Wordfence Intelligence Weekly WordPress Vulnerability Report (November 24, 2025 to November 30, 2025)

Wordfence Intelligence Weekly WordPress Vulnerability Report (November 24, 2025 to November 30, 2025)

Last week, there were 127 vulnerabilities disclosed in 114 WordPress Plugins and 5 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 61 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.

Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to implement layered security, aligning with our overarching mission to secure WordPress with defense in depth strategies. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report. As the world’s leading quality vulnerability database provider for WordPress, site owners can rest assured knowing Wordfence has their back.

Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 31,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.

Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.


New Firewall Rules Deployed Last Week

The Wordfence Threat Intelligence Team reviews each vulnerability to determine impact and severity, along with assessing the likelihood of exploitation, to verify that the Wordfence Firewall provides sufficient protection.

The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our PremiumCare, and Response customers last week:

Wordfence PremiumCare, and Response customers received this protection immediately, while users still running the free version of Wordfence will receive this enhanced protection after a 30 day delay.


Total Unpatched & Patched Vulnerabilities Last Week

Patch Status Number of Vulnerabilities
Patched 95
Unpatched 32


Total Vulnerabilities by CVSS Severity Last Week

Severity Rating Number of Vulnerabilities
Low Severity 1
Medium Severity 107
High Severity 10
Critical Severity 9


Total Vulnerabilities by CWE Type Last Week

Vulnerability Type by CWE Number of Vulnerabilities
Missing Authorization 47
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 28
Cross-Site Request Forgery (CSRF) 11
Exposure of Sensitive Information to an Unauthorized Actor 7
Authorization Bypass Through User-Controlled Key 6
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 5
Improper Privilege Management 5
Unrestricted Upload of File with Dangerous Type 4
Improper Control of Generation of Code ('Code Injection') 3
Server-Side Request Forgery (SSRF) 3
Deserialization of Untrusted Data 2
Authentication Bypass Using an Alternate Path or Channel 1
Client-Side Enforcement of Server-Side Security 1
External Control of File Name or Path 1
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') 1
Incorrect Authorization 1
URL Redirection to Untrusted Site ('Open Redirect') 1


Researchers That Contributed to WordPress Security Last Week

Researcher Name Number of Vulnerabilities
16
10
7
4
4
4
4
3
3
Mdr
3
3
3
3
3
3
3
2
2
2
2
2
2
2
2
2
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1

Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.


