Wordfence Intelligence Weekly WordPress Vulnerability Report (January 13, 2025 to January 19, 2025)
📢 Did you know Wordfence runs a Bug Bounty Program for all WordPress plugins and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we handle all the rest.
Last week, there were 708 vulnerabilities disclosed in 668 WordPress Plugins and 19 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 81 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to make the internet more secure. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 22,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
New Firewall Rules Deployed Last Week
The Wordfence Threat Intelligence Team reviews each vulnerability to determine impact and severity, along with assessing the likelihood of exploitation, to verify that the Wordfence Firewall provides sufficient protection.
The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our Premium, Care, and Response customers last week:
- Adifier System <= 3.1.7 – Unauthenticated Arbitrary Password Reset
- WAF-RULE-794 – Data redacted while we work with the vendor on a patch.
- WAF-RULE-795 – Data redacted while we work with the vendor on a patch.
- WAF-RULE-796 – Data redacted while we work with the vendor on a patch.
- WAF-RULE-798 – Data redacted while we work with the vendor on a patch.
- WAF-RULE-799 – Data redacted while we work with the vendor on a patch.
- WAF-RULE-800 – Data redacted while we work with the vendor on a patch.
- WAF-RULE-801 – Data redacted while we work with the vendor on a patch.
- WAF-RULE-802 – Data redacted while we work with the vendor on a patch.
Wordfence Premium, Care, and Response customers received this protection immediately, while users still running the free version of Wordfence will receive this enhanced protection after a 30 day delay.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 139 |
| Unpatched | 569 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Low Severity | 2 |
| Medium Severity | 654 |
| High Severity | 43 |
| Critical Severity | 9 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 465 |
| Cross-Site Request Forgery (CSRF) | 121 |
| Missing Authorization | 57 |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 20 |
| Unrestricted Upload of File with Dangerous Type | 9 |
| Exposure of Sensitive Information to an Unauthorized Actor | 7 |
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 7 |
| Incorrect Privilege Assignment | 4 |
| Deserialization of Untrusted Data | 3 |
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 3 |
| Authorization Bypass Through User-Controlled Key | 2 |
| Exposure of Private Personal Information to an Unauthorized Actor | 2 |
| Dependency on Vulnerable Third-Party Component | 1 |
| Files or Directories Accessible to External Parties | 1 |
| Improper Access Control | 1 |
| Improper Authentication | 1 |
| Improper Control of Generation of Code ('Code Injection') | 1 |
| Improper Privilege Management | 1 |
| Insertion of Sensitive Information into Log File | 1 |
| Unverified Password Change | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 223 | |
| 160 | |
| 62 | |
| 43 | |
| 40 | |
| 13 | |
| 13 | |
| 13 | |
| 10 | |
| 7 | |
| 7 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| "Visit Site" Link enhanced – WordPress PlugIn | visit-site-link-enhanced |
| .TUBE Video Curator | tube-video-curator |
| 301 SEO REDIRECTION | COUNTRY BASED REDIRECTION [ REDIRECTION PLUS ] | redirection-plus |
| a Gateway for Pasargad Bank on WooCommerce | a-gateway-for-pasargad-bank-on-woocommerce |
| Accessibility Task Manager | accessibility-task-manager |
| Ad Blocking Detector | ad-blocking-detector |
| Add custom content after post | add-custom-content-after-post |
| add custom google tag manager | add-custom-google-tag-manager |
| Add RSS | add-rss |
| Addon Elements for Elementor (formerly Elementor Addon Elements) | addon-elements-for-elementor-page-builder |
| Admin and Customer Messages After Order for WooCommerce: OrderConvo | admin-and-client-message-after-order-for-woocommerce |
| Admin Cleanup | admin-cleanup |
| Admin Menu Organizer | admin-menu-organizer |
| Admin Options Pages | admin-options-pages |
| AdsMiddle | adsmiddle |
| Advanced Angular Contact Form | advanced-angular-contact-form |
| Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution | file-manager-advanced |
| Affiliate Tools Việt Nam | affiliate-tools-viet-nam |
| Age Verification for your checkout page. Verify your customer's identity | agecheckernet |
| AI Responsive Gallery Album | ai-responsive-gallery-album |
| Ajax Contact Form | fws-ajax-contact-form |
| Ajax WP Query Search Filter | ajax-wp-query-search-filter |
| all-in-one-box-login | all-in-one-login |
| AlT Report | alt-report |
| Altima Lookbook Free for WooCommerce | altima-lookbook-free-for-woocommerce |
| Amber | amberlink |
| amr personalise | amr-personalise |
| Annie | annie |
| Anonymize Links | anonymize-links |
| Apply with LinkedIn buttons | apply-with-linkedin-buttons |
| ApplyOnline – Application Form Builder and Manager | apply-online |
| Attach Gallery Posts | attach-gallery-posts |
| Auphonic Importer | auphonic-importer |
| Author Showcase | author-showcase |
| Auto FTP | auto-ftp |
| AW WooCommerce Kode Pembayaran | aw-woocommerce-kode-pembayaran |
| Awesome Hooks | awesome-hooks |
| Awesome Responsive Photo Gallery – Image & Video Lightbox Gallery | awesome-responsive-photo-gallery |
| Awesome Twitter Feeds | awesome-twitter-feeds |
| Awesome WordPress Timeline Plugin | awesome-timeline |
| AZ Content Finder | az-content-finder |
| azurecurve Floating Featured Image | azurecurve-floating-featured-image |
| Background animation blocks | background-animation-blocks |
| Background Control | background-control |
| Banner Garden Plugin for WordPress | banner-garden |
| Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) | barcode-scanner-lite-pos-to-manage-products-inventory-and-orders |
| Bauernregeln | bauernregeln |
| Better Protected Pages | better-protected-pages |
| Better WishList API | better-wlm-api |
| Bible Embed | bible-embed |
| Bit.ly linker | bitly-linker |
| BizLibrary | bizlibrary |
| Block Collection for You – WP Block Pack | wp-block-pack |
| Blog Summary | blog-summary |
| Blogger Image Import | blogger-image-import |
| Blrt WP Embed | blrt-wp-embed |
| blu Logistics | blu-logistics |
| Blue Wrench Video Widget | blue-wrench-videos-widget |
| Board Election | board-election |
| Bold pagos en linea | bold-pagos-en-linea |
| bonjour-bar | bonjour-bar |
| Book a Place | book-a-place |
| Bookalet | bookalet |
| Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment | booking-and-rental-manager-for-woocommerce |
| Booking Calendar | booking |
| Brizy Pro | brizy-pro |
| Browser-Update-Notify | browser-update-notify |
| BuddyBoss Platform | buddyboss-platform |
| Build Private Store For WooCommerce | build-private-store-for-woocommerce |
| Bulk Categories Assign | bulk-categories-assign |
| Business Essentials for Contact Form 7 | cf7-redirect-thank-you-page |
| Button Block – Design Stylish, Interactive, and Multi-Functional Buttons | button-block |
| Cache Sniper for Nginx | snipe-nginx-cache |
| Calendi | calendi |
| Call To Action Popup | call-to-action-popup |
| CAMOO SMS | camoo-sms |
| Canalplan | canalplan-ac |
| Captchelfie – Captcha by Selfie | captchelfie-captcha-by-selfie |
| Car Demon | car-demon |
| Catalog Importer, Scraper & Crawler | intelligent-importer |
| Catch Duplicate Switcher | catch-duplicate-switcher |
| Category Custom Fields | categorycustomfields |
| Category D3 Tree | category-d3-tree |
| Causes – Donation Plugin | causes |
| CBX Accounting & Bookkeeping | cbxwpsimpleaccounting |
| CC Circle Progress Bar | cc-circle-progress-bar |
| CGD Arrange Terms | shopp-arrange |
| Chamber Dashboard Business Directory | chamber-dashboard-business-directory |
| Charity-thermometer | charitydonation-thermometer |
| ChatGPT Open AI Images & Content for WooCommerce | glasses-for-woocommerce |
| Chatter | chatter |
| Checkout for PayPal | checkout-for-paypal |
| Chess Tempo Viewer | chesstempoviewer |
| CJ Custom Content | cj-custom-content |
| ClickBank Storefront WordPress Plugin | mycbgenie-clickbank-storefront |
| CMC MIGRATE | cmc-migrate |
| CNZZ&51LA for WordPress | cnzz51la-for-wordpress |
| Cobwebo URL Plugin | cobwebo-url |
| CodeBard Help Desk | codebard-help-desk |
| CoDesigner – All in One Elementor WooCommerce Builder | woolementor |
| Comment-Emailer | comment-emailer |
| Compare Ninja: Create Professional Comparison Tables and Easily Add Them to Your Website | compare-ninja-comparison-tables |
| ComparePress | comparepress |
| Connect Elementor Forms to Google Sheets Addon | wpsyncsheets-elementor |
| Contact Form 7 Anti Spambot | contact-form-7-anti-spambot |
| Contact Form 7 Round Robin Lead Distribution | contact-form-7-round-robin-lead-distribution |
| Contact Form 7 – CCAvenue Add-on | cf7-cc-avenue-add-on |
| Contact Form 7 – Paystack Add-on | cf7-paystack-add-on |
| Contact Form With Shortcode | contact-form-with-shortcode |
| Content Mirror | content-mirror |
| Content Planner | content-planner |
| Content Security Policy Pro | content-security-policy-pro |
| ContentOptin Lite – WP Content Upgrade Plugin | contentoptin |
| Contexto | contexto |
| Cookie Consent & Autoblock for GDPR/CCPA | cookie-consent-autoblock |
| Copy Move Posts | copy-move-posts |
| Copyright Safeguard Footer Notice | copyright-safeguard-footer-notice |
| Coronavirus (COVID-19) Outbreak Data Widgets | coronavirus-data-widgets |
| Course Booking System | course-booking-system |
| CRUDLab Like Box | crudlab-facebook-like-box |
| CtyGrid Hyp3rL0cal Search WordPress Plugin | hyp3rl0cal-city-search |
| CubePM | cubepm |
| Curated Search | curated-search |
| Custom Coming Soon | custom-coming-soon |
| Custom CSS Addons | css-addons |
| Custom List Table Example | custom-list-table-example |
| Custom Page Extensions | custom-page-extensions |
| Custom Post | custom-post-type-gui |
| Custom Post Type Lockdown WordPress | custom-post-type-lockdown |
| Custom Users Order | custom-users-order |
| Custom Widget Classes | custom-widget-classes |
| Custom Widget Creator | custom-widget-creator |
| Custom WP Store Locator | custom-store-locator |
| Customizable Captcha and Contact us | customizable-captcha-and-contact-us-form |
| Cyber Slider | cyber-new-slider |
| Daily Proverb | daily-proverb |
| Data Dash | data-dash |
| Database Sync | database-sync |
| DD Roles | dd-roles |
| Debt Calculator | debt-calculator |
| Debug Tool | debug-tool |
| Delete All Posts | delele-all |
| Demo User DZS – Showcase your admin safely | demo-user-dzs-showcase-your-admin-safely |
| Dezdy | dezdy-mcommerce |
| DF Draggable | df-draggable |
| dForms | dforms |
| DN Sitemap Control | dn-sitemap-control |
| Donate visa | donate-visa |
| Download Manager | download-manager |
| Download, Downloads – WordPress Download plugin By Edmon | ydn-download |
| DsgnWrks Twitter Importer | dsgnwrks-twitter-importer |
