Wordfence Intelligence Weekly WordPress Vulnerability Report (August 25, 2025 to August 31, 2025)
📢 Calling all Vulnerability Researchers and Bug Bounty Hunters! 📢
🌞 Spring into Summer with Wordfence! Now through September 4, 2025, earn 2X bounty rewards for all in-scope submissions from our ‘High Threat’ list in software with fewer than 5 million active installs. Bounties up to $31,200 per vulnerability. Submit bold. Earn big!
💉 Participate in the SQLsplorer Challenge! Now through September 22, 2025, all SQL Injection vulnerabilities in software with at least 25 active installs are considered in-scope for all researchers, regardless of researcher tier AND earn a 20% bonus on all SQL Injection vulnerability submissions.
Last week, there were 157 vulnerabilities disclosed in 128 WordPress Plugins and 27 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 54 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to implement layered security, aligning with our overarching mission to secure WordPress with defense in depth strategies. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report. As the world’s leading quality vulnerability database provider for WordPress, site owners can rest assured knowing Wordfence has their back.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 28,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 103 |
| Unpatched | 54 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Medium Severity | 108 |
| High Severity | 47 |
| Critical Severity | 2 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 52 |
| Missing Authorization | 24 |
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 19 |
| Cross-Site Request Forgery (CSRF) | 14 |
| Deserialization of Untrusted Data | 11 |
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 8 |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 7 |
| Unrestricted Upload of File with Dangerous Type | 4 |
| Exposure of Sensitive Information to an Unauthorized Actor | 3 |
| Improper Privilege Management | 3 |
| Improper Control of Generation of Code ('Code Injection') | 2 |
| Server-Side Request Forgery (SSRF) | 2 |
| Improper Authentication | 1 |
| Improper Authorization | 1 |
| Improper Handling of Insufficient Permissions or Privileges | 1 |
| Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 1 |
| Inadequate Encryption Strength | 1 |
| Incorrect Authorization | 1 |
| Incorrect Privilege Assignment | 1 |
| URL Redirection to Untrusted Site ('Open Redirect') | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 18 | |
| 14 | |
| 10 | |
| 9 | |
| 8 | |
| 6 | |
| 5 | |
| 5 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| ACF Recent Posts Widget | acf-recent-posts-widget |
| Add Code To Head | add-code-to-head |
| Addon Elements for Elementor (formerly Elementor Addon Elements) | addon-elements-for-elementor-page-builder |
| Advance Seat Reservation Management for WooCommerce | scw-seat-reservation |
| AfterShip Tracking – All-In-One WooCommerce Order Tracking (Free plan available) | aftership-woocommerce-tracking |
| Ajax Search Lite – Live Search & Filter | ajax-search-lite |
| All Bootstrap Blocks | all-bootstrap-blocks |
| All-in-One WP Migration and Backup | all-in-one-wp-migration |
| Amministrazione Trasparente | amministrazione-trasparente |
| Beaver Builder Page Builder – Drag and Drop Website Builder | beaver-builder-lite-version |
| BetPress | betpress |
| bidorbuy Store Integrator | bidorbuystoreintegrator |
| Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection | stopbadbots |
| Blog Designer PRO for WordPress | blog-designer-pro |
| Bold Page Builder | bold-page-builder |
| Booking Calendar | booking |
| Booking System Trafft | booking-system-trafft |
| Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools | woocommerce-jetpack |
| bSlider – Create Responsive Image, Post, Product, and Video Sliders | b-slider |
