Wordfence Intelligence Weekly WordPress Vulnerability Report (September 29, 2025 to October 5, 2025)
đ˘ Calling all Vulnerability Researchers and Bug Bounty Hunters! đ˘
đ Operation: Maximum Impact Challenge! Now through November 10, 2025, earn 2X bounty rewards for all in-scope submissions in software with at least 5,000 active installs and fewer than 5 million active installs. Bounties up to $31,200 per vulnerability. Submit bold. Earn big!
đ The LFInder Challenge: Refine your LFI hunting skills with an expanded scope. Now through November 24, 2025, all LFI vulnerabilities in software with at least 25 active installs are considered in-scope for all researchers, regardless of researcher tier, AND earn a 30% bonus on all Local File Inclusion vulnerability submissions not already increased by another promotion.
Last week, there were 136 vulnerabilities disclosed in 121 WordPress Plugins and 4 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 44 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to implement layered security, aligning with our overarching mission to secure WordPress with defense in depth strategies. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report. As the world’s leading quality vulnerability database provider for WordPress, site owners can rest assured knowing Wordfence has their back.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 29,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 67 |
| Unpatched | 69 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Low Severity | 1 |
| Medium Severity | 107 |
| High Severity | 19 |
| Critical Severity | 9 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 58 |
| Missing Authorization | 22 |
| Cross-Site Request Forgery (CSRF) | 18 |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 6 |
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 4 |
| Exposure of Sensitive Information to an Unauthorized Actor | 3 |
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 3 |
| Unrestricted Upload of File with Dangerous Type | 3 |
| Authentication Bypass Using an Alternate Path or Channel | 2 |
| Deserialization of Untrusted Data | 2 |
| Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 2 |
| Server-Side Request Forgery (SSRF) | 2 |
| External Control of File Name or Path | 1 |
| Improper Access Control | 1 |
| Improper Authorization | 1 |
| Improper Control of Generation of Code ('Code Injection') | 1 |
| Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') | 1 |
| Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | 1 |
| Improper Verification of Cryptographic Signature | 1 |
| Missing Authentication for Critical Function | 1 |
| Unverified Password Change | 1 |
| URL Redirection to Untrusted Site ('Open Redirect') | 1 |
| Use of Hard-coded Cryptographic Key | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 16 | |
| 15 | |
| 12 | |
| 9 | |
| 8 | |
| 7 | |
| 6 | |
| 6 | |
| 6 | |
| 5 | |
| 4 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| A Simple Multilanguage Plugin | a-simple-multilanguage |
| AffiliateWP | affiliatewp |
| All in One Music Player | all-in-one-music-player |
| All Social Share Options | all-social-share-options |
| Any News Ticker | any-news-ticker |
| AP Background | ap-background |
| Appy Pie Connect for WooCommerce | appy-pie-connect-for-woocommerce |
| Auto Bulb Finder for WordPress | auto-bulb-finder-for-wp-wc |
| Avada (Fusion) Builder | fusion-builder |
| Backup Bolt | backup-bolt |
| Before After Image | majestic-before-after-image |
| Bei Fen â WordPress Backup Plugin | bei-fen |
| Big Post Shipping for WooCommerce | woo-bigpost-shipping |
| Blappsta Mobile App Plugin â Your native, mobile iPhone App and Android App | yournewsapp |
| Block for Mailchimp â Add Email Subscription Forms and Collect Leads | block-for-mailchimp |
| BP Direct Menus | bp-direct-menus |
| Bulk Auto Image Title Attribute (Image Title tag) optimizer (Image SEO) | bulk-image-title-attribute |
| CF7 Auto Responder Addon | CF7-autoresponder-addon |
| Chat by Chatwee | chatwee |
| Comment Info Detector | comment-info-detector |
| ContentMX Content Publisher | contentmx-content-publisher |
