Wordfence Intelligence Weekly WordPress Vulnerability Report (March 24, 2025 to March 30, 2025)
📢 Did you know Wordfence runs a Bug Bounty Program for all WordPress plugins and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we handle all the rest.
Last week, there were 418 vulnerabilities disclosed in 364 WordPress Plugins and 16 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 74 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to implement layered security, aligning with our overarching mission to secure WordPress with defense in depth strategies. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 24,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
New Firewall Rules Deployed Last Week
The Wordfence Threat Intelligence Team reviews each vulnerability to determine impact and severity, along with assessing the likelihood of exploitation, to verify that the Wordfence Firewall provides sufficient protection.
The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our Premium, Care, and Response customers last week:
- User Registration & Membership <= 4.1.1 – Unauthenticated Privilege Escalation
- User Registration & Membership <= 4.1.2 – Authentication Bypass
- WAF-RULE-817 – Data redacted while we work with the vendor on a patch.
Wordfence Premium, Care, and Response customers received this protection immediately, while users still running the free version of Wordfence will receive this enhanced protection after a 30 day delay.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 255 |
| Unpatched | 163 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Low Severity | 2 |
| Medium Severity | 346 |
| High Severity | 53 |
| Critical Severity | 17 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 175 |
| Cross-Site Request Forgery (CSRF) | 91 |
| Missing Authorization | 47 |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 32 |
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 21 |
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 11 |
| Deserialization of Untrusted Data | 10 |
| Exposure of Sensitive Information to an Unauthorized Actor | 5 |
| Server-Side Request Forgery (SSRF) | 5 |
| URL Redirection to Untrusted Site ('Open Redirect') | 5 |
| Improper Control of Generation of Code ('Code Injection') | 4 |
| Improper Input Validation | 2 |
| Improper Privilege Management | 2 |
| Uncontrolled Resource Consumption | 2 |
| Unrestricted Upload of File with Dangerous Type | 2 |
| Authorization Bypass Through User-Controlled Key | 1 |
| External Control of File Name or Path | 1 |
| Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | 1 |
| Relative Path Traversal | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 55 | |
| 30 | |
| 24 | |
| 23 | |
| 21 | |
| 20 | |
| 20 | |
| 19 | |
| 18 | |
| 15 | |
| 13 | |
| 11 | |
| 10 | |
| 9 | |
| 8 | |
| 7 | |
| 7 | |
| 5 | |
| 5 | |
| 5 | |
| 5 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| 3DPrint Lite | 3dprint-lite |
| About Author | about-author |
| Accounting for WooCommerce | accounting-for-woocommerce |
| Active Products Tables for WooCommerce. Use constructor to create tables | profit-products-tables-for-woocommerce |
| Administrator Z | administrator-z |
| AdSense Privacy Policy | adsense-privacy-policy |
| Advanced Dewplayer | advanced-dewplayer |
| Advanced Google reCAPTCHA | advanced-google-recaptcha |
| Advanced iFrame | advanced-iframe |
| Advanced Post Search | advanced-post-search |
| Advanced Woo Search – Product Search for WooCommerce | advanced-woo-search |
| AEC Kiosque | aec-kiosque |
| AI Preloader | ai-preloader |
| Alert Box Block | alert-box-block |
| AliExpress Dropshipping Plugin for WooCommerce Stores | ali2woo-lite |
| AlphaOmega Captcha & Anti-Spam Filter | alphaomega-captcha-anti-spam |
| Amazing service box Addons For WPBakery Page Builder (formerly Visual Composer) | amazing-service-box-visual-composer-addons |
| ANAC XML Render | anac-xml-render |
| Analytify – Google Analytics Dashboard For WordPress (GA4 analytics tracking) | wp-analytify |
| Anthologize | anthologize |
| APPExperts – Mobile App Builder for WordPress | WooCommerce to iOS and Android Apps | appexperts |
| Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress | latepoint |
| ARPrice - WordPress Pricing Table Plugin | arprice |
| Arrow Maps – Custom Maps for WordPress | ap-google-maps |
| Audio Album | audio-album |
| AvaiBook vacation rental booking engine | avaibook |
| Awesome Logos | awesome-logos |
| Ayyash Studio — The kick-start kit | ayyash-studio |
| banner-manager | banner-manager |
| Beautiful Link Preview | beautiful-link-preview |
| Better Section Navigation | better-section-navigation |
| Better WishList API | better-wlm-api |
| Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder | bit-form |
| Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation | bit-integrations |
| BizCalendar Web | bizcalendar-web |
| Blue Captcha | blue-captcha |
| BMo Expo – a WordPress and NextGEN Gallery plugin | bmo-expo |
| Breezing Forms | breezing-forms |
| Browser Address Bar Color | browser-address-bar-color |
| Browser Caching with .htaccess | browser-caching-with-htaccess |
| Buttonizer – Social Media Share Buttons, Social Icons, & Social Feeds | facebook-pagelike-widget |
| BWL Advanced FAQ Manager | bwl-advanced-faq-manager |
| Cackle | cackle |
| CallPhone'r | callphoner |
| Cart tracking for WooCommerce | cart-tracking-for-woocommerce |
| CAS Maestro | cas-maestro |
| Cazamba | cazamba |
| Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More | charitable |
| Chartify – WordPress Chart Plugin | chart-builder |
| Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist | bit-assist |
| Chatbox Manager | wa-chatbox-manager |
| Checkout Mestres do WP for WooCommerce | checkout-mestres-wp |
| Christmas Panda | christmas-panda |
| Clear Sucuri Cache | clear-sucuri-cache |
| Clearout Email Validator – Real-Time Email Verification on WordPress Forms | clearout-email-validator |
| Clink – WordPress Link Manager | clink |
| CM Download Manager – Organize, Protect & Share Files in WordPress | cm-download-manager |
| Comment Approved Notifier Extended | comment-approved-notifier-extended |
| Contact Form 7 Material Design | cf7-material-design |
| Contact Form, Drag and Drop Form Builder Plugin – Live Forms | liveforms |
| Conversios: Google Analytics (GA4), Google Ads, Conversion and Analytics Tracking for Multi-Channels | enhanced-e-commerce-for-woocommerce-store |
| Cool Author Box – For Widget and Post Content | hm-cool-author-box-widget |
| CopyLink | copy-link |
| Cost Calculator Builder | cost-calculator-builder |
| Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates | cozy-addons |
| CRM and Lead Management by vcita | crm-customer-relationship-management-by-vcita |
| cTabs | ctabs |
| Currency Switcher for WooCommerce | currency-switcher-for-woocommerce |
| Custom Field For WP Job Manager | custom-field-for-wp-job-manager |
| Custom Fields Account Registration For Woocommerce | custom-fields-account-registration-for-woocommerce |
