Wordfence Intelligence Weekly WordPress Vulnerability Report (February 17, 2025 to February 23, 2025)
📢 Did you know Wordfence runs a Bug Bounty Program for all WordPress plugins and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we handle all the rest.
Last week, there were 308 vulnerabilities disclosed in 268 WordPress Plugins and 7 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 73 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to make the internet more secure. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 22,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
New Firewall Rules Deployed Last Week
The Wordfence Threat Intelligence Team reviews each vulnerability to determine impact and severity, along with assessing the likelihood of exploitation, to verify that the Wordfence Firewall provides sufficient protection.
The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our Premium, Care, and Response customers last week:
- WAF-RULE-811 – Data redacted while we work with the vendor on a patch.
Wordfence Premium, Care, and Response customers received this protection immediately, while users still running the free version of Wordfence will receive this enhanced protection after a 30 day delay.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 205 |
| Unpatched | 103 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Low Severity | 2 |
| Medium Severity | 227 |
| High Severity | 65 |
| Critical Severity | 14 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 169 |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 30 |
| Cross-Site Request Forgery (CSRF) | 20 |
| Missing Authorization | 20 |
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 15 |
| Deserialization of Untrusted Data | 9 |
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 7 |
| Improper Control of Generation of Code ('Code Injection') | 6 |
| Authorization Bypass Through User-Controlled Key | 5 |
| Generation of Error Message Containing Sensitive Information | 4 |
| Exposure of Sensitive Information to an Unauthorized Actor | 3 |
| Improper Access Control | 3 |
| Improper Input Validation | 3 |
| Unrestricted Upload of File with Dangerous Type | 3 |
| Server-Side Request Forgery (SSRF) | 2 |
| URL Redirection to Untrusted Site ('Open Redirect') | 2 |
| Improper Authorization | 1 |
| Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 1 |
| Incorrect Privilege Assignment | 1 |
| Insertion of Sensitive Information into Log File | 1 |
| Sensitive Cookie in HTTPS Session Without 'Secure' Attribute | 1 |
| Unverified Password Change | 1 |
| Use of Cache Containing Sensitive Information | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 33 | |
| 16 | |
| 15 | |
| 13 | |
| 12 | |
| 12 | |
| 12 | |
| 9 | |
| 9 | |
| 8 | |
| 8 | |
| 8 | |
| 7 | |
| 6 | |
| 6 | |
| 6 | |
| 6 | |
| 6 | |
| 6 | |
| 5 | |
| 5 | |
| 5 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| .htaccess Login block | htaccess-login-block |
| 1 Click Migration & Backup: Free WordPress Migration Plugin with Zero Downtime & Easy Clone | 1-click-migration |
| 17TRACK for WooCommerce | 17track |
| 3D Photo Gallery | 3d-photo-gallery |
| A1POST.BG Shipping for WooCommerce | a1post-bg-shipping-for-woocommerce |
| aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder | ablocks |
| Accept Donations with PayPal & Stripe | easy-paypal-donation |
| Actionwear products sync | actionwear-products-sync |
| Active Products Tables for WooCommerce. Use constructor to create tables | profit-products-tables-for-woocommerce |
| AcuGIS Leaflet Maps | mapfig-premium-leaflet-map-maker |
| ADFO – Custom data in admin dashboard | admin-form |
| Adsmonetizer | adsensei-b30 |
| Affiliate Coupons – Coupon Display Manager – Excellent Tool for Affiliate Marketers | affiliate-coupons |
| Affiliate Links Manager | affiliate-links-manager |
| Affiliate Links – Link Cloaking and Management | affiliate-links |
| All In Menu – Header menu creator | all-in-menu |
| AMO Team Showcase | amo-team-showcase |
| Apptivo Business Site | apptivo-business-site |
| AR for WordPress | ar-for-wordpress |
| Assistant – Every Day Productivity Apps | assistant |
| Atarim – Visual Feedback, Review & AI Collaboration | atarim-visual-collaboration |
| Autoship Cloud for WooCommerce Subscription Products | autoship-cloud |
| Bandsintown Events | bandsintown |
| Better Customer List for WooCommerce | woo-better-customer-list |
| BigBuy Dropshipping Connector for WooCommerce | bigbuy-wc-dropshipping-connector |
| Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment | booking-and-rental-manager-for-woocommerce |
| Booking Package | booking-package |
| Booking Ultra Pro Appointments Booking Calendar Plugin | booking-ultra-pro |
| Brevo SMTP – YaySMTP | smtp-sendinblue |
| Business Card Block – Display Business or Personal Info in Card Format | business-card-block |
| C9 Admin Dashboard | c9-admin-dashboard |
| C9 Blocks | c9-blocks |
| CanadaHelps Embedded Donation Form | embedded-cdn |
| Categorized Gallery Plugin | categorized-gallery |
| CATS Job Listings | cats-job-listings |
| CHATLIVE – Support online chat | chatlive |
| Coaching Staffs | coaching-staffs |
| Contact Form Plugin | contact-form-lite |
| Contact Us By Lord Linus | contact-us-by-lord-linus |
| Content Blocks (Custom Post Widget) | custom-post-widget |
| Cookie Notice Bar | cookie-notice-bar |
