Wordfence Intelligence Weekly WordPress Vulnerability Report (June 16, 2025 to June 22, 2025)
📢 Calling all Vulnerability Researchers and Bug Bounty Hunters! 📢
🌞 Spring into Summer with Wordfence! Now through August 4, 2025, earn 2X bounty rewards for all in-scope submissions from our ‘High Threat’ list in software with fewer than 5 million active installs. Bounties up to $31,200 per vulnerability. Submit bold. Earn big!
Last week, there were 150 vulnerabilities disclosed in 141 WordPress Plugins and 6 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 51 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to implement layered security, aligning with our overarching mission to secure WordPress with defense in depth strategies. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report. As the world’s leading quality vulnerability database provider for WordPress, site owners can rest assured knowing Wordfence has their back.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 27,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
New Firewall Rules Deployed Last Week
The Wordfence Threat Intelligence Team reviews each vulnerability to determine impact and severity, along with assessing the likelihood of exploitation, to verify that the Wordfence Firewall provides sufficient protection.
The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our Premium, Care, and Response customers last week:
- WAF-RULE-849 – Data redacted while we work with the vendor on a patch.
- WAF-RULE-853 – Data redacted while we work with the vendor on a patch.
Wordfence Premium, Care, and Response customers received this protection immediately, while users still running the free version of Wordfence will receive this enhanced protection after a 30 day delay.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 79 |
| Unpatched | 71 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Medium Severity | 136 |
| High Severity | 10 |
| Critical Severity | 4 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 68 |
| Missing Authorization | 31 |
| Cross-Site Request Forgery (CSRF) | 25 |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 5 |
| Unrestricted Upload of File with Dangerous Type | 5 |
| Server-Side Request Forgery (SSRF) | 4 |
| Authorization Bypass Through User-Controlled Key | 2 |
| Deserialization of Untrusted Data | 2 |
| Incorrect Authorization | 2 |
| Exposure of Sensitive Information to an Unauthorized Actor | 1 |
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 1 |
| Improper Control of Generation of Code ('Code Injection') | 1 |
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 1 |
| Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 1 |
| Incorrect Privilege Assignment | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 15 | |
| 11 | |
| 11 | |
| 10 | |
| 10 | |
| 7 | |
| 7 | |
| 6 | |
| 4 | |
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery | interactive-3d-flipbook-powered-physics-engine |
| AI Engine – The Chatbot, AI Framework & MCP for WordPress | ai-engine |
| Ajax Load More – Infinite Scroll, Load More, & Lazy Load | ajax-load-more |
| Anant Addons for Elementor – Widgets, Templates & WooCommerce Builder | anant-addons-for-elementor |
| ANON::form embedded secure form | anonform-embedded-secure-form |
| App Builder – Create Native Android & iOS Apps On The Flight | app-builder |
| ATP Call Now | atp-call-now |
| Auto Upload Images | auto-upload-images |
| Automatically Hierarchic Categories in Menu | automatically-hierarchic-categories-in-menu |
| AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress | automatorwp |
| bbpress Simple Advert Units | bbpress-simple-advert-units |
| Beaver Builder Plugin (Starter Version) | bb-plugin |
| Better Random Redirect | better-random-redirect |
| Blog2Social: Social Media Auto Post & Scheduler | blog2social |
| Bluff Post | bluff-post |
| Breeze Cache | breeze |