| Custom Login Logo | ideal-wp-login-logo-changer |
| Custom Product Stickers for Woocommerce | custom-product-stickers-for-woocommerce |
| Custom Script Integration | custom-script-integration |
| DAP to Autoresponders Email Syncing | dap-to-autoresponders-daar |
| DEPRECATED – Shipmondo – A complete shipping solution for WooCommerce | pakkelabels-for-woocommerce |
| DesignThemes Core Features | designthemes-core-features |
| DICOM Support | dicom-support |
| Digital License Manager | digital-license-manager |
| Directorist: AI-Powered Business Directory, Listings & Classified Ads | directorist |
| Doneren met Mollie | doneren-met-mollie |
| Dr. Flex | dr-flex |
| Drag and Drop Multiple File Upload for Contact Form 7 | drag-and-drop-multiple-file-upload-contact-form-7 |
| Driving Directions | ddirections |
| Dropdown multisite selector | dropdown-multisite-selector |
| Duplicate Page and Post | duplicate-post-and-page |
| Dynamic Team Manager – Team Member Showcase with grid, slider, table Elementor widget & shortcode | wp-team-manager |
| E-cab Taxi Booking Manager for Woocommerce | ecab-taxi-booking-manager |
| Easy 301 Redirects | odihost-easy-redirect-301 |
| Easy Digital Downloads – eCommerce Payments and Subscriptions made easy | easy-digital-downloads |
| Easy Page Transition | easy-page-transition |
| ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor | elementskit-lite |
| Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress | email-subscribers |
| EO4WP: EmailOctopus for WordPress | fw-integration-for-emailoctopus |
| ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce | erp |
| Essential Real Estate | essential-real-estate |
| Estatebud – Properties & Listings | estatebud-properties-listings |
| Event Booking Manager for WooCommerce – Registration, RSVP, Calendar & Tickets | mage-eventpress |
| Event Post | event-post |
| Event Tickets and Registration | event-tickets |
| Exchange Rates | exchange-rates |
| Export All Posts, Products, Orders & Users | WP Ultimate Exporter | WordPress CSV Export | wp-ultimate-exporter |
| External image replace | external-image-replace |
| EZ SQL Reports Shortcode Widget and DB Backup | elisqlreports |
| Five Star Restaurant Reservations – WordPress Booking Plugin | restaurant-reservations |
| Fiverr.com Official Search Box | fiverr-official-search-box |
| Fix Rss Feeds | fix-rss-feed |
| Flatty – Flat Admin Theme | flatty-flat-admin-theme |
| Flexible Cookies | flexible-cookies |
| FlexStock – Product Stock Sync with Google Sheets for WooCommerce | stock-sync-with-google-sheet-for-woocommerce |
| Flickr set slideshows | flickr-set-slideshows |
| Flipdish Ordering System | flipdish-ordering-system |
| Float menu – awesome floating side menu | float-menu |
| Football Pool | football-pool |
| Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | form-maker |
| FormLift for Keap (Legacy) Web Forms | formlift |
| Frndzk Expandable Bottom Bar | frndzk-expandable-bottom-bar |
| FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce | wp-marketing-automations |
| Gallery for Social Photo | feed-instagram-lite |
| Generate Post Thumbnails | generate-post-thumbnails |
| GEO Plugin by Squirrly SEO | squirrly-seo |
| Gift Message for WooCommerce | gift-message-for-woocommerce |
| Google Font Fix | google-font-fix |
| GP Back To Top | gp-back-to-top |
| Greek Multi Tool – Greeklish Slugs, Permalinks & Transliteration | greek-multi-tool |
| Greenshift – animation and page builder blocks | greenshift-animation-and-page-builder-blocks |
| Gum Addon for Elementor | gum-elementor-addon |
| Hacklog Remote Image Autosave | hacklog-remote-image-autosave |
| Happy Addons for Elementor | happy-elementor-addons |
| Hesabfa Accounting | hesabfa-accounting |
| Hostel | hostel |
| Houzez Property Feed | houzez-property-feed |
| IG Shortcodes | ig-shortcodes |
| Image Captcha | image-captcha |
| Image Wall | image-wall |
| Include URL | include-url |
| include-file | include-file |
| Info Boxes Shortcode and Widget | info-boxes-shortcode-and-widget |
| Inline Image Upload for BBPress | image-upload-for-bbpress |
| InstaWP Connect – 1-click WP Staging & Migration | instawp-connect |
| Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms | integration-for-contact-form-7-and-google-sheets |
| Integrator for Turnstile and reCAPTCHA. | recaptcha-for-all |
| IP Locator | ip-locator |
| issuupress | issuupress |
| jAlbum Bridge | jalbum-bridge |
| JetBlocks for Elementor | jet-blocks |
| JetProductGallery | jet-woo-product-gallery |
| JetSearch | jet-search |
| JetSmartFilters | jet-smart-filters |
| JetWooBuilder | jet-woo-builder |
| Job Colors for WP Job Manager | wp-job-manager-colors |
| Job Postings | job-postings |
| jQuery Dropdown Menu | jquery-drop-down-menu-plugin |
| JS Help Desk – AI-Powered Support & Ticketing System | js-support-ticket |
| Just Writing Statistics | just-writing-statistics |
| Kento WordPress Stats | kento-wp-stats |
| Key4ce osTicket Bridge | key4ce-osticket-bridge |
| King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder | king-addons |
| KK I Like It | kk-i-like-it |
| Kubio AI Page Builder | kubio |
| Kustom Checkout for WooCommerce | klarna-checkout-for-woocommerce |
| Lead Form Data Collection to CRM | wp-leads-builder-any-crm |
| LeadConnector | leadconnector |
| Leaky Paywall | leaky-paywall |
| LearnPress – WordPress LMS Plugin for Create and Sell Online Courses | learnpress |
| LH OGP Meta | lh-ogp-meta-tags |
| Lightview Plus | lightview-plus |
| Listamester | listamester |
| Login Alert | login-alert |
| Login Redirect | login-redirect |
| Login Widget for Ultimate Member | login-widget-for-ultimate-member |
| LWS SMS | lws-sms |
| Magic Embeds | wp-embed-facebook |
| Map Contact | map-contact |
| MapPress Maps for WordPress | mappress-google-maps-for-wordpress |
| Material Dashboard | material-dashboard |
| MDJM Event Management | mobile-dj-manager |
| MediaView | mediaview |
| Menu Duplicator | copy-menu |
| Message ticker | message-ticker |
| MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor | metform |
| Microblog Poster – Auto Publish on Social Media | microblog-poster |
| MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet | paid-membership |
| Mobile Navigation | mobile-navigation |
| MoreConvert Wishlist for WooCommerce | smart-wishlist-for-more-convert |
| Multiple Shipping And Billing Address For WooCommerce | different-shipping-and-billing-address-for-woocommerce |
| Music Press Pro | music-press-pro |
| My Bootstrap Menu | my-bootstrap-menu |
| My Default Post Content | my-default-post-content |
| N-Media MailChimp Subscription | nmedia-mailchimp-widget |
| Navigation Tree Elementor | navigation-tree-elementor |
| NertWorks All in One Social Share Tools | nertworks-all-in-one-social-share-tools |
| Newsletters | newsletters-lite |
| NextGEN Gallery Voting | nextgen-gallery-voting |
| Novelist | novelist |
| Off-Canvas Sidebars & Menus (Slidebars) | off-canvas-sidebars |
| OK Poster Group | ok-poster-group |
