Wordfence Intelligence Weekly WordPress Vulnerability Report (September 22, 2025 to September 28, 2025)
📢 Calling all Vulnerability Researchers and Bug Bounty Hunters! 📢
🚀 Operation: Maximum Impact Challenge! Now through November 10, 2025, earn 2X bounty rewards for all in-scope submissions in software with at least 5,000 active installs and fewer than 5 million active installs. Bounties up to $31,200 per vulnerability. Submit bold. Earn big!
📁 The LFInder Challenge: Refine your LFI hunting skills with an expanded scope. Now through November 24, 2025, all LFI vulnerabilities in software with at least 25 active installs are considered in-scope for all researchers, regardless of researcher tier, AND earn a 30% bonus on all Local File Inclusion vulnerability submissions not already increased by another promotion.
Last week, there were 475 vulnerabilities disclosed in 421 WordPress Plugins and 19 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 74 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to implement layered security, aligning with our overarching mission to secure WordPress with defense in depth strategies. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report. As the world’s leading quality vulnerability database provider for WordPress, site owners can rest assured knowing Wordfence has their back.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 29,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
New Firewall Rules Deployed Last Week
The Wordfence Threat Intelligence Team reviews each vulnerability to determine impact and severity, along with assessing the likelihood of exploitation, to verify that the Wordfence Firewall provides sufficient protection.
The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our Premium, Care, and Response customers last week:
- WAF-RULE-864 – Data redacted while we work with the vendor on a patch.
Wordfence Premium, Care, and Response customers received this protection immediately, while users still running the free version of Wordfence will receive this enhanced protection after a 30 day delay.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 271 |
| Unpatched | 204 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Low Severity | 2 |
| Medium Severity | 438 |
| High Severity | 31 |
| Critical Severity | 4 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 205 |
| Missing Authorization | 91 |
| Cross-Site Request Forgery (CSRF) | 80 |
| Exposure of Sensitive Information to an Unauthorized Actor | 23 |
| Server-Side Request Forgery (SSRF) | 14 |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 13 |
| Deserialization of Untrusted Data | 10 |
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 10 |
| Improper Control of Generation of Code ('Code Injection') | 10 |
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 4 |
| Unrestricted Upload of File with Dangerous Type | 4 |
| URL Redirection to Untrusted Site ('Open Redirect') | 3 |
| Authorization Bypass Through User-Controlled Key | 2 |
| Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') | 1 |
| Improper Neutralization of Special Elements Used in a Template Engine | 1 |
| Improper Privilege Management | 1 |
| Insertion of Sensitive Information into Log File | 1 |
| Uncontrolled Resource Consumption | 1 |
| Use of Insufficiently Random Values | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 106 | |
| 61 | |
| 27 | |
| 21 | |
| 21 | |
| 18 | |
| 17 | |
| 16 | |
| 16 | |
| 10 | |
| 10 | |
| 9 | |
| 9 | |
| 8 | |
| 8 | |
| 7 | |
| 6 | |
| 6 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery | interactive-3d-flipbook-powered-physics-engine |
| Academy LMS | academy |
| Accordions | accordions |
| Additional Fees For WooCommerce Checkout | woo-additional-fees-on-checkout-wordpress |
| Advanced Appointment Booking & Scheduling | advanced-appointment-booking-scheduling |
| Advanced Settings 3 | advanced-settings |
| Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… | acf-views |
| AffiliateWP – External Referral Links | affiliatewp-external-referral-links |
| AgreeMe Checkboxes For WooCommerce | agreeme-checkboxes-for-woocommerce |
| Ajax Load More – Infinite Scroll, Load More, & Lazy Load | ajax-load-more |
| All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) | all-in-one-seo-pack |
| AllInOne - Banner Rotator | all-in-one-bannerRotator |
| AnyClip Luminous Studio | anyclip-media |
| Append extensions on Pages | append-extensions-on-pages |
| Append Link on Copy | append-link-on-copy |
| AppMySite – WordPress & WooCommerce Mobile App Builder (No-Code Android & iOS App Maker) | appmysite |
| AR for WordPress | ar-for-wordpress |
| aThemes Addons for Elementor | athemes-addons-for-elementor-lite |
| Auction Feed | auction-feed |
| AuthorSure | authorsure |
| Awesome Support – WordPress HelpDesk & Support Plugin | awesome-support |
| AWP Classifieds | another-wordpress-classifieds-plugin |
| B2Bking | b2bking |
| Backuply – Backup, Restore, Migrate and Clone | backuply |
| Banhammer – Monitor Site Traffic, Block Bad Users and Bots | banhammer |
| bbP topic count | bbp-topic-count |
| Beaf – Photo Comparison Block | image-compare-block |
| Behance Portfolio Manager | portfolio-manager-powered-by-behance |
| Better Find and Replace – AI-Powered Suggestions | real-time-auto-find-and-replace |
| Bg Church Memos | bg-church-memos |
| Bitly's WordPress Plugin | wp-bitly |
| BlindMatrix e-Commerce | window-blinds-solution |
| Blog Designer | blog-designer |
| BM Content Builder | bm-builder |
| BMI Adult & Kid Calculator | bmi-adultkid-calculator |
| Bot Block – Stop Spam Referrals in Google Analytics | bot-block-stop-spam-google-analytics-referrals |
| BP Disable Activation Reloaded | bp-disable-activation-reloaded |
| Buckets | buckets |
| BuddyPress | buddypress |
| BuddyPress Notification Widget | buddypress-notifications-widget |
| Card Elements for WPBakery | card-elements-for-wpbakery |
| CardCom Payment Gateway | woo-cardcom-payment-gateway |
| Carousel Ultimate | carousel |
| Casengo Live Chat Support | the-casengo-chat-widget |
| CashBill.pl – Płatności WooCommerce | cashbill-payment-method |
| Category Dropdown by GCS Design | wp-category-dropdown |
| Category Featured Images | category-featured-images |
| Category Featured Images Extended | category-featured-images-extended |
| Cecabank WooCommerce Plugin | cecabank-woocommerce |
| CF7 Submissions – Securely Store Contact Form 7 Data and Attachments, Reply to the Sender and more | cf7-submissions |
| cForms – Light speed fast Form Builder | cforms-plugin |
| Clariti | clariti |
| Classic Widgets with Block-based Widgets | classic-widgets-with-block-based-widgets |
| Click & Tweet | click-tweet |
| CM Business Directory – Optimise and showcase local business | cm-business-directory |
| CoDesigner – All in One Elementor WooCommerce Builder | woolementor |
| Colibri Page Builder | colibri-page-builder |
| Comments – wpDiscuz | wpdiscuz |
| Compact Archives | compact-archives |
| Conditional Cart Messages for WooCommerce – YourPlugins.com | yourplugins-wc-conditional-cart-notices |
| Connector Wizard (formerly LC Wizard) | ghl-wizard |
| Contact Form 7 – Dynamic Text Extension | contact-form-7-dynamic-text-extension |
| Content Mask | content-mask |
| CopySafe Web Protection – Copy Protect Images | wp-copysafe-web |
| CoSchedule | coschedule-by-todaymade |
| Coupon Affiliates – Affiliate Plugin for WooCommerce | woo-coupon-usage |
| Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates | cozy-addons |
| CP Multi View Events Calendar | cp-multi-view-calendar |
| CubeWP Framework | cubewp-framework |
| Current Age Plugin | current-age |
| Custom Block Builder – Lazy Blocks | lazy-blocks |
| Custom iFrame – Embed PDFs, Videos, and External Content in WordPress (Elementor & Gutenberg) | custom-iframe |
| Custom Login URL | custom-login-url |
| Custom Post Type Images | custom-post-types-image |
| Customer Support Ticket System & Helpdesk | wp-ticket |
| Dashboard Notepad | dashboard-notepad |
| Delisho – Recipe Widgets and Blocks | dr-widgets-blocks |