| Contest Gallery â Upload & Vote Photos, Media, Sell with PayPal & Stripe | contest-gallery |
| Conversios: Google Analytics (GA4), Google Ads, Conversion and Analytics Tracking for Multi-Channels | enhanced-e-commerce-for-woocommerce-store |
| Copypress Rest API | copypress-rest-api |
| Cost Calculator Builder | cost-calculator-builder |
| Custom Post Type Attachment | custom-post-type-pdf-attachment |
| dbview | dbview |
| Download Manager | download-manager |
| Duplicate Page, Hide Title, Custom CSS & JS, Exclude Search, Template Info â Pagely | current-template-name |
| Easy Elementor Addons â Addons Pack for Elementor Page Builder | easy-elementor-addons |
| Effect Maker | effect-maker |
| Epic Bootstrap Buttons | epic-bootstrap-buttons |
| Eulerpool Research Systems | alleaktien-quantitativ |
| Event Tickets, RSVPs, Calendar | ticket-spot |
| Export Categories | export-categories |
| FancyTabs | fancytabs |
| File Manager, Code Editor, and Backup by Managefy | softdiscover-db-file-manager |
| Fintelligence Calculator | fintelligence-calculator |
| Flexi â Guest Submit | flexi |
| FormGent â Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More | formgent |
| Generic Elements | generic-elements-for-elementor |
| GiveWP â Donation Plugin and Fundraising Platform | give |
| GutenBee â Gutenberg Blocks | gutenbee |
| IgnitionDeck Crowdfunding Platform | ignitiondeck |
| Integrate Dynamics 365 CRM | integrate-dynamics-365-crm |
| Interactive Human Anatomy with Clickable Body Parts | interactive-medical-drawing-of-human-body |
| Ird Slider | ird-slider |
| Jeg Kit for Elementor â Powerful Addons for Elementor, Widgets & Templates for WordPress | jeg-elementor-kit |
| JobSearch WP Job Board | wp-jobsearch |
| Jock On Air Now (JOAN) | joan |
| JoomSport â for Sports: Team & League, Football, Hockey & more | joomsport-sports-league-results-management |
| LatePoint â Calendar Booking Plugin for Appointments and Events | latepoint |
| Layers | layers |
| LockerPress â WordPress Security Plugin | lockerpress-wordpress-security |
| Maps from Yandex for Elementor | mihdan-elementor-yandex-maps |
| Marquee Addons for Elementor â Essential Motion Widgets & Templates | marquee-addons-for-elementor |
| Meks Easy Maps | meks-easy-maps |
| Meta Tag Manager | meta-tag-manager |
| Mobile Site Redirect | mobile-site-redirect |
| MPWizard â Create Mercado Pago Payment Links | mpwizard |
| My AskAI | my-askai |
| Nelio Content â Editorial Calendar & Social Media Auto-Posting | nelio-content |
| NEX-Forms LITE | nex-forms-lite |
| Nexa Blocks â Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE | nexa-blocks |
| Notification Bar | simple-bar |
| OAuth Single Sign On â SSO (OAuth Client) | miniorange-login-with-eve-online-google-facebook |
| Opal Service | opal-service |
| Optimize More! â CSS | optimize-more-css |
| Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More | themeisle-companion |
| PayPal Forms | paypal-forms |
| planetcalc | planetcalc |
| Post By Email | post-by-email |
| Post Grid | post-grid |
| Qyrr â simply and modern QR-Code creation | qyrr-code |
| Restrict User Registration | restrict-user-registration |
| RestroPress â Online Food Ordering System | restropress |
| Rock Convert | rock-convert |
| s2Member â Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions | s2member |
| Schema Plugin For Divi, Gutenberg & Shortcodes | wp-structured-data-schema |
| SEO Meta Description Updater | seo-meta-description-updater |
| SiteAlert (Formerly WP Health) | my-wp-health-check |
| SiteGround Email Marketing | siteground-email-marketing |
| Smart Docs | smart-docs |
| Smart WeTransfer | smart-wetransfer |
| SmartCrawl SEO checker, analyzer & optimizer | smartcrawl-seo |
| SMS Contact Form 7 Notifications by ClickSend | clicksend-contactform7 |
| Spirit Framework | spirit-framework |
| Survey Anyplace | surveyanyplace |
| TableGen â Data Table Generator | table-creator |
| Taskbot | taskbot |
| Testimonial â Testimonial Slider, Reviews Slider, Testimonial By AI | testimonial |
| TextBuilder | textbuilder |
| The Pack Elementor addon | the-pack-addon |
| Tiny Bootstrap Elements Light | tiny-bootstrap-elements-light |