| Captcha.eu | captcha-eu |
| Chartbeat | chartbeat |
| Chatbox Manager | wa-chatbox-manager |
| Cookie Notice & Consent | cookie-notice-consent |
| Customer Support Ticket System & Helpdesk | wp-ticket |
| Dokan Pro | dokan-pro |
| Drag and Drop File Upload for Elementor Forms | drag-and-drop-file-upload-for-elementor-forms |
| Dynamic AJAX Product Filters for WooCommerce | dynamic-ajax-product-filters-for-woocommerce |
| E-cab Taxi Booking Manager for Woocommerce | ecab-taxi-booking-manager |
| ElementInvader Addons for Elementor | elementinvader-addons-for-elementor |
| Employee Directory – Staff & Team Directory | employee-directory |
| Employee Spotlight – Team Member Showcase & Meet the Team Plugin | employee-spotlight |
| Epeken All Kurir for Woocommerce | epeken-all-kurir |
| Epic Review | epic-review |
| Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar | mage-eventpress |
| Event List | eventlist |
| Events Addon for Elementor | events-addon-for-elementor |
| Exertio Framework | exertio-framework |
| Feeds for TikTok – Keep Your Site Fresh with Your Latest Videos | b-tiktok-feed |
| File Manager, Code Editor, and Backup by Managefy | softdiscover-db-file-manager |
| Goal Tracker for Patreon | goal-tracker-for-patreon |
| Google XML News Sitemap plugin | gn-xml-sitemap |
| Gutenify – Visual Site Builder Blocks & Site Templates | gutenify |
| Hello Followers - Social Counter Plugin for WordPress | hellofollowers |
| Hotel Listings | hotel-listing |
| Houzez CRM | houzez-crm |
| iATS Online Forms | iats-online-forms |
| Image Gallery Block – Showcase Photos in Stunning Responsive Grids | 3d-image-gallery |
| Info Cards – present key information in elegant card layouts | info-cards |
| Instant Breaking News | instant-breaking-news |
| Institutions Directory | institutions-directory |
| Invisible Optin | invisible-optin |
| Javo Core | javo-core |
| JS Archive List | jquery-archive-list-widget |
| Lazy Load for Videos | lazy-load-for-videos |
| Link View | link-view |
| List Sub Pages | list-sub-pages |
| LWSCache | lwscache |
| MultiSite Clone Duplicator | multisite-clone-duplicator |
| Nest Addons | nest-addons |
| Newsletter subscription optin module | newsletter-subscription-widget-for-sendblaster |
| NextGEN Gallery Search | nextgen-gallery-search-galleries |
| Nifty Backups – WordPress Backup & Restore | nifty-backups |
| Ninja Forms – The Contact Form Builder That Grows With You | ninja-forms |
| Ocean Extra | ocean-extra |
| OSM Map Widget for Elementor | osm-map-elementor |
| Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE | otter-blocks |
| Page Manager for Elementor | page-manager-for-elementor |
| Parallax Section Block – give any section scroll-stopping depth | parallax-section |
| Password Reset with Code for WordPress REST API | bdvs-password-reset |
| PDF for Elementor Forms + Drag And Drop Template Builder | pdf-for-elementor-forms |
| Podlove Podcast Publisher | podlove-podcasting-plugin-for-wordpress |
| Post Grid Gutenberg Blocks – PostX | ultimate-post |
| Post Type Converter | post-type-converter |
| PPWP – Password Protect Pages | password-protect-page |
| Premium Age Verification / Restriction for WordPress | age-restriction |
| Printeers Print & Ship | invition-print-ship |
| Pro Bulk Watermark Plugin for WordPress | pro-watermark |
| Pronamic Google Maps | pronamic-google-maps |
| Quiz Maker, Poll Maker & Survey Maker by Opinion Stage | social-polls-by-opinionstage |
| Ray Enterprise Translation | lingotek-translation |
| Related Posts Lite | related-posts-lite |
| Responsive Mobile-Friendly Tooltip | responsive-mobile-friendly-tooltip |
| RingCentral Communications Plugin – FREE | rccp-free |
| Savyour Affiliate Partner | savyour-affiliate-partner |
| SEO For Images | seo-for-images |
| Simple Contact Form Plugin for WordPress – WP Easy Contact | wp-easy-contact |