| Omnify – The Best Scheduling Widgets for WordPress | omnify-widget |
| OmniLeads Scripts and Tags Manager | omnileads-scripts-and-tags-manager |
| One to one user Chat by WPGuppy | wpguppy-lite |
| OSS Upload | oss-upload |
| Page Takeover | page-takeover |
| Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction | paid-member-subscriptions |
| PDF for WPForms + Drag and Drop Template Builder | pdf-for-wpforms |
| Pesapal Gateway for Woocommerce | pesapal-for-woocommerce |
| Plugin Name: GMO Font Agent | gmo-font-agent |
| Pop-Up Chop Chop | pop-up |
| Post Grid Gutenberg Blocks – PostX | ultimate-post |
| PostMash Custom – custom post order | postmash-custom |
| PowerPress Podcasting plugin by Blubrry | powerpress |
| Pretty file links | pretty-file-links |
| Primer MyData for Woocommerce | primer-mydata |
| Pro Rank Tracker | proranktracker |
| Product Author for WooCommerce | wc-product-author |
| Product Catalog – Catalog for WordPress | displayproduct |
| Product Import Export for WooCommerce – Import Export Product CSV Suite | product-import-export-for-woo |
| Quads Ads Manager for Google AdSense | quick-adsense-reloaded |
| Quick Interest Slider | quick-interest-slider |
| Quick Localization (Quick Localisation) | quick-localization |
| Quiz Cat – WordPress Quiz Plugin | quiz-cat |
| Quiz Maker Business | quiz-maker-pro |
| Quotes llama | quotes-llama |
| Related Posts via Categories | related-posts-via-categories |
| Replace Default Words | replace-default-words |
| Responsive Addons for Elementor – Free Elementor Addons, Kits and Elementor Templates | responsive-addons-for-elementor |
| Restaurant Menu and Food Ordering | mp-restaurant-menu |
| Reviews Widgets for Google, TripAdvisor, Yelp & Recommendations | fb-reviews-widget |
| Rewrite | rewrite |
| RPS Include Content | rps-include-content |
| RTMKit | rometheme-for-elementor |
| Scheduled & Automatic Order Status Controller for WooCommerce | order-status-rules-for-woocommerce |
| SearchIQ – The Search Solution | searchiq |
| Secret Meta | facebook-secret-meta |
| SecuPress with Simple SSL – Simple and Performant Security | secupress |
| Sensei LMS – Online Courses, Quizzes, & Learning | sensei-lms |
| Serial Codes Generator and Validator with WooCommerce Support | serial-codes-generator-and-validator |
| SH Email Alert | sh-email-alert |
| Shortcodes by United Themes | ut-shortcodes |
| ShowTime Slideshow | showtime-slideshow |
| Shuffle | shuffle |
| Simple Giveaways – Grow your business, email lists and traffic with contests | giveasap |
| Simple Optimizer | simple-optimizer |
| Simple Rating | simple-rating |
| Simple Social Media Share Buttons – Social Sharing for Everyone | simple-social-buttons |
| Simple Trackback Disabler | simple-trackback-disabler |
| Simplebooklet PDF Viewer and Embedder | simplebooklet |
| SimplyRETS Real Estate IDX | simply-rets |
| Sitekit | sitekit |
| SKT Addons for Elementor | skt-addons-for-elementor |
| SKU Generator for WooCommerce | sku-for-woocommerce |
| Slider by BestWebSoft | slider-bws |
| Smart Maintenance Mode | smart-maintenance-mode |
| Smush – Image Optimization, Compression, Lazy Load, WebP & CDN | wp-smushit |
| SNORDIAN's H5PxAPIkatchu | h5pxapikatchu |
| So-Called Air Quotes | so-called-air-quotes |
| SoJ SoundSlides | soj-soundslides |
| SoundCloud Ultimate Plugin | soundcloud-ultimate |
| sourceplay-navermap | sourceplay-navermap |
| SpeakPipe – Voicemail for Websites | speakpipe-voicemail-for-websites |
| Specific Content For Mobile – Customize the mobile version without redirections | specific-content-for-mobile |
| Spectra Gutenberg Blocks – Website Builder for the Block Editor | ultimate-addons-for-gutenberg |
| STEdb Forms | stedb-forms |
| Store Locator Widget | store-locator-widget |
| Structured Content (JSON-LD) #wpsc | structured-content |
| Subscribe to Download Lite – Email Before Download Plugin | subscribe-to-download-lite |
| Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers | sunshine-photo-cart |
| Super Simple Subscriptions | super-simple-subscriptions |
| Super Static Cache | super-static-cache |
| Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System | support-genix-lite |
| SyntaxHighlighter Evolved | syntaxhighlighter |
| TablePress – Tables in WordPress made easy | tablepress |
| tagDiv Composer | td-composer |
| teachPress | teachpress |
| Team Members Profile – Employee Directory & Staff Showcase | our-team-members |
| Teleport | teleport |
| Terms & Conditions Per Product | terms-and-conditions-per-product |
| Terms of Use | terms-of-use-2 |
| Text Selection Color | text-selection-color |
| Textmetrics | webtexttool |
| TGG – WP Optimizer | tgg-wp-optimizer |
| The Pack Elementor addon | the-pack-addon |
| The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid | the-post-grid |
| The Visitor Counter Plugin | the-visitor-counter |
| Themify Event Post | themify-event-post |
| Tickera – Sell Tickets & Manage Events | tickera-event-ticketing-system |
| Tidekey | tidekey |
| Timetics – Appointment Booking Calendar & Scheduling System | timetics |
| Toggle Box | toggle-box |
| Top Bar | ultimate-bar |
| Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid | boldgrid-backup |
| TranslatePress – Translate Multilingual sites with AI Translation | translatepress-multilingual |
| Translator | translator |
| Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Solution | tour-booking-manager |
| TWB Woocommerce Reviews | twb-woocommerce-reviews |
| Typekit plugin for WordPress | typekit |
| Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor | ultimate-blocks |
| Ultimate Dashboard – Custom WordPress Dashboard | ultimate-dashboard |
| Ultimate Security Checker | ultimate-security-checker |
| Upload Quota per User | upload-quota-per-user |
| User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder | user-registration |
| Usermaven | usermaven |
| ValidateCertify Free | validar-certificados-de-cursos |
| VaultRE Contact Form 7 | wp-plugin-contact-form-7 |
| Verge3D Publishing and E-Commerce | verge3d |
| Video Embedder | video-embedder |
| Vimeotheque – Vimeo WordPress Plugin & Video Gallery | codeflavors-vimeo-video-post-lite |
| Visual Text Editor | visual-text-editor |
| wA11y – The Web Accessibility Toolbox | wa11y |
| wBounce | wbounce |
| Weather Layer | weather-layer |
| Web Directory Free | web-directory-free |
| WFatture for WooCommerce Fattureincloud | woo-fattureincloud |
| WIP WooCarousel Lite | wip-woocarousel-lite |
| WishSuite – Wishlist for WooCommerce | wishsuite |
| WordPres 同步微博 | wp2wb |
| WordPress Admin Bar Improved | wordpress-admin-bar-improved |
| WordPress Importer | wordpress-importer |
| WordPress Infinite Scroll by Auto Load Next Post | auto-load-next-post |
| wordpress publish post email notification | publish-post-email-notification |
| WordPress SQL Backup | wordpress-sql-backup |
| WP Cards | wp-cards |
| WP Cassify | wp-cassify |
| WP Church Donation | wp-church-donation |
| WP Click to Chat – Email, Live Chat, Call & Book Now Buttons | support-chat |