WordPress Plugins with Reported Vulnerabilities Last Week

Software Name Software Slug
Ace Post Type Builder ace-post-type-builder
AI ChatBot with ChatGPT and Content Generator by AYS ays-chatgpt-assistant
AI Engine for WordPress: ChatGPT, GPT Content Generator liquid-chatgpt
AI Feeds ai-feeds
All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) all-in-one-seo-pack
ANAC XML Bandi di Gara avcp
ANAC XML Viewer anac-xml-viewer
Analytics Germanized for Google Analytics (GDPR / DSGVO) ga-germanized
atec Duplicate Page & Post atec-duplicate-page-post
Autochat Automatic Conversation auyautochat-for-wp
BERTHA AI. Your AI co-pilot for WordPress and Chrome bertha-ai-free
Blog2Social: Social Media Auto Post & Scheduler blog2social
Bold Page Builder bold-page-builder
Bookme – Free Online Appointment Booking and Scheduling Plugin bookme-free-appointment-booking-system
Cart Weight for WooCommerce woo-cart-weight
CatFolders – WordPress Media Library Folders & Categories catfolders
Chamber Dashboard Business Directory chamber-dashboard-business-directory
CIBELES AI cibeles-ai
Conditionnal Maintenance Mode for WordPress maintenance-mode-based-on-user-roles
Customer Reviews Collector for WooCommerce customer-reviews-collector-for-woocommerce
Donation Thermometer donation-thermometer
Duplicate Content Cure duplicate-content-cure
Easy Form easy-form
EduKart Pro edukart-pro
Elementor Website Builder – more than just a page builder elementor
eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams eroom-zoom-meetings-webinar
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce erp
Essential Widgets essential-widgets
Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar mage-eventpress
Featured Post Creative featured-post-creative
FindAll Listing findall-listing
FindAll Membership findall-membership
FireBox Popups – Increase Sales and Grow Your Email List firebox
Flexmls® IDX Plugin flexmls-idx
Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution fluent-booking
FluentCommunity – Ultra-Fast High-Performance Social Network, Community, LMS & Online Courses fluent-community
Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager folders
Frontend File Manager Plugin nmedia-user-file-uploader
Google Drive upload and download link google-drive-upload-and-download-link
Gutenverse Form – Contact Form Builder, Block Form & Booking Form gutenverse-form
Gutenverse – WordPress Blocks, Page Builder & Site Editor gutenverse
Hide Category by User Role for WooCommerce hide-category-by-user-role-for-woocommerce
Hostel hostel
Hydra Booking — Appointment Scheduling & Booking Calendar hydra-booking
Inline frame – Iframe inline-frame-iframe
JetFormBuilder — Dynamic Blocks Form Builder jetformbuilder
Job Board by BestWebSoft job-board
Just Highlight just-highlight
KiviCare – Clinic & Patient Management System (EHR) kivicare-clinic-management-system
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses learnpress
Locker Content — Content Locking & Engagement Gates locker-content
Masteriyo LMS – LMS Course Builder, Quizzes & Certificates learning-management-system
MotoPress Hotel Booking motopress-hotel-booking-lite
Nextend Social Login and Register nextend-facebook-connect
Notification for Telegram notification-for-telegram
Ocean Modal Window ocean-modal-window
oik oik
OnPay.io for WooCommerce onpay-io-for-woocommerce
OrderConvo – Vendor & Customer Messages After Orders admin-and-client-message-after-order-for-woocommerce
Payment Gateway for PayPal on WooCommerce woo-paypal-gateway
Peer Publish peer-publish
Perfect Brands for WooCommerce perfect-woocommerce-brands
PowerPress Podcasting plugin by Blubrry powerpress
ProjectList projectlist
Property Hive propertyhive
Pure WC Variation Swatches pure-wc-variations-swatches
QODE Wishlist for WooCommerce qode-wishlist-for-woocommerce
Quick Contact Form quick-contact-form
Quick Interest Slider quick-interest-slider
Quick View for WooCommerce – Reno QuickView woo-quickview
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker quiz-master-next
Quiz Maker, Poll Maker & Survey Maker by Opinion Stage social-polls-by-opinionstage
Refund Request for WooCommerce refund-request-for-woocommerce
Rencontre – Dating Site rencontre
Reuters Direct reuters-direct
Royal Addons for Elementor – Addons and Templates Kit for Elementor royal-elementor-addons
Search Exclude search-exclude
Security Optimizer – The All-In-One Protection Plugin sg-security
Sermon Manager sermon-manager-for-wordpress
Shouty shouty
Show Variations as Single Products for WooCommerce woo-show-single-variations-shop-category
Simple Folio simple-folio
SKT PayPal for WooCommerce skt-paypal-for-woocommerce
Sneeit Framework sneeit-framework
Social Images Widget social-images-widget
SortTable Post sorttable-post
Soundslides soundslides
StaffList stafflist
StreamTube Core streamtube-core
Stylish Price List – Price Table Builder & QR Code Restaurant Menu stylish-price-list
Subscriptions & Memberships for PayPal subscriptions-memberships-for-paypal
Telegram Bot & Channel telegram-bot
Tiare Membership tiare-membership
TNC Toolbox: Web Performance tnc-toolbox
Tourfic Toolkit travelfic-toolkit
Trade Runner traderunner
Translate WordPress with ConveyThis – AI Multilingual Plugin conveythis-translate
Tutor LMS Elementor Addons tutor-lms-elementor-addons
Ultimate Member Widgets for Elementor – Login Form, Register Form & User Directory ultimate-member-widgets-for-elementor
Unlimited Elements For Elementor unlimited-elements-for-elementor
Unlimited Elements for Elementor (Premium) unlimited-elements-for-elementor-premium
URL Shortify – Simple and Easy URL Shortener url-shortify
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP userswp
Virtuaria PagBank / PagSeguro for WooCommerce virtuaria-pagseguro
Werkstatt werkstatt-plugin
Wishlist for WooCommerce th-wishlist
WP Compress for MainWP wp-compress-mainwp
WP Directory Kit wpdirectorykit
WP Fastest Cache – WordPress Cache Plugin wp-fastest-cache
WP sIFR wp-sifr
WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress wp-webhooks
wp-twitpic wp-twitpic
YouTube Subscribe easy-youtube-subscribe
Zweb Social Mobile – Ứng Dụng Nút Gọi Mobile zweb-social-mobile