| Simple Download Monitor | simple-download-monitor |
| Simple Page Access Restriction | simple-page-access-restriction |
| SiteSEO – SEO Simplified | siteseo |
| Slider Revolution | revslider |
| Small Package Quotes – USPS Edition | small-package-quotes-usps-edition |
| Solace Extra | solace-extra |
| SUMO Memberships for WooCommerce | sumomemberships |
| Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers | sunshine-photo-cart |
| Table Editor | wp-table-editor |
| TablePress – Tables in WordPress made easy | tablepress |
| Task Manager | task-manager |
| Theme Blvd Widget Areas | theme-blvd-widget-areas |
| Theme Switcher Reloaded | theme-switcher-reloaded |
| Transcoder | transcoder |
| Tripadvisor Shortcode | tripadvisor-shortcode |
| UiCore Elements – Free widgets and templates for Elementor | uicore-elements |
| Ultimate Tag Warrior Importer | utw-importer |
| Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin | uncanny-automator |
| Unlimited Elements For Elementor | unlimited-elements-for-elementor |
| UPC/EAN/GTIN Barcode Generator/Importer | upc-ean-barcode-generator |
| UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP | userswp |
| Vibes | vibes |
| Video Gallery – YouTube Gallery, Playlist & Video Grid | youtube-showcase |
| Video Share VOD – Turnkey Video Site Builder Script | video-share-vod |
| WooCommerce csv import export | extendons-eo-wooimport-export |
| WooCommerce Payment Gateway for Saferpay | woocommerce-payment-gateway-for-saferpay |
| WooCommerce Photo Reviews Premium | woocommerce-photo-reviews |
| WordPress Automatic Plugin | wp-automatic |
| WordPress HTML | custom-html-bodyhead |
| WP Bulk Delete | wp-bulk-delete |
| WP Hotel Booking | wp-hotel-booking |
| WP Thumbtack Review Slider | wp-thumbtack-review-slider |
| WP ULike Pro | wp-ulike-pro |
| WPAvatar | wpavatar |
| Xagio SEO & AEO – AI SEO for Google Rankings & AI Visibility | xagio-seo |
| XM-Backup | xm-backup |
| XmasB Quotes | xmasb-quotes |
| Xpro Addons — 140+ Widgets for Elementor | xpro-elementor-addons |
| Xpro Theme Builder For Elementor – FREE | xpro-theme-builder |
| Yahoo! WebPlayer | yahoo-media-player |
| YayPricing – WooCommerce Dynamic Pricing & Discounts | yaypricing |
| Zephyr Project Manager | zephyr-project-manager |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| 777 | triple-seven |
| AI Hub - Startup & Technology WordPress Theme | aihub |
| ArcHub - Architecture and Interior Design WordPress Theme | archub |
| Aromatica - Cafe & Coffee Shop WordPress Theme | aromatica |
| Blanka - One Page WordPress Theme | blanka-wp |
| Cars4Rent | Auto Rental & Taxi WordPress Theme + RTL | cars4rent |
| Creatify | creatify |
| Famita - Minimalist WooCommerce WordPress Theme | famita |
| FinAg - Creative & Finance Agency PSD Template | finag |
| Golo - City Travel Guide WordPress Theme | golo |
| Houzez | houzez |
| Hub - Responsive Multi-Purpose WordPress Theme | hub |
| Indutri | indutri |
| Ireca - Car Rental Boat, Bike, Vehicle, Calendar WordPress Theme | ireca |
| Jannah - Newspaper Magazine News BuddyPress AMP | jannah |
| Lione - Creative Portfolio WordPress Theme | lione |
| Magazine Saga | magazine-saga |
| Makeaholic - Beauty Cosmetics WordPress Theme | makeaholic |
| Neresa - Elementor WordPress Theme | neresa-wp |
| Noo JobMonster | noo-jobmonster |
| Nuss - Hotel Booking WordPress | nuss |
| Pin = Pinterest Style / Personal Masonry Blog / Front-end Submission | pin-wp |
| Spock - Medical Doctor Dentist & Beauty WordPress Theme | spock |
| Uncode | uncode |
| WooHoo Newspaper Magazine Theme | woohoo |
| WooTour | woo-tour |
| Ziston - Directory Listing WordPress Theme | ziston |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
Affected Software
Drag and Drop File Upload for Elementor Forms [drag-and-drop-file-upload-for-elementor-forms]
Researcher
Affected Software
