Wordfence Intelligence Weekly WordPress Vulnerability Report (February 3, 2025 to February 9, 2025)
📢 Did you know Wordfence runs a Bug Bounty Program for all WordPress plugins and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we handle all the rest.
Last week, there were 160 vulnerabilities disclosed in 149 WordPress Plugins and 3 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 53 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to make the internet more secure. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 22,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 76 |
| Unpatched | 84 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Medium Severity | 143 |
| High Severity | 13 |
| Critical Severity | 4 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 76 |
| Cross-Site Request Forgery (CSRF) | 43 |
| Missing Authorization | 13 |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 7 |
| Improper Control of Generation of Code ('Code Injection') | 4 |
| Authorization Bypass Through User-Controlled Key | 3 |
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 3 |
| Authentication Bypass Using an Alternate Path or Channel | 2 |
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 2 |
| Deserialization of Untrusted Data | 1 |
| Exposure of Sensitive Information to an Unauthorized Actor | 1 |
| Guessable CAPTCHA | 1 |
| Improper Access Control | 1 |
| Incorrect Privilege Assignment | 1 |
| Server-Side Request Forgery (SSRF) | 1 |
| Unrestricted Upload of File with Dangerous Type | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 29 | |
| 16 | |
| 16 | |
| 7 | |
| 6 | |
| 6 | |
| 5 | |
| 5 | |
| 5 | |
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Activity Log for WordPress | winterlock |
| Ad Inserter Pro | ad-inserter-pro |
| Admin and Site Enhancements (ASE) | admin-site-enhancements |
| Admin and Site Enhancements (ASE) Pro | admin-site-enhancements-pro |
| AIO Performance Profiler, Monitor, Optimize, Compress & Debug | all-in-one-performance-accelerator |
| Alert Box Block | alert-box-block |
| All push notification for WP | all-push-notification |
| Appointment Buddy Widget By Accrete | appointment-buddy-online-appointment-booking-by-accrete |
| aThemes Addons for Elementor | athemes-addons-for-elementor-lite |
| Auto SEO | auto-seo |
| Awesome Event Booking | awesome-event-booking |
| Blog, Posts and Category Filter for Elementor | blog-posts-and-category-for-elementor |
| BookPress – For Book Authors | book-press |
| BoomBox Theme Extensions | boombox-theme-extensions |
| Breaking News Ticker | breaking-news-ticker |
| bSlider – Create Responsive Image, Post, Product, and Video Sliders | b-slider |
| Builder Shortcode Extras – WordPress Shortcodes Collection to Save You Time | builder-shortcode-extras |
| CalendApp | calendapp |
| Child Themes Helper | child-themes-helper |
| CM E-Mail Blacklist – Simple email filtering for safer registration | cm-email-blacklist |
| Contact Manager | contact-manager |
| Cookie Monster | cookie-monster |
| CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x | woo-multi-currency |
| Custom Block Builder – Lazy Blocks | lazy-blocks |
| Custom Comment Notifications | custom-comment-notifications |
| Custom Links On Admin Dashboard Toolbar | customize-wpadmin |
| CWD – Stealth Links | cwd-stealth-links |
| Directory Listings WordPress plugin – uListing | ulisting |
| Disable Elementor Editor Translation | disable-elementor-editor-translation |
| Distance Rate Shipping For WooCommerce | distance-rate-shipping-for-woocommerce |
| DSGVO All in one for WP | dsgvo-all-in-one-for-wp |
| Dynamic Conditions | dynamicconditions |
| Dynamic URL SEO | dynamic-url-seo |
| EAN Barcode Generator for WooCommerce: UPC, ISBN & GTIN Inventory | ean-for-woocommerce |
| Easy Chart Builder for WordPress | easy-chart-builder |