| WP Colorful Tag Cloud | wp-colorful-tag-cloud |
| WP Compress for MainWP | wp-compress-mainwp |
| WP Compress – Instant Performance & Speed Optimization | wp-compress-image-optimizer |
| WP Database Optimizer | wp-database-optimizer |
| WP Docs | wp-docs |
| WP e-Commerce Style Email | wp-e-commerce-style-email |
| WP Event Ticketing | wpeventticketing |
| WP Extended – The Ultimate WordPress Toolkit | wpextended |
| WP Fast Total Search – The Power of Indexed Search | fulltext-search |
| WP Featured Entries | wp-featured-entries |
| WP Google Review Slider | wp-google-places-review-slider |
| WP Google Street View (with 360° virtual tour) & Google maps + Local SEO | wp-google-street-view |
| WP Hotjar | wp-hotjar |
| WP Multistore Locator — WP Store Locator Plugin: Effortless Integration With Snazzy Maps | wp-multi-store-locator |
| WP Odoo Form Integrator | wp-odoo-form-integrator |
| WP Parallax Content Slider | wp-parallax-content-slider |
| WP Posts Carousel | wp-posts-carousel |
| WP Profitshare | wp-profitshare |
| WP Ride Booking – Best Taxi Booking Solution for WordPress | wp-ride-booking |
| WP Social Widget | wp-social-widget |
| WP Subscription Forms – Subscription Form Plugin for WordPress | wp-subscription-forms |
| WP Supersized | wp-supersized |
| WP Travel Engine – Tour Booking Plugin – Tour Operator Software | wp-travel-engine |
| WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel | wp-ultimate-csv-importer |
| WP Ultimate Search | wp-ultimate-search |
| WP-OGP | wp-ogp |
| WP-Syntax | wp-syntax |
| WP2LEADS | WordPress und KlickTipp einfach verbinden – WooCommerce und KlickTipp einfach verbinden | wp2leads |
| WPC Smart Upsell Funnel for WooCommerce | wpc-smart-upsell-funnel |
| WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System | wp-cafe |
| wpShopGermany IT-RECHT KANZLEI | wpshopgermany-it-recht-kanzlei |
| xili-dictionary | xili-dictionary |
| Your Simple SVG Support | your-simple-svg-support |
| YouTube SimpleGallery | youtube-simplegallery |
| Yummly Rich Recipes | yummly-rich-recipes |
| Z Companion | z-companion |
| Zapier for WordPress | zapier |
| ZhuiGe Official Website Mini Program | jiangqie-official-website-mini-program |
| Zoho Billing – Embed Payment Form | zoho-subscriptions |
| افزونه حمل و نقل ووکامرس | پست پیشتاز، تیپاکس و پیک موتوری | persian-woocommerce-shipping |
| دکمه، شبکه اجتماعی خرید | dokme |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Alloggio - Hotel Booking WordPress Theme | alloggio |
| AuraMart | auramart |
| Big Store | big-store |
| Build | build |
| Churel | churel |
| City Store | city-store |
| Hester | hester |
| MorningTime Lite | morningtime-lite |
| newseqo | newseqo |
| RainbowNews | rainbownews |
| rapyd-payments | rapyd-payments |
| StoreBiz | storebiz |
| Travel Booking WordPress Theme | traveler |
| Unlimited | unlimited |
| Whitish Lite | whitish-lite |
| wp-weixin | wp-weixin |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
Affected Software
Accounting for WooCommerce [accounting-for-woocommerce]
Researcher
Affected Software
Checkout Mestres do WP for WooCommerce [checkout-mestres-wp]
Researcher
Affected Software
Essential Real Estate [essential-real-estate]
Researcher
Export All Posts, Products, Orders, Refunds & Users <= 2.13 - Unauthenticated PHP Object Injection
9.8
Affected Software
Export All Posts, Products, Orders & Users | WP Ultimate Exporter | WordPress CSV Export [wp-ultimate-exporter]
Researcher
Affected Software
InstaWP Connect – 1-click WP Staging & Migration [instawp-connect]
Researcher
Affected Software
JS Help Desk – AI-Powered Support & Ticketing System [js-support-ticket]
Researcher
Affected Software
Kubio AI Page Builder [kubio]
Researcher
Affected Software
Material Dashboard [material-dashboard]
Researcher
Multiple Shipping And Billing Address For Woocommerce <= 1.5 - Unauthenticated PHP Object Injection
9.8
Affected Software
Multiple Shipping And Billing Address For WooCommerce [different-shipping-and-billing-address-for-woocommerce]
Researcher
Affected Software
PostMash Custom – custom post order [postmash-custom]
Researcher
Affected Software
rapyd-payments [rapyd-payments]
Researcher
Affected Software
Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers [sunshine-photo-cart]
Researcher
Affected Software
Travel Booking WordPress Theme [traveler]
Researcher
Affected Software
Researcher
Affected Software
WP Travel Engine – Tour Booking Plugin – Tour Operator Software [wp-travel-engine]
Researcher
Affected Software
CM Download Manager – Organize, Protect & Share Files in WordPress [cm-download-manager]
Researcher
Affected Software
JS Help Desk – AI-Powered Support & Ticketing System [js-support-ticket]
Researcher
Affected Software
Administrator Z [administrator-z]
Researcher
Affected Software
Drag and Drop Multiple File Upload for Contact Form 7 [drag-and-drop-multiple-file-upload-contact-form-7]
Researcher
Affected Software
EZ SQL Reports Shortcode Widget and DB Backup [elisqlreports]
Researcher
Affected Software
Inline Image Upload for BBPress [image-upload-for-bbpress]
Researcher
Affected Software
JetWooBuilder [jet-woo-builder]
Researcher
Affected Software
Login Widget for Ultimate Member [login-widget-for-ultimate-member]
Researcher
Affected Software
MDJM Event Management [mobile-dj-manager]
Researcher
Affected Software
Pop-Up Chop Chop [pop-up]
Researcher
Affected Software
Restaurant Menu and Food Ordering [mp-restaurant-menu]
Researcher
Affected Software
RTMKit [rometheme-for-elementor]
Researcher
Affected Software
SoJ SoundSlides [soj-soundslides]
Researcher
Affected Software
Subscribe to Download Lite – Email Before Download Plugin [subscribe-to-download-lite]
Researcher
Affected Software
Subscribe to Download Lite – Email Before Download Plugin [subscribe-to-download-lite]
Researcher
Affected Software
Researcher
Affected Software
The Pack Elementor addon [the-pack-addon]
Researcher
Affected Software
Researcher
Affected Software
Themify Event Post [themify-event-post]
Researcher
Affected Software
Visual Text Editor [visual-text-editor]
Researcher
Affected Software
WishSuite – Wishlist for WooCommerce [wishsuite]
Researcher
WP Compress <= 6.30.15 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions
8.8
Affected Software
WP Compress – Instant Performance & Speed Optimization [wp-compress-image-optimizer]
Researcher
Affected Software
WP e-Commerce Style Email [wp-e-commerce-style-email]
Researcher
Affected Software
WP Travel Engine – Tour Booking Plugin – Tour Operator Software [wp-travel-engine]
Researcher
Affected Software
WPC Smart Upsell Funnel for WooCommerce [wpc-smart-upsell-funnel]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Solution [tour-booking-manager]
Researcher
Affected Software
Product Catalog – Catalog for WordPress [displayproduct]
Researcher
Affected Software
Alloggio - Hotel Booking WordPress Theme [alloggio]
Researcher
Affected Software
BWL Advanced FAQ Manager [bwl-advanced-faq-manager]
Researcher
Affected Software
WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel [wp-ultimate-csv-importer]
Researcher
Affected Software
Product Import Export for WooCommerce – Import Export Product CSV Suite [product-import-export-for-woo]
Researcher
Affected Software
Quads Ads Manager for Google AdSense [quick-adsense-reloaded]
Researcher
Affected Software
Drag and Drop Multiple File Upload for Contact Form 7 [drag-and-drop-multiple-file-upload-contact-form-7]
Researcher
Affected Software
Houzez Property Feed [houzez-property-feed]
Researcher
Affected Software
JS Help Desk – AI-Powered Support & Ticketing System [js-support-ticket]
Researcher
Affected Software
JS Help Desk – AI-Powered Support & Ticketing System [js-support-ticket]
Researcher
Affected Software
Quiz Maker Business [quiz-maker-pro]
Researcher
Affected Software
Travel Booking WordPress Theme [traveler]
Researcher
Affected Software
Web Directory Free [web-directory-free]
Researcher
Affected Software
WP Multistore Locator — WP Store Locator Plugin: Effortless Integration With Snazzy Maps [wp-multi-store-locator]
Researcher
Affected Software
Active Products Tables for WooCommerce. Use constructor to create tables [profit-products-tables-for-woocommerce]
Researcher
Affected Software
So-Called Air Quotes [so-called-air-quotes]
Researcher
Affected Software
AliExpress Dropshipping Plugin for WooCommerce Stores [ali2woo-lite]
Researcher
Affected Software
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce [wp-marketing-automations]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Newsletters [newsletters-lite]
Researcher
Affected Software
Product Import Export for WooCommerce – Import Export Product CSV Suite [product-import-export-for-woo]
Researcher
Affected Software
Scheduled & Automatic Order Status Controller for WooCommerce [order-status-rules-for-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
TranslatePress – Translate Multilingual sites with AI Translation [translatepress-multilingual]
Researcher
Affected Software
WordPress Importer [wordpress-importer]
Researcher
Affected Software
WP Church Donation [wp-church-donation]
Researcher
Affected Software
Custom Field For WP Job Manager [custom-field-for-wp-job-manager]
Researcher
Affected Software
Duplicate Page and Post [duplicate-post-and-page]
Researcher
Affected Software
Flickr set slideshows [flickr-set-slideshows]
Researcher
Affected Software
Flickr set slideshows [flickr-set-slideshows]
Researcher
Affected Software
Include URL [include-url]
Researcher
Affected Software
Job Postings [job-postings]
Researcher
Affected Software
Lead Form Data Collection to CRM [wp-leads-builder-any-crm]
Researcher
Affected Software
Navigation Tree Elementor [navigation-tree-elementor]
Researcher
Affected Software
GEO Plugin by Squirrly SEO [squirrly-seo]
Researcher
Affected Software
Shortcodes by United Themes [ut-shortcodes]
Researcher
Affected Software
Shuffle [shuffle]
Researcher
Affected Software
Researcher
Affected Software
Vimeotheque – Vimeo WordPress Plugin & Video Gallery [codeflavors-vimeo-video-post-lite]
Researcher
Affected Software
WP Featured Entries [wp-featured-entries]
Researcher
Affected Software
WP Subscription Forms – Subscription Form Plugin for WordPress [wp-subscription-forms]
Researcher
Affected Software
One to one user Chat by WPGuppy [wpguppy-lite]
Researcher
Advanced iFrame <= 2024.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Host Header
6.4
Affected Software
Advanced iFrame [advanced-iframe]
Researcher
Affected Software
Advanced iFrame [advanced-iframe]
Researcher
Affected Software
Advanced Woo Search – Product Search for WooCommerce [advanced-woo-search]
Researcher
Affected Software
Alert Box Block [alert-box-block]
Researchers
Affected Software
Amazing service box Addons For WPBakery Page Builder (formerly Visual Composer) [amazing-service-box-visual-composer-addons]
Researcher
Affected Software
ARPrice - WordPress Pricing Table Plugin [arprice]
Researcher
Affected Software
Audio Album [audio-album]
Researcher
Affected Software
AuraMart [auramart]
Researcher
Ayyash Studio <= 1.0.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
6.4
Affected Software
Ayyash Studio — The kick-start kit [ayyash-studio]
Researcher
Better Section Navigation Widget <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Better Section Navigation [better-section-navigation]
Researcher
Affected Software
Build [build]
Researcher
Affected Software
Researcher
Affected Software
Churel [churel]
Researcher
Affected Software
City Store [city-store]
Researcher
Affected Software
WP Click to Chat – Email, Live Chat, Call & Book Now Buttons [support-chat]
Researcher
Affected Software
Clink – WordPress Link Manager [clink]
Researcher
Affected Software
Cost Calculator Builder [cost-calculator-builder]
Researcher
Affected Software
Researcher
CRM and Lead Management by vcita <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
CRM and Lead Management by vcita [crm-customer-relationship-management-by-vcita]
Researcher
Affected Software
DesignThemes Core Features [designthemes-core-features]
Researcher
Affected Software
DICOM Support [dicom-support]
Researcher
Affected Software
Doneren met Mollie [doneren-met-mollie]
Researcher
Affected Software
Dr. Flex [dr-flex]
Researcher
Affected Software
Dropdown multisite selector [dropdown-multisite-selector]
Researcher
ElementsKit Elementor addons <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Researcher
Affected Software
EO4WP: EmailOctopus for WordPress [fw-integration-for-emailoctopus]
Researcher
Fiverr.com Official Search Box <= 1.0.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
Affected Software
Fiverr.com Official Search Box [fiverr-official-search-box]
Researcher
Affected Software
FormLift for Keap (Legacy) Web Forms [formlift]
Researcher
Affected Software
Gallery for Social Photo [feed-instagram-lite]
Researcher
Affected Software
Plugin Name: GMO Font Agent [gmo-font-agent]
Researcher
Affected Software
Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks]
Researcher
Affected Software
Gum Addon for Elementor [gum-elementor-addon]
Researcher
Affected Software
Happy Addons for Elementor [happy-elementor-addons]
Researcher
Affected Software
Hester [hester]
Researcher
Affected Software
IG Shortcodes [ig-shortcodes]
Researcher
Affected Software
Include URL [include-url]
Researcher
Affected Software
include-file [include-file]
Researcher
Affected Software
IP Locator [ip-locator]
Researcher
Affected Software
jAlbum Bridge [jalbum-bridge]
Researcher
Affected Software
jAlbum Bridge [jalbum-bridge]
Researcher
Affected Software
JetBlocks for Elementor [jet-blocks]
Researcher
Affected Software
JetProductGallery [jet-woo-product-gallery]
Researcher
Affected Software
JetSearch [jet-search]
Researcher
Affected Software
JetSmartFilters [jet-smart-filters]
Researcher
Affected Software
Researcher
Affected Software
LeadConnector [leadconnector]
Researcher
Affected Software
Leaky Paywall [leaky-paywall]
Researcher
Affected Software
Listamester [listamester]
Researcher
Affected Software
Magic Embeds [wp-embed-facebook]
Researcher