| Coronavirus (COVID-19) Notice Message | coronavirus-covid-19-notice-message |
| Cosmic Blocks (40+) Content Editor Blocks Collection | cosmic-blocks |
| Countdown Timer | timer-countdown |
| Countdown Timer Block – Animated Countdown for Events or Launches | countdown-time |
| Counters Block – Animated Number Counters, Stats & Dynamic KPIs | counters-block |
| Custom Post Type Date Archives | custom-post-type-date-archives |
| DB Tables Import/Export | db-tables-importexport |
| DeBounce Email Validator | debounce-io-email-validator |
| Delivery Date Time & Pickup for WooCommerce | byconsole-woo-order-delivery-time |
| Digihood HTML Sitemap | wedesin-html-sitemap |
| Disable Auto Updates | disable-auto-updates |
| Doctor Appointment Booking | doctor-appointment-booking |
| Drivr Lite – Google Drive Plugin | drivr-google-drive-file-picker |
| Easy Charts | easy-charts |
| Easy Elementor Addons – Addons Pack for Elementor Page Builder | easy-elementor-addons |
| Easy Form | easy-form |
| Easy MLS Listings Import | easy-mls-listings-import |
| Easy Notify Lite | easy-notify-lite |
| Easy Quotes | easy-quotes |
| Easypromos Plugin | easypromos |
| Ecwid by Lightspeed Ecommerce Shopping Cart | ecwid-shopping-cart |
| Education Addon for Elementor | education-addon |
| Elementor Website Builder – more than just a page builder | elementor |
| ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor | elementskit-lite |
| Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files | embed-any-document |
| Estatik Mortgage Calculator | estatik-mortgage-calculator |
| Estatik Real Estate Plugin | estatik |
| Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) | wp-event-solution |
| Events Calendar for GeoDirectory | events-for-geodirectory |
| Events Manager – Calendar, Bookings, Tickets, and more! | events-manager |
| Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI | everest-forms |
| EZ SQL Reports Shortcode Widget and DB Backup | elisqlreports |
| Fast Flow | fast-flow-dashboard |
| File Icons | file-icons |
| File Uploads Addon for WooCommerce | woo-addon-uploads |
| FileBird – WordPress Media Library Folders & File Manager | filebird |
| Flagged Content | flagged-content |
| Flashfader | flashfader |
| Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later | flexible-wishlist |
| Flexmls® IDX Plugin | flexmls-idx |
| flickr-slideshow-wrapper | flickr-slideshow-wrapper |
| Fontsampler | fontsampler |
| FormCraft | formcraft3 |
| Front End Users | front-end-only-users |
| Frontend Admin by DynamiApps | acf-frontend-form-element |
| FunnelKit – Funnel Builder for WooCommerce Checkout | funnel-builder |
| GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law | gdpr-cookie-compliance |
| GetBookingsWP – Appointments Booking Calendar Plugin For WordPress | get-bookings-wp |
| Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) | gift-voucher |
| Google Maps GPX Viewer | google-maps-gpx-viewer |
| GPX Viewer | gpx-viewer |
| Greenshift – animation and page builder blocks | greenshift-animation-and-page-builder-blocks |
| Gtbabel | gtbabel |
| Gumlet Video | gumlet-video |
| Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | essential-blocks |
| Head, Footer and Post Injections | header-footer |
| Icon List Block – Add Icon-Based Lists with Custom Styles | icon-list-block |
| igumbi Online Booking | igumbi-online-booking |
| Indeed Ultimate Learning Pro | ulp-duplicate-post-sql-timebased |
| Info Cards – Add Text and Media in Card Layouts | info-cards |
| IP2Location Country Blocker | ip2location-country-blocker |
| K Elements | k-elements |
| Keap Official Opt-in Forms | infusionsoft-official-opt-in-forms |
| Kush Micro News | kush-micro-news |
| Legoeso PDF Manager | legoeso-pdf-manager |
| Lenix Leads Collector | lenix-elementor-leads-addon |
| Lexicata | lexicata |
| Library Bookshelves | library-bookshelves |
| Limit Bio | limit-bio |
| List Urls | list-urls |
| Live css | css-live |
| Login & Register Customizer – Popup | Slider | Inline | WooCommerce | easy-login-woocommerce |
| LTL Freight Quotes – ABF Freight Edition | ltl-freight-quotes-abf-freight-edition |
| LTL Freight Quotes – GlobalTranz Edition | ltl-freight-quotes-globaltranz-edition |
| LTL Freight Quotes – Old Dominion Edition | ltl-freight-quotes-odfl-edition |
| LTL Freight Quotes – Purolator Edition | ltl-freight-quotes-purolator-freight-edition |
| LTL Freight Quotes – R+L Carriers Edition | ltl-freight-quotes-rl-edition |
| LTL Freight Quotes – SAIA Edition | ltl-freight-quotes-saia-edition |
| LTL Freight Quotes – SEFL Edition | ltl-freight-quotes-sefl-edition |
| LTL Freight Quotes – TForce Edition | ltl-freight-quotes-ups-edition |
| magayo Lottery Results | magayo-lottery-results |
| Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin | majestic-support |
| Mambo Importer | mambo-joomla-importer |
| Maps for WP | maps-for-wp |
| Market Exporter | market-exporter |
| MemorialDay | memorialday |
| Mini Course Generator | Embed mini-courses and interactive content | mini-course-generator |
| Modal Window – create popup modal window | modal-window |
| Mortgage Calculator / Loan Calculator | mortgage-loan-calculator |
| MyTicket Events | myticket-events |
| Newpost Catch | newpost-catch |
| Online Payments – Get Paid with PayPal, Square & Stripe | paypal-payment-button-by-vcita |
| Open Hours – Easy Opening Hours | open-hours |
