Wordfence Intelligence Weekly WordPress Vulnerability Report (December 15, 2025 to January 4, 2026)

Wordfence Intelligence Weekly WordPress Vulnerability Report (December 15, 2025 to January 4, 2026)


📢 Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we handle all the rest.


Special Note: This week’s Wordfence Intelligence Weekly WordPress Vulnerability Report is an extended edition to cover the last few weeks in December over the holidays and the first week in January.

Over the past three weeks, there were 598 vulnerabilities disclosed in 463 WordPress Plugins and 90 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 108 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.

Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to implement layered security, aligning with our overarching mission to secure WordPress with defense in depth strategies. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report. As the world’s leading quality vulnerability database provider for WordPress, site owners can rest assured knowing Wordfence has their back.

Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 32,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.

Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.


Total Unpatched & Patched Vulnerabilities Last Week

Patch Status Number of Vulnerabilities
Patched 328
Unpatched 270


Total Vulnerabilities by CVSS Severity Last Week

Severity Rating Number of Vulnerabilities
Low Severity 2
Medium Severity 486
High Severity 101
Critical Severity 9


Total Vulnerabilities by CWE Type Last Week

Vulnerability Type by CWE Number of Vulnerabilities
Missing Authorization 190
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 166
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') 66
Cross-Site Request Forgery (CSRF) 58
Exposure of Sensitive Information to an Unauthorized Actor 29
Authorization Bypass Through User-Controlled Key 28
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 14
Server-Side Request Forgery (SSRF) 13
Deserialization of Untrusted Data 6
Improper Control of Generation of Code ('Code Injection') 4
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 4
Unrestricted Upload of File with Dangerous Type 3
URL Redirection to Untrusted Site ('Open Redirect') 3
External Control of File Name or Path 2
Authentication Bypass Using an Alternate Path or Channel 1
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 1
Generation of Error Message Containing Sensitive Information 1
Improper Authentication 1
Improper Input Validation 1
Improper Neutralization of Null Byte or NUL Character 1
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) 1
Improper Privilege Management 1
Incorrect Authorization 1
Incorrect Privilege Assignment 1
Insertion of Sensitive Information into Log File 1
Weak Password Recovery Mechanism for Forgotten Password 1


Researchers That Contributed to WordPress Security Last Week

Researcher Name Number of Vulnerabilities
55
47
45
37
36
35
34
28
21
20
17
12
11
11
10
9
9
8
7
7
6
6
5
5
4
4
4
3
3
3
3
3
3
3
3
3
3
2
2
2
2
2
2
2
2
2
2
2
2
2
2
2
2
2
2
2
2
1
1
1
1
1
1
1
1
1
1
Mdr
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1

Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.