| Easy Related Posts | easy-related-posts |
| Easy WP Tiles | easy-wp-tiles |
| Embed RSS | embed-rss |
| Essential Addons for Elementor – Popular Elementor Templates & Widgets | essential-addons-for-elementor-lite |
| Eventer - WordPress Event & Booking Manager Plugin | eventer |
| Events, Calendars & Tickets – Event Kikfyre | kikfyre-events-calendar-tickets |
| Export WooCommerce Orders, Products, Customers & Coupons to Google Sheets | wpsyncsheets-woocommerce |
| External "Video for Everybody" | external-video-for-everybody |
| Facilita Form Tracker | facilita-form-tracker |
| FlexIDX Home Search | flexidx-home-search |
| FM Notification Bar | fm-notification-bar |
| Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | form-maker |
| Fyrebox Quizzes | fyrebox-shortcode |
| GlobalQuran | globalquran |
| Google Earth Embed | google-earth-tours |
| Graceful Email Obfuscation | graceful-email-obfuscation |
| HT Mega Addons for Elementor – Elementor Widgets & Template Builder | ht-mega-for-elementor |
| Image Rotator | appten-image-rotator |
| Include Mastodon Feed | include-mastodon-feed |
| Indeed API | indeed-api |
| Infusionsoft Analytics for WordPress | infusionsoft-web-tracker |
| InLocation | inlocation |
| Job Board Manager | job-board-manager |
| JS Help Desk – AI-Powered Support & Ticketing System | js-support-ticket |
| Kona Gallery Block | kona-instagram-feed-for-gutenberg |
| Link to URL / Post | link-to-url-post |
| Links in Captions | links-in-captions |
| Listings for Appfolio | listings-for-appfolio |
| Login-box | login-box |
| Logo Slider WP – Responsive Logo Carousel, Logo Gallery & Logo Showcase | logo-slider-wp |
| Medical Addon for Elementor | medical-addon-for-elementor |
| Music Press Pro | music-press-pro |
| NewsTicker | news-list |
| Nextend Social Login Pro | nextend-social-login-pro |
| NextGen Cooliris Gallery | nextgen-cooliris-gallery |
| Om Stripe | om-stripe |
| On Page SEO + Social Live Chat | ops-robots-txt |
| OneStore Sites | onestore-sites |
| Optimate Ads – Advance Ad Inserter AdSense & Ad Manager | optimate-ads |
| Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More | themeisle-companion |
| Paid Videochat Turnkey Site – HTML5 PPV Live Webcams | ppv-live-webcams |
| Payment Forms for Paystack | payment-forms-for-paystack |
| Paytm Payment Donation | paytm-donation |
| Photo Contest | Competition | Video Contest | totalcontest-lite |
| Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery | nextgen-gallery |
| Pop Up | popup-seo-optimized |
| Post and Page Builder by BoldGrid – Visual Drag and Drop Editor | post-and-page-builder |
| Post Sync | post-sync |
| Print PDF Generator and Publisher | nopeamedia |
| Product Blocks for WooCommerce | product-blocks-for-woocommerce |
| Product Table For WooCommerce | product-table-for-woocommerce |
| Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker | wedevs-project-manager |
| pushBIZ – Push Notification | pushbiz |
| Qi Addons For Elementor | qi-addons-for-elementor |
| Quote Comments | quote-comments |
| R3W InstaFeed | r3w-instafeed |
| RapidLoad AI – Optimize Web Vitals Automatically | unusedcss |
| Read More Copy Link | read-more-copy-link |
| Ready to use Gutenberg and Elementor Templates – Munk Sites | munk-sites |
| Real Estate Manager – Property Listing and Agent Management | real-estate-manager |
| ReverbNation Widgets | reverbnation-widgets |
| RSS in Page | rss-in-page |
| SendPulse Email Marketing Newsletter | sendpulse-email-marketing-newsletter |
| ShopSite | shopsite-plugin |
| Show notice or message on admin area | show-notice-or-message-on-admin-area |
| Simple add pages or posts | simple-add-pages-or-posts |
| Simple Auto Tag | simple-auto-tag |
| Simple catalogue | simple-catalogue |
| Simple Certain Time to Show Content | simple-certain-time-to-show-content |