| DX Sales CRM | dx-sales-crm |
| DZS Ajaxer Lite – Ajaxify Your WordPress Site and Comments | dzs-ajaxer-lite-dynamic-page-load |
| Easy Automatic Newsletter Lite | easy-automatic-newsletter |
| Easy Bet | easy-bet |
| Easy Code Placement | easy-code-placement |
| Easy Code Snippets | easy-code-snippets |
| Easy Digital Downloads – eCommerce Payments and Subscriptions made easy | easy-digital-downloads |
| Easy EU Cookie law | easy-eu-cookie-law |
| Easy FAQs | easy-faqs |
| Easy Filter | easy-filter |
| Easy Filtering | easy-filtering |
| Easy Portfolio | easy-portfolio |
| Easy School Registration | easy-school-registration |
| Easy Shortcode Buttons | easy-shortcode-buttons |
| Easy Tweet Embed | easy-tweet-embed |
| Easy Tynt | easy-tynt |
| Eazy Under Construction | eazy-under-construction |
| ECT Add to Cart Button | ect-add-to-cart-button |
| EditionGuard for WooCommerce – eBook Sales with DRM | editionguard-for-woocommerce-ebook-sales-with-drm |
| EELV Newsletter | eelv-newsletter |
| ElementInvader Addons for Elementor | elementinvader-addons-for-elementor |
| Elementor Addons AI Addons – 70 Widgets, Premium Templates, Ultimate Elements | ai-addons-for-elementor |
| Email Capture & Lead Generation | email-capture-lead-generation |
| Email on Publish | email-on-publish |
| Email to Download | email-to-download |
| EmailPress | emailpress |
| EmailShroud | emailshroud |
| EMI Calculator | emi-calculator |
| Enhanced YouTube Shortcode | enhanced-youtube-shortcode |
| Envato Affiliater | envato-affiliater |
| ePermissions | epermissions |
| Error Notification | error-notification |
| Essay Wizard (wpCRES) | essay-wizard-wpcres |
| Essential WP Real Estate | essential-wp-real-estate |
| EU DSGVO Helper | dsgvo |
| Event Countdown Timer Plugin by TechMix | event-countdown-timer |
| Event Monster – Event Manager, Ticket Booking & Registration | event-monster |
| Event Registration Calendar By vcita | event-registration-calendar-by-vcita |
| Eventer - WordPress Event & Booking Manager Plugin | eventer |
| Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI | everest-forms |
| Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media | evergreen-content-poster |
| Explara Membership | explara-membership |
| Explore pages | explore-pages |
| Extra Options – Favicons | extra-options-favicons |
| EZPlayer | ezplayer |
| Fast Tube | fast-tube |
| FAT Event Lite | fat-event-lite |
| Feedburner Optin Form | feedburner-optin-form |
| Find Content IDs | find-content-ids |
| Find Your Reps | find-your-reps |
| First Comment Redirect | first-comment-redirect |
| Flexible Blogtitle | flexible-blogtitle |
| Flexible PDF Coupons – Gift Cards & Vouchers for WooCommerce | flexible-coupons |
| Flexo Slider | flexo-slider |
| Floatbox Plus | floatbox-plus |
| FLX Dashboard Groups | flx-dashboard-groups |
| Flying Twitter Birds | flying-twitter-birds |
| FontAwesome.io ShortCodes | fontawesomeio-shortcodes |
| FooGallery Captions | foogallery-captions |
| Form To JSON | form-to-json |
| Form To Online Booking | cf7-calendly-integration |
| Formatted post | formatted-post |
| Foundation Columns | foundation-columns |
| FP RSS Category Excluder | fp-rss-category-excluder |
| Free MailClient FMC | mailclient |
| FWD Slider | fwd-slider |
| G Web Pro Store Locator | gwebpro-store-locator |
| Gallerio | gallerio |
| Gallery and Lightbox | gallery-and-lightbox |
| Gallery: Hybrid – Advanced Visual Gallery | hybrid-gallery |
| GDPR Personal Data Reports | gdpr-personal-data-reports |
| GDReseller | gdreseller |
| Genki Announcement | genki-announcement |
| GeoDigs | geodigs |
| Geotagged Media | geotagged-media |
| Giga Messenger – Express | giga-messenger-bots |
| Gigaom Sphinx | go-sphinx |
| Giveaways and Contests by PromoSimple | giveaways-contests-by-promosimple |
| Glofox Shortcodes | glofox-shortcodes |
| Glossy | glossy |
| GMap Shortcode | gmap-shortcode |
| GMAPS for WPBakery Page Builder Free | gmaps-for-visual-composer-free |
| go Social | go-social |
| Goldstar | goldstar |
| Goo.gl Url Shorter | googl-url-shorter |
| Good Old Gallery | good-old-gallery |
| Goodlayers Blocks | goodlayers-blocks |
| Google Map on Post/Page | google-map-on-postpage |
| Google Map With Fancybox | location-piker |
| Google Org Chart | google-org-chart |
| Google Transliteration | google-transliteration |
| GoogleMapper | googlemapper-2 |
| GravatarLocalCache | gravatarlocalcache |
| Gravity Forms | gravityforms |
| Greek Namedays Widget From Eortologio.Net | greek-namedays-widget |
| Groundhogg — CRM, Newsletters, and Marketing Automation | groundhogg |
| Group category creator | group-category-creator |
| GSheetConnector for Forminator Forms | gsheetconnector-forminator |
| Guten Free Options | guten-free-options |
| Hack me if you can | hack-me-if-you-can |
| Heartland Management Terminal | heartland-management-terminal |
| HireHive Job Plugin | zartis-job-plugin |
| History timeline | history-timeline |
| HM Portfolio | hm-portfolio |
| Homey Login Register | homey-login-register |
| Horizontal Line Shortcode | horizontal-line-shortcode |
| Hotspots Analytics | hotspots |
| HSS Embed Streaming Video | hss-embed-streaming-video |
| Htaccess File Editor – Easily Edit, Backup, Restore .htaccess file | htaccess-file-editor |
| HTML5 Video Player – Embed and Play Videos in Custom Player | html5-video-player |
| HTTP to HTTPS link changer by Eyga.net | https-links-in-content |
| HyperComments | comments-with-hypercommentscom |
| iBuildApp | ibuildapp |
| Image Gallery Box by CRUDLab | image-gallery-box-by-crudlab |
| Image Source Control Lite – Show Image Credits and Captions | image-source-control-isc |
| Image Switcher | image-switcher |
| ImageMeta | imagemeta |
| imaGenius | imagenius |
| Import Users to MailChimp | import-users-to-mailchimp |
| Improved Sale Badges – Free Version | improved-sale-badges-free-version |
| Incredible Font Awesome | incredible-font-awesome |
| InFunding – Plugin for Charity & Crowdfunding Website | infunding |
| Instant Appointment | instant-appointment |
| Interactive Page Hierarchy | interactive-page-hierarchy |
| Internal Links Generator | internal-links-generator |
| Isolved Talent Acquisition | applicantpro |
| iSpring Embedder | embed-ispring |
| JB Horizontal Scroller News Ticker | jb-horizontal-scroller-news-ticker |
| Jet Skinner for BuddyPress | jet-skinner-for-buddypress |
| JetEngine | jet-engine |
| JSM Screenshot Machine Shortcode | screenshot-machine-shortcode |
| JustRows free | justrows-free |
| Kapost | kapost-byline |
| Killer Theme Options | killer-theme-options |
| Kopa Nictitate Toolkit | kopa-nictitate-toolkit |
| Ksher | ksher-payment |
| Kubio AI Page Builder | kubio |
| Kumihimo | kumihimo |
| Kv Compose Email From Dashboard | kv-send-email-from-admin |
| LawPress – Law Firm Website Management | lawpress |
| Legal + | legal-plus |
| Legull | legull |
| Len Slider | len-slider |
| LH Email | lh-email |
| LH Login Page | lh-login-page |
| Library Instruction Recorder | library-instruction-recorder |
| Lijit Search | wp-lijit-wijit |
| Lime Developer Login | lime-developer-login |
| Links/Problem Reporter | report-broken-links |
| Live Dashboard | live-dashboard |
| LJ Custom Menu Links | lj-custom-menu-links |
| Local Shipping Labels for WooCommerce | local-shipping-labels-for-woocommerce |
| LocalGrid | localgrid |
| Lockets | lockets |
| Login Watchdog | login-watchdog |
| Loginplus | loginplus |
| LSD Google Maps Embedder | lsd-google-maps-embedder |
| LTL Freight Quotes – Worldwide Express Edition | ltl-freight-quotes-worldwide-express-edition |
| MACME | macme |
| Magic Google Maps | magic-google-maps |
| MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder | mailchimp-subscribe-sm |
| Mancx AskMe Widget | mancx-askme-widget |
| Maniac SEO | maniac-seo |
| Mapbox for WP Advanced | mapbox-for-wp-advanced |
| Mark Posts | mark-posts |
| MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution | marketking-multivendor-marketplace-for-woocommerce |
| Marmoset Viewer | marmoset-viewer |
| Marquee Style RSS News Ticker | marquee-style-rss-news-ticker |
| Mass Custom Fields Manager | mass-custom-fields-manager |
| Mass Messaging in BuddyPress | mass-messaging-in-buddypress |
| MD Custom content after or before of post | md-custom-content |
| MDC YouTube Downloader | mdc-youtube-downloader |
| MDJM Event Management | mobile-dj-manager |
| MediaBlaster – Build a Video Streaming Website, Podcast Network & Roku App | wp-smart-tv |
| MeinTurnierplan.de Widget Viewer | meinturnierplande-widget-viewer |
| melascrivi-plugin | melascrivi |
| MemeOne | memeone |
| Menus Plus+ | menus-plus |
| MercadoLibre Integration | mercadolibre-integration |
| Metaphor Widgets | mtphr-widgets |
| MFPlugin | mfplugin |
| MHR-Custom-Anti-Copy | mhr-custom-anti-copy |
| MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet | paid-membership |
| Mind3doM RyeBread Widgets | mind3dom-ryebread-widgets |
| Mindmeister Shortcode | mindmeister-shortcode |
| Minterpress | minterpress |
| MJ Contact us | mj-contact-us |
| MLL Audio Player MP3 Ajax | music-let-loose-mp3-audio-player |
| Mobigate | mobigatevn |
| Mojo Under Construction | mojo-under-construction |
| More Link Modifier | more-link-modifier |
| Motors – Car Dealership & Classified Listings Plugin | motors-car-dealership-classified-listings |
| Moving Users | moving-users |
| Multi Step Form | multi-step-form |
| Multi Uploader for Gravity Forms | gf-multi-uploader |
| Multilang Contact Form | multilang-contact-form |
| Musicbox | musicbox |
| My auctions allegro | my-auctions-allegro-free-edition |
| My Favorite Car | my-favorite-cars |
| My Tickets – Accessible Event Ticketing | my-tickets |
| my-related-posts | my-related-posts |
| MyAnime Widget | myanime-widget |
| mybb Last Topics | mybb-last-topics |
| MyBookProgress by Stormhill Media | mybookprogress |
| Nativery Plugin | nativery |
| Nature FlipBook WordPress Plugin | vertical-diamond-flipbook-flash |
| Navigation Du Lapin Blanc | navigation-du-lapin-blanc |
| Neon Product Designer | neon-product-designer-for-woocommerce |
| Network-Favorites | network-favorites |
| Ni WooCommerce Sales Report Email | ni-woocommerce-sales-report-email |
| Nite Shortcodes | nite-shortcodes |
| NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization | nitropack |
| NoFollow Free | nofollow-free |
| Notifications Center | notifications-center |
| Notifikácie.sk | notifikacie-sk |
| ntp-header-images | header-images-rotator |
| NV Slider | nv-slider |
| One Backend Language | one-backend-language |
| Online Marksheet Creator : eMarksheet | emarksheet |
| Online Payments – Get Paid with PayPal, Square & Stripe | paypal-payment-button-by-vcita |
| OPSI Israel Domestic Shipments | woo-ups-pickup |
| Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords | muzaara-adwords-optimize-dashboard |
| OrangeBox | orangebox |
| PAFacile | pafacile |
| Page Builder by SiteOrigin | siteorigin-panels |
| Page Health-O-Meter | page-health-o-meter |
| Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction | paid-member-subscriptions |
| PAPERCITE | papercite |
| Partners | partners |
| Password Protect Plugin for WordPress | password-protect-plugin-for-wordpress |
| Passwordless WP – Login with your glance or fingerprint | passwordless-wp |
| Passwords Manager | passwords-manager |
| Pastebin | pastebin-embed |
| Payment Button for PayPal | wp-paypal |
| PayPal Marketing Solutions | paypal-promotions-and-insights |
| PDF for WPForms + Drag and Drop Template Builder | pdf-for-wpforms |
| PDF.js Shortcode | pdfjs-shortcode |
| Photo Video Store | photo-video-store |
| Picture Gallery – Frontend Image Uploads, AJAX Photo List | picture-gallery |
| Pin Locations on Map | pin-locations-on-map |
| Piotnet Addons For Elementor | piotnet-addons-for-elementor |
| Pit Login Welcome | pit-login-welcome |
| Plestar Directory Listing | plestar-directory-listing |
| Podamibe Twilio Private Call | podamibe-twilio-private-call |
| Podlove Podcast Publisher | podlove-podcasting-plugin-for-wordpress |
| Podčlánková inzerce | podclankova-inzerce |
| pootle button | pootle-button |
| Popliup – WordPress Popup Plugin | popliup |
| Post & Page Notes | post-page-notes |
| Post and Page Builder by BoldGrid – Visual Drag and Drop Editor | post-and-page-builder |
| Post Carousel & Slider | post-types-carousel-slider |
| Post Grid | post-grid |
| Post Meta | post-meta |
| Post-to-Post Links | easy-post-to-post-links |
| Posts Footer Manager | intelly-posts-footer-manager |
| Powie's pLinks PagePeeker | plinks |
| Predict When | predict-when |
| Preloader Quotes | preloader-quotes |
| Product Carousel For WooCommerce – WoorouSell | woorousell |
| Progress Tracker | progress-tracker |
| Proofreading | proofreading |
| Ps Ads Pro | ps-ads-pro |
| Push Envoy Notifications | push-envoy |
| Push Notification for Post and BuddyPress | push-notification-for-post-and-buddypress |
| QMean – WordPress Did You Mean and Search Suggestion Like Google | qmean |
| QR Code Generator | qrcode-wprhe |
| Quick Count | quick-count |
| Quote me | quote-me |
| quote-posttype-plugin | quote-post-type-plugin |
| QuoteMedia Tools | quotemedia-tools |
| radSLIDE | radslide |
| Random Posts, Mp3 Player + ShareButton | random-posts-mp3-player-sharebutton |
| Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings | rate-star-review |
| ReadMe Creator | readme-creator |
| Real Seguro Viagem | seguro-viagem |
| REAL WordPress Sidebar | drag-and-drop-custom-sidebar |
| Realty Workstation | realty-workstation |
| Realtyna Provisioning | realtyna-provisioning |
| Rebrand Fluent Forms | rebrand-fluent-forms |
| Recip.ly Plugin | reciply |
| Redux Converter | redux-converter |
| Related Post Shortcode | related-post-shortcode |
| Rename Author Slug | rename-author-slug |
| ResAds | resads |
| Responsive jQuery Slider | responsive-jquery-slider |
| Responsivity | responsivity |
| Reviews Widgets for Google & 45+ platforms by Repuso | social-testimonials-and-reviews-widget |
| Rezdy Reloaded | reloaded-rezdy |
| Rio Photo Gallery | rio-photo-gallery |
| rng-refresh | rng-refresh |
| Rocket Media Library Mime Type | rocket-media-library-mime-type |
| Rollover Tab | rollover-tab |
| RomanCart On WordPress | romancart-on-wordpress |
| root Cookie | root-cookie |
| Royal Addons for Elementor – Addons and Templates Kit for Elementor | royal-elementor-addons |
| RS Survey | rs-survey |
| RSS Icon Widget | rss-icon-widget |
| RSS News Scroller | rss-news-scroller |
| RSV GMaps | rsv-google-maps |
| RSVP ME | rsvp-me |
| RSVPMaker Volunteer Roles | rsvpmaker-volunteer-roles |
| RTMKit | rometheme-for-elementor |
| S-DEV SEO | s-dev-seo |
| Sale with Razorpay | sell-with-razorpay |
| Salvador – AI Image Generator | salvador-ai-image-generator |
| Sandbox | sandbox |
| Save & Import Image from URL | save-import-image-from-url |
| SC Simple Zazzle | sc-simple-zazzle |
| Scroll Top Advanced – Scroll to ID or Class | scroll-top-advanced |
| Scroll Top – WordPress Scroll to Top plugin | scroll-to-top-builder |
| Secure CAPTCHA | secure-captcha |
| Send to a Friend Addon | send-booking-invites-to-friends |
| Send to Twitter | send-to-twitter |
| SendGrid for WordPress | wp-sendgrid-mailer |
| Sensei LMS – Online Courses, Quizzes, & Learning | sensei-lms |
| SEOReseller Partner Plugin | sr-partner |
| SetMore Theme – Custom Post Types | service-provider-profile-cpt |
| Setup Default Featured Image | setup-default-feature-image |
| SexBundle | sexbundle |
| Shabbos and Yom Tov | shabbos-and-yom-tov |
| Shipdeo | shipdeo-woo |
| ShipWorks Connector for Woocommerce | shipworks-e-commerce-bridge |
| Shockingly Big IE6 Warning | shockingly-big-ie6-warning |
| Shortcode in Comment | shortcode-in-comment |
| Shoutcast and Icecast HTML5 Web Radio Player by YesStreaming.com | shoutcast-and-icecast-html5-web-radio-player-by-yesstreaming-com |
| Sidebar-Content from Shortcode | sidebar-content-from-shortcode |
| Simple Custom post type custom field | simple-content-construction-kit |
| Simple Membership Custom Messages | simple-membership-custom-messages |
| Simple Project Manager | simple-project-managment |
| Simple shortcode buttons | simple-shortcode-buttons |
| Simple Vertical Timeline | simple-vertical-timeline |
| Simple:Press Forum | simplepress |
| Singsys -Awesome Gallery | awesome-gallery-singsys |
| Site Launcher | site-launcher |
| Slider for Writers | slider-for-writers |
| Slides & Presentations | slide |
| Small Package Quotes – Unishippers Edition | small-package-quotes-unishippers-edition |
| Small Package Quotes – Worldwide Express Edition | small-package-quotes-wwe-edition |
| Smallerik File Browser | smallerik-file-browser |
| Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management | smart-manager-for-wp-e-commerce |
| Smooth Dynamic Slider | smooth-dynamic-slider |
| Snippy | snippy |
| Social Analytics | social-analytics |
| Social Media Engine | social-media-engine |
| Social Pug: Author Box | social-pug-author-box |
| SOCIAL.NINJA | seo-meta |
| Social2Blog | social2blog |
| Solidres – Hotel booking plugin for WordPress | solidres |
| SpiderDisplay | spiderdisplay |
| Spiderpowa Embed PDF | spiderpowa-embed-pdf |
| Sponsered Link | sponsered-link |
| Staging CDN | staging-cdn |
| Stars SMTP Mailer | stars-smtp-mailer |
| StatPressCN | statpresscn |
| Sticky Button – Click to Chat | sticky-chat-button |
| Stop Comment Spam | stop-comment-spam |
| Store Locator for WordPress with Google Maps – LotsOfLocales | store-locator |
| Stray Random Quotes | stray-quotes |
| Stripe and PayPal Payment Forms for WordPress – PayForm | payform |
| Strx Magic Floating Sidebar Maker | strx-magic-floating-sidebar-maker |
| Style Admin | style-admin |
| Sur.ly | surly |
| Swift Calendar Online Appointment Scheduling | online-appointment-scheduling-software |
| Tab My Content | tab-my-content |
| Tag Groups is the Advanced Way to Display Your Taxonomy Terms | tag-groups |
| Tagesteller / Mittagsmenü Plugin | tagesteller |
| Taskbuilder – Project Management & Task Management Tool With Kanban Board | taskbuilder |
| Tax Report for WooCommerce | tax-report-for-woocommerce |
| Team 118GROUP Agent | team-118group-agent |
| Texteller | texteller |
| The Great Firewords of China | sensitive-chinese-words-scanner |
| The Loops | the-loops |
| Theme My Ontraport Smartform | theme-my-ontraport-smartform |
| Tidy.ro | tidyro |
| TinyMCE Extended Config | tinymce-extended-config |
| Top Flash Embed | top-flash-embed |
| TransFinanz | transfinanz |
| Translation.Pro | translation-pro |
| Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Plugin | tour-booking-manager |
| turboSMTP | turbosmtp |
| Twitter Bootstrap Collapse aka Accordian Shortcode | twitter-bootstrap-collapse-aka-accordian-shortcode |
| Twitter News Feed | twitter-news-feed |
| Twitter Post | twitterpost |
| Twitter Shortcode | twitter-shortcode |
| Ui Slider Filter By Price | ui-slider-filter-by-price |
| Ultimate Events | ultimate-events |
| Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin | ultimate-member |
| Ultimate Subscribe | ultimate-subscribe |
| Unique UX | unique-ux |
| Universal Analytics Injector | universal-analytics-injector |
| University quizzes online | university-quizzes-online |
| UpDownUpDown | updownupdown-postcomment-voting |
| UpdraftPlus: WP Backup & Migration Plugin | updraftplus |
| URL Shortener | Conversion Tracking | AB Testing | WooCommerce | easy-broken-link-checker |
| user files | user-files |
| User Management | user-management |
| User Sync ActiveCampaign | registered-user-sync-activecampaign |
| Userbase Access Control | userbase-access-control |
| Utilities for MTG | utilities-for-mtg |
| Vampire Character Manager | vampire-character |
| vcOS | vcos |
| Verge3D Publishing and E-Commerce | verge3d |
| Video Share VOD – Turnkey Video Site Builder Script | video-share-vod |
| ViewMedica 9 | viewmedica |
| VikAppointments Services Booking Calendar | vikappointments |
| Visual Slider | visual-slider |
| VOD Infomaniak | vod-infomaniak |
| VSTEMPLATE Creator | vstemplate-creator |
| W3 Total Cache | w3-total-cache |
| W3SPEEDSTER | w3speedster-wp |
| WAH Forms | wah-forms |
| WC Wallet | wc-wallet |
| WCS QR Code Generator | wcs-qr-code-generator |
| Weaver Themes Shortcode Compatibility | weaver-themes-shortcode-compatibility |
| Web Push | web-push |
| Web Testimonials | web-testimonials |
| Webcamconsult | webcamconsult |
| WebToffee WP Backup and Migration | wp-migration-duplicator |
| WH Cache & Security | wh-cache-and-security |
| Wibstats | wibstats-statistics-for-wordpress-mu |
| Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets | widget-options |
| Winning Portfolio | winning-portfolio |
| Wishlist | wishlist |
| WM Options Import Export | wm-options-import-export |
| Woo Store Mode | woo-store-mode |
| Woo Tuner | woo-tuner |
| Woo Update Variations In Cart | woo-update-variations-in-cart |
| WooCommerce Order Search | woocommerce-order-searching |
| WOOEXIM – WooCommerce Export Import Plugin | wooexim |
| Word Freshener | word-freshener |
| WordPress Additional Logins | wp-additional-logins |
| WordPress Call me Now | call-me-now |
| WordPress Custom Sidebar | wordpress-custom-sidebar |
| WordPress Dashboard Tweeter | wordpress-dashboard-twitter |
| WordPress Data Guard [Website Security] | wordpress-data-guards |
| WordPress File Search | wpfilesearch |
| WordPress Gallery Plugin | wordpress-gallery-plugin |
| WordPress Google Map Professional (Map In Your Language) | google-map-professional |
| WordPress Graphs & Charts – Easy Interactive HTML5 Charts Plugin | graph-lite |
| WordPress HelpDesk & Support Ticket System Plugin – Octrace Support | octrace-support |
| WordPress Local SEO | dh-local-seo |
| WordPress Logging Service | wordpress-logging-service |
| WordPress 淘宝客插件 | taobaoke |
| WordPress-to-candidate for Salesforce CRM | salesforce-wordpress-to-candidate |
| World Cup Predictor | world-cup-predictor |
| WOW Best CSS Compiler | best-css-compiler |
| WP Abstracts | wp-abstracts-manuscripts-manager |