| Tooltipy (tooltips for WP) | bluet-keywords-tooltip-generator |
| Travel & Tours Meta Search | adiaha-hotel |
| Trinity Audio â Text to Speech AI audio player to convert content into audio | trinity-audio |
| TS Demo Importer | ts-demo-importer |
| Ultimate Learning Pro | indeed-learning-pro |
| Ultimate Multi Design Video Carousel | ultimate-multi-design-video-carousel |
| Ultimate Viral Quiz | ultimate-viral-quiz |
| Ultra Addons Lite for Elementor | ut-elementor-addons-lite |
| Unify | unify |
| Upload.am â File Hosting & VPN | upload-am-file-hosting-vpn |
| USERCENTRICS CMP | usercentrics-consent-management-platform |
| Video Gallery by Huzzaz | huzzaz-video-gallery |
| WDesignKit â Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder | wdesignkit |
| WeedMaps Menu for WordPress | weedmaps-menu-embed |
| Woo superb slideshow transition gallery with random effect | woo-superb-slideshow-transition-gallery-with-random-effect |
| WooCommerce Vehicle Parts Finder | woo-vehicle-parts-finder |
| WP Attractive Donations System - Easy Stripe & Paypal donations | WP_AttractiveDonationsSystem |
| Wp cycle text announcement | wp-cycle-text-announcement |
| WP Dispatcher | wp-dispatcher |
| WP Photo Album Plus | wp-photo-album-plus |
| WP Photo Effects | wp-photo-effects |
| WP SinoType | wp-sinotype |
| WPRecovery | wprecovery |
| X Addons for Elementor | x-addons-elementor |
| Yoast SEO Premium | wordpress-seo-premium |
| Yoga Schedule Momoyoga | momoyoga-integration |
| ZoloBlocks â Advanced Gutenberg Blocks, Website Builder & Page Design Toolkit | zoloblocks |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Avada | Website Builder For WordPress & WooCommerce | Avada |
| Constructor | constructor |
| Customify | customify |
| The7 â Website and eCommerce Builder for WordPress | dt-the7 |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you shouldâve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
Affected Software
Appy Pie Connect for WooCommerce [appy-pie-connect-for-woocommerce]
Researcher
Affected Software
Copypress Rest API [copypress-rest-api]
Researcher
Affected Software
JoomSport â for Sports: Team & League, Football, Hockey & more [joomsport-sports-league-results-management]
Researcher
Affected Software
OAuth Single Sign On â SSO (OAuth Client) [miniorange-login-with-eve-online-google-facebook]
Researcher
Affected Software
Post By Email [post-by-email]
Researcher
Affected Software
RestroPress â Online Food Ordering System [restropress]
Researcher
Affected Software
Researcher
Affected Software
Spirit Framework [spirit-framework]
Researcher
Affected Software
WPRecovery [wprecovery]
Researcher
Affected Software
AP Background [ap-background]
Researcher
LatePoint <= 5.1.94 - Cross-Site Request Forgery to Account Takeover via change_password() Function
8.8
Affected Software
Researcher
TextBuilder 1.0.0 - 1.1.1 - Cross-Site Request Forgery to Privilege Escalation via Account Takeover
8.8
Affected Software
TextBuilder [textbuilder]
Researcher
Affected Software
WP Dispatcher [wp-dispatcher]
Researcher
Affected Software
Researcher
Affected Software
Bei Fen â WordPress Backup Plugin [bei-fen]
Researcher
Affected Software
Cost Calculator Builder [cost-calculator-builder]
Researcher
Affected Software
JobSearch WP Job Board [wp-jobsearch]
Researcher
Affected Software
Taskbot [taskbot]
Researcher
Affected Software
Tiny Bootstrap Elements Light [tiny-bootstrap-elements-light]
Researcher
Affected Software
WooCommerce Vehicle Parts Finder [woo-vehicle-parts-finder]
Researcher
Affected Software
AffiliateWP [affiliatewp]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
WP Dispatcher [wp-dispatcher]
Researcher
Affected Software
CF7 Auto Responder Addon [CF7-autoresponder-addon]
Researcher
Affected Software
NEX-Forms LITE [nex-forms-lite]
Researcher
Affected Software
WooCommerce Vehicle Parts Finder [woo-vehicle-parts-finder]
Researcher
All in One Music Player <= 1.3.1 - Authenticated (Contributor+) Path Traversal via theme Parameter
6.5
Affected Software
All in One Music Player [all-in-one-music-player]
Researcher
Affected Software
Researcher
Affected Software
Integrate Dynamics 365 CRM [integrate-dynamics-365-crm]