WordPress Themes with Reported Vulnerabilities Last Week

Software Name Software Slug
Houzez houzez
Pool Services WordPress Theme + RTL pool-services
Powerlift - Fitness and Gym WordPress Theme powerlift
The Aisle - Elegant Wedding WordPress Theme theaisle
Tiger tiger


Vulnerability Details

Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.

CVSS Rating
9.8 (Critical)
Patch Status
Patched
Published
Nov 25, 2025
Affected Software
AI Feeds [ai-feeds]
Researcher
CVSS Rating
9.8 (Critical)
Patch Status
Patched
Published
Nov 25, 2025
Affected Software
CIBELES AI [cibeles-ai]
Researcher
CVSS Rating
9.8 (Critical)
Patch Status
Unpatched
Published
Nov 24, 2025
Affected Software
EduKart Pro [edukart-pro]
Researcher
CVSS Rating
9.8 (Critical)
Patch Status
Patched
Published
Nov 26, 2025
Affected Software
FindAll Listing [findall-listing]
Researcher
CVSS Rating
9.8 (Critical)
Patch Status
Patched
Published
Nov 26, 2025
Affected Software
FindAll Membership [findall-membership]
Researcher
CVSS Rating
9.8 (Critical)
Patch Status
Patched
Published
Nov 24, 2025
Affected Software
Sneeit Framework [sneeit-framework]
Researcher
CVSS Rating
9.8 (Critical)
Patch Status
Patched
Published
Nov 29, 2025
Affected Software
StreamTube Core [streamtube-core]
Researcher
CVSS Rating
9.8 (Critical)
Patch Status
Patched
Published
Nov 26, 2025
Affected Software
Tiare Membership [tiare-membership]
Researcher
CVSS Rating
9.8 (Critical)
Patch Status
Unpatched
Published
Nov 26, 2025
Affected Software
Tiger [tiger]
Researcher
CVSS Rating
8.8 (High)
Patch Status
Unpatched
Published
Nov 26, 2025
Affected Software
Tiger [tiger]
Researcher
CVSS Rating
7.5 (High)
Patch Status
Patched
Published
Nov 26, 2025
Affected Software
Researcher
CVSS Rating
7.5 (High)
Patch Status
Patched
Published
Nov 26, 2025
Affected Software
SKT PayPal for WooCommerce [skt-paypal-for-woocommerce]
Researcher
CVSS Rating
7.5 (High)
Patch Status
Patched
Published
Nov 30, 2025
Affected Software
Werkstatt [werkstatt-plugin]
CVSS Rating
7.2 (High)
Patch Status
Patched
Published
Nov 28, 2025
Affected Software
Ocean Modal Window [ocean-modal-window]
CVSS Rating
7.2 (High)
Patch Status
Unpatched
Published
Nov 27, 2025
Affected Software
CVSS Rating
7.2 (High)
Patch Status
Unpatched
Published
Nov 24, 2025
Affected Software
ProjectList [projectlist]
Researcher
CVSS Rating
7.2 (High)
Patch Status
Patched
Published
Nov 24, 2025
Affected Software
Telegram Bot & Channel [telegram-bot]
Researcher
CVSS Rating
6.5 (Medium)
Patch Status
Patched
Published
Nov 27, 2025
CVSS Rating
6.5 (Medium)
Patch Status
Patched
Published
Nov 27, 2025
Affected Software
KiviCare – Clinic & Patient Management System (EHR) [kivicare-clinic-management-system]
Researcher
CVSS Rating
6.5 (Medium)
Patch Status
Patched
Published
Nov 24, 2025
Affected Software
Perfect Brands for WooCommerce [perfect-woocommerce-brands]
CVSS Rating
6.5 (Medium)
Patch Status
Patched
Published
Nov 24, 2025
Affected Software
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Nov 26, 2025
Affected Software
ANAC XML Viewer [anac-xml-viewer]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Nov 27, 2025
Affected Software
Bold Page Builder [bold-page-builder]
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Nov 26, 2025
Affected Software
Donation Thermometer [donation-thermometer]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Nov 26, 2025
Affected Software
Essential Widgets [essential-widgets]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Nov 27, 2025
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Nov 26, 2025
Affected Software
Google Drive upload and download link [google-drive-upload-and-download-link]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Nov 24, 2025
Affected Software
Inline frame – Iframe [inline-frame-iframe]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Nov 26, 2025
Affected Software
oik [oik]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Nov 26, 2025
Affected Software
Shouty [shouty]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Nov 26, 2025
Affected Software
Simple Folio [simple-folio]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Nov 26, 2025
Affected Software
