Wordfence Intelligence Weekly WordPress Vulnerability Report (February 24, 2025 to March 2, 2025)
📢 Did you know Wordfence runs a Bug Bounty Program for all WordPress plugins and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we handle all the rest.
Last week, there were 197 vulnerabilities disclosed in 178 WordPress Plugins and 6 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 68 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to implement layered security, aligning with our overarching mission to secure WordPress with defense in depth strategies. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 24,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 113 |
| Unpatched | 84 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Low Severity | 1 |
| Medium Severity | 156 |
| High Severity | 29 |
| Critical Severity | 11 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 85 |
| Cross-Site Request Forgery (CSRF) | 33 |
| Missing Authorization | 20 |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 11 |
| Exposure of Sensitive Information to an Unauthorized Actor | 8 |
| Deserialization of Untrusted Data | 7 |
| Server-Side Request Forgery (SSRF) | 5 |
| Authentication Bypass Using an Alternate Path or Channel | 4 |
| Improper Control of Generation of Code ('Code Injection') | 4 |
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 3 |
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 3 |
| Improper Privilege Management | 3 |
| Unverified Password Change | 2 |
| Authorization Bypass Through User-Controlled Key | 1 |
| Exposure of Private Personal Information to an Unauthorized Actor | 1 |
| External Control of File Name or Path | 1 |
| Guessable CAPTCHA | 1 |
| Improper Access Control | 1 |
| Improper Input Validation | 1 |
| Incorrect Privilege Assignment | 1 |
| Unrestricted Upload of File with Dangerous Type | 1 |
| Weak Password Recovery Mechanism for Forgotten Password | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 15 | |
| 10 | |
| 9 | |
| 9 | |
| 8 | |
| 8 | |
| 7 | |
| 7 | |
| 7 | |
| 6 | |
| 6 | |
| 6 | |
| 5 | |
| 5 | |
| 4 | |
| 4 | |
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Academist Membership | academist-membership |
| Add Linked Images To Gallery | add-linked-images-to-gallery-v01 |
| ADFO – Custom data in admin dashboard | admin-form |
| Admin Menu Manager | admin-menu-manager |
| Advanced AJAX Product Filters | woocommerce-ajax-filters |
| Advanced Google reCAPTCHA | advanced-google-recaptcha |
| Album Gallery for Photo & Video | new-album-gallery |
| All-In-One Cufon | all-in-one-cufon |
| Alloggio Membership | alloggio-membership |
| Animated Text Block – Add Typing and Looping Text Effects | animated-text-block |
| Archive Page | archive-page |
| Authors List | authors-list |
| Auto Ad Inserter – Increase Google Adsense and Ad Manager Revenue | revenueflex-easy-ads |
| Auto Tag Links | auto-tag-links |
| Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots | bp-better-messages |
| Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop | woo-altcoin-payment-gateway |
| Blighty Explorer | blighty-explorer |
| Booking Calendar and Notification | booking-calendar-and-notification |
| Booknetic | booknetic |
| Bravo Search & Replace | bravo-search-and-replace |
| BuddyBoss Platform | buddyboss-platform |
| BuddyHolis TableSearch | tablesearch |
| BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages | wc4bp |
| Bulk Content Creator | bulk-content-creator |
| Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More | calculated-fields-form |
| Card Elements for Elementor | card-elements-for-elementor |
| Classified Listing – AI-Powered Classified ads & Business Directory | classified-listing |
| Clicface Trombi | clicface-trombi |
| Contact Form 7 Star Rating | contact-form-7-star-rating |
