices and Packing Slips For WooCommerce | pdf-invoices-and-packing-slips-for-woocommerce |
| PDF Viewer for Elementor | pdf-viewer-for-elementor |
| Photo Gallery by 10Web – Mobile-Friendly Image Gallery | photo-gallery |
| Photo Gallery by Ays – Responsive Image Gallery | gallery-photo-gallery |
| Photo Gallery – Responsive Image Galleries by Supsystic | gallery-by-supsystic |
| Piotnet Addons For Elementor | piotnet-addons-for-elementor |
| Platinum SEO | platinum-seo-pack |
| Pocket News Generator | pocket-news-generator |
| Podlove Podcast Publisher | podlove-podcasting-plugin-for-wordpress |
| Podlove Web Player | podlove-web-player |
| Pods – Custom Content Types and Fields | pods |
| Popup Builder – Create highly converting, mobile friendly marketing popups. | popup-builder |
| Popup Cart Lite for WooCommerce | woocommerce-woocart-popup-lite |
| Portfolio Filter Gallery – Photo Gallery | portfolio-filter-gallery |
| Post and Page Builder by BoldGrid – Visual Drag and Drop Editor | post-and-page-builder |
| Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) | buddyforms |
| Post Grid | post-grid |
| Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget | post-grid-carousel-ultimate |
| Post-Plugin Library | post-plugin-library |
| PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) | powerpack-lite-for-elementor |
| Premium Packages – Sell Digital Products Securely | wpdm-premium-packages |
| Prenotazioni | prenotazioni |
| PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links | pretty-link |
| Preview E-mails for WooCommerce | woo-preview-emails |
| Prime Slider Addons for Elementor | bdthemes-prime-slider-lite |
| Print Anywhere & Create PDFs of Order Receipts, Invoices, Labels & More. | print-google-cloud-print-gcp-woocommerce |
| Print Page Block – Print Full Page or Specific Section | print-page |
| Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce | woo-product-feed-pro |
| Product Import Export for WooCommerce – Import Export Product CSV Suite | product-import-export-for-woo |
| ProfileGrid – User Profiles, Groups and Communities | profilegrid-user-profiles-groups-and-communities |
| Property Hive | propertyhive |
| Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player | radio-player |
| Real Media Library: Media Library Folder & File Manager | real-media-library-lite |
| ReDi Restaurant Reservation – Instant Restaurant Booking & Table Reservation System | redi-restaurant-reservation |
| RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login | custom-registration-form-builder-with-submission-manager |
| Responsive flipbook wordpress plugin free download | wppdf |
| Responsive Tabs | responsive-tabs |
| ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema | reviewx |
| RoyalSlider | new-royalslider |
| RT Easy Builder – Advanced addons for Elementor | rt-easy-builder-advanced-addons-for-elementor |
| Salon Booking System – Free Version | salon-booking-system |
| SellKit – Funnel builder and checkout optimizer for WooCommerce to sell more, faster | sellkit |
| SEO Backlink Monitor | seo-backlink-monitor |
| SEO Title Tag | seo-title-tag |
| Seriously Simple Podcasting | seriously-simple-podcasting |
| Shipping with Venipak for WooCommerce | wc-venipak-shipping |
| Shortcode Addons- with Visual Composer, Divi, Beaver Builder and Elementor Extension | shortcode-addons |
| Shortcodes and extra features for Phlox theme | auxin-elements |
| Simple Ajax Chat – Add a Fast, Secure Chat Box | simple-ajax-chat |
| Simple Buttons Creator | simple-buttons-creator |
| Simple Revisions Delete | simple-revisions-delete |
| Simply Static – The Static Site Generator | simply-static |
| Sina Extension for Elementor | sina-extension-for-elementor |
| Sliced Invoices – WordPress Invoice Plugin | sliced-invoices |
| Slider by Supsystic | slider-by-supsystic |
| Slider Hero with Video Background, Animation | slider-hero |
| Slugs Manager: Delete Old Permalinks from WordPress Database | remove-old-slugspermalinks |
| Smart Forms – when you need more than just a contact form | smart-forms |
| Social Author Bio | social-autho-bio |
| Social Media Share Buttons & Social Sharing Icons | ultimate-social-media-icons |
| Social Share, Social Login and Social Comments Plugin – Super Socializer | super-socializer |
| Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews | gs-testimonial |
| SP Project & Document Manager | sp-client-document-manager |
| Special Box for Content | special-box-for-content |
| SpiderFAQ | spider-faq |
| Spiffy Calendar | spiffy-calendar |
| Spin 360 deg and 3D Model Viewer | spin360 |
| Sponsors | wp-sponsors |
| Stackable – Page Builder Gutenberg Blocks | stackable-ultimate-gutenberg-blocks |
| Sticky Anything | toast-stick-anything |
| Stratum Widgets for Elementor | stratum |
| StreamWeasels Twitch Integration | streamweasels-twitch-integration |
| Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers | sunshine-photo-cart |
| Survey Maker by AYS | survey-maker |
| Sydney Toolbox | sydney-toolbox |
| Tainacan | tainacan |
| Tax Rate Upload | tax-rate-upload |
| Testimonial – Testimonial Slider, Reviews Slider, Testimonial By AI | testimonial |
| The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce | the-plus-addons-for-elementor-page-builder |
| Themify Event Post | themify-event-post |
| Themify Shortcodes | themify-shortcodes |
| Thumbs Rating | thumbs-rating |
| Tooltips for WordPress | wordpress-tooltips |
| Top Bar | top-bar |
| Travelers' Map | travelers-map |
| Tumult Hype Animations | tumult-hype-animations |
| Tutor LMS Elementor Addons | tutor-lms-elementor-addons |