| Deliver via Shipos for WooCommerce | wc-shipos-delivery |
| DELUCKS SEO | delucks-seo |
| Designil PDPA Thailand | pdpa-thailand |
| DethemeKit for Elementor | dethemekit-for-elementor |
| Developer | developer |
| Di Themes Demo Site Importer | di-themes-demo-site-importer |
| Dialogity Free Live Chat | dialogity-website-chat |
| Directory Pro | directory-pro |
| Ditty – Responsive News Tickers, Sliders, and Lists | ditty-news-ticker |
| DOAJ Export | doaj-export |
| Doliconnect | doliconnect |
| Double the Donation – A workplace giving tool | double-the-donation |
| Download After Email – Subscribe & Download Form Plugin | download-after-email |
| Download Manager | download-manager |
| Draft – Tailwind CSS for WordPress. | website-builder |
| Dynamic Team Manager – Team Member Showcase with grid, slider, table Elementor widget & shortcode | wp-team-manager |
| E-namad & Shamed Logo Manager | e-namad-shamed-logo-manager |
| Easy Elementor Addons – Addons Pack for Elementor Page Builder | easy-elementor-addons |
| Easy Hotel – Powerful Hotel Booking | easy-hotel |
| Easy Pricing Table WP | easy-pricing-table-wp |
| Easy Quotes | easy-quotes |
| Editor Custom Color Palette | editor-custom-color-palette |
| EmailKit – Email Customizer for WooCommerce & WP | emailkit |
| Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files | embed-any-document |
| Emergency password reset | emergency-password-reset |
| Employee Spotlight – Team Member Showcase & Meet the Team Plugin | employee-spotlight |
| Envíos Coordinadora Woocommerce (Oficial) – WordPress plugin | coordinadora |
| Epeken All Kurir for Woocommerce | epeken-all-kurir |
| Estonian Shipping Methods for WooCommerce | estonian-shipping-methods-for-woocommerce |
| Event Rocket | event-rocket |
| Events Manager – OpenStreetMaps | stonehenge-em-osm |
| Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI | everest-forms |
| eZee Online Hotel Booking Engine | online-booking-engine |
| Fastly | fastly |
| Featured Image from URL (FIFU) | featured-image-from-url |
| Flexible FAQ | flexible-faq |
| Flexible PDF Invoices for WooCommerce & WordPress | flexible-invoices |
| Flytedesk Digital | flytedesk-digital |
| Force Update Translations | force-update-translations |
| Form Generator for WordPress | form-generator-powered-by-jotform |
| Front End Users | front-end-only-users |
| Frontend File Manager Plugin | nmedia-user-file-uploader |
| Fusion Page Builder : Extension – Gallery | fusion-extension-gallery |
| Gallery Custom Links | gallery-custom-links |
| Gallery Lightbox | gallery-lightbox-slider |
| GD bbPress Tools | gd-bbpress-tools |
| Genealogical Tree – Family Tree & Ancestry for WordPress | genealogical-tree |
| Genesis Club Lite | genesis-club-lite |
| Geolocation IP Detection | geoip-detect |
| GetResponse Forms by Optin Cat | getresponse |
| GetResponse Official | getresponse-official |
| Getwid – Gutenberg Blocks | getwid |
| Gianism | gianism |
| Goodlayers Core | goodlayers-core |
| Google+ Comments | google-plus-comments |
| Goracash | goracash |
| Grand Conference Theme Custom Post Type | grandconference-custom-post |
| Gravitate Automated Tester | gravitate-automated-tester |
| Grid | grid |
| Groovy Menu Plugin (Free) | groovy-menu-free |
| GSheets Connector | sheetlink |
| GST for WooCommerce | gst-for-woocommerce |
| Gutenify – Visual Site Builder Blocks & Site Templates | gutenify |
| GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor | gutenkit-blocks-addon |
| Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor | gutentor |
| Helpdesk Support Ticket System for WooCommerce | support-ticket-system-for-woocommerce |
| Helpie FAQ — Accordion, Docs & Knowledge Base | helpie-faq |
| Heureka | heureka |
| Hide WP Toolbar | hide-wp-toolbar |
| HidePost | hidepost |
| HieCOR Payment Gateway Plugin | hcv4-payment-gateway |
| Highlight and Share – Unobtrusive and Lightweight Content Sharing | highlight-and-share |
| HivePress Claim Listings | hivepress-claim-listings |
| HORIZONTAL SLIDER | horizontal-slider |
| HotelRunner Booking Widget | hotelrunner |
| Houzez Theme - Functionality | houzez-theme-functionality |
| HT Feed | ht-instagram |
| HT Mega – Absolute Addons for WPBakery Page Builder | ht-mega-for-wpbakery |
| HTACCESS IP Blocker | htaccess-ip-blocker |
| Hubbub Lite – Fast, free social sharing and follow buttons | social-pug |
| Ibtana – WordPress Website Builder | ibtana-visual-editor |
| Icegram Express Pro | email-subscribers-premium |
| Image Editor by Pixo | image-editor-by-pixo |
| Image Hover Effects – Elementor Addon | image-hover-effects-addon-for-elementor |
| Image&Video FullScreen Background | lbg_fullscreen_fullwidth_slider |
| immonex Kickstart Team | immonex-kickstart-team |
| Instapage Plugin | instapage |
| Interact: Embed A Quiz On Your Site | interact-quiz-embed |
| IP Based Login | ip-based-login |
| Ivory Search – WordPress Search Plugin | add-search-to-menu |
| Javo Core | javo-core |
| Job Board Manager | job-board-manager |
| JS Job Manager | js-jobs |
| JSM file_get_contents() Shortcode | wp-file-get-contents |
| Jupiter X Core | jupiterx-core |
| Kama Click Counter | kama-clic-counter |
| kontur Admin Style | kontur-admin-style |
| LambertGroup - AllInOne - Banner with Playlist | all-in-one-bannerWithPlaylist |
| LambertGroup - AllInOne - Banner with Thumbnails | all-in-one-thumbnailsBanner |
| LambertGroup - AllInOne - Content Slider | all-in-one-contentSlider |
| Last Updated Shortcode | last-updated-shortcode |
| Lenix scss compiler | lenix-scss-compiler |
| Library Bookshelves | library-bookshelves |
| LinkedInclude | linkedinclude |
| Links shortcode | links-shortcode |
| List Child Pages Shortcode | list-child-pages-shortcode |
| ListingPro Plugin | listingpro-plugin |
| ListingPro Reviews | listingpro-reviews |
| Login-Logout | login-logout |
| Logo Showcase – Logo Slider, Carousel & Sponsors Gallery | logo-showcase |
| LWS Affiliation | lws-affiliation |
| Magento 2 WP Integration | m2wp |
| Mail Baby SMTP | mail-baby-smtp |
| Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails | mail-mint |
| Mail Subscribe List | mail-subscribe-list |
| Make Column Clickable for Elementor | make-column-clickable-elementor |
| MakeStories (for Google Web Stories) | makestories-helper |
| Manago AI & Leadoo AI | salesmanago |
| Map Categories to Pages | map-categories-to-pages |
| Maps for WP | maps-for-wp |
| Mapster WP Maps | mapster-wp-maps |
| Markdown Shortcode | markdown-shortcode |
| MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution | marketking-multivendor-marketplace-for-woocommerce |
| Master Slider – Responsive Touch Slider | master-slider |
| MasterStudy LMS WordPress Plugin – for Online Courses and Education | masterstudy-lms-learning-management-system |
| Mavis HTTPS to HTTP Redirection | mavis-https-to-http-redirect |
| MaxiBlocks Builder | 17,000+ Design Assets, Patterns, Icons & Starter Sites | maxi-blocks |
| Media Library Assistant | media-library-assistant |
| Mega Elements – Addons for Elementor | mega-elements-addons-for-elementor |
| Memberful – Membership Plugin | memberful-wp |
| miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon | miniorange-login-openid |
| Mobi2Go | mobi2go |
| Multilang Contact Form | multilang-contact-form |
| MultiLoca - WooCommerce Multi Locations Inventory Management | WooCommerce-Multi-Locations-Inventory-Management |
| MWW Disclaimer Buttons | mww-disclaimer-buttons |
| Netgsm | netgsm |
| NewsmanApp | newsmanapp |
| Nextend Social Login and Register | nextend-facebook-connect |
| NGG Smart Image Search | ngg-smart-image-search |
| Ninja Forms – The Contact Form Builder That Grows With You | ninja-forms |
| NIX Anti-Spam Light | nix-anti-spam-light |
| No External Links | mihdan-no-external-links |
| Norebro Extra | norebro-extra |
| Nota Fiscal Eletrônica WooCommerce | nota-fiscal-eletronica-woocommerce |
| Notely | notely |
| OAuth Single Sign On – SSO (OAuth Client) | miniorange-login-with-eve-online-google-facebook |
| Open User Map – Interactive Leaflet Maps | open-user-map |