SortTable Post [sorttable-post]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Nov 26, 2025
Affected Software
Soundslides [soundslides]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Nov 30, 2025
Affected Software
Tutor LMS Elementor Addons [tutor-lms-elementor-addons]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Nov 26, 2025
Affected Software
wp-twitpic [wp-twitpic]
Researcher
CVSS Rating
6.3 (Medium)
Patch Status
Patched
Published
Nov 26, 2025
Affected Software
Houzez [houzez]
Researcher
CVSS Rating
6.1 (Medium)
Patch Status
Patched
Published
Nov 24, 2025
Affected Software
Researcher
CVSS Rating
6.1 (Medium)
Patch Status
Patched
Published
Nov 26, 2025
Affected Software
Customer Reviews Collector for WooCommerce [customer-reviews-collector-for-woocommerce]
CVSS Rating
6.1 (Medium)
Patch Status
Patched
Published
Nov 27, 2025
Affected Software
Hostel [hostel]
Researcher
CVSS Rating
6.1 (Medium)
Patch Status
Patched
Published
Nov 26, 2025
Affected Software
Houzez [houzez]
Researcher
CVSS Rating
6.1 (Medium)
Patch Status
Patched
Published
Nov 24, 2025
Affected Software
CVSS Rating
6.1 (Medium)
Patch Status
Patched
Published
Nov 24, 2025
Affected Software
Researcher
CVSS Rating
6.1 (Medium)
Patch Status
Patched
Published
Nov 26, 2025
Affected Software
WP Directory Kit [wpdirectorykit]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Nov 24, 2025
Affected Software
Autochat Automatic Conversation [auyautochat-for-wp]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Nov 29, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Nov 30, 2025
Affected Software
Cart Weight for WooCommerce [woo-cart-weight]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Nov 30, 2025
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Nov 24, 2025
Affected Software
Chamber Dashboard Business Directory [chamber-dashboard-business-directory]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Nov 29, 2025
Affected Software
WP Compress for MainWP [wp-compress-mainwp]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Nov 29, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Nov 28, 2025
Affected Software
Easy Form [easy-form]
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Nov 26, 2025
Affected Software
Hide Category by User Role for WooCommerce [hide-category-by-user-role-for-woocommerce]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Nov 25, 2025
Affected Software
MotoPress Hotel Booking [motopress-hotel-booking-lite]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Nov 29, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Nov 30, 2025
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Nov 24, 2025
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Nov 29, 2025
Affected Software
OnPay.io for WooCommerce [onpay-io-for-woocommerce]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Nov 30, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Nov 24, 2025
Affected Software
Property Hive [propertyhive]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Nov 28, 2025
Affected Software
Pure WC Variation Swatches [pure-wc-variations-swatches]
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Nov 29, 2025
Affected Software
Quick Interest Slider [quick-interest-slider]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Nov 26, 2025
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Nov 30, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Nov 26, 2025
Affected Software
Reuters Direct [reuters-direct]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Nov 28, 2025
Affected Software
Sermon Manager [sermon-manager-for-wordpress]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Nov 28, 2025
Affected Software
Show Variations as Single Products for WooCommerce [woo-show-single-variations-shop-category]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Nov 30, 2025
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Nov 24, 2025
Affected Software
Social Images Widget [social-images-widget]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Nov 30, 2025
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Nov 28, 2025
Affected Software