| Ultimate Addons for Beaver Builder – Lite | ultimate-addons-for-beaver-builder-lite |
| Ultimate Noindex Nofollow Tool II | ultimate-noindex-nofollow-tool-ii |
| Ultimate Social Comments – Email Notification & Lazy Load | ultimate-facebook-comments |
| underConstruction | underconstruction |
| Unlimited Elements For Elementor | unlimited-elements-for-elementor |
| User Rights Access Manager | user-rights-access-manager |
| VK All in One Expansion Unit | vk-all-in-one-expansion-unit |
| VS Contact Form | very-simple-contact-form |
| WC Builder – WooCommerce Page Builder for WPBakery | wc-builder |
| WCFM – Frontend Manager for WooCommerce | wc-frontend-manager |
| Web Icons | icon |
| WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels | print-invoices-packing-slip-labels-for-woocommerce |
| Weekly Class Schedule | weekly-class-schedule |
| weForms – Easy Drag & Drop Contact Form Builder For WordPress | weforms |
| Whizzy | whizzy |
| Wholesale For WooCommerce | woocommerce-wholesale-pricing |
| WholesaleX – B2B & Wholesale Plugin for WooCommerce with Wholesale Prices | wholesalex |
| WishSuite – Wishlist for WooCommerce | wishsuite |
| Woo Viet – WooCommerce for Vietnam | woo-viet |
| WooCommerce | post-new |
| WooCommerce Bookings Calendar | woo-bookings-calendar |
| WooCommerce Customers Manager | woocommerce-customers-manager |
| Woocommerce Social Media Share Buttons | woocommerce-social-media-share-buttons |
| WP Change Email Sender | wp-change-email-sender |
| WP Chat App | wp-whatsapp |
| WP Cost Estimation & Payment Forms Builder | wp-estimation-form |
| WP Customer Reviews | wp-customer-reviews |
| WP Directory Kit | wpdirectorykit |
| WP Editor | wp-editor |
| WP Express Checkout (Fast Payments via PayPal & Stripe) | wp-express-checkout |
| WP Fast Total Search – The Power of Indexed Search | fulltext-search |
| WP Go Maps – Google Map, OpenStreetMap, Leaflet Map | wp-google-maps |
| WP Hotel Booking | wp-hotel-booking |
| WP Post Disclaimer | wp-post-disclaimer |
| WP Reset | wp-reset |
| WP Responsive Tabs horizontal vertical and accordion Tabs | responsive-horizontal-vertical-and-accordion-tabs |
| WP Smart Import : Import any XML File to WordPress | wp-smart-import |
| WP STAGING Pro WordPress Backup Plugin | wp-staging-pro |
| WP STAGING – WordPress Backup, Restore, Migration & Clone | wp-staging |
| WP Travel Engine – Tour Booking Plugin – Tour Operator Software | wp-travel-engine |
| WP Twitter Mega Fan Box Widget | wp-twitter-mega-fan-box |
| WP User Profile Avatar | wp-user-profile-avatar |
| WP-CRM System – Manage Clients and Projects | wp-crm-system |
| WP-Eggdrop | wp-eggdrop |
| wp-forecast | wp-forecast |
| WP-Lister Lite for Amazon | wp-lister-for-amazon |
| WPBakery Page Builder Addons by Livemesh | addons-for-visual-composer |
| WPC Badge Management for WooCommerce | wpc-badge-management |
| WPCS – WordPress Currency Switcher Professional | currency-switcher |
| WPFront Notification Bar | wpfront-notification-bar |
| WPML Multilingual & Multicurrency for WooCommerce | woocommerce-multilingual |
| WPZOOM Addons for Beaver Builder | wpzoom-addons-for-beaver-builder |
| WPZOOM Connect: Social Icons Widget, Share Buttons & Click to Chat | social-icons-widget-by-wpzoom |
| WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce | wp-sms |
| Xpro Addons — 140+ Widgets for Elementor | xpro-elementor-addons |
| YITH WooCommerce Account Funds Premium | yith-woocommerce-account-funds-premium |
| Yoo Slider – Image Slider & Video Slider | yoo-slider |
| Zion Builder – Website Builder for Speed & Creativity | zionbuilder |
| Zoho Campaigns | zoho-campaigns |
| Zotpress | zotpress |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Astra | astra |
| Calliope | calliope |
| Jobeleon WPJobBoard | jobeleon-wpjobboard |
| Networker - Tech News WordPress Theme with Dark Mode | networker |
| Newsmatic | newsmatic |
| Nictitate | nictitate |
| OceanWP | oceanwp |
| Responsive | responsive |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
Affected Software
Chauffeur Taxi Booking System for WordPress [chauffeur-booking-system]
Researcher
Affected Software
CRM Perks Forms – WordPress Form Builder [crm-perks-forms]
Researcher
Affected Software
File Manager for Google Drive – Integrate Google Drive [integrate-google-drive]
Researcher
Affected Software
Layouts for Elementor [layouts-for-elementor]
Researcher
Affected Software
ProfileGrid – User Profiles, Groups and Communities [profilegrid-user-profiles-groups-and-communities]
Researcher
Affected Software
Salon Booking System – Free Version [salon-booking-system]
Researcher
Affected Software
WP Travel Engine – Tour Booking Plugin – Tour Operator Software [wp-travel-engine]
Researcher
Affected Software
Calendarista [calendarista]
Researcher
Affected Software
Contact Form to Any API [contact-form-to-any-api]
Researcher
Affected Software
CRM Perks Forms – WordPress Form Builder [crm-perks-forms]
Researcher
Affected Software
CubeWP Framework [cubewp-framework]
Researcher
Affected Software
Easy Form Builder by WhiteStudio — Drag & Drop Form Builder [easy-form-builder]
Researcher
Affected Software
Element Pack – Widgets, Templates & Addons for Elementor [bdthemes-element-pack-lite]
Researcher
Affected Software
Media Library Folders [media-library-plus]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
ProfileGrid – User Profiles, Groups and Communities [profilegrid-user-profiles-groups-and-communities]
Researcher
Affected Software
WooCommerce Customers Manager [woocommerce-customers-manager]
Researcher
Affected Software
Tooltips for WordPress [wordpress-tooltips]
Researcher
WP Cost Estimation & Payment Forms Builder <= 10.1.75 - Authenticated (Contributor+) SQL Injection