| Oshine Core | oshine-core |
| Page Manager for Elementor | page-manager-for-elementor |
| Page-list | page-list |
| Participants Database | participants-database |
| Passster – Password Protect Pages and Content | content-protector |
| payOS | payos |
| Payrexx Payment Gateway for WooCommerce | woo-payrexx-gateway |
| PE Easy Slider | pe-easy-slider |
| Penci Filter Everything | penci-filter-everything |
| Penci Podcast | penci-podcast |
| Penci Portfolio | penci-portfolio |
| Penci Recipe | penci-recipe |
| Penci Shortcodes & Performance | penci-shortcodes |
| Perfect Brands for WooCommerce | perfect-woocommerce-brands |
| PGS Core | pgs-core |
| Photo Gallery by Ays – Responsive Image Gallery | gallery-photo-gallery |
| Photospace Responsive Gallery | photospace-responsive |
| PilotPress | pilotpress |
| Pinterest Pinboard Widget | pinterest-pinboard-widget |
| Piotnet Forms | piotnetforms |
| PlayerJS – Free Custom HTML5 Video and Audio Player Builder | playerjs |
| Plugin Ongkos Kirim JNE Tiki Sicepat Wahana J&T POS for Woocommerce | ongkoskirim-id |
| Plugin Security Scanner | plugin-security-scanner |
| Podlove Podcast Publisher | podlove-podcasting-plugin-for-wordpress |
| Podlove Subscribe button | podlove-subscribe-button |
| Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls | poll-maker |
| PopAd | popad |
| Popular Posts by Webline | popular-posts-by-webline |
| Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder | popup-maker |
| Portfolio by BestWebSoft – Work and Projects Presentation Plugin for WordPress | portfolio |
| Portfolio Grid – Filterable Gallery, Grid & Slider Showcase | advance-portfolio-grid |
| Post Carousel Slider for Elementor | post-carousel-slider-for-elementor |
| Post Featured Video | post-featured-video |
| PowerFolio – Portfolio & Image Gallery for Elementor | portfolio-elementor |
| pressapps-accordion-faq | pressapps-accordion-faq |
| Printcart Web to Print Product Designer for WooCommerce | printcart-integration |
| Printeers Print & Ship | invition-print-ship |
| Product Catalog Simple | post-type-x |
| Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) | uni-woo-custom-product-options-premium |
| Product Time Countdown for WooCommerce | product-countdown-for-woocommerce |
| Professional Contact Form | professional-contact-form |
| Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker | wedevs-project-manager |
| Proof Factor – Social Proof Notifications | proof-factor-social-proof-notifications |
| Publitio | publitio |
| Pz-LinkCard | pz-linkcard |
| Qubely – Advanced Gutenberg Blocks | qubely |
| Query Posts | query-posts |
| Quick View for WooCommerce | woo-quickview |
| Quiz Maker by AYS | quiz-maker |
| Real Estate Manager – Property Listing and Agent Management | real-estate-manager |
| Recaptcha – wp | recaptcha-wp |
| Referral Link Tracker | referral-link-tracker |
| Request a Quote – Quote Forms for Any WordPress Site | request-a-quote |
| Responsive Zoom In/Out Slider WordPress Plugin | lbg_zoominoutslider |
| Revive.so – Bulk Rewrite and Republish Blog Posts | revive-so |
| RIS Version Switcher – Downgrade or Upgrade WP Versions Easily | ris-version-switcher |
| Safety Exit | safety-exit |
| Sales Count Manager for WooCommerce | wc-sales-count-manager |
| SAPO Feed | sapo-feed |
| Save as PDF Plugin by PDFCrowd | save-as-pdf-by-pdfcrowd |
| Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization | metasync |
| Sendle Shipping Plugin | official-sendle-shipping-method |
| SEO Backlink Monitor | seo-backlink-monitor |
| SEO Search Permalink | seo-search-permalink |
| ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution | shopengine |
| Shortcode | shortcode |
| Show Pages List | show-pages-list |
| ShrinkTheWeb (STW) Website Previews Plugin | shrinktheweb-website-preview-plugin |
| Sign-up Sheets | sign-up-sheets |
| Silencesoft RSS Reader | external-rss-reader |
| Simple Colorbox | simple-colorbox |
| Simple JWT Login – Allows you to use JWT on REST endpoints. | simple-jwt-login |
| Simple Meta Tags | simple-meta-tags |
| Simple Restaurant Menu | simple-restaurant-menu |
| Simple SEO | cds-simple-seo |
| Sitekit | sitekit |
| SiteNarrator Text-to-Speech Widget | sitespeaker-widget |
| Skimlinks Affiliate Marketing Tool | skimlinks |
| SKT Blocks – Gutenberg based Page Builder | skt-blocks |
| Skyword XMLRPC publishing | skyword-plugin |
| Slightly troublesome permalink | slightly-troublesome-permalink |
| Smart Blocks – WordPress Gutenberg Blocks | smart-blocks |
| Smart Related Products – AI-Inspired Recommendations for WooCommerce | ai-related-products |
| SnapWidget Social Photo Feed Widget | snapwidget-wp-instagram-widget |
| SQL Chart Builder | sql-chart-builder |
| Stackable – Page Builder Gutenberg Blocks | stackable-ultimate-gutenberg-blocks |
| Sticky Header Effects for Elementor | sticky-header-effects-for-elementor |
| Stock Message | stock-message |
| StylePress for Elementor | full-site-builder-for-elementor |
| Subresource Integrity (SRI) Manager | wp-sri |
| Subscribe to Download | subscribe-to-download |
| Subscribe To Unlock | subscribe-to-unlock |
| Super Blank | super-blank |
| SV Proven Expert | sv-provenexpert |
| Sweet Energy Efficiency | sweet-energy-efficiency |
| Sync Feedly | sync-feedly |
| System Dashboard | system-dashboard |
| Tapfiliate | tapfiliate |
| Team Members | team-members |
| Team – Team Members Showcase Plugin | tlp-team |
| Termageddon: Cookie Consent & Privacy Compliance | termageddon-usercentrics |
| Testimonial Slider – Free Testimonials Slider Plugin | testimonial-add |
| Text To Speech TTS Accessibility | text-to-audio |
| tf-woo-product-grid | tf-woo-product-grid |
| The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce | the-plus-addons-for-elementor-page-builder |
| The Tribal Plugin | the-tech-tribe |
| Theater for WordPress | theatre |
| Theme My Login | theme-my-login |
| Themify Builder | themify-builder |
| TI WooCommerce Wishlist | ti-woocommerce-wishlist |
| TOCHAT.BE | tochat-be |
| Translate WordPress with ConveyThis – AI Multilingual Plugin | conveythis-translate |
| TranslatePress – Translate Multilingual sites with AI Translation | translatepress-multilingual |
| Travel Map | travelmap-blog |
| Trust Reviews plugin for Google, Tripadvisor, Yelp, Airbnb and other platforms | trust-reviews |
| Trustpilot Reviews | trustpilot-reviews |
| TweetThis Shortcode | tweetthis-shortcode |
| TZ Plus Gallery | tz-plus-gallery |
| UK Address Postcode Validation | uk-address-postcode-validation |
| Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor | ultimate-store-kit |
| Ultimate Watermark – Image Watermark, Image Protection & Bulk Watermarking | ultimate-watermark |
| Ultimate WP Mail | ultimate-wp-mail |
| Uncanny Toolkit for LearnDash | uncanny-learndash-toolkit |
| Upcoming Events Lists | upcoming-events-lists |
| Upsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups. | upsell-order-bump-offer-for-woocommerce |
| User Avatar – Reloaded | user-avatar-reloaded |
| User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration | wp-user-frontend |
| User Notes | user-notes |
| Vehica Core | vehica-core |
| Verowa Connect | verowa-connect |
| Video Blogster Lite | video-blogster-lite |
| Video Gallery – YouTube Gallery, Playlist & Video Grid | youtube-showcase |
| VikRestaurants Table Reservations and Take-Away | vikrestaurants |
| VM Menu Reorder plugin | vm-menu-reorder |
| VOD Infomaniak | vod-infomaniak |
| VoucherPress | voucherpress |
| VPSUForm – Drag & Drop Contact Form Builder with Email Automation | v-form |
| W3SCloud Contact Form 7 to Zoho CRM | w3s-cf7-zoho |
| Website Chat Button: Kommo integration | website-chat-button-kommo-integration |
| WEDOS | Protection & Cache Performance | wgpwpp |
| Werk aan de Muur | werk-aan-de-muur |
| WeShareAI – AI-Powered Share Buttons (formerly E-MAILiT) | e-mailit |
| Widget Options - Extended | extended-widget-options |
| Widgets for Tiktok Feed | widgets-for-tiktok-video-feed |
| WooEvents - Calendar and Event Booking | woo-events |
