Wordfence Intelligence Weekly WordPress Vulnerability Report (July 14, 2025 to July 20, 2025)
đą Calling all Vulnerability Researchers and Bug Bounty Hunters! đą
đ Spring into Summer with Wordfence! Now through August 4, 2025, earn 2X bounty rewards for all in-scope submissions from our ‘High Threat’ list in software with fewer than 5 million active installs. Bounties up to $31,200 per vulnerability. Submit bold. Earn big!
Last week, there were 164 vulnerabilities disclosed in 138 WordPress Plugins and 6 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 49 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to implement layered security, aligning with our overarching mission to secure WordPress with defense in depth strategies. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report. As the world’s leading quality vulnerability database provider for WordPress, site owners can rest assured knowing Wordfence has their back.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 28,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
New Firewall Rules Deployed Last Week
The Wordfence Threat Intelligence Team reviews each vulnerability to determine impact and severity, along with assessing the likelihood of exploitation, to verify that the Wordfence Firewall provides sufficient protection.
The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our Premium, Care, and Response customers last week:
- WAF-RULE-859 – Data redacted while we work with the vendor on a patch.
Wordfence Premium, Care, and Response customers received this protection immediately, while users still running the free version of Wordfence will receive this enhanced protection after a 30 day delay.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 123 |
| Unpatched | 41 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Medium Severity | 129 |
| High Severity | 19 |
| Critical Severity | 16 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 70 |
| Missing Authorization | 25 |
| Cross-Site Request Forgery (CSRF) | 17 |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 13 |
| Exposure of Sensitive Information to an Unauthorized Actor | 9 |
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 7 |
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 6 |
| Deserialization of Untrusted Data | 5 |
| Unrestricted Upload of File with Dangerous Type | 4 |
| External Control of File Name or Path | 2 |
| Improper Control of Generation of Code ('Code Injection') | 2 |
| Authentication Bypass Using an Alternate Path or Channel | 1 |
| Authorization Bypass Through User-Controlled Key | 1 |
| Improper Privilege Management | 1 |
| Server-Side Request Forgery (SSRF) | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 26 | |
| 16 | |
| 13 | |
| 8 | |
| 7 | |
| 7 | |
| 7 | |
| 6 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| aapanel WP Toolkit | aapanel-wp-toolkit |
| Affiliate Reviews | affiliate-reviews |
| Alike - WordPress Custom Post Comparison | alike |
| All In One Lightbox â show any media in beautiful popups | lightbox-block |
| Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) | azon-addon-js-composer |
| Animator â Scroll Triggered Animations | scroll-triggered-animations |
| AntiSpam for Contact Form 7 | cf7-antispam |
| Apollo - Sticky Full Width HTML5 Audio Player | lbg-audio5-html5-shoutcast-sticky |
| Attachment Manager | attachment-manager |
| Avada (Fusion) Builder | fusion-builder |
| Avishi WP PayPal Payment Button | avishi-wp-paypal-payment-button |
| bbPress Move Topics | bbp-move-topics |
| bbPress Notify (No-Spam) | bbpress-notify-nospam |
| Bears Backup | bears-backup |
| Block Editor Gallery Slider for WordPress â Image Slider, Gallery Carousel & Lightbox Plugin | block-editor-gallery-slider |
| Bold Page Builder | bold-page-builder |
| Brandfolder â Digital Asset Management Simplified. | brandfolder |
| Breeze Checkout | breeze-checkout |
| Brevo SMTP â YaySMTP | smtp-sendinblue |
| Chatbox Manager | wa-chatbox-manager |
| Cloud SAML SSO â Single Sign On Login | cloud-sso-single-sign-on |
| CM Pop-Up â Create engaging popups to capture attention and boost interaction | cm-pop-up-banners |
| Companion Auto Update | companion-auto-update |
| Copymatic â AI Content Writer & Generator | copymatic |