9.9
Affected Software
WP Cost Estimation & Payment Forms Builder [wp-estimation-form]
Researcher
Affected Software
WP Responsive Tabs horizontal vertical and accordion Tabs [responsive-horizontal-vertical-and-accordion-tabs]
Researcher
Affected Software
Zoho Campaigns [zoho-campaigns]
Researcher
Affected Software
Zotpress [zotpress]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
MasterStudy LMS WordPress Plugin – for Online Courses and Education [masterstudy-lms-learning-management-system]
Researcher
MasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX Action
9.8
Affected Software
MasterStudy LMS WordPress Plugin – for Online Courses and Education [masterstudy-lms-learning-management-system]
Researcher
Affected Software
Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers [sunshine-photo-cart]
Researcher
Affected Software
Researcher
Affected Software
10Web Map Builder for Google Maps [wd-google-maps]
Researcher
Affected Software
OSS Aliyun [oss-aliyun]
Researcher
Affected Software
Researcher
Affected Software
Slider by Supsystic [slider-by-supsystic]
Researcher
Affected Software
WP Travel Engine – Tour Booking Plugin – Tour Operator Software [wp-travel-engine]
Researcher
Affected Software
Researcher
Affected Software
Button [button]
Researcher
Affected Software
Church Admin [church-admin]
Researcher
Affected Software
Researcher
Affected Software
Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite]
Researcher
Filter Custom Fields & Taxonomies Light <= 1.05 - Authenticated (Contributor+) PHP Object Injection
8.8
Affected Software
Filter Custom Fields & Taxonomies Light [filter-custom-fields-taxonomies-light]
Researcher
Affected Software
Hercules Core [hercules-core]
Researcher
Affected Software
Link Whisper Free [link-whisper]
Researcher
Affected Software
Meta Tag Manager [meta-tag-manager]
Researcher
Affected Software
Researcher
Pods - Custom Content Types and Fields - Authenticated (Contributor+) SQL Injection via Shortcode
8.8
Affected Software
Researcher
Affected Software
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login [custom-registration-form-builder-with-submission-manager]
Researcher
Affected Software
Tumult Hype Animations [tumult-hype-animations]
Researcher
Affected Software
Check & Log Email – Easy Email Testing & Mail logging [check-email]
Researcher
Affected Software
Researcher
Affected Software
PDF Invoices and Packing Slips For WooCommerce [pdf-invoices-and-packing-slips-for-woocommerce]
Researcher
Affected Software
Responsive [responsive]
Researchers
Affected Software
Researcher
Affected Software
Builderall for WordPress [builderall-cheetah-for-wp]
Researcher
Affected Software
Researcher
Affected Software
Falang multilanguage for WordPress [falang]
Researcher
Affected Software
Researcher
Affected Software
HUSKY – Products Filter Professional for WooCommerce [woocommerce-products-filter]
Researcher
Product Import Export for WooCommerce <= 2.4.1 - Authenticated(Shop Manager+) Arbitrary File Upload
7.2
Affected Software
Product Import Export for WooCommerce – Import Export Product CSV Suite [product-import-export-for-woo]
Researcher
Affected Software
Salon Booking System – Free Version [salon-booking-system]
Researcher
Affected Software
Simple Ajax Chat – Add a Fast, Secure Chat Box [simple-ajax-chat]
Researcher
Affected Software
Simple Buttons Creator [simple-buttons-creator]
Researcher
Affected Software
Sticky Anything [toast-stick-anything]
Researcher
Affected Software
Action Network [wp-action-network]
Researchers
Affected Software
Announcement & Notification Banner – Bulletin [bulletin-announcements]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
VK All in One Expansion Unit [vk-all-in-one-expansion-unit]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons]
Researcher
Affected Software
Aesop Story Engine [aesop-story-engine]
Researcher
Affected Software
affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display [affiliate-toolkit-starter]
Researcher
Affected Software
Researcher
Affected Software
AI Twitter Feeds (Twitter widget & shortcode) [ai-twitter-feeds]
Researcher
Affected Software
Aparat for WordPress [wp-aparat]
Researcher
Affected Software
Astra [astra]
Researcher
Affected Software
Researcher
Affected Software
Beaver Builder Page Builder – Drag and Drop Website Builder [beaver-builder-lite-version]
Researcher
Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
WPZOOM Addons for Beaver Builder [wpzoom-addons-for-beaver-builder]
Researcher
Affected Software
Better Addons for Elementor [better-elementor-addons]
Researcher
Affected Software
Better Addons for Elementor [better-elementor-addons]
Researcher
Affected Software
Researcher
Affected Software
Bold Page Builder [bold-page-builder]
Researcher
Affected Software
BoldGrid Easy SEO – Simple and Effective SEO [boldgrid-easy-seo]
Researcher
Affected Software
Carousel Anything For WPBakery Page Builder – Touch Slider and Carousel [carousel-anything]
Researcher
Affected Software
Church Admin [church-admin]
Researcher
Affected Software
Church Admin [church-admin]
Researcher
Affected Software
Co-marquage service-public.fr [co-marquage-service-public]
Researcher
Affected Software
Chatbot for WordPress by Collect.chat ⚡️ [collectchat]
Researcher
Affected Software
Compact WP Audio Player [compact-wp-audio-player]
Researcher
Affected Software
CRM Perks Forms – WordPress Form Builder [crm-perks-forms]
Researcher
Affected Software
Crypto Converter ⚡ Widget [crypto-converter-widget]
Researcher
Affected Software
DearFlip – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer [3d-flipbook-dflip-lite]
Researcher
Affected Software