Affected Software
Researcher
Affected Software
MorningTime Lite [morningtime-lite]
Researcher
Affected Software
N-Media MailChimp Subscription [nmedia-mailchimp-widget]
Researcher
Affected Software
Off-Canvas Sidebars & Menus (Slidebars) [off-canvas-sidebars]
Researcher
Affected Software
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction [paid-member-subscriptions]
Researcher
persian-woocommerce-shipping <= 4.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
افزونه حمل و نقل ووکامرس | پست پیشتاز، تیپاکس و پیک موتوری [persian-woocommerce-shipping]
Researcher
Affected Software
Post Grid Gutenberg Blocks – PostX [ultimate-post]
Researcher
Affected Software
PowerPress Podcasting plugin by Blubrry [powerpress]
Researcher
Affected Software
Pretty file links [pretty-file-links]
Researcher
Affected Software
Quick Interest Slider [quick-interest-slider]
Researcher
Affected Software
Quotes llama [quotes-llama]
Researcher
Affected Software
RainbowNews [rainbownews]
Researcher
Affected Software
RPS Include Content [rps-include-content]
Researcher
Affected Software
SearchIQ – The Search Solution [searchiq]
Researcher
Affected Software
Researcher
Affected Software
Simplebooklet PDF Viewer and Embedder [simplebooklet]
Researcher
Affected Software
Sitekit [sitekit]
Researcher
Affected Software
SKT Addons for Elementor [skt-addons-for-elementor]
Researcher
Affected Software
Spectra Gutenberg Blocks – Website Builder for the Block Editor [ultimate-addons-for-gutenberg]
Researcher
Affected Software
StoreBiz [storebiz]
Researcher
Affected Software
Structured Content (JSON-LD) #wpsc [structured-content]
Researcher
Affected Software
SyntaxHighlighter Evolved [syntaxhighlighter]
Researcher
Affected Software
TablePress – Tables in WordPress made easy [tablepress]
Researcher
Affected Software
The Pack Elementor addon [the-pack-addon]
Researcher
Affected Software
Themify Event Post [themify-event-post]
Researcher
Affected Software
Toggle Box [toggle-box]
Researcher
Affected Software
Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor [ultimate-blocks]
Researcher
Affected Software
Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor [ultimate-blocks]
Researcher
Affected Software
Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor [ultimate-blocks]
Researcher
Affected Software
Unlimited [unlimited]
Researcher
Affected Software
wBounce [wbounce]
Researcher
Affected Software
Whitish Lite [whitish-lite]
Researcher
Affected Software
WP Cassify [wp-cassify]
Researcher
Affected Software
WP Compress for MainWP [wp-compress-mainwp]
Researcher
Affected Software
WP Posts Carousel [wp-posts-carousel]
Researcher
Affected Software
WP Posts Carousel [wp-posts-carousel]
Researcher
Affected Software
WP Social Widget [wp-social-widget]
Researcher
Affected Software
WP Ultimate Search [wp-ultimate-search]
Researcher
Affected Software
Your Simple SVG Support [your-simple-svg-support]
Researcher
Affected Software
YouTube SimpleGallery [youtube-simplegallery]
Researcher
Affected Software
Zapier for WordPress [zapier]
Researcher
Zoho Billing – Embed Payment Form <= 4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Zoho Billing – Embed Payment Form [zoho-subscriptions]
Researcher
Affected Software
PDF for WPForms + Drag and Drop Template Builder [pdf-for-wpforms]
Researcher
Affected Software
About Author [about-author]
Researcher
Affected Software
AdSense Privacy Policy [adsense-privacy-policy]
Researcher
Affected Software
Advanced Post Search [advanced-post-search]
Researcher
Affected Software
AEC Kiosque [aec-kiosque]
Researcher
Affected Software
AlphaOmega Captcha & Anti-Spam Filter [alphaomega-captcha-anti-spam]
Researcher
Affected Software
ANAC XML Render [anac-xml-render]
Researcher
Affected Software
Arrow Maps – Custom Maps for WordPress [ap-google-maps]
Researcher
Affected Software
banner-manager [banner-manager]
Researcher
Affected Software
Better WishList API [better-wlm-api]
Researcher
Affected Software
Blue Captcha [blue-captcha]
Researcher
Affected Software
Breezing Forms [breezing-forms]
Researcher
Affected Software
Browser Address Bar Color [browser-address-bar-color]
Researcher
Affected Software
CallPhone'r [callphoner]
Researcher
Affected Software
CAS Maestro [cas-maestro]
Researcher
Contact Form 7 Material Design <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
Affected Software
Contact Form 7 Material Design [cf7-material-design]
Researcher
Affected Software
CopyLink [copy-link]
Researcher
Affected Software
cTabs [ctabs]
Researcher
Affected Software
Custom Product Stickers for Woocommerce [custom-product-stickers-for-woocommerce]
Researcher
Affected Software
Digital License Manager [digital-license-manager]
Researcher
Affected Software
Driving Directions [ddirections]
Researcher
Affected Software
Event Tickets and Registration [event-tickets]
Researcher
Affected Software
EZ SQL Reports Shortcode Widget and DB Backup [elisqlreports]
Researcher
Affected Software
Google Font Fix [google-font-fix]
Researcher
Affected Software
Hostel [hostel]
Researcher
Affected Software
Image Wall [image-wall]
Researcher
Affected Software
jQuery Dropdown Menu [jquery-drop-down-menu-plugin]
Researcher
Affected Software
Kento WordPress Stats [kento-wp-stats]
Researcher
Affected Software
Key4ce osTicket Bridge [key4ce-osticket-bridge]
Researcher
Affected Software
LH OGP Meta [lh-ogp-meta-tags]
Researcher
Affected Software
Lightview Plus [lightview-plus]
Researcher
Affected Software
Map Contact [map-contact]
Researcher
Affected Software
NextGEN Gallery Voting [nextgen-gallery-voting]
Researcher
Affected Software
OK Poster Group [ok-poster-group]
Researcher
Affected Software
Omnify – The Best Scheduling Widgets for WordPress [omnify-widget]
Researcher
Affected Software
OmniLeads Scripts and Tags Manager [omnileads-scripts-and-tags-manager]
Researcher
Affected Software
Pesapal Gateway for Woocommerce [pesapal-for-woocommerce]
Researcher
Affected Software
Primer MyData for Woocommerce [primer-mydata]
Researcher
Affected Software
Pro Rank Tracker [proranktracker]
Researcher
Affected Software
Quick Localization (Quick Localisation) [quick-localization]
Researcher
Related Posts via Categories <= 2.1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
Affected Software
Related Posts via Categories [related-posts-via-categories]
Researcher
Affected Software
Replace Default Words [replace-default-words]
Researcher
Affected Software
Secret Meta [facebook-secret-meta]
Researcher
Affected Software
SH Email Alert [sh-email-alert]
Researcher
Affected Software
ShowTime Slideshow [showtime-slideshow]
Researcher
Affected Software
Simple Rating [simple-rating]
Researcher
Affected Software
SKU Generator for WooCommerce [sku-for-woocommerce]
Researcher
Affected Software
Smart Maintenance Mode [smart-maintenance-mode]
Researcher
Affected Software
Store Locator Widget [store-locator-widget]
Researcher
Affected Software
tagDiv Composer [td-composer]
Researcher
Affected Software
tagDiv Composer [td-composer]
Researcher
Affected Software
Teleport [teleport]
Researcher
