Wordfence Intelligence Weekly WordPress Vulnerability Report (January 6, 2025 to January 12, 2025)
📢 Did you know Wordfence runs a Bug Bounty Program for all WordPress plugins and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we handle all the rest.
Last week, there were 393 vulnerabilities disclosed in 352 WordPress Plugins and 23 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 75 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to make the internet more secure. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 22,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
New Firewall Rules Deployed Last Week
The Wordfence Threat Intelligence Team reviews each vulnerability to determine impact and severity, along with assessing the likelihood of exploitation, to verify that the Wordfence Firewall provides sufficient protection.
The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our Premium, Care, and Response customers last week:
- WAF-RULE-793 – Data redacted while we work with the vendor on a patch.
Wordfence Premium, Care, and Response customers received this protection immediately, while users still running the free version of Wordfence will receive this enhanced protection after a 30 day delay.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 203 |
| Unpatched | 190 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Low Severity | 1 |
| Medium Severity | 344 |
| High Severity | 36 |
| Critical Severity | 12 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 232 |
| Missing Authorization | 50 |
| Cross-Site Request Forgery (CSRF) | 42 |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 25 |
| Exposure of Sensitive Information to an Unauthorized Actor | 10 |
| Authorization Bypass Through User-Controlled Key | 6 |
| Deserialization of Untrusted Data | 6 |
| Improper Control of Generation of Code ('Code Injection') | 5 |
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 5 |
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 4 |
| Unrestricted Upload of File with Dangerous Type | 3 |
| Authentication Bypass Using an Alternate Path or Channel | 1 |
| Deletion of Data Structure Sentinel | 1 |
| Exposure of Backup File to an Unauthorized Control Sphere | 1 |
| Improper Authentication | 1 |
| Incorrect Privilege Assignment | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 56 | |
| 34 | |
| 27 | |
| 23 | |
| 19 | |
| 17 | |
| 14 | |
| 13 | |
| 12 | |
| 9 | |
| 8 | |
| 8 | |
| 8 | |
| 7 | |
| 7 | |
| 7 | |
| 7 | |
| 6 | |
| 6 | |
| 5 | |
| 5 | |
| 5 | |
| 5 | |
| 4 | |
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| 1003 Mortgage Application | 1003-mortgage-application |
| 3D Viewer Online | 3dvieweronline-wp |
| 4ECPS Web Forms | 4ecps-webforms |
| A5 Custom Login Page | custom-login-page |
| Able Player for WordPress | wp-able-player |
| Accordion Slider Lite | accordion-slider-lite |
| Action Network | wp-action-network |
| AddFunc Mobile Detect | addfunc-mobile-detect |
| Admin debug wordpress – enable debug | dzs-enable-debug |
| Advance Post Prefix | advance-post-prefix |
| Advanced Product Information for WooCommerce | woo-advanced-product-information |
| Affiliate Disclosure Statement | affiliate-disclosure-statement |
| AffiliateImporterEb | affiliateimportereb |
| AI WP Writer – SEO content generator, chatGPT, Gemini | ai-wp-writer |
| Alpha Price Table For Elementor | alpha-price-table-for-elementor |
| Altra Side Menu | altra-side-menu |
| App Embed | appizy-app-embed |
| Arcade Ready | arcadeready |
| ARS Affiliate Page Plugin | ars-affiliate-page |
| Author Avatars List/Block | author-avatars |
| Automate Hub Free by Sperse.IO | automate-hub-free-by-sperse-io |
| Axact Author List Widget | knr-author-list-widget |
| Beacon Lead Magnets and Lead Capture | beacon-by |
| Better User Shortcodes | better-user-shortcodes |
| Biltorvet Dealer Tools | biltorvet-dealer-tools |
| Binary MLM For WooCommerce | woo-binary-mlm |
| Bitly's WordPress Plugin | wp-bitly |
| Bizapp for WooCommerce | bizapp-for-woocommerce |
| Black Widgets For Elementor | black-widgets |
| Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment | booking-and-rental-manager-for-woocommerce |
| Booking Calendar Pro WpDevArt | booking-calendar-pro |
| Booking calendar, Appointment Booking System | booking-calendar |
| Boot-Modal | boot-modal |
| Bootstrap Blocks for WP Editor v2 | wp-editor-bootstrap-blocks |
| BP Profile Shortcodes Extra | bp-profile-shortcodes-extra |
| Build App Online | build-app-online |
| Bulk Me Now! | bulk-me-now |
| Bus Ticket Booking with Seat Reservation | bus-ticket-booking-with-seat-reservation |
| Button Block – Design Stylish, Interactive, and Multi-Functional Buttons | button-block |
| BWD Elementor Addons | bwd-elementor-addons |
| Candifly | candifly |
| Canvasflow for WordPress | canvasflow |
| CC Canadian Mortgage Calculator | cc-canadian-mortgage-calculator |
| CF Internal Link Shortcode | internal-link-shortcode |
| Chat Support for Viber – Chat Bubble and Chat Button for Gutenberg, Elementor and Shortcode | chat-viber |
| Chative Live chat and Chatbot | chative-live-chat-and-chatbot |
| Chatroll Live Chat | chatroll-live-chat |
| Clasify Classified Listing | clasify-classified-listing |
| ClickDesigns | clickdesigns |
| ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages | clickwhale |
| ClipArt | clipart |
| CLUEVO LMS, E-Learning Platform | cluevo-lms |
| Common Ninja: Fully Customizable & Perfectly Responsive Free Widgets for WordPress Websites | common-ninja |
| Compare Products for WooCommerce | woocommerce-compare-products |
| Competition Form | competition-form |
| Contact Form, Survey, Quiz & Popup Form Builder – ARForms | arforms-form-builder |
| Content Blocks Builder – Create blocks, repeater blocks with carousel, grid, popup layouts | content-blocks-builder |
| Cost Calculator Builder PRO | cost-calculator-builder-pro |
| Coupon Plugin Lite | coupon-lite |
| Coupon X – Discount Popups, Promo Codes Pop Ups for WooCommerce & Announcement Popups | coupon-x-discount-pop-up |
| Crelly Slider | crelly-slider |
| Croma Music | croma-music |
| CubeWP Forms | cubewp-forms |
| Custom DataBase Tables | custom-database-tables |
| Custom Field For WP Job Manager | custom-field-for-wp-job-manager |
| Custom Field Manager | custom-field-manager |
| Custom Product Tabs for WooCommerce | yikes-inc-easy-custom-woocommerce-product-tabs |
| DearFlip – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer | 3d-flipbook-dflip-lite |
| Deliver via Shipos for WooCommerce | wc-shipos-delivery |
| Dental Optimizer Patient Generator App | dental-optimizer-patient-generator-app |