RingCentral Communications Plugin – FREE [rccp-free]
Researcher
Affected Software
Event List [eventlist]
Researcher
Affected Software
Hotel Listings [hotel-listing]
Researcher
Affected Software
Researcher
Affected Software
Video Share VOD – Turnkey Video Site Builder Script [video-share-vod]
Researcher
Affected Software
Aromatica - Cafe & Coffee Shop WordPress Theme [aromatica]
Researcher
Affected Software
Blanka - One Page WordPress Theme [blanka-wp]
Researcher
Affected Software
Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools [woocommerce-jetpack]
Researcher
Patch Status
Unpatched
Unpatched
Published
Aug 26, 2025
Aug 26, 2025
Affected Software
Researcher
Affected Software
Creatify [creatify]
Researcher
Affected Software
Employee Directory – Staff & Team Directory [employee-directory]
Researcher
Affected Software
Employee Spotlight – Team Member Showcase & Meet the Team Plugin [employee-spotlight]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Houzez [houzez]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Magazine Saga [magazine-saga]
Researcher
Affected Software
Neresa - Elementor WordPress Theme [neresa-wp]
Researcher
Affected Software
Researcher
Patch Status
Unpatched
Unpatched
Published
Aug 25, 2025
Aug 25, 2025
Affected Software
Researcher
Affected Software
Password Reset with Code for WordPress REST API [bdvs-password-reset]
Researcher
Poll, Survey & Quiz Maker Plugin by Opinion Stage <= 19.11.0 - Unauthenticated Local File Inclusion
8.1
Affected Software
Quiz Maker, Poll Maker & Survey Maker by Opinion Stage [social-polls-by-opinionstage]
Researcher
Affected Software
Ray Enterprise Translation [lingotek-translation]
Researcher
Affected Software
Researcher
Affected Software
Task Manager [task-manager]
Researcher
Affected Software
UPC/EAN/GTIN Barcode Generator/Importer [upc-ean-barcode-generator]
Researcher
Affected Software
WooHoo Newspaper Magazine Theme [woohoo]
Researcher
Affected Software
WooCommerce csv import export [extendons-eo-wooimport-export]
Researcher
Affected Software
Simple Contact Form Plugin for WordPress – WP Easy Contact [wp-easy-contact]
Researcher
Affected Software
Customer Support Ticket System & Helpdesk [wp-ticket]
Researcher
Affected Software
Video Gallery – YouTube Gallery, Playlist & Video Grid [youtube-showcase]
Researcher
Affected Software
Researcher
Affected Software
Advance Seat Reservation Management for WooCommerce [scw-seat-reservation]
Researcher
Affected Software
JS Archive List [jquery-archive-list-widget]
Researcher
Affected Software
Nest Addons [nest-addons]
Researcher
Affected Software
Premium Age Verification / Restriction for WordPress [age-restriction]
Researcher
Affected Software
Vibes [vibes]
Researcher
Affected Software
Researcher
Xagio SEO <= 7.1.0.5 - Unauthenticated Sensitive Information Exposure via Unprotected Back-Up Files
7.5
Affected Software
Researcher
Affected Software
bidorbuy Store Integrator [bidorbuystoreintegrator]
Researcher
Affected Software
Cookie Notice & Consent [cookie-notice-consent]
Researcher
Affected Software
Post Grid Gutenberg Blocks – PostX [ultimate-post]
Researcher
Small Package Quotes – USPS Edition <= 1.3.9 - Authenticated (Administrator+) PHP Object Injection
6.6
Affected Software
Small Package Quotes – USPS Edition [small-package-quotes-usps-edition]
Researcher
Affected Software
Researcher
Affected Software
Exertio Framework [exertio-framework]
Researcher
Affected Software
iATS Online Forms [iats-online-forms]
Researcher
Affected Software
Simple Download Monitor [simple-download-monitor]
Researcher
Affected Software
Slider Revolution [revslider]
Researcher
Affected Software
WooCommerce Photo Reviews Premium [woocommerce-photo-reviews]
Researcher
Affected Software
ACF Recent Posts Widget [acf-recent-posts-widget]
Researcher
Affected Software
Bold Page Builder [bold-page-builder]
Researcher
Affected Software
Booking Calendar [booking]