Affected Software
Terms of Use [terms-of-use-2]
Researcher
Affected Software
WP Extended – The Ultimate WordPress Toolkit [wpextended]
Researcher
Affected Software
The Visitor Counter Plugin [the-visitor-counter]
Researcher
Affected Software
Tidekey [tidekey]
Researcher
Affected Software
Translator [translator]
Researcher
Affected Software
Video Embedder [video-embedder]
Researcher
Affected Software
WIP WooCarousel Lite [wip-woocarousel-lite]
Researcher
Affected Software
WFatture for WooCommerce Fattureincloud [woo-fattureincloud]
Researcher
Affected Software
WordPress SQL Backup [wordpress-sql-backup]
Researcher
Affected Software
WP Cards [wp-cards]
Researcher
Affected Software
WP Colorful Tag Cloud [wp-colorful-tag-cloud]
Researcher
Affected Software
WP Event Ticketing [wpeventticketing]
Researcher
Affected Software
WP Odoo Form Integrator [wp-odoo-form-integrator]
Researcher
Affected Software
Researcher
Affected Software
xili-dictionary [xili-dictionary]
Researcher
Affected Software
Yummly Rich Recipes [yummly-rich-recipes]
Researcher
Affected Software
Researcher
Affected Software
WP Compress – Instant Performance & Speed Optimization [wp-compress-image-optimizer]
Researcher
Affected Software
Responsive Addons for Elementor – Free Elementor Addons, Kits and Elementor Templates [responsive-addons-for-elementor]
Researcher
Affected Software
AI Preloader [ai-preloader]
Researcher
Affected Software
Researcher
Affected Software
Frndzk Expandable Bottom Bar [frndzk-expandable-bottom-bar]
Researcher
Affected Software
Login Redirect [login-redirect]
Researcher
Affected Software
Message ticker [message-ticker]
Researcher
Affected Software
Researcher
Affected Software
My Bootstrap Menu [my-bootstrap-menu]
Researcher
Affected Software
Page Takeover [page-takeover]
Researcher
Affected Software
VaultRE Contact Form 7 [wp-plugin-contact-form-7]
Researcher
Affected Software
Weather Layer [weather-layer]
Researcher
WP Parallax Content Slider <= 0.9.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
5.5
Affected Software
WP Parallax Content Slider [wp-parallax-content-slider]
Researcher
Affected Software
WP-OGP [wp-ogp]
Researcher
Affected Software
Event Post [event-post]
Researcher
Affected Software
Researcher
Affected Software
Quads Ads Manager for Google AdSense [quick-adsense-reloaded]
Researcher
Affected Software
Advanced Dewplayer [advanced-dewplayer]
Researcher
Affected Software
Advanced Google reCAPTCHA [advanced-google-recaptcha]
Researcher
Affected Software
Advanced iFrame [advanced-iframe]
Researcher
Affected Software
Researcher
Researcher
Affected Software
Chatbox Manager [wa-chatbox-manager]
Researcher
Affected Software
Clear Sucuri Cache [clear-sucuri-cache]
Researcher
Affected Software
Cool Author Box – For Widget and Post Content [hm-cool-author-box-widget]
Researcher
Affected Software
DAP to Autoresponders Email Syncing [dap-to-autoresponders-daar]
Researcher
Affected Software
Researcher
Affected Software
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy [easy-digital-downloads]
Researcher
Affected Software
Greek Multi Tool – Greeklish Slugs, Permalinks & Transliteration [greek-multi-tool]
Researcher
Affected Software
JS Help Desk – AI-Powered Support & Ticketing System [js-support-ticket]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Music Press Pro [music-press-pro]
Researcher
Affected Software
Sensei LMS – Online Courses, Quizzes, & Learning [sensei-lms]
Researcher
Affected Software
SNORDIAN's H5PxAPIkatchu [h5pxapikatchu]
Researcher
Affected Software
E-cab Taxi Booking Manager for Woocommerce [ecab-taxi-booking-manager]
Researcher
Affected Software
Terms & Conditions Per Product [terms-and-conditions-per-product]
Researcher
Affected Software
Researcher
Affected Software
Top Bar [ultimate-bar]
Researcher
Affected Software
Travel Booking WordPress Theme [traveler]
Researcher
Affected Software
Researcher
Affected Software
BizCalendar Web [bizcalendar-web]
Researcher
Affected Software
Cart tracking for WooCommerce [cart-tracking-for-woocommerce]
Researcher
Affected Software
FlexStock – Product Stock Sync with Google Sheets for WooCommerce [stock-sync-with-google-sheet-for-woocommerce]
Researcher
Affected Software
ZhuiGe Official Website Mini Program [jiangqie-official-website-mini-program]
Researcher
Affected Software
MoreConvert Wishlist for WooCommerce [smart-wishlist-for-more-convert]
Researcher
Affected Software
Newsletters [newsletters-lite]
Researcher
Affected Software
Product Import Export for WooCommerce – Import Export Product CSV Suite [product-import-export-for-woo]
Researcher
Affected Software
Slider by BestWebSoft [slider-bws]
Researcher
Affected Software
STEdb Forms [stedb-forms]
Researcher
Affected Software
Super Simple Subscriptions [super-simple-subscriptions]
Researcher
Affected Software
WP Profitshare [wp-profitshare]
Researcher
Affected Software
دکمه، شبکه اجتماعی خرید [dokme]
Researcher
Affected Software
AvaiBook vacation rental booking engine [avaibook]
Researcher
Affected Software
Beautiful Link Preview [beautiful-link-preview]
Researcher
Affected Software
Researcher
Affected Software
Chartify – WordPress Chart Plugin [chart-builder]
Researcher
Affected Software
Clearout Email Validator – Real-Time Email Verification on WordPress Forms [clearout-email-validator]
Researcher
Affected Software
Comment Approved Notifier Extended [comment-approved-notifier-extended]
Researcher
Affected Software
Duplicate Page and Post [duplicate-post-and-page]
Researcher
Affected Software
Easy Page Transition [easy-page-transition]
Researcher
Affected Software
Researcher
Affected Software
Flatty – Flat Admin Theme [flatty-flat-admin-theme]
Researcher
Affected Software
issuupress [issuupress]
Researcher
Job Colors for WP Job Manager <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
Affected Software
Job Colors for WP Job Manager [wp-job-manager-colors]
Researcher
MapPress Maps for WordPress <= 2.94.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
Affected Software
MapPress Maps for WordPress [mappress-google-maps-for-wordpress]
Researcher
Affected Software
Mobile Navigation [mobile-navigation]
Researcher
Affected Software
My Default Post Content [my-default-post-content]
Researcher
Affected Software
Novelist [novelist]
Researcher
Affected Software
Simple Social Media Share Buttons – Social Sharing for Everyone [simple-social-buttons]
Researcher
Affected Software
Text Selection Color [text-selection-color]
Researcher
Affected Software
TGG – WP Optimizer [tgg-wp-optimizer]
Researcher
Affected Software
Ultimate Dashboard – Custom WordPress Dashboard [ultimate-dashboard]
Researcher
Affected Software
Ultimate Dashboard – Custom WordPress Dashboard [ultimate-dashboard]
Researcher
Affected Software
Ultimate Dashboard – Custom WordPress Dashboard [ultimate-dashboard]
Researcher
Affected Software
Upload Quota per User [upload-quota-per-user]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Widget for Social Page Feeds <= 6.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
Affected Software