| Digital Content Delivery (incl. DRM) by Flickrocket for WooCommerce | woocommerce-digital-content-delivery-with-drm-flickrocket |
| DirectoryPress – Business Directory And Classified Ad Listing | directorypress |
| Divine Astro | horoscope-and-tarot |
| Dominion – Domain Checker for WPBakery | dominion-domain-checker-wpbakery-addon |
| Donation Block For PayPal | donations-block |
| Duplicate PP | duplicate-pp |
| Dyn Business Panel | dyn-business-panel |
| Easy Form Builder by WhiteStudio — Drag & Drop Form Builder | easy-form-builder |
| ECT Home Page Products | ect-homepage-products |
| eDoc Easy Tables – Best WordPress Table Maker | edoc-easy-tables |
| Element Pack – Widgets, Templates & Addons for Elementor | bdthemes-element-pack-lite |
| Elementor Addons AI Addons – 70 Widgets, Premium Templates, Ultimate Elements | ai-addons-for-elementor |
| Emailing Subscription | email-suscripcion |
| Enable Accessibility | enable-accessibility |
| Error Log Viewer By WP Guru | error-log-viewer-wp |
| Essential WP Real Estate | essential-wp-real-estate |
| Estatik Mortgage Calculator | estatik-mortgage-calculator |
| Export Import Menus | export-import-menus |
| F4 Post Tree | f4-tree |
| FancyPost – Post Blocks, Grids & Sliders for Block Editor and Elementor | post-block |
| Fantastic ElasticSearch | fantastic-elasticsearch |
| Fast Tube | fast-tube |
| FAT Event Lite | fat-event-lite |
| Featured Page Widget | featured-page-widget |
| Files Download Delay | files-download-delay |
| Financial Stocks & Crypto Market Data Plugin | live-stock-prices-for-wordpress |
| Food Store – Online Food Delivery & Pickup | food-store |
| Formaloo Form Maker & Customer Analytics for WordPress & WooCommerce | formaloo-form-builder |
| Free WooCommerce Theme 99fy Extension | 99fy-core |
| Garden Gnome Package | garden-gnome-package |
| GatorMail SmartForms | gatormail-smart-forms |
| GDY Modular Content | gdy-modular-content |
| Genesis Style Shortcodes | genesis-style-shortcodes |
| Geo Content | geo-targetly-geo-content |
| Gift Cards for WooCommerce Pro | gift-cards-for-woocommerce-pro |
| GiveWP – Donation Plugin and Fundraising Platform | give |
| Goodlayers Core | goodlayers-core |
| Google Maps Travel Route | google-maps-travel-route |
| Greenshift – animation and page builder blocks | greenshift-animation-and-page-builder-blocks |
| Grid Accordion Lite | grid-accordion-lite |
| GS Insever Portfolio | gs-instagram-portfolio |
| Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | essential-blocks |
| Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor | gutentor |
| Happy Addons for Elementor | happy-elementor-addons |
| Hash Elements | hash-elements |
| Help Scout | help-scout |
| Hero Banner Ultimate | hero-banner-ultimate |
| Hive Support | AI-Powered Help Desk, Live Chat and Chatbot | hive-support |
| Host PHP Info | host-php-info |
| Huurkalender WP | huurkalender-wp |
| Icons Enricher | icons-enricher |
| ICS Button | ics-button |
| iframe to embed | iframe-to-embed |
| Image Magnify | image-magnify |
| Infility Global | infility-global |
| InfiniteWP Client | iwp-client |
| Inline Tweets | inline-tweets |
| Instabot: Chatbot to Increase Conversions on WordPress. Try for Free | instabot |
| Iptanus File Upload | wp-file-upload |
| JK Html To Pdf | jk-html-to-pdf |
| JoomSport – for Sports: Team & League, Football, Hockey & more | joomsport-sports-league-results-management |
| Jupiter X Core | jupiterx-core |
| Justified Image Gallery | justified-image-gallery |
| Kadence Blocks — Page Builder Toolkit for Gutenberg Editor | kadence-blocks |
| Korea for WooCommerce | korea-for-woocommerce |
| Laika Pedigree Tree | laika-pedigree-tree |
| LazyLoad Background Images | lazyload-background-images |
| Legacy ePlayer | sportspress-tv |
| Linear | linear |
| Link Whisper Free | link-whisper |
| linkID | linkid |
| List Pages at Depth | list-pages-at-depth |
| Live Flight Radar | live-flight-radar |
| Live Sales Notification for Woocommerce – Woomotiv | woomotiv |
| LucidLMS | lucidlms |
| Mailing Group Listserv | wp-mailing-group |
| Marketplace Items | marketplace-items |
| MAS Elementor | mas-addons-for-elementor |
| Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits | master-addons |
| mcjh button shortcode | mcjh-button-shortcode |
| MDTF – Meta Data and Taxonomies Filter | wp-meta-data-filter-and-taxonomy-filter |
| Member Access | member-access |
| Metadata SEO | metadata-seo |
| Meteor Slides | meteor-slides |
| MIMO Woocommerce Order Tracking | mimo-woocommerce-order-tracking |
| Mind Doodle Visual Sitemaps & Tasks | mind-doodle-sitemap |
| MindValley Super PageMash | mindvalley-pagemash |
| MIPL Multistore Sync for WooCommerce. Sync Products, Stock and Orders. | mipl-wc-multisite-sync |
| Modula Image Gallery – Photo Grid & Video Gallery | modula-best-grid-gallery |
| MT Addons for Elementor | mt-addons-for-elementor |
| Multiple Carousel | multicarousel |
| Muslim Prayer Time-Salah/Iqamah | masjidal |
| MyBookTable Bookstore by Stormhill Media | mybooktable |
| NC Wishlist for Woocommerce | nc-wishlist-for-woocommerce |
| News Publisher Autopilot | wpm-news-api |
| News Ticker Widget for Elementor | news-ticker-widget-for-elementor |
| Newsletter2Go | newsletter2go |
| Ninja Tables – Easy Data Table Builder | ninja-tables |
| Norse Rune Oracle Plugin | norse-runes-oracle |
| One to one user Chat by WPGuppy | wpguppy-lite |
| Opace AI Scribe: SEO Content Creator & Humaizer for OpenAI & Anthropic | ai-scribe-the-chatgpt-powered-seo-content-creation-wizard |
| OPSI Israel Domestic Shipments | woo-ups-pickup |
| Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords | muzaara-adwords-optimize-dashboard |
| Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More | themeisle-companion |
| Passster – Password Protect Pages and Content | content-protector |
| PayGreen Payment Gateway | paygreen-payment-gateway |
| PayU CommercePro Plugin | payu-india |
| PDF Catalog for WooCommerce | pdf-catalog-woocommerce |
| Pearl – Header Builder | pearl-header-builder |
| Perfect Portal Widgets | perfect-portal-widgets |
| PixelYourSite – Your smart PIXEL (TAG) & API Manager | pixelyoursite |
| PIXNET Plugin | pixnet |
| Plugin Name: ldap_login_password_and_role_manager | ldap-login-password-and-role-manager |
| Popup – MailChimp, GetResponse and ActiveCampaign Intergrations | ultimate-popup-creator |
| Post And Page Reactions | post-and-page-reactions |
| Post Duplicator | post-duplicator |
| Post Grid Master — Post Grids & AJAX Filters | ajax-filter-posts |