Dracula Dark Mode – Accessibility, Reading Mode & Dark Mode for WordPress [dracula-dark-mode]
Researcher
Affected Software
Dropdown multisite selector [dropdown-multisite-selector]
Researcher
Affected Software
Easy Appointments [easy-appointments]
Researcher
Easy Social Feed <= 6.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via fb_appid
6.4
Affected Software
Easy Social Feed – Social Photos Gallery and Post Feed for WordPress [easy-facebook-likebox]
Researcher
Affected Software
Easy Social Feed – Social Photos Gallery and Post Feed for WordPress [easy-facebook-likebox]
Researcher
Affected Software
Easy Textillate [easy-textillate]
Researcher
Affected Software
Ecwid by Lightspeed Ecommerce Shopping Cart [ecwid-shopping-cart]
Researcher
Affected Software
Element Pack – Widgets, Templates & Addons for Elementor [bdthemes-element-pack-lite]
Researcher
Affected Software
Addon Elements for Elementor (formerly Elementor Addon Elements) [addon-elements-for-elementor-page-builder]
Researcher
Affected Software
Addon Elements for Elementor (formerly Elementor Addon Elements) [addon-elements-for-elementor-page-builder]
Researcher
Affected Software
Researcher
Affected Software
Elementor Website Builder Pro [elementor-pro]
Researcher
Affected Software
Elementor Website Builder Pro [elementor-pro]
Researcher
Affected Software
Elementor Website Builder Pro [elementor-pro]
Researcher
ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Researcher
Affected Software
Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite]
Researchers
Affected Software
Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite]
Researcher
Affected Software
Events Manager – Calendar, Bookings, Tickets, and more! [events-manager]
Researcher
Affected Software
Exchange Rates Widget [exchange-rates-widget]
Researcher
Affected Software
Exclusive Addons for Elementor [exclusive-addons-for-elementor]
Researcher
Affected Software
Exclusive Addons for Elementor [exclusive-addons-for-elementor]
Researcher
Affected Software
Fancy Comments WordPress [fancy-facebook-comments]
Researcher
Affected Software
Favorites [favorites]
Researcher
Affected Software
FlatPM – Ad Manager, AdSense and Custom Code [flatpm-wp]
Researcher
Affected Software
Frontend Dashboard [frontend-dashboard]
Researcher
Affected Software
Fullscreen Galleria [fullscreen-galleria]
Researcher
Affected Software
Researcher
Affected Software
Geo Controller [cf-geoplugin]
Researcher
Affected Software
GetResponse for WordPress [getresponse-integration]
Researcher
Affected Software
Gratisfaction- Loyalty, Rewards , Referral, Birthday and Giveaway Program [gratisfaction-all-in-one-loyalty-contests-referral-program-for-woocommerce]
Researcher
Affected Software
Grid Shortcodes [grid-shortcodes]
Researcher
Affected Software
GS Pinterest Portfolio – Pins Grid, Masonry, User Profile, Popup & Board Widgets [gs-pinterest-portfolio]
Researcher
Affected Software
Researcher
Affected Software
Gutenberg Block Editor Toolkit – EditorsKit [block-options]
Researcher
Gutenberg Blocks by Kadence Blocks <= 3.2.25 - Authenticated (Author+) Server-Side Request Forgery
6.4
Affected Software
Kadence Blocks — Page Builder Toolkit for Gutenberg Editor [kadence-blocks]
Researcher
Affected Software
Kadence Blocks — Page Builder Toolkit for Gutenberg Editor [kadence-blocks]
Researcher
Affected Software
Hash Elements [hash-elements]
Researcher
Affected Software
Hot Random Image [hot-random-image]
Researcher
Affected Software
HT Mega Addons for Elementor – Elementor Widgets & Template Builder [ht-mega-for-elementor]
Researcher
Affected Software
iCalendrier [icalendrier]
Researcher
Affected Software
iFlyChat – WordPress Chat [iflychat]
Researcher
Affected Software
Image Hover Effects – Elementor Addon [image-hover-effects-addon-for-elementor]
Researcher
Affected Software
List category posts [list-category-posts]
Researcher
Affected Software
WPBakery Page Builder Addons by Livemesh [addons-for-visual-composer]
Researcher
Affected Software
Lordicon Animated Icons [lordicon-interactive-icons]
Researcher
Affected Software
Mailmunch Forms for Mailchimp [mailchimp-forms-by-mailmunch]
Researcher
Master Addons for Elementor <= 2.0.5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Media Library Assistant [media-library-assistant]
Researcher
Affected Software
Media Library Assistant [media-library-assistant]
Researcher
Mighty Classic Pros And Cons <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Mighty Classic Pros And Cons [joomdev-wp-pros-cons]
Researcher
Affected Software
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar [mp3-music-player-by-sonaar]
Researcher
Affected Software
MyBookTable Bookstore by Stormhill Media [mybooktable]
Researcher
Affected Software
Nelio Content – Editorial Calendar & Social Media Auto-Posting [nelio-content]
Researcher
Affected Software
Off-Canvas Sidebars & Menus (Slidebars) [off-canvas-sidebars]
Researcher
Affected Software
OneClick Chat to Order [oneclick-whatsapp-order]
Researcher
Affected Software
OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer) [stepbyteservice-openstreetmap]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
PDF Builder for WPForms [pdf-builder-for-wpforms]
Researcher
Affected Software
PDF Viewer for Elementor [pdf-viewer-for-elementor]
Researcher
Piotnet Addons For Elementor <= 2.4.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Piotnet Addons For Elementor [piotnet-addons-for-elementor]
Researcher
Affected Software
Podlove Web Player [podlove-web-player]
Researcher
Affected Software
Researcher
Affected Software
Portfolio Filter Gallery – Photo Gallery [portfolio-filter-gallery]
Researcher
Affected Software