| Contact Form 7 Star Rating with font Awesome | contact-form-7-star-rating-with-font-awersome |
| Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | contest-gallery |
| Counter Box – Add Countdowns, Timers & Dynamic Counters to WordPress | counter-box |
| Currency Switcher for WooCommerce | currency-switcher-woocommerce |
| Database Backup and Table Integrity Check with Automated Scheduling | database-backup |
| Debug-Bar-Extender | debug-bar-extender |
| DefendWP Firewall | defend-wp-firewall |
| DHVC Form | dhvc-form |
| Direct Checkout Button for WooCommerce | woo-direct-checkout-button |
| Directorist: AI-Powered Business Directory, Listings & Classified Ads | directorist |
| Download HTML TinyMCE Button | download-html-tinymce-button |
| eaSYNC Booking – Hotels, Restaurants & Car Rentals | easync-booking |
| Edd Google Sheet Connector Pro | edd-google-sheet-connector-pro |
| Elementor Website Builder – more than just a page builder | elementor |
| Email Deliverability – SMTP Replacement, Email API Deliverability & Email Log | site-mailer |
| Erima Zarinpal Donate | erima-zarinpal-donate |
| Events Manager – Calendar, Bookings, Tickets, and more! | events-manager |
| Exclusive Addons for Elementor | exclusive-addons-for-elementor |
| Exertio Framework | exertio-framework |
| EZ InLinkz linkup | inlinkz-scripter |
| F12 Profiler | f12-profiler |
| Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty | chaty |
| Fluent Support – Helpdesk & Customer Support Ticket System | fluent-support |
| Forex Calculators | fx-calculators |
| Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | form-maker |
| Forminator Forms – Contact Form, Payment Form & Custom Form Builder | forminator |
| Fresh Framework | fresh-framework |
| FS Poster - WordPress Social media Auto Poster & Scheduler [Facebook, Instagram, Twitter, Pinterest] | fs-poster |
| GenerateBlocks | generateblocks |
| Get Posts | nurelm-get-posts |
| Google Maps for WordPress | google-maps-for-wordpress |
| GSheetConnector for Easy Digital Downloads | gsheetconnector-easy-digital-downloads |
| Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | essential-blocks |
| Hover Image Button | hover-image-button |
| Hubbub Lite – Fast, free social sharing and follow buttons | social-pug |
| Ibtana – WordPress Website Builder | ibtana-visual-editor |
| Image Photo Gallery Final Tiles Grid | final-tiles-grid-gallery-lite |
| IP2Location Redirection | ip2location-redirection |
| Iptanus File Upload | wp-file-upload |
| Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | jeg-elementor-kit |
| JPG, PNG Compression and Optimization | wp-image-compression |
| Just Variables | just-wp-variables |
| Kadence Blocks — Page Builder Toolkit for Gutenberg Editor | kadence-blocks |
| KiviCare – Clinic & Patient Management System (EHR) | kivicare-clinic-management-system |
| Link My Posts | linkmyposts |
| List Related Attachments | list-related-attachments-widget |
| Live Streaming Video Player – by SRS Player | srs-player |
| Local Search SEO Contact Page | local-search-seo-contact-page |
| Login Me Now – Passwordless, Magic Link, OTP & Social Login for WordPress | login-me-now |
| mEintopf | meintopf |
| Melapress File Monitor | website-file-changes-monitor |
| MemberSpace – Sell community access, content, online courses, memberships and paid subscriptions | memberspace |
| Minimum Password Strength | minimum-password-strength |
| MK Google Directions | google-distance-calculator |
| Modal Portfolio | modal-portfolio |
| Multilevel Referral Plugin for WooCommerce | multilevel-referral-plugin-for-woocommerce |
| My Quota | my-quota |
| Namaste! LMS | namaste-lms |
| Nested Pages | wp-nested-pages |
| NextMove Lite – Thank You Page for WooCommerce | woo-thank-you-page-nextmove-lite |
| NHR Advanced Options Table Manager & Autoload Optimizer | nhrrob-options-table-manager |