WordPress Plugins with Reported Vulnerabilities Last Week

Software Name Software Slug
6Storage Rentals 6storage-rentals
907 - Responsive Multi-Purpose WordPress Theme wbc907-core
Academy LMS academy
Accept Donations with PayPal & Stripe easy-paypal-donation
Accessibility Press ilogic-accessibility
Accordion Slider Gallery accordion-slider-gallery
Add Custom Codes – Insert Header, Footer, Custom PHP Snippets, CSS, Javascript add-custom-codes
Add Featured Image Custom Link custom-url-to-featured-image
Addonify – Quick View For WooCommerce addonify-quick-view
Admin and Site Enhancements (ASE) admin-site-enhancements
Adminify – White Label, Admin Menu Editor, Login Customizer adminify
Advanced Ads – Ad Manager & AdSense advanced-ads
Advanced Booking & Appointment System – Webba Booking Calendar webba-booking-lite
Advanced Classifieds & Directory Pro advanced-classifieds-and-directory-pro
Advanced Custom CSS advanced-custom-css
AdWords Conversion Tracking Code adwords-conversion-tracking-code
Agency Toolkit agency-toolkit
AI Content Writing Assistant ai-content-writing-assistant
AI Copilot – ChatGPT Chatbot & AI Engine for Post Automation ai-copilot
All in One Accessibility all-in-one-accessibility
All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements mystickyelements
AM Events am-events
Amazon affiliate lite Plugin afiliados-de-amazon-lite
Animation Addons for Elementor – GSAP Motion Elementor Addons & Website Templates animation-addons-for-elementor
AnyComment anycomment
Apimo Connector apimo
Appender – Copycat Content Protection for WordPress appender
Appointify appointify
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin simply-schedule-appointments
Appointment Bookings for Zoom GoogleMeet and more – Wappointment wappointment
Aruba HiSpeed Cache aruba-hispeed-cache
Astra Widgets astra-widgets
Attachments Handler attachments-handler
Audiomack audiomack
Auto Featured Image (Auto Post Thumbnail) auto-post-thumbnail
Auto Listings – Car Listings & Car Dealership Plugin for WordPress auto-listings
Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code automation-web-platform
AweBooking – Hotel Booking System awebooking
BA Book Everything ba-book-everything
Basticom Framework basticom-framework
Beaver Builder Page Builder – Drag and Drop Website Builder beaver-builder-lite-version
Behance Portfolio Manager portfolio-manager-powered-by-behance
Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots bp-better-messages
Blog Filter – Post Grid Filter by Category or Tag blog-filter
BM Content Builder bm-builder
Bold Timeline Lite bold-timeline-lite
Booking Calendar booking
Booking calendar, Appointment Booking System booking-calendar
Booking Ultra Pro Appointments Booking Calendar Plugin booking-ultra-pro
Bootstrap Modals bootstrap-modals
Branda – White Label & Branding, Free Login Page Customizer branda-white-labeling
Brands for WooCommerce brands-for-woocommerce
Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content brave-popup-builder
BuddyPress Activity Shortcode bp-activity-shortcode
Business Directory Plugin – Easy Listing Directories for WordPress business-directory-plugin
Business Hours for WPBakery – Worker worker-wpbakery
Business hours widget for Elementor – Worker worker-elementor
BWL Knowledge Base Manager bwl-kb-manager
BWL Pro Voting Manager bwl-pro-voting-manager
Calendar calendar
Calendar.online / Kalender.digital – Plugin kalender-digital
Captivate Sync captivatesync-trade
Car Rental Manager – Online Vehicle Booking System car-rental-manager
Carousel Horizontal Posts Content Slider carousel-horizontal-posts-content-slider
Category Icon category-icon
CC Child Pages cc-child-pages
CedCommerce Integration for Good Market ced-good-market-integration
Chakra test chakra-test
Changelog & Custom List for Elementor logger-elementor
Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist bit-assist
Cincopa video and media plug-in video-playlist-and-gallery-plugin
Civic Cookie Control civic-cookie-control-8
Claspo – Popups, Spin the Wheel & Email Capture claspo
Co-marquage service-public.fr co-marquage-service-public
CodeColorer codecolorer
Colibri Page Builder colibri-page-builder
Combo Offers WooCommerce woo-combo-offers
Coming Soon & Maintenance Mode for WordPress by WP Messiah coming-soon-by-boomdevs
Comments – wpDiscuz wpdiscuz
Connect Contact Form 7 to Mailchimp, Brevo, MailerLite & Klaviyo contact-form-7-mailchimp-extension
Contact Form 7 styler for Elementor – Conformer conformer-elementor
Contact Form Widget new-contact-form-widget
Content Fetcher content-fetcher
Content Grid Slider content-grid-slider
Converter for Media – Optimize images | Convert WebP & AVIF webp-converter-for-media
Cooked – Recipe Management cooked
Cookie Banner for GDPR / CCPA – WPLP Cookie Consent gdpr-cookie-consent