| Option Editor | option-editor |
| Order Limit For WooCommerce ( Free Version ) | wc-order-limit-lite |
| Page and Post Lister | page-and-post-lister |
| Pago por Redsys | pago-redsys-tpv-grafreak |
| PeproDev Ultimate Invoice | pepro-ultimate-invoice |
| Pie Calendar – Events Calendar Made Simple | pie-calendar |
| Pie Register – User Registration, Profiles & Content Restriction | pie-register |
| Pinpoint Booking System – Version 2 | booking-system |
| Place Order Without Payment for WooCommerce | wc-place-order-without-payment |
| Plug your WooCommerce into the largest catalog of customized print products from Helloprint | helloprint |
| Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls | poll-maker |
| Pollin | pollin |
| Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) | buddyforms |
| Post Grid | post-grid |
| Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App | post-smtp |
| Prime Addons for Elementor | prime-addons-for-elementor |
| ProfileGrid – User Profiles, Groups and Communities | profilegrid-user-profiles-groups-and-communities |
| Protected wp-login | protected-wp-login |
| Pure Chat – Live Chat & More! | pure-chat |
| QR Code for WooCommerce | wc-qr-codes |
| Rapid Cache | rapid-cache |
| Raptive Ads | adthrive-ads |
| ravpage | ravpage |
| Reaction Buttons | reaction-buttons |
| Rebuild Permalinks | rebuild-permalinks |
| Recipe Card Blocks Lite | recipe-card-blocks-by-wpzoom |
| Reset – WordPress Database Reset Plugin | reset |
| Residential Address Detection | residential-address-detection |
| Responsive Addons for Elementor – Free Elementor Addons, Kits and Elementor Templates | responsive-addons-for-elementor |
| Responsive Flickr Slideshow | mobile-friendly-flickr-slideshow |
| Restrict Taxonomies | restrict-taxonomies |
| Rife Extensions & Templates for Elementor | rife-elementor-extensions |
| Royal Addons for Elementor – Addons and Templates Kit for Elementor | royal-elementor-addons |
| s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions | s2member |
| S3Bubble Media Streaming (AWS|Elementor|YouTube|Vimeo Functionality) | s3bubble-amazon-web-services-oembed-media-streaming-support |
| Saoshyant Slider | saoshyant-slider |
| Schedule | schedule |
| Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more | scratch-win-giveaways-for-website-facebook |
| Search with Typesense | search-with-typesense |
| Secure Client Portal and Private File Sharing Plugin – User Private Files | user-private-files |
| SEO Tools | seo-automatic-seo-tools |
| Services Section Block – Showcase Service Details in Grid or Columns | services-section |
| Shipmozo Courier Tracking | webparex |
| Shopwarden – Automated WooCommerce monitoring & testing | shopwarden |
| Show Me The Cookies | show-me-the-cookies |
| Simple Charts | simple-charts |
| Simple Email Subscriber | simple-email-subscriber |
| Simple Map No Api | simple-map-no-api |
| Simple Photo Feed | simple-photo-feed |
| Simple Pricing Tables For WPBakery Page Builder(Formerly Visual Composer) | simple-pricing-tables-vc-extension |
| Simple Signup Form | simple-signup-form |
| Simplebooklet PDF Viewer and Embedder | simplebooklet |
| Small Package Quotes – For Customers of FedEx | small-package-quotes-fedex-edition |
| Small Package Quotes – Unishippers Edition | small-package-quotes-unishippers-edition |
| Small Package Quotes – USPS Edition | small-package-quotes-usps-edition |
| Small Package Quotes – Worldwide Express Edition | small-package-quotes-wwe-edition |
| SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery | sms-alert |
| SMTP for Amazon SES – YaySMTP | smtp-amazon-ses |
| SMTP for SendGrid – YaySMTP | smtp-sendgrid |
| Social Sharing Plugin – Social Warfare | social-warfare |
| Social Snap — Social Share Buttons & Click to Tweet | socialsnap |
| SpeedSize Image & Video AI-Optimizer | speedsize-ai-image-optimizer |
| SS Quiz | ssquiz |
| Sticky Content – Make Any Section Sticky on Scroll | sticky-menu-block |
| Store Locator Widget | store-locator-widget |
| Strong Testimonials | strong-testimonials |
| Subscribe2 – Form, Email Subscribers & Newsletters | subscribe2 |
| Super Testimonial – Testimonial & Customer Review Slider Plugin for WordPress | super-testimonial |
| SVG Support | svg-support |
| System Dashboard | system-dashboard |
| TCBD Tooltip | tcbd-tooltip |
| Team Builder For WPBakery Page Builder(Formerly Visual Composer) | team-builder-for-wpbakery-page-builder |
| Team Builder – Meet the Team | team-display |
| Team Section Block – Showcase Team Members with Layout Options | team-section |
| Terms Dictionary | terms-dictionary |
| Theme File Duplicator | theme-file-duplicator |
| Threepress | threepress |
| Tour Master - Tour Booking, Travel, Hotel | tourmaster |
| Trash Duplicate and 301 Redirect | trash-duplicate-and-301-redirect |
| Tribulant Gallery Voting | gallery-voting |
| Typed JS: A typewriter style animation | mrlegend-typedjs |
| Ultimate Classified Listings – Classifieds, Directory & Marketplace | ultimate-classified-listings |
| Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin | ultimate-member |
| UltraEmbed – Advanced Iframe Plugin For WordPress with Gutenberg Block Included | ultraembed-advanced-iframe |
| UMich OIDC Login | umich-oidc-login |
| Uncode Core | uncode-core |
| Unlimited Elements For Elementor | unlimited-elements-for-elementor |
| User List | user-list |
