Wordfence Intelligence Weekly WordPress Vulnerability Report (November 3, 2025 to November 9, 2025)
đ˘ Calling all Vulnerability Researchers and Bug Bounty Hunters! đ˘
đ The LFInder Challenge: Refine your LFI hunting skills with an expanded scope. Now through November 24, 2025, all LFI vulnerabilities in software with at least 25 active installs are considered in-scope for all researchers, regardless of researcher tier, AND earn a 30% bonus on all Local File Inclusion vulnerability submissions not already increased by another promotion.
Last week, there were 153 vulnerabilities disclosed in 134 WordPress Plugins and no WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 68 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to implement layered security, aligning with our overarching mission to secure WordPress with defense in depth strategies. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report. As the world’s leading quality vulnerability database provider for WordPress, site owners can rest assured knowing Wordfence has their back.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 29,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 109 |
| Unpatched | 44 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Low Severity | 1 |
| Medium Severity | 121 |
| High Severity | 22 |
| Critical Severity | 9 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Missing Authorization | 39 |
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 35 |
| Cross-Site Request Forgery (CSRF) | 20 |
| Exposure of Sensitive Information to an Unauthorized Actor | 16 |
| Unrestricted Upload of File with Dangerous Type | 7 |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 6 |
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 5 |
| Deserialization of Untrusted Data | 3 |
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 3 |
| Server-Side Request Forgery (SSRF) | 3 |
| Authorization Bypass Through User-Controlled Key | 2 |
| Improper Authorization | 2 |
| Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 2 |
| Improper Control of Generation of Code ('Code Injection') | 1 |
| Incorrect Authorization | 1 |
| Incorrect Comparison | 1 |
| Insertion of Sensitive Information into Log File | 1 |
| Missing Authentication for Critical Function | 1 |
| Protection Mechanism Failure | 1 |
| Reliance on Untrusted Inputs in a Security Decision | 1 |
| URL Redirection to Untrusted Site ('Open Redirect') | 1 |
| Use of Hard-coded Cryptographic Key | 1 |
| Use of Hard-coded Password | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 12 | |
| 11 | |
| 8 | |
| 7 | |
| 7 | |
| 7 | |
| 6 | |
| 6 | |
| 6 | |
| 6 | |
| 5 | |
| 4 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Academy LMS | academy |
| Academy LMS Pro | academy-pro |
| Ad Inserter â Ad Manager & AdSense Ads | ad-inserter |
| Ai Auto Tool Content Writing Assistant All in One | ai-auto-tool |
| AI Engine â The Chatbot, AI Framework & MCP for WordPress | ai-engine |
| Alex Reservations: Smart Restaurant Booking | alex-reservations |
| All in One Time Clock Lite â Tracking Employee Time Has Never Been Easier | aio-time-clock-lite |
| Asgaros Forum | asgaros-forum |
| Associados Amazon Plugin | brzon |
| aThemes Addons for Elementor â Widgets, Sliders, Galleries & Form Styler | athemes-addons-for-elementor-lite |
| Auto Prune Posts | auto-prune-posts |
| Backup Migration | backup-backup |
| Better Find and Replace â AI-Powered Suggestions | real-time-auto-find-and-replace |
| Blog2Social: Social Media Auto Post & Scheduler | blog2social |
| Booking Manager â Sync WP Booking Calendar â Import Events, Export Bookings to ICS Calendar | booking-manager |
| Bootstrap Multi-language Responsive Portfolio | bootstrap-multi-language-responsive-portfolio |
| Broken Link Manager | broken-link-manager |
