Wordfence Intelligence Weekly WordPress Vulnerability Report (April 22, 2024 to April 28, 2024)
🎉 Did you know we’re running a Bug Bounty Extravaganza again?
Earn over 6x our usual bounty rates, up to $10,000, for all vulnerabilities submitted through May 27th, 2024 when you opt to have Wordfence handle responsible disclosure!
Last week, there were 310 vulnerabilities disclosed in 234 WordPress Plugins and 23 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 65 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to make the internet more secure. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 15,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 266 |
| Unpatched | 44 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Low Severity | 4 |
| Medium Severity | 252 |
| High Severity | 32 |
| Critical Severity | 22 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 98 |
| Missing Authorization | 82 |
| Cross-Site Request Forgery (CSRF) | 35 |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 13 |
| Exposure of Sensitive Information to an Unauthorized Actor | 12 |
| Server-Side Request Forgery (SSRF) | 12 |
| Authorization Bypass Through User-Controlled Key | 6 |
| Deserialization of Untrusted Data | 6 |
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 6 |
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 6 |
| Insertion of Sensitive Information into Log File | 6 |
| Unrestricted Upload of File with Dangerous Type | 5 |
| Improper Privilege Management | 4 |
| Use of Less Trusted Source | 4 |
| External Control of Assumed-Immutable Web Parameter | 3 |
| Improper Control of Generation of Code ('Code Injection') | 2 |
| Improper Input Validation | 2 |
| Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') | 2 |
| Authentication Bypass Using an Alternate Path or Channel | 1 |
| Guessable CAPTCHA | 1 |
| Improper Access Control | 1 |
| Improper Authorization | 1 |
| Improper Neutralization of Alternate XSS Syntax | 1 |
| URL Redirection to Untrusted Site ('Open Redirect') | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 30 | |
| 23 | |
| 18 | |
| 18 | |
| 17 | |
| 14 | |
| 13 | |
| 13 | |
| 13 | |
| 10 | |
| 10 | |
| 8 | |
| 7 | |
| 7 | |
| 7 | |
| 7 | |
| 6 | |
| 6 | |
| 6 | |
| 5 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Academy LMS | academy |
| AccessiYes Accessibility Widget for ADA, EAA & WCAG Readiness | accessibility-widget |
| ActiveDEMAND | activedemand |
| Ad Widget for WordPress | ad-widget |
| Admin and Customer Messages After Order for WooCommerce: OrderConvo | admin-and-client-message-after-order-for-woocommerce |
| Admin Bar Editor – Toolbar Customization with User Role based access & Custom menus | admin-bar |
| Advanced Floating Content Lite | advanced-floating-content-lite |
| Advanced Most Recent Posts Mod | advanced-most-recent-posts-mod |
| Advanced Post List | advanced-post-list |
| Advanced Testimonial Carousel For Elementor | advanced-testimonial-carousel-for-elementor |
| AGCA – Custom Dashboard & Login Page | ag-custom-admin |
| All-in-one Like Widget | all-in-one-facebook-like-widget |
| Analytify – Google Analytics Dashboard For WordPress (GA4 analytics tracking) | wp-analytify |
| Annual Archive | anual-archive |
| Appointment Hour Booking – Booking Calendar | appointment-hour-booking |
| AppPresser – Mobile App Framework | apppresser |
| Arconix FAQ | arconix-faq |
| Arconix Shortcodes | arconix-shortcodes |
| ARforms | arforms |
| ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup | armember-membership |
| Assistant – Every Day Productivity Apps | assistant |
| Auto Featured Image (Auto Post Thumbnail) | auto-post-thumbnail |
| BackUpWordPress | backupwordpress |
| Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) | barcode-scanner-lite-pos-to-manage-products-inventory-and-orders |
| Base64 Encoder/Decoder | base64-encoderdecoder |
| Better Addons for Elementor | better-elementor-addons |
| Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots | bp-better-messages |
| Blog2Social: Social Media Auto Post & Scheduler | blog2social |
| Booking Ultra Pro Appointments Booking Calendar Plugin | booking-ultra-pro |
| Brevo for WooCommerce | woocommerce-sendinblue-newsletter-subscription |
| Build 5 Star Reviews on Google Reviews, Yelp, Facebook… easily and risk-free | RRatingg | 5-stars-rating-funnel |
| Car Dealer (Dealership) and Vehicle sales | cardealer |
| CF7 File Download – File Download for CF7 | cf7-file-download |
| Classified Listing – AI-Powered Classified ads & Business Directory | classified-listing |
| ClickCease Click Fraud Protection | clickcease-click-fraud-protection |
| Client Dash | client-dash |
| CM Tooltip Glossary | enhanced-tooltipglossary |
| Colibri Page Builder | colibri-page-builder |
| Collapse-O-Matic | jquery-collapse-o-matic |
| Comments – wpDiscuz | wpdiscuz |
| Connect Contact Form 7 to Mailchimp, Brevo, MailerLite & Klaviyo | contact-form-7-mailchimp-extension |
| Contact Form, Survey, Quiz & Popup Form Builder – ARForms | arforms-form-builder |
| Content Views – Post Grid & Filter, Recent Posts, Category Posts … (Shortcode, Gutenberg Blocks, and Widgets for Elementor) | content-views-query-and-display-post-page |
| Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | contest-gallery |
| Cookie Information | Free GDPR Consent Solution | wp-gdpr-compliance |
| CookieHub – Cookie Consent Banner (DSGVO, CCPA, RGPD and GDPR compliance) | cookiehub |
| Cornerstone | cornerstone |
| Coupon & Discount Code Reveal Button | coupon-reveal-button |
| Crelly Slider | crelly-slider |
| Culqi | culqi-checkout |
| Custom field finder | custom-field-finder |
| Customify Site Library | customify-sites |
| Data Tables Generator by Supsystic | data-tables-generator-by-supsystic |
| Database Addon for Contact Form 7 – CFDB7 | contact-form-cfdb7 |
| Database for Contact Form 7, WPforms, Elementor forms | contact-form-entries |
| Easy Accept Payments via PayPal | wordpress-easy-paypal-payment-or-donation-accept-plugin |
| Easy Property Listings | easy-property-listings |
| Easy Set Favicon | easy-set-favicon |
| Element Pack Pro - Addon for Elementor Page Builder WordPress Plugin | bdthemes-element-pack |
| ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor | elementskit-lite |
| ElementsKit Pro | elementskit |
| EleSpare – News, Magazine and Blog Addons for Elementor | elespare |
| Email Customizer for WooCommerce | Drag and Drop Email Templates Builder | email-customizer-for-woocommerce |
| Embed Google Photos album | embed-google-photos-album-easily |
| ENL Newsletter | enl-newsletter |
| EPROLO-Dropshipping | eprolo-dropshipping |
| Essential Addons for Elementor – Popular Elementor Templates & Widgets | essential-addons-for-elementor-lite |
| Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media | evergreen-content-poster |
| Exclusive Addons for Elementor | exclusive-addons-for-elementor |
| Export and Import Users and Customers | users-customers-import-export-for-wp-woocommerce |
| FameTheme Demo Importer | famethemes-demo-importer |
| Fan Page Widget by ThemeNcode | facebook-fan-page-widget |
| Fancy Product Designer | fancy-product-designer |
| FG Joomla to WordPress | fg-joomla-to-wordpress |
| File Manager for Google Drive – Integrate Google Drive | integrate-google-drive |
| FileOrganizer – WordPress File Manager | fileorganizer |
| Filterable Portfolio | jungbillig-portfolio-gallery |
| Five Star Restaurant Reservations – WordPress Booking Plugin | restaurant-reservations |
| Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | form-maker |
| FOX – Currency Switcher Professional for WooCommerce | woocommerce-currency-switcher |
| Frontend Dashboard | frontend-dashboard |
| FV Flowplayer Video Player | fv-wordpress-flowplayer |
| GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | geodirectory |
| Getwid – Gutenberg Blocks | getwid |
| Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers | rafflepress |
| GiveWP – Donation Plugin and Fundraising Platform | give |
| Happy Addons for Elementor | happy-elementor-addons |
| Header Footer Code Manager Pro | 99robots-header-footer-code-manager-pro |
| Headline Analyzer | headline-analyzer |
| Hide Dashboard Notifications | wp-hide-backed-notices |
| HL Twitter | hl-twitter |
| HT Mega Addons for Elementor – Elementor Widgets & Template Builder | ht-mega-for-elementor |
| Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN | hummingbird-performance |
| Image Optimizer, Resizer and CDN – Sirv | sirv |
| Image Slider | image-slider-widget |
| Import and export users and customers | import-users-from-csv-with-meta |
| InstaWP Connect – 1-click WP Staging & Migration | instawp-connect |
| Interactive World Maps | interactive-world-maps |
| Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | jeg-elementor-kit |
| KB Support – Customer Support Ticket & Helpdesk Plugin, Knowledge Base Plugin | kb-support |
| Knowledge Base documentation & wiki plugin – BasePress Docs | basepress |
| Leaky Paywall | leaky-paywall |
| List Custom Taxonomy Widget | list-custom-taxonomy-widget |
| Live Composer – Free WordPress Website Builder | live-composer-page-builder |
| Maintenance Mode | hkdev-maintenance-mode |
| MainWP Child Reports | mainwp-child-reports |
| Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits | master-addons |
| Max Addons Pro for Bricks | max-addons-pro-bricks |
| MDTF – Meta Data and Taxonomies Filter | wp-meta-data-filter-and-taxonomy-filter |
| Meks Smart Social Widget | meks-smart-social-widget |
| Meks ThemeForest Smart Widget | meks-themeforest-smart-widget |
| MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor | metform |
| MF Gig Calendar | mf-gig-calendar |
| month name translation benaceur | month-name-translation-benaceur |
| Newsletter Popup | newsletter-popup |
| Newsletters | newsletters-lite |
| Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder | the-plus-addons-for-block-editor |
| Opal Widgets For Elementor | opal-widgets-for-elementor |
| OTP Login With Phone Number, OTP Verification | login-with-phone-number |
| Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction | paid-member-subscriptions |
| Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions | paid-memberships-pro |
| Payment Gateway Based Fees and Discounts for WooCommerce | checkout-fees-for-woocommerce |
| PDF Invoices & Packing Slips for WooCommerce | woocommerce-pdf-invoices-packing-slips |
| Photo Gallery by 10Web – Mobile-Friendly Image Gallery | photo-gallery |
| Photo Gallery – GT3 Image Gallery & Gutenberg Block Gallery | gt3-photo-video-gallery |
| Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery | nextgen-gallery |
| Piotnet Addons For Elementor | piotnet-addons-for-elementor |
| Piotnet Addons For Elementor Pro | piotnet-addons-for-elementor-pro |
| Podlove Podcast Publisher | podlove-podcasting-plugin-for-wordpress |
| Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred | mycred |
| Popup Box – Create Countdown, Coupon, Video, Contact Form Popups | ays-popup-box |
| Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation | optinmonster |
| Popup4Phone | popup4phone |
| PopupAlly | popupally |
| Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) | buddyforms |
| Post Grid | post-grid |
| Post Grid Gutenberg Blocks – PostX | ultimate-post |
| PPOM – Product Addons & Custom Fields for WooCommerce | woocommerce-product-addon |
| Premium Addons for Elementor – Powerful Elementor Templates & Widgets | premium-addons-for-elementor |
| Pretty Google Calendar | pretty-google-calendar |
| Pricing Table by Supsystic | pricing-table-by-supsystic |
| Print Anywhere & Create PDFs of Order Receipts, Invoices, Labels & More. | print-google-cloud-print-gcp-woocommerce |
| Print Invoice & Delivery Notes for WooCommerce | woocommerce-delivery-notes |
| ProfileGrid – User Profiles, Groups and Communities | profilegrid-user-profiles-groups-and-communities |
| Property Hive | propertyhive |
| Qi Addons For Elementor | qi-addons-for-elementor |
| Quick Featured Images | quick-featured-images |
| Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player | radio-player |
| Radio Station by netmix® – Manage and play your Show Schedule in WordPress! | radio-station |
| Rank Math SEO – AI SEO Tools to Dominate SEO Rankings | seo-by-rank-math |
| Rate My Post – Star Rating Plugin by FeedbackWP | rate-my-post |
| Recencio Book Reviews | recencio-book-reviews |
| Reviews Plus | reviews-plus |
| Royal Addons for Elementor – Addons and Templates Kit for Elementor | royal-elementor-addons |
| rtMedia for WordPress, BuddyPress and bbPress | buddypress-media |
| RTMForm Builder | romethemeform |
| RTMKit | rometheme-for-elementor |
| Salon Booking System – Free Version | salon-booking-system |
| Save as PDF Plugin by PDFCrowd | save-as-pdf-by-pdfcrowd |
| SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher | wp-scheduled-posts |
| Schema & Structured Data for WP & AMP | schema-and-structured-data-for-wp |
| Secure Copy Content Protection and Content Locking | secure-copy-content-protection |
| Seers AI | Cookie Consent Banner – GDPR & CCPA Compliant Consent Management Platform | seers-cookie-consent-banner-privacy-policy |
| Send PDF for Contact Form 7 | send-pdf-for-contact-form-7 |
| Serious Slider | cryout-serious-slider |
| SharkDropship & Affiliate for AliExpress, eBay, Amazon, Etsy and Temu | woo-aliexpress-dropshipping |
| Shipping Live Rates for USPS for WooCommerce | flexible-shipping-usps |
| Shortcodes Ultimate – Content Elements | shortcodes-ultimate |
| ShortPixel Critical CSS | shortpixel-critical-css |
| Simple Membership | simple-membership |
| Simply Static – The Static Site Generator | simply-static |
| Sina Extension for Elementor | sina-extension-for-elementor |
| Slash Admin | slash-admin |
| Smart Forms – when you need more than just a contact form | smart-forms |
| Smart Maintenance Mode | smart-maintenance-mode |
| Smart Recent Posts Widget | smart-recent-posts-widget |
| Social Sharing Plugin – Social Warfare | social-warfare |
| Social Snap — Social Share Buttons & Click to Tweet | socialsnap |
| Solid Affiliate | solid-affiliate |
| Solid Mail – SMTP email and logging made by SolidWP | wp-smtp |
| SP Project & Document Manager | sp-client-document-manager |
| Spectra Legacy – Gutenberg Blocks | ultimate-addons-for-gutenberg |
| SSU – WordPress Amazon S3 & Wasabi Smart File Uploads Plugin | wp-s3-smart-upload |
| Sticky Anything | toast-stick-anything |
| StreamWeasels Twitch Integration | streamweasels-twitch-integration |
| Survey Maker by AYS | survey-maker |
| The Pack Elementor addon | the-pack-addon |
| The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce | the-plus-addons-for-elementor-page-builder |
| Timetable and Event Schedule by MotoPress | mp-timetable |
| TotalPoll for Polls and Contests | totalpoll-lite |
| Tutor LMS – eLearning and online course solution | tutor |
| Ultimate 410 Gone Status Code | ultimate-410 |
| Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor | ultimate-blocks |
| User Meta – User Profile Builder and User management plugin | user-meta |
| Video Conferencing with Zoom | video-conferencing-with-zoom-api |
| VikRentCar Car Rental Management System | vikrentcar |
| Vision – Interactive Image Map with Hotspots Builder | vision |
| Vitepos – Point of Sale (POS) for WooCommerce | vitepos-lite |
| VK Block Patterns | vk-block-patterns |
| VOD Infomaniak | vod-infomaniak |
| Wallet for WooCommerce | woo-wallet |
| WebToffee WP Backup and Migration | wp-migration-duplicator |
| Weight Based Shipping Table Rate for WooCommerce – Flexible Shipping | flexible-shipping |
| Widget Post Slider | widget-post-slider |
| WooCommerce Amazon Affiliates - Wordpress Plugin | woozone |
| WooCommerce Shipping Label | shipping-labels-for-woo |
| WP ADA Compliance Check Basic | wp-ada-compliance-check-basic |
| WP Club Manager – WordPress Sports Club Plugin | wp-club-manager |
| WP Datepicker | wp-datepicker |
| WP Fusion Lite – Marketing Automation and CRM Integration for WordPress | wp-fusion-lite |
| WP GoToWebinar | wp-gotowebinar |
| WP LinkedIn Auto Publish | wp-linkedin-auto-publish |
| WP Masquerade | wp-masquerade |
| WP Media Category Management | wp-media-category-management |
| WP Migrate Pro | wp-migrate-db-pro |
| WP Page Post Widget Clone | wp-page-post-widget-clone |
| WP Prayer | wp-prayer |
| WP STAGING Pro WordPress Backup Plugin | wp-staging-pro |
| WP STAGING – WordPress Backup, Restore, Migration & Clone | wp-staging |
| WP Time Slots Booking Form | wp-time-slots-booking-form |
| WP Travel Engine – Tour Booking Plugin – Tour Operator Software | wp-travel-engine |
| WP ULike – Like & Dislike Buttons for Engagement and Feedback | wp-ulike |
| WP-Lister Lite for eBay | wp-lister-for-ebay |
| WP-Members Membership Plugin | wp-members |
| WP-Recall – Registration, Profile, Commerce & More | wp-recall |
| WPBot – ChatBot Conversational Forms | conversational-forms |
| WPC Composite Products for WooCommerce | wpc-composite-products |
| WPCal.io – Easy Meeting Scheduler | wpcal |
| WPPizza – A Restaurant Plugin | wppizza |
| WPZOOM Addons for Elementor – Starter Templates & Widgets | wpzoom-elementor-addons |
| XforWooCommerce | xforwoocommerce |
| XStore Core | et-core-plugin |
| YITH WooCommerce Compare | yith-woocommerce-compare |
| Zorem Local Pickup | advanced-local-pickup-for-woocommerce |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Accountra | accountra |
| Althea WP | althea-wp |
| Blocksy | blocksy |
| Brite | brite |
| Calliope | calliope |
| Colibri WP | colibri-wp |
| ColorNews | colornews |
| Elevate WP | elevate-wp |
| Financio | financio |
| Hugo WP | hugo-wp |
| Intrace | intrace |
| Pathway | pathway |
| Photology | photology |
| Royal Elementor Kit | royal-elementor-kit |
| Startupzy | startupzy |
| Teluro | teluro |
| Travey | travey |
| uDesign - Responsive WordPress Theme | u-design |
| Vertice | vertice |
| Virtue | virtue |
| WP Portfolio | wp-portfolio |
| XStore | xstore |
| Zeever | zeever |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
Affected Software
ActiveDEMAND [activedemand]
Researcher
Affected Software
Customify Site Library [customify-sites]
Researcher
Affected Software
Researcher
WP-Recall – Registration, Profile, Commerce & More <= 16.26.5 - Unauthenticated SQL Injection
10.0
Affected Software
Researcher
Affected Software
XStore [xstore]
Researcher
Affected Software
XStore Core [et-core-plugin]
Researcher
Affected Software
Element Pack Pro - Addon for Elementor Page Builder WordPress Plugin [bdthemes-element-pack]
Researcher
Timetable and Event Schedule by MotoPress <= 2.4.11 - Authenticated (Contributor+) SQL Injection
9.9
Affected Software
Timetable and Event Schedule by MotoPress [mp-timetable]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
XStore Core [et-core-plugin]
Researcher
Affected Software
Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) [barcode-scanner-lite-pos-to-manage-products-inventory-and-orders]
Researcher
Affected Software
Admin and Customer Messages After Order for WooCommerce: OrderConvo [admin-and-client-message-after-order-for-woocommerce]
Researcher
Affected Software
PPOM – Product Addons & Custom Fields for WooCommerce [woocommerce-product-addon]
Researcher
Affected Software
Researcher
Affected Software
WP Migrate Pro [wp-migrate-db-pro]
Researcher
Affected Software
XStore [xstore]
Researcher
Affected Software
XStore Core [et-core-plugin]
Researcher
Affected Software
XStore Core [et-core-plugin]
Researcher
Affected Software
Researcher
Affected Software
ENL Newsletter [enl-newsletter]
Researcher
Affected Software
Newsletters [newsletters-lite]
Researcher
Affected Software
Better Addons for Elementor [better-elementor-addons]
Researcher
Affected Software
Booking Ultra Pro Appointments Booking Calendar Plugin [booking-ultra-pro]
Researcher
Affected Software
Custom field finder [custom-field-finder]
Researcher
Affected Software
Researcher
Affected Software
ElementsKit Pro [elementskit]
Researcher
Affected Software
Researcher
Affected Software
rtMedia for WordPress, BuddyPress and bbPress [buddypress-media]
Researcher
Affected Software
Researcher
Affected Software
WP Datepicker [wp-datepicker]
Researcher
Affected Software
WP Masquerade [wp-masquerade]
Researcher
Affected Software
Researcher
Affected Software
XforWooCommerce [xforwoocommerce]
Researcher
Affected Software
XStore [xstore]
Researcher
Affected Software
XStore Core [et-core-plugin]
Researcher
Affected Software
WPBot – ChatBot Conversational Forms [conversational-forms]
Researcher
Affected Software
Database for Contact Form 7, WPforms, Elementor forms [contact-form-entries]
Researcher
Affected Software
Export and Import Users and Customers [users-customers-import-export-for-wp-woocommerce]
Researcher
Affected Software
Import and export users and customers [import-users-from-csv-with-meta]
Researcher
Affected Software
Newsletter Popup [newsletter-popup]
Researcher
PDF Invoices & Packing Slips for WooCommerce <= 3.8.0 - Unauthenticated Server-Side Request Forgery
7.2
Affected Software
PDF Invoices & Packing Slips for WooCommerce [woocommerce-pdf-invoices-packing-slips]
Researcher
PDF Invoices & Packing Slips for WooCommerce <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting
7.2
Affected Software
PDF Invoices & Packing Slips for WooCommerce [woocommerce-pdf-invoices-packing-slips]
Researcher
Affected Software
Piotnet Addons For Elementor Pro [piotnet-addons-for-elementor-pro]
Researcher
Affected Software
Popup4Phone [popup4phone]
Researcher
Affected Software
Researcher
Sendinblue for WooCommerce <= 4.0.17 - Authenticated (Editor+) Arbitrary File Download and Deletion
7.2
Affected Software
Brevo for WooCommerce [woocommerce-sendinblue-newsletter-subscription]
Researcher
Affected Software
Sticky Anything [toast-stick-anything]
Researcher
Survey Maker – Best WordPress Survey Plugin <= 3.6.6 - Unauthenticated Stored Cross-Site Scripting
7.2
Affected Software
Survey Maker by AYS [survey-maker]
Researcher
Affected Software
Researcher
Affected Software
WP-Lister Lite for eBay [wp-lister-for-ebay]
Researcher
Affected Software
Contact Form, Survey, Quiz & Popup Form Builder – ARForms [arforms-form-builder]
Researcher
Affected Software
Build 5 Star Reviews on Google Reviews, Yelp, Facebook… easily and risk-free | RRatingg [5-stars-rating-funnel]
Researcher
Affected Software
Zorem Local Pickup [advanced-local-pickup-for-woocommerce]
Researcher
Affected Software
FOX – Currency Switcher Professional for WooCommerce [woocommerce-currency-switcher]
Researcher
Affected Software
File Manager for Google Drive – Integrate Google Drive [integrate-google-drive]
Researcher
Affected Software
Researcher
Affected Software
XStore Core [et-core-plugin]
Researcher
Affected Software
AccessiYes Accessibility Widget for ADA, EAA & WCAG Readiness [accessibility-widget]
Researcher
Affected Software
Advanced Most Recent Posts Mod [advanced-most-recent-posts-mod]
Researcher
Affected Software
Auto Featured Image (Auto Post Thumbnail) [auto-post-thumbnail]
Researcher
Affected Software
Blocksy [blocksy]
Researcher
Affected Software
Blocksy [blocksy]
Researcher
Affected Software
Colibri Page Builder [colibri-page-builder]
Researcher
Collapse-O-Matic <= 1.8.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
Affected Software
Collapse-O-Matic [jquery-collapse-o-matic]
Researcher
Affected Software
ColorNews [colornews]
Researcher
Affected Software
Content Views – Post Grid & Filter, Recent Posts, Category Posts … (Shortcode, Gutenberg Blocks, and Widgets for Elementor) [content-views-query-and-display-post-page]
Researcher
Affected Software
Culqi [culqi-checkout]
Researcher
Affected Software
Embed Google Photos album [embed-google-photos-album-easily]
Researcher
Affected Software
Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite]
Researcher
Affected Software
Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite]
Researcher
Affected Software
Exclusive Addons for Elementor [exclusive-addons-for-elementor]
Researcher
Affected Software
Exclusive Addons for Elementor [exclusive-addons-for-elementor]
Researcher
Affected Software
Exclusive Addons for Elementor [exclusive-addons-for-elementor]
Researcher
FV Flowplayer Video Player <= 7.5.43.7212 - Authenticated (Subscriber+) Server-side Request Forgery
6.4
Affected Software
FV Flowplayer Video Player [fv-wordpress-flowplayer]
Researcher
Affected Software
Researcher
Affected Software
Getwid – Gutenberg Blocks [getwid]
Researcher
Affected Software
Happy Addons for Elementor [happy-elementor-addons]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Opal Widgets For Elementor [opal-widgets-for-elementor]
Researcher
Affected Software
Photo Gallery – GT3 Image Gallery & Gutenberg Block Gallery [gt3-photo-video-gallery]
Researcher
Piotnet Addons For Elementor <= 2.4.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Piotnet Addons For Elementor [piotnet-addons-for-elementor]
Researcher
Affected Software
Piotnet Addons For Elementor Pro [piotnet-addons-for-elementor-pro]
Researcher
Affected Software
Post Grid Gutenberg Blocks – PostX [ultimate-post]
Researcher
Premium Addons for Elementor <= 4.10.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Premium Addons for Elementor – Powerful Elementor Templates & Widgets [premium-addons-for-elementor]
Researcher
Premium Addons for Elementor <= 4.10.28 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Premium Addons for Elementor – Powerful Elementor Templates & Widgets [premium-addons-for-elementor]
Researcher
Affected Software
Premium Addons for Elementor – Powerful Elementor Templates & Widgets [premium-addons-for-elementor]
Researcher
Affected Software
Pretty Google Calendar [pretty-google-calendar]
Researcher
Affected Software
ProfileGrid – User Profiles, Groups and Communities [profilegrid-user-profiles-groups-and-communities]
Researcher
Affected Software
Qi Addons For Elementor [qi-addons-for-elementor]
Researcher
Affected Software
Researcher
Affected Software
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math]
Researcher
Affected Software
Recencio Book Reviews [recencio-book-reviews]
Researcher
Affected Software
Royal Addons for Elementor – Addons and Templates Kit for Elementor [royal-elementor-addons]
Researcher
Affected Software
Royal Addons for Elementor – Addons and Templates Kit for Elementor [royal-elementor-addons]
Researcher
Affected Software
Royal Addons for Elementor – Addons and Templates Kit for Elementor [royal-elementor-addons]
Researcher
Affected Software
Royal Addons for Elementor – Addons and Templates Kit for Elementor [royal-elementor-addons]
Affected Software
Save as PDF Plugin by PDFCrowd [save-as-pdf-by-pdfcrowd]
Researcher
Affected Software
Schema & Structured Data for WP & AMP [schema-and-structured-data-for-wp]
Researcher
Affected Software
Sina Extension for Elementor [sina-extension-for-elementor]
Researcher
Affected Software
Social Sharing Plugin – Social Warfare [social-warfare]
Researcher
Affected Software
The Pack Elementor addon [the-pack-addon]
Researcher
Affected Software
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce [the-plus-addons-for-elementor-page-builder]
Researcher
Affected Software
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce [the-plus-addons-for-elementor-page-builder]
Researcher
Ultimate 410 Gone Status Code <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Ultimate 410 Gone Status Code [ultimate-410]
Researcher
Affected Software
Virtue [virtue]
Researcher
Affected Software
WP Portfolio [wp-portfolio]
Researcher
Affected Software
Shortcodes Ultimate – Content Elements [shortcodes-ultimate]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
WPC Composite Products for WooCommerce [wpc-composite-products]
Researcher
Affected Software
Comments – wpDiscuz [wpdiscuz]
Researcher
Affected Software
WPZOOM Addons for Elementor – Starter Templates & Widgets [wpzoom-elementor-addons]
Researcher
Affected Software
XStore Core [et-core-plugin]
Researcher
Affected Software
Base64 Encoder/Decoder [base64-encoderdecoder]
Researcher
Affected Software
Base64 Encoder/Decoder [base64-encoderdecoder]
Researcher
Affected Software
Cornerstone [cornerstone]
Researcher
Affected Software
Easy Set Favicon [easy-set-favicon]
Researcher
Affected Software
Fancy Product Designer [fancy-product-designer]
Researcher
Affected Software
Header Footer Code Manager Pro [99robots-header-footer-code-manager-pro]
Researcher
Affected Software
Interactive World Maps [interactive-world-maps]
Researcher
Affected Software
Max Addons Pro for Bricks [max-addons-pro-bricks]
Researcher
Affected Software
Piotnet Addons For Elementor Pro [piotnet-addons-for-elementor-pro]
Researcher
Affected Software
Seers AI | Cookie Consent Banner – GDPR & CCPA Compliant Consent Management Platform [seers-cookie-consent-banner-privacy-policy]
Researcher
Affected Software
Slash Admin [slash-admin]
Researcher
Affected Software
The Pack Elementor addon [the-pack-addon]
Researcher
Affected Software
uDesign - Responsive WordPress Theme [u-design]
Researcher
Affected Software
Video Conferencing with Zoom [video-conferencing-with-zoom-api]
Researcher
Affected Software
VOD Infomaniak [vod-infomaniak]
Researcher
Affected Software
Researcher
Affected Software
WP Media Category Management [wp-media-category-management]
Researcher
Affected Software
XStore [xstore]
Researcher
Affected Software
XStore Core [et-core-plugin]
Researcher
Affected Software
AGCA – Custom Dashboard & Login Page [ag-custom-admin]
Researcher
Affected Software
Academy LMS [academy]
Researcher
Affected Software
Colibri Page Builder [colibri-page-builder]
Researcher
Affected Software
Crelly Slider [crelly-slider]
Researcher
Affected Software
Researcher
Affected Software
Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro]
Researcher
Simple Membership <= 4.4.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
5.4
Affected Software
Simple Membership [simple-membership]
Researcher
Affected Software
Researcher
Affected Software
Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor [ultimate-blocks]
Researchers
Affected Software
Advanced Testimonial Carousel For Elementor [advanced-testimonial-carousel-for-elementor]
Researcher
Affected Software
Researcher
Affected Software
Appointment Hour Booking – Booking Calendar [appointment-hour-booking]
Researcher
Affected Software
AppPresser – Mobile App Framework [apppresser]
Researcher
Affected Software
Researcher
Affected Software
Assistant – Every Day Productivity Apps [assistant]
Researcher
Affected Software
Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) [barcode-scanner-lite-pos-to-manage-products-inventory-and-orders]
Researcher
Affected Software
Print Anywhere & Create PDFs of Order Receipts, Invoices, Labels & More. [print-google-cloud-print-gcp-woocommerce]
Researcher
Affected Software
Blog2Social: Social Media Auto Post & Scheduler [blog2social]
Researcher
Affected Software
Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots [bp-better-messages]
Researcher
Affected Software
Client Dash [client-dash]
Researcher
Contact Form 7 Database Addon – CFDB7 <= 1.2.6.8 - Unauthenticated Sensitive Information Exposure
5.3
Affected Software
Database Addon for Contact Form 7 – CFDB7 [contact-form-cfdb7]
Researcher
Affected Software
Researcher
Affected Software
Easy Accept Payments via PayPal [wordpress-easy-paypal-payment-or-donation-accept-plugin]
Researcher
Affected Software
Easy Property Listings [easy-property-listings]
Researcher
Affected Software
Email Customizer for WooCommerce | Drag and Drop Email Templates Builder [email-customizer-for-woocommerce]
Researcher
Affected Software
Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite]
Researcher
Affected Software
Frontend Dashboard [frontend-dashboard]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
File Manager for Google Drive – Integrate Google Drive [integrate-google-drive]
Researcher
Affected Software
Leaky Paywall [leaky-paywall]
Researcher
Affected Software
OTP Login With Phone Number, OTP Verification [login-with-phone-number]
Researcher
Affected Software
Maintenance Mode [hkdev-maintenance-mode]
Researcher
Affected Software
Max Addons Pro for Bricks [max-addons-pro-bricks]
Researcher
Affected Software
Newsletters [newsletters-lite]
Researcher
Affected Software
Photo Gallery by 10Web – Mobile-Friendly Image Gallery [photo-gallery]
Researcher
Piotnet Addons For Elementor Pro <= 7.1.17 - Missing Authorization to Arbitrary Post/Page Deletion
5.3
Affected Software
Piotnet Addons For Elementor Pro [piotnet-addons-for-elementor-pro]
Researcher
Popup Box – Best WordPress Popup Plugin <= 4.3.6 - Missing Authorization to Information Exposure
5.3
Affected Software
Researcher
Affected Software
ProfileGrid – User Profiles, Groups and Communities [profilegrid-user-profiles-groups-and-communities]
Researcher
Affected Software
Rate My Post – Star Rating Plugin by FeedbackWP [rate-my-post]
Researcher
Affected Software
RTMForm Builder [romethemeform]
Researcher
Affected Software
Royal Addons for Elementor – Addons and Templates Kit for Elementor [royal-elementor-addons]
Researcher
Affected Software
Secure Copy Content Protection and Content Locking [secure-copy-content-protection]
Researcher
Affected Software
Send PDF for Contact Form 7 [send-pdf-for-contact-form-7]
Researcher
Affected Software
Simply Static – The Static Site Generator [simply-static]
Researcher
Affected Software
Researcher
Affected Software
Solid Affiliate [solid-affiliate]
Researcher
Affected Software
SSU – WordPress Amazon S3 & Wasabi Smart File Uploads Plugin [wp-s3-smart-upload]
Researcher
Affected Software
StreamWeasels Twitch Integration [streamweasels-twitch-integration]
Researcher
Affected Software
Survey Maker by AYS [survey-maker]
Researcher
Affected Software
Researcher
Affected Software
Shipping Live Rates for USPS for WooCommerce [flexible-shipping-usps]
Researcher
Affected Software
VikRentCar Car Rental Management System [vikrentcar]
Researcher
Affected Software
Researcher
Affected Software
VK Block Patterns [vk-block-patterns]
Researcher
Affected Software
Researcher
Affected Software
WP Club Manager – WordPress Sports Club Plugin [wp-club-manager]
Researcher
Affected Software
Researcher
Affected Software
WP STAGING Pro WordPress Backup Plugin [wp-staging-pro]
Researcher
Affected Software
WP Time Slots Booking Form [wp-time-slots-booking-form]
Researcher
Affected Software
WP Travel Engine – Tour Booking Plugin – Tour Operator Software [wp-travel-engine]
Researcher
Affected Software
WP-Members Membership Plugin [wp-members]
Researcher
Affected Software
XStore [xstore]
Researcher
Affected Software
Advanced Floating Content Lite [advanced-floating-content-lite]
Researcher
Affected Software
Advanced Post List [advanced-post-list]
Researcher
Affected Software
All-in-one Like Widget [all-in-one-facebook-like-widget]
Researcher
Affected Software
Annual Archive [anual-archive]
Researcher
Affected Software
CF7 File Download – File Download for CF7 [cf7-file-download]
Researcher
Affected Software
Colibri Page Builder [colibri-page-builder]
Researcher
Coupon & Discount Code Reveal Button <= 1.2.5 - Authenticated (Editor+) Stored Cross-Site Scripting
4.4
Affected Software
Coupon & Discount Code Reveal Button [coupon-reveal-button]
Researcher
Affected Software
Fan Page Widget by ThemeNcode [facebook-fan-page-widget]
Researcher
Affected Software
FileOrganizer – WordPress File Manager [fileorganizer]
Researcher
Affected Software
Filterable Portfolio [jungbillig-portfolio-gallery]
Researcher
Form Maker by 10Web <= 1.15.24 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting
4.4
Affected Software
Researcher
Affected Software
HL Twitter [hl-twitter]
Researcher
Affected Software
Image Slider [image-slider-widget]
Researcher
Affected Software
List Custom Taxonomy Widget [list-custom-taxonomy-widget]
Researcher
Affected Software
Meks Smart Social Widget [meks-smart-social-widget]
Researcher
Affected Software
Meks ThemeForest Smart Widget [meks-themeforest-smart-widget]
Researcher
Affected Software
month name translation benaceur [month-name-translation-benaceur]
Researcher
Affected Software
Newsletter Popup [newsletter-popup]
Researcher
Affected Software
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery]
Researcher
Affected Software
Popup4Phone [popup4phone]
Researcher
Affected Software
PopupAlly [popupally]
Researcher
Affected Software
Smart Recent Posts Widget [smart-recent-posts-widget]
Researcher
Affected Software
Wallet for WooCommerce [woo-wallet]
Researcher
Affected Software
Widget Post Slider [widget-post-slider]
Researcher
Affected Software
Ad Widget for WordPress [ad-widget]
Researcher
Admin Bar Remover <= 1.0.2.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
4.3
Affected Software
Researcher
Affected Software
Base64 Encoder/Decoder [base64-encoderdecoder]
Researcher
Affected Software
Classified Listing – AI-Powered Classified ads & Business Directory [classified-listing]
Researcher
Affected Software
ClickCease Click Fraud Protection [clickcease-click-fraud-protection]
Researcher
Affected Software
CM Tooltip Glossary [enhanced-tooltipglossary]
Researcher
Affected Software
Colibri WP [colibri-wp]
Elevate WP [elevate-wp]
Althea WP [althea-wp]
Hugo WP [hugo-wp]
Pathway [pathway]
Brite [brite]
Vertice [vertice]
Teluro [teluro]
Calliope [calliope]
Researcher
Affected Software
Connect Contact Form 7 to Mailchimp, Brevo, MailerLite & Klaviyo [contact-form-7-mailchimp-extension]
Researcher
Affected Software
Researcher
Affected Software
Data Tables Generator by Supsystic [data-tables-generator-by-supsystic]
Researcher
Affected Software
Researcher
Affected Software
EPROLO-Dropshipping [eprolo-dropshipping]
Researcher
Affected Software
Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media [evergreen-content-poster]
Researcher
Affected Software
FameTheme Demo Importer [famethemes-demo-importer]
Researchers
Affected Software
Financio [financio]
Researcher
Affected Software
Five Star Restaurant Reservations – WordPress Booking Plugin [restaurant-reservations]
Researcher
Affected Software
Weight Based Shipping Table Rate for WooCommerce – Flexible Shipping [flexible-shipping]
Researcher
Affected Software
Headline Analyzer [headline-analyzer]
Researcher
Affected Software
Hide Dashboard Notifications [wp-hide-backed-notices]
Researcher
Affected Software
HL Twitter [hl-twitter]
Researcher
Affected Software
HL Twitter [hl-twitter]
Researcher
HT Mega – Absolute Addons For Elementor <= 2.4.7 - Missing Authorization to Information Exposure
4.3
Affected Software
HT Mega Addons for Elementor – Elementor Widgets & Template Builder [ht-mega-for-elementor]
Researcher
Affected Software
InstaWP Connect – 1-click WP Staging & Migration [instawp-connect]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
MainWP Child Reports [mainwp-child-reports]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
MF Gig Calendar [mf-gig-calendar]
Researcher
Multiple Plugins by tychesoftwares <= (Various Versions) - Missing Authorization to Notice Dismissal
4.3
Affected Software
Arconix Shortcodes [arconix-shortcodes]
Arconix FAQ [arconix-faq]
Print Invoice & Delivery Notes for WooCommerce [woocommerce-delivery-notes]
Researcher
Affected Software
Newsletter Popup [newsletter-popup]
Researcher
Affected Software
Newsletter Popup [newsletter-popup]
Researcher
Affected Software
Live Composer – Free WordPress Website Builder [live-composer-page-builder]
Researcher
Affected Software
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction [paid-member-subscriptions]
Researcher
Affected Software
Payment Gateway Based Fees and Discounts for WooCommerce [checkout-fees-for-woocommerce]
Researcher
Affected Software
Piotnet Addons For Elementor Pro [piotnet-addons-for-elementor-pro]
Researcher
Affected Software
Podlove Podcast Publisher [podlove-podcasting-plugin-for-wordpress]
Researcher
Affected Software
Podlove Podcast Publisher [podlove-podcasting-plugin-for-wordpress]
Researcher
Affected Software
Researcher
Affected Software
ProfileGrid – User Profiles, Groups and Communities [profilegrid-user-profiles-groups-and-communities]
Researcher
Affected Software
ProfileGrid – User Profiles, Groups and Communities [profilegrid-user-profiles-groups-and-communities]
Researcher
Affected Software
Property Hive [propertyhive]
Researcher
Affected Software
Quick Featured Images [quick-featured-images]
Researcher
Affected Software
Researcher
Affected Software
Reviews Plus [reviews-plus]
Researcher
Affected Software
Royal Elementor Kit [royal-elementor-kit]
Researcher
Affected Software
Salon Booking System – Free Version [salon-booking-system]
Researcher
Affected Software
Researcher
Affected Software
Secure Copy Content Protection and Content Locking [secure-copy-content-protection]
Researcher
Affected Software
Serious Slider [cryout-serious-slider]
Researcher
Affected Software
ShortPixel Critical CSS [shortpixel-critical-css]
Researcher
Affected Software
Researcher
Affected Software
Smart Maintenance Mode [smart-maintenance-mode]
Researcher
Affected Software
SP Project & Document Manager [sp-client-document-manager]
Researcher
SP Project & Document Manager <= 4.71 - Insecure Direct Object Reference to Information Exposure
4.3
Affected Software
SP Project & Document Manager [sp-client-document-manager]
Researcher
Affected Software
Spectra Legacy – Gutenberg Blocks [ultimate-addons-for-gutenberg]
Researcher
Affected Software
Teluro [teluro]
Researcher
Affected Software
Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder [the-plus-addons-for-block-editor]
Researcher
Affected Software
TotalPoll for Polls and Contests [totalpoll-lite]
Researcher
Affected Software
Vitepos – Point of Sale (POS) for WooCommerce [vitepos-lite]
Researcher
Affected Software
WebToffee WP Backup and Migration [wp-migration-duplicator]
Researcher
Affected Software
MDTF – Meta Data and Taxonomies Filter [wp-meta-data-filter-and-taxonomy-filter]
Researcher
Affected Software
WP ADA Compliance Check Basic [wp-ada-compliance-check-basic]
Researcher
Affected Software
Cookie Information | Free GDPR Consent Solution [wp-gdpr-compliance]
Researcher
Affected Software
WP GoToWebinar [wp-gotowebinar]
Researcher
Affected Software
WP LinkedIn Auto Publish [wp-linkedin-auto-publish]
Researcher
Affected Software
WP Page Post Widget Clone [wp-page-post-widget-clone]
Researcher
Affected Software
WP Prayer [wp-prayer]
Researcher
Affected Software
WP Prayer [wp-prayer]
Researcher
Affected Software
WP Prayer [wp-prayer]
Researcher
Affected Software
Researcher
Affected Software
WPPizza – A Restaurant Plugin [wppizza]
Researcher
Affected Software
Researcher
Affected Software
XStore [xstore]
Researcher
Affected Software
YITH WooCommerce Compare [yith-woocommerce-compare]
Researcher
Affected Software
WooCommerce Shipping Label [shipping-labels-for-woo]
Researcher
Affected Software
BackUpWordPress [backupwordpress]
Researcher
Affected Software
Car Dealer (Dealership) and Vehicle sales [cardealer]
Researcher
Affected Software
Pricing Table by Supsystic [pricing-table-by-supsystic]
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Comments