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor [post-and-page-builder]
Researcher
Affected Software
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget [post-grid-carousel-ultimate]
Researcher
Affected Software
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) [powerpack-lite-for-elementor]
Researcher
Affected Software
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) [powerpack-lite-for-elementor]
Researcher
Affected Software
Prime Slider Addons for Elementor [bdthemes-prime-slider-lite]
Researcher
Affected Software
Researcher
Affected Software
Real Media Library: Media Library Folder & File Manager [real-media-library-lite]
Researchers
Affected Software
Researcher
Affected Software
Gallery – Image and Video Gallery with Thumbnails [gallery-album]
Researcher
Affected Software
Responsive Tabs [responsive-tabs]
Researcher
Affected Software
Researcher
Sina Extension for Elementor <= 3.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Sina Extension for Elementor [sina-extension-for-elementor]
Researcher
Affected Software
SP Project & Document Manager [sp-client-document-manager]
Researcher
Spin 360 deg and 3D Model Viewer <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Spin 360 deg and 3D Model Viewer [spin360]
Researcher
Affected Software
Sponsors [wp-sponsors]
Researcher
Affected Software
Stackable – Page Builder Gutenberg Blocks [stackable-ultimate-gutenberg-blocks]
Researchers
Affected Software
Stratum Widgets for Elementor [stratum]
Researcher
StreamWeasels Twitch Integration <= 1.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
StreamWeasels Twitch Integration [streamweasels-twitch-integration]
Researcher
Affected Software
Sydney Toolbox [sydney-toolbox]
Researchers
Affected Software
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce [the-plus-addons-for-elementor-page-builder]
Researcher
Affected Software
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce [the-plus-addons-for-elementor-page-builder]
Researcher
Affected Software
Travelers' Map [travelers-map]
Researcher
Affected Software
Tutor LMS Elementor Addons [tutor-lms-elementor-addons]
Researcher
Affected Software
Ultimate Addons for Beaver Builder – Lite [ultimate-addons-for-beaver-builder-lite]
Researcher
Affected Software
Ultimate Addons for Beaver Builder – Lite [ultimate-addons-for-beaver-builder-lite]
Researcher
Affected Software
Ultimate Addons for Beaver Builder – Lite [ultimate-addons-for-beaver-builder-lite]
Researcher
Affected Software
Ultimate Addons for Beaver Builder – Lite [ultimate-addons-for-beaver-builder-lite]
Researcher
Affected Software
Ultimate Addons for Beaver Builder – Lite [ultimate-addons-for-beaver-builder-lite]
Researcher
Affected Software
Ultimate Social Comments – Email Notification & Lazy Load [ultimate-facebook-comments]
Researcher
Affected Software
Unlimited Elements For Elementor [unlimited-elements-for-elementor]
Researcher
Affected Software
VK All in One Expansion Unit [vk-all-in-one-expansion-unit]
Researchers
Affected Software
WC Builder – WooCommerce Page Builder for WPBakery [wc-builder]
Researcher
Affected Software
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions [dc-woocommerce-multi-vendor]
Researcher
Affected Software
Web Icons [icon]
Researcher
Affected Software
Web Icons [icon]
Researcher
Affected Software
FlexMeeting – Webinar & Meeting Plugin for Jitsi Meet [webinar-and-video-conference-with-jitsi-meet]
Researcher
Affected Software
WishSuite – Wishlist for WooCommerce [wishsuite]
Researcher
WooCommerce Bookings Calendar <= 1.0.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
WooCommerce Bookings Calendar [woo-bookings-calendar]
Researcher
Affected Software
Iptanus File Upload [wp-file-upload]
Researcher
Affected Software
MDTF – Meta Data and Taxonomies Filter [wp-meta-data-filter-and-taxonomy-filter]
Researcher
Affected Software
MDTF – Meta Data and Taxonomies Filter [wp-meta-data-filter-and-taxonomy-filter]
Researcher
Affected Software
MDTF – Meta Data and Taxonomies Filter [wp-meta-data-filter-and-taxonomy-filter]
Researcher
Affected Software
WP Chat App [wp-whatsapp]
Researcher
Affected Software
WP Customer Reviews [wp-customer-reviews]
Researcher
Affected Software
WP Fast Total Search – The Power of Indexed Search [fulltext-search]
Researcher
Affected Software
WP Post Disclaimer [wp-post-disclaimer]
Researcher
Affected Software
WP User Profile Avatar [wp-user-profile-avatar]
Researcher
Affected Software
wp-forecast [wp-forecast]
Researcher
Affected Software
WPFront Notification Bar [wpfront-notification-bar]
Researcher
Affected Software
Add Shortcodes Actions And Filters [add-actions-and-filters]
Researcher
Affected Software
AdsPlace'r – Ad Manager, Inserter, AdSense Ads [adsplacer]
Researcher
Affected Software
Advanced Sermons [advanced-sermons]
Researcher
Affected Software
All In One Redirection [all-in-one-redirection]
Researcher
Affected Software
Appointment Calendar [appointment-calendar]
Researcher
Affected Software
Researcher
Affected Software
Print Anywhere & Create PDFs of Order Receipts, Invoices, Labels & More. [print-google-cloud-print-gcp-woocommerce]
Researcher
Affected Software
Booking Activities [booking-activities]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
BuddyPress Moderation [youzify-moderation]
Researcher
Bulk NoIndex & NoFollow Toolkit <= 2.01 - Reflected Cross-Site Scripting via tab, order, and orderby
6.1
Affected Software
Bulk NoIndex & NoFollow Toolkit [bulk-noindex-nofollow-toolkit-by-mad-fish]
Researcher
Affected Software
Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More [calculated-fields-form]
Researcher
Affected Software
Christmas Greetings [christmas-greetings]