| Variable Inspector | variable-inspector |
| Visualizer – Tables & Charts Manager with Built-in AI Generator | visualizer |
| Web Accessibility by accessiBe | accessibe |
| Web Stories Enhancer – Level Up Your Web Stories | web-stories-enhancer |
| Widget BUY.BOX | buybox-widget |
| Wired Impact Volunteer Management | wired-impact-volunteer-management |
| Wishlist | wishlist |
| Wonder Video Embed | wonderplugin-video-embed |
| WOO Codice Fiscale | woo-codice-fiscale |
| WooCommerce Food - Restaurant Menu & Food ordering | woo-exfood |
| WooCommerce HTML5 Video | woocommerce-html5-video |
| WOOEXIM – WooCommerce Export Import Plugin | wooexim |
| WordPress Photo Gallery – Image Gallery | photo-image-gallery |
| WordPress Portfolio Builder – Portfolio Gallery | uber-grid |
| WoWPth | wowpth |
| WP Click Info | wp-click-info |
| WP e-Customers Beta | wp-e-customers |
| WP Job Portal – AI-Powered Recruitment System for Company or Job Board website | wp-job-portal |
| WP Login Control | wp-login-control |
| WP Media Category Management | wp-media-category-management |
| WP Multistore Locator — WP Store Locator Plugin: Effortless Integration With Snazzy Maps | wp-multi-store-locator |
| WP Responsive Auto Fit Text | wp-responsive-slab-text |
| WP Templata – WordPress Template Library for Elementor | wptemplata |
| WP Video Posts | wp-video-posts |
| WP Wiki Tooltip | wp-wiki-tooltip |
| WP Yelp Review Slider | wp-yelp-review-slider |
| WP-Appbox | wp-appbox |
| WP-Asambleas | wp-asambleas |
| WP-BibTeX | wp-bibtex |
| WP-FormAssembly | formassembly-web-forms |
| WPBot – AI ChatBot for Live Support, Lead Generation, AI Services | chatbot |
| WPExperts Square For GiveWP | wpexperts-square-for-give |
| WPMobile.App | wpappninja |
| WPO365 | MICROSOFT 365 GRAPH MAILER | wpo365-msgraphmailer |
| WPPizza – A Restaurant Plugin | wppizza |
| WPrequal | wprequal |
| WPUpper Share Buttons | wpupper-share-buttons |
| WPvivid — Backup, Migration & Staging | wpvivid-backuprestore |
| WPYog Documents | wpyog-documents |
| XV Random Quotes | xv-random-quotes |
| Yay! Forms | yayforms |
| YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports | yaysmtp |
| YouTube Playlists with Schema | jma-youtube-playlists-with-schema |
| Zigaform – Form Builder Lite | zigaform-form-builder-lite |
| Zigaform – Price Calculator & Cost Estimation Form Builder Lite | zigaform-calculator-cost-estimation-form-builder-lite |
| Ziggeo | ziggeo |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| CarSpot – Dealership Wordpress Classified Theme | carspot |
| Hostiko - Hosting WordPress & WHMCS Theme | hostiko |
| Massive Dynamic | massive-dynamic |
| MediCenter - Health Medical Clinic WordPress Theme | medicenter |
| pearl | pearl |
| PressMart - Modern Elementor WooCommerce WordPress Theme | pressmart |
| Uncode | uncode |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Flexmls® IDX Plugin [flexmls-idx]
Researcher
Affected Software
FunnelKit – Funnel Builder for WooCommerce Checkout [funnel-builder]
Researcher
Affected Software
K Elements [k-elements]
Researcher
Affected Software
Keap Official Opt-in Forms [infusionsoft-official-opt-in-forms]
Researcher
Affected Software
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin [majestic-support]
Researcher
Affected Software
Residential Address Detection [residential-address-detection]
Researcher
Affected Software
Saoshyant Slider [saoshyant-slider]
Researcher
Affected Software
SS Quiz [ssquiz]
Researcher
Affected Software
Place Order Without Payment for WooCommerce [wc-place-order-without-payment]
Researcher
Affected Software
Researcher
Affected Software
A1POST.BG Shipping for WooCommerce [a1post-bg-shipping-for-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment [booking-and-rental-manager-for-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
Doctor Appointment Booking [doctor-appointment-booking]
Researcher
Affected Software
Estatik Real Estate Plugin [estatik]
Researcher
Affected Software
Estatik Mortgage Calculator [estatik-mortgage-calculator]
Researcher
Affected Software
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) [wp-event-solution]
Researcher
Affected Software
Events Calendar for GeoDirectory [events-for-geodirectory]
Researcher
Affected Software
GetBookingsWP – Appointments Booking Calendar Plugin For WordPress [get-bookings-wp]
Researcher
Affected Software
Option Editor [option-editor]
Researcher
Affected Software
ProfileGrid – User Profiles, Groups and Communities [profilegrid-user-profiles-groups-and-communities]
Researcher
Affected Software
Responsive Addons for Elementor – Free Elementor Addons, Kits and Elementor Templates [responsive-addons-for-elementor]
Researcher
Affected Software
Researcher
Affected Software
Theme File Duplicator [theme-file-duplicator]
Researcher
Affected Software
Researcher
Affected Software
Affiliate Links – Link Cloaking and Management [affiliate-links]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Massive Dynamic [massive-dynamic]
Researcher
Affected Software
Researcher
Affected Software
Ultimate Classified Listings – Classifieds, Directory & Marketplace [ultimate-classified-listings]
Researcher
Affected Software
CHATLIVE – Support online chat [chatlive]
Researcher
Affected Software
Easy Quotes [easy-quotes]
Researcher
Affected Software
Events Manager – Calendar, Bookings, Tickets, and more! [events-manager]
Researcher
Affected Software