Researcher
Affected Software
Woo superb slideshow transition gallery with random effect [woo-superb-slideshow-transition-gallery-with-random-effect]
Researcher
Affected Software
Wp cycle text announcement [wp-cycle-text-announcement]
Researcher
Affected Software
A Simple Multilanguage Plugin [a-simple-multilanguage]
Researcher
Affected Software
All Social Share Options [all-social-share-options]
Researcher
Affected Software
Any News Ticker [any-news-ticker]
Researcher
Affected Software
AP Background [ap-background]
Researcher
Auto Bulb Finder for WordPress <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Auto Bulb Finder for WordPress [auto-bulb-finder-for-wp-wc]
Researcher
Affected Software
Big Post Shipping for WooCommerce [woo-bigpost-shipping]
Researcher
Affected Software
BP Direct Menus [bp-direct-menus]
Researcher
Bulk Auto Image Title Attribute <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Bulk Auto Image Title Attribute (Image Title tag) optimizer (Image SEO) [bulk-image-title-attribute]
Researcher
Affected Software
Researcher
Affected Software
Custom Post Type Attachment [custom-post-type-pdf-attachment]
Researcher
Affected Software
dbview [dbview]
Researcher
Affected Software
Easy Elementor Addons â Addons Pack for Elementor Page Builder [easy-elementor-addons]
Researcher
Affected Software
Epic Bootstrap Buttons [epic-bootstrap-buttons]
Researcher
Affected Software
Eulerpool Research Systems [alleaktien-quantitativ]
Researcher
Event Tickets, RSVPs, Calendar <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Event Tickets, RSVPs, Calendar [ticket-spot]
Researcher
FancyTabs <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Parameter
6.4
Affected Software
FancyTabs [fancytabs]
Researcher
Affected Software
Fintelligence Calculator [fintelligence-calculator]
Researcher
Affected Software
Flexi â Guest Submit [flexi]
Researcher
Affected Software
Avada (Fusion) Builder [fusion-builder]
Researcher
Affected Software
Generic Elements [generic-elements-for-elementor]
Researchers
GutenBee â Gutenberg Blocks <= 2.18.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
GutenBee â Gutenberg Blocks [gutenbee]
Researcher
Affected Software
Ird Slider [ird-slider]
Researcher
Affected Software
Researcher
Marquee Addons for Elementor <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Marquee Addons for Elementor â Essential Motion Widgets & Templates [marquee-addons-for-elementor]
Researcher
Affected Software
Meks Easy Maps [meks-easy-maps]
Researcher
Affected Software
Maps from Yandex for Elementor [mihdan-elementor-yandex-maps]
Researcher
Affected Software
My AskAI [my-askai]
Researcher
Affected Software
Researcher
Affected Software
Opal Service [opal-service]
Researcher
Affected Software
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More [themeisle-companion]
Researcher
planetcalc <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via language Parameter
6.4
Affected Software
planetcalc [planetcalc]
Researcher
Affected Software
Qyrr â simply and modern QR-Code creation [qyrr-code]
Researcher
Affected Software
Rock Convert [rock-convert]
Researcher
Affected Software
SiteGround Email Marketing [siteground-email-marketing]
Researcher
Affected Software
Survey Anyplace [surveyanyplace]
Researcher
Affected Software
Duplicate Page, Hide Title, Custom CSS & JS, Exclude Search, Template Info â Pagely [current-template-name]
Researcher
Affected Software
The Pack Elementor addon [the-pack-addon]
Researcher
Affected Software
Researcher
Affected Software
Tooltipy (tooltips for WP) [bluet-keywords-tooltip-generator]
Researcher
Affected Software
Ultra Addons Lite for Elementor [ut-elementor-addons-lite]
Researcher
Affected Software
Unify [unify]
Researcher
Affected Software
Video Gallery by Huzzaz [huzzaz-video-gallery]
Researcher
Affected Software
WeedMaps Menu for WordPress [weedmaps-menu-embed]
Researcher
WP Photo Effects <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
Affected Software
WP Photo Effects [wp-photo-effects]
Researcher
Affected Software
X Addons for Elementor [x-addons-elementor]
Researcher
Affected Software
Yoast SEO Premium [wordpress-seo-premium]
Researcher
Affected Software