| Ninja Pages | ninja-page-categories-and-tags |
| Ohio Extra | ohio-extra |
| OneStore Sites | onestore-sites |
| Order Attachments for WooCommerce | order-attachments-for-woocommerce |
| Page Builder by SiteOrigin | siteorigin-panels |
| Passbeemedia Web Push Notification | passbeemedia-web-push-notifications |
| Pathomation | pathomation |
| Phee's LinkPreview | linkpreview |
| Photo Gallery ( Responsive ) | photo-gallery-pearlbells |
| Photo Gallery by 10Web – Mobile-Friendly Image Gallery | photo-gallery |
| Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel | foogallery |
| PickPlugins Pricing Table | pricingtable |
| Pie Register Premium | pie-register-premium |
| PiwigoPress | piwigopress |
| PixelYourSite – Your smart PIXEL (TAG) & API Manager | pixelyoursite |
| PlayerJS – Free Custom HTML5 Video and Audio Player Builder | playerjs |
| Pods – Custom Content Types and Fields | pods |
| Post Grid | post-grid |
| PowerPress Podcasting plugin by Blubrry | powerpress |
| Pre Order Addon for WooCommerce – Advance Order/Backorder Plugin | wc-pre-order |
| Private Content | private-content |
| Product Catalog Simple | post-type-x |
| Profile Widget Ninja | profile-widget-ninja |
| Quiz Organizer | quiz-organizer |
| Quotes llama | quotes-llama |
| Random Image Selector | random-image-selector |
| RateMyAgent Official | ratemyagent-official |
| RAYS Grid | rays-grid |
| Reactive Mortgage Calculator | reactive-mortgage-calculator |
| School Management System – SakolaWP | sakolawp-lite |
| SecuPress with Simple SSL – Simple and Performant Security | secupress |
| Secure Copy Content Protection and Content Locking | secure-copy-content-protection |
| SetSail Membership | setsail-membership |
| Simple Download Counter | simple-download-counter |
| Simple Google Sitemap | simple-google-sitemap |
| Simple:Press Forum | simplepress |
| Sina Extension for Elementor | sina-extension-for-elementor |
| Site Reviews | site-reviews |
| SKU Generator for WooCommerce | sku-for-woocommerce |
| Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider | ml-slider |
| Smart Maintenance & Countdown | smart-maintenance-countdown |
| SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery | sms-alert |
| Social Share And Social Locker – ARSocial | social-share-and-social-locker-arsocial |
| Social Slider Feed – Social Media Feed & Gallery Widgets | instagram-slider-widget |
| SpotBot | spotbot |
| Sticky Header On Scroll | sticky-header-on-scroll |
| Subscriptions & Memberships for PayPal | subscriptions-memberships-for-paypal |
| SureMembers | suremembers |
| SurveyJS: Drag & Drop Form Builder | surveyjs |
| SVG Support | svg-support |
| Table of Contents Block | table-of-contents |
| Tabs for WooCommerce | wc-tabs |
| TemplatesNext ToolKit | templatesnext-toolkit |
| Templines Elementor Helper Core | templines-helper-core |
| The Ark | WordPress Theme made for Freelancers | ark-core |
| ThemeMakers PayPal Express Checkout | tmm_paypal_checkout |
| ThemeMakers Stripe Checkout | tmm_stripe_checkout |
| Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid | boldgrid-backup |
| Ultra Addons Lite for Elementor | ut-elementor-addons-lite |
| URL Media Uploader | url-media-uploader |
| User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder | user-registration |
| VG PostCarousel | vg-postcarousel |
| Video.js HLS Player | videojs-hls-player |
| ViperBar | viperbar |
| WHMCS Client Area for WordPress by WHMpress | WHMpress_Client_Area_Api |
| WHMpress - WHMCS WordPress Integration Plugin | whmpress |
| WooCommerce Display Products by Tags | woocommerce-display-products-by-tags |
| WooCommerce Recargo de Equivalencia | woo-recargo-de-equivalencia |
| WooCommerce Ultimate Gift Card | woocommerce-ultimate-gift-card |
| Woocommerce – Loi Hamon | loi-hamon |
| WOW Entrance Effects (WEE!) | wow-entrance-effects-wee |