| Simple Select All Text Box | simple-select-all-text-box |
| Simple User Profile | simple-user-profile |
| SKT Blocks – Gutenberg based Page Builder | skt-blocks |
| Slide Banners | slide-banners |
| Smart Countdown FX | smart-countdown-fx |
| Smart DoFollow | smart-dofollow |
| Smartarget – Chat Buttons & Engagement Apps | smartarget-contact-us |
| Songkick Concerts and Festivals | songkick-concerts-and-festivals |
| Spiritual Gifts Survey (and optional S.H.A.P.E survey) | spiritual-gifts-survey |
| Starter Templates by FancyWP | starter-templates |
| Status Updater | fb-status-updater |
| Style Tweaker | style-tweaker |
| Stylish Google Sheet Reader – Embed Google Sheets as Interactive Tables with Built-in Form Submissions | stylish-google-sheet-reader |
| Super Store Finder | superstorefinder-wp |
| Survey Maker by AYS | survey-maker |
| Theasys | theasys |
| Theme Options Z | theme-options-z |
| Uix Shortcodes | uix-shortcodes |
| Upcasted S3 Offload – AWS S3, DigitalOcean Spaces, Backblaze, MinIO Storage Integration | upcasted-s3-offload |
| URL-Preview-Box | good-url-preview-box |
| Vayu Blocks – Website Builder for the Gutenberg Block Editor | vayu-blocks |
| Video & Photo Gallery for Ultimate Member | gallery-for-ultimate-member |
| Vignette Ads | vignete-ads |
| VikBooking Hotel Booking Engine & PMS | vikbooking |
| VR-Frases | vr-frases |
| WizShop | wizshop |
| WooCommerce Cart Count Shortcode | woo-cart-count-shortcode |
| WordPress Activity-o-meter | wordpress-activity-o-meter |
| WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto | tripetto |
| WP Admin Custom Page | wp-admin-custom-page |
| WP All Export Pro | wp-all-export-pro |
| WP All Import Pro | wp-all-import-pro |
| WP BASE Booking of Appointments, Services and Events | wp-base-booking-of-appointments-services-and-events |
| WP Custom Post RSS Feed | wp-custom-post-rss-feed |
| WP Directorybox Manager | wp-directorybox-manager |
| WP doodlez | wpdoodlez |
| WP Extra Fields | wp-extra-fields |
| WP Keyword Monitor | wp-keyword-monitor |
| WP Pricing Table | wp-pricing-table |
| WP SimpleWeather | wp-simpleweather |
| WP Social Stream | wp-social-stream |
| WP Spell Check | wp-spell-check |
| WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More | wpforms-lite |
| WPMovieLibrary | wpmovielibrary |
| ZMSEO | zmseo |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| DWT - Directory & Listing WordPress Theme | dwt-listing |
| OnePress | onepress |
| SocialV - Social Network and Community BuddyPress Theme | socialv |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
Affected Software
Nextend Social Login Pro [nextend-social-login-pro]
Researcher
Affected Software
WizShop [wizshop]
Researcher
Affected Software
WP Directorybox Manager [wp-directorybox-manager]
Researcher
Affected Software
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams [ppv-live-webcams]
Researcher
BoomBox Theme Extensions <= 1.8.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
8.8
Affected Software
BoomBox Theme Extensions [boombox-theme-extensions]
Researcher
Affected Software
WP All Export Pro [wp-all-export-pro]
Researcher
Affected Software
Super Store Finder [superstorefinder-wp]
Researcher
Affected Software
Child Themes Helper [child-themes-helper]
Researcher
Affected Software
Contact Manager [contact-manager]
Researcher
Affected Software
Cookie Monster [cookie-monster]
Researcher
Admin and Site Enhancements (ASE) Pro <= 7.6.2.1 - Authenticated (Subscriber+) Privilege Escalation
7.5
Affected Software
Admin and Site Enhancements (ASE) [admin-site-enhancements]
Admin and Site Enhancements (ASE) Pro [admin-site-enhancements-pro]
Researcher
Affected Software
CWD – Stealth Links [cwd-stealth-links]
Researcher
Affected Software
Researcher
Affected Software