Researcher
Affected Software
Booking System Trafft [booking-system-trafft]
Researcher
Affected Software
Chartbeat [chartbeat]
Researcher
Affected Software
Chatbox Manager [wa-chatbox-manager]
Researcher
Affected Software
Dynamic AJAX Product Filters for WooCommerce [dynamic-ajax-product-filters-for-woocommerce]
Researcher
Affected Software
Dynamic AJAX Product Filters for WooCommerce [dynamic-ajax-product-filters-for-woocommerce]
Researcher
Affected Software
ElementInvader Addons for Elementor [elementinvader-addons-for-elementor]
Researcher
Affected Software
Epeken All Kurir for Woocommerce [epeken-all-kurir]
Researcher
Affected Software
Events Addon for Elementor [events-addon-for-elementor]
Researcher
Affected Software
Lazy Load for Videos [lazy-load-for-videos]
Researcher
Affected Software
Link View [link-view]
Researcher
Affected Software
List Sub Pages [list-sub-pages]
Researcher
Affected Software
Ocean Extra [ocean-extra]
Researcher
Affected Software
OSM Map Widget for Elementor [osm-map-elementor]
Researcher
Affected Software
PDF for Elementor Forms + Drag And Drop Template Builder [pdf-for-elementor-forms]
Researcher
Affected Software
Responsive Mobile-Friendly Tooltip [responsive-mobile-friendly-tooltip]
Researcher
Affected Software
Simple Download Monitor [simple-download-monitor]
Researcher
Affected Software
SiteSEO – SEO Simplified [siteseo]
Researcher
Affected Software
Solace Extra [solace-extra]
Researcher
Affected Software
TablePress – Tables in WordPress made easy [tablepress]
Researcher
Affected Software
Transcoder [transcoder]
Researcher
Affected Software
UiCore Elements – Free widgets and templates for Elementor [uicore-elements]
Researcher
Affected Software
Unlimited Elements For Elementor [unlimited-elements-for-elementor]
Researcher
Affected Software
Researcher
Affected Software
WordPress HTML [custom-html-bodyhead]
Researcher
Affected Software
WPAvatar [wpavatar]
Researcher
Affected Software
Xpro Addons — 140+ Widgets for Elementor [xpro-elementor-addons]
Researcher
Affected Software
Beaver Builder Page Builder – Drag and Drop Website Builder [beaver-builder-lite-version]
Researcher
Affected Software
BetPress [betpress]
Researcher
Affected Software
Captcha.eu [captcha-eu]
Researcher
Affected Software
Epic Review [epic-review]
Researcher
Affected Software
Researcher
Google XML News Sitemap plugin <= 0.02 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
Affected Software
Google XML News Sitemap plugin [gn-xml-sitemap]
Researcher
Affected Software
Hello Followers - Social Counter Plugin for WordPress [hellofollowers]
Researcher
Affected Software
Houzez [houzez]
Researcher
Affected Software
Institutions Directory [institutions-directory]
Researcher
Affected Software
Invisible Optin [invisible-optin]
Researcher
Affected Software
Noo JobMonster [noo-jobmonster]
Researcher
Affected Software
MultiSite Clone Duplicator [multisite-clone-duplicator]
Researcher
Affected Software
Newsletter subscription optin module [newsletter-subscription-widget-for-sendblaster]
Researcher
Affected Software
NextGEN Gallery Search [nextgen-gallery-search-galleries]
Researcher
Affected Software
Nifty Backups – WordPress Backup & Restore [nifty-backups]
Researcher
Affected Software
Podlove Podcast Publisher [podlove-podcasting-plugin-for-wordpress]
Researcher
Affected Software
Savyour Affiliate Partner [savyour-affiliate-partner]
Researcher
Affected Software
Theme Blvd Widget Areas [theme-blvd-widget-areas]
Researcher
Affected Software
Theme Switcher Reloaded [theme-switcher-reloaded]
Researcher
Affected Software
Uncode [uncode]
Researcher
Affected Software
WooTour [woo-tour]
Researcher
Affected Software
WP ULike Pro [wp-ulike-pro]
Researcher
Affected Software
XmasB Quotes [xmasb-quotes]
Researcher
Affected Software
Yahoo! WebPlayer [yahoo-media-player]
Researcher
Affected Software
Amministrazione Trasparente [amministrazione-trasparente]