File Uploads Addon for WooCommerce [woo-addon-uploads]
Researcher
Affected Software
Gtbabel [gtbabel]
Researcher
Affected Software
IP2Location Country Blocker [ip2location-country-blocker]
Researcher
Affected Software
LTL Freight Quotes – ABF Freight Edition [ltl-freight-quotes-abf-freight-edition]
Researcher
Affected Software
LTL Freight Quotes – GlobalTranz Edition [ltl-freight-quotes-globaltranz-edition]
Researcher
Affected Software
LTL Freight Quotes – Old Dominion Edition [ltl-freight-quotes-odfl-edition]
Researcher
Affected Software
LTL Freight Quotes – Purolator Edition [ltl-freight-quotes-purolator-freight-edition]
Researcher
Affected Software
LTL Freight Quotes – R+L Carriers Edition [ltl-freight-quotes-rl-edition]
Researcher
Affected Software
LTL Freight Quotes – SAIA Edition [ltl-freight-quotes-saia-edition]
Researcher
Affected Software
LTL Freight Quotes – SEFL Edition [ltl-freight-quotes-sefl-edition]
Researcher
Affected Software
LTL Freight Quotes – TForce Edition [ltl-freight-quotes-ups-edition]
Researcher
Affected Software
Small Package Quotes – For Customers of FedEx [small-package-quotes-fedex-edition]
Researcher
Affected Software
Small Package Quotes – USPS Edition [small-package-quotes-usps-edition]
Researcher
Affected Software
Small Package Quotes – Worldwide Express Edition [small-package-quotes-wwe-edition]
Researcher
Affected Software
Small Package Quotes – Worldwide Express Edition [small-package-quotes-wwe-edition]
Researcher
Affected Software
Team Builder For WPBakery Page Builder(Formerly Visual Composer) [team-builder-for-wpbakery-page-builder]
Researcher
Affected Software
Trash Duplicate and 301 Redirect [trash-duplicate-and-301-redirect]
Researcher
Affected Software
WP Multistore Locator — WP Store Locator Plugin: Effortless Integration With Snazzy Maps [wp-multi-store-locator]
Researcher
Affected Software
Custom Post Type Date Archives [custom-post-type-date-archives]
Researcher
Affected Software
Researcher
Affected Software
Show Me The Cookies [show-me-the-cookies]
Researcher
Affected Software
WooCommerce Food - Restaurant Menu & Food ordering [woo-exfood]
Researcher
Affected Software
AcuGIS Leaflet Maps [mapfig-premium-leaflet-map-maker]
Researcher
Affected Software
Assistant – Every Day Productivity Apps [assistant]
Researcher
Affected Software
FormCraft [formcraft3]
Researcher
Affected Software
Kush Micro News [kush-micro-news]
Researcher
Affected Software
Lenix Leads Collector [lenix-elementor-leads-addon]
Researcher
Affected Software
Live css [css-live]
Researcher
Affected Software
Mambo Importer [mambo-joomla-importer]
Researcher
Affected Software
WPvivid — Backup, Migration & Staging [wpvivid-backuprestore]
Researcher
Affected Software
Researcher
Affected Software
Rapid Cache [rapid-cache]
Researcher
Affected Software
SMTP for SendGrid – YaySMTP [smtp-sendgrid]
Researcher
SMTP for Sendinblue – YaySMTP <= 1.2 - Unauthenticated Stored Cross-Site Scripting via Email Logs
7.2
Affected Software
Brevo SMTP – YaySMTP [smtp-sendinblue]
Researcher
Affected Software
Subscribe2 – Form, Email Subscribers & Newsletters [subscribe2]
Researcher
Affected Software
Super Testimonial – Testimonial & Customer Review Slider Plugin for WordPress [super-testimonial]
Researcher
Affected Software
SMTP for Amazon SES – YaySMTP [smtp-amazon-ses]
Researcher
Affected Software
WPMobile.App [wpappninja]
Researcher
Affected Software
Researcher
Affected Software
All In Menu – Header menu creator [all-in-menu]
Researcher
Affected Software
Categorized Gallery Plugin [categorized-gallery]
Researcher
Affected Software
Doctor Appointment Booking [doctor-appointment-booking]
Researcher
Affected Software
Legoeso PDF Manager [legoeso-pdf-manager]
Researchers
Affected Software
Pinpoint Booking System – Version 2 [booking-system]
Researcher
Affected Software
Simple Signup Form [simple-signup-form]
Researcher
Affected Software
Theme File Duplicator [theme-file-duplicator]
Researcher
Affected Software
Tour Master - Tour Booking, Travel, Hotel [tourmaster]
Researcher
Affected Software
Wishlist [wishlist]
Researcher
Affected Software
WP Media Category Management [wp-media-category-management]
Researcher
Affected Software
WPExperts Square For GiveWP [wpexperts-square-for-give]
Researcher
Affected Software
3D Photo Gallery [3d-photo-gallery]
Researcher
Affected Software
Researcher
Affected Software
ADFO – Custom data in admin dashboard [admin-form]
Researcher
Affected Software
AMO Team Showcase [amo-team-showcase]
Researcher
Affected Software
AR for WordPress [ar-for-wordpress]
Researcher
Affected Software
Autoship Cloud for WooCommerce Subscription Products [autoship-cloud]
Researcher
Affected Software
Autoship Cloud for WooCommerce Subscription Products [autoship-cloud]
Researcher
Affected Software
Bandsintown Events [bandsintown]
Researcher
Affected Software
Business Card Block – Display Business or Personal Info in Card Format [business-card-block]
Researcher
Affected Software
C9 Admin Dashboard [c9-admin-dashboard]
Researcher
CanadaHelps Embedded Donation <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
CanadaHelps Embedded Donation Form [embedded-cdn]
Researcher
Affected Software
CATS Job Listings [cats-job-listings]
Researcher
Affected Software
Coaching Staffs [coaching-staffs]
Researcher
Affected Software
Contact Form Plugin [contact-form-lite]
Researcher
Affected Software