Researcher
Affected Software
Co-marquage service-public.fr [co-marquage-service-public]
Researcher
Affected Software
Comic Easel [comic-easel]
Researcher
Affected Software
Contact Form 7 Newsletter [contact-form-7-newsletter]
Researcher
Affected Software
Researcher
Affected Software
Conversios: Google Analytics (GA4), Google Ads, Conversion and Analytics Tracking for Multi-Channels [enhanced-e-commerce-for-woocommerce-store]
Researcher
Affected Software
Convert Post Types [convert-post-types]
Researcher
Affected Software
Creative Image Slider – Responsive Slider Plugin [creative-image-slider]
Researcher
Affected Software
Custom Field Bulk Editor [custom-field-bulk-editor]
Researcher
Affected Software
Doneren met Mollie [doneren-met-mollie]
Researcher
Affected Software
Easy Social Share Buttons for WordPress [easy-social-share-buttons3]
Researcher
Affected Software
Researcher
Affected Software
Favicon Rotator [favicon-rotator]
Researcher
Affected Software
Researcher
Affected Software
FV Flowplayer Video Player [fv-wordpress-flowplayer]
Researcher
Affected Software
Hacklog Down As PDF [down-as-pdf]
Researcher
Affected Software
Header Image Slider [header-image-slider]
Researcher
Affected Software
Jobeleon WPJobBoard [jobeleon-wpjobboard]
Researcher
Affected Software
Kanban Boards for WordPress [kanban]
Researcher
Affected Software
Researcher
Affected Software
Mailster WordPress Newsletter Plugin [mailster]
Researcher
Affected Software
Mang Board WP [mangboard]
Researcher
Affected Software
OpenID [openid]
Researcher
Affected Software
pageMash > Page Management [pagemash]
Researcher
Affected Software
Photo Gallery by 10Web – Mobile-Friendly Image Gallery [photo-gallery]
Researcher
Affected Software
Photo Gallery by 10Web – Mobile-Friendly Image Gallery [photo-gallery]
Researcher
Affected Software
Photo Gallery by 10Web – Mobile-Friendly Image Gallery [photo-gallery]
Researcher
Affected Software
Photo Gallery by 10Web – Mobile-Friendly Image Gallery [photo-gallery]
Researcher
Affected Software
Photo Gallery by Ays – Responsive Image Gallery [gallery-photo-gallery]
Researcher
Affected Software
Podlove Podcast Publisher [podlove-podcasting-plugin-for-wordpress]
Researcher
Affected Software
Post Grid [post-grid]
Researcher
Affected Software
Post-Plugin Library [post-plugin-library]
Researcher
Affected Software
Premium Packages – Sell Digital Products Securely [wpdm-premium-packages]
Researcher
Affected Software
Preview E-mails for WooCommerce [woo-preview-emails]
Researcher
Affected Software
Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce [woo-product-feed-pro]
Researcher
Affected Software
Property Hive [propertyhive]
Researcher
Affected Software
ReDi Restaurant Reservation – Instant Restaurant Booking & Table Reservation System [redi-restaurant-reservation]
Researcher
Affected Software
Gallery – Image and Video Gallery with Thumbnails [gallery-album]
Researcher
Affected Software
RoyalSlider [new-royalslider]
Researcher
Affected Software
SEO Backlink Monitor [seo-backlink-monitor]
Researcher
Affected Software
GEO Plugin by Squirrly SEO [squirrly-seo]
Researcher
Affected Software
SEO Title Tag [seo-title-tag]
Researcher
Affected Software
Seriously Simple Podcasting [seriously-simple-podcasting]
Researcher
Affected Software
Shipping with Venipak for WooCommerce [wc-venipak-shipping]
Researcher
Affected Software
Researcher
Affected Software
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin [simply-schedule-appointments]
Researcher
Affected Software
Social Author Bio [social-autho-bio]
Researcher
Affected Software
SpiderFAQ [spider-faq]
Researcher
Affected Software
Spiffy Calendar [spiffy-calendar]
Researcher
Affected Software
Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers [sunshine-photo-cart]
Researcher
Affected Software
Survey Maker by AYS [survey-maker]
Researcher
Affected Software
Tax Rate Upload [tax-rate-upload]
Researcher
Affected Software
Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder [the-plus-addons-for-block-editor]
Researcher
Affected Software
Tumult Hype Animations [tumult-hype-animations]
Researcher
Affected Software
Unlimited Elements For Elementor [unlimited-elements-for-elementor]
Researcher
Affected Software
User Rights Access Manager [user-rights-access-manager]
Researcher
Affected Software
Weekly Class Schedule [weekly-class-schedule]
Researcher
Affected Software
WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels [print-invoices-packing-slip-labels-for-woocommerce]
Researcher
Woocommerce Social Media Share Buttons <= 1.3.0 - Cross-Site Request Forgery to Cross-Site Scripting
6.1
Affected Software
Woocommerce Social Media Share Buttons [woocommerce-social-media-share-buttons]
Researcher
Affected Software
WP Smart Import : Import any XML File to WordPress [wp-smart-import]
Researcher
Affected Software
WP Directory Kit [wpdirectorykit]
Researcher
Affected Software
WP Editor [wp-editor]
Researcher
Affected Software
WP Go Maps – Google Map, OpenStreetMap, Leaflet Map [wp-google-maps]
Researcher
Affected Software
WP-Lister Lite for Amazon [wp-lister-for-amazon]
Researcher
Affected Software
Yoo Slider – Image Slider & Video Slider [yoo-slider]
Researcher
Affected Software
WP Reset [wp-reset]
Researcher
Affected Software
AI WP Writer – SEO content generator, chatGPT, Gemini [ai-wp-writer]
Researcher
Affected Software
Astra [astra]
Researcher
Breeze <= 2.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via breeze_api_token
5.5
Affected Software
Breeze Cache [breeze]
Researcher
Affected Software
Responsive Tabs [responsive-tabs]
Researcher
CMP – Coming Soon & Maintenance <= 4.1.10 - Authenticated (Admin+) Server-Side Request Forgery