| Post Saint: ChatGPT, GPT4, DALL-E, Stable Diffusion, Pexels, Dezgo AI Text & Image Generator | post-saint |
| Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App | post-smtp |
| Powerful Auto Chat | powers-triggers-of-woo-to-chat |
| Prayer Times Anywhere | prayer-times-anywhere |
| Pretty Url | pretty-url |
| Privacy Policy Genius | policy-genius |
| Product Table for WooCommerce | woo-product-table |
| Push Notification for Post and BuddyPress | push-notification-for-post-and-buddypress |
| Pósturinn\'s Shipping with WooCommerce | posturinn |
| Qr Code and Barcode Scanner Reader | qr-code-and-barcode-scanner-reader |
| Quill Forms | Conversational Multi Step Forms, Surveys & quizzes | quillforms |
| Quote Tweet | quote-tweet |
| ResAds | resads |
| Responsive Flickr Slideshow | mobile-friendly-flickr-slideshow |
| Responsive FlipBook Plugin Wordpress | responsive-flipbook |
| Responsive iframe | responsive-iframe |
| Rezgo Online Booking | rezgo |
| RightMessage WP | rightmessage |
| RRAddons for Elementor | rrdevs-for-elementor |
| RSVP and Event Management | rsvp |
| S3Player – WooCommerce & Elementor Integration | drm-protected-video-streaming |
| Same but Different – Related Posts by Taxonomy | same-but-different |
| Saoshyant Page Builder | saoshyant-page-builder |
| Scan External Links | scan-external-links |
| Scanventory | woocommerce-inventory-management |
| School Management System – SakolaWP | sakolawp-lite |
| School Management System – WPSchoolPress | wpschoolpress |
| Searchie | searchie |
| Sell Digital Downloads | sell-digital-downloads |
| Sell Media | sell-media |
| Sellsy | sellsy |
| SEMA API | sema-api |
| SEO Bulk Editor | seo-bulk-editor |
| SEO Keywords | seo-keywords |
| SEO LAT Auto Post | seo-beginner-auto-post |
| Service Box | service-boxs |
| Shipping via Planzer for WooCommerce | wc-planzer-shipping |
| Shopping Cart & eCommerce Store | wp-easycart |
| Show Google Analytics widget | show-google-analytics-widget |
| Simple add pages or posts | simple-add-pages-or-posts |
| Simple Locator | simple-locator |
| Simple Photo Sphere | simple-photo-sphere |
| Simple Video Management System | simple-video-management-system |
| SimplyRETS Real Estate IDX | simply-rets |
| Sina Extension for Elementor | sina-extension-for-elementor |
| SingSong | singsong |
| Site PIN | site-pin |
| Skill Bars | skillbars |
| SKT Page Builder | skt-builder |
| Skyword XMLRPC publishing | skyword-plugin |
| SlideDeck 1 Lite Content Slider | slidedeck-lite-for-wordpress |
| Slider Pro Lite | slider-pro-lite |
| Slides & Presentations | slide |
| Slotti Ajanvaraus | slotti-ajanvaraus |
| Smart Custom Fields | smart-custom-fields |
| SmartAgenda – Prise de rendez-vous en ligne | smart-agenda-prise-de-rendez-vous-en-ligne |
| SmartEmailing | smartemailing |
| Smoothness Slider Shortcode | smoothness-slider-shortcode |
| SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery | sms-alert |
| Social Rocket – Social Sharing Plugin | social-rocket |
| Social Share Buttons for WordPress | share-buttons |
| Solar Wizard Lite | solar-wizard-lite |
| SOOZ – AI for SEO – Bulk Generate Focus Keyphrases, Metadata, Alt Text (SEO Autopilot) | ai-for-seo |
| Spacer | spacer |
| SpeakOut! Email Petitions | speakout |
| ST Gallery WP | st-gallery-wp |
| Store credit / Gift cards for woocommerce | store-credit-for-woocommerce |
| Surbma | Premium WP | surbma-premium-wp |
| SureForms – Drag & Drop Contact Form & Form Builder, Payment Form, Survey, Quiz & Calculator | sureforms |
| SweepWidget – Contests, Giveaways, Sweepstakes & Photo Contests | sweepwidget |
| Tabulate | tabulate |
| TC Ecommerce – Create Android & iOS Apps for WooCommerce | tc-ecommerce |
| TCBD Auto Refresher | tcbd-auto-refresher |
| TemplatesNext ToolKit | templatesnext-toolkit |
| The Events Calendar | the-events-calendar |
| Themesflat Addons For Elementor | themesflat-addons-for-elementor |
| ThePerfectWedding.nl Widget | theperfectweddingnl-widget |
| Thim Kit for Elementor – Pre-built Templates & Widgets for Elementor | thim-elementor-kit |
| Timeline Designer | timeline-designer |
| Timeline Pro | timeline-pro |
| Title Experiments Free | wp-experiments-free |
| Tock Widget | tock-widget |
| Toggles Shortcode and Widget | toggles-shortcode-and-widget |
| Tour Master - Tour Booking, Travel, Hotel | tourmaster |
| Trackserver | trackserver |
| Transporters.io | transportersio |
| TRUSTist REVIEWer | trustist-reviewer |
| TubePress.NET | tubepressnet |
| TwentyTwenty Compare | js-twentytwenty |
| Twitter Bootstrap Collapse aka Accordian Shortcode | twitter-bootstrap-collapse-aka-accordian-shortcode |
| Typing Text | typing-text |
| Ukrposhta | woo-ukrposhta |
| Ultimate Gift Cards for WooCommerce | woo-gift-cards-lite |
| Ultimate Image Hover Effects | ultimate-image-hover-effects |
| Unilevel MLM Plan | unilevel-mlm-plan |
| Unlimited Elements For Elementor | unlimited-elements-for-elementor |
| Unlimited Theme Addon For Elementor | unlimited-theme-addons |
| Uptime Robot | uptime-robot |
| Uptodown APK Download Widget | uptodown-apk-download-widget |
| Urdu Formatter – Shamil | urdu-formatter-shamil |
| User Messages | user-messages |
| User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor | profile-builder |
| Video Embed Optimizer | video-embed-optimizer |
| ViewMedica 9 | viewmedica |
| Virtual Bot | virtual-bot |
| vooPlayer v4 | vooplayer |
| VR Views | vr-views |
| WC Affiliate – WooCommerce Affiliate Plugin | wc-affiliate |
| WC Price History | wc-price-history |
| WC1C | wc1c-main |
| WE Blocks – Image, Testimonial And Logo Slider Gutenberg Blocks | we-blocks |
| WebinarPress – Webinar System for WordPress | wp-webinarsystem |
| WhatsApp 🚀 click to chat | manycontacts-bar |
| Widget4Call | widget4call |
| Widgetize Pages Light | widgetize-pages-light |
| Woocommerce check pincode/zipcode for shipping | woocommerce-check-pincode-zipcode-for-shipping |
| WooCommerce HSS Extension for Streaming Video | woocommerce-hss-extension-for-streaming-video |
| WOOEXIM – WooCommerce Export Import Plugin | wooexim |
| WordLift – AI powered SEO – Schema | wordlift |
| WordPress Email Newsletter | wp-email-newsletter |
| WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto | tripetto |
| WordPress Google Map Professional (Map In Your Language) | google-map-professional |
| WordPress Survey & Poll – Quiz, Survey and Poll Plugin for WordPress | wp-survey-and-poll |
| WordPress连接微博 | wp-connect |
| WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms | cf7-styler |
| WP Cookie | wp-cookie |
| wp custom countdown | wp-custom-countdown |
| WP Customer Area | customer-area |