| Bulk YouTube Post Creator | bulk-youtube-post-creator |
| Buying Buddy IDX CRM – Real Estate MLS Plugin | buying-buddy-idx-crm |
| Change Cart button Colors WooCommerce | wc-style |
| ClipLink | cliplink |
| Code Engine – PHP Snippets, AI Functions & Automation for WordPress | code-engine |
| CodePen Embed Block | codepen-embed-block |
| Connect Contact Form 7 and AWeber | integrate-contact-form-7-and-aweber |
| ContentStudio | contentstudio |
| Cookie-Script.com | cookie-script-com |
| Creative Contact Form | sexy-contact-form |
| CRM ERP Business Solution | freelancers & SME | for WordPress & WooCommerce | crm-erp-business-solution |
| CSV Importer Improved | csv-importer-improved |
| CSV Me | csv-me |
| DELUCKS SEO | delucks-seo |
| Download Attachments | download-attachments |
| Download Counter | download-counter |
| Download Manager | download-manager |
| Drag and Drop Multiple File Upload for Contact Form 7 | drag-and-drop-multiple-file-upload-contact-form-7 |
| Easy Social | easy-social-media |
| Easy Taxonomy Images | easy-taxonomy-images |
| Echo RSS Feed Post Generator | rss-feed-post-generator-echo |
| eCommerce Product Catalog Plugin for WordPress | ecommerce-product-catalog |
| eDS Responsive Menu | eds-responsive-menu |
| Elementor Website Builder Pro | elementor-pro |
| Elementor Website Builder – more than just a page builder | elementor |
| ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor | elementskit-lite |
| Enhanced Blocks – Page Builder Blocks for Gutenberg | enhanced-blocks |
| Esselink.nu Settings | esselinknu-settings |
| Euro FxRef Currency Converter (by DKZR) | euro-fxref-currency-converter |
| FastBook – Responsive Appointment Booking and Scheduling System | fastbook-responsive-appointment-booking-and-scheduling-system |
| File Manager Pro – Filester | filester |
| Firelight Lightbox | easy-fancybox |
| Football Pool | football-pool |
| FormLift for Keap (Legacy) Web Forms | formlift |
| Fortnox for WooCommerce | woocommerce-fortnox-integration |
| FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce | wp-marketing-automations |
| Fyrebox Quizzes | fyrebox-shortcode |
| GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | geodirectory |
| Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers | rafflepress |
| GiveWP – Donation Plugin and Fundraising Platform | give |
| Guest posting / Frontend Posting / Front Editor – WP Front User Submit | front-editor |
| Gutenberg Blocks – ACF Blocks Suite | acf-blocks |
| Gutenverse News – News Blocks for Blog & Magazine Sites | gutenverse-news |
| Hand Talk | handtalk |
| Hostel | hostel |
| HUSKY – Products Filter Professional for WooCommerce | woocommerce-products-filter |
| Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes | image-sizes-controller |
| Import YouTube videos as WP Posts | import-youtube-videos-as-wp-post |
| Inventory Presser – Car Dealer Listings | inventory-presser |
| IP Based Login | ip-based-login |
| Job Postings | job-postings |
| JobSearch WP Job Board | wp-jobsearch |
| JobWP – Job Board, Job Listing, Career Page and Recruitment Plugin | jobwp |
| Kata Plus – Addons for Elementor – Widgets, Extensions and Templates | kata-plus |
| Knowledge Base – Knowledge Base Maker | knowledge-base-maker |
| Lewe ChordPress – ChordPro Text Formatter | chordpress |
| Live Sports Streamthunder | live-sports-streamthunder |
| Login & Register Forms – Popup | Slider | Inline | WooCommerce | easy-login-woocommerce |
| Logo Manager For Samandehi | samandehi-logo-manager |
| Mailing Group Listserv | wp-mailing-group |
| Master Slider – Responsive Touch Slider | master-slider |
| Media Hygiene: Remove or Delete Unused Images and More! | media-hygiene |
| Modern Footnotes | modern-footnotes |
| Notifications for Forms & WordPress Actions | notifier |
| Oganro Travel Portal Search Widget for HotelBeds APITUDE API | oganro-travel-portal-search-widget-for-hotelbeds-apitude-api |