| Carousel Block â Showcase Images in Elegant Sliding Displays | b-carousel-block |
| CE21 Suite | ce21-suite |
| Centangle-Team | centangle-team |
| clubmember | clubmember |
| Connect Contact Form 7 and AWeber | integrate-contact-form-7-and-aweber |
| Connector Wizard (formerly LC Wizard) | ghl-wizard |
| Content Locker for Elementor | content-locker-for-elementor |
| Content Pilot â Autoblogging & Affiliate Marketing Suite | wp-content-pilot |
| CoSchedule | coschedule-by-todaymade |
| Course Booking System | course-booking-system |
| Crypto Payment Gateway with Payeer for WooCommerce | crypto-payment-gateway-with-payeer-for-woocommerce |
| CYAN Backup | cyan-backup |
| Depicter â Popup & Slider Builder | depicter |
| Document Embedder â let visitors read files without downloading | document-emberdder |
| DominoKit | dominokit |
| Download Manager | download-manager |
| Easy Digital Downloads â eCommerce Payments and Subscriptions made easy | easy-digital-downloads |
| Easy Email Subscription | email-subscription-with-secure-captcha |
| Easy Upload Files During Checkout | easy-upload-files-during-checkout |
| Elegance Menu | elegance-menu |
| EM Beer Manager | em-beer-manager |
| Email Subscribers & Newsletters â Email Marketing, Post Notifications & Newsletter Plugin for WordPress | email-subscribers |
| Envira Gallery â Image Photo Gallery, Albums, Video Gallery, Slideshows & More | envira-gallery-lite |
| EventPrime â Events Calendar, Bookings, Tickets & AI | eventprime-event-calendar-management |
| Everest Forms Pro | everest-forms-pro |
| Extensions for Leaflet Map | extensions-leaflet-map |
| Features | features |
| Feeds for YouTube (YouTube video, channel, and gallery plugin) | feeds-for-youtube |
| File Manager for Google Drive â Integrate Google Drive | integrate-google-drive |
| Flexible Refund for WooCommerce â EU One Click Return | flexible-refund-and-return-order-for-woocommerce |
| follow-my-blog-post | follow-my-blog-post |
| Footnotes Made Easy | footnotes-made-easy |
| Free Quotation | free-quotation |
| FunnelKit Automations â Email Marketing Automation and CRM for WordPress & WooCommerce | wp-marketing-automations |
| Graphina â Charts and Graphs For Elementor | graphina-elementor-charts-and-graphs |
| Gravity Forms | gravityforms |
| Greenshift â animation and page builder blocks | greenshift-animation-and-page-builder-blocks |
| Groups â Memberships and Access Control | groups |
| Guest posting / Frontend Posting / Front Editor â WP Front User Submit | front-editor |
| HTML Forms â Simple WordPress Forms Plugin | html-forms |
| Hub Core | hub-core |
| Hubbub Lite â Fast, free social sharing and follow buttons | social-pug |
| IDonate â Blood Donation, Request And Donor Management System | idonate |
| Image Comparison Addon for Elementor | image-comparison-elementor-addon |
| Image Hover Effects for Elementor | image-hover-effects-elementor-addon |
| Import Export For WooCommerce | import-export-for-woocommerce |
| Insert Headers and Footers Code â HT Script | insert-headers-and-footers-script |
| JetElements | jet-elements |
| KiotViet Sync | kiotvietsync |
| Label Plugins | label-plugins |
| LearnPress â WordPress LMS Plugin for Create and Sell Online Courses | learnpress |
| LinkedIn Resume | linkedin-resume |
| LMB^Box Smileys | lmbbox-smileys |
| Login Page Customizer â Customize Login Screen & Branding | customizer-login-page |
| Login | Login Page | Login Logo | Rename Login Page | Custom Login Page | Temporary Users | Rebrand Login | Login Captcha | feather-login-page |
| Mail Mint â Email Marketing, Automation & WooCommerce Emails with AI Assistance | mail-mint |
| Mang Board WP | mangboard |
| MapMap | mapmap |
| Master Blocks â Ultimate Blocks for Marketers | ultimate-blocks-for-gutenberg |
| MeetingList | meeting-list |
| Nari Accountant | nari-accountant |