| WP Database Backup – Unlimited Database & Files Backup by Backup for WP | wp-database-backup |
| WP Delete Post Copies | etruel-del-post-copies |
| WP DeskLite – Helpdesk and Support Plugin | wp-desklite |
| WP Extended – The Ultimate WordPress Toolkit | wpextended |
| WP Finance | wp-finance |
| WP FullCalendar | wp-fullcalendar |
| WP Github | wp-github |
| WP Header Notification | wp-header-notification |
| wp Hosting Performance Check | wp-hosting-performance-check |
| WP Job Portal – AI-Powered Recruitment System for Company or Job Board website | wp-job-portal |
| WP Joomag | wp-joomag |
| WP jQuery DataTable | wp-jquery-datatable |
| WP Mailster | wp-mailster |
| WP MediaTagger | wp-mediatagger |
| WP Music Player | wp-music-player |
| WP SPID Italia | wp-spid-italia |
| WP Travel – Ultimate Travel Booking System, Tour Management Engine | wp-travel |
| WP Triggers Lite | wp-triggers-lite |
| WP Visitor Statistics (Real Time Traffic) | wp-stats-manager |
| WP Wand – Unlimited Content Generation using AI – for OpenAI, Claude, Openrouter and Deepseek | ai-content-generation |
| WP Youtube Gallery | wp-youtube-gallery |
| WP – Bulk SMS – by SMS.to | wp-bulk-sms |
| WPBITS Addons For Elementor Page Builder | wpbits-addons-for-elementor |
| WPBookit | wpbookit |
| WPBot – ChatBot Conversational Forms | conversational-forms |
| WPEX Replace DB Urls | wpex-replace |
| WPListCal | wplistcal |
| WPMU Prefill Post | wpmu-prefill-post |
| XML for Avito | xml-for-avito |
| Xpro Addons — 140+ Widgets for Elementor | xpro-elementor-addons |
| YeeMail — Email Template Builder & Customizer | yeemail |
| YOGO Booking | yogo-booking |
| Yumpu E-Paper publishing | yumpu-epaper-publishing |
| Zalomení | zalomeni |
| Zephyr Admin Theme | zephyr-modern-admin-theme |
| فرم ساز فرم افزار | formafzar |
| 아임포트 결제버튼 생성 플러그인 | iamport-payment |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| AdForest | adforest |
| Aports - Single Property WordPress Theme | aports |
| Aurum - WordPress & WooCommerce Shopping Theme | aurum |
| Boliin - Resort & Hotel Booking WordPress Theme | boliin |
| Constix - Construction Factory & Industrial WordPress Theme | constix |
| Conult - Consulting Business WordPress Themes | conult |
| Fioxen - Directory Listing WordPress Theme | fioxen |
| Gowilds - Travel & Tour Booking WordPress Theme | gowilds |
| Halpes - Nonprofit Charity Drupal 10 Theme | halpes |
| Lestin - Directory Listing WordPress Theme | lestin |
| Modins - Insurance & Finance Drupal 11 Theme | modins |
| Orgarium - Agriculture & Organic Farm WordPress Theme | orgarium |
| Paroti - Nonprofit Charity WordPress Theme | paroti |
| Pisole - Digital Creative Agency WordPress Theme | pisole |
| Power Mag | power-mag |
| Qempo - Digital Agency Services WordPress Theme | qempo |
| Qizon - Crowdfunding & Charity WordPress Theme | qizon |
| Sominx - Creative Business Agency WordPress Theme | sominx |
| StorePress | storepress |
| Tevily - Travel & Tour Booking WordPress Theme | tevily |
| TheFude - Crowdfunding & Charity WordPress Theme | fude |
| Welowe - Nonprofit Charity WordPress Theme | welowe |
| Zilom - Online Education Learning WordPress Theme | zilom |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
Affected Software
4ECPS Web Forms [4ecps-webforms]
Researcher
Affected Software
FAT Event Lite [fat-event-lite]
Researcher
GiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection
9.8
Affected Software
Researcher
GiveWP – Donation Plugin and Fundraising Platform <= 3.19.3 - Unauthenticated PHP Object Injection
9.8
Affected Software
Researcher
Affected Software
PayU CommercePro Plugin [payu-india]
Researcher
Affected Software
Post Grid Master — Post Grids & AJAX Filters [ajax-filter-posts]
Researcher
Affected Software
School Management System – SakolaWP [sakolawp-lite]
Researcher
SEO LAT Auto Post <= 2.2.1 - Missing Authorization to File Overwrite/Upload (Remote Code Execution)
9.8
Affected Software
SEO LAT Auto Post [seo-beginner-auto-post]
Researcher
Affected Software
TC Ecommerce – Create Android & iOS Apps for WooCommerce [tc-ecommerce]
Researcher
Affected Software
Iptanus File Upload [wp-file-upload]
Researcher
Affected Software
Iptanus File Upload [wp-file-upload]
Researcher
Affected Software
WPBookit [wpbookit]
Researcher
Affected Software
Croma Music [croma-music]
Researcher
Affected Software
Garden Gnome Package [garden-gnome-package]
Researcher
Affected Software
Hero Banner Ultimate [hero-banner-ultimate]
Researcher
Affected Software
Modula Image Gallery – Photo Grid & Video Gallery [modula-best-grid-gallery]
Researcher
Affected Software
Researcher
Affected Software
SKT Page Builder [skt-builder]
Researchers
Affected Software
Researcher
Affected Software
WP Extended – The Ultimate WordPress Toolkit [wpextended]
Researchers
Affected Software
ThePerfectWedding.nl Widget [theperfectweddingnl-widget]
Researcher
Affected Software
WebinarPress – Webinar System for WordPress [wp-webinarsystem]
Researcher
Affected Software
WebinarPress – Webinar System for WordPress [wp-webinarsystem]
Researcher
Host PHP Info <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure
8.6
Affected Software
Host PHP Info [host-php-info]
Researcher
Affected Software
linkID [linkid]
Researcher
Affected Software
Build App Online [build-app-online]
Researcher
Affected Software
Compare Products for WooCommerce [woocommerce-compare-products]
Researcher
Affected Software
Rezgo Online Booking [rezgo]
Researcher
Affected Software
CF Internal Link Shortcode [internal-link-shortcode]
Researcher
Affected Software
Cost Calculator Builder PRO [cost-calculator-builder-pro]
Researcher
Affected Software
Coupon X – Discount Popups, Promo Codes Pop Ups for WooCommerce & Announcement Popups [coupon-x-discount-pop-up]
Researcher
Affected Software
Emailing Subscription [email-suscripcion]
Researcher
Affected Software
Error Log Viewer By WP Guru [error-log-viewer-wp]
Researcher
Affected Software
MIPL Multistore Sync for WooCommerce. Sync Products, Stock and Orders. [mipl-wc-multisite-sync]
Researcher
Affected Software
Multiple Carousel [multicarousel]
Researcher
Affected Software
Popup – MailChimp, GetResponse and ActiveCampaign Intergrations [ultimate-popup-creator]
Researcher
Affected Software
Gift Cards for WooCommerce Pro [gift-cards-for-woocommerce-pro]
Ultimate Gift Cards for WooCommerce [woo-gift-cards-lite]
Researcher
Affected Software
Virtual Bot [virtual-bot]
Researcher
Affected Software
Researcher
Affected Software
Iptanus File Upload [wp-file-upload]
Researcher
Affected Software
WP Database Backup – Unlimited Database & Files Backup by Backup for WP [wp-database-backup]
Researcher