CookieHint WP cookiehint-wp
Cool Tag Cloud cool-tag-cloud
Core Web Vitals & PageSpeed Booster core-web-vitals-pagespeed-booster
Countdowner – Countdown Timer for Elementor countdowner-elementor
Couponer – Discount Coupons for Elementor couponer-elementor
Criptopayer – Crypto Payment Button for Elementor criptopayer-elementor
Crowdsignal Forms crowdsignal-forms
CubeWP Framework cubewp-framework
Curator.io curatorio
Custom Background Changer custom-background-changer
Custom Field Template custom-field-template
Custom Post Status custom-post-status
Custom Related Posts custom-related-posts
Custom Style custom-style
Customizable heading for Elementor headinger-elementor
CWW Companion cww-companion
Dashboard Beacon wp-dashboard-beacon
Demo Importer Plus demo-importer-plus
Dental Care CPT dentalcare-cpt
DesignThemes Core designthemes-core
DesignThemes LMS Addon designthemes-lms-addon
DesignThemes Portfolio Addon designthemes-portfolio-addon
Direct Payments WP – Receive Payments with Forms direct-payments-wp
Directorist: AI-Powered Business Directory, Listings & Classified Ads directorist
DirectoryPress – Business Directory And Classified Ad Listing directorypress
Discussion Board – WordPress Forum Plugin wp-discussion-board
DMCA Protection Badge dmca-badge
Docket Cache – Object Cache Accelerator docket-cache
Document Library Lite document-library-lite
Dokan Pro dokan-pro
Download Manager download-manager
Download Media Library download-media-library
Download Plugins and Themes in ZIP from Dashboard download-plugins-dashboard
Draft Notify draft-notify
e-shopsカート2 e-shops-cart2
E-xact | Hosted Payment | e-xact-hosted-payment
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy easy-digital-downloads
Easy Form Builder by WhiteStudio — Drag & Drop Form Builder easy-form-builder
Easy Invoice – Invoice Generator, PDF Quotes & Payments easy-invoice
Easy Upload Files During Checkout easy-upload-files-during-checkout
EasyIndex easyindex
EasyTest – Simplify A/B Testing convertpro
Editorial Calendar editorial-calendar
Effect Maker effect-maker
Efí Bank woo-gerencianet-official
Eight Day Week Print Workflow eight-day-week-print-workflow
EInvoice App Malaysia einvoiceapp-malaysia
Electrician - Electricity Services WordPress Theme electrician
Elementor Website Builder – more than just a page builder elementor
ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system
Email Marketing Plugin – WP Email Capture wp-email-capture
Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files embed-any-document
Embeds for YouTube youtube-embed
Essential Addons for Elementor – Popular Elementor Templates & Widgets essential-addons-for-elementor-lite
Event Booking Manager for WooCommerce – Registration, RSVP, Calendar & Tickets mage-eventpress
Event Organiser event-organiser
Events Manager – Calendar, Bookings, Tickets, and more! events-manager
Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin everest-backup
Evergreen Post Tweeter evergreen-post-tweeter
Extra Shortcodes extra-shortcodes
F70 Lead Document Download f70-lead-document-download
Fancy Product Designer fancy-product-designer
FAPI Member fapi-member
Fast User Switching fast-user-switching
Featured Image Generator featured-image-generator
Featured Video for WordPress – VideographyWP videographywp
FiboSearch – Ajax Search for WooCommerce ajax-search-for-woocommerce
File Uploader for WooCommerce file-uploader-for-woocommerce
FileBird – WordPress Media Library Folders & File Manager filebird
Five Star Restaurant Reservations – WordPress Booking Plugin restaurant-reservations
Flaming Password Reset flaming-password-reset
Flex Store Users flex-store-user
FlexTable – Data Table Sync with Google Sheets sheets-to-wp-table-live-sync
FlippingBook flippingbook
Flowbox flowbox
FluentAuth – The Ultimate Authorization & Security Plugin for WordPress fluent-security
Follow My Blog Post - WordPress / WooCommerce Plugin follow-my-blog-post
FooEvents for WooCommerce fooevents
FormFacade – Embed Google Forms in your website formfacade
Forumax – AI Powered Advanced Community Forum Plugin bbp-core
Fox LMS – eLearning & Course Builder fox-lms
Free Shipping Bar: Amount Left for Free Shipping for WooCommerce amount-left-free-shipping-woocommerce
Frontend File Manager Plugin nmedia-user-file-uploader
Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin frontend-post-submission-manager-lite
FV Simpler SEO fv-all-in-one-seo-pack
Gift Hunt gift-hunt
GiveWP – Donation Plugin and Fundraising Platform give
GLS Shipping for WooCommerce gls-shipping-for-woocommerce
Gmedia Photo Gallery grand-media
Google AdSense for Responsive Design – GARD google-adsense-for-responsive-design-gard
Google Maps for Elementor gmaper-elementor
Google Street View for Elementor – Walker walker-elementor
Graphist – Graphs & Charts for Elementor graphist-elementor