| WP About Author | wp-about-author |
| WP Activity Log | wp-security-audit-log |
| WP AntiDDOS | wpantiddos |
| WP Discord Post | wp-discord-post |
| WP Posts Carousel | wp-posts-carousel |
| WP Sitemap | wp-sitemap |
| Wp Social Login and Register Social Counter | wp-social |
| WP Social SEO Booster – Knowledge Graph Social Signals SEO | wp-social-seo-booster |
| WP tarteaucitron.js Self Hosted | wp-tarteaucitron-js-self-hosted |
| WP Video Posts | wp-video-posts |
| WP-Asambleas | wp-asambleas |
| WP-PManager | wp-programmmanager |
| WP-PostRatings Cheater | wp-postratings-cheater |
| wpForo Forum | wpforo |
| Yawave | yawave |
| Önceki Yazı Link | onceki-yazi-linki |
| ć— č§…ç›¸ĺ…łć–‡ç« ćŹ’ä»¶ | wumii-related-posts |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Bricks | bricks |
| Car Dealer Automotive WordPress Theme – Responsive | cardealer |
| Education Center | LMS & Online Courses WordPress Theme | education |
| Enfold - Responsive Multi-Purpose Theme | enfold |
| Nokri – Job Board WordPress Theme | nokri |
| Travel Booking WordPress Theme | traveler |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
Affected Software
Academist Membership [academist-membership]
Researcher
Affected Software
Alloggio Membership [alloggio-membership]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Fresh Framework [fresh-framework]
Researcher
Affected Software
Researcher
Affected Software
Private Content [private-content]
Researcher
Affected Software
SetSail Membership [setsail-membership]
Researcher
Affected Software
Researcher
Affected Software
WooCommerce Ultimate Gift Card [woocommerce-ultimate-gift-card]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
SurveyJS: Drag & Drop Form Builder [surveyjs]
Researcher
Affected Software
Templines Elementor Helper Core [templines-helper-core]
Researcher
Affected Software
Travel Booking WordPress Theme [traveler]
Researcher
Affected Software
VG PostCarousel [vg-postcarousel]
Researcher
WHMPress - WHMCS Client Area <= 4.3-revision-3- Authenticated (Subscriber+) Arbitrary Options Update
8.8
Affected Software
WHMCS Client Area for WordPress by WHMpress [WHMpress_Client_Area_Api]
Researcher
Affected Software
WP Video Posts [wp-video-posts]
Researcher
Affected Software
Researcher
Affected Software
Exertio Framework [exertio-framework]
Researcher
Affected Software
Researcher
Affected Software
PixelYourSite – Your smart PIXEL (TAG) & API Manager [pixelyoursite]
Researcher
Affected Software
Researcher
Affected Software
Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots [bp-better-messages]
Researcher
Affected Software
Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop [woo-altcoin-payment-gateway]
Researcher
Affected Software
Fluent Support – Helpdesk & Customer Support Ticket System [fluent-support]
Researcher
Affected Software
Researcher
Affected Software
Yawave [yawave]
Researcher
Affected Software
WP-Asambleas [wp-asambleas]
Researcher
Affected Software
ADFO – Custom data in admin dashboard [admin-form]
Researcher
Affected Software
Album Gallery for Photo & Video [new-album-gallery]
Researcher
Affected Software
Database Backup and Table Integrity Check with Automated Scheduling [database-backup]
Researcher
Affected Software
Database Backup and Table Integrity Check with Automated Scheduling [database-backup]
Researcher
Affected Software
NHR Advanced Options Table Manager & Autoload Optimizer [nhrrob-options-table-manager]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Tabs for WooCommerce [wc-tabs]
Researcher
Bricksbuilder <= 1.9.6.1 - Authenticated (Contributor+) Privilege Escalation via create_autosave
7.1
Affected Software
WP Activity Log [wp-security-audit-log]
Researcher
Affected Software
Authors List [authors-list]
Researcher
Affected Software
Booking Calendar and Notification [booking-calendar-and-notification]