| WP All Import Pro | wp-all-import-pro |
| WP Background Tile | wp-background-tile |
| WP Bulletin Board | wp-bulletin-board |
| WP Cloud | cloud |
| WP Contest | wp-contest |
| WP Cookies Alert | wp-cookies-alert |
| WP Custom Google Search | wp-custom-google-search |
| WP Download Codes | wp-download-codes |
| WP Dream Carousel | wp-dream-carousel |
| WP Extended – The Ultimate WordPress Toolkit | wpextended |
| WP FixTag | wp-fixtag |
| WP FPO | wp-fpo |
| WP Front-end login and register | wp-front-end-login-and-register |
| WP Headmaster | wp-headmaster |
| WP Hotel Booking | wp-hotel-booking |
| WP IMAP Auth | wp-imap-authentication |
| WP Intro.JS Plugin | wp-intro-js-tours |
| WP Inventory Manager | wp-inventory-manager |
| WP Journal | wpjournal |
| WP krpano | wp-krpano |
| WP Load Gallery | wp-load-gallery |
| WP Login Attempt Log | wp-login-attempt-log |
| WP Lyrics | wplyrics |
| WP Meetup | wp-meetup |
| WP News Sliders | wp-news-sliders |
| WP OpenSearch | wp-opensearch |
| WP Options Editor | wp-options-editor |
| WP Order By | wp-order-by |
| WP Photo Sphere | wp-photo-sphere |
| WP Post Category Notifications | wp-post-category-notifications |
| WP Post Corrector | wp-post-corrector |
| WP Projects Portfolio with Client Testimonials | wp-projects-portfolio |
| WP PT-Viewer | wp-ptviewer |
| WP Query Creator | wp-query-creator |
| WP Responsive Tabs | wp-responsive-tabs |
| WP Service Payment Form With Authorize.net | wp-service-payment-form-with-authorizenet |
| WP Smart Tooltip | wp-smart-tool-tip |
| WP Social Broadcast | wp-social-broadcast |
| WP SpaceContent | wp-spacecontent |
| WP ULike – Like & Dislike Buttons for Engagement and Feedback | wp-ulike |
| WP Ultimate Reviews FREE | wp-ultimate-reviews-free |
| WP User Profile Avatar | wp-user-profile-avatar |
| WP ViewSTL | wp-viewstl |
| WP VTiger Synchronization | msstiger |
| WP-Announcements | wp-announcements |
| WP-Asambleas | wp-asambleas |
| WP-BlackCheck | wp-blackcheck |
| WP-Clap | wp-clap |
| wp-flickr-press | wp-flickr-press |
| WP-HR Manager: The Human Resources Plugin for WordPress | wp-hr-manager |
| WP-NOTCAPTCHA | wp-notcaptcha |
| wp-pano | wp-pano |
| WP-Player | wp-player |
| WP-Revive Adserver | wp-revive-adserver |
| Wp-Scribd-List | wp-scribd-list |
| WP2APP | wp2appir |
| wp_amaps | wp-amaps |
| WPDB to Sql | wpdb-to-sql |
| WpDevTool | wpdevtool |
| WpF Ultimate Carousel | wpf-ultimate-carousel |
| WPLingo – Forum Plugin | wplingo |
| WRN Pricing Rules for WooCommerce | wr-price-list-for-woocommerce |
| XLSXviewer | xlsx-viewer |
| Xola | xola-bookings-for-tours-activities |
| XTRA Settings | xtra-settings |
| yCyclista | ycyclista |
| Yet Another Countdown Plugin | yacp |
| Youtube Video Grid | Youmax | youmax-channel-embeds-for-youtube-businesses |
| Zarinpal Paid Download | zarinpal-paid-downloads |
| 新淘客WordPress插件 | wp-xintaoke |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Adifier - Classified Ads WordPress Theme | adifier-system |
| Buzz Club – Night Club, DJ and Music Festival Event WordPress Theme | buzzclub |
| CarZine | carzine |
| DWT - Directory & Listing WordPress Theme | dwt-listing |
| Envo Multipurpose | envo-multipurpose |
| flashy | flashy |
| Ghostwriter | ghostwriter |
| Homey | homey |
| Js O3 Lite | js-o3-lite |
| moseter | moseter |
| Multifox | multifox |
| my white | my-white |
| Offset Writing | offset-writing |
| Polka Dots | polka-dots |
| Tantyyellow | tantyyellow |
| The Ultralight | the-ultralight |
| TIJAJI | tijaji |
| Tiki Time | tiki-time |
| Tuaug4 | tuaug4 |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
Affected Software
Adifier - Classified Ads WordPress Theme [adifier-system]
Researcher
Affected Software
Background animation blocks [background-animation-blocks]
Researcher
Affected Software
Homey Login Register [homey-login-register]
Researcher
Affected Software
Multi Uploader for Gravity Forms [gf-multi-uploader]
Researcher
Affected Software
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction [paid-member-subscriptions]
Researcher
Affected Software
Post Grid [post-grid]
Researcher
Affected Software
Quick Count [quick-count]
Researcher
Affected Software
user files [user-files]
Researcher
Affected Software
MyAnime Widget [myanime-widget]
Researcher
Affected Software
Custom Post Type Lockdown WordPress [custom-post-type-lockdown]
Researcher
Affected Software
DD Roles [dd-roles]
Researcher
ElementInvader Addons for Elementor <= 1.2.6 - Authenticated (Contributor+) Local File Inclusion
8.8
Affected Software
ElementInvader Addons for Elementor [elementinvader-addons-for-elementor]
Researcher
Affected Software
FAT Event Lite [fat-event-lite]
Researcher
Affected Software
Researcher
Affected Software
Image Gallery Box by CRUDLab [image-gallery-box-by-crudlab]
Researcher
Affected Software
iSpring Embedder [embed-ispring]
Researcher
Affected Software
Smallerik File Browser [smallerik-file-browser]
Researcher
Affected Software
User Management [user-management]
Researcher
Affected Software
WP Load Gallery [wp-load-gallery]
Researcher
Affected Software
WP Options Editor [wp-options-editor]
Researcher
WR Price List Manager For Woocommerce <= 1.0.8 - Authenticated (Subscriber+) Arbitrary File Upload
8.8
Affected Software
WRN Pricing Rules for WooCommerce [wr-price-list-for-woocommerce]
Researcher
Affected Software
W3 Total Cache [w3-total-cache]
Researcher
Affected Software
Background Control [background-control]
Researcher
NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
8.1
Affected Software
Researcher
Affected Software
Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords [muzaara-adwords-optimize-dashboard]
Researcher
Affected Software
Store Locator for WordPress with Google Maps – LotsOfLocales [store-locator]
Researcher
Affected Software
XLSXviewer [xlsx-viewer]
Researcher
Affected Software
Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution [file-manager-advanced]
Researcher
Affected Software
Course Booking System [course-booking-system]
Researcher
Affected Software
Improved Sale Badges – Free Version [improved-sale-badges-free-version]
Researcher
Affected Software
LTL Freight Quotes – Worldwide Express Edition [ltl-freight-quotes-worldwide-express-edition]
Researcher
Affected Software
Passwords Manager [passwords-manager]
Researcher
Affected Software
Passwords Manager [passwords-manager]
Researcher
Affected Software
Popliup – WordPress Popup Plugin [popliup]
Researcher
Affected Software
Small Package Quotes – Unishippers Edition [small-package-quotes-unishippers-edition]
Researcher
Affected Software
Small Package Quotes – Worldwide Express Edition [small-package-quotes-wwe-edition]
Researcher
Affected Software
WP Extended – The Ultimate WordPress Toolkit [wpextended]
Researchers
Affected Software
Researcher
Affected Software
Researcher
Affected Software
WordPress Local SEO [dh-local-seo]
Researcher
Affected Software
Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) [barcode-scanner-lite-pos-to-manage-products-inventory-and-orders]
Researcher
Affected Software
Better WishList API [better-wlm-api]
Researcher
Affected Software
Gravity Forms [gravityforms]
Researcher
Affected Software
REAL WordPress Sidebar [drag-and-drop-custom-sidebar]
Researcher
Affected Software
Reviews Widgets for Google & 45+ platforms by Repuso [social-testimonials-and-reviews-widget]
Researcher
Affected Software
Sticky Button – Click to Chat [sticky-chat-button]
Researcher
Affected Software
Blrt WP Embed [blrt-wp-embed]
Researcher
Affected Software
Easy Filtering [easy-filtering]
Researcher
Affected Software
Minterpress [minterpress]
Researcher
Affected Software
ntp-header-images [header-images-rotator]
Researcher
Affected Software
Database Sync [database-sync]
Researcher
Affected Software
Researcher
Affected Software
Menus Plus+ [menus-plus]
Researcher
Affected Software
Neon Product Designer [neon-product-designer-for-woocommerce]
Researcher
Affected Software
Passwords Manager [passwords-manager]
Researcher
Affected Software
Researcher
Affected Software
Researcher
WC Wallet <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
6.5
Affected Software
WC Wallet [wc-wallet]
Researcher
Affected Software
WordPress Custom Sidebar [wordpress-custom-sidebar]
Researcher
Affected Software
WordPress Dashboard Tweeter [wordpress-dashboard-twitter]
Researcher
Affected Software
WordPress Google Map Professional (Map In Your Language) [google-map-professional]
Researcher
Affected Software
Ad Blocking Detector [ad-blocking-detector]
Researcher
Affected Software
Ajax Contact Form [fws-ajax-contact-form]
Researcher
Affected Software
Ajax WP Query Search Filter [ajax-wp-query-search-filter]
Researcher
Affected Software
Apply with LinkedIn buttons [apply-with-linkedin-buttons]
Researcher
Awesome WordPress Timeline Plugin <= 1.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
Affected Software
Awesome WordPress Timeline Plugin [awesome-timeline]
Researcher
Affected Software
Blog Summary [blog-summary]
Researcher
Affected Software
Booking Calendar [booking]
Researcher
Affected Software
Category D3 Tree [category-d3-tree]
Researcher
Affected Software
CC Circle Progress Bar [cc-circle-progress-bar]
Researcher
Affected Software
Chamber Dashboard Business Directory [chamber-dashboard-business-directory]
Researcher
Affected Software
Charity-thermometer [charitydonation-thermometer]
Researcher
Affected Software
Checkout for PayPal [checkout-for-paypal]
Researcher
Affected Software
Chess Tempo Viewer [chesstempoviewer]
Researcher
Affected Software
CoDesigner – All in One Elementor WooCommerce Builder [woolementor]
Researcher
Affected Software
Compare Ninja: Create Professional Comparison Tables and Easily Add Them to Your Website [compare-ninja-comparison-tables]
Researcher
Affected Software
Daily Proverb [daily-proverb]
Researcher
Affected Software
Demo User DZS – Showcase your admin safely [demo-user-dzs-showcase-your-admin-safely]
Researcher
Affected Software
DZS Ajaxer Lite – Ajaxify Your WordPress Site and Comments [dzs-ajaxer-lite-dynamic-page-load]
Researcher
Affected Software
Easy EU Cookie law [easy-eu-cookie-law]
Researcher
Affected Software
Easy Portfolio [easy-portfolio]
Researcher
Affected Software
Easy Shortcode Buttons [easy-shortcode-buttons]
Researcher
Affected Software
Easy Tweet Embed [easy-tweet-embed]
Researcher
Affected Software
Elementor Addons AI Addons – 70 Widgets, Premium Templates, Ultimate Elements [ai-addons-for-elementor]
Researcher
Affected Software
Enhanced YouTube Shortcode [enhanced-youtube-shortcode]
Researcher
Affected Software
Event Registration Calendar By vcita [event-registration-calendar-by-vcita]
Researcher
Affected Software
FAT Event Lite [fat-event-lite]
Researcher
Affected Software
Feedburner Optin Form [feedburner-optin-form]
Researcher
Affected Software
Flexible PDF Coupons – Gift Cards & Vouchers for WooCommerce [flexible-coupons]
Researcher
Affected Software
FontAwesome.io ShortCodes [fontawesomeio-shortcodes]
Researcher
Affected Software
Foundation Columns [foundation-columns]
Researcher