| New User Approve | new-user-approve |
| North | north-plugin |
| Ohio Extra | ohio-extra |
| Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More | themeisle-companion |
| Ovatheme Events Manager | ova-events-manager |
| Page & Post Notes | page-post-notes |
| Pagerank tools | pagerank-tools |
| Paid Membership Subscriptions â Effortless Memberships, Recurring Payments & Content Restriction | paid-member-subscriptions |
| Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program â myCred | mycred |
| Posts Navigation Links for Sections and Headings â Free by WP Masters | posts-navigation-links-for-sections-and-headings-free-by-wp-masters |
| Premium Portfolio Features for Phlox theme | auxin-portfolio |
| Quick Featured Images | quick-featured-images |
| Restaurant Menu and Food Ordering | mp-restaurant-menu |
| Reuse Builder | reuse-builder |
| Rey Core | Rey-Core |
| Saphali LiqPay for donate | saphali-liqpay-for-donate |
| Seriously Simple Podcasting | seriously-simple-podcasting |
| SH Contextual Help | sh-contextual-help |
| ShopLentor â All-in-One WooCommerce Growth & Store Enhancement Plugin | woolentor-addons |
| Simple Downloads List | simple-downloads-list |
| Simple User Capabilities | simple-user-capabilities |
| Smart Auto Upload Images â Import External Images | smart-auto-upload-images |
| SMS for WordPress | sms4wp |
| Spectra Legacy â Gutenberg Blocks | ultimate-addons-for-gutenberg |
| Strong Testimonials | strong-testimonials |
| SUMO Affiliates Pro | affs |
| TablePress â Tables in WordPress made easy | tablepress |
| Tag, Category, and Taxonomy Manager â Autotagger Automatically Add Terms | simple-tags |
| TAX SERVICE Electronic HDM | virtual-hdm-for-taxservice-am |
| The Events Calendar | the-events-calendar |
| Top Bar Notification | top-bar-notification |
| Traveler Option Tree | custom-option-tree |
| Travelers' Map | travelers-map |
| Ultimate FAQ Accordion Plugin | ultimate-faqs |
| Uncanny Automator â AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included | uncanny-automator |
| ViaAds | viaads |
| VikBooking Hotel Booking Engine & PMS | vikbooking |
| Visit Counter | visit-counter |
| Visual Link Preview | visual-link-preview |
| WooCommerce Recover Abandoned Cart | rac |
| WooCommerce Ultimate Points And Rewards | woocommerce-ultimate-points-and-rewards |
| WordPress eCommerce Plugin â Studiocart | studiocart |
| WP 2FA â Two-factor authentication for WordPress | wp-2fa |
| WP Airbnb Review Slider | wp-airbnb-review-slider |
| WP Carticon | wp-carticon |
| WP Delicious â Recipe Plugin for Food Bloggers (formerly Delicious Recipes) | delicious-recipes |
| WP Global Screen Options | wp-global-screen-options |
| WP Hotel Booking | wp-hotel-booking |
| WP Snow Effect | wp-snow-effect |
| WP-CRM System â Manage Clients and Projects | wp-crm-system |
| WP2Social Auto Publish | facebook-auto-publish |
| WPCF7 Stop words | wpcf7-stop-words |
| WPeMatico RSS Feed Fetcher | wpematico |
| WPFunnels â Funnel Builder for WooCommerce with Checkout & One Click Upsell | wpfunnels |
| WPLP Cookie Consent â Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode | gdpr-cookie-consent |
| ZoloBlocks â Advanced Gutenberg Blocks, Website Builder & Page Design Toolkit | zoloblocks |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you shouldâve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
Affected Software
Researcher
Affected Software
CE21 Suite [ce21-suite]
Researcher
Affected Software
CE21 Suite [ce21-suite]
Researcher
Affected Software
Easy Upload Files During Checkout [easy-upload-files-during-checkout]
Researcher
Affected Software
Gravity Forms [gravityforms]
Researcher
Affected Software
KiotViet Sync [kiotvietsync]
Researcher
Affected Software
ShopLentor â All-in-One WooCommerce Growth & Store Enhancement Plugin [woolentor-addons]