Affected Software
WP Extended – The Ultimate WordPress Toolkit [wpextended]
Researcher
Affected Software
Contact Form, Survey, Quiz & Popup Form Builder – ARForms [arforms-form-builder]
Researcher
Custom Product Tabs for WooCommerce <= 1.8.5 - Authenticated (Shop Manager+) PHP Object Injection
7.2
Affected Software
Custom Product Tabs for WooCommerce [yikes-inc-easy-custom-woocommerce-product-tabs]
Researcher
Affected Software
Inline Tweets [inline-tweets]
Researcher
Affected Software
WC Price History [wc-price-history]
Researcher
Affected Software
Researcher
Affected Software
JoomSport – for Sports: Team & League, Football, Hockey & more [joomsport-sports-league-results-management]
Researcher
Affected Software
Opace AI Scribe: SEO Content Creator & Humaizer for OpenAI & Anthropic [ai-scribe-the-chatgpt-powered-seo-content-creation-wizard]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
eDoc Easy Tables – Best WordPress Table Maker [edoc-easy-tables]
Researcher
Affected Software
Google Maps Travel Route [google-maps-travel-route]
Researcher
Affected Software
Infility Global [infility-global]
Researcher
Affected Software
Korea for WooCommerce [korea-for-woocommerce]
Researcher
Affected Software
MDTF – Meta Data and Taxonomies Filter [wp-meta-data-filter-and-taxonomy-filter]
Researcher
Affected Software
NC Wishlist for Woocommerce [nc-wishlist-for-woocommerce]
Researcher
School Management System – WPSchoolPress <= 2.2.14 - Authenticated (Student/Parent+) SQL Injection
6.5
Affected Software
School Management System – WPSchoolPress [wpschoolpress]
Researcher
Affected Software
Researcher
Affected Software
WPListCal [wplistcal]
Researcher
Affected Software
3D Viewer Online [3dvieweronline-wp]
Researcher
Affected Software
Able Player for WordPress [wp-able-player]
Researcher
Affected Software
Accordion Slider Lite [accordion-slider-lite]
Researcher
Affected Software
AddFunc Mobile Detect [addfunc-mobile-detect]
Researcher
Affected Software
Advanced Product Information for WooCommerce [woo-advanced-product-information]
Researcher
Alpha Price Table For Elementor <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Alpha Price Table For Elementor [alpha-price-table-for-elementor]
Researcher
Affected Software
Arcade Ready [arcadeready]
Researcher
Affected Software
Author Avatars List/Block [author-avatars]
Researcher
Affected Software
Biltorvet Dealer Tools [biltorvet-dealer-tools]
Researcher
Affected Software
Black Widgets For Elementor [black-widgets]
Researcher
Affected Software
Boot-Modal [boot-modal]
Researcher
Affected Software
Bootstrap Blocks for WP Editor v2 [wp-editor-bootstrap-blocks]
Researcher
Affected Software
BP Profile Shortcodes Extra [bp-profile-shortcodes-extra]
Researcher
Affected Software
Bulk Me Now! [bulk-me-now]
Researcher
Affected Software
Researcher
CC Canadian Mortgage Calculator <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
CC Canadian Mortgage Calculator [cc-canadian-mortgage-calculator]
Researcher
Affected Software
Researcher
Affected Software
Chatroll Live Chat [chatroll-live-chat]
Researcher
Affected Software
Researcher
Affected Software
Content Blocks Builder – Create blocks, repeater blocks with carousel, grid, popup layouts [content-blocks-builder]
Researcher
Conversational Forms for ChatBot <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
WPBot – ChatBot Conversational Forms [conversational-forms]
Researcher
Affected Software
Coupon Plugin Lite [coupon-lite]
Researcher
Affected Software
DearFlip – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer [3d-flipbook-dflip-lite]
Researcher
Affected Software
Dominion – Domain Checker for WPBakery [dominion-domain-checker-wpbakery-addon]
Researcher
Affected Software
Donation Block For PayPal [donations-block]
Researcher
Affected Software
Easy Form Builder by WhiteStudio — Drag & Drop Form Builder [easy-form-builder]
Researcher
Affected Software
Element Pack – Widgets, Templates & Addons for Elementor [bdthemes-element-pack-lite]
Researcher
Affected Software
Researcher
Affected Software
Files Download Delay [files-download-delay]
Researcher
Affected Software
فرم ساز فرم افزار [formafzar]
Researcher
Affected Software
Formaloo Form Maker & Customer Analytics for WordPress & WooCommerce [formaloo-form-builder]
Researcher
Affected Software
Free WooCommerce Theme 99fy Extension [99fy-core]
Researcher
Affected Software
GatorMail SmartForms [gatormail-smart-forms]
Researcher
Affected Software
Genesis Style Shortcodes [genesis-style-shortcodes]
Researcher
Affected Software
Geo Content [geo-targetly-geo-content]
Researcher
Goodlayers Core <= 2.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG Upload
6.4
Affected Software
Goodlayers Core [goodlayers-core]
Researcher
Affected Software
Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks]
Researcher
Affected Software
Grid Accordion Lite [grid-accordion-lite]
Researcher
Affected Software
Kadence Blocks — Page Builder Toolkit for Gutenberg Editor [kadence-blocks]
Researcher
Affected Software
Researcher
Affected Software
Happy Addons for Elementor [happy-elementor-addons]
Researcher
Affected Software
Hash Elements [hash-elements]
Researcher
Affected Software
Divine Astro [horoscope-and-tarot]
Researcher
Affected Software
Huurkalender WP [huurkalender-wp]
Researcher
Affected Software
Icons Enricher [icons-enricher]
Researcher
Affected Software
ICS Button [ics-button]
Researcher
Affected Software
iframe to embed [iframe-to-embed]
Researcher
Affected Software
Image Magnify [image-magnify]
Researcher
Affected Software
TwentyTwenty Compare [js-twentytwenty]
Researcher
Affected Software
Legacy ePlayer [sportspress-tv]
Researcher
Affected Software
List Pages at Depth [list-pages-at-depth]
Researcher
Affected Software
Live Flight Radar [live-flight-radar]
Researcher
Affected Software
Marketplace Items [marketplace-items]
Researcher
Marketplace Items <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
Affected Software
Marketplace Items [marketplace-items]
Researcher
Affected Software
MAS Elementor [mas-addons-for-elementor]
Researcher
Affected Software
Researcher
Affected Software
mcjh button shortcode [mcjh-button-shortcode]
Researcher
Affected Software
Metadata SEO [metadata-seo]
Researcher
Affected Software
Meteor Slides [meteor-slides]
Researcher
Affected Software
Mind Doodle Visual Sitemaps & Tasks [mind-doodle-sitemap]
Researcher
Affected Software
MT Addons for Elementor [mt-addons-for-elementor]
Researcher
Muslim Prayer Time-Salah/Iqamah <= 1.8.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Muslim Prayer Time-Salah/Iqamah [masjidal]
Researcher