Affected Software
Gallery and Lightbox [gallery-and-lightbox]
Researcher
Affected Software
Gallery: Hybrid – Advanced Visual Gallery [hybrid-gallery]
Researcher
Affected Software
GDPR Personal Data Reports [gdpr-personal-data-reports]
Researcher
Affected Software
Giveaways and Contests by PromoSimple [giveaways-contests-by-promosimple]
Researcher
Affected Software
Glofox Shortcodes [glofox-shortcodes]
Researcher
Affected Software
GMap Shortcode [gmap-shortcode]
Researcher
Affected Software
GMAPS for WPBakery Page Builder Free [gmaps-for-visual-composer-free]
Researcher
Affected Software
Google Org Chart [google-org-chart]
Researcher
Affected Software
Greek Namedays Widget From Eortologio.Net [greek-namedays-widget]
Researcher
Affected Software
HireHive Job Plugin [zartis-job-plugin]
Researcher
Affected Software
Horizontal Line Shortcode [horizontal-line-shortcode]
Researcher
Affected Software
HTML5 Video Player – Embed and Play Videos in Custom Player [html5-video-player]
Researcher
Affected Software
Image Switcher [image-switcher]
Researcher
Affected Software
Image Switcher [image-switcher]
Researcher
Affected Software
imaGenius [imagenius]
Researcher
Affected Software
Incredible Font Awesome [incredible-font-awesome]
Researcher
JB Horizontal Scroller News Ticker <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
JB Horizontal Scroller News Ticker [jb-horizontal-scroller-news-ticker]
Researcher
Affected Software
JetEngine [jet-engine]
Researcher
JSM Screenshot Machine Shortcode <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
JSM Screenshot Machine Shortcode [screenshot-machine-shortcode]
Researcher
Affected Software
Kopa Nictitate Toolkit [kopa-nictitate-toolkit]
Researcher
Affected Software
Links/Problem Reporter [report-broken-links]
Researcher
Affected Software
Magic Google Maps [magic-google-maps]
Researcher
Affected Software
MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder [mailchimp-subscribe-sm]
Researcher
Affected Software
Marmoset Viewer [marmoset-viewer]
Researcher
MeinTurnierplan.de Widget Viewer <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
MeinTurnierplan.de Widget Viewer [meinturnierplande-widget-viewer]
Researcher
Affected Software
Metaphor Widgets [mtphr-widgets]
Researcher
Affected Software
Researcher
Affected Software
Mindmeister Shortcode [mindmeister-shortcode]
Researcher
Affected Software
MLL Audio Player MP3 Ajax [music-let-loose-mp3-audio-player]
Researcher
Affected Software
Multifox [multifox]
Researcher
Affected Software
MyBookProgress by Stormhill Media [mybookprogress]
Researcher
Affected Software
Nativery Plugin [nativery]
Researcher
Affected Software
Navigation Du Lapin Blanc [navigation-du-lapin-blanc]
Researcher
Affected Software
Nite Shortcodes [nite-shortcodes]
Researcher
Affected Software
Online Payments – Get Paid with PayPal, Square & Stripe [paypal-payment-button-by-vcita]
Researcher
Affected Software
Page Builder by SiteOrigin [siteorigin-panels]
Researcher
Payment Button for PayPal <= 1.2.3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Payment Button for PayPal [wp-paypal]
Researcher
Affected Software
PDF for WPForms + Drag and Drop Template Builder [pdf-for-wpforms]
Researcher
Affected Software
PDF.js Shortcode [pdfjs-shortcode]
Researcher
Affected Software
Picture Gallery – Frontend Image Uploads, AJAX Photo List [picture-gallery]
Researcher
Affected Software
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor [post-and-page-builder]
Researcher
Post Grid and Gutenberg Blocks <= 2.2.92 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Post Grid [post-grid]
Researcher
Affected Software
Powie's pLinks PagePeeker [plinks]
Researcher
Affected Software
Product Carousel For WooCommerce – WoorouSell [woorousell]
Researcher
Affected Software
Progress Tracker [progress-tracker]
Researcher
Affected Software
QR Code Generator [qrcode-wprhe]
Researcher
Affected Software
quote-posttype-plugin [quote-post-type-plugin]
Researcher
Affected Software
QuoteMedia Tools [quotemedia-tools]
Researcher
Affected Software
Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings [rate-star-review]
Researcher
Affected Software
Responsive jQuery Slider [responsive-jquery-slider]
Researcher
Affected Software
Rollover Tab [rollover-tab]
Researcher
Affected Software
Scroll Top Advanced – Scroll to ID or Class [scroll-top-advanced]
Researcher
SetMore Theme – Custom Post Types <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
SetMore Theme – Custom Post Types [service-provider-profile-cpt]
Researcher
Sidebar-Content from Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Sidebar-Content from Shortcode [sidebar-content-from-shortcode]
Researcher
Affected Software
Simple Vertical Timeline [simple-vertical-timeline]
Researcher
Affected Software
Social Media Engine [social-media-engine]
Researcher
Affected Software
SOCIAL.NINJA [seo-meta]
Researcher
Affected Software
Spiderpowa Embed PDF [spiderpowa-embed-pdf]
Researcher
Affected Software
The Great Firewords of China [sensitive-chinese-words-scanner]
Researcher
Affected Software
Top Flash Embed [top-flash-embed]
Researcher
Affected Software
Twitter Bootstrap Collapse aka Accordian Shortcode [twitter-bootstrap-collapse-aka-accordian-shortcode]
Researcher
Affected Software
Utilities for MTG [utilities-for-mtg]
Researcher
Affected Software
Video Share VOD – Turnkey Video Site Builder Script [video-share-vod]
Researcher
Affected Software
ViewMedica 9 [viewmedica]
Researcher
Affected Software
WCS QR Code Generator [wcs-qr-code-generator]
Researcher
Affected Software
Weaver Themes Shortcode Compatibility [weaver-themes-shortcode-compatibility]
Researcher
Affected Software
Winning Portfolio [winning-portfolio]
Researcher
Woo Update Variations In Cart <= 0.0.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
Affected Software
Woo Update Variations In Cart [woo-update-variations-in-cart]
Researcher
Affected Software
WP Photo Sphere [wp-photo-sphere]
Researcher
Affected Software
WP Responsive Tabs [wp-responsive-tabs]
Researcher
Affected Software
WP Smart Tooltip [wp-smart-tool-tip]
Researcher
Affected Software
Researcher
Affected Software
WP ViewSTL [wp-viewstl]
Researcher
Affected Software
wp_amaps [wp-amaps]
Researcher
Affected Software
WP-Revive Adserver [wp-revive-adserver]
Researcher
Affected Software
WpF Ultimate Carousel [wpf-ultimate-carousel]
Researcher
Affected Software
Yet Another Countdown Plugin [yacp]
Researcher
Affected Software
.TUBE Video Curator [tube-video-curator]
Researcher
Affected Software
Accessibility Task Manager [accessibility-task-manager]
Researcher
Affected Software
Add custom content after post [add-custom-content-after-post]
Researcher
add custom google tag manager <= 1.0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
Affected Software
add custom google tag manager [add-custom-google-tag-manager]
Researcher
Affected Software
Admin Cleanup [admin-cleanup]
Researcher
Affected Software
Admin Menu Organizer [admin-menu-organizer]
Researcher
Affected Software
Admin Options Pages [admin-options-pages]
Researcher
Affected Software
Advanced Angular Contact Form [advanced-angular-contact-form]
Researcher
Affected Software
Affiliate Tools Việt Nam [affiliate-tools-viet-nam]
Researcher
Affected Software
Researcher
Affected Software
all-in-one-box-login [all-in-one-login]
Researcher
Affected Software
AlT Report [alt-report]
Researcher
Affected Software
Altima Lookbook Free for WooCommerce [altima-lookbook-free-for-woocommerce]
Researcher
Affected Software
Amber [amberlink]
Researcher
Affected Software
amr personalise [amr-personalise]
Researcher
Affected Software
Apply with LinkedIn buttons [apply-with-linkedin-buttons]
Researcher
Affected Software
Attach Gallery Posts [attach-gallery-posts]
Researcher
Affected Software
Auphonic Importer [auphonic-importer]
Researcher
Affected Software
Author Showcase [author-showcase]
Researcher
Affected Software
AW WooCommerce Kode Pembayaran [aw-woocommerce-kode-pembayaran]
Researcher
Affected Software
Awesome Hooks [awesome-hooks]
Researcher
Affected Software
Awesome Twitter Feeds [awesome-twitter-feeds]
Researcher
Affected Software
AZ Content Finder [az-content-finder]
Researcher
Affected Software
azurecurve Floating Featured Image [azurecurve-floating-featured-image]
Researcher
Affected Software
Banner Garden Plugin for WordPress [banner-garden]
Researcher
Affected Software
Bauernregeln [bauernregeln]
Researcher
Affected Software
Better Protected Pages [better-protected-pages]
Researcher
Affected Software
Bible Embed [bible-embed]
Researcher
Affected Software
Bit.ly linker [bitly-linker]
Researcher
Affected Software
BizLibrary [bizlibrary]
Researcher
Affected Software
Block Collection for You – WP Block Pack [wp-block-pack]
Researcher
Affected Software
Blogger Image Import [blogger-image-import]
Researcher
Affected Software
blu Logistics [blu-logistics]
Researcher
Affected Software
Blue Wrench Video Widget [blue-wrench-videos-widget]
Researcher
Affected Software
Board Election [board-election]
Researcher
Affected Software
Bold pagos en linea [bold-pagos-en-linea]
Researcher
Affected Software
Book a Place [book-a-place]
Researcher
Affected Software
Brizy Pro [brizy-pro]
Researcher
Affected Software
Browser-Update-Notify [browser-update-notify]
Researcher
Affected Software
Bulk Categories Assign [bulk-categories-assign]
Researcher
Affected Software
Calendi [calendi]
Researcher
Affected Software
WordPress Call me Now [call-me-now]
Researcher
Affected Software
Call To Action Popup [call-to-action-popup]
Researcher
Affected Software
CAMOO SMS [camoo-sms]
Researcher
Affected Software
Canalplan [canalplan-ac]
Researcher
Affected Software
Captchelfie – Captcha by Selfie [captchelfie-captcha-by-selfie]
Researcher
Affected Software
Car Demon [car-demon]
Affected Software
CarZine [carzine]
Researcher
Affected Software
Catalog Importer, Scraper & Crawler [intelligent-importer]
Researcher
Affected Software
Catch Duplicate Switcher [catch-duplicate-switcher]
Researcher
Affected Software
Category Custom Fields [categorycustomfields]
Researcher
Affected Software
Causes – Donation Plugin [causes]
Researcher
Affected Software
CBX Accounting & Bookkeeping [cbxwpsimpleaccounting]
Researcher
Affected Software
CGD Arrange Terms [shopp-arrange]
Researcher
Affected Software
ChatGPT Open AI Images & Content for WooCommerce [glasses-for-woocommerce]
Researcher
Affected Software
Chatter [chatter]
Researcher
Affected Software
CJ Custom Content [cj-custom-content]
Researcher
Affected Software
ClickBank Storefront WordPress Plugin [mycbgenie-clickbank-storefront]
Researcher
Affected Software
CMC MIGRATE [cmc-migrate]
Researcher
Affected Software
CNZZ&51LA for WordPress [cnzz51la-for-wordpress]
Researcher
Affected Software
Cobwebo URL Plugin [cobwebo-url]
Researcher
Affected Software
CodeBard Help Desk [codebard-help-desk]
Researcher
Affected Software
Comment-Emailer [comment-emailer]
Researcher
Affected Software
ComparePress [comparepress]
Researcher
Affected Software
Contact Form 7 – CCAvenue Add-on [cf7-cc-avenue-add-on]
Researcher