Researchers
Affected Software
Fresh Framework [fresh-framework]
Researcher
Affected Software
KiviCare – Clinic & Patient Management System (EHR) [kivicare-clinic-management-system]
Researcher
Affected Software
Multilevel Referral Plugin for WooCommerce [multilevel-referral-plugin-for-woocommerce]
Researcher
Affected Software
Ohio Extra [ohio-extra]
Researcher
Affected Software
Private Content [private-content]
Researcher
Affected Software
Simple Download Counter [simple-download-counter]
Researcher
Affected Software
WP Sitemap [wp-sitemap]
Researcher
Affected Software
wpForo Forum [wpforo]
Researcher
Affected Software
Archive Page [archive-page]
Researcher
Affected Software
BuddyBoss Platform [buddyboss-platform]
Researcher
Affected Software
BuddyHolis TableSearch [tablesearch]
Researcher
Affected Software
Card Elements for Elementor [card-elements-for-elementor]
Researcher
Clicface Trombi <= 2.08 - Authenticated (Contributor+) Stored Cross-Site Scripting via nom Parameter
6.4
Affected Software
Clicface Trombi [clicface-trombi]
Researcher
Affected Software
Direct Checkout Button for WooCommerce [woo-direct-checkout-button]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks]
Researcher
Affected Software
Exclusive Addons for Elementor [exclusive-addons-for-elementor]
Researcher
Affected Software
EZ InLinkz linkup [inlinkz-scripter]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Get Posts [nurelm-get-posts]
Researcher
Affected Software
Google Maps for WordPress [google-maps-for-wordpress]
Researcher
Affected Software
Kadence Blocks — Page Builder Toolkit for Gutenberg Editor [kadence-blocks]
Researcher
Affected Software
Hover Image Button [hover-image-button]
Researcher
Affected Software
Ibtana – WordPress Website Builder [ibtana-visual-editor]
Researcher
Affected Software
Image Photo Gallery Final Tiles Grid [final-tiles-grid-gallery-lite]
Researcher
Affected Software
List Related Attachments [list-related-attachments-widget]
Researcher
Affected Software
Live Streaming Video Player – by SRS Player [srs-player]
Researcher
Local Search SEO Contact Page <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Local Search SEO Contact Page [local-search-seo-contact-page]
Researcher
Affected Software
MK Google Directions [google-distance-calculator]
Researcher
Affected Software
Page Builder by SiteOrigin [siteorigin-panels]
Researcher
Affected Software
Pathomation [pathomation]
Researcher
Affected Software
PiwigoPress [piwigopress]
Researcher
Affected Software
Researcher
Affected Software
PowerPress Podcasting plugin by Blubrry [powerpress]
Researcher
Pricing Table by PickPlugins <= 1.12.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
PickPlugins Pricing Table [pricingtable]
Researcher
Affected Software
Product Catalog Simple [post-type-x]
Researcher
Affected Software
Profile Widget Ninja [profile-widget-ninja]
Researcher
Affected Software
Quotes llama [quotes-llama]
Researcher
Affected Software
Reactive Mortgage Calculator [reactive-mortgage-calculator]
Researcher
Affected Software
Researcher
Affected Software
Sina Extension for Elementor [sina-extension-for-elementor]
Researcher
Affected Software
Table of Contents Block [table-of-contents]
Researcher
Affected Software
TemplatesNext ToolKit [templatesnext-toolkit]
Researcher
Affected Software
ThemeMakers PayPal Express Checkout [tmm_paypal_checkout]
Researcher
Affected Software
ThemeMakers Stripe Checkout [tmm_stripe_checkout]
Researcher
URL Media Uploader <= 1.0.0 - Authenticated (Author+) Server-Side Request Forgery via DNS Rebinding
6.4
Affected Software
URL Media Uploader [url-media-uploader]
Researcher
Affected Software
Video.js HLS Player [videojs-hls-player]
Researcher
Affected Software
WooCommerce Display Products by Tags [woocommerce-display-products-by-tags]
Researcher
Affected Software
WOW Entrance Effects (WEE!) [wow-entrance-effects-wee]