News Ticker Widget for Elementor <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
News Ticker Widget for Elementor [news-ticker-widget-for-elementor]
Researcher
Affected Software
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More [themeisle-companion]
Researcher
Affected Software
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More [themeisle-companion]
Researcher
Affected Software
PDF Catalog for WooCommerce [pdf-catalog-woocommerce]
Researcher
Affected Software
Perfect Portal Widgets [perfect-portal-widgets]
Researcher
Affected Software
PIXNET Plugin [pixnet]
Researcher
Affected Software
Power Mag [power-mag]
Researcher
Affected Software
Powerful Auto Chat [powers-triggers-of-woo-to-chat]
Researcher
Affected Software
Qr Code and Barcode Scanner Reader [qr-code-and-barcode-scanner-reader]
Researcher
Affected Software
Researcher
Affected Software
Responsive Flickr Slideshow [mobile-friendly-flickr-slideshow]
Researcher
Affected Software
Responsive FlipBook Plugin Wordpress [responsive-flipbook]
Researchers
Affected Software
Responsive iframe [responsive-iframe]
Researcher
Affected Software
RightMessage WP [rightmessage]
Researcher
Affected Software
S3Player – WooCommerce & Elementor Integration [drm-protected-video-streaming]
Researcher
Affected Software
Sell Digital Downloads [sell-digital-downloads]
Researcher
Affected Software
Sell Media [sell-media]
Researcher
Affected Software
SEO Bulk Editor [seo-bulk-editor]
Researcher
Affected Software
Service Box [service-boxs]
Researcher
Show Google Analytics widget <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Show Google Analytics widget [show-google-analytics-widget]
Researcher
Affected Software
Simple Photo Sphere [simple-photo-sphere]
Researcher
Affected Software
SimplyRETS Real Estate IDX [simply-rets]
Researcher
Affected Software
Sina Extension for Elementor [sina-extension-for-elementor]
Researcher
Affected Software
Skill Bars [skillbars]
Researcher
Affected Software
Skyword XMLRPC publishing [skyword-plugin]
Researcher
Affected Software
Slider Pro Lite [slider-pro-lite]
Researcher
Affected Software
Slides & Presentations [slide]
Researcher
Affected Software
Slotti Ajanvaraus [slotti-ajanvaraus]
Researcher
Affected Software
Smart Custom Fields [smart-custom-fields]
Researcher
Affected Software
Social Rocket – Social Sharing Plugin [social-rocket]
Researcher
Affected Software
Solar Wizard Lite [solar-wizard-lite]
Researcher
Affected Software
SpeakOut! Email Petitions [speakout]
Researcher
Affected Software
StorePress [storepress]
Researcher
Affected Software
Surbma | Premium WP [surbma-premium-wp]
Researcher
Affected Software
Researcher
Affected Software
TCBD Auto Refresher [tcbd-auto-refresher]
Researcher
Affected Software
TemplatesNext ToolKit [templatesnext-toolkit]
Researcher
Themesflat Addons For Elementor <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Themesflat Addons For Elementor [themesflat-addons-for-elementor]
Researcher
Affected Software
Thim Kit for Elementor – Pre-built Templates & Widgets for Elementor [thim-elementor-kit]
Researcher
Timeline Pro <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via [placeholder]
6.4
Affected Software
Timeline Pro [timeline-pro]
Researcher
Affected Software
Trackserver [trackserver]
Researcher
Affected Software
Twitter Bootstrap Collapse aka Accordian Shortcode [twitter-bootstrap-collapse-aka-accordian-shortcode]
Researcher
Affected Software
Typing Text [typing-text]
Researcher
Ultimate Image Hover Effects <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Ultimate Image Hover Effects [ultimate-image-hover-effects]
Researcher
Affected Software
Unlimited Elements For Elementor [unlimited-elements-for-elementor]
Researcher
Uptodown APK Download Widget <= 0.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Uptodown APK Download Widget [uptodown-apk-download-widget]
Researcher
Affected Software
Urdu Formatter – Shamil [urdu-formatter-shamil]
Researcher
Affected Software
Video Embed Optimizer [video-embed-optimizer]
Researcher
Affected Software
VR Views [vr-views]
Researcher
Affected Software
Researcher
Affected Software
WordPress Survey & Poll – Quiz, Survey and Poll Plugin for WordPress [wp-survey-and-poll]
Researcher
Affected Software
wp custom countdown [wp-custom-countdown]
Researcher
Affected Software
WP FullCalendar [wp-fullcalendar]
Researcher
Affected Software
WP jQuery DataTable [wp-jquery-datatable]
Researcher
Affected Software
WP MediaTagger [wp-mediatagger]
Researcher
Affected Software
WP SPID Italia [wp-spid-italia]
Researcher
Affected Software
WP Youtube Gallery [wp-youtube-gallery]
Researcher
Affected Software
WPBITS Addons For Elementor Page Builder [wpbits-addons-for-elementor]
Researcher
Affected Software
YOGO Booking [yogo-booking]
Researcher
Affected Software
Yumpu E-Paper publishing [yumpu-epaper-publishing]
Researcher
Affected Software
아임포트 결제버튼 생성 플러그인 [iamport-payment]
Researcher
Affected Software
A5 Custom Login Page [custom-login-page]
Researcher
Affected Software
Action Network [wp-action-network]
Researcher
Affected Software
Advance Post Prefix [advance-post-prefix]
Researcher
Affected Software
Affiliate Disclosure Statement [affiliate-disclosure-statement]
Researcher
Affected Software
AffiliateImporterEb [affiliateimportereb]
Researcher
Affected Software
AffiliateImporterEb [affiliateimportereb]
Researcher
Affected Software
ARS Affiliate Page Plugin [ars-affiliate-page]
Researcher
Affected Software
Automate Hub Free by Sperse.IO [automate-hub-free-by-sperse-io]
Researcher
Affected Software
Beacon Lead Magnets and Lead Capture [beacon-by]
Researcher
Affected Software
Better User Shortcodes [better-user-shortcodes]
Researcher
Affected Software
Binary MLM For WooCommerce [woo-binary-mlm]
Researcher
Affected Software
Binary MLM For WooCommerce [woo-binary-mlm]
Researcher
Affected Software
Bizapp for WooCommerce [bizapp-for-woocommerce]
Researcher
Affected Software
Booking calendar, Appointment Booking System [booking-calendar]
Booking Calendar Pro WpDevArt [booking-calendar-pro]
Researcher
Affected Software
Bulk Me Now! [bulk-me-now]
Researcher
Affected Software
Canvasflow for WordPress [canvasflow]
Researcher
Affected Software
Clasify Classified Listing [clasify-classified-listing]
Researcher
Affected Software
Researcher
Affected Software
ClipArt [clipart]
Researcher
Affected Software
CLUEVO LMS, E-Learning Platform [cluevo-lms]
Researcher
Affected Software
Compare Products for WooCommerce [woocommerce-compare-products]
Researcher
Affected Software
Competition Form [competition-form]
Researcher
Affected Software
Custom DataBase Tables [custom-database-tables]
Researcher
Affected Software