| Order Delivery Date Pro for WooCommerce | order-delivery-date |
| Page Builder – AIO WP Builder: #1 Website Builder for WordPress | all-in-one-wp-builder |
| PDPA Consent for Thailand | pdpa-consent |
| Pixabay Images | pixabay-images |
| Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing | woocommerce-google-adwords-conversion-tracking-tag |
| PixelBeds Channel Manager and Hotel Booking Engine | pixelbeds-channel-manager-booking-engine |
| Polls CP | cp-polls |
| Post and Page Builder by BoldGrid – Visual Drag and Drop Editor | post-and-page-builder |
| PowerPress Podcasting plugin by Blubrry | powerpress |
| Quiz Maker, Poll Maker & Survey Maker by Opinion Stage | social-polls-by-opinionstage |
| Rankie - Wordpress Rank Tracker Plugin | valvepress-rankie |
| RDFa Breadcrumb | rdfa-breadcrumb |
| Real Estate Manager – Property Listing and Agent Management | real-estate-manager |
| Recipes manager – WPH | wph-recipes-manager |
| Related Products Manager for WooCommerce | related-products-manager-woocommerce |
| School Management System for Wordpress | school-management |
| Scroll UP | scroll-to-up |
| Selling Commander for WooCommerce – connector plugin | selling-commander-connector |
| Simple Logo Carousel | simple-logo-carousel |
| Simple Sticky Footer | simple-sticky-footer |
| Sitekit | sitekit |
| Smart Notification Wordpress Plugin. Web & Mobile Push, FB Messenger, FB Notifications & Newsletter. | smio-push-notification |
| SpecFit | Try & Shop – AI Virtual Try-On for WooCommerce | try-on-for-woocommerce |
| Spoki – Chat Buttons and WooCommerce Notifications | spoki |
| Storyform | storyform |
| TableOn – WordPress Posts Table Filterable | posts-table-filterable |
| Target Video Easy Publish | brid-video-easy-publish |
| Tealium | tealium |
| TinyNav | tinynav |
| TM Replace Howdy | tm-replace-howdy |
| Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor | ultimate-blocks |
| Ultra Addons for Contact Form 7 | ultimate-addons-for-contact-form-7 |
| UpStream: a Project Management Plugin for WordPress | upstream |
| User Roles and Capabilities | user-roles-and-capabilities |
| Video List Manager | video-list-manager |
| Virtual Moderator | virtual-moderator |
| Wise Chat | wise-chat |
| Woocommerce Line Notify | woo-line-notify |
| WooCommerce Manager – Customize and Control Cart page, Add to Cart button, Checkout fields easily | innovs-woo-manager |
| WP Customer Area | customer-area |
| WP Dummy Content Generator | wp-dummy-content-generator |
| WP Inventory Manager | wp-inventory-manager |
| WP Register Profile With Shortcode | wp-register-profile-with-shortcode |
| WP Roadmap – Product Feedback Board | wp-roadmap |
| WP Social AutoConnect | wp-fb-autoconnect |
| WP User Profile Avatar | wp-user-profile-avatar |
| WP User Stylesheet Switcher | wp-user-stylesheet-switcher |
| WP Visitor Statistics (Real Time Traffic) | wp-stats-manager |
| WP Voting Contest Lite | wp-voting-contest |
| WP Zoho for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms – CRM, Bigin | cf7-zoho |
| WP-DownloadCounter | wp-downloadcounter |
| WP-Members Membership Plugin | wp-members |
| WP-Recall – Registration, Profile, Commerce & More | wp-recall |
| WPBakery Page Builder | js_composer |
| WPComplete | wpcomplete |
| WPThumb | wp-thumb |
| XML Travel Portal Widget | oganro-reservation-widget |
| YITH PayPal Express Checkout for WooCommerce | yith-paypal-express-checkout-for-woocommerce |
| Zapier for WordPress | zapier |
| Zara 4 Image Compression | zara-4 |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Fitness Park | fitness-park |
| Hello FSE Blog | hello-fse-blog |
| HYDRO - One Page Portfolio WordPress Theme | hydro |
| Kalium 3 | Creative WordPress & WooCommerce Theme | kalium |
| OceanWP | oceanwp |
| Spark Multipurpose | spark-multipurpose |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
Integration for Contact Form 7 and Zoho CRM, Bigin <= 1.3.0 - Unauthenticated PHP Object Injection
9.8
Affected Software
Researcher
Affected Software
Researcher
Affected Software
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce [wp-marketing-automations]
Researcher
Affected Software
Selling Commander for WooCommerce – connector plugin [selling-commander-connector]
Researcher
Affected Software
Researcher
Affected Software
HUSKY – Products Filter Professional for WooCommerce [woocommerce-products-filter]
Researcher
Affected Software
Pixabay Images [pixabay-images]
Researcher
Affected Software
Drag and Drop Multiple File Upload for Contact Form 7 [drag-and-drop-multiple-file-upload-contact-form-7]
Researcher
Affected Software
Download Counter [download-counter]
Researcher
Affected Software
Beaver Builder Plugin (Starter Version) [bb-plugin]
Researcher
Affected Software
Easy Taxonomy Images [easy-taxonomy-images]
Researcher
Affected Software
Ultra Addons for Contact Form 7 [ultimate-addons-for-contact-form-7]
Researcher
Affected Software
Wise Chat [wise-chat]
Researcher
Affected Software
eCommerce Product Catalog Plugin for WordPress [ecommerce-product-catalog]
Researcher
Blog2Social <= 8.4.4 - Authenticated (Subscriber+) SQL Injection via `prgSortPostType` Parameter
6.5
Affected Software
Blog2Social: Social Media Auto Post & Scheduler [blog2social]
Researcher
Affected Software
Rankie - Wordpress Rank Tracker Plugin [valvepress-rankie]
Researcher
Affected Software
Video List Manager [video-list-manager]
Researcher
Affected Software
WP Roadmap – Product Feedback Board [wp-roadmap]
Researcher
Affected Software
3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery [interactive-3d-flipbook-powered-physics-engine]
Researcher
Affected Software
Anant Addons for Elementor – Widgets, Templates & WooCommerce Builder [anant-addons-for-elementor]
Researcher
ANON::form embedded secure form <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
ANON::form embedded secure form [anonform-embedded-secure-form]
Researcher
Affected Software
Auto Upload Images [auto-upload-images]
Researcher
Affected Software
Automatically Hierarchic Categories in Menu [automatically-hierarchic-categories-in-menu]
Researcher
Affected Software
Buying Buddy IDX CRM – Real Estate MLS Plugin [buying-buddy-idx-crm]
Researcher
Affected Software
Researcher
Affected Software
Download Manager [download-manager]
Researcher
Affected Software
Elementor Website Builder Pro [elementor-pro]
Researcher
Affected Software
Researcher
Affected Software
Euro FxRef Currency Converter (by DKZR) [euro-fxref-currency-converter]
Researcher
Affected Software
Firelight Lightbox [easy-fancybox]
Researcher
Affected Software
Fitness Park [fitness-park]
Researcher
Affected Software
Fyrebox Quizzes [fyrebox-shortcode]
Researcher
Affected Software
Researcher
Affected Software
Gutenberg Blocks – ACF Blocks Suite [acf-blocks]
Researcher
Affected Software
Gutenverse News – News Blocks for Blog & Magazine Sites [gutenverse-news]
Researcher
Affected Software
Job Postings [job-postings]
Researcher
Affected Software
Master Slider – Responsive Touch Slider [master-slider]
Researcher
Affected Software
Modern Footnotes [modern-footnotes]
Researcher
Affected Software
Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing [woocommerce-google-adwords-conversion-tracking-tag]
Researcher
Affected Software
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor [post-and-page-builder]
Researcher
Affected Software
PowerPress Podcasting plugin by Blubrry [powerpress]
Researcher
Affected Software
Related Products Manager for WooCommerce [related-products-manager-woocommerce]
Researcher
Affected Software
Simple Logo Carousel [simple-logo-carousel]
Researcher
Affected Software
Simple Sticky Footer [simple-sticky-footer]
Researcher
Affected Software
Sitekit [sitekit]
Researcher
Affected Software
Spark Multipurpose [spark-multipurpose]
Researcher
Affected Software
TableOn – WordPress Posts Table Filterable [posts-table-filterable]
Researcher
Affected Software
Target Video Easy Publish [brid-video-easy-publish]
Researcher
Affected Software
Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor [ultimate-blocks]
Researcher
Affected Software
Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more]
Researcher
Affected Software
WP Register Profile With Shortcode [wp-register-profile-with-shortcode]
Researcher
Affected Software
WP-Members Membership Plugin [wp-members]
Researcher
Affected Software
WPBakery Page Builder [js_composer]
Researcher
Affected Software
WPComplete [wpcomplete]
Researcher
Affected Software
bbpress Simple Advert Units [bbpress-simple-advert-units]
Researcher
Affected Software
Bulk YouTube Post Creator [bulk-youtube-post-creator]
Researcher
Affected Software
Easy Social [easy-social-media]
Researcher
Affected Software
Echo RSS Feed Post Generator [rss-feed-post-generator-echo]
Researcher
Affected Software
FastBook – Responsive Appointment Booking and Scheduling System [fastbook-responsive-appointment-booking-and-scheduling-system]
Researcher
Affected Software
FormLift for Keap (Legacy) Web Forms [formlift]
Researcher
Affected Software
Hostel [hostel]
Researcher
Affected Software
Researcher
Affected Software
Lewe ChordPress – ChordPro Text Formatter [chordpress]
Researcher
Affected Software
School Management System for Wordpress [school-management]
Researcher
Affected Software
Scroll UP [scroll-to-up]
Researcher
Affected Software
Smart Notification Wordpress Plugin. Web & Mobile Push, FB Messenger, FB Notifications & Newsletter. [smio-push-notification]
Researcher
Affected Software
SpecFit | Try & Shop – AI Virtual Try-On for WooCommerce [try-on-for-woocommerce]
Researcher
Affected Software
Woocommerce Line Notify [woo-line-notify]
Researcher
WP User Stylesheet Switcher <= v2.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
Affected Software
WP User Stylesheet Switcher [wp-user-stylesheet-switcher]
Researcher
Affected Software
Football Pool [football-pool]
Researcher
Affected Software
Hand Talk [handtalk]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Connect Contact Form 7 and AWeber [integrate-contact-form-7-and-aweber]
Researcher
Affected Software
ContentStudio [contentstudio]
Researcher
Affected Software
Cookie-Script.com [cookie-script-com]
Researcher
Affected Software
CRM ERP Business Solution | freelancers & SME | for WordPress & WooCommerce [crm-erp-business-solution]
Researcher
Affected Software
DELUCKS SEO [delucks-seo]
Researcher
Affected Software
Download Attachments [download-attachments]
Researcher
Affected Software
Researcher
Affected Software
Import YouTube videos as WP Posts [import-youtube-videos-as-wp-post]
Researcher
Order Delivery Date Pro for WooCommerce < 12.6.0 - Unauthenticated Arbitrary Post Title Disclosure
5.3
Affected Software
Order Delivery Date Pro for WooCommerce [order-delivery-date]
Researcher
Affected Software
Video List Manager [video-list-manager]
Researcher
Affected Software
Researcher
Affected Software
WP Visitor Statistics (Real Time Traffic) [wp-stats-manager]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
OceanWP [oceanwp]
Researcher
Affected Software
ATP Call Now [atp-call-now]
Researcher
Affected Software
Better Random Redirect [better-random-redirect]
Researcher
Affected Software
CodePen Embed Block [codepen-embed-block]
Researcher
Affected Software
Polls CP [cp-polls]
Researcher
Affected Software
CSV Importer Improved [csv-importer-improved]
Researcher
Affected Software
File Manager Pro – Filester [filester]
Researcher
Affected Software
Hostel [hostel]
Researcher
Affected Software
Inventory Presser – Car Dealer Listings [inventory-presser]
Researcher
Affected Software
IP Based Login [ip-based-login]
Researcher
Affected Software
Login & Register Forms – Popup | Slider | Inline | WooCommerce [easy-login-woocommerce]
Researcher
Affected Software
PDPA Consent for Thailand [pdpa-consent]
Researcher
Affected Software
RDFa Breadcrumb [rdfa-breadcrumb]
Researcher
Affected Software
Recipes manager – WPH [wph-recipes-manager]
Researcher
Affected Software
Researcher
Affected Software
Tealium [tealium]
Researcher
Affected Software
WP Voting Contest Lite [wp-voting-contest]
Researcher
Affected Software
WP Social AutoConnect [wp-fb-autoconnect]
Researcher
Affected Software
Page Builder – AIO WP Builder: #1 Website Builder for WordPress [all-in-one-wp-builder]
Researcher
Affected Software
Bluff Post [bluff-post]
Researcher
Affected Software
Breeze Cache [breeze]
Researcher
Affected Software
Change Cart button Colors WooCommerce [wc-style]
Researcher
Affected Software
Creative Contact Form [sexy-contact-form]
Researcher
Affected Software
eDS Responsive Menu [eds-responsive-menu]
Researcher
Affected Software
Enhanced Blocks – Page Builder Blocks for Gutenberg [enhanced-blocks]
Researcher
Affected Software
Esselink.nu Settings [esselinknu-settings]
Researcher
Affected Software
Hello FSE Blog [hello-fse-blog]
Researcher
Affected Software
Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes [image-sizes-controller]
Researcher
Affected Software
JobSearch WP Job Board [wp-jobsearch]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Knowledge Base – Knowledge Base Maker [knowledge-base-maker]
Researcher
Affected Software
Live Sports Streamthunder [live-sports-streamthunder]
Researcher
Affected Software
Logo Manager For Samandehi [samandehi-logo-manager]
Researcher
Affected Software
Mailing Group Listserv [wp-mailing-group]
Researcher
Affected Software
Media Hygiene: Remove or Delete Unused Images and More! [media-hygiene]
Researcher
Oganro Travel Portal Search Widget for HotelBeds APITUDE API <= 1.0 - Cross-Site Request Forgery
4.3
Affected Software
Oganro Travel Portal Search Widget for HotelBeds APITUDE API [oganro-travel-portal-search-widget-for-hotelbeds-apitude-api]
Researcher
Affected Software
PixelBeds Channel Manager and Hotel Booking Engine [pixelbeds-channel-manager-booking-engine]
Researcher
Affected Software
Quiz Maker, Poll Maker & Survey Maker by Opinion Stage [social-polls-by-opinionstage]
Researcher
Affected Software
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor [post-and-page-builder]
Researcher
Affected Software
Real Estate Manager – Property Listing and Agent Management [real-estate-manager]
Researcher
Affected Software
Real Estate Manager – Property Listing and Agent Management [real-estate-manager]
Researcher
Affected Software
TinyNav [tinynav]
Researcher
Affected Software
TM Replace Howdy [tm-replace-howdy]
Researcher
Affected Software
Researcher
Affected Software
User Roles and Capabilities [user-roles-and-capabilities]
Researcher
Affected Software
Virtual Moderator [virtual-moderator]
Researcher
Affected Software
Notifications for Forms & WordPress Actions [notifier]
Researcher
Affected Software
Fortnox for WooCommerce [woocommerce-fortnox-integration]
Researcher
Affected Software
WP Customer Area [customer-area]
Researcher
Affected Software
WP Dummy Content Generator [wp-dummy-content-generator]
Researcher
Affected Software
Researcher
Affected Software
WP Inventory Manager [wp-inventory-manager]
Researcher
Affected Software
WP User Profile Avatar [wp-user-profile-avatar]
Researcher
Affected Software
WP-DownloadCounter [wp-downloadcounter]
Researcher
Affected Software
XML Travel Portal Widget [oganro-reservation-widget]
Researcher
Affected Software
YITH PayPal Express Checkout for WooCommerce [yith-paypal-express-checkout-for-woocommerce]
Researcher
Affected Software
Zapier for WordPress [zapier]
Researcher
Affected Software
Zara 4 Image Compression [zara-4]
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Comments