Researcher
Affected Software
Simple User Capabilities [simple-user-capabilities]
Researcher
Affected Software
TAX SERVICE Electronic HDM [virtual-hdm-for-taxservice-am]
Researcher
Affected Software
Better Find and Replace â AI-Powered Suggestions [real-time-auto-find-and-replace]
Researcher
Affected Software
EM Beer Manager [em-beer-manager]
Researcher
Affected Software
Researcher
Affected Software
Content Locker for Elementor [content-locker-for-elementor]
Image Comparison Addon for Elementor [image-comparison-elementor-addon]
Image Hover Effects for Elementor [image-hover-effects-elementor-addon]
Master Blocks â Ultimate Blocks for Marketers [ultimate-blocks-for-gutenberg]
Researcher
Affected Software
Smart Auto Upload Images â Import External Images [smart-auto-upload-images]
Researchers
Affected Software
Document Embedder â let visitors read files without downloading [document-emberdder]
Researcher
Affected Software
Connector Wizard (formerly LC Wizard) [ghl-wizard]
Researcher
Affected Software
Premium Portfolio Features for Phlox theme [auxin-portfolio]
Researcher
Affected Software
Travel Booking WordPress Theme [traveler]
Researcher
Affected Software
Asgaros Forum [asgaros-forum]
Researcher
Affected Software
Backup Migration [backup-backup]
Researcher
Affected Software
Crypto Payment Gateway with Payeer for WooCommerce [crypto-payment-gateway-with-payeer-for-woocommerce]
Researcher
Affected Software
Elegance Menu [elegance-menu]
Researcher
Affected Software
File Manager for Google Drive â Integrate Google Drive [integrate-google-drive]
Researcher
Affected Software
Hub Core [hub-core]
Researcher
Affected Software
North [north-plugin]
Researcher
Affected Software
The Events Calendar [the-events-calendar]
Researcher
Affected Software
VikBooking Hotel Booking Engine & PMS [vikbooking]
Researcher
Affected Software
Academy LMS [academy]
Researcher
Alex Reservations: Smart Restaurant Booking <= 2.2.3 - Authenticated (Admin+) Arbitrary File Upload
7.2
Affected Software
Alex Reservations: Smart Restaurant Booking [alex-reservations]
Researcher
Affected Software
Footnotes Made Easy [footnotes-made-easy]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
All in One Time Clock Lite â Tracking Employee Time Has Never Been Easier [aio-time-clock-lite]
Researcher
Affected Software
CYAN Backup [cyan-backup]
Researcher
Affected Software
Researcher
Affected Software
Ovatheme Events Manager [ova-events-manager]
Researcher
Affected Software
Travel Booking WordPress Theme [traveler]
Researcher
Affected Software
Researcher
Ad Inserter <= 2.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field
6.4
Affected Software
Ad Inserter â Ad Manager & AdSense Ads [ad-inserter]
Researcher
Affected Software
aThemes Addons for Elementor â Widgets, Sliders, Galleries & Form Styler [athemes-addons-for-elementor-lite]
Researcher
Affected Software
Carousel Block â Showcase Images in Elegant Sliding Displays [b-carousel-block]
Researcher
Affected Software
Researcher
Affected Software
Extensions for Leaflet Map [extensions-leaflet-map]
Researcher
Affected Software
Graphina â Charts and Graphs For Elementor [graphina-elementor-charts-and-graphs]
Researcher
Affected Software
Greenshift â animation and page builder blocks [greenshift-animation-and-page-builder-blocks]
Researcher
Affected Software
Insert Headers and Footers Code â HT Script [insert-headers-and-footers-script]
Researcher
Affected Software
JetElements [jet-elements]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Ohio Extra [ohio-extra]
Researcher
Orbit Fox Companion <= 3.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Post Taxonomy
6.4
Affected Software
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More [themeisle-companion]
Researcher
Affected Software
Reuse Builder [reuse-builder]
Researcher
Affected Software