Content Blocks (Custom Post Widget) [custom-post-widget]
Researcher
Affected Software
Cosmic Blocks (40+) Content Editor Blocks Collection [cosmic-blocks]
Researcher
Affected Software
Countdown Timer Block – Animated Countdown for Events or Launches [countdown-time]
Researcher
Affected Software
Counters Block – Animated Number Counters, Stats & Dynamic KPIs [counters-block]
Researcher
Affected Software
Drivr Lite – Google Drive Plugin [drivr-google-drive-file-picker]
Researcher
Affected Software
Easy Charts [easy-charts]
Researcher
Affected Software
Easy Elementor Addons – Addons Pack for Elementor Page Builder [easy-elementor-addons]
Researcher
Affected Software
Easy MLS Listings Import [easy-mls-listings-import]
Researcher
Easypromos Plugin <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
Affected Software
Easypromos Plugin [easypromos]
Researcher
Affected Software
Researcher
Affected Software
Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files [embed-any-document]
Researcher
Affected Software
Pie Calendar – Events Calendar Made Simple [pie-calendar]
Researcher
Affected Software
EZ SQL Reports Shortcode Widget and DB Backup [elisqlreports]
Researcher
Affected Software
Front End Users [front-end-only-users]
Researcher
Affected Software
Researcher
Affected Software
Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks]
Researcher
Affected Software
Gumlet Video [gumlet-video]
Researcher
Affected Software
Icon List Block – Add Icon-Based Lists with Custom Styles [icon-list-block]
Researcher
Affected Software
igumbi Online Booking [igumbi-online-booking]
Researcher
Affected Software
Info Cards – Add Text and Media in Card Layouts [info-cards]
Researcher
Affected Software
Library Bookshelves [library-bookshelves]
Researcher
Affected Software
Login & Register Customizer – Popup | Slider | Inline | WooCommerce [easy-login-woocommerce]
Researcher
Affected Software
Maps for WP [maps-for-wp]
Researcher
Affected Software
Mini Course Generator | Embed mini-courses and interactive content [mini-course-generator]
Researcher
Affected Software
Modal Window – create popup modal window [modal-window]
Researcher
Affected Software
Mortgage Calculator / Loan Calculator [mortgage-loan-calculator]
Researcher
Newpost Catch <= 1.3.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via npc Shortcode
6.4
Affected Software
Newpost Catch [newpost-catch]
Researcher
Affected Software
Online Payments – Get Paid with PayPal, Square & Stripe [paypal-payment-button-by-vcita]
Researcher
Open Hours – Easy Opening Hours <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Open Hours – Easy Opening Hours [open-hours]
Researcher
Affected Software
Easy Notify Lite [easy-notify-lite]
Researcher
Affected Software
Responsive Flickr Slideshow [mobile-friendly-flickr-slideshow]
Researcher
Affected Software
Rife Extensions & Templates for Elementor [rife-elementor-extensions]
Researcher
Affected Software
Services Section Block – Showcase Service Details in Grid or Columns [services-section]
Researcher
Affected Software
Simple Charts [simple-charts]
Researcher
Affected Software
Simple Map No Api [simple-map-no-api]
Researcher
Affected Software
Simple Pricing Tables For WPBakery Page Builder(Formerly Visual Composer) [simple-pricing-tables-vc-extension]
Researcher
Affected Software
Simplebooklet PDF Viewer and Embedder [simplebooklet]
Researcher
Affected Software
Social Sharing Plugin – Social Warfare [social-warfare]
Researcher
Affected Software
Sticky Content – Make Any Section Sticky on Scroll [sticky-menu-block]
Researcher
Affected Software
Store Locator Widget [store-locator-widget]
Researcher
Affected Software
SVG Support [svg-support]
Researcher
Affected Software
TCBD Tooltip [tcbd-tooltip]
Researcher
Affected Software
Team Builder For WPBakery Page Builder(Formerly Visual Composer) [team-builder-for-wpbakery-page-builder]
Researcher
Affected Software
Researcher
Affected Software
Threepress [threepress]
Researcher
Affected Software
Typed JS: A typewriter style animation [mrlegend-typedjs]
Researcher
Affected Software
UltraEmbed – Advanced Iframe Plugin For WordPress with Gutenberg Block Included [ultraembed-advanced-iframe]
Researcher
Affected Software
UMich OIDC Login [umich-oidc-login]
Researcher
Affected Software
Unlimited Elements For Elementor [unlimited-elements-for-elementor]
Researcher
Affected Software
Secure Client Portal and Private File Sharing Plugin – User Private Files [user-private-files]
Researcher
Affected Software
Researcher
Affected Software
Web Stories Enhancer – Level Up Your Web Stories [web-stories-enhancer]
Researcher
Affected Software
Widget BUY.BOX [buybox-widget]
Researcher
Wired Impact Volunteer Management <= 2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Wired Impact Volunteer Management [wired-impact-volunteer-management]
Researcher
Wonder Video Embed <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
Affected Software
Wonder Video Embed [wonderplugin-video-embed]
Researcher
Affected Software
WordPress Portfolio Builder – Portfolio Gallery [uber-grid]
Researcher
Affected Software
WP Responsive Auto Fit Text [wp-responsive-slab-text]
Researcher
Affected Software
WP Wiki Tooltip [wp-wiki-tooltip]
Researcher
WP-Appbox <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via appbox Shortcode
6.4
Affected Software
WP-Appbox [wp-appbox]
Researcher
Affected Software
WP-Asambleas [wp-asambleas]
Researcher