CURCY – Multi Currency for WooCommerce – Smoothly on WooCommerce 9.x [woo-multi-currency]
Researcher
Affected Software
Uix Shortcodes [uix-shortcodes]
Researcher
Affected Software
All push notification for WP [all-push-notification]
Researcher
WP All Import Pro <= 4.9.7 - Authenticated (Administrator+) PHP Object Injection via Import File
7.2
Affected Software
WP All Import Pro [wp-all-import-pro]
Researcher
Affected Software
WP All Export Pro [wp-all-export-pro]
Researcher
Affected Software
Distance Rate Shipping For WooCommerce [distance-rate-shipping-for-woocommerce]
Researcher
Affected Software
DSGVO All in one for WP [dsgvo-all-in-one-for-wp]
Researcher
Affected Software
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor [post-and-page-builder]
Researcher
Affected Software
Researcher
Starter Templates by FancyWP <= 2.0.0 - Cross-Site Request Forgery to Arbitrary Plugin Installation
6.5
Affected Software
Starter Templates by FancyWP [starter-templates]
Researcher
Affected Software
Researcher
Affected Software
Alert Box Block [alert-box-block]
Researcher
aThemes Addons for Elementor <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
aThemes Addons for Elementor [athemes-addons-for-elementor-lite]
Researcher
Affected Software
Blog, Posts and Category Filter for Elementor [blog-posts-and-category-for-elementor]
Researcher
Affected Software
Breaking News Ticker [breaking-news-ticker]
Researcher
Affected Software
DWT - Directory & Listing WordPress Theme [dwt-listing]
Researcher
Affected Software
Dynamic Conditions [dynamicconditions]
Researcher
Easy Chart Builder for WordPress <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Easy Chart Builder for WordPress [easy-chart-builder]
Researcher
Affected Software
Researcher
External Video For Everybody <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
External "Video for Everybody" [external-video-for-everybody]
Researcher
Affected Software
FlexIDX Home Search [flexidx-home-search]
Researcher
Affected Software
Google Earth Embed [google-earth-tours]
Researcher
Affected Software
Graceful Email Obfuscation [graceful-email-obfuscation]
Researcher
Affected Software
HT Mega Addons for Elementor – Elementor Widgets & Template Builder [ht-mega-for-elementor]
Researcher
Affected Software
Include Mastodon Feed [include-mastodon-feed]
Researcher
Affected Software
Kona Gallery Block [kona-instagram-feed-for-gutenberg]
Researcher
Affected Software
Links in Captions [links-in-captions]
Researcher
Affected Software
Music Press Pro [music-press-pro]
Researcher
Affected Software
NextGen Cooliris Gallery [nextgen-cooliris-gallery]
Researcher
Affected Software
Optimate Ads – Advance Ad Inserter AdSense & Ad Manager [optimate-ads]
Researcher
Affected Software
Optimate Ads – Advance Ad Inserter AdSense & Ad Manager [optimate-ads]
Researcher
Affected Software
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More [themeisle-companion]
Researcher
Product Blocks for WooCommerce <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Product Blocks for WooCommerce [product-blocks-for-woocommerce]
Researcher
Product Table For WooCommerce <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Product Table For WooCommerce [product-table-for-woocommerce]
Researcher
Affected Software
Qi Addons For Elementor [qi-addons-for-elementor]
Researcher
Affected Software
ReverbNation Widgets [reverbnation-widgets]
Researcher
Affected Software
RSS in Page [rss-in-page]
Researcher
Affected Software
SendPulse Email Marketing Newsletter [sendpulse-email-marketing-newsletter]
Researcher
Affected Software
Simple Select All Text Box [simple-select-all-text-box]
Researcher
Affected Software
SKT Blocks – Gutenberg based Page Builder [skt-blocks]
Researcher
Affected Software
Smart Countdown FX [smart-countdown-fx]
Researcher
Affected Software