| WooMS | wooms |
| WordPress Adverts Plugin – Adverts Click Tracker | adverts-click-tracker |
| WordPress Image shrinker | wp-image-shrinker |
| WordPress Widgets Shortcode | wp-widgets-shortcode |
| Workreap | workreap |
| Workscout Core | workscout-core |
| WP Advanced PDF | wp-advanced-pdf |
| WP Attractive Donations System | wp-attractive-donations-system-easy-stripe-paypal-donations |
| WP Compiler | wp-compiler |
| WP Compress – Instant Performance & Speed Optimization | wp-compress-image-optimizer |
| WP Content Protection | wp-content-protection |
| WP Delete User Accounts | wp-delete-user-accounts |
| WP Directory Kit | wpdirectorykit |
| WP Events Manager | wp-events-manager |
| WP Frontend Admin – Display WP Admin Pages in the Frontend | display-admin-page-on-frontend |
| WP Geo | wp-geo |
| WP Gravity Forms HubSpot | gf-hubspot |
| WP Gravity Forms Keap/Infusionsoft | gf-infusionsoft |
| WP Mailto Links – Protect Email Addresses | wp-mailto-links |
| WP Media Categories | wp-media-categories |
| WP Microdata | wp-microdata |
| WP Popup Builder – Popup Forms and Marketing Lead Generation | wp-popup-builder |
| WP Proposals | wp-proposals |
| WP Recipe Maker | wp-recipe-maker |
| WP Social Widget | wp-social-widget |
| WP Statistics – Simple, privacy-friendly Google Analytics alternative | wp-statistics |
| WP Subscription Forms PRO | wp-subscription-forms-pro |
| WP Subtitle | wp-subtitle |
| WP System Information | wp-system-info |
| Wp tabber widget | wp-tabber-widget |
| WP Tesseract | wp-tesseract |
| WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor | wte-elementor-widgets |
| WP Virtual Assistant | VirtualAssistant |
| WP-DownloadManager | wp-downloadmanager |
| WP-Members Membership Plugin | wp-members |
| wp-mpdf | wp-mpdf |
| WPB Quick View Popup for WooCommerce – Fast Product Preview Modal & AJAX Quick View | woocommerce-lightbox |
| WPC Smart Messages for WooCommerce | wpc-smart-messages |
| WPCasa – Real Estate for WordPress | wpcasa |
| WPComplete | wpcomplete |
| WPeMatico RSS Feed Fetcher | wpematico |
| WPFront User Role Editor | wpfront-user-role-editor |
| WPKoi Templates for Elementor | wpkoi-templates-for-elementor |
| WPMK PDF Generator | wpmk-pdf-generator |
| xili-language | xili-language |
| xili-tidy-tags | xili-tidy-tags |
| YayCurrency – WooCommerce Multi-Currency Switcher | yaycurrency |
| Yext Plugin | yext |
| Zephyr Project Manager | zephyr-project-manager |
| Zoho Billing – Embed Payment Form | zoho-subscriptions |
| Zoho Flow – No-Code Workflow Automation | zoho-flow |
| ZoloBlocks – Advanced Gutenberg Blocks, Website Builder & Page Design Toolkit | zoloblocks |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Addison - Architecture & Interior Design WordPress Theme | addison |
| constructo | constructo |
| CouponXxL | couponxxl |
| DentiCare - Medical & Dentist WordPress Theme | denticare |
| DriCub - Driving School WordPress Theme | dricub-driving-school |
| fingo | fingo |
| FoodBook | foodbook |
| frames | frames |
| Goldenblatt - Lawyer & Attorney WordPress Theme | goldenblatt |
| Greenify | Solar & Renewable Energy WordPress Theme | greenify |
| imevent | imevent |
| Nokri - Job Board WordPress Theme | nokri |
| Snow Monkey | snow-monkey |
| Soledad | soledad |
| TheGem | thegem |
| TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme | thegem-elementor |
| Woostify | woostify |
| WPLMS Learning Management System for WordPress, WordPress LMS | wplms |
| XStore | xstore |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
Affected Software
MultiLoca - WooCommerce Multi Locations Inventory Management [WooCommerce-Multi-Locations-Inventory-Management]
Researcher
Affected Software
Podlove Podcast Publisher [podlove-podcasting-plugin-for-wordpress]
Researcher
Affected Software
Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) [uni-woo-custom-product-options-premium]
Researcher
Affected Software
WPCasa – Real Estate for WordPress [wpcasa]
Researcher
Affected Software
Advanced Settings 3 [advanced-settings]
Researcher
Affected Software
Researcher
Affected Software
BlindMatrix e-Commerce [window-blinds-solution]
Researcher
Affected Software
Researcher
Affected Software
BM Content Builder [bm-builder]
Researcher
Affected Software
DentiCare - Medical & Dentist WordPress Theme [denticare]
Researcher
Affected Software
Goldenblatt - Lawyer & Attorney WordPress Theme [goldenblatt]
Researcher
Affected Software
Researcher
Patch Status
Patched
Patched
Published
Sep 23, 2025
Sep 23, 2025
Affected Software
Houzez Theme - Functionality [houzez-theme-functionality]
Researcher
Affected Software
Sign-up Sheets [sign-up-sheets]
Researcher
Affected Software
tf-woo-product-grid [tf-woo-product-grid]
Researcher
Affected Software
TranslatePress – Translate Multilingual sites with AI Translation [translatepress-multilingual]
Researcher
Affected Software
Workreap [workreap]
Researcher
Affected Software
pressapps-accordion-faq [pressapps-accordion-faq]
Researcher
Affected Software
Awesome Support – WordPress HelpDesk & Support Plugin [awesome-support]
Researcher
Affected Software
Easy Elementor Addons – Addons Pack for Elementor Page Builder [easy-elementor-addons]
Researcher
Affected Software
Easy Pricing Table WP [easy-pricing-table-wp]
Researcher
Affected Software
HieCOR Payment Gateway Plugin [hcv4-payment-gateway]
Researcher
Affected Software
immonex Kickstart Team [immonex-kickstart-team]
Researcher
Affected Software
Soledad [soledad]
Researcher
Affected Software
Subscribe to Download [subscribe-to-download]
Researcher
Affected Software
Subscribe To Unlock [subscribe-to-unlock]
Researcher
Affected Software
Testimonial Slider – Free Testimonials Slider Plugin [testimonial-add]
Researcher
Affected Software
DriCub - Driving School WordPress Theme [dricub-driving-school]
Researcher
Affected Software
Researcher
Affected Software
Silencesoft RSS Reader [external-rss-reader]
Researcher
Affected Software
VOD Infomaniak [vod-infomaniak]
Researcher
Affected Software
Researcher
Affected Software
WP-DownloadManager [wp-downloadmanager]
Researcher
Affected Software
YayCurrency – WooCommerce Multi-Currency Switcher [yaycurrency]
Researcher
Affected Software
Researcher
Affected Software
GSheets Connector [sheetlink]
Researcher
Affected Software
Icegram Express Pro [email-subscribers-premium]
Researcher
Affected Software
Translate WordPress with ConveyThis – AI Multilingual Plugin [conveythis-translate]
Researcher
Affected Software
miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon [miniorange-login-openid]
Researcher
Affected Software
AllInOne - Banner Rotator [all-in-one-bannerRotator]
Researcher
Affected Software
Researcher
Affected Software
AWP Classifieds [another-wordpress-classifieds-plugin]
Researcher
Affected Software
Researcher
Affected Software
CardCom Payment Gateway [woo-cardcom-payment-gateway]
Researcher
Affected Software
Cecabank WooCommerce Plugin [cecabank-woocommerce]
Researcher
Affected Software
Classic Widgets with Block-based Widgets [classic-widgets-with-block-based-widgets]
Researcher
Contact Form 7 – Dynamic Text Extension <= 5.0.5 - Unauthenticated Arbitrary Shortcode Execution
6.5
Affected Software
Contact Form 7 – Dynamic Text Extension [contact-form-7-dynamic-text-extension]
Researcher
Affected Software
Researcher
Affected Software
DriCub - Driving School WordPress Theme [dricub-driving-school]
Researcher
Affected Software
Easy Quotes [easy-quotes]
Researcher
Affected Software
Researcher
Affected Software
Image&Video FullScreen Background [lbg_fullscreen_fullwidth_slider]
Researcher
Affected Software
imevent [imevent]
Researcher
LambertGroup - AllInOne - Banner with Playlist <= 3.8 - Authenticated (Contributor+) SQL Injection
6.5
Affected Software
LambertGroup - AllInOne - Banner with Playlist [all-in-one-bannerWithPlaylist]
Researcher
LambertGroup - AllInOne - Banner with Thumbnails <= 3.8 - Authenticated (Contributor+) SQL Injection
6.5
Affected Software
LambertGroup - AllInOne - Banner with Thumbnails [all-in-one-thumbnailsBanner]
Researcher
Affected Software