Affected Software
WP-BibTeX [wp-bibtex]
Researcher
WP-FormAssembly <= 2.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
Affected Software
WP-FormAssembly [formassembly-web-forms]
Researcher
Affected Software
Yay! Forms [yayforms]
Researcher
YouTube Playlists with Schema <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
YouTube Playlists with Schema [jma-youtube-playlists-with-schema]
Researcher
Zigaform – Form Builder Lite <= 7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Zigaform – Form Builder Lite [zigaform-form-builder-lite]
Researcher
Affected Software
Zigaform – Price Calculator & Cost Estimation Form Builder Lite [zigaform-calculator-cost-estimation-form-builder-lite]
Researcher
Affected Software
Ziggeo [ziggeo]
Researcher
Affected Software
Uncode Core [uncode-core]
Researcher
Affected Software
.htaccess Login block [htaccess-login-block]
Researcher
Affected Software
17TRACK for WooCommerce [17track]
Researcher
Affected Software
Accept Donations with PayPal & Stripe [easy-paypal-donation]
Researcher
Affected Software
Active Products Tables for WooCommerce. Use constructor to create tables [profit-products-tables-for-woocommerce]
Researcher
Patch Status
Unpatched
Unpatched
Published
Feb 21, 2025
Feb 21, 2025
Affected Software
Adsmonetizer [adsensei-b30]
Researcher
Affected Software
Affiliate Links Manager [affiliate-links-manager]
Researcher
Affected Software
Atarim – Visual Feedback, Review & AI Collaboration [atarim-visual-collaboration]
Researcher
Patch Status
Unpatched
Unpatched
Published
Feb 21, 2025
Feb 21, 2025
Affected Software
Better Customer List for WooCommerce [woo-better-customer-list]
Researcher
Affected Software
Booking Package [booking-package]
Researcher
Affected Software
Booking Ultra Pro Appointments Booking Calendar Plugin [booking-ultra-pro]
Researcher
Affected Software
Contact Us By Lord Linus [contact-us-by-lord-linus]
Researcher
Affected Software
Countdown Timer [timer-countdown]
Researcher
Affected Software
DB Tables Import/Export [db-tables-importexport]
Researcher
Affected Software
DeBounce Email Validator [debounce-io-email-validator]
Researcher
Affected Software
Digihood HTML Sitemap [wedesin-html-sitemap]
Researcher
Affected Software
Easy Form [easy-form]
Researcher
Affected Software
Fast Flow [fast-flow-dashboard]
Researcher
Affected Software
File Icons [file-icons]
Researcher
Affected Software
Flagged Content [flagged-content]
Researcher
Affected Software
Flashfader [flashfader]
Researcher
Affected Software
flickr-slideshow-wrapper [flickr-slideshow-wrapper]
Researcher
Affected Software
Fontsampler [fontsampler]
Researcher
Affected Software
Frontend Admin by DynamiApps [acf-frontend-form-element]
Researcher
Affected Software
Google Maps GPX Viewer [google-maps-gpx-viewer]
Researcher
Affected Software
Researcher
Affected Software
Lexicata [lexicata]
Researcher
Affected Software
Limit Bio [limit-bio]
Researcher
Affected Software
Limit Bio [limit-bio]
Researcher
Affected Software
List Urls [list-urls]
Researcher
Affected Software
magayo Lottery Results [magayo-lottery-results]
Researcher
Affected Software
MemorialDay [memorialday]
Researcher
Affected Software
Pago por Redsys [pago-redsys-tpv-grafreak]
Researcher
Affected Software
Protected wp-login [protected-wp-login]
Researcher
Affected Software
Pure Chat – Live Chat & More! [pure-chat]
Researcher
Affected Software
QR Code for WooCommerce [wc-qr-codes]
Researcher
Affected Software
Raptive Ads [adthrive-ads]
Researcher
Affected Software
Rebuild Permalinks [rebuild-permalinks]
Researcher
Affected Software
Restrict Taxonomies [restrict-taxonomies]
Researcher
Affected Software
Royal Addons for Elementor – Addons and Templates Kit for Elementor [royal-elementor-addons]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
S3Bubble Media Streaming (AWS|Elementor|YouTube|Vimeo Functionality) [s3bubble-amazon-web-services-oembed-media-streaming-support]
Researcher
Affected Software
Schedule [schedule]
Researcher
Affected Software
SEO Tools [seo-automatic-seo-tools]
Researcher
Affected Software
Shipmozo Courier Tracking [webparex]
Researcher
Affected Software
Simple Email Subscriber [simple-email-subscriber]
Researcher
Affected Software
Small Package Quotes – Unishippers Edition [small-package-quotes-unishippers-edition]
Researcher
Affected Software
Researcher
Patch Status
Unpatched
Unpatched
Published
Feb 21, 2025
Feb 21, 2025
Affected Software
Terms Dictionary [terms-dictionary]
Researcher
Affected Software
Tribulant Gallery Voting [gallery-voting]
Researcher
Affected Software
Variable Inspector [variable-inspector]
Researcher
Affected Software
Web Accessibility by accessiBe [accessibe]
Researcher
Affected Software
WOO Codice Fiscale [woo-codice-fiscale]
Researcher
Affected Software
WooCommerce HTML5 Video [woocommerce-html5-video]
Researcher
Affected Software
Researcher
Affected Software
WordPress Photo Gallery – Image Gallery [photo-image-gallery]
Researcher
Affected Software
WoWPth [wowpth]
Researcher
Affected Software
WoWPth [wowpth]
Researcher
Affected Software
WP Click Info [wp-click-info]
Researcher
Affected Software
WP e-Customers Beta [wp-e-customers]
Researcher
Affected Software
WP Login Control [wp-login-control]
Researcher
Affected Software
Researcher
Affected Software
WP Video Posts [wp-video-posts]
Researcher
Affected Software
WPPizza – A Restaurant Plugin [wppizza]
Researcher
Affected Software