Custom Field For WP Job Manager [custom-field-for-wp-job-manager]
Researcher
Affected Software
Custom Field Manager [custom-field-manager]
Researcher
Affected Software
Deliver via Shipos for WooCommerce [wc-shipos-delivery]
Researcher
Affected Software
Dental Optimizer Patient Generator App [dental-optimizer-patient-generator-app]
Researcher
Affected Software
Dyn Business Panel [dyn-business-panel]
Researcher
Affected Software
Dyn Business Panel [dyn-business-panel]
Researcher
Affected Software
Dyn Business Panel [dyn-business-panel]
Researcher
Affected Software
ECT Home Page Products [ect-homepage-products]
Researcher
Affected Software
Enable Accessibility [enable-accessibility]
Researcher
Affected Software
Estatik Mortgage Calculator [estatik-mortgage-calculator]
Researcher
Affected Software
F4 Post Tree [f4-tree]
Researcher
Affected Software
Fantastic ElasticSearch [fantastic-elasticsearch]
Researcher
Affected Software
Fast Tube [fast-tube]
Researcher
Affected Software
Featured Page Widget [featured-page-widget]
Researcher
Affected Software
Financial Stocks & Crypto Market Data Plugin [live-stock-prices-for-wordpress]
Researcher
Affected Software
Food Store – Online Food Delivery & Pickup [food-store]
Researcher
Affected Software
GDY Modular Content [gdy-modular-content]
Researcher
Affected Software
WordPress Google Map Professional (Map In Your Language) [google-map-professional]
Researcher
Affected Software
Infility Global [infility-global]
Researcher
Affected Software
Researcher
Affected Software
JK Html To Pdf [jk-html-to-pdf]
Researcher
Affected Software
Axact Author List Widget [knr-author-list-widget]
Researcher
Affected Software
Laika Pedigree Tree [laika-pedigree-tree]
Researcher
Affected Software
Plugin Name: ldap_login_password_and_role_manager [ldap-login-password-and-role-manager]
Researcher
Affected Software
Mailing Group Listserv [wp-mailing-group]
Researcher
Affected Software
Researcher
Affected Software
News Publisher Autopilot [wpm-news-api]
Researcher
Affected Software
Norse Rune Oracle Plugin [norse-runes-oracle]
Researcher
Affected Software
OPSI Israel Domestic Shipments [woo-ups-pickup]
Researcher
Affected Software
PayGreen Payment Gateway [paygreen-payment-gateway]
Researcher
Affected Software
Privacy Policy Genius [policy-genius]
Researcher
Affected Software
Post And Page Reactions [post-and-page-reactions]
Researcher
Affected Software
Pósturinn\'s Shipping with WooCommerce [posturinn]
Researcher
Affected Software
Prayer Times Anywhere [prayer-times-anywhere]
Researcher
Affected Software
Pretty Url [pretty-url]
Researcher
Affected Software
Product Table for WooCommerce [woo-product-table]
Researcher
Affected Software
Push Notification for Post and BuddyPress [push-notification-for-post-and-buddypress]
Researcher
Affected Software
Quote Tweet [quote-tweet]
Researcher
Affected Software
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment [booking-and-rental-manager-for-woocommerce]
Researcher
Affected Software
Same but Different – Related Posts by Taxonomy [same-but-different]
Researcher
Affected Software
Scan External Links [scan-external-links]
Researcher
Affected Software
Scanventory [woocommerce-inventory-management]
Researcher
Affected Software
SEO Keywords [seo-keywords]
Researcher
Shipping via Planzer for WooCommerce <= 1.0.25 - Reflected Cross-Site Scripting via processed-ids
6.1
Affected Software
Shipping via Planzer for WooCommerce [wc-planzer-shipping]
Researcher
Simple add pages or posts <= 2.0.0 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
6.1
Affected Software
Simple add pages or posts [simple-add-pages-or-posts]
Researcher
Affected Software
Simple Locator [simple-locator]
Researcher
Affected Software
Simple Video Management System [simple-video-management-system]
Researcher
Affected Software
Site PIN [site-pin]
Researcher
Affected Software
SlideDeck 1 Lite Content Slider [slidedeck-lite-for-wordpress]
Researcher
Affected Software
SmartAgenda – Prise de rendez-vous en ligne [smart-agenda-prise-de-rendez-vous-en-ligne]
Researcher
Affected Software
SmartEmailing [smartemailing]
Researcher
Smoothness Slider Shortcode <= v1.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
Affected Software
Smoothness Slider Shortcode [smoothness-slider-shortcode]
Researcher
Affected Software
Store credit / Gift cards for woocommerce [store-credit-for-woocommerce]
Researcher
Affected Software
Tabulate [tabulate]
Researcher
Affected Software
Tock Widget [tock-widget]
Researcher
Affected Software
Tour Master - Tour Booking, Travel, Hotel [tourmaster]
Researcher
Affected Software
Transporters.io [transportersio]
Researcher
Affected Software
TRUSTist REVIEWer [trustist-reviewer]
Researcher
Affected Software
TubePress.NET [tubepressnet]
Researcher
Affected Software
Unilevel MLM Plan [unilevel-mlm-plan]
Researcher
Affected Software
Uptime Robot [uptime-robot]
Researcher
Affected Software
User Messages [user-messages]
Researcher
Affected Software
Researcher
Affected Software
ViewMedica 9 [viewmedica]
Researcher
Affected Software
Virtual Bot [virtual-bot]
Researcher
Affected Software
vooPlayer v4 [vooplayer]
Researcher
Affected Software
WC Affiliate – WooCommerce Affiliate Plugin [wc-affiliate]
Researcher
Affected Software
WhatsApp 🚀 click to chat [manycontacts-bar]
Researcher
Affected Software
Widget4Call [widget4call]
Researcher
Affected Software
Widgetize Pages Light [widgetize-pages-light]
Researcher
Affected Software
Woocommerce check pincode/zipcode for shipping [woocommerce-check-pincode-zipcode-for-shipping]
Researcher
Affected Software
Digital Content Delivery (incl. DRM) by Flickrocket for WooCommerce [woocommerce-digital-content-delivery-with-drm-flickrocket]
Researcher
Affected Software
WooCommerce HSS Extension for Streaming Video [woocommerce-hss-extension-for-streaming-video]
Researcher
Affected Software
WordPress连接微博 [wp-connect]
Researcher
Affected Software
WP – Bulk SMS – by SMS.to [wp-bulk-sms]
Researcher
Affected Software
WP DeskLite – Helpdesk and Support Plugin [wp-desklite]
Researcher
Affected Software
WordPress Email Newsletter [wp-email-newsletter]
Researcher
Affected Software
WP Finance [wp-finance]
Researcher
Affected Software
WP Finance [wp-finance]
Researcher
Affected Software
wp Hosting Performance Check [wp-hosting-performance-check]
Researcher
Affected Software
WP MediaTagger [wp-mediatagger]
Researcher
Affected Software
WPEX Replace DB Urls [wpex-replace]
Researcher
Affected Software
XML for Avito [xml-for-avito]
Researcher
Affected Software
Zephyr Admin Theme [zephyr-modern-admin-theme]
Researcher
Affected Software
WP Header Notification [wp-header-notification]