LambertGroup - AllInOne - Content Slider [all-in-one-contentSlider]
Researcher
Affected Software
Responsive Zoom In/Out Slider WordPress Plugin [lbg_zoominoutslider]
Researcher
Affected Software
Memberful – Membership Plugin [memberful-wp]
Researcher
Affected Software
Perfect Brands for WooCommerce [perfect-woocommerce-brands]
Researcher
Affected Software
PGS Core [pgs-core]
Researcher
Affected Software
Printcart Web to Print Product Designer for WooCommerce [printcart-integration]
Researcher
Affected Software
Manago AI & Leadoo AI [salesmanago]
Researcher
Affected Software
Skimlinks Affiliate Marketing Tool [skimlinks]
Researcher
Affected Software
Researcher
Affected Software
TI WooCommerce Wishlist [ti-woocommerce-wishlist]
Researcher
Affected Software
WooMS [wooms]
Researcher
Affected Software
WP Events Manager [wp-events-manager]
Researcher
Affected Software
Wp tabber widget [wp-tabber-widget]
Researcher
Affected Software
XStore [xstore]
Researcher
Affected Software
WordPress Adverts Plugin – Adverts Click Tracker [adverts-click-tracker]
Researcher
Affected Software
AnyClip Luminous Studio [anyclip-media]
Researcher
aThemes Addons for Elementor <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
aThemes Addons for Elementor [athemes-addons-for-elementor-lite]
Researcher
Affected Software
bbP topic count [bbp-topic-count]
Researcher
Affected Software
Behance Portfolio Manager [portfolio-manager-powered-by-behance]
Researcher
Affected Software
Bg Church Memos [bg-church-memos]
Researcher
Affected Software
Bitly's WordPress Plugin [wp-bitly]
Researcher
Affected Software
Buckets [buckets]
Researcher
BuddyPress Notification Widget <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
BuddyPress Notification Widget [buddypress-notifications-widget]
Researcher
Affected Software
Card Elements for WPBakery [card-elements-for-wpbakery]
Researcher
Affected Software
Carousel Ultimate [carousel]
Researcher
Affected Software
Category Featured Images [category-featured-images]
Researcher
Affected Software
Category Featured Images Extended [category-featured-images-extended]
Researcher
Affected Software
CM Business Directory – Optimise and showcase local business [cm-business-directory]
Researcher
Affected Software
Compact Archives [compact-archives]
Researcher
Affected Software
Content Mask [content-mask]
Researcher
Affected Software
CubeWP Framework [cubewp-framework]
Researcher
Custom iFrame for Elementor <= 1.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Researcher
Affected Software
DELUCKS SEO [delucks-seo]
Researcher
Affected Software
Designil PDPA Thailand [pdpa-thailand]
Researcher
Affected Software
Directory Pro [directory-pro]
Researcher
Affected Software
Ditty – Responsive News Tickers, Sliders, and Lists [ditty-news-ticker]
Researcher
Affected Software
Easy Hotel – Powerful Hotel Booking [easy-hotel]
Researcher
Affected Software
Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files [embed-any-document]
Researcher
Events Manager – OpenStreetMaps <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Events Manager – OpenStreetMaps [stonehenge-em-osm]
Researcher
Affected Software
Front End Users [front-end-only-users]
Researcher
Affected Software
Fusion Page Builder : Extension – Gallery [fusion-extension-gallery]
Researcher
Affected Software
Gallery Custom Links [gallery-custom-links]
Researcher
Affected Software
Gallery Lightbox [gallery-lightbox-slider]
Researcher
Affected Software
GD bbPress Tools [gd-bbpress-tools]
Researcher
Affected Software
Genealogical Tree – Family Tree & Ancestry for WordPress [genealogical-tree]
Researcher
Affected Software
Genesis Club Lite [genesis-club-lite]
Researcher
Affected Software
Geolocation IP Detection [geoip-detect]
Researcher
Affected Software
GetResponse Forms by Optin Cat [getresponse]
Researcher
Affected Software
Gianism [gianism]
Researcher
Affected Software
GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor [gutenkit-blocks-addon]
Researcher
Affected Software
Highlight and Share – Unobtrusive and Lightweight Content Sharing [highlight-and-share]
Researcher
Affected Software
HT Feed [ht-instagram]
Researcher
Affected Software
HT Mega – Absolute Addons for WPBakery Page Builder [ht-mega-for-wpbakery]
Researcher
Affected Software
Image Editor by Pixo [image-editor-by-pixo]
Researcher
Affected Software
WordPress Image shrinker [wp-image-shrinker]
Researcher
Affected Software
Job Board Manager [job-board-manager]
Researcher
Affected Software
JS Job Manager [js-jobs]
Researcher
Affected Software
JSM file_get_contents() Shortcode [wp-file-get-contents]
Researcher
Affected Software
Jupiter X Core [jupiterx-core]
Researcher
Affected Software
Kama Click Counter [kama-clic-counter]
Researcher
Affected Software
Last Updated Shortcode [last-updated-shortcode]
Researcher
Affected Software
Connector Wizard (formerly LC Wizard) [ghl-wizard]
Researcher
Affected Software
Library Bookshelves [library-bookshelves]
Researcher
Affected Software
Links shortcode [links-shortcode]
Researcher
Affected Software
List Child Pages Shortcode [list-child-pages-shortcode]
Researcher
Affected Software
Logo Showcase – Logo Slider, Carousel & Sponsors Gallery [logo-showcase]
Researcher
Affected Software
Mail Subscribe List [mail-subscribe-list]
Researcher
Make Column Clickable Elementor <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Make Column Clickable for Elementor [make-column-clickable-elementor]
Researcher
MakeStories (for Google Web Stories) <= 3.0.4 - Authenticated (Author+) Server-Side Request Forgery
6.4
Affected Software
MakeStories (for Google Web Stories) [makestories-helper]
Researcher
Affected Software
Mapster WP Maps [mapster-wp-maps]
Researcher
Affected Software
Markdown Shortcode [markdown-shortcode]
Researcher
Affected Software
MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution [marketking-multivendor-marketplace-for-woocommerce]
Researcher
Affected Software
Master Slider – Responsive Touch Slider [master-slider]
Researcher
Affected Software
Media Library Assistant [media-library-assistant]
Researcher
Affected Software
Mega Elements – Addons for Elementor [mega-elements-addons-for-elementor]
Researcher
Affected Software
Customer Support Ticket System & Helpdesk [wp-ticket]
Employee Spotlight – Team Member Showcase & Meet the Team Plugin [employee-spotlight]
Request a Quote – Quote Forms for Any WordPress Site [request-a-quote]
Video Gallery – YouTube Gallery, Playlist & Video Grid [youtube-showcase]
Researcher
Affected Software
Nextend Social Login and Register [nextend-facebook-connect]
Researcher
Affected Software
NGG Smart Image Search [ngg-smart-image-search]
Researcher
Affected Software
Open User Map – Interactive Leaflet Maps [open-user-map]
Researcher
Affected Software
Participants Database [participants-database]
Researcher
Affected Software
Passster – Password Protect Pages and Content [content-protector]
Researcher
Affected Software
Penci Filter Everything [penci-filter-everything]
Researcher
Affected Software
Penci Podcast [penci-podcast]
Researcher
Affected Software
Penci Portfolio [penci-portfolio]
Researcher
Affected Software
Penci Recipe [penci-recipe]
Researcher
Affected Software
Penci Shortcodes & Performance [penci-shortcodes]
Researcher
Affected Software
Photo Gallery by Ays – Responsive Image Gallery [gallery-photo-gallery]
Researcher
Affected Software
Photospace Responsive Gallery [photospace-responsive]
Researcher
Affected Software
PilotPress [pilotpress]
Researcher
Affected Software
Pinterest Pinboard Widget [pinterest-pinboard-widget]
Researcher
Affected Software
Researcher
Affected Software
Podlove Subscribe button [podlove-subscribe-button]
Researcher
Affected Software
Researcher
Affected Software
Popular Posts by Webline [popular-posts-by-webline]
Researcher
Popup Maker <= 1.20.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Parameter
6.4
Affected Software
Researcher
Affected Software
Researcher
Affected Software
PowerFolio – Portfolio & Image Gallery for Elementor [portfolio-elementor]
Researcher
Affected Software
Product Catalog Simple [post-type-x]