Buttonizer – Social Media Share Buttons, Social Icons, & Social Feeds [facebook-pagelike-widget]
Researcher
Affected Software
WP Database Optimizer [wp-database-optimizer]
Researcher
Affected Software
WP Google Street View (with 360° virtual tour) & Google maps + Local SEO [wp-google-street-view]
Researcher
Affected Software
WP Hotjar [wp-hotjar]
Researcher
Affected Software
wp-weixin [wp-weixin]
Researcher
Affected Software
3DPrint Lite [3dprint-lite]
Researcher
Affected Software
Researcher
Affected Software
Anthologize [anthologize]
Researcher
Affected Software
WordPress Infinite Scroll by Auto Load Next Post [auto-load-next-post]
Researcher
Affected Software
Awesome Logos [awesome-logos]
Researcher
Affected Software
Big Store [big-store]
Researcher
Affected Software
Browser Caching with .htaccess [browser-caching-with-htaccess]
Researcher
Affected Software
Cackle [cackle]
Researcher
Affected Software
Christmas Panda [christmas-panda]
Researcher
Affected Software
Conversios: Google Analytics (GA4), Google Ads, Conversion and Analytics Tracking for Multi-Channels [enhanced-e-commerce-for-woocommerce-store]
Researcher
Affected Software
Currency Switcher for WooCommerce [currency-switcher-for-woocommerce]
Researcher
Affected Software
Custom Fields Account Registration For Woocommerce [custom-fields-account-registration-for-woocommerce]
Researcher
Affected Software
Custom Login Logo [ideal-wp-login-logo-changer]
Researcher
Affected Software
Custom Script Integration [custom-script-integration]
Researcher
Affected Software
Easy 301 Redirects [odihost-easy-redirect-301]
Researcher
Affected Software
Estatebud – Properties & Listings [estatebud-properties-listings]
Researcher
Affected Software
Exchange Rates [exchange-rates]
Researcher
Affected Software
External image replace [external-image-replace]
Researcher
Affected Software
EZ SQL Reports Shortcode Widget and DB Backup [elisqlreports]
Researcher
Affected Software
Five Star Restaurant Reservations – WordPress Booking Plugin [restaurant-reservations]
Researcher
Affected Software
Fix Rss Feeds [fix-rss-feed]
Researcher
Affected Software
Flexible Cookies [flexible-cookies]
Researcher
Affected Software
Flipdish Ordering System [flipdish-ordering-system]
Researcher
Affected Software
Float menu – awesome floating side menu [float-menu]
Researcher
Affected Software
Football Pool [football-pool]
Researcher
Affected Software
Generate Post Thumbnails [generate-post-thumbnails]
Researcher
Affected Software
Gift Message for WooCommerce [gift-message-for-woocommerce]
Researcher
Affected Software
GP Back To Top [gp-back-to-top]
Researcher
Affected Software
Hacklog Remote Image Autosave [hacklog-remote-image-autosave]
Researcher
Affected Software
Hesabfa Accounting [hesabfa-accounting]
Researcher
Affected Software
Image Captcha [image-captcha]
Researcher
Affected Software
Info Boxes Shortcode and Widget [info-boxes-shortcode-and-widget]
Researcher
Affected Software
Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms [integration-for-contact-form-7-and-google-sheets]
Researcher
Affected Software
Just Writing Statistics [just-writing-statistics]
Researcher
Affected Software
Researcher
Affected Software
KK I Like It [kk-i-like-it]
Researcher
Affected Software
Login Alert [login-alert]
Researcher
Affected Software
LWS SMS [lws-sms]
Researcher
Affected Software
Menu Duplicator [copy-menu]
Researcher
Affected Software
Microblog Poster – Auto Publish on Social Media [microblog-poster]
Researcher
Affected Software
NertWorks All in One Social Share Tools [nertworks-all-in-one-social-share-tools]
Researcher
Affected Software
OSS Upload [oss-upload]
Researcher
Affected Software
Team Members Profile – Employee Directory & Staff Showcase [our-team-members]
Researcher
Affected Software
Product Author for WooCommerce [wc-product-author]
Researcher
Affected Software
wordpress publish post email notification [publish-post-email-notification]
Researcher
Affected Software
Quiz Cat – WordPress Quiz Plugin [quiz-cat]
Researcher
Affected Software
Integrator for Turnstile and reCAPTCHA. [recaptcha-for-all]
Researcher
Affected Software
Rewrite [rewrite]
Researcher
Affected Software
Serial Codes Generator and Validator with WooCommerce Support [serial-codes-generator-and-validator]
Researcher
Affected Software
DEPRECATED – Shipmondo – A complete shipping solution for WooCommerce [pakkelabels-for-woocommerce]
Researcher
Affected Software
Simple Optimizer [simple-optimizer]
Researcher
Affected Software
Simple Trackback Disabler [simple-trackback-disabler]
Researcher
Affected Software
SimplyRETS Real Estate IDX [simply-rets]
Researcher
Affected Software
SoundCloud Ultimate Plugin [soundcloud-ultimate]
Researcher
Affected Software
sourceplay-navermap [sourceplay-navermap]
Researcher
Affected Software
SpeakPipe – Voicemail for Websites [speakpipe-voicemail-for-websites]
Researcher
Affected Software
Specific Content For Mobile – Customize the mobile version without redirections [specific-content-for-mobile]
Researcher
Affected Software
Super Static Cache [super-static-cache]
Researcher
Affected Software
teachPress [teachpress]
Researcher
Affected Software
Textmetrics [webtexttool]
Researcher
Affected Software
Tickera – Sell Tickets & Manage Events [tickera-event-ticketing-system]
Researcher
Affected Software
Travel Booking WordPress Theme [traveler]
Researcher
Affected Software
Reviews Widgets for Google, TripAdvisor, Yelp & Recommendations [fb-reviews-widget]
Researcher
Affected Software
TWB Woocommerce Reviews [twb-woocommerce-reviews]
Researcher
Affected Software
Typekit plugin for WordPress [typekit]
Researcher
Affected Software
Ultimate Dashboard – Custom WordPress Dashboard [ultimate-dashboard]
Researcher
Affected Software
Ultimate Security Checker [ultimate-security-checker]
Researcher
Affected Software
ValidateCertify Free [validar-certificados-de-cursos]
Researcher
Affected Software
Verge3D Publishing and E-Commerce [verge3d]
Researcher
Affected Software
WordPres 同步微博 [wp2wb]
Researcher
WordPress Admin Bar Improved <= 3.3.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
4.3
Affected Software
WordPress Admin Bar Improved [wordpress-admin-bar-improved]
Researcher
Affected Software
WP Database Optimizer [wp-database-optimizer]
Researcher
Affected Software
Researcher
Affected Software
WP Fast Total Search – The Power of Indexed Search [fulltext-search]
Researcher
Affected Software
WP Google Review Slider [wp-google-places-review-slider]
Researcher
Affected Software
WP Ride Booking – Best Taxi Booking Solution for WordPress [wp-ride-booking]
Researcher
Affected Software
WP Supersized [wp-supersized]
Researcher
Affected Software
WP-Syntax [wp-syntax]
Researcher
Affected Software
wpShopGermany IT-RECHT KANZLEI [wpshopgermany-it-recht-kanzlei]
Researcher
Affected Software
Z Companion [z-companion]
Researcher
Affected Software
Product Import Export for WooCommerce – Import Export Product CSV Suite [product-import-export-for-woo]
Researcher
Affected Software
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Comments