Researcher
Affected Software
Chative Live chat and Chatbot [chative-live-chat-and-chatbot]
Researcher
Affected Software
Coupon X – Discount Popups, Promo Codes Pop Ups for WooCommerce & Announcement Popups [coupon-x-discount-pop-up]
Researcher
Affected Software
ViewMedica 9 [viewmedica]
Researcher
Affected Software
WP Triggers Lite [wp-triggers-lite]
Researcher
Affected Software
1003 Mortgage Application [1003-mortgage-application]
Researcher
Affected Software
Researcher
Affected Software
ClickDesigns [clickdesigns]
Researcher
Affected Software
CubeWP Forms [cubewp-forms]
Researcher
Affected Software
Essential WP Real Estate [essential-wp-real-estate]
Researcher
Affected Software
Export Import Menus [export-import-menus]
Researcher
Affected Software
Help Scout [help-scout]
Researcher
Affected Software
InfiniteWP Client [iwp-client]
Researcher
Affected Software
Jupiter X Core [jupiterx-core]
Researcher
Affected Software
Link Whisper Free [link-whisper]
Researcher
Affected Software
Member Access [member-access]
Researcher
Affected Software
One to one user Chat by WPGuppy [wpguppy-lite]
Researcher
Affected Software
Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords [muzaara-adwords-optimize-dashboard]
Researcher
Affected Software
Passster – Password Protect Pages and Content [content-protector]
Researcher
Affected Software
Popup – MailChimp, GetResponse and ActiveCampaign Intergrations [ultimate-popup-creator]
Researcher
Affected Software
RSVP and Event Management [rsvp]
Researcher
Affected Software
Saoshyant Page Builder [saoshyant-page-builder]
Researcher
Affected Software
Shopping Cart & eCommerce Store [wp-easycart]
Researcher
Affected Software
Social Rocket – Social Sharing Plugin [social-rocket]
Researchers
Affected Software
Social Share Buttons for WordPress [share-buttons]
Researcher
Affected Software
Researcher
Affected Software
WordLift – AI powered SEO – Schema [wordlift]
Researcher
Affected Software
WP Mailster [wp-mailster]
Researcher
Affected Software
WP Wand – Unlimited Content Generation using AI – for OpenAI, Claude, Openrouter and Deepseek [ai-content-generation]
Researcher
Affected Software
Advance Post Prefix [advance-post-prefix]
Researcher
Affected Software
Altra Side Menu [altra-side-menu]
Researcher
Affected Software
Mailing Group Listserv [wp-mailing-group]
Researcher
Affected Software
MindValley Super PageMash [mindvalley-pagemash]
Researcher
Affected Software
Timeline Designer [timeline-designer]
Researcher
Affected Software
Researcher
Affected Software
WP Music Player [wp-music-player]
Researcher
Affected Software
WP Triggers Lite [wp-triggers-lite]
Researcher
Affected Software
WPMU Prefill Post [wpmu-prefill-post]
Researcher
Affected Software
Crelly Slider [crelly-slider]
Researcher
Affected Software
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks]
Researcher
Affected Software
Ninja Tables – Easy Data Table Builder [ninja-tables]
Researcher
Affected Software
Social Share Buttons for WordPress [share-buttons]
Researcher
Toggles Shortcode and Widget <= 1.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
Affected Software
Toggles Shortcode and Widget [toggles-shortcode-and-widget]
Researcher
Affected Software
WP Cookie [wp-cookie]
Researcher
Affected Software
Zalomení [zalomeni]
Researcher
Affected Software
1003 Mortgage Application [1003-mortgage-application]
Researcher
Affected Software
Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons]
Researcher
Affected Software
Admin debug wordpress – enable debug [dzs-enable-debug]
Researcher
Affected Software
Opace AI Scribe: SEO Content Creator & Humaizer for OpenAI & Anthropic [ai-scribe-the-chatgpt-powered-seo-content-creation-wizard]
Researcher
Affected Software
Opace AI Scribe: SEO Content Creator & Humaizer for OpenAI & Anthropic [ai-scribe-the-chatgpt-powered-seo-content-creation-wizard]
Researcher
Affected Software
AI WP Writer – SEO content generator, chatGPT, Gemini [ai-wp-writer]
Researcher
Affected Software
Altra Side Menu [altra-side-menu]
Researcher
Affected Software
Researcher
Affected Software
Bitly's WordPress Plugin [wp-bitly]
Researcher
Affected Software
Bulk Me Now! [bulk-me-now]
Researcher
Affected Software
Bus Ticket Booking with Seat Reservation [bus-ticket-booking-with-seat-reservation]
Researcher
Affected Software
BWD Elementor Addons [bwd-elementor-addons]
Researcher
Affected Software
Competition Form [competition-form]
Researcher
Affected Software
DirectoryPress – Business Directory And Classified Ad Listing [directorypress]
Researcher
Affected Software
Duplicate PP [duplicate-pp]
Researcher
Affected Software
Elementor Addons AI Addons – 70 Widgets, Premium Templates, Ultimate Elements [ai-addons-for-elementor]
Researcher
Affected Software
Researcher
GS Insever Portfolio <= 1.4.5 - Missing Authorization to Authenticated (Subscriber+) CSS Injection
4.3
Affected Software
GS Insever Portfolio [gs-instagram-portfolio]
Researcher
Affected Software
Hive Support | AI-Powered Help Desk, Live Chat and Chatbot [hive-support]
Researcher
Affected Software
Jupiter X Core [jupiterx-core]
Researcher
Affected Software
LazyLoad Background Images [lazyload-background-images]
Researcher
Affected Software
MIMO Woocommerce Order Tracking [mimo-woocommerce-order-tracking]
Researcher
Affected Software
Newsletter2Go [newsletter2go]
Researcher
Affected Software
PixelYourSite – Your smart PIXEL (TAG) & API Manager [pixelyoursite]
Researcher
Affected Software
Post Duplicator [post-duplicator]
Researcher
Affected Software
Researcher
Affected Software
Pretty Url [pretty-url]
Researcher
Affected Software
RRAddons for Elementor [rrdevs-for-elementor]
Researcher
Affected Software
Slides & Presentations [slide]
Researcher
Affected Software
ST Gallery WP [st-gallery-wp]
Researcher
Affected Software
The Events Calendar [the-events-calendar]
Researcher
Affected Software
Title Experiments Free [wp-experiments-free]
Researcher
Affected Software
Title Experiments Free [wp-experiments-free]
Researcher
Affected Software
Unlimited Theme Addon For Elementor [unlimited-theme-addons]
Researcher
Affected Software
Iptanus File Upload [wp-file-upload]
Researcher
Affected Software
Pearl – Header Builder [pearl-header-builder]
Researcher
Affected Software
WP Customer Area [customer-area]
Researcher
Affected Software
WP Customer Area [customer-area]
Researcher
Affected Software
WP Delete Post Copies [etruel-del-post-copies]
Researcher
Affected Software
Researcher
Affected Software
WP Visitor Statistics (Real Time Traffic) [wp-stats-manager]
Researcher
Affected Software
Spacer [spacer]
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Comments