WPYog Documents [wpyog-documents]
Researcher
Affected Software
XV Random Quotes [xv-random-quotes]
Researcher
Affected Software
Zigaform – Price Calculator & Cost Estimation Form Builder Lite [zigaform-calculator-cost-estimation-form-builder-lite]
Researcher
Affected Software
Researcher
Affected Software
Cookie Notice Bar [cookie-notice-bar]
Researchers
Affected Software
Reaction Buttons [reaction-buttons]
Researcher
Affected Software
Market Exporter [market-exporter]
Researcher
Affected Software
Page and Post Lister [page-and-post-lister]
Researcher
Affected Software
ProfileGrid – User Profiles, Groups and Communities [profilegrid-user-profiles-groups-and-communities]
Researcher
Affected Software
Simple Photo Feed [simple-photo-feed]
Researcher
Affected Software
Researcher
Affected Software
Actionwear products sync [actionwear-products-sync]
Researcher
Researcher
Affected Software
BigBuy Dropshipping Connector for WooCommerce [bigbuy-wc-dropshipping-connector]
Researcher
Affected Software
C9 Blocks [c9-blocks]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
LTL Freight Quotes – GlobalTranz Edition [ltl-freight-quotes-globaltranz-edition]
Researcher
Affected Software
MediCenter - Health Medical Clinic WordPress Theme [medicenter]
Researcher
Affected Software
MyTicket Events [myticket-events]
Researcher
Affected Software
PeproDev Ultimate Invoice [pepro-ultimate-invoice]
Researcher
Affected Software
Post Grid [post-grid]
Researcher
Affected Software
Raptive Ads [adthrive-ads]
Researcher
Affected Software
Researcher
Affected Software
Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more [scratch-win-giveaways-for-website-facebook]
Researcher
Affected Software
Small Package Quotes – Unishippers Edition [small-package-quotes-unishippers-edition]
Researcher
Affected Software
Strong Testimonials [strong-testimonials]
Researcher
Affected Software
Researcher
Affected Software
Delivery Date Time & Pickup for WooCommerce [byconsole-woo-order-delivery-time]
Researcher
Affected Software
WordPress Portfolio Builder – Portfolio Gallery [uber-grid]
Researcher
Affected Software
Indeed Ultimate Learning Pro [ulp-duplicate-post-sql-timebased]
Researcher
Affected Software
Researcher
Affected Software
WP Yelp Review Slider [wp-yelp-review-slider]
Researcher
Affected Software
WPO365 | MICROSOFT 365 GRAPH MAILER [wpo365-msgraphmailer]
Researcher
Coronavirus (COVID-19) Notice Message <= 1.1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
Affected Software
Coronavirus (COVID-19) Notice Message [coronavirus-covid-19-notice-message]
Researcher
Affected Software
GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law [gdpr-cookie-compliance]
Researcher
Affected Software
GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law [gdpr-cookie-compliance]
Researcher
Affected Software
GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law [gdpr-cookie-compliance]
Researcher
Affected Software
GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law [gdpr-cookie-compliance]
Researcher
Affected Software
GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law [gdpr-cookie-compliance]
Researcher
Affected Software
GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law [gdpr-cookie-compliance]
Researcher
Affected Software
GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law [gdpr-cookie-compliance]
Researcher
Affected Software
Researcher
Social Media Plugin by Social Snap <= 1.3.6 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
Affected Software
Social Snap — Social Share Buttons & Click to Tweet [socialsnap]
Researcher
Affected Software
Ultimate Classified Listings – Classifieds, Directory & Marketplace [ultimate-classified-listings]
Researcher
Affected Software
Apptivo Business Site [apptivo-business-site]
Researcher
Affected Software
Disable Auto Updates [disable-auto-updates]
Researcher
Affected Software
Ecwid by Lightspeed Ecommerce Shopping Cart [ecwid-shopping-cart]
Researcher
Affected Software
Education Addon for Elementor [education-addon]
Researcher
Affected Software
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks]
Researcher
Affected Software
Researcher
Affected Software
Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later [flexible-wishlist]
Researcher
Affected Software
FormCraft [formcraft3]
Researcher
Affected Software
WPrequal [wprequal]
Researcher
Affected Software
Order Limit For WooCommerce ( Free Version ) [wc-order-limit-lite]
Researcher
Affected Software
Prime Addons for Elementor [prime-addons-for-elementor]
Researcher
Affected Software
ProfileGrid – User Profiles, Groups and Communities [profilegrid-user-profiles-groups-and-communities]
Researcher
Affected Software
Recipe Card Blocks Lite [recipe-card-blocks-by-wpzoom]
Researcher
Affected Software
SpeedSize Image & Video AI-Optimizer [speedsize-ai-image-optimizer]
Researcher
Affected Software
System Dashboard [system-dashboard]
Researcher
Affected Software
Team Builder – Meet the Team [team-display]
Researcher
Affected Software
Researcher
Affected Software
WPUpper Share Buttons [wpupper-share-buttons]
Researcher
Affected Software
XV Random Quotes [xv-random-quotes]
Researcher
Affected Software
Head, Footer and Post Injections [header-footer]
Researcher
Affected Software
GPX Viewer [gpx-viewer]
Researcher
Affected Software
Search with Typesense [search-with-typesense]
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Comments