Greenhouse Job Board greenhouse-job-board
GS Portfolio for Envato gs-envato-portfolio
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns essential-blocks
Gutenverse Form – Contact Form Builder, Block Form & Booking Form gutenverse-form
Happy Addons for Elementor happy-elementor-addons
HAPPY – Helpdesk Support Ticket System happy-helpdesk-support-ticket-system
Health Check & Troubleshooting health-check
Heateor Social Login WordPress heateor-social-login
Hide Plugins hide-plugins
Highlight and Share – Unobtrusive and Lightweight Content Sharing highlight-and-share
History Timeline for Biography, Company History & Event Timeline timeline-awesome
HomeFix Elementor Portfolio homefix-ele-portfolio
Hotel Booking nd-booking
Hotel Listings hotel-listing
HR Management Lite hr-management-lite
HTML Forms – Simple WordPress Forms Plugin html-forms
HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player html5-audio-player
Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN hummingbird-performance
HUSKY – Products Filter Professional for WooCommerce woocommerce-products-filter
IF AS Shortcode if-as-shortcode
Image Caption Hover Pro image-caption-hover-pro
Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite
Import into Easy Property Listings easy-property-listings-xml-csv-import
Inboxify Sign Up Form inboxify-sign-up-form
iNext Woo Pincode Checker inext-woo-pincode-checker
Infility Global infility-global
Innovs WPBakery Visual Composer WHMCS Elements void-visual-whmcs-element
Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms cf7-hubspot
Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free funnelforms-free
Interactive Content – H5P h5p
Invelity SPS connect invelity-sps-connect
iRecco Core irecco-core
JetBlog jet-blog
JetElements jet-elements
JetEngine jet-engine
JetFormBuilder — Dynamic Blocks Form Builder jetformbuilder
JetPopup jet-popup
JetSearch jet-search
JetTabs jet-tabs
Job Postings job-postings
JobBank - WordPress Job manager plugin jobbank
Knowledge Base documentation & wiki plugin – BasePress Docs basepress
LA-Studio Element Kit for Elementor lastudio-element-kit
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses learnpress
Link Library link-library
Listdom: AI-powered Business Directory with Classifieds Ads Listings listdom
ListingPro Reviews listingpro-reviews
Live Composer – Free WordPress Website Builder live-composer-page-builder
Live Shopping & Shoppable Videos For WooCommerce live-shopping-video-streams
Livemesh Addons for Beaver Builder addons-for-beaver-builder
Locatoraid Store Locator locatoraid
Logo Slider , Logo Carousel , Logo showcase , Client Logo tc-logo-slider
Lucky Wheel for WooCommerce – Spin a Sale woo-lucky-wheel
MailerLite – WooCommerce integration woo-mailerlite
Manago AI & Leadoo AI salesmanago
MapSVG – Vector maps, Image maps, Google Maps mapsvg-lite-interactive-vector-maps
MAS Videos masvideos
Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits master-addons
Maximum Products per User for WooCommerce maximum-products-per-user-for-woocommerce
Meks Quick Plugin Disabler meks-quick-plugin-disabler
Membership For WooCommerce membership-for-woocommerce
Membership Plugin – Kadence Memberships restrict-content
Menu In Post menu-in-post
Mergado Pack mergado-marketing-pack
Mobile builder mobile-builder
ModelTheme Addons for WPBakery and Elementor modeltheme-addons-for-wpbakery
Modula Image Gallery – Photo Grid & Video Gallery modula-best-grid-gallery
Multi-Step Checkout for WooCommerce wp-multi-step-checkout
MX Time Zone Clocks mx-time-zone-clocks
My auctions allegro my-auctions-allegro-free-edition
My Calendar – Accessible Event Manager my-calendar
MyBookTable Bookstore by Stormhill Media mybooktable
MyD Delivery myd-delivery
Netgsm netgsm
Newsletter – Send awesome emails from WordPress newsletter
Newsletters newsletters-lite
NEX-Forms – Ultimate Forms Plugin for WordPress nex-forms-express-wp-form-builder
Ninja Forms – The Contact Form Builder That Grows With You ninja-forms
Ninja Tables – Easy Data Table Builder ninja-tables
Noindex by Path noindex-by-path
OneSignal – Web Push Notifications onesignal-free-web-push-notifications
OpenHook thesis-openhook
OpenID Connect Generic Client daggerhart-openid-connect-generic
Order Cancellation & Returns for WooCommerce wc-order-cancellation-return
Orders Chat for WooCommerce orders-chat-for-woocommerce
Overstock Affiliate Links overstock-affiliate-links
Owl Carousel WP owl-carousel-wp
Page Title Splitter page-title-splitter
Payment Gateway Authorize.Net CIM for WooCommerce authnet-cim-for-woo
PhastPress phastpress
Photo Block – A Modern Image Block With Lightbox and Caption Support photo-block
Photo Gallery by 10Web – Mobile-Friendly Image Gallery photo-gallery
Photo Gallery – GT3 Image Gallery & Gutenberg Block Gallery gt3-photo-video-gallery