Rey Core [Rey-Core]
Researcher
Affected Software
Saphali LiqPay for donate [saphali-liqpay-for-donate]
Researcher
Affected Software
Simple Downloads List [simple-downloads-list]
Researcher
Affected Software
Spectra Legacy â Gutenberg Blocks [ultimate-addons-for-gutenberg]
Researcher
Affected Software
TablePress â Tables in WordPress made easy [tablepress]
Researcher
Affected Software
Travelers' Map [travelers-map]
Researcher
Affected Software
Visual Link Preview [visual-link-preview]
Researcher
Affected Software
WPeMatico RSS Feed Fetcher [wpematico]
Researcher
Affected Software
Associados Amazon Plugin [brzon]
Researcher
Affected Software
Broken Link Manager [broken-link-manager]
Researcher
Affected Software
Centangle-Team [centangle-team]
Researcher
Affected Software
Researcher
Affected Software
Label Plugins [label-plugins]
Researcher
Affected Software
LinkedIn Resume [linkedin-resume]
Researcher
Affected Software
LMB^Box Smileys [lmbbox-smileys]
Researcher
Affected Software
Mang Board WP [mangboard]
Researcher
Affected Software
MapMap [mapmap]
Researcher
Affected Software
Pagerank tools [pagerank-tools]
Researcher
Affected Software
SH Contextual Help [sh-contextual-help]
Researcher
Affected Software
SMS for WordPress [sms4wp]
Researcher
Affected Software
WordPress eCommerce Plugin â Studiocart [studiocart]
Researcher
Affected Software
Top Bar Notification [top-bar-notification]
Researcher
Affected Software
Travel Booking WordPress Theme [traveler]
Researcher
Affected Software
Visit Counter [visit-counter]
Researcher
Affected Software
WP2Social Auto Publish [facebook-auto-publish]
Researcher
Affected Software
Everest Forms Pro [everest-forms-pro]
Researcher
Affected Software
WPCF7 Stop words [wpcf7-stop-words]
Researcher
Affected Software
Academy LMS Pro [academy-pro]
Researcher
Affected Software
CoSchedule [coschedule-by-todaymade]
Researcher
Affected Software
Course Booking System [course-booking-system]
Researcher
Affected Software
DominoKit [dominokit]
Researcher
Affected Software
Download Manager [download-manager]
Researcher
Affected Software
Easy Digital Downloads â eCommerce Payments and Subscriptions made easy [easy-digital-downloads]
Researcher
Affected Software
EventPrime â Events Calendar, Bookings, Tickets & AI [eventprime-event-calendar-management]
Researcher
Affected Software
Feeds for YouTube (YouTube video, channel, and gallery plugin) [feeds-for-youtube]
Researcher
Affected Software
Flexible Refund for WooCommerce â EU One Click Return [flexible-refund-and-return-order-for-woocommerce]
Researcher
Affected Software
follow-my-blog-post [follow-my-blog-post]
Researcher
Affected Software
FunnelKit Automations â Email Marketing Automation and CRM for WordPress & WooCommerce [wp-marketing-automations]
Researcher
Affected Software
WP Hotel Booking [wp-hotel-booking]
Researcher
Affected Software
KiotViet Sync [kiotvietsync]
Researcher
Affected Software
KiotViet Sync [kiotvietsync]
Researcher
Affected Software
Login Page Customizer â Customize Login Screen & Branding [customizer-login-page]
Researcher
Affected Software
Paid Membership Subscriptions â Effortless Memberships, Recurring Payments & Content Restriction [paid-member-subscriptions]
Researcher
Affected Software
Seriously Simple Podcasting [seriously-simple-podcasting]
Researcher
Affected Software
Seriously Simple Podcasting [seriously-simple-podcasting]
Researcher
Affected Software
Simple User Capabilities [simple-user-capabilities]
Researcher
Affected Software
WP Snow Effect [wp-snow-effect]
Researcher
Affected Software
The Events Calendar [the-events-calendar]
Researcher
Affected Software
Travel Booking WordPress Theme [traveler]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Easy Email Subscription [email-subscription-with-secure-captcha]
Researcher
Affected Software