Affected Software
Contact Form 7 – Paystack Add-on [cf7-paystack-add-on]
Researcher
Affected Software
Business Essentials for Contact Form 7 [cf7-redirect-thank-you-page]
Researcher
Affected Software
Contact Form 7 Round Robin Lead Distribution [contact-form-7-round-robin-lead-distribution]
Researcher
Affected Software
Contact Form With Shortcode [contact-form-with-shortcode]
Researcher
Affected Software
Content Mirror [content-mirror]
Researcher
Affected Software
Content Planner [content-planner]
Researcher
Content Security Policy Pro <= 1.3.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
Affected Software
Content Security Policy Pro [content-security-policy-pro]
Researcher
Affected Software
ContentOptin Lite – WP Content Upgrade Plugin [contentoptin]
Researcher
Affected Software
Contexto [contexto]
Researcher
Affected Software
Cookie Consent & Autoblock for GDPR/CCPA [cookie-consent-autoblock]
Researcher
Copyright Safeguard Footer Notice <= 3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
Affected Software
Copyright Safeguard Footer Notice [copyright-safeguard-footer-notice]
Researcher
Affected Software
Coronavirus (COVID-19) Outbreak Data Widgets [coronavirus-data-widgets]
Researcher
Affected Software
CRUDLab Like Box [crudlab-facebook-like-box]
Researcher
Affected Software
CtyGrid Hyp3rL0cal Search WordPress Plugin [hyp3rl0cal-city-search]
Researcher
Affected Software
CubePM [cubepm]
Researcher
Affected Software
Curated Search [curated-search]
Researcher
Affected Software
Custom Coming Soon [custom-coming-soon]
Researcher
Affected Software
Custom CSS Addons [css-addons]
Researcher
Custom List Table Example <= 1.4.1 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
6.1
Affected Software
Custom List Table Example [custom-list-table-example]
Researcher
Affected Software
Custom Page Extensions [custom-page-extensions]
Researcher
Affected Software
Custom Post [custom-post-type-gui]
Researcher
Affected Software
Custom Users Order [custom-users-order]
Researcher
Affected Software
Custom Widget Classes [custom-widget-classes]
Researcher
Affected Software
Custom Widget Creator [custom-widget-creator]
Researcher
Affected Software
Custom WP Store Locator [custom-store-locator]
Researcher
Affected Software
Customizable Captcha and Contact us [customizable-captcha-and-contact-us-form]
Researcher
Affected Software
Cyber Slider [cyber-new-slider]
Researcher
Affected Software
Data Dash [data-dash]
Researcher
Affected Software
Debt Calculator [debt-calculator]
Researcher
Affected Software
Dezdy [dezdy-mcommerce]
Researcher
Affected Software
DF Draggable [df-draggable]
Researcher
Affected Software
dForms [dforms]
Researcher
Affected Software
DN Sitemap Control [dn-sitemap-control]
Researcher
Download, Downloads – WordPress Download plugin By Edmon <= 1.4.2 - Reflected Cross-Site Scripting
6.1
Affected Software
Download, Downloads – WordPress Download plugin By Edmon [ydn-download]
Researcher
Affected Software
DsgnWrks Twitter Importer [dsgnwrks-twitter-importer]
Researcher
Affected Software
DWT - Directory & Listing WordPress Theme [dwt-listing]
Researcher
Affected Software
DX Sales CRM [dx-sales-crm]
Researcher
Affected Software
Easy Automatic Newsletter Lite [easy-automatic-newsletter]
Researcher
Affected Software
Easy Bet [easy-bet]
Researcher
Affected Software
Easy Code Placement [easy-code-placement]
Researcher
Affected Software
Easy Filter [easy-filter]
Researcher
Affected Software
Easy School Registration [easy-school-registration]
Researcher
Affected Software
Eazy Under Construction [eazy-under-construction]
Researcher
Affected Software
ECT Add to Cart Button [ect-add-to-cart-button]
Researcher
Affected Software
EditionGuard for WooCommerce – eBook Sales with DRM [editionguard-for-woocommerce-ebook-sales-with-drm]
Researcher
Affected Software
EELV Newsletter [eelv-newsletter]
Researcher
Affected Software
Email on Publish [email-on-publish]
Researcher
Affected Software
Email to Download [email-to-download]
Researcher
Affected Software
EmailPress [emailpress]
Researcher
Affected Software
EmailShroud [emailshroud]
Researcher
Affected Software
Envato Affiliater [envato-affiliater]
Researcher
Affected Software
ePermissions [epermissions]
Researcher
Affected Software
Error Notification [error-notification]
Researcher
Affected Software
Essay Wizard (wpCRES) [essay-wizard-wpcres]
Researcher
Affected Software
Essential WP Real Estate [essential-wp-real-estate]
Researcher
Affected Software
Essential WP Real Estate [essential-wp-real-estate]
Researcher
Affected Software
EU DSGVO Helper [dsgvo]
Researcher
Affected Software
Event Countdown Timer Plugin by TechMix [event-countdown-timer]
Researcher
Affected Software
Explara Membership [explara-membership]
Researcher
Affected Software
Explore pages [explore-pages]
Researcher
Affected Software
Extra Options – Favicons [extra-options-favicons]
Researcher
Affected Software
Fast Tube [fast-tube]
Researcher
Affected Software
Find Content IDs [find-content-ids]
Researcher
Affected Software
Find Your Reps [find-your-reps]
Researcher
Affected Software
First Comment Redirect [first-comment-redirect]
Researcher
Affected Software
flashy [flashy]
Researcher
Affected Software
Flexible Blogtitle [flexible-blogtitle]
Researcher
Affected Software
Flexo Slider [flexo-slider]
Researcher
Affected Software
Floatbox Plus [floatbox-plus]
Researcher
Affected Software
FLX Dashboard Groups [flx-dashboard-groups]
Researcher
Affected Software
Flying Twitter Birds [flying-twitter-birds]
Researcher
Affected Software
FooGallery Captions [foogallery-captions]
Researcher
Affected Software
Form To JSON [form-to-json]
Researcher
Affected Software
Form To Online Booking [cf7-calendly-integration]
Researcher
Affected Software
Formatted post [formatted-post]
Researcher
Affected Software
FP RSS Category Excluder [fp-rss-category-excluder]
Researcher
Affected Software
Free MailClient FMC [mailclient]
Researcher
Affected Software
FWD Slider [fwd-slider]
Researcher
Affected Software
G Web Pro Store Locator [gwebpro-store-locator]
Researcher
Affected Software
Gallerio [gallerio]
Researcher
Affected Software
a Gateway for Pasargad Bank on WooCommerce [a-gateway-for-pasargad-bank-on-woocommerce]
Researcher
Affected Software
GDReseller [gdreseller]
Researcher
Affected Software
Genki Announcement [genki-announcement]
Researcher
Affected Software
GeoDigs [geodigs]
Researcher
Affected Software
Geotagged Media [geotagged-media]
Researcher
Affected Software
Ghostwriter [ghostwriter]
Researcher
Affected Software
Giga Messenger – Express [giga-messenger-bots]
Researcher
Affected Software
Gigaom Sphinx [go-sphinx]
Researcher
Affected Software
Glossy [glossy]
Researcher
Affected Software
Goo.gl Url Shorter [googl-url-shorter]
Researcher
Affected Software
Good Old Gallery [good-old-gallery]
Researcher
Affected Software
Goodlayers Blocks [goodlayers-blocks]
Researcher
Affected Software
Google Map on Post/Page [google-map-on-postpage]
Researcher
Affected Software
Google Map With Fancybox [location-piker]
Researcher
Affected Software
Google Transliteration [google-transliteration]
Researcher
Affected Software
GoogleMapper [googlemapper-2]
Researcher
Affected Software
GravatarLocalCache [gravatarlocalcache]
Researcher
Affected Software
Group category creator [group-category-creator]
Researcher
Affected Software
GSheetConnector for Forminator Forms [gsheetconnector-forminator]
Researcher
Affected Software
Guten Free Options [guten-free-options]
Researcher
Affected Software
Guten Free Options [guten-free-options]
Researcher
Affected Software
Hack me if you can [hack-me-if-you-can]
Researcher
Affected Software
Heartland Management Terminal [heartland-management-terminal]
Researcher
Affected Software
History timeline [history-timeline]
Researcher
Affected Software
HM Portfolio [hm-portfolio]
Researcher
Affected Software
Hotspots Analytics [hotspots]
Researcher
Affected Software
HSS Embed Streaming Video [hss-embed-streaming-video]
Researcher
Affected Software
HTTP to HTTPS link changer by Eyga.net [https-links-in-content]
Researcher
Affected Software
HyperComments [comments-with-hypercommentscom]
Researcher
Affected Software
iBuildApp [ibuildapp]
Researcher
Affected Software
Awesome Responsive Photo Gallery – Image & Video Lightbox Gallery [awesome-responsive-photo-gallery]
Researcher
Affected Software
Image Source Control Lite – Show Image Credits and Captions [image-source-control-isc]
Researcher
Affected Software
Image Source Control Lite – Show Image Credits and Captions [image-source-control-isc]
Researcher
Affected Software
ImageMeta [imagemeta]
Researcher
Affected Software
Import Users to MailChimp [import-users-to-mailchimp]
Researcher
Affected Software
Researcher
Affected Software
Instant Appointment [instant-appointment]
Researcher
Affected Software
Internal Links Generator [internal-links-generator]
Researcher
Affected Software
Isolved Talent Acquisition [applicantpro]
Researcher
Affected Software
Jet Skinner for BuddyPress [jet-skinner-for-buddypress]
Researcher
Affected Software
Js O3 Lite [js-o3-lite]
Researcher
Affected Software
JustRows free [justrows-free]
Researcher
Affected Software
Killer Theme Options [killer-theme-options]
Researcher
Affected Software
Kubio AI Page Builder [kubio]
Researcher
Affected Software
Kumihimo [kumihimo]
Researcher
Affected Software
Kv Compose Email From Dashboard [kv-send-email-from-admin]
Researcher
Affected Software
LawPress – Law Firm Website Management [lawpress]
Researcher
Affected Software
Legal + [legal-plus]
Researcher
Affected Software
Legull [legull]
Researcher
Affected Software
Len Slider [len-slider]
Researcher
Affected Software
LH Email [lh-email]
Researcher
Affected Software
LH Login Page [lh-login-page]
Researcher
Affected Software
Library Instruction Recorder [library-instruction-recorder]
Researcher
Affected Software
Lijit Search [wp-lijit-wijit]
Researcher
Affected Software
Lime Developer Login [lime-developer-login]
Researcher
Affected Software
Links/Problem Reporter [report-broken-links]
Researcher
Affected Software
Live Dashboard [live-dashboard]
Researcher
Affected Software
LJ Custom Menu Links [lj-custom-menu-links]
Researcher
Affected Software
Local Shipping Labels for WooCommerce [local-shipping-labels-for-woocommerce]
Researcher
Affected Software
LocalGrid [localgrid]
Researcher
Affected Software
Lockets [lockets]
Researcher
Affected Software
Login Watchdog [login-watchdog]
Researcher
Affected Software
LSD Google Maps Embedder [lsd-google-maps-embedder]
Researcher
Affected Software
Mancx AskMe Widget [mancx-askme-widget]
Researcher
Affected Software
Maniac SEO [maniac-seo]
Researcher
Affected Software
Mapbox for WP Advanced [mapbox-for-wp-advanced]
Researcher
Marquee Style RSS News Ticker <= 3.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
Affected Software
Marquee Style RSS News Ticker [marquee-style-rss-news-ticker]
Researcher
Affected Software
Mass Custom Fields Manager [mass-custom-fields-manager]
Researcher
Affected Software
Mass Messaging in BuddyPress [mass-messaging-in-buddypress]
Researcher