Smartarget – Chat Buttons & Engagement Apps [smartarget-contact-us]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Video & Photo Gallery for Ultimate Member [gallery-for-ultimate-member]
Researcher
WooCommerce Cart Count Shortcode <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
WooCommerce Cart Count Shortcode [woo-cart-count-shortcode]
Researcher
Affected Software
WP SimpleWeather [wp-simpleweather]
Researcher
Affected Software
Researcher
Affected Software
Embed RSS [embed-rss]
Researcher
Affected Software
Ad Inserter Pro [ad-inserter-pro]
Researcher
Affected Software
Appointment Buddy Widget By Accrete [appointment-buddy-online-appointment-booking-by-accrete]
Researcher
Affected Software
Auto SEO [auto-seo]
Researcher
BookPress – For Book Authors <= 1.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
Affected Software
BookPress – For Book Authors [book-press]
Researcher
Affected Software
CalendApp [calendapp]
Researcher
Affected Software
CM E-Mail Blacklist – Simple email filtering for safer registration [cm-email-blacklist]
Researcher
Affected Software
Custom Block Builder – Lazy Blocks [lazy-blocks]
Researcher
Custom Comment Notifications <= 1.0.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
Affected Software
Custom Comment Notifications [custom-comment-notifications]
Researcher
Affected Software
Custom Links On Admin Dashboard Toolbar [customize-wpadmin]
Researcher
Affected Software
Dynamic URL SEO [dynamic-url-seo]
Researcher
Affected Software
Easy Related Posts [easy-related-posts]
Researcher
Affected Software
Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite]
Researcher
Affected Software
Fyrebox Quizzes [fyrebox-shortcode]
Researcher
Affected Software
Image Rotator [appten-image-rotator]
Researcher
Affected Software
InLocation [inlocation]
Researcher
Affected Software
Job Board Manager [job-board-manager]
Researcher
Affected Software
Listings for Appfolio [listings-for-appfolio]
Researcher
Affected Software
Login-box [login-box]
Researcher
Affected Software
NewsTicker [news-list]
Researcher
Affected Software
Om Stripe [om-stripe]
Researcher
Affected Software
On Page SEO + Social Live Chat [ops-robots-txt]
Researcher
Affected Software
Post Sync [post-sync]
Researcher
Affected Software
pushBIZ – Push Notification [pushbiz]
Researcher
Affected Software
Quote Comments [quote-comments]
Researcher
Affected Software
R3W InstaFeed [r3w-instafeed]
Researcher
Affected Software
Read More Copy Link [read-more-copy-link]
Researcher
Affected Software
Show notice or message on admin area [show-notice-or-message-on-admin-area]
Researcher
Affected Software
Simple Auto Tag [simple-auto-tag]
Researcher
Affected Software
Simple catalogue [simple-catalogue]
Researcher
Affected Software
Simple Certain Time to Show Content [simple-certain-time-to-show-content]
Researcher
Affected Software
Simple User Profile [simple-user-profile]
Researcher
Affected Software
Smart DoFollow [smart-dofollow]
Researcher
Songkick Concerts and Festivals <= 0.9.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
Affected Software
Songkick Concerts and Festivals [songkick-concerts-and-festivals]
Researcher
Affected Software
Spiritual Gifts Survey (and optional S.H.A.P.E survey) [spiritual-gifts-survey]
Researcher
Affected Software
Spiritual Gifts Survey (and optional S.H.A.P.E survey) [spiritual-gifts-survey]
Researcher
Affected Software
Status Updater [fb-status-updater]
Researcher
Affected Software
Style Tweaker [style-tweaker]
Researcher
Affected Software
Stylish Google Sheet Reader – Embed Google Sheets as Interactive Tables with Built-in Form Submissions [stylish-google-sheet-reader]
Researcher
Affected Software
Theasys [theasys]
Researcher
Affected Software
Photo Contest | Competition | Video Contest [totalcontest-lite]
Researcher
Affected Software
URL-Preview-Box [good-url-preview-box]
Researcher
Affected Software
Vignette Ads [vignete-ads]