Researcher
Affected Software
WP About Author [wp-about-author]
Researcher
Affected Software
WP Posts Carousel [wp-posts-carousel]
Researcher
Affected Software
WP Social SEO Booster – Knowledge Graph Social Signals SEO [wp-social-seo-booster]
Researcher
Affected Software
Add Linked Images To Gallery [add-linked-images-to-gallery-v01]
Researcher
Affected Software
Advanced AJAX Product Filters [woocommerce-ajax-filters]
Researcher
Affected Software
Blighty Explorer [blighty-explorer]
Researcher
Affected Software
Currency Switcher for WooCommerce [currency-switcher-woocommerce]
Researcher
Affected Software
Debug-Bar-Extender [debug-bar-extender]
Researcher
Affected Software
Download HTML TinyMCE Button [download-html-tinymce-button]
Researcher
Affected Software
Researcher
Affected Software
eaSYNC Booking – Hotels, Restaurants & Car Rentals [easync-booking]
Researcher
Affected Software
Just Variables [just-wp-variables]
Researcher
Affected Software
Link My Posts [linkmyposts]
Researcher
Affected Software
mEintopf [meintopf]
Researcher
Affected Software
Researcher
Affected Software
My Quota [my-quota]
Researcher
Affected Software
Passbeemedia Web Push Notification [passbeemedia-web-push-notifications]
Researcher
Affected Software
Researcher
Affected Software
Private Content [private-content]
Researcher
Affected Software
Random Image Selector [random-image-selector]
Researcher
Affected Software
Site Reviews [site-reviews]
Researcher
Affected Software
SKU Generator for WooCommerce [sku-for-woocommerce]
Researcher
Smart Maintenance & Countdown <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
Affected Software
Smart Maintenance & Countdown [smart-maintenance-countdown]
Researcher
Affected Software
SpotBot [spotbot]
Researcher
Affected Software
Researcher
Affected Software
ViperBar [viperbar]
Researcher
Affected Software
Woocommerce – Loi Hamon [loi-hamon]
Researcher
Affected Software
WP AntiDDOS [wpantiddos]
Researcher
Affected Software
WP Discord Post [wp-discord-post]
Researcher
Affected Software
WP-PManager [wp-programmmanager]
Researcher
Affected Software
ć— č§…ç›¸ĺ…łć–‡ç« ćŹ’ä»¶ [wumii-related-posts]
Researcher
Affected Software
Order Attachments for WooCommerce [order-attachments-for-woocommerce]
Researcher
Affected Software
Modal Portfolio [modal-portfolio]
Researchers
Affected Software
Researcher
Affected Software
Private Content [private-content]
Researcher
Affected Software
Advanced Google reCAPTCHA [advanced-google-recaptcha]
Researcher
Affected Software
Classified Listing – AI-Powered Classified ads & Business Directory [classified-listing]
Researcher
Enfold <= 6.0.9 - Missing Authorization to Sensitive Information Disclosure in avia-export-class.php
5.3
Affected Software
Researcher
Affected Software
Events Manager – Calendar, Bookings, Tickets, and more! [events-manager]
Researcher
Affected Software
IP2Location Redirection [ip2location-redirection]
Researcher
Affected Software
OneStore Sites [onestore-sites]
Researcher
Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.6 - Unauthenticated User Information Exposure
5.3
Affected Software
Post Grid [post-grid]
Researcher
Affected Software
Secure Copy Content Protection and Content Locking [secure-copy-content-protection]
Researcher
Affected Software
SureMembers [suremembers]
Researcher
Affected Software
Bravo Search & Replace [bravo-search-and-replace]
Researcher
Affected Software
Melapress File Monitor [website-file-changes-monitor]
Researcher
Affected Software
Melapress File Monitor [website-file-changes-monitor]
Researcher
Affected Software
Researcher
Affected Software
Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots [bp-better-messages]
Researcher
Affected Software
Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More [calculated-fields-form]
Researcher
Affected Software