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery nextgen-gallery
Pinpoll pinpoll
Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing woocommerce-google-adwords-conversion-tracking-tag
PixelYourSite – Your smart PIXEL (TAG) & API Manager pixelyoursite
Plugin Optimizer – Speed Up Your WordPress Like Never Before plugin-optimizer
Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred mycred
Popping Sidebars and Widgets Light popping-sidebars-and-widgets-light
Poptics – Popup Builder, Email Opt-ins, Exit-Intent & WooCommerce Popups Sales poptics
Popup Box – Create Countdown, Coupon, Video, Contact Form Popups ays-popup-box
Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers popup-builder-block
Portfolio Gallery – Responsive Image Gallery gallery-portfolio
Post Grid post-grid
Post Grid Gutenberg Blocks – PostX ultimate-post
Post Snippets – Custom WordPress Code Snippets Customizer post-snippets
Postie postie
Premium Addons for Elementor – Powerful Elementor Templates & Widgets premium-addons-for-elementor
Pretty Google Calendar pretty-google-calendar
Pretty Search Permalinks wp-seo-search
Prime Slider Addons for Elementor bdthemes-prime-slider-lite
PRIMER by chloédigital primer-by-chloedigital
Print Anywhere & Create PDFs of Order Receipts, Invoices, Labels & More. print-google-cloud-print-gcp-woocommerce
Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes
Product Delivery Date for WooCommerce – Lite product-delivery-date-for-woocommerce-lite
Product Loops for WooCommerce product-loops
Product Table for WooCommerce woo-product-table
Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker wedevs-project-manager
Protect WP Admin protect-wp-admin
QuadLayers TikTok Feed wp-tiktok-feed
Questionar – FAQ Accordions for Elementor questionar-elementor
Quiz Maker by AYS quiz-maker
Quiz Maker, Poll Maker & Survey Maker by Opinion Stage social-polls-by-opinionstage
Quran Gateway quran-gateway
Read More & Accordion expand-maker
Real 3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder real3d-flipbook-lite
Realbig For WordPress realbig-media
Recent Posts From Each Category recent-posts-from-each-category
Redirection for Contact Form 7 wpcf7-redirect
Registration & Login with Mobile Phone Number for WooCommerce registration-login-with-mobile-phone-number
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login custom-registration-form-builder-with-submission-manager
Relevanssi Premium relevanssi-premium
Relevanssi – A Better Search relevanssi
Rencontre – Dating Site rencontre
Request a Quote – Quote Forms for Any WordPress Site request-a-quote
RESPONSIVE AND SWIPE SLIDER! responsive-and-swipe-slider
Responsive Block Control – Hide blocks based on display width responsive-block-control
Responsive Posts Carousel WordPress Plugin responsive-posts-carousel-pro
RestroPress – Online Food Ordering System restropress
Reuters Direct reuters-direct
Review Disclaimer review-disclaimer
Robots.txt rewrite robotstxt-rewrite
Sailing sailing
Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories post-expirator
Scroll rss excerpt scroll-rss-excerpt
SearchAzon - WooCommerce Amazon Affiliates Auto Search Plugin searchazon
Sell Downloads sell-downloads
Semrush Content Toolkit semrush-contentshake
SensitiveTagCloud sensitive-tag-cloud
SEO Slider seo-slider
Serial Codes Generator and Validator with WooCommerce Support serial-codes-generator-and-validator
Series series
Seriously Simple Podcasting seriously-simple-podcasting
Sermon Manager sermon-manager-for-wordpress
Share, Print and PDF Products for WooCommerce share-print-pdf-woocommerce
Shortcodes and extra features for Phlox theme auxin-elements
Signature Add-On for Gravity Forms gravity-signature-forms-add-on
Simple Archive Generator simple-archive-generator
Simple Calendar – Google Calendar Plugin google-calendar-events
Simple File List simple-file-list
Simple Folio simple-folio
Simple Keyword to Link simple-keyword-to-link
Simple Like Page – Fast & Privacy-Friendly Page Embeds simple-facebook-plugin
Simple Link Directory – AI Powered simple-link-directory
Simple XML Sitemap simple-xml-sitemap
SiteLock Security – WP Hardening, Login Security & Malware Scans sitelock
Sitewide Notice WP sitewide-notice-wp
Slider Templates slider-templates
SlimStat Analytics wp-slimstat
Sliper – Full-screen Slider for Elementor sliper-elementor
Smart Auto Upload Images – Import External Images smart-auto-upload-images
Sober sober
Social Profilr social-profilr-display-social-network-profile
Sticky Notes for WP Dashboard wb-sticky-notes
Stratum Widgets for Elementor stratum
Strong Testimonials strong-testimonials
Subscribe to Unlock Lite – Opt In Content Locker Plugin for WordPress subscribe-to-unlock-lite
Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers