Wordfence Intelligence Weekly WordPress Vulnerability Report (August 26, 2024 to September 1, 2024)
📢 Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors? Through October 7th, 2024, XSS vulnerabilities in all plugins and themes with >=1,000 Active Installs are in scope for all researchers. In addition, through October 14th, 2024, researchers can earn up to $31,200, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we handle all the rest.
Last week, there were 160 vulnerabilities disclosed in 111 WordPress Plugins and 23 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 53 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to make the internet more secure. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 18,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
New Firewall Rules Deployed Last Week
The Wordfence Threat Intelligence Team reviews each vulnerability to determine impact and severity, along with assessing the likelihood of exploitation, to verify that the Wordfence Firewall provides sufficient protection.
The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our Premium, Care, and Response customers last week:
- MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.0 – Missing Authorization to Arbitrary Vendor Creation/Update/Deletion
- WAF-RULE-729 – Data redacted while we work with the vendor on a patch.
- WAF-RULE-730 – Data redacted while we work with the vendor on a patch.
- WAF-RULE-731 – Data redacted while we work with the vendor on a patch.
- WAF-RULE-733 – Data redacted while we work with the vendor on a patch.
Wordfence Premium, Care, and Response customers received this protection immediately, while users still running the free version of Wordfence will receive this enhanced protection after a 30 day delay.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 125 |
| Unpatched | 35 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Medium Severity | 132 |
| High Severity | 16 |
| Critical Severity | 12 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 74 |
| Missing Authorization | 31 |
| Cross-Site Request Forgery (CSRF) | 17 |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 11 |
| Deserialization of Untrusted Data | 6 |
| Exposure of Sensitive Information to an Unauthorized Actor | 6 |
| Use of Less Trusted Source | 3 |
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 2 |
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 2 |
| Unrestricted Upload of File with Dangerous Type | 2 |
| Authorization Bypass Through User-Controlled Key | 1 |
| Improper Authorization | 1 |
| Improper Control of Generation of Code ('Code Injection') | 1 |
| Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') | 1 |
| Protection Mechanism Failure | 1 |
| Server-Side Request Forgery (SSRF) | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 19 | |
| 11 | |
| 10 | |
| 9 | |
| 8 | |
| 7 | |
| 6 | |
| 6 | |
| 5 | |
| 5 | |
| 5 | |
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Accordion Image Menu | accordion-image-menu |
| Addon Elements for Elementor (formerly Elementor Addon Elements) | addon-elements-for-elementor-page-builder |
| Animated Number Counters | animated-number-counters |
| azurecurve Toggle Show/Hide | azurecurve-toggle-showhide |
| Beaver Builder Page Builder – Drag and Drop Website Builder | beaver-builder-lite-version |
| Booking Calendar | booking |
| Brickscore | brickscore |
| Bus Ticket Booking with Seat Reservation | bus-ticket-booking-with-seat-reservation |
| Carousel Slider | carousel-slider |
| Classic Addons – WPBakery Page Builder | classic-addons-wpbakery-page-builder-addons |
| Clean Login | clean-login |
| Collapsing Archives | collapsing-archives |
| Custom Field Template | custom-field-template |
| Custom Query Blocks | post-type-archive-mapping |
| Droip | droip |
| DSGVO All in one for WP | dsgvo-all-in-one-for-wp |
| E-cab Taxi Booking Manager for Woocommerce | ecab-taxi-booking-manager |
| easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution | easyjobs |
| Email Address Encoder | email-address-encoder |
| EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents | embedpress |
| Enhanced Search Box | extended-search-plugin |
| Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More | envira-gallery-lite |
| EU/UK VAT Validation Manager for WooCommerce | eu-vat-for-woocommerce |
| Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder | fluentform |
| Front End Users | front-end-only-users |
| FunnelKit Funnel Builder Pro | funnel-builder-pro |
| Generate Images (AI) – Magic Post Thumbnail | magic-post-thumbnail |
| GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | geodirectory |
| GHActivity | ghactivity |
| GiveWP – Donation Plugin and Fundraising Platform | give |
| Greenshift Query and Meta Addon | greenshiftquery |
| Gutenverse – WordPress Blocks, Page Builder & Site Editor | gutenverse |
| Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms | happyforms |
| HelloAsso | helloasso |
| HubSpot All-In-One Marketing – Forms, Popups, Live Chat | leadin |
| infolinks Ad Wrap | infolinks-ad-wrap |
| Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free | funnelforms-free |
| Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | jeg-elementor-kit |
| JobSearch WP Job Board | wp-jobsearch |
| Justified Image Grid - Premium WordPress Gallery | justified-image-grid |
| LatePoint Plugin | latepoint |
| Like Button Rating ♥ LikeBtn | likebtn-like-button |
| Login As Users | login-as-users |
| Logo Manager For Enamad – لوگوی نماد الکترونیکی | logo-manager-for-enamad |
| Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid | logo-showcase-ultimate |
| LWS Affiliation | lws-affiliation |
| Maintenance & Coming Soon Redirect Animation | maintenance-coming-soon-redirect-animation |
| Media Library Folders | media-library-plus |
| Memberpress | memberpress |
| Mollie Payments for WooCommerce | mollie-payments-for-woocommerce |
| MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar | mp3-music-player-by-sonaar |
| Name Directory | name-directory |
| Newspack | newspack-plugin |
| Ninja Forms – The Contact Form Builder That Grows With You | ninja-forms |
| Ninja Tables – Easy Data Table Builder | ninja-tables |
| NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization | nitropack |
| Oxygen Builder | oxygenbuilder |
| Page Builder: Pagelayer – Drag and Drop website builder | pagelayer |
| Payment forms, Buy now buttons, and Invoicing System | GetPaid | invoicing |
| Permalink Manager Lite | permalink-manager |
| Podlove Podcast Publisher | podlove-podcasting-plugin-for-wordpress |
| Polls CP | cp-polls |
| Popup Builder – Create highly converting, mobile friendly marketing popups. | popup-builder |
| Posts reminder | posts-reminder |
| Premium Portfolio Features for Phlox theme | auxin-portfolio |
| Premium SEO Pack – WP SEO Plugin | premium-seo-pack |
| Propovoice Pro | propovoice-pro |
| Relevanssi Live Ajax Search | relevanssi-live-ajax-search |
| Responsive Lightbox & Gallery | responsive-lightbox |
| Review Ratings | ratings-shorttags |
| Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More | reviews-feed |
| Royal Addons for Elementor – Addons and Templates Kit for Elementor | royal-elementor-addons |
| SendGrid for WordPress | wp-sendgrid-mailer |
| Share This Image | share-this-image |
| SKT Blocks – Gutenberg based Page Builder | skt-blocks |
| Special Feed Items | special-feed-items |
| Spiffy Calendar | spiffy-calendar |
| Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers | sunshine-photo-cart |
| Super Store Finder | superstorefinder-wp |
| Super Testimonial – Testimonial & Customer Review Slider Plugin for WordPress | super-testimonial |
| SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments | surecart |
| tagDiv Composer | td-composer |
| The Events Calendar Pro | events-calendar-pro |
| The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce | the-plus-addons-for-elementor-page-builder |
| The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid | the-post-grid |
| Theme Editor | theme-editor |
| Timetics – Appointment Booking Calendar & Scheduling | timetics |
| Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin | tourfic |
| Tutor LMS Pro | tutor-pro |
| Two-factor authentication (formerly IP Vault) | ip-vault-wp-firewall |
| Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor | ultimate-store-kit |
| Vikinghammer Tweet | vikinghammer-tweet |
| Visual CSS Style Editor | yellow-pencil-visual-theme-customizer |
| Visual Sound (old) | visual-sound-widget-for-soundcloud-and-artistplugme-visualdreams |
| Web and WooCommerce Addons for WPBakery Builder | vc-addons-by-bit14 |
| Web Application Firewall – website security | web-application-firewall |
| Woocommerce Addon Greenshift | greenshiftwoo |
| WP Accessibility Helper (WAH) | wp-accessibility-helper |
| WP Armour Extended | wp-armour-extended |
| WP Cerber Security, Anti-spam & Malware Scan | wp-cerber |
| WP Crowdfunding | wp-crowdfunding |
| WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) | delicious-recipes |
| WP Events Manager | wp-events-manager |
| WP Testimonial Widget | wp-testimonial-widget |
| WP To Do | wp-todo |
| WPMobile.App | wpappninja |
| WPZOOM Portfolio Lite – Filterable Portfolio Plugin | wpzoom-portfolio |
| Xpro Addons — 140+ Widgets for Elementor | xpro-elementor-addons |
| YARPP – Yet Another Related Posts Plugin | yet-another-related-posts-plugin |
| Zippy | zippy |
| Zynith SEO | zynith-seo |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Attire | attire |
| Betheme | betheme |
| Blockbooster | blockbooster |
| Blogpoet | blogpoet |
| Enfold - Responsive Multi-Purpose Theme | enfold |
| Esotera | esotera |
| Filmix | filmix |
| Fluida | fluida |
| FotaWP | fotawp |
| Hotel Galaxy | hotel-galaxy |
| IntoTheDark | intothedark |
| Kahuna | kahuna |
| Liquido | liquido |
| Mantra | mantra |
| Masterstudy - Education WordPress Theme | ms-lms-starter-theme |
| Mystique | mystique |
| Nirvana | nirvana |
| Opor Ayam | opor-ayam |
| Parabola | parabola |
| Posterity | posterity |
| ReviveNews | revivenews |
| Sliding Door | sliding-door |
| Tempera | tempera |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
Affected Software
JobSearch WP Job Board [wp-jobsearch]
Researcher
Affected Software
Propovoice Pro [propovoice-pro]
Researcher
Affected Software
SendGrid for WordPress [wp-sendgrid-mailer]
Researcher
Affected Software
Super Store Finder [superstorefinder-wp]
Researcher
Affected Software
Greenshift Query and Meta Addon [greenshiftquery]
Researcher
Affected Software
Super Store Finder [superstorefinder-wp]
Researcher
Affected Software
Woocommerce Addon Greenshift [greenshiftwoo]
Researcher
Affected Software
Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor [ultimate-store-kit]
Researcher
Affected Software
The Events Calendar Pro [events-calendar-pro]
Researcher
Affected Software
WP Testimonial Widget [wp-testimonial-widget]
Researcher
Affected Software
Zynith SEO [zynith-seo]
Researcher
Affected Software
Animated Number Counters [animated-number-counters]
Researcher
Affected Software
Attire [attire]
Researcher
Affected Software
Betheme [betheme]
Researcher
Affected Software
Clean Login [clean-login]
Researcher
Affected Software
Front End Users [front-end-only-users]
Researcher
Affected Software
Login As Users [login-as-users]
Researcher
Affected Software
Podlove Podcast Publisher [podlove-podcasting-plugin-for-wordpress]
Researcher
Affected Software
WP Events Manager [wp-events-manager]
Researcher
Affected Software
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar [mp3-music-player-by-sonaar]
Researcher
Affected Software
Researcher
Affected Software
Brickscore [brickscore]
Researcher
Affected Software
Researcher
Affected Software
Super Store Finder [superstorefinder-wp]
Researcher
Affected Software
Theme Editor [theme-editor]
Researcher
Affected Software
Tutor LMS Pro [tutor-pro]
Researcher
Affected Software
Researcher
Affected Software
Justified Image Grid - Premium WordPress Gallery [justified-image-grid]
Researcher
Affected Software
Media Library Folders [media-library-plus]
Researcher
Affected Software
Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons]
Researchers
Affected Software
azurecurve Toggle Show/Hide [azurecurve-toggle-showhide]
Researcher
Affected Software
Beaver Builder Page Builder – Drag and Drop Website Builder [beaver-builder-lite-version]
Researcher
Affected Software
Classic Addons – WPBakery Page Builder [classic-addons-wpbakery-page-builder-addons]
Researcher
Affected Software
Collapsing Archives [collapsing-archives]
Researcher
Affected Software
Custom Field Template [custom-field-template]
Researcher
Affected Software
Custom Query Blocks [post-type-archive-mapping]
Researcher
Affected Software
WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) [delicious-recipes]
Researcher
Affected Software
DSGVO All in one for WP [dsgvo-all-in-one-for-wp]
Researcher
Affected Software
Addon Elements for Elementor (formerly Elementor Addon Elements) [addon-elements-for-elementor-page-builder]
Researcher
Affected Software
Addon Elements for Elementor (formerly Elementor Addon Elements) [addon-elements-for-elementor-page-builder]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Esotera [esotera]
Researcher
Affected Software
Fluida [fluida]
Researcher
Front End Users <= 3.2.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
Affected Software
Front End Users [front-end-only-users]
Researcher
Affected Software
FunnelKit Funnel Builder Pro [funnel-builder-pro]
Researcher
Affected Software
GHActivity [ghactivity]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Hotel Galaxy [hotel-galaxy]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Kahuna [kahuna]
Researcher
Affected Software
LatePoint Plugin [latepoint]
Researcher
Affected Software
Liquido [liquido]
Researcher
Affected Software
Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid [logo-showcase-ultimate]
Researcher
Affected Software
Mantra [mantra]
Researcher
Affected Software
Mystique [mystique]
Researcher
Affected Software
Ninja Tables – Easy Data Table Builder [ninja-tables]
Researcher
Affected Software
Nirvana [nirvana]
Researcher
Affected Software
Parabola [parabola]
Researcher
Affected Software
Podlove Podcast Publisher [podlove-podcasting-plugin-for-wordpress]
Researcher
Affected Software
Posterity [posterity]
Researcher
Affected Software
Premium Portfolio Features for Phlox theme [auxin-portfolio]
Researcher
Affected Software
Royal Addons for Elementor – Addons and Templates Kit for Elementor [royal-elementor-addons]
Researcher
Affected Software
Share This Image [share-this-image]
Researcher
Affected Software
SKT Blocks – Gutenberg based Page Builder [skt-blocks]
Researcher
Affected Software
Sliding Door [sliding-door]
Researcher
Affected Software
Tempera [tempera]
Researcher
Affected Software
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce [the-plus-addons-for-elementor-page-builder]
Researcher
Affected Software
WPZOOM Portfolio Lite – Filterable Portfolio Plugin [wpzoom-portfolio]
Researcher
Affected Software
Media Library Folders [media-library-plus]
Researcher
Affected Software
Accordion Image Menu [accordion-image-menu]
Researcher
Affected Software
Beaver Builder Page Builder – Drag and Drop Website Builder [beaver-builder-lite-version]
Researcher
Affected Software
Researcher
Affected Software
EU/UK VAT Validation Manager for WooCommerce [eu-vat-for-woocommerce]
Researcher
Affected Software
Filmix [filmix]
Researcher
Affected Software
IntoTheDark [intothedark]
Researcher
Affected Software
Like Button Rating ♥ LikeBtn [likebtn-like-button]
Researcher
Affected Software
Generate Images (AI) – Magic Post Thumbnail [magic-post-thumbnail]
Researcher
MemberPress <= 1.11.29 - Reflected Cross-Site Scripting via mepr_screenname and mepr_key Parameters
6.1
Affected Software
Memberpress [memberpress]
Researcher
Affected Software
Name Directory [name-directory]
Researcher
Affected Software
Opor Ayam [opor-ayam]
Researcher
Affected Software
Review Ratings [ratings-shorttags]
Researcher
Affected Software
Special Feed Items [special-feed-items]
Researcher
Affected Software
Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers [sunshine-photo-cart]
Researcher
Affected Software
Researcher
Affected Software
tagDiv Composer [td-composer]
Researcher
Affected Software
tagDiv Composer [td-composer]
Researcher
Affected Software
Super Testimonial – Testimonial & Customer Review Slider Plugin for WordPress [super-testimonial]
Researcher
Affected Software
Vikinghammer Tweet [vikinghammer-tweet]
Researcher
Affected Software
WP Armour Extended [wp-armour-extended]
Researcher
Affected Software
Booking Calendar [booking]
Researcher
Affected Software
WPMobile.App [wpappninja]
Researcher
Affected Software
Visual CSS Style Editor [yellow-pencil-visual-theme-customizer]
Researcher
Affected Software
WP Accessibility Helper (WAH) [wp-accessibility-helper]
Researcher
Affected Software
Blockbooster [blockbooster]
Researcher
Affected Software
Blogpoet [blogpoet]
Researcher
Affected Software
FotaWP [fotawp]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Two-factor authentication (formerly IP Vault) [ip-vault-wp-firewall]
Researcher
Affected Software
JobSearch WP Job Board [wp-jobsearch]
Researcher
Affected Software
Maintenance & Coming Soon Redirect Animation [maintenance-coming-soon-redirect-animation]
Researcher
Affected Software
Masterstudy - Education WordPress Theme [ms-lms-starter-theme]
Researcher
Affected Software
Memberpress [memberpress]
Researcher
Affected Software
Mollie Payments for WooCommerce [mollie-payments-for-woocommerce]
Researcher
Affected Software
Permalink Manager Lite [permalink-manager]
Researcher
Affected Software
Researcher
Affected Software
Premium SEO Pack – WP SEO Plugin [premium-seo-pack]
Researcher
Affected Software
Relevanssi Live Ajax Search [relevanssi-live-ajax-search]
Researcher
Affected Software
Responsive Lightbox & Gallery [responsive-lightbox]
Researcher
Affected Software
ReviveNews [revivenews]
Researcher
Affected Software
Researcher
Affected Software
Web Application Firewall – website security [web-application-firewall]
Researcher
Affected Software
WP Cerber Security, Anti-spam & Malware Scan [wp-cerber]
Researcher
Affected Software
YARPP – Yet Another Related Posts Plugin [yet-another-related-posts-plugin]
Researcher
Affected Software
Zynith SEO [zynith-seo]
Researcher
Affected Software
Spiffy Calendar [spiffy-calendar]
Researcher
Affected Software
Bus Ticket Booking with Seat Reservation [bus-ticket-booking-with-seat-reservation]
Researcher
Affected Software
Logo Manager For Enamad – لوگوی نماد الکترونیکی [logo-manager-for-enamad]
Researcher
Affected Software
Researcher
Affected Software
Researchers
Affected Software
Polls CP [cp-polls]
Researcher
Affected Software
Polls CP [cp-polls]
Researcher
Affected Software
Web and WooCommerce Addons for WPBakery Builder [vc-addons-by-bit14]
Researcher
Affected Software
WP Testimonial Widget [wp-testimonial-widget]
Researcher
Affected Software
WP To Do [wp-todo]
Researcher
Affected Software
Carousel Slider [carousel-slider]
Researcher
Affected Software
Carousel Slider [carousel-slider]
Researcher
Affected Software
Email Address Encoder [email-address-encoder]
Researcher
Affected Software
Enhanced Search Box [extended-search-plugin]
Researcher
Affected Software
Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More [envira-gallery-lite]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
HelloAsso [helloasso]
Researcher
Affected Software
infolinks Ad Wrap [infolinks-ad-wrap]
Researcher
Affected Software
JobSearch WP Job Board [wp-jobsearch]
Researcher
Affected Software
JobSearch WP Job Board [wp-jobsearch]
Researcher
Affected Software
LatePoint Plugin [latepoint]
Researcher
Affected Software
LWS Affiliation [lws-affiliation]
Researcher
Affected Software
Newspack [newspack-plugin]
Researcher
Oxygen Builder <= 4.8.3 - Missing Authorization to Authenticated (Subscriber+) Stylesheet Update
4.3
Affected Software
Oxygen Builder [oxygenbuilder]
Researcher
Affected Software
Posts reminder [posts-reminder]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce [the-plus-addons-for-elementor-page-builder]
Researcher
Affected Software
Researcher
Affected Software
Visual Sound (old) [visual-sound-widget-for-soundcloud-and-artistplugme-visualdreams]
Researcher
Affected Software
WP Armour Extended [wp-armour-extended]
Researcher
Affected Software
WP Crowdfunding [wp-crowdfunding]
Researcher
Affected Software
Researcher
Affected Software
E-cab Taxi Booking Manager for Woocommerce [ecab-taxi-booking-manager]
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Comments