Researcher
Affected Software
Pronamic Google Maps [pronamic-google-maps]
Researcher
Affected Software
AfterShip Tracking – All-In-One WooCommerce Order Tracking (Free plan available) [aftership-woocommerce-tracking]
Researcher
Affected Software
Ajax Search Lite – Live Search & Filter [ajax-search-lite]
Researcher
Affected Software
All Bootstrap Blocks [all-bootstrap-blocks]
Researcher
Affected Software
Researcher
Affected Software
Blog Designer PRO for WordPress [blog-designer-pro]
Researcher
Affected Software
Makeaholic - Beauty Cosmetics WordPress Theme [makeaholic]
Researcher
Affected Software
Researcher
Affected Software
Printeers Print & Ship [invition-print-ship]
Researcher
Affected Software
Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers [sunshine-photo-cart]
Researcher
Affected Software
E-cab Taxi Booking Manager for Woocommerce [ecab-taxi-booking-manager]
Researcher
Affected Software
WooCommerce Payment Gateway for Saferpay [woocommerce-payment-gateway-for-saferpay]
Researcher
Affected Software
YayPricing – WooCommerce Dynamic Pricing & Discounts [yaypricing]
Researcher
Affected Software
File Manager, Code Editor, and Backup by Managefy [softdiscover-db-file-manager]
Researcher
Affected Software
WordPress Automatic Plugin [wp-automatic]
Researcher
Affected Software
Add Code To Head [add-code-to-head]
Researcher
Affected Software
All-in-One WP Migration and Backup [all-in-one-wp-migration]
Researcher
Affected Software
Goal Tracker for Patreon [goal-tracker-for-patreon]
Researcher
Affected Software
Tripadvisor Shortcode [tripadvisor-shortcode]
Researcher
Affected Software
WP Thumbtack Review Slider [wp-thumbtack-review-slider]
Researcher
Affected Software
Addon Elements for Elementor (formerly Elementor Addon Elements) [addon-elements-for-elementor-page-builder]
Researcher
Affected Software
Houzez CRM [houzez-crm]
Researcher
Image Gallery block – Create and display photo gallery/photo album. <= 1.0.7 - Missing Authorization
4.3
Affected Software
Image Gallery Block – Showcase Photos in Stunning Responsive Grids [3d-image-gallery]
Researcher
Affected Software
Researcher
Affected Software
Instant Breaking News [instant-breaking-news]
Researcher
Affected Software
Researcher
Affected Software
LWSCache [lwscache]
Researcher
Affected Software
Page Manager for Elementor [page-manager-for-elementor]
Researcher
Affected Software
Parallax Section Block – give any section scroll-stopping depth [parallax-section]
Researcher
Affected Software
Post Type Converter [post-type-converter]
Researcher
PPWP – Password Protect Pages <= 1.9.10 - Authenticated (Subscriber+) Content Exposure via REST API
4.3
Affected Software
PPWP – Password Protect Pages [password-protect-page]
Researcher
Affected Software
Printeers Print & Ship [invition-print-ship]
Researcher
Affected Software
Pro Bulk Watermark Plugin for WordPress [pro-watermark]
Researcher
Affected Software
Related Posts Lite [related-posts-lite]
Researcher
Affected Software
SEO For Images [seo-for-images]
Researcher
Affected Software
Simple Page Access Restriction [simple-page-access-restriction]
Researcher
Affected Software
SUMO Memberships for WooCommerce [sumomemberships]
Researcher
Affected Software
Table Editor [wp-table-editor]
Researcher
Affected Software
Feeds for TikTok – Keep Your Site Fresh with Your Latest Videos [b-tiktok-feed]
Researcher
Affected Software
Ultimate Tag Warrior Importer [utw-importer]
Researcher
Affected Software
Researcher
Affected Software
WP Bulk Delete [wp-bulk-delete]
Researcher
Affected Software
WP Hotel Booking [wp-hotel-booking]
Researcher
Affected Software
XM-Backup [xm-backup]
Researcher
Affected Software
Xpro Theme Builder For Elementor – FREE [xpro-theme-builder]
Researcher
Affected Software
Zephyr Project Manager [zephyr-project-manager]
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Comments