5.5
Affected Software
CMP – Coming Soon & Maintenance Plugin by NiteoThemes [cmp-coming-soon-maintenance]
Researcher
Affected Software
EventPrime – Events Calendar, Bookings and Tickets [eventprime-event-calendar-management]
Researcher
Affected Software
Researcher
Affected Software
Locatoraid Store Locator [locatoraid]
Researcher
Affected Software
Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress [molongui-authorship]
Researcher
Photo Gallery by Supsystic <= 1.15.16 - Authenticated (Administrator+) Stored Cross-Site Scripting
5.5
Affected Software
Photo Gallery – Responsive Image Galleries by Supsystic [gallery-by-supsystic]
Researcher
Affected Software
Simply Static – The Static Site Generator [simply-static]
Researcher
Affected Software
Slider Hero with Video Background, Animation [slider-hero]
Researcher
Affected Software
Addon Elements for Elementor (formerly Elementor Addon Elements) [addon-elements-for-elementor-page-builder]
Researcher
Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
5.4
Affected Software
Elementor Website Builder Pro [elementor-pro]
Researcher
Affected Software
Elementor Website Builder Pro [elementor-pro]
Researcher
Affected Software
Finale Lite – Sales Countdown Timer & Discount for WooCommerce [finale-woocommerce-sales-countdown-timer-discount]
Researcher
Affected Software
Lightbox slider – Responsive Lightbox Gallery [simple-lightbox-gallery]
Researcher
Affected Software
Pocket News Generator [pocket-news-generator]
Researcher
Affected Software
Salon Booking System – Free Version [salon-booking-system]
Researcher
Affected Software
Themify Shortcodes [themify-shortcodes]
Researcher
Affected Software
Whizzy [whizzy]
Researcher
Affected Software
WP-Eggdrop [wp-eggdrop]
Researcher
Affected Software
Awesome Support – WordPress HelpDesk & Support Plugin [awesome-support]
Researcher
Affected Software
Researcher
Affected Software
Booking Package [booking-package]
Researcher
Affected Software
Calendarista Basic Edition – WordPress appointment booking system [calendarista-basic-edition]
Researcher
Affected Software
CGC Maintenance Mode [cgc-maintenance-mode]
Researcher
Affected Software
coreActivity: Activity Logging for WordPress [coreactivity]
Researcher
Affected Software
DELUCKS SEO [delucks-seo]
Researcher
Affected Software
Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite]
Researcher
Affected Software
FG PrestaShop to WooCommerce [fg-prestashop-to-woocommerce]
Researcher
Affected Software
LionScripts: IP Blocker Lite [ip-address-blocker]
Researcher
Affected Software
Klarna for WooCommerce [klarna-payments-for-woocommerce]
Researcher
Affected Software
Move Addons for Elementor [move-addons]
Researcher
Affected Software
Researcher
Affected Software
Newsletter – Send awesome emails from WordPress [newsletter]
Researcher
Affected Software
Newsmatic [newsmatic]
Researcher
Affected Software
Paid Memberships Pro – Mailchimp Add On [pmpro-mailchimp]
Researcher
Affected Software
Paid Memberships Pro – Payfast Gateway Add On [pmpro-payfast]
Researcher
Affected Software
Researcher
Affected Software
RT Easy Builder – Advanced addons for Elementor [rt-easy-builder-advanced-addons-for-elementor]
Researcher
Affected Software
Simple Buttons Creator [simple-buttons-creator]
Researcher
Affected Software
Tainacan [tainacan]
Researcher
Affected Software
Thumbs Rating [thumbs-rating]
Researcher
Affected Software
VS Contact Form [very-simple-contact-form]
Researcher
Affected Software
Researcher
Affected Software
Whizzy [whizzy]
Researcher
Affected Software
Wholesale For WooCommerce [woocommerce-wholesale-pricing]
Researcher
Affected Software
WP Express Checkout (Fast Payments via PayPal & Stripe) [wp-express-checkout]
Researcher
Affected Software
WP Hotel Booking [wp-hotel-booking]
Researcher
Affected Software
Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more]
Researcher
Affected Software
Contact Forms by Cimatti [contact-forms]
Researcher
Affected Software
Fancy Product Designer [fancy-product-designer]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any Theme [UNKNOWN-CVE-2023-5509-1]
Researcher
Affected Software
NPS computy [nps-computy]
Researcher
Affected Software
Platinum SEO [platinum-seo-pack]
Researcher
Affected Software
Pocket News Generator [pocket-news-generator]
Researcher
Affected Software
Prenotazioni [prenotazioni]
Researcher
Affected Software
Simple Ajax Chat – Add a Fast, Secure Chat Box [simple-ajax-chat]
Researcher
Affected Software
Slider by Supsystic [slider-by-supsystic]
Researcher
Social Media Share Buttons <= 2.8.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
Affected Software
Social Media Share Buttons & Social Sharing Icons [ultimate-social-media-icons]
Researcher
Affected Software
Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer]
Researcher
Affected Software
Special Box for Content [special-box-for-content]
Researcher
Affected Software
Researcher
Affected Software
Themify Event Post [themify-event-post]
Researcher
Affected Software
Top Bar [top-bar]
Researcher
Affected Software
Ultimate Noindex Nofollow Tool II [ultimate-noindex-nofollow-tool-ii]
Researcher
Affected Software
underConstruction [underconstruction]
Researcher
Affected Software
WCFM – Frontend Manager for WooCommerce [wc-frontend-manager]
Researcher
Affected Software
Woo Viet – WooCommerce for Vietnam [woo-viet]
Researcher
Affected Software
Zion Builder – Website Builder for Speed & Creativity [zionbuilder]
Researcher
Affected Software
WP Change Email Sender [wp-change-email-sender]
Researcher
Affected Software
ePoll – Best WordPress Voting Plugin for Poll & Contest [epoll-wp-voting]
Researcher
Affected Software