Researcher
Affected Software
WordPress Activity-o-meter [wordpress-activity-o-meter]
Researcher
Affected Software
WP Admin Custom Page [wp-admin-custom-page]
Researcher
Affected Software
WP BASE Booking of Appointments, Services and Events [wp-base-booking-of-appointments-services-and-events]
Researcher
Affected Software
WP Custom Post RSS Feed [wp-custom-post-rss-feed]
Researcher
Affected Software
WP doodlez [wpdoodlez]
Researcher
Affected Software
WP Extra Fields [wp-extra-fields]
Researcher
Affected Software
WP Keyword Monitor [wp-keyword-monitor]
Researcher
Affected Software
WP Pricing Table [wp-pricing-table]
Researcher
Affected Software
WP Social Stream [wp-social-stream]
Researcher
Affected Software
WPMovieLibrary [wpmovielibrary]
Researcher
Affected Software
ZMSEO [zmseo]
Researcher
Affected Software
Simple add pages or posts [simple-add-pages-or-posts]
Researcher
Affected Software
Facilita Form Tracker [facilita-form-tracker]
Researcher
Affected Software
Awesome Event Booking [awesome-event-booking]
Researcher
Affected Software
Researcher
Affected Software
Real Estate Manager – Property Listing and Agent Management [real-estate-manager]
Researcher
Affected Software
Researcher
Affected Software
Link to URL / Post [link-to-url-post]
Researcher
Affected Software
Payment Forms for Paystack [payment-forms-for-paystack]
Researcher
Affected Software
GlobalQuran [globalquran]
Researcher
Affected Software
Easy WP Tiles [easy-wp-tiles]
Researcher
Affected Software
FM Notification Bar [fm-notification-bar]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Paytm Payment Donation [paytm-donation]
Researcher
Affected Software
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery]
Researcher
Affected Software
Pop Up [popup-seo-optimized]
Researcher
Affected Software
Survey Maker by AYS [survey-maker]
Researcher
Affected Software
Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker [wedevs-project-manager]
Researcher
Affected Software
AIO Performance Profiler, Monitor, Optimize, Compress & Debug [all-in-one-performance-accelerator]
Researcher
Affected Software
Awesome Event Booking [awesome-event-booking]
Researcher
Affected Software
Researcher
Affected Software
Builder Shortcode Extras – WordPress Shortcodes Collection to Save You Time [builder-shortcode-extras]
Researcher
Affected Software
Activity Log for WordPress [winterlock]
Researcher
Affected Software
Disable Elementor Editor Translation [disable-elementor-editor-translation]
Researcher
Affected Software
EAN Barcode Generator for WooCommerce: UPC, ISBN & GTIN Inventory [ean-for-woocommerce]
Researcher
Affected Software
Events, Calendars & Tickets – Event Kikfyre [kikfyre-events-calendar-tickets]
Researcher
Affected Software
Researcher
Affected Software
Export WooCommerce Orders, Products, Customers & Coupons to Google Sheets [wpsyncsheets-woocommerce]
Researcher
Affected Software
Indeed API [indeed-api]
Researcher
Affected Software
Infusionsoft Analytics for WordPress [infusionsoft-web-tracker]
Researcher
Affected Software
JS Help Desk – AI-Powered Support & Ticketing System [js-support-ticket]
Researcher
Affected Software
Medical Addon for Elementor [medical-addon-for-elementor]
Researcher
Affected Software
Researcher
Affected Software
OnePress [onepress]
Researcher
Affected Software
OneStore Sites [onestore-sites]
Researcher
Affected Software
Print PDF Generator and Publisher [nopeamedia]
Researcher
Affected Software
Researcher
Affected Software
Slide Banners [slide-banners]
Researcher
Affected Software
Theme Options Z [theme-options-z]
Researcher
Affected Software
VikBooking Hotel Booking Engine & PMS [vikbooking]
Researcher
Affected Software
WP All Import Pro [wp-all-import-pro]
Researcher
Affected Software
WP Spell Check [wp-spell-check]
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Comments