Researcher
Affected Software
Publitio [publitio]
Researcher
Affected Software
Pz-LinkCard [pz-linkcard]
Researcher
Affected Software
Query Posts [query-posts]
Researcher
Affected Software
Quick View for WooCommerce [woo-quickview]
Researcher
Affected Software
Real Estate Manager – Property Listing and Agent Management [real-estate-manager]
Researcher
Affected Software
Save as PDF Plugin by PDFCrowd [save-as-pdf-by-pdfcrowd]
Researcher
Affected Software
Researcher
Affected Software
Shortcode [shortcode]
Researcher
Affected Software
Simple Colorbox [simple-colorbox]
Researcher
Affected Software
Simple JWT Login – Allows you to use JWT on REST endpoints. [simple-jwt-login]
Researcher
Affected Software
Simple Meta Tags [simple-meta-tags]
Researcher
Affected Software
Simple SEO [cds-simple-seo]
Researcher
Affected Software
SKT Blocks – Gutenberg based Page Builder [skt-blocks]
Researcher
Affected Software
Skyword XMLRPC publishing [skyword-plugin]
Researcher
Affected Software
SnapWidget Social Photo Feed Widget [snapwidget-wp-instagram-widget]
Researcher
Affected Software
Soledad [soledad]
Researcher
Affected Software
SQL Chart Builder [sql-chart-builder]
Researcher
Affected Software
StylePress for Elementor [full-site-builder-for-elementor]
Researcher
Affected Software
Tapfiliate [tapfiliate]
Researcher
Affected Software
Team Members [team-members]
Researcher
Affected Software
Termageddon: Cookie Consent & Privacy Compliance [termageddon-usercentrics]
Researcher
Affected Software
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce [the-plus-addons-for-elementor-page-builder]
Researcher
Affected Software
Theater for WordPress [theatre]
Researcher
Affected Software
Themify Builder [themify-builder]
Researcher
Affected Software
TweetThis Shortcode [tweetthis-shortcode]
Researcher
Affected Software
Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor [ultimate-store-kit]
Researcher
Affected Software
Ultimate WP Mail [ultimate-wp-mail]
Researcher
Uncanny Toolkit for LearnDash <= 3.7.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Uncanny Toolkit for LearnDash [uncanny-learndash-toolkit]
Researcher
Affected Software
Upsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups. [upsell-order-bump-offer-for-woocommerce]
Researcher
Affected Software
User Avatar – Reloaded [user-avatar-reloaded]
Researcher
Affected Software
Verowa Connect [verowa-connect]
Researcher
Affected Software
VoucherPress [voucherpress]
Researcher
Affected Software
Widget Options - Extended [extended-widget-options]
Researcher
Affected Software
Widgets for Tiktok Feed [widgets-for-tiktok-video-feed]
Researcher
Affected Software
WordPress [wordpress]
Researcher
Affected Software
WordPress Widgets Shortcode [wp-widgets-shortcode]
Researcher
Affected Software
Category Dropdown by GCS Design [wp-category-dropdown]
Researcher
Affected Software
WP Delete User Accounts [wp-delete-user-accounts]
Researcher
Affected Software
WP Frontend Admin – Display WP Admin Pages in the Frontend [display-admin-page-on-frontend]
Researcher
Affected Software
WP Geo [wp-geo]
Researcher
Affected Software
WP Microdata [wp-microdata]
Researcher
Affected Software
WP Proposals [wp-proposals]
Researcher
Affected Software
WP Social Widget [wp-social-widget]
Researcher
Affected Software
WP Subtitle [wp-subtitle]
Researcher
Affected Software
Customer Support Ticket System & Helpdesk [wp-ticket]
Researcher
Affected Software
Researcher
Affected Software
WP-Members Membership Plugin [wp-members]
Researcher
Affected Software
wp-mpdf [wp-mpdf]
Researcher
WPB Quick View for WooCommerce <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
WPB Quick View Popup for WooCommerce – Fast Product Preview Modal & AJAX Quick View [woocommerce-lightbox]
Researcher
Affected Software
WPC Smart Messages for WooCommerce [wpc-smart-messages]
Researcher
Affected Software
WPComplete [wpcomplete]
Researcher
Affected Software
WPFront User Role Editor [wpfront-user-role-editor]
Researcher
WPKoi Templates for Elementor <= 3.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
WPKoi Templates for Elementor [wpkoi-templates-for-elementor]
Researcher
Affected Software
xili-language [xili-language]
Researcher
Affected Software
xili-tidy-tags [xili-tidy-tags]
Researcher
Affected Software
Zoho Billing – Embed Payment Form [zoho-subscriptions]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Workscout Core [workscout-core]
Researcher
Affected Software
Beaf – Photo Comparison Block [image-compare-block]
Researcher
Affected Software
Epeken All Kurir for Woocommerce [epeken-all-kurir]
Researcher
Affected Software
Icegram Express Pro [email-subscribers-premium]
Researcher
Affected Software
PopAd [popad]
Researcher
Affected Software
Product Time Countdown for WooCommerce [product-countdown-for-woocommerce]
Researcher
Affected Software
SEO Backlink Monitor [seo-backlink-monitor]
Researcher
Affected Software
Skimlinks Affiliate Marketing Tool [skimlinks]
Researcher
Affected Software
Researcher
Affected Software
Blog Designer [blog-designer]
Researcher
Affected Software
Researcher
Affected Software
Clariti [clariti]
Researcher
Affected Software
CoDesigner – All in One Elementor WooCommerce Builder [woolementor]
Researcher
Affected Software
DethemeKit for Elementor [dethemekit-for-elementor]
Researcher
Affected Software
Researcher
Affected Software
Helpdesk Support Ticket System for WooCommerce [support-ticket-system-for-woocommerce]
Researcher
Affected Software
Hide WP Toolbar [hide-wp-toolbar]
Researcher
Affected Software
Image Hover Effects – Elementor Addon [image-hover-effects-addon-for-elementor]
Researcher
Affected Software
ListingPro Reviews [listingpro-reviews]
Researcher
Affected Software
Plugin Ongkos Kirim JNE Tiki Sicepat Wahana J&T POS for Woocommerce [ongkoskirim-id]
Researcher
Affected Software
Oshine Core [oshine-core]
Researcher
Affected Software
PilotPress [pilotpress]
Researcher
Affected Software
Post Carousel Slider for Elementor [post-carousel-slider-for-elementor]
Researcher
Affected Software
Qubely – Advanced Gutenberg Blocks [qubely]
Researcher
Affected Software
Snow Monkey [snow-monkey]
Researcher
Affected Software
Sticky Header Effects for Elementor [sticky-header-effects-for-elementor]
Researcher
Affected Software
Subresource Integrity (SRI) Manager [wp-sri]
Researcher
Affected Software
Team – Team Members Showcase Plugin [tlp-team]
Researcher
Affected Software
Text To Speech TTS Accessibility [text-to-audio]
Researcher
Affected Software
Trustpilot Reviews [trustpilot-reviews]
Researcher
Affected Software
Ultimate Watermark – Image Watermark, Image Protection & Bulk Watermarking [ultimate-watermark]
Researcher
Affected Software
Website Chat Button: Kommo integration [website-chat-button-kommo-integration]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery [interactive-3d-flipbook-powered-physics-engine]
Researcher
Affected Software
Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more]
Researcher
Affected Software
Researcher
Affected Software
BuddyPress [buddypress]
Researcher
Affected Software
CoSchedule [coschedule-by-todaymade]
Researcher
Affected Software
Custom Login URL [custom-login-url]
Researcher
Affected Software
Download After Email – Subscribe & Download Form Plugin [download-after-email]
Researcher
Affected Software
Download Manager [download-manager]
Researcher
Affected Software
Envíos Coordinadora Woocommerce (Oficial) – WordPress plugin [coordinadora]
Researcher
Estonian Shipping Methods for WooCommerce <= 1.7.2 - Unauthenticated Sensitive Information Exposure
5.3
Affected Software
Estonian Shipping Methods for WooCommerce [estonian-shipping-methods-for-woocommerce]
Researcher
Affected Software
Featured Image from URL (FIFU) [featured-image-from-url]
Researcher
Affected Software
Featured Image from URL (FIFU) [featured-image-from-url]
Researcher
Affected Software
Frontend File Manager Plugin [nmedia-user-file-uploader]
Researcher
Affected Software
Helpie FAQ — Accordion, Docs & Knowledge Base [helpie-faq]
Researcher
Affected Software
Heureka [heureka]
Researcher
Affected Software