WP STAGING Pro WordPress Backup Plugin [wp-staging-pro]
Researcher
WP Twitter Mega Fan Box Widget <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
Affected Software
WP Twitter Mega Fan Box Widget [wp-twitter-mega-fan-box]
Researcher
Affected Software
WP-CRM System – Manage Clients and Projects [wp-crm-system]
Researcher
Affected Software
WP-Eggdrop [wp-eggdrop]
Researcher
WP-Lister Lite for Amazon <= 2.6.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
Affected Software
WP-Lister Lite for Amazon [wp-lister-for-amazon]
Researcher
Affected Software
Advanced Search [advance-search]
Researcher
Affected Software
Broken Images [wp-broken-images]
Researcher
Affected Software
Calliope [calliope]
Researcher
Affected Software
Change default login logo,url and title [change-default-login-logo-url-and-title]
Researcher
Affected Software
Church Admin [church-admin]
Researcher
Affected Software
Church Admin [church-admin]
Researcher
Affected Software
CM Download Manager – Organize, Protect & Share Files in WordPress [cm-download-manager]
Researcher
Affected Software
CM Download Manager – Organize, Protect & Share Files in WordPress [cm-download-manager]
Researcher
Affected Software
CM Download Manager – Organize, Protect & Share Files in WordPress [cm-download-manager]
Researcher
Affected Software
Colibri Page Builder [colibri-page-builder]
Researcher
Affected Software
Custom WooCommerce Checkout Fields Editor [add-fields-to-checkout-page-woocommerce]
Researcher
Affected Software
DX-Watermark [dx-watermark]
Researcher
Affected Software
Easy Appointments [easy-appointments]
Researcher
Affected Software
Easy PopUp Show [easy-popup-show]
Researcher
Affected Software
Easy Social Feed – Social Photos Gallery and Post Feed for WordPress [easy-facebook-likebox]
Researcher
Affected Software
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks]
Researcher
Affected Software
Event Tickets and Registration [event-tickets]
Researcher
Affected Software
Events Manager – Calendar, Bookings, Tickets, and more! [events-manager]
Researcher
Affected Software
Events Manager – Calendar, Bookings, Tickets, and more! [events-manager]
Researcher
Affected Software
Events Manager – Calendar, Bookings, Tickets, and more! [events-manager]
Researcher
Affected Software
Researcher
HUSKY – Products Filter for WooCommerce (formerly WOOF) <= 1.3.5.1 - Cross-Site Request Forgery
4.3
Affected Software
HUSKY – Products Filter Professional for WooCommerce [woocommerce-products-filter]
Researcher
Affected Software
JCH Optimize [jch-optimize]
Researcher
Affected Software
Landingi Landing Pages [landingi-landing-pages]
Researcher
Affected Software
LWS Optimize – All-in-One Speed Booster & Cache Tools [lws-optimize]
Researcher
Affected Software
Max Mega Menu [megamenu]
Researcher
Affected Software
Meta Box [meta-box]
Researcher
Affected Software
Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress [molongui-authorship]
Researcher
Affected Software
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar [mp3-music-player-by-sonaar]
Researcher
Affected Software
MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO [multiple-pages-generator-by-porthas]
Researcher
Affected Software
New Order Notification for WooCommerce [new-order-notification-for-woocommerce]
Researcher
Affected Software
News Wall [news-wall]
Researcher
Affected Software
Nictitate [nictitate]
Researcher
Affected Software
Researcher
Affected Software
NPS computy [nps-computy]
Researcher
Affected Software
OceanWP [oceanwp]
Researcher
Affected Software
Researcher
Affected Software
Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro]
Researcher
Affected Software
Researcher
Affected Software
Popup Cart Lite for WooCommerce [woocommerce-woocart-popup-lite]
Researcher
Affected Software
ProfileGrid – User Profiles, Groups and Communities [profilegrid-user-profiles-groups-and-communities]
Researcher
Affected Software
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login [custom-registration-form-builder-with-submission-manager]
Researcher
Affected Software
Shortcodes and extra features for Phlox theme [auxin-elements]
Researcher
Affected Software
Simple Revisions Delete [simple-revisions-delete]
Researcher
Affected Software
Sliced Invoices – WordPress Invoice Plugin [sliced-invoices]
Researcher
Affected Software
Slugs Manager: Delete Old Permalinks from WordPress Database [remove-old-slugspermalinks]
Researcher
Affected Software
Researcher
Affected Software
WPZOOM Connect: Social Icons Widget, Share Buttons & Click to Chat [social-icons-widget-by-wpzoom]
Researcher
Affected Software
Spiffy Calendar [spiffy-calendar]
Researcher
WholesaleX <= 1.3.1 - Authenticated(Subscriber+) Missing Authorization via multiple AJAX actions
4.3
Affected Software
Researcher
Affected Software
Researcher
Affected Software
WooCommerce [post-new]
Researcher
Affected Software
WPML Multilingual & Multicurrency for WooCommerce [woocommerce-multilingual]
Researcher
Affected Software
FOX – Currency Switcher Professional for WooCommerce [woocommerce-currency-switcher]
Researcher
Affected Software
MDTF – Meta Data and Taxonomies Filter [wp-meta-data-filter-and-taxonomy-filter]
Researcher
Affected Software
Researcher
Affected Software
WPC Badge Management for WooCommerce [wpc-badge-management]
Researcher
Affected Software
WPCS – WordPress Currency Switcher Professional [currency-switcher]
Researcher
Affected Software
YITH WooCommerce Account Funds Premium [yith-woocommerce-account-funds-premium]
Researcher
Affected Software
Export and Import Users and Customers [users-customers-import-export-for-wp-woocommerce]
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Comments