Yoga Schedule Momoyoga [momoyoga-integration]
Researcher
Affected Software
Researcher
Affected Software
Schema Plugin For Divi, Gutenberg & Shortcodes [wp-structured-data-schema]
Researcher
Affected Software
LockerPress â WordPress Security Plugin [lockerpress-wordpress-security]
Researcher
Affected Software
Mobile Site Redirect [mobile-site-redirect]
Researcher
Affected Software
Researcher
Affected Software
File Manager, Code Editor, and Backup by Managefy [softdiscover-db-file-manager]
Researcher
Affected Software
Interactive Human Anatomy with Clickable Body Parts [interactive-medical-drawing-of-human-body]
Researcher
Affected Software
Affected Software
Smart Docs [smart-docs]
Researcher
Ultimate Multi Design Video Carousel <= 1.4 - Authenticated (Editor+) Stored Cross-Site Scripting
5.5
Affected Software
Ultimate Multi Design Video Carousel [ultimate-multi-design-video-carousel]
Researcher
Affected Software
Researcher
Affected Software
Before After Image [majestic-before-after-image]
Researcher
Affected Software
WP Photo Album Plus [wp-photo-album-plus]
Researcher
Affected Software
Export Categories [export-categories]
Researcher
Affected Software
Travel & Tours Meta Search [adiaha-hotel]
Researcher
Affected Software
Researcher
Affected Software
Restrict User Registration [restrict-user-registration]
Researcher
Affected Software
SiteAlert (Formerly WP Health) [my-wp-health-check]
Researcher
Affected Software
Upload.am â File Hosting & VPN [upload-am-file-hosting-vpn]
Researcher
Affected Software
Meta Tag Manager [meta-tag-manager]
Researcher
Affected Software
TableGen â Data Table Generator [table-creator]
Researcher
Affected Software
USERCENTRICS CMP [usercentrics-consent-management-platform]
Researcher
Affected Software
AP Background [ap-background]
Researcher
Attractive Donations System - Easy Stripe & Paypal donations <= 1.25 - Cross-Site Request Forgery
4.3
Affected Software
WP Attractive Donations System - Easy Stripe & Paypal donations [WP_AttractiveDonationsSystem]
Researcher
Affected Software
Researcher
Affected Software
Chat by Chatwee [chatwee]
Researcher
Affected Software
Comment Info Detector [comment-info-detector]
Researcher
Affected Software
Constructor [constructor]
Researcher
Affected Software
ContentMX Content Publisher [contentmx-content-publisher]
Researcher
Affected Software
Conversios: Google Analytics (GA4), Google Ads, Conversion and Analytics Tracking for Multi-Channels [enhanced-e-commerce-for-woocommerce-store]
Researcher
Affected Software
Customify [customify]
Researcher
Affected Software
Download Manager [download-manager]
Researcher
Affected Software
Effect Maker [effect-maker]
Researcher
Affected Software
IgnitionDeck Crowdfunding Platform [ignitiondeck]
Researcher
Affected Software
Jock On Air Now (JOAN) [joan]
Researcher
Affected Software
Researcher
Affected Software
Nelio Content â Editorial Calendar & Social Media Auto-Posting [nelio-content]
Researcher
Affected Software
Notification Bar [simple-bar]
Researcher
Affected Software
Optimize More! â CSS [optimize-more-css]
Researcher
Affected Software
PayPal Forms [paypal-forms]
Researcher
Affected Software
Post Grid [post-grid]
Researcher
Affected Software
Post Grid [post-grid]
Researcher
Affected Software
SEO Meta Description Updater [seo-meta-description-updater]
Researcher
Affected Software
Smart WeTransfer [smart-wetransfer]
Researcher
Affected Software
SmartCrawl SEO checker, analyzer & optimizer [smartcrawl-seo]
Researcher
Affected Software
SMS Contact Form 7 Notifications by ClickSend [clicksend-contactform7]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
TS Demo Importer [ts-demo-importer]
Researcher
Affected Software
Ultimate Learning Pro [indeed-learning-pro]
Researcher
Affected Software
Ultimate Viral Quiz [ultimate-viral-quiz]
Researcher
Affected Software
Researcher
Affected Software
WP SinoType [wp-sinotype]
Researcher
Affected Software
Block for Mailchimp â Add Email Subscription Forms and Collect Leads [block-for-mailchimp]
Researcher
Affected Software
Backup Bolt [backup-bolt]
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfenceâs highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Comments