Affected Software
MD Custom content after or before of post [md-custom-content]
Researcher
Affected Software
MDC YouTube Downloader [mdc-youtube-downloader]
Researcher
Affected Software
melascrivi-plugin [melascrivi]
Researcher
Affected Software
MercadoLibre Integration [mercadolibre-integration]
Researcher
Affected Software
MHR-Custom-Anti-Copy [mhr-custom-anti-copy]
Researcher
Affected Software
Mind3doM RyeBread Widgets [mind3dom-ryebread-widgets]
Researcher
Affected Software
MJ Contact us [mj-contact-us]
Researcher
Affected Software
Mobigate [mobigatevn]
Researcher
Affected Software
Mojo Under Construction [mojo-under-construction]
Researcher
Affected Software
More Link Modifier [more-link-modifier]
Researcher
Affected Software
moseter [moseter]
Researcher
Affected Software
Multilang Contact Form [multilang-contact-form]
Researcher
Affected Software
Musicbox [musicbox]
Researcher
Affected Software
My auctions allegro [my-auctions-allegro-free-edition]
Researcher
Affected Software
My Favorite Car [my-favorite-cars]
Researcher
Affected Software
my white [my-white]
Researcher
Affected Software
my-related-posts [my-related-posts]
Researcher
Affected Software
mybb Last Topics [mybb-last-topics]
Researcher
Affected Software
Nature FlipBook WordPress Plugin [vertical-diamond-flipbook-flash]
Researcher
Affected Software
Network-Favorites [network-favorites]
Researcher
Affected Software
Ni WooCommerce Sales Report Email [ni-woocommerce-sales-report-email]
Researcher
Affected Software
NoFollow Free [nofollow-free]
Researcher
Affected Software
Notifications Center [notifications-center]
Researcher
Affected Software
Notifikácie.sk [notifikacie-sk]
Researcher
Affected Software
Offset Writing [offset-writing]
Researcher
Affected Software
One Backend Language [one-backend-language]
Researcher
Affected Software
Online Marksheet Creator : eMarksheet [emarksheet]
Researcher
Affected Software
PAFacile [pafacile]
Researcher
Affected Software
Page Health-O-Meter [page-health-o-meter]
Researcher
Affected Software
Partners [partners]
Researcher
Affected Software
Password Protect Plugin for WordPress [password-protect-plugin-for-wordpress]
Researcher
Passwordless WP – Login with your glance or fingerprint <= 1.1.6 - Reflected Cross-Site Scripting
6.1
Affected Software
Passwordless WP – Login with your glance or fingerprint [passwordless-wp]
Researcher
Affected Software
Researcher
Affected Software
Photo Video Store [photo-video-store]
Researcher
Affected Software
Pin Locations on Map [pin-locations-on-map]
Researcher
Affected Software
Pit Login Welcome [pit-login-welcome]
Researcher
Affected Software
Plestar Directory Listing [plestar-directory-listing]
Researcher
Affected Software
Podamibe Twilio Private Call [podamibe-twilio-private-call]
Researcher
Affected Software
Podčlánková inzerce [podclankova-inzerce]
Researcher
Affected Software
Polka Dots [polka-dots]
Researcher
Affected Software
pootle button [pootle-button]
Researcher
Affected Software
Post & Page Notes [post-page-notes]
Researcher
Affected Software
Post Carousel & Slider [post-types-carousel-slider]
Researcher
Affected Software
Post Meta [post-meta]
Researcher
Affected Software
Predict When [predict-when]
Researcher
Affected Software
Preloader Quotes [preloader-quotes]
Researcher
Affected Software
Proofreading [proofreading]
Researcher
Affected Software
Ps Ads Pro [ps-ads-pro]
Researcher
Affected Software
Push Envoy Notifications [push-envoy]
Researcher
Affected Software
Researcher
Affected Software
Quote me [quote-me]
Researcher
Affected Software
Random Posts, Mp3 Player + ShareButton [random-posts-mp3-player-sharebutton]
Researcher
Affected Software
ReadMe Creator [readme-creator]
Researcher
Affected Software
Real Seguro Viagem [seguro-viagem]
Researcher
Affected Software
Realtyna Provisioning [realtyna-provisioning]
Researcher
Affected Software
Rebrand Fluent Forms [rebrand-fluent-forms]
Researcher
Affected Software
Recip.ly Plugin [reciply]
Researcher
Affected Software
301 SEO REDIRECTION | COUNTRY BASED REDIRECTION [ REDIRECTION PLUS ] [redirection-plus]
Researcher
Affected Software
Redux Converter [redux-converter]
Researcher
Affected Software
Rename Author Slug [rename-author-slug]
Researcher
Affected Software
Responsivity [responsivity]
Researcher
Affected Software
Rezdy Reloaded [reloaded-rezdy]
Researcher
Affected Software
Rio Photo Gallery [rio-photo-gallery]
Researcher
Affected Software
rng-refresh [rng-refresh]
Researcher
Rocket Media Library Mime Type <= 2.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
Affected Software
Rocket Media Library Mime Type [rocket-media-library-mime-type]
Researcher
Affected Software
RomanCart On WordPress [romancart-on-wordpress]
Researcher
Affected Software
root Cookie [root-cookie]
Researcher
Affected Software
Royal Addons for Elementor – Addons and Templates Kit for Elementor [royal-elementor-addons]
Researcher
Affected Software
RS Survey [rs-survey]
Researcher
Affected Software
RSS News Scroller [rss-news-scroller]
Researcher
Affected Software
RSVPMaker Volunteer Roles [rsvpmaker-volunteer-roles]
Researcher
Affected Software
Sale with Razorpay [sell-with-razorpay]
Researcher
Affected Software
Save & Import Image from URL [save-import-image-from-url]
Researcher
Affected Software
SC Simple Zazzle [sc-simple-zazzle]
Researcher
Affected Software
Scroll Top – WordPress Scroll to Top plugin [scroll-to-top-builder]
Researcher
Affected Software
Secure CAPTCHA [secure-captcha]
Researcher
Affected Software
Send to a Friend Addon [send-booking-invites-to-friends]
Researcher
Affected Software
Send to Twitter [send-to-twitter]
Researcher
Affected Software
SEOReseller Partner Plugin [sr-partner]
Researcher
Affected Software
SexBundle [sexbundle]
Researcher
Affected Software
Shabbos and Yom Tov [shabbos-and-yom-tov]
Researcher
Affected Software
Shockingly Big IE6 Warning [shockingly-big-ie6-warning]
Researcher
Affected Software
Shortcode in Comment [shortcode-in-comment]
Researcher
Affected Software
Simple Custom post type custom field [simple-content-construction-kit]
Researcher
Affected Software
Simple Membership Custom Messages [simple-membership-custom-messages]
Researcher
Affected Software
Simple Project Manager [simple-project-managment]
Researcher
Affected Software
Simple shortcode buttons [simple-shortcode-buttons]
Researcher
Affected Software
Simple:Press Forum [simplepress]
Researcher
Affected Software
Singsys -Awesome Gallery [awesome-gallery-singsys]
Researcher
Affected Software
Site Launcher [site-launcher]
Researcher
Affected Software
Slider for Writers [slider-for-writers]
Researcher
Affected Software
Smooth Dynamic Slider [smooth-dynamic-slider]
Researcher
Affected Software
Snippy [snippy]
Researcher
Affected Software
Social Analytics [social-analytics]
Researcher
Affected Software
Social Pug: Author Box [social-pug-author-box]
Researcher
Affected Software
Social2Blog [social2blog]
Researcher
Affected Software
Researcher
Affected Software
SpiderDisplay [spiderdisplay]
Researcher
Affected Software
Sponsered Link [sponsered-link]
Researcher
Affected Software
Staging CDN [staging-cdn]
Researcher
Affected Software
Stars SMTP Mailer [stars-smtp-mailer]
Researcher
Affected Software
StatPressCN [statpresscn]
Researcher
Affected Software
Stop Comment Spam [stop-comment-spam]
Researcher
Affected Software
Stray Random Quotes [stray-quotes]
Researcher
Affected Software
Strx Magic Floating Sidebar Maker [strx-magic-floating-sidebar-maker]
Researcher
Affected Software
Style Admin [style-admin]
Researcher
Affected Software
Swift Calendar Online Appointment Scheduling [online-appointment-scheduling-software]
Researcher
Affected Software
Tab My Content [tab-my-content]
Researcher
Affected Software
Researcher
Affected Software
Tagesteller / Mittagsmenü Plugin [tagesteller]
Researcher
Affected Software
Tantyyellow [tantyyellow]
Researcher
Affected Software
Tax Report for WooCommerce [tax-report-for-woocommerce]
Researcher
Affected Software
Texteller [texteller]
Researcher
Affected Software
The Loops [the-loops]
Researcher
Theme My Ontraport Smartform <= 1.2.11 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
Affected Software
Theme My Ontraport Smartform [theme-my-ontraport-smartform]
Researcher
Affected Software
Tidy.ro [tidyro]
Researcher
Affected Software
TIJAJI [tijaji]
Researcher
Affected Software
Tiki Time [tiki-time]
Researcher
Affected Software
TinyMCE Extended Config [tinymce-extended-config]
Researcher
Affected Software
TransFinanz [transfinanz]
Researcher
Affected Software
Translation.Pro [translation-pro]
Researcher
Affected Software
Tuaug4 [tuaug4]
Researcher
Affected Software
turboSMTP [turbosmtp]
Researcher
Affected Software
Twitter News Feed [twitter-news-feed]
Researcher
Affected Software
Twitter Post [twitterpost]
Researcher
Affected Software
Twitter Shortcode [twitter-shortcode]
Researcher
Affected Software
Ui Slider Filter By Price [ui-slider-filter-by-price]
Researcher
Affected Software
Ultimate Events [ultimate-events]
Researcher
Affected Software
Ultimate Subscribe [ultimate-subscribe]
Researcher
Affected Software
The Ultralight [the-ultralight]
Researcher
Affected Software
Unique UX [unique-ux]
Researcher
Universal Analytics Injector <= 1.0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
Affected Software
Universal Analytics Injector [universal-analytics-injector]
Researcher
Affected Software
University quizzes online [university-quizzes-online]
Researcher
Affected Software
UpDownUpDown [updownupdown-postcomment-voting]
Researcher
Affected Software
UpdraftPlus: WP Backup & Migration Plugin [updraftplus]
Researcher
Affected Software
URL Shortener | Conversion Tracking | AB Testing | WooCommerce [easy-broken-link-checker]
Researcher
Affected Software
Userbase Access Control [userbase-access-control]
Researcher
Affected Software
Vampire Character Manager [vampire-character]
Researcher
Affected Software
vcOS [vcos]
Researcher
Affected Software
Verge3D Publishing and E-Commerce [verge3d]
Researcher
Affected Software
"Visit Site" Link enhanced – WordPress PlugIn [visit-site-link-enhanced]
Researcher
Affected Software
Visual Slider [visual-slider]
Researcher
Affected Software
VSTEMPLATE Creator [vstemplate-creator]
Researcher
Affected Software
W3SPEEDSTER [w3speedster-wp]
Researcher
Affected Software
Web Testimonials [web-testimonials]
Researcher
Affected Software
Webcamconsult [webcamconsult]
Researcher
Affected Software
WH Cache & Security [wh-cache-and-security]
Researcher
Affected Software
Wibstats [wibstats-statistics-for-wordpress-mu]
Researcher
Affected Software
Wishlist [wishlist]
Researcher
Affected Software
Woo Store Mode [woo-store-mode]
Researcher
Affected Software
WooCommerce Order Search [woocommerce-order-searching]
Researcher
Affected Software
Word Freshener [word-freshener]
Researcher
Affected Software
WordPress Additional Logins [wp-additional-logins]
Researcher
Affected Software
WordPress Data Guard [Website Security] [wordpress-data-guards]
Researcher
Affected Software
WordPress File Search [wpfilesearch]
Researcher
Affected Software