Subscriptions & Memberships for PayPal [subscriptions-memberships-for-paypal]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Nov 27, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Nov 25, 2025
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Nov 28, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Nov 30, 2025
CVSS Rating
4.9 (Medium)
Patch Status
Unpatched
Published
Nov 24, 2025
Affected Software
CVSS Rating
4.9 (Medium)
Patch Status
Unpatched
Published
Nov 24, 2025
Affected Software
ProjectList [projectlist]
Researcher
CVSS Rating
4.4 (Medium)
Patch Status
Unpatched
Published
Nov 24, 2025
Affected Software
Just Highlight [just-highlight]
CVSS Rating
4.4 (Medium)
Patch Status
Patched
Published
Nov 26, 2025
Affected Software
StaffList [stafflist]
Researcher
CVSS Rating
4.4 (Medium)
Patch Status
Unpatched
Published
Nov 24, 2025
Affected Software
YouTube Subscribe [easy-youtube-subscribe]
Researcher
CVSS Rating
4.4 (Medium)
Patch Status
Unpatched
Published
Nov 24, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Nov 24, 2025
Affected Software
Conditionnal Maintenance Mode for WordPress [maintenance-mode-based-on-user-roles]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Nov 29, 2025
Affected Software
Duplicate Content Cure [duplicate-content-cure]
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Nov 25, 2025
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Nov 26, 2025
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Nov 26, 2025
Affected Software
Featured Post Creative [featured-post-creative]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Nov 25, 2025
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Nov 28, 2025
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Nov 24, 2025
Affected Software
Frontend File Manager Plugin [nmedia-user-file-uploader]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Nov 28, 2025
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Nov 28, 2025
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Nov 30, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Nov 27, 2025
Affected Software
Nextend Social Login and Register [nextend-facebook-connect]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Nov 29, 2025
Affected Software
Notification for Telegram [notification-for-telegram]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Nov 24, 2025
Affected Software
Peer Publish [peer-publish]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Nov 26, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Nov 27, 2025
Affected Software
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Nov 24, 2025
Affected Software
Property Hive [propertyhive]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Nov 25, 2025
Affected Software
Quick Contact Form [quick-contact-form]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Nov 29, 2025
Affected Software
Quick Interest Slider [quick-interest-slider]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Nov 24, 2025
Affected Software
Refund Request for WooCommerce [refund-request-for-woocommerce]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Nov 30, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Nov 26, 2025
Affected Software
Reuters Direct [reuters-direct]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Nov 24, 2025
Affected Software
Search Exclude [search-exclude]
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Nov 29, 2025
Affected Software
WP sIFR [wp-sifr]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Nov 27, 2025
Affected Software
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Nov 29, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Nov 30, 2025
Affected Software
Trade Runner [traderunner]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Nov 26, 2025
Affected Software
Tourfic Toolkit [travelfic-toolkit]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Nov 26, 2025
Affected Software
Researcher
CVSS Rating
3.4 (Low)
Patch Status
Patched
Published
Nov 29, 2025
Affected Software
Flexmls® IDX Plugin [flexmls-idx]
Researcher


As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.

This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.

Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.

Did you enjoy this post? Share it!

Comments

No Comments