Quick Featured Images [quick-featured-images]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
clubmember [clubmember]
Researcher
Affected Software
Free Quotation [free-quotation]
Researcher
Affected Software
WP Hotel Booking [wp-hotel-booking]
Researcher
Affected Software
HTML Forms â Simple WordPress Forms Plugin [html-forms]
Researcher
Affected Software
MeetingList [meeting-list]
Researcher
Affected Software
Bootstrap Multi-language Responsive Portfolio [bootstrap-multi-language-responsive-portfolio]
Researcher
Affected Software
Nari Accountant [nari-accountant]
Researcher
Affected Software
WP Carticon [wp-carticon]
Researcher
Affected Software
Ai Auto Tool Content Writing Assistant All in One [ai-auto-tool]
Researcher
Affected Software
Auto Prune Posts [auto-prune-posts]
Researcher
Affected Software
Better Find and Replace â AI-Powered Suggestions [real-time-auto-find-and-replace]
Researcher
Affected Software
Blog2Social: Social Media Auto Post & Scheduler [blog2social]
Researcher
Affected Software
Blog2Social: Social Media Auto Post & Scheduler [blog2social]
Researcher
Affected Software
Connect Contact Form 7 and AWeber [integrate-contact-form-7-and-aweber]
Researcher
Affected Software
Content Pilot â Autoblogging & Affiliate Marketing Suite [wp-content-pilot]
Researcher
Affected Software
Researcher
Affected Software
Easy Email Subscription [email-subscription-with-secure-captcha]
Researcher
Affected Software
EventPrime â Events Calendar, Bookings, Tickets & AI [eventprime-event-calendar-management]
Researcher
Affected Software
EventPrime â Events Calendar, Bookings, Tickets & AI [eventprime-event-calendar-management]
Researcher
Affected Software
Researcher
Affected Software
Features [features]
Researcher
Affected Software
FunnelKit Automations â Email Marketing Automation and CRM for WordPress & WooCommerce [wp-marketing-automations]
Researcher
Affected Software
Envira Gallery â Image Photo Gallery, Albums, Video Gallery, Slideshows & More [envira-gallery-lite]
Researcher
Affected Software
Researcher
Affected Software
WP Hotel Booking [wp-hotel-booking]
Researcher
Affected Software
Import Export For WooCommerce [import-export-for-woocommerce]
Researcher
Affected Software
KiotViet Sync [kiotvietsync]
Researcher
Affected Software
ListingPro - WordPress Directory & Listing Theme [listingpro]
Researcher
Affected Software
New User Approve [new-user-approve]
Researcher
Affected Software
Page & Post Notes [page-post-notes]
Researcher
Affected Software
Depicter â Popup & Slider Builder [depicter]
Researcher
Affected Software
Posts Navigation Links for Sections and Headings â Free by WP Masters [posts-navigation-links-for-sections-and-headings-free-by-wp-masters]
Researcher
Affected Software
Restaurant Menu and Food Ordering [mp-restaurant-menu]
Researcher
Affected Software
Strong Testimonials [strong-testimonials]
Researcher
Affected Software
SUMO Affiliates Pro [affs]
Researcher
Affected Software
Ultimate FAQ Accordion Plugin [ultimate-faqs]
Researcher
Affected Software
Researcher
Affected Software
ViaAds [viaads]
Researcher
WooCommerce Ultimate Points And Rewards <= 2.10.2 - Authenticated (Subscriber+) Information Exposure
4.3
Affected Software
WooCommerce Ultimate Points And Rewards [woocommerce-ultimate-points-and-rewards]
Researcher
Affected Software
WP Delicious â Recipe Plugin for Food Bloggers (formerly Delicious Recipes) [delicious-recipes]
Researcher
Affected Software
WP Global Screen Options [wp-global-screen-options]
Researcher
Affected Software
WP-CRM System â Manage Clients and Projects [wp-crm-system]
Researcher
Affected Software
WP Airbnb Review Slider [wp-airbnb-review-slider]
Researcher
Affected Software
Traveler Option Tree [custom-option-tree]
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfenceâs highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Comments