Contact Form 7 Star Rating [contact-form-7-star-rating]
Researcher
Affected Software
Contact Form 7 Star Rating with font Awesome [contact-form-7-star-rating-with-font-awersome]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Nested Pages [wp-nested-pages]
Researcher
Affected Software
Ninja Pages [ninja-page-categories-and-tags]
Researcher
Affected Software
Photo Gallery by 10Web – Mobile-Friendly Image Gallery [photo-gallery]
Researcher
Affected Software
Researcher
Affected Software
Quiz Organizer [quiz-organizer]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Social Share And Social Locker – ARSocial [social-share-and-social-locker-arsocial]
Researcher
Affected Software
Social Slider Feed – Social Media Feed & Gallery Widgets [instagram-slider-widget]
Researcher
Affected Software
Admin Menu Manager [admin-menu-manager]
Researcher
Affected Software
All-In-One Cufon [all-in-one-cufon]
Researcher
Affected Software
Animated Text Block – Add Typing and Looping Text Effects [animated-text-block]
Researcher
Affected Software
Auto Tag Links [auto-tag-links]
Researcher
Affected Software
Booknetic [booknetic]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Bulk Content Creator [bulk-content-creator]
Researcher
Affected Software
DefendWP Firewall [defend-wp-firewall]
Researcher
Affected Software
Edd Google Sheet Connector Pro [edd-google-sheet-connector-pro]
GSheetConnector for Easy Digital Downloads [gsheetconnector-easy-digital-downloads]
Researcher
Affected Software
Erima Zarinpal Donate [erima-zarinpal-donate]
Researcher
Affected Software
F12 Profiler [f12-profiler]
Researcher
Forex Calculators <= 1.3.7 - Missing Authorization to Authenticated (Subscriber+) Settings Update
4.3
Affected Software
Forex Calculators [fx-calculators]
Researcher
Affected Software
GenerateBlocks [generateblocks]
Researcher
Affected Software
Researcher
Affected Software
JPG, PNG Compression and Optimization [wp-image-compression]
Researcher
Affected Software
Minimum Password Strength [minimum-password-strength]
Researcher
Affected Software
Namaste! LMS [namaste-lms]
Researcher
Affected Software
NextMove Lite – Thank You Page for WooCommerce [woo-thank-you-page-nextmove-lite]
Researcher
Affected Software
Önceki Yazı Link [onceki-yazi-linki]
Researcher
Affected Software
Phee's LinkPreview [linkpreview]
Researcher
Affected Software
Photo Gallery ( Responsive ) [photo-gallery-pearlbells]
Researcher
Affected Software
Pie Register Premium [pie-register-premium]
Researcher
Affected Software
Pie Register Premium [pie-register-premium]
Researcher
Affected Software
RateMyAgent Official [ratemyagent-official]
Researcher
Affected Software
RAYS Grid [rays-grid]
Researcher
Affected Software
School Management System – SakolaWP [sakolawp-lite]
Researcher
Affected Software
Simple Google Sitemap [simple-google-sitemap]
Researcher
Affected Software
Simple:Press Forum [simplepress]
Researcher
Affected Software
Sticky Header On Scroll [sticky-header-on-scroll]
Researcher
Affected Software
Subscriptions & Memberships for PayPal [subscriptions-memberships-for-paypal]
Researcher
Ultra Addons Lite for Elementor <= 1.1.8 - Authenticated (Contributor+) Restricted Post Disclosure
4.3
Affected Software
Ultra Addons Lite for Elementor [ut-elementor-addons-lite]
Researcher
Affected Software
WooCommerce Recargo de Equivalencia [woo-recargo-de-equivalencia]
Researcher
Affected Software
Iptanus File Upload [wp-file-upload]
Researcher
Wp Social Login and Register Social Counter <= 3.1.0 - Cross-Site Request Forgery to Settings Update
4.3
Affected Software
Wp Social Login and Register Social Counter [wp-social]
Researcher
Affected Software
WP-PostRatings Cheater [wp-postratings-cheater]
Researcher
Affected Software
Auto Ad Inserter – Increase Google Adsense and Ad Manager Revenue [revenueflex-easy-ads]
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Comments