Ivory Search – WordPress Search Plugin [add-search-to-menu]
Researcher
Affected Software
Norebro Extra [norebro-extra]
Researcher
Affected Software
Nota Fiscal Eletrônica WooCommerce [nota-fiscal-eletronica-woocommerce]
Researcher
Affected Software
Quiz Maker by AYS [quiz-maker]
Researcher
Affected Software
The Tribal Plugin [the-tech-tribe]
Researcher
Affected Software
Theme My Login [theme-my-login]
Researcher
Affected Software
UK Address Postcode Validation [uk-address-postcode-validation]
Researcher
Affected Software
Researcher
Affected Software
WooEvents - Calendar and Event Booking [woo-events]
Researcher
Affected Software
WP Compress – Instant Performance & Speed Optimization [wp-compress-image-optimizer]
Researcher
Affected Software
WP Directory Kit [wpdirectorykit]
Researcher
Affected Software
WP Popup Builder – Popup Forms and Marketing Lead Generation [wp-popup-builder]
Researcher
Affected Software
Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker [wedevs-project-manager]
Researcher
Affected Software
WP Recipe Maker [wp-recipe-maker]
Researcher
Affected Software
WP Virtual Assistant [VirtualAssistant]
Researcher
Affected Software
Yext Plugin [yext]
Researcher
Affected Software
Featured Image from URL (FIFU) [featured-image-from-url]
Researcher
Affected Software
Featured Image from URL (FIFU) [featured-image-from-url]
Researcher
Affected Software
Researcher
Affected Software
B2Bking [b2bking]
Researcher
Affected Software
Portfolio Grid – Filterable Gallery, Grid & Slider Showcase [advance-portfolio-grid]
Researcher
Affected Software
AffiliateWP – External Referral Links [affiliatewp-external-referral-links]
Researcher
Affected Software
AnyClip Luminous Studio [anyclip-media]
Researcher
Append extensions on Pages <= 1.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
Affected Software
Append extensions on Pages [append-extensions-on-pages]
Researcher
Affected Software
Append Link on Copy [append-link-on-copy]
Researcher
Affected Software
AuthorSure [authorsure]
Researcher
Affected Software
Better Find and Replace – AI-Powered Suggestions [real-time-auto-find-and-replace]
Researcher
BMI Adult & Kid Calculator <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
Affected Software
BMI Adult & Kid Calculator [bmi-adultkid-calculator]
Researcher
Affected Software
Bot Block – Stop Spam Referrals in Google Analytics [bot-block-stop-spam-google-analytics-referrals]
Researcher
Affected Software
CashBill.pl – Płatności WooCommerce [cashbill-payment-method]
Researcher
Affected Software
Click & Tweet [click-tweet]
Researcher
Affected Software
Colibri Page Builder [colibri-page-builder]
Researcher
Affected Software
Dialogity Free Live Chat [dialogity-website-chat]
Researcher
Affected Software
DOAJ Export [doaj-export]
Researcher
Affected Software
Double the Donation – A workplace giving tool [double-the-donation]
Researcher
Affected Software
Draft – Tailwind CSS for WordPress. [website-builder]
Researcher
E-namad & Shamed Logo Manager <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
Affected Software
E-namad & Shamed Logo Manager [e-namad-shamed-logo-manager]
Researcher
Affected Software
eZee Online Hotel Booking Engine [online-booking-engine]
Researcher
Form Generator for WordPress <= 1.52 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
Affected Software
Form Generator for WordPress [form-generator-powered-by-jotform]
Researcher
Affected Software
Google+ Comments [google-plus-comments]
Researcher
Affected Software
Goracash [goracash]
Researcher
Gravitate Automated Tester <= 1.4.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
Affected Software
Gravitate Automated Tester [gravitate-automated-tester]
Researcher
Affected Software
IP Based Login [ip-based-login]
Researcher
Affected Software
kontur Admin Style [kontur-admin-style]
Researcher
Affected Software
Lenix scss compiler [lenix-scss-compiler]
Researcher
Affected Software
Login-Logout [login-logout]
Researcher
Affected Software
Magento 2 WP Integration [m2wp]
Researcher
Affected Software
Map Categories to Pages [map-categories-to-pages]
Researcher
Affected Software
Maps for WP [maps-for-wp]
Researcher
Affected Software
Mobi2Go [mobi2go]
Researcher
Affected Software
MWW Disclaimer Buttons [mww-disclaimer-buttons]
Researcher
Affected Software
Nota Fiscal Eletrônica WooCommerce [nota-fiscal-eletronica-woocommerce]
Researcher
Affected Software
Notely [notely]
Researcher
Affected Software
PE Easy Slider [pe-easy-slider]
Researcher
Affected Software
Plugin Security Scanner [plugin-security-scanner]
Researcher
Affected Software
Proof Factor – Social Proof Notifications [proof-factor-social-proof-notifications]
Researcher
Affected Software
Recaptcha – wp [recaptcha-wp]
Researcher
Affected Software
Safety Exit [safety-exit]
Researcher
Affected Software
Sales Count Manager for WooCommerce [wc-sales-count-manager]
Researcher
Affected Software
SAPO Feed [sapo-feed]
Researcher
Affected Software
SEO Search Permalink [seo-search-permalink]
Researcher
Affected Software
Silencesoft RSS Reader [external-rss-reader]
Researcher
Affected Software
Simple Restaurant Menu [simple-restaurant-menu]
Researcher
Affected Software
SiteNarrator Text-to-Speech Widget [sitespeaker-widget]
Researcher
Slightly troublesome permalink <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
Affected Software
Slightly troublesome permalink [slightly-troublesome-permalink]
Researcher
Affected Software
Smart Related Products – AI-Inspired Recommendations for WooCommerce [ai-related-products]
Researcher
Affected Software
The Tribal Plugin [the-tech-tribe]
Researcher
Affected Software
TZ Plus Gallery [tz-plus-gallery]
Researcher
Affected Software
User Notes [user-notes]
Researcher
Affected Software
VikRestaurants Table Reservations and Take-Away [vikrestaurants]
Researcher
Affected Software
VikRestaurants Table Reservations and Take-Away [vikrestaurants]
Researcher
Affected Software
Werk aan de Muur [werk-aan-de-muur]
Researcher
Affected Software
Researcher
Affected Software
Additional Fees For WooCommerce Checkout [woo-additional-fees-on-checkout-wordpress]
Researcher
Affected Software
WooMS [wooms]
Researcher
Affected Software
Woostify [woostify]
Researcher
Affected Software
WP Advanced PDF [wp-advanced-pdf]
Researcher
Affected Software
WP Mailto Links – Protect Email Addresses [wp-mailto-links]
Researcher
Affected Software
WP Tesseract [wp-tesseract]
Researcher
Affected Software
Zephyr Project Manager [zephyr-project-manager]
Researcher
Affected Software
Academy LMS [academy]
Researcher
Affected Software
Accordions [accordions]
Researcher
Affected Software
Advanced Appointment Booking & Scheduling [advanced-appointment-booking-scheduling]
Researcher
Affected Software
AgreeMe Checkboxes For WooCommerce [agreeme-checkboxes-for-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
AR for WordPress [ar-for-wordpress]
Researcher
Affected Software
Auction Feed [auction-feed]
Researcher
Affected Software
BP Disable Activation Reloaded [bp-disable-activation-reloaded]
Researcher
Affected Software
Casengo Live Chat Support [the-casengo-chat-widget]
Researcher
Affected Software
cForms – Light speed fast Form Builder [cforms-plugin]
Researcher
Conditional Cart Messages for WooCommerce – YourPlugins.com <= 1.2.10 - Cross-Site Request Forgery
4.3
Affected Software
Conditional Cart Messages for WooCommerce – YourPlugins.com [yourplugins-wc-conditional-cart-notices]
Researcher
Affected Software
constructo [constructo]
Researcher
Affected Software
Content Mask [content-mask]
Researcher
Affected Software
CopySafe Web Protection – Copy Protect Images [wp-copysafe-web]
Researcher
Affected Software
Coupon Affiliates – Affiliate Plugin for WooCommerce [woo-coupon-usage]
Researcher
Affected Software
Current Age Plugin [current-age]
Researcher
Affected Software
Custom Post Type Images [custom-post-types-image]
Researcher
Affected Software
Dashboard Notepad [dashboard-notepad]
Researcher
Affected Software
Delisho – Recipe Widgets and Blocks [dr-widgets-blocks]
Researcher
Affected Software
Deliver via Shipos for WooCommerce [wc-shipos-delivery]