WordPress Gallery Plugin [wordpress-gallery-plugin]
Researcher
Affected Software
WordPress Logging Service [wordpress-logging-service]
Researcher
Affected Software
WordPress 淘宝客插件 [taobaoke]
Researcher
Affected Software
WordPress-to-candidate for Salesforce CRM [salesforce-wordpress-to-candidate]
Researcher
Affected Software
World Cup Predictor [world-cup-predictor]
Researcher
Affected Software
WOW Best CSS Compiler [best-css-compiler]
Researcher
Affected Software
WP Abstracts [wp-abstracts-manuscripts-manager]
Researcher
Affected Software
WP Background Tile [wp-background-tile]
Researcher
Affected Software
WP Bulletin Board [wp-bulletin-board]
Researcher
Affected Software
WP Contest [wp-contest]
Researcher
Affected Software
WP Cookies Alert [wp-cookies-alert]
Researcher
Affected Software
WP Custom Google Search [wp-custom-google-search]
Researcher
Affected Software
WP Download Codes [wp-download-codes]
Researcher
Affected Software
WP Dream Carousel [wp-dream-carousel]
Researcher
Affected Software
WP FixTag [wp-fixtag]
Researcher
Affected Software
WP FPO [wp-fpo]
Researcher
Affected Software
WP Front-end login and register [wp-front-end-login-and-register]
Researcher
Affected Software
WP Headmaster [wp-headmaster]
Researcher
Affected Software
WP IMAP Auth [wp-imap-authentication]
Researcher
Affected Software
WP Intro.JS Plugin [wp-intro-js-tours]
Researcher
Affected Software
WP Inventory Manager [wp-inventory-manager]
Researcher
Affected Software
WP Login Attempt Log [wp-login-attempt-log]
Researcher
Affected Software
WP OpenSearch [wp-opensearch]
Researcher
Affected Software
WP Order By [wp-order-by]
Researcher
Affected Software
WP Post Category Notifications [wp-post-category-notifications]
Researcher
Affected Software
WP Post Corrector [wp-post-corrector]
Researcher
Affected Software
WP Projects Portfolio with Client Testimonials [wp-projects-portfolio]
Researcher
Affected Software
WP Projects Portfolio with Client Testimonials [wp-projects-portfolio]
Researcher
Affected Software
WP PT-Viewer [wp-ptviewer]
Researcher
Affected Software
WP Query Creator [wp-query-creator]
Researcher
Affected Software
WP Service Payment Form With Authorize.net [wp-service-payment-form-with-authorizenet]
Researcher
Affected Software
WP Social Broadcast [wp-social-broadcast]
Researcher
Affected Software
WP SpaceContent [wp-spacecontent]
Researcher
Affected Software
WP Ultimate Reviews FREE [wp-ultimate-reviews-free]
Researcher
Affected Software
WP VTiger Synchronization [msstiger]
Researcher
Affected Software
WP-Announcements [wp-announcements]
Researcher
Affected Software
WP-Asambleas [wp-asambleas]
Researcher
Affected Software
WP-BlackCheck [wp-blackcheck]
Researcher
Affected Software
wp-flickr-press [wp-flickr-press]
Researcher
WP-HR Manager: The Human Resources Plugin for WordPress <= 3.1.0 - Reflected Cross-Site Scripting
6.1
Affected Software
WP-HR Manager: The Human Resources Plugin for WordPress [wp-hr-manager]
Researcher
Affected Software
WP-NOTCAPTCHA [wp-notcaptcha]
Researcher
Affected Software
Wp-Scribd-List [wp-scribd-list]
Researcher
Affected Software
WP2APP [wp2appir]
Researcher
Affected Software
XTRA Settings [xtra-settings]
Researcher
Affected Software
Youtube Video Grid | Youmax [youmax-channel-embeds-for-youtube-businesses]
Researcher
Affected Software
Zarinpal Paid Download [zarinpal-paid-downloads]
Researcher
Affected Software
新淘客WordPress插件 [wp-xintaoke]
Researcher
Affected Software
WP All Import Pro [wp-all-import-pro]
Researcher
Affected Software
Admin and Customer Messages After Order for WooCommerce: OrderConvo [admin-and-client-message-after-order-for-woocommerce]
Researcher
Affected Software
Gravity Forms [gravityforms]
Researcher
Affected Software
Motors – Car Dealership & Classified Listings Plugin [motors-car-dealership-classified-listings]
Researchers
Affected Software
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment [booking-and-rental-manager-for-woocommerce]
Researcher
Affected Software
Contact Form 7 Anti Spambot [contact-form-7-anti-spambot]
Researcher
Affected Software
Copy Move Posts [copy-move-posts]
Researcher
Affected Software
Delete All Posts [delele-all]
Researcher
Affected Software
Download Manager [download-manager]
Researcher
Affected Software
EMI Calculator [emi-calculator]
Researcher
Affected Software
Event Monster – Event Manager, Ticket Booking & Registration [event-monster]
Researcher
Affected Software
Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media [evergreen-content-poster]
Researcher
Affected Software
Htaccess File Editor – Easily Edit, Backup, Restore .htaccess file [htaccess-file-editor]
Researcher
Affected Software
Ksher [ksher-payment]
Researcher
Affected Software
Loginplus [loginplus]
Researcher
Affected Software
Moving Users [moving-users]
Researcher
Affected Software
Multi Step Form [multi-step-form]
Researcher
Affected Software
My Tickets – Accessible Event Ticketing [my-tickets]
Researcher
Affected Software
OPSI Israel Domestic Shipments [woo-ups-pickup]
Researcher
Affected Software
Push Notification for Post and BuddyPress [push-notification-for-post-and-buddypress]
Researcher
Affected Software
Realty Workstation [realty-workstation]
Researcher
Sensei LMS – Online Courses, Quizzes, & Learning <= 4.24.3 - Unauthenticated Information Exposure
5.3
Affected Software
Sensei LMS – Online Courses, Quizzes, & Learning [sensei-lms]
Researcher
Affected Software
Setup Default Featured Image [setup-default-feature-image]
Researcher
Team 118GROUP Agent <= 1.6.0 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
5.3
Affected Software
Team 118GROUP Agent [team-118group-agent]
Researcher
Affected Software
Researcher
Affected Software
W3 Total Cache [w3-total-cache]
Researcher
Affected Software
W3 Total Cache [w3-total-cache]
Researcher
Affected Software
WebToffee WP Backup and Migration [wp-migration-duplicator]
Researcher
Affected Software
WM Options Import Export [wm-options-import-export]
Researcher
Affected Software
WP Hotel Booking [wp-hotel-booking]
Researcher
Affected Software
WPDB to Sql [wpdb-to-sql]
Researcher
Affected Software
Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Plugin [tour-booking-manager]
Researcher
Contact Form 7 Round Robin Lead Distribution <= 1.2.1 - Authenticated (Administrator+) SQL Injection
4.9
Affected Software
Contact Form 7 Round Robin Lead Distribution [contact-form-7-round-robin-lead-distribution]
Researcher
Affected Software
Easy Code Snippets [easy-code-snippets]
Researcher
Affected Software
ResAds [resads]
Researcher
Affected Software
Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management [smart-manager-for-wp-e-commerce]
Researcher
Affected Software
bonjour-bar [bonjour-bar]
Researcher
Affected Software
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy [easy-digital-downloads]
Researcher
Affected Software
Researcher
Affected Software
MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution [marketking-multivendor-marketplace-for-woocommerce]
Researcher
Affected Software
Podlove Podcast Publisher [podlove-podcasting-plugin-for-wordpress]
Researchers
Affected Software
Post-to-Post Links [easy-post-to-post-links]
Researcher
Affected Software
Posts Footer Manager [intelly-posts-footer-manager]
Researcher
Affected Software
Related Post Shortcode [related-post-shortcode]
Researcher
Affected Software
RSS Icon Widget [rss-icon-widget]
Researcher
Affected Software
Shoutcast and Icecast HTML5 Web Radio Player by YesStreaming.com [shoutcast-and-icecast-html5-web-radio-player-by-yesstreaming-com]
Researcher
Affected Software
WordPress HelpDesk & Support Ticket System Plugin – Octrace Support [octrace-support]
Researcher
Affected Software
Researcher
Affected Software
AI Responsive Gallery Album [ai-responsive-gallery-album]
Researcher
Affected Software
ApplyOnline – Application Form Builder and Manager [apply-online]
Researcher
Affected Software
BuddyBoss Platform [buddyboss-platform]
Researcher
Affected Software
Build Private Store For WooCommerce [build-private-store-for-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Cache Sniper for Nginx [snipe-nginx-cache]
Researcher
Affected Software
Chamber Dashboard Business Directory [chamber-dashboard-business-directory]
Researcher
Affected Software
Debug Tool [debug-tool]
Researcher
Affected Software
Donate visa [donate-visa]
Researcher
Affected Software
Addon Elements for Elementor (formerly Elementor Addon Elements) [addon-elements-for-elementor-page-builder]
Researcher
Affected Software
Email Capture & Lead Generation [email-capture-lead-generation]
Researcher
Affected Software
Goldstar [goldstar]
Researcher
Affected Software
Interactive Page Hierarchy [interactive-page-hierarchy]
Researcher
Affected Software
Mark Posts [mark-posts]
Researcher
Affected Software
Researcher
Affected Software
PAPERCITE [papercite]
Researcher
Affected Software
PayPal Marketing Solutions [paypal-promotions-and-insights]
Researcher
Affected Software
Piotnet Addons For Elementor [piotnet-addons-for-elementor]
Researcher
Affected Software
RTMKit [rometheme-for-elementor]
Researchers
Affected Software
Salvador – AI Image Generator [salvador-ai-image-generator]
Researcher
Affected Software
SendGrid for WordPress [wp-sendgrid-mailer]
Researcher
Affected Software
ShipWorks Connector for Woocommerce [shipworks-e-commerce-bridge]
Researcher
Affected Software
Slides & Presentations [slide]
Researcher
Affected Software
Sur.ly [surly]
Researcher
Affected Software
User Sync ActiveCampaign [registered-user-sync-activecampaign]
Researcher
Affected Software
VikAppointments Services Booking Calendar [vikappointments]
Researcher
Affected Software
VOD Infomaniak [vod-infomaniak]
Researcher
Affected Software
WAH Forms [wah-forms]
Researcher
Affected Software
Researcher
Affected Software
Woo Tuner [woo-tuner]
Researcher
Affected Software
Researcher
Affected Software
WP Journal [wpjournal]
Researcher
Affected Software
WP Meetup [wp-meetup]
Researcher
Affected Software
WP News Sliders [wp-news-sliders]
Researcher
Affected Software
WP User Profile Avatar [wp-user-profile-avatar]
Researcher
Affected Software
WPLingo – Forum Plugin [wplingo]
Researcher
Affected Software
Xola [xola-bookings-for-tours-activities]
Researcher
Affected Software
Envo Multipurpose [envo-multipurpose]
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Comments
11:41 pm
We are using tools based on wget to monitor plugin vulnerabilities. However, we now receive HTTP 202 using wget or curl for this page which makes our tools useless (no content). Browser works fine. Why?
2:30 pm
Thanks for mentioning this - we will look into it. However, we recommend utilizing our vulnerability API https://www.wordfence.com/help/wordfence-intelligence/v2-accessing-and-consuming-the-vulnerability-data-feed/ or webhooks https://www.wordfence.com/help/wordfence-intelligence/wordfence-intelligence-webhook-notifications/ which are completely free to access to stay on top of the latest vulnerabilities. You will receive access to the same vulnerabilities found in these reports, but more in real-time.