| CoSchool LMS â A complete Learning Management System to Create and Sell Your Courses Online | coschool |
| Cost Calculator | ql-cost-calculator |
| Counter live visitors for WooCommerce | counter-visitor-for-woocommerce |
| Coupon Affiliates â Affiliate Plugin for WooCommerce | woo-coupon-usage |
| Crowdfunding for WooCommerce | crowdfunding-for-woocommerce |
| Custom API for WP | custom-api-for-wp |
| Custom User Registration Fields for WooCommerce | user-registration-plugin-for-woocommerce |
| DB Backup | db-backup |
| Easy Appointment Booking & Scheduling System â Webba Booking Calendar | webba-booking-lite |
| Easy Elementor Addons â Addons Pack for Elementor Page Builder | easy-elementor-addons |
| ELEX WooCommerce Bulk Edit Products, Prices & Attributes (Basic) | elex-bulk-edit-products-prices-attributes-for-woocommerce-basic |
| Email Attachment by Order Status & Products | email-attachment-by-order-status-products |
| EPay.bg Payments | epaybg-payments |
| Fade Slider | fade-slider |
| FG Drupal to WordPress | fg-drupal-to-wp |
| FluentSnippets â High-Performance Code Snippets, Header & Footer Code, Custom CSS & PHP Code Manager | easy-code-manager |
| FoodMenu - WP Creative Restaurant Menu Showcase WooCommerce | dzs-restaurantmenu |
| Formality | formality |
| Forminator Forms â Contact Form, Payment Form & Custom Form Builder | forminator |
| Ghost Kit â Page Builder Blocks, Motion Effects & Extensions | ghostkit |
| GSheetConnector â WooCommerce Google Sheets Connector, Export Orders & Products | wc-gsheetconnector |
| Gutentor â Gutenberg Blocks â Page Builder for Gutenberg Editor | gutentor |
| hpb seo plugin for WordPress | hpbseo |
| HT Contact Form â Drag & Drop Form Builder for WordPress | ht-contactform |
| HTML5 Radio Player - WPBakery Page Builder Addon | lbg_radio_player_addon_visual_composer |
| IDonatePro - Blood Donation, Request And Donor Management WordPress Plugin | idonate-pro |
| Image Wall | image-wall |
| Import CDN-Remote Images | import-cdn-remote-images |
| Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms | integration-for-contact-form-7-and-google-sheets |
| Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms | integration-for-contact-form-7-and-pipedrive |
| JetBlocks for Elementor | jet-blocks |
| JetBlog | jet-blog |
| JetElements | jet-elements |
| JetEngine | jet-engine |
| JetFormBuilder â Dynamic Blocks Form Builder | jetformbuilder |
| JetMenu | jet-menu |
| JetPopup | jet-popup |
| JetSearch | jet-search |
| JetSmartFilters | jet-smart-filters |
| JetTabs | jet-tabs |
| JetTricks | jet-tricks |
| JetWooBuilder | jet-woo-builder |
| KBx Pro Ultimate | knowledgebase-helpdesk-pro |
| Knowledge Base | knowledgebase |
| lbg-audio4-html5-shoutcast | lbg-audio4-html5-shoutcast |
| LeadBI Plugin for WordPress | leadbi |
| Listly: Listicles For WordPress | listly |
| Live Stream Badger | live-stream-badger |
| LoginPress Pro | loginpress-pro |
| Madara - Core | madara-core |
| Malcure Malware Shield â Removal, Repair, Monitor | wp-malware-removal |
| Map My Locations | map-my-locations |
| Master Addons for Elementor â Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits | master-addons |
| MasterStudy LMS Pro | masterstudy-lms-learning-management-system-pro |
| Maya Business Plugin | paymaya-checkout-for-woocommerce |
| Media Library Assistant | media-library-assistant |
| Mediabay - WordPress Media Library Folders | mediabay |
| MORKVA Vchasno Kasa Integration | mrkv-vchasno-kasa |
| Multimedia Playlist Slider Addon for WPBakery Page Builder | lbg_vp_youtube_vimeo_addon_visual_composer |
| News Kit Addons For Elementor | news-kit-elementor-addons |
| Newsletters | newsletters-lite |
| OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer) | stepbyteservice-openstreetmap |
| PartnerskĂœ systĂ©m Martinus | martinus-partnersky-system |
| Pinterest Automatic | wp-pinterest-automatic |
| Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo â Biteship | biteship |
| ProfileGrid â User Profiles, Groups and Communities | profilegrid-user-profiles-groups-and-communities |
| Real Estate Property 2025 Create Your Own Fields and Search Bar | real-estate-right-now |
| Residential Address Detection | residential-address-detection |
| Responsive Addons for Elementor â Free Elementor Addons, Kits and Elementor Templates | responsive-addons-for-elementor |
| Restaurant Menu and Food Ordering | mp-restaurant-menu |
| Restrict File Access | restrict-file-access |
| Revolution Video Player With Bottom Playlist WordPress Plugin - YouTube/Vimeo/Self-Hosted Support | revolution_video_player |
| Robokassa payment gateway for Woocommerce | robokassa |
| Ruven Themes: Shortcodes | ruven-themes-shortcodes |
| School Management System for Wordpress | school-management |
| Shortcodes Ultimate â Content Elements | shortcodes-ultimate |
| SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support | lbg-audio8-html5-radio-ads |
| Simple Link Directory Pro | qc-simple-link-directory |
| Simple Stripe Checkout | simple-stripe-checkout |
| Site.pro for WooCommerce | b1-accounting |
| SMTP for Amazon SES â YaySMTP | smtp-amazon-ses |
| SMTP for SendGrid â YaySMTP | smtp-sendgrid |
| SMTP2GO for WordPress â Email Made Easy | smtp2go |
| Stop and Block bots plugin Anti-bots | antibots |
| Store Exporter â Export WooCommerce Products, Orders, Subscriptions, Customers | woocommerce-exporter |
| Store Toolkit â WooCommerce Extensions, Quick Enhancements & Handy Tools | woocommerce-store-toolkit |
| Strong Testimonials | strong-testimonials |
| Temporarily Hidden Content | temporarily-hidden-content |
| Terms descriptions | terms-descriptions |
| Testimonial Post type | testimonial-post-type |
| The Plus Addons for Elementor Page Builder Pro | theplus_elementor_addon |
| Theme Builder For Elementor | theme-builder-for-elementor |
| ThemeREX Addons | trx_addons |
| Ultimate WP Mail | ultimate-wp-mail |
| Universal Video Player - Addon for WPBakery Page Builder | lbg-universal-video-player-addon-visual-composer |
| Universal Video Player - Addon for WPBakery Page Builder | lbg_universal_video_player_addon_visual_composer |
| URL Shortener Plugin For WordPress | exact-links |
| Useful Tab Block â Responsive & AMP-Compatible | useful-tab-block-responsive-amp-compatible |
| Vertical scroll image slideshow gallery | vertical-scroll-image-slideshow-gallery |
| Videopack | video-embed-thumbnail-generator |
| Wallet System for WooCommerce â Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments | wallet-system-for-woocommerce |
| Welcart e-Commerce | usc-e-shop |
| Widget for Google Reviews | business-reviews-wp |
| WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet | woocommerce-refund-and-exchange |
| WooCommerce Shop Page Builder | dzs-wootable |
| WP Delicious â Recipe Plugin for Food Bloggers (formerly Delicious Recipes) | delicious-recipes |
| WP Event Manager â Events Calendar, Registrations, Sell Tickets with WooCommerce | wp-event-manager |
| WP Hide Post â Hide Posts, Pages, Custom Post Types, and Control Products Visibility for WooCommerce | wp-post-hide |
| WP Smart Flexslider | wp-smart-flexslider |
| WP-Click-Tracker | wp-click-track |
| WPAdverts â Classifieds Plugin | wpadverts |
| YayExtra â WooCommerce Extra Product Options | yayextra |
| Youtube Vimeo Video Player and Slider WP Plugin | video_player_youtube_vimeo |
| Zuppler Online Ordering | zuppler-online-ordering |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Alone â Charity Multipurpose Non-profit WordPress Theme | alone |
| Goza - Nonprofit Charity WordPress Theme | goza-theme |
| GymBase Theme Classes | gymbase_classes |
| Hestia | hestia |
| Houzez | houzez |
| Visual Art | Gallery WordPress Theme | visual-arts |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you shouldâve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Bears Backup [bears-backup]
Researcher
Custom User Registration Fields for WooCommerce <= 2.1.2 - Unauthenticated Arbitrary File Upload
9.8
Affected Software
Custom User Registration Fields for WooCommerce [user-registration-plugin-for-woocommerce]
Researcher
Affected Software
Formality [formality]
Researcher
Affected Software
HT Contact Form â Drag & Drop Form Builder for WordPress [ht-contactform]
Researcher
Affected Software
Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms [integration-for-contact-form-7-and-google-sheets]
Researcher
Affected Software
Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms [integration-for-contact-form-7-and-pipedrive]
Researcher
Affected Software
LoginPress Pro [loginpress-pro]
Researcher
Affected Software
WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet [woocommerce-refund-and-exchange]
Researchers
Affected Software
Researcher
Affected Software
Attachment Manager [attachment-manager]
Researcher
Affected Software
Goza - Nonprofit Charity WordPress Theme [goza-theme]
Researcher
Affected Software
HT Contact Form â Drag & Drop Form Builder for WordPress [ht-contactform]
Researcher
Affected Software
HT Contact Form â Drag & Drop Form Builder for WordPress [ht-contactform]
Researcher
Affected Software
Madara - Core [madara-core]
Researcher
Affected Software
aapanel WP Toolkit [aapanel-wp-toolkit]
Researcher
Affected Software
Site.pro for WooCommerce [b1-accounting]
Researcher
Affected Software
School Management System for Wordpress [school-management]
Researcher
Affected Software
Counter live visitors for WooCommerce [counter-visitor-for-woocommerce]
Researcher
Affected Software
Cloud SAML SSO â Single Sign On Login [cloud-sso-single-sign-on]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
KBx Pro Ultimate [knowledgebase-helpdesk-pro]
Researcher
Affected Software
Malcure Malware Shield â Removal, Repair, Monitor [wp-malware-removal]
Researcher
Affected Software
Restrict File Access [restrict-file-access]
Researcher
Affected Software
Store Exporter â Export WooCommerce Products, Orders, Subscriptions, Customers [woocommerce-exporter]
Researcher
Affected Software
Widget for Google Reviews [business-reviews-wp]
Researcher
Affected Software
Store Toolkit â WooCommerce Extensions, Quick Enhancements & Handy Tools [woocommerce-store-toolkit]
Researcher
Affected Software
Custom API for WP [custom-api-for-wp]
Researcher
Affected Software
JetSearch [jet-search]
Researcher
Affected Software
MasterStudy LMS Pro [masterstudy-lms-learning-management-system-pro]
Researcher
Affected Software
Ultimate WP Mail [ultimate-wp-mail]
Researcher
Affected Software
Visual Art | Gallery WordPress Theme [visual-arts]
Researcher
Affected Software
Researcher
Affected Software
HT Contact Form â Drag & Drop Form Builder for WordPress [ht-contactform]
Researcher
Affected Software
JetFormBuilder â Dynamic Blocks Form Builder [jetformbuilder]
Researcher
Affected Software
Site.pro for WooCommerce [b1-accounting]
Researcher
Affected Software
Researcher
Affected Software
ELEX WooCommerce Bulk Edit Products, Prices & Attributes (Basic) [elex-bulk-edit-products-prices-attributes-for-woocommerce-basic]
Researcher
Affected Software
GymBase Theme Classes [gymbase_classes]
Researcher
Affected Software
Mediabay - WordPress Media Library Folders [mediabay]
Researcher
Affected Software
Pinterest Automatic [wp-pinterest-automatic]
Researcher
Affected Software
Affiliate Reviews [affiliate-reviews]
Researcher
Affected Software
Avada (Fusion) Builder [fusion-builder]
Researcher
Affected Software
Bold Page Builder [bold-page-builder]
Researcher
Brandfolder <= 5.0.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
6.4
Affected Software
Brandfolder â Digital Asset Management Simplified. [brandfolder]
Researcher
Affected Software
Crowdfunding for WooCommerce [crowdfunding-for-woocommerce]
Researcher
Affected Software
Easy Elementor Addons â Addons Pack for Elementor Page Builder [easy-elementor-addons]
Researcher
Affected Software
EPay.bg Payments [epaybg-payments]
Researcher
Affected Software
Researcher
Affected Software
Image Wall [image-wall]
Researcher
Affected Software
JetBlocks for Elementor [jet-blocks]
Researcher
Affected Software
JetBlocks for Elementor [jet-blocks]
Researcher
Affected Software
JetElements [jet-elements]
Researcher
Affected Software
JetPopup [jet-popup]
Researcher
Affected Software
JetPopup [jet-popup]
Researcher
Affected Software
JetSearch [jet-search]
Researcher
Affected Software
JetSmartFilters [jet-smart-filters]
Researcher
Affected Software
JetTabs [jet-tabs]
Researcher
Affected Software
JetTricks [jet-tricks]
Researcher
Affected Software
JetWooBuilder [jet-woo-builder]
Researcher
Affected Software
LeadBI Plugin for WordPress [leadbi]
Researcher
Affected Software
All In One Lightbox â show any media in beautiful popups [lightbox-block]
Researcher
Affected Software
Live Stream Badger [live-stream-badger]
Researcher
Affected Software
Map My Locations [map-my-locations]
Researcher
Affected Software
Researcher
Affected Software
Media Library Assistant [media-library-assistant]
Researcher
Affected Software
OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer) [stepbyteservice-openstreetmap]
Researcher
PartnerskĂœ systĂ©m Martinus <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
PartnerskĂœ systĂ©m Martinus [martinus-partnersky-system]
Researcher
Responsive Addons for Elementor <= 1.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Responsive Addons for Elementor â Free Elementor Addons, Kits and Elementor Templates [responsive-addons-for-elementor]
Researcher
Affected Software
Ruven Themes: Shortcodes [ruven-themes-shortcodes]
Researcher
Affected Software
Strong Testimonials [strong-testimonials]
Researcher
Affected Software
Temporarily Hidden Content [temporarily-hidden-content]
Researcher
Affected Software
Testimonial Post type [testimonial-post-type]
Researcher
Affected Software
ThemeREX Addons [trx_addons]
Researcher
Affected Software
Useful Tab Block â Responsive & AMP-Compatible [useful-tab-block-responsive-amp-compatible]
Researcher
Affected Software
Vertical scroll image slideshow gallery [vertical-scroll-image-slideshow-gallery]
Researcher
Affected Software
Videopack [video-embed-thumbnail-generator]
Researcher
Affected Software
WP Delicious â Recipe Plugin for Food Bloggers (formerly Delicious Recipes) [delicious-recipes]
Researcher
Affected Software
Shortcodes Ultimate â Content Elements [shortcodes-ultimate]
Researcher
Affected Software
WPAdverts â Classifieds Plugin [wpadverts]
Researcher
Affected Software
Researcher
Affected Software
Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) [azon-addon-js-composer]
Researcher
Affected Software
Apollo - Sticky Full Width HTML5 Audio Player [lbg-audio5-html5-shoutcast-sticky]
Researcher
Avishi WP PayPal Payment Button <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
Affected Software
Avishi WP PayPal Payment Button [avishi-wp-paypal-payment-button]
Researcher
Affected Software
bbPress Move Topics [bbp-move-topics]
Researcher
Affected Software
bbPress Notify (No-Spam) [bbpress-notify-nospam]
Researcher
Affected Software
Email Attachment by Order Status & Products [email-attachment-by-order-status-products]
Researcher
Affected Software
Fade Slider [fade-slider]
Researcher
Affected Software
FoodMenu - WP Creative Restaurant Menu Showcase WooCommerce [dzs-restaurantmenu]
Researcher
Affected Software
hpb seo plugin for WordPress [hpbseo]
Researcher
Affected Software
HTML5 Radio Player - WPBakery Page Builder Addon [lbg_radio_player_addon_visual_composer]
Researcher
Affected Software
JetBlog [jet-blog]
Researcher
Affected Software
JetSearch [jet-search]
Researcher
Multimedia Playlist Slider Addon for WPBakery Page Builder <= 2.1 - Reflected Cross-Site Scripting
6.1
Affected Software
Multimedia Playlist Slider Addon for WPBakery Page Builder [lbg_vp_youtube_vimeo_addon_visual_composer]
Researcher
Affected Software
ProfileGrid â User Profiles, Groups and Communities [profilegrid-user-profiles-groups-and-communities]
Researcher
Affected Software
lbg-audio4-html5-shoutcast [lbg-audio4-html5-shoutcast]
Researcher
Affected Software
Revolution Video Player With Bottom Playlist WordPress Plugin - YouTube/Vimeo/Self-Hosted Support [revolution_video_player]
Researcher
Affected Software
Robokassa payment gateway for Woocommerce [robokassa]
Researcher
Affected Software
Shortcodes Ultimate â Content Elements [shortcodes-ultimate]
Researcher
Affected Software
SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support [lbg-audio8-html5-radio-ads]
Researcher
Affected Software
Simple Link Directory Pro [qc-simple-link-directory]
Researcher
Affected Software
Simple Stripe Checkout [simple-stripe-checkout]
Researcher
Affected Software
WP Smart Flexslider [wp-smart-flexslider]
Researcher
Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Reflected Cross-Site Scripting
6.1
Affected Software
Universal Video Player - Addon for WPBakery Page Builder [lbg_universal_video_player_addon_visual_composer]
Researcher
Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Reflected Cross-Site Scripting
6.1
Affected Software
Universal Video Player - Addon for WPBakery Page Builder [lbg-universal-video-player-addon-visual-composer]
Researcher
Affected Software
WooCommerce Shop Page Builder [dzs-wootable]
Researcher
Affected Software
WP-Click-Tracker [wp-click-track]
Researcher
Affected Software
Youtube Vimeo Video Player and Slider WP Plugin [video_player_youtube_vimeo]
Researcher
Affected Software
Zuppler Online Ordering [zuppler-online-ordering]
Researcher
Affected Software
Companion Auto Update [companion-auto-update]
Researcher
Affected Software
FG Drupal to WordPress [fg-drupal-to-wp]
Researcher
Affected Software
Welcart e-Commerce [usc-e-shop]
Researcher
Affected Software
Breeze Checkout [breeze-checkout]
Researcher
Affected Software
Hestia [hestia]
Researcher
Affected Software
JetSmartFilters [jet-smart-filters]
Researcher
Affected Software
Listly: Listicles For WordPress [listly]
Researcher
Affected Software
Maya Business Plugin [paymaya-checkout-for-woocommerce]
Researcher
Affected Software
Residential Address Detection [residential-address-detection]
Researcher
Affected Software
Stop and Block bots plugin Anti-bots [antibots]
Researcher
Affected Software
URL Shortener Plugin For WordPress [exact-links]
Researcher
Affected Software
MORKVA Vchasno Kasa Integration [mrkv-vchasno-kasa]
Researcher
Affected Software
MORKVA Vchasno Kasa Integration [mrkv-vchasno-kasa]
Researcher
Affected Software
Easy Appointment Booking & Scheduling System â Webba Booking Calendar [webba-booking-lite]
Researcher
Affected Software
Researcher
Affected Software
SMTP for Amazon SES â YaySMTP [smtp-amazon-ses]
Researcher
Affected Software
SMTP for SendGrid â YaySMTP [smtp-sendgrid]
Researcher
Affected Software
Researcher
Affected Software
Brevo SMTP â YaySMTP [smtp-sendinblue]
Researcher
Knowledge Base <= 2.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Slug
4.4
Affected Software
Knowledge Base [knowledgebase]
Researcher
Affected Software
Terms descriptions [terms-descriptions]
Researcher
Affected Software
Animator â Scroll Triggered Animations [scroll-triggered-animations]
Researcher
Affected Software
AntiSpam for Contact Form 7 [cf7-antispam]
Researcher
Affected Software
Block Editor Gallery Slider for WordPress â Image Slider, Gallery Carousel & Lightbox Plugin [block-editor-gallery-slider]
Researcher
Affected Software
Chatbox Manager [wa-chatbox-manager]
Researcher
Affected Software
CM Pop-Up â Create engaging popups to capture attention and boost interaction [cm-pop-up-banners]
Researcher
Copymatic â AI Content Writer & Generator <= 2.1 - Cross-Site Request Forgery to Settings Update
4.3
Affected Software
Copymatic â AI Content Writer & Generator [copymatic]
Researcher
Affected Software
Cost Calculator [ql-cost-calculator]
Researcher
Affected Software
Coupon Affiliates â Affiliate Plugin for WooCommerce [woo-coupon-usage]
Researcher
Affected Software
DB Backup [db-backup]
Researcher
Affected Software
Researcher
Affected Software
Houzez [houzez]
Researcher
Affected Software
Import CDN-Remote Images [import-cdn-remote-images]
Researcher
Affected Software
JetBlocks for Elementor [jet-blocks]
Researcher
Affected Software
JetElements [jet-elements]
Researcher
Affected Software
JetEngine [jet-engine]
Researcher
Affected Software
JetMenu [jet-menu]
Researcher
Affected Software
JetPopup [jet-popup]
Researcher
Affected Software
JetTabs [jet-tabs]
Researcher
Affected Software
JetTricks [jet-tricks]
Researcher
Affected Software
JetWooBuilder [jet-woo-builder]
Researcher
Affected Software
News Kit Addons For Elementor [news-kit-elementor-addons]
Researcher
Affected Software
Newsletters [newsletters-lite]
Researcher
Affected Software
Researcher
Affected Software
Real Estate Property 2025 Create Your Own Fields and Search Bar [real-estate-right-now]
Researcher
Affected Software
Restaurant Menu and Food Ordering [mp-restaurant-menu]
Researcher
Affected Software
Researcher
Affected Software
The Plus Addons for Elementor Page Builder Pro [theplus_elementor_addon]
Researcher
Affected Software
Theme Builder For Elementor [theme-builder-for-elementor]
Researcher
Affected Software
Researcher
Affected Software
Easy Appointment Booking & Scheduling System â Webba Booking Calendar [webba-booking-lite]
Researcher
Affected Software
GSheetConnector â WooCommerce Google Sheets Connector, Export Orders & Products [wc-gsheetconnector]
Researcher
Affected Software
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfenceâs highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Comments