Researcher
Affected Software
Developer [developer]
Researcher
Affected Software
Di Themes Demo Site Importer [di-themes-demo-site-importer]
Researcher
Affected Software
Doliconnect [doliconnect]
Researcher
Affected Software
Double the Donation – A workplace giving tool [double-the-donation]
Researcher
Affected Software
Download Manager [download-manager]
Researcher
Affected Software
Editor Custom Color Palette [editor-custom-color-palette]
Researcher
Affected Software
GetResponse Official [getresponse-official]
Researcher
Affected Software
GetResponse Official [getresponse-official]
Researcher
Affected Software
Researcher
Affected Software
Emergency password reset [emergency-password-reset]
Researcher
Affected Software
Event Rocket [event-rocket]
Researcher
Affected Software
Fastly [fastly]
Researcher
Affected Software
fingo [fingo]
Researcher
Affected Software
Flexible FAQ [flexible-faq]
Researcher
Affected Software
Flexible PDF Invoices for WooCommerce & WordPress [flexible-invoices]
Researcher
Affected Software
Flytedesk Digital [flytedesk-digital]
Researcher
Affected Software
Force Update Translations [force-update-translations]
Researcher
Affected Software
frames [frames]
Researcher
Affected Software
Getwid – Gutenberg Blocks [getwid]
Researcher
Affected Software
Goodlayers Core [goodlayers-core]
Researcher
Affected Software
Grand Conference Theme Custom Post Type [grandconference-custom-post]
Researcher
Affected Software
Grid [grid]
Researcher
Affected Software
Groovy Menu Plugin (Free) [groovy-menu-free]
Researcher
Affected Software
GST for WooCommerce [gst-for-woocommerce]
Researcher
Affected Software
HidePost [hidepost]
Researcher
Affected Software
HivePress Claim Listings [hivepress-claim-listings]
Researcher
Affected Software
HivePress Claim Listings [hivepress-claim-listings]
Researcher
Affected Software
HORIZONTAL SLIDER [horizontal-slider]
Researcher
Affected Software
HotelRunner Booking Widget [hotelrunner]
Researcher
Patch Status
Patched
Patched
Published
Sep 23, 2025
Sep 23, 2025
Affected Software
Houzez Theme - Functionality [houzez-theme-functionality]
Researcher
Affected Software
HTACCESS IP Blocker [htaccess-ip-blocker]
Researcher
Affected Software
Researcher
Ibtana <= 1.2.5.3 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion
4.3
Affected Software
Ibtana – WordPress Website Builder [ibtana-visual-editor]
Researcher
Affected Software
Instapage Plugin [instapage]
Researcher
Affected Software
Interact: Embed A Quiz On Your Site [interact-quiz-embed]
Researcher
Affected Software
Javo Core [javo-core]
Researcher
Affected Software
Custom Block Builder – Lazy Blocks [lazy-blocks]
Researcher
Affected Software
Lenix scss compiler [lenix-scss-compiler]
Researcher
Affected Software
LinkedInclude [linkedinclude]
Researcher
Affected Software
ListingPro Plugin [listingpro-plugin]
Researcher
Affected Software
LWS Affiliation [lws-affiliation]
Researcher
Affected Software
Mail Baby SMTP [mail-baby-smtp]
Researcher
Affected Software
MasterStudy LMS WordPress Plugin – for Online Courses and Education [masterstudy-lms-learning-management-system]
Researcher
Affected Software
MasterStudy LMS WordPress Plugin – for Online Courses and Education [masterstudy-lms-learning-management-system]
Researcher
Affected Software
Mavis HTTPS to HTTP Redirection [mavis-https-to-http-redirect]
Researcher
Affected Software
Researcher
Affected Software
Multilang Contact Form [multilang-contact-form]
Researcher
Affected Software
Netgsm [netgsm]
Researcher
Affected Software
NewsmanApp [newsmanapp]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
NIX Anti-Spam Light [nix-anti-spam-light]
Researcher
Affected Software
No External Links [mihdan-no-external-links]
Researcher
Affected Software
Researcher
Affected Software
OAuth Single Sign On – SSO (OAuth Client) [miniorange-login-with-eve-online-google-facebook]
Researcher
Page Manager for Elementor <= 2.0.5 - Authenticated (Subscriber+) Sensitive Information Exposure
4.3
Affected Software
Page Manager for Elementor [page-manager-for-elementor]
Researcher
Affected Software
payOS [payos]
Researcher
Affected Software
Payrexx Payment Gateway for WooCommerce [woo-payrexx-gateway]
Researcher
Affected Software
Piotnet Forms [piotnetforms]
Researcher
Affected Software
Post Featured Video [post-featured-video]
Researcher
Affected Software
Printeers Print & Ship [invition-print-ship]
Researcher
Affected Software
Professional Contact Form [professional-contact-form]
Researcher
Affected Software
Qubely – Advanced Gutenberg Blocks [qubely]
Researcher
Affected Software
Quiz Maker by AYS [quiz-maker]
Researcher
Affected Software
Referral Link Tracker [referral-link-tracker]
Researcher
Affected Software
Researcher
RIS Version Switcher – Downgrade or Upgrade WP Versions Easily <= 1.0 - Cross-Site Request Forgery
4.3
Affected Software
RIS Version Switcher – Downgrade or Upgrade WP Versions Easily [ris-version-switcher]
Researcher
Affected Software
Manago AI & Leadoo AI [salesmanago]
Researcher
Affected Software
Sendle Shipping Plugin [official-sendle-shipping-method]
Researcher
Affected Software
SEO Backlink Monitor [seo-backlink-monitor]
Researcher
Affected Software
Show Pages List [show-pages-list]
Researcher
Affected Software
ShrinkTheWeb (STW) Website Previews Plugin [shrinktheweb-website-preview-plugin]
Researcher
Affected Software
Smart Blocks – WordPress Gutenberg Blocks [smart-blocks]
Researcher
Affected Software
Stackable – Page Builder Gutenberg Blocks [stackable-ultimate-gutenberg-blocks]
Researcher
Affected Software
Stackable – Page Builder Gutenberg Blocks [stackable-ultimate-gutenberg-blocks]
Researcher
Affected Software
Stock Message [stock-message]
Researcher
Affected Software
Subscribe to Download [subscribe-to-download]
Researcher
Affected Software
Subscribe To Unlock [subscribe-to-unlock]
Researcher
Affected Software
Super Blank [super-blank]
Researcher
Affected Software
SV Proven Expert [sv-provenexpert]
Researcher
Affected Software
Sweet Energy Efficiency [sweet-energy-efficiency]
Researcher
Affected Software
Sync Feedly [sync-feedly]
Researcher
Affected Software
System Dashboard [system-dashboard]
Researcher
Affected Software
TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme [thegem-elementor]
Researcher
Affected Software
TheGem [thegem]
Researcher
Affected Software
TOCHAT.BE [tochat-be]
Researcher
Affected Software
Travel Map [travelmap-blog]
Researcher
Affected Software
Upcoming Events Lists [upcoming-events-lists]
Researcher
Affected Software
Vehica Core [vehica-core]
Researcher
Affected Software
Video Blogster Lite [video-blogster-lite]
Researcher
Affected Software
VM Menu Reorder plugin [vm-menu-reorder]
Researcher
Affected Software
Researcher
Affected Software
W3SCloud Contact Form 7 to Zoho CRM [w3s-cf7-zoho]
Researcher
Affected Software
WordPress [wordpress]
Researcher
Affected Software
Workscout Core [workscout-core]
Researcher
Affected Software
WP Attractive Donations System [wp-attractive-donations-system-easy-stripe-paypal-donations]
Researcher
Affected Software
WP Compiler [wp-compiler]
Researcher
Affected Software
WP Content Protection [wp-content-protection]
Researcher
Affected Software
WP Gravity Forms HubSpot [gf-hubspot]
Researcher
Affected Software
WP Gravity Forms Keap/Infusionsoft [gf-infusionsoft]
Researcher
Affected Software
WP Media Categories [wp-media-categories]
Researcher
Affected Software
WP Subscription Forms PRO [wp-subscription-forms-pro]
Researcher
Affected Software
WP System Information [wp-system-info]
Researcher
Affected Software
Comments – wpDiscuz [wpdiscuz]
Researcher
WPeMatico RSS Feed Fetcher <= 2.8.10 - Authenticated (Subscriber+) Sensitive Information Exposure
4.3
Affected Software
WPeMatico RSS Feed Fetcher [wpematico]
Researcher
Affected Software
WPMK PDF Generator [wpmk-pdf-generator]
Researcher
Affected Software
Zoho Flow – No-Code Workflow Automation [zoho-flow]
Researcher
Affected Software
CP Multi View Events Calendar [cp-multi-view-calendar]
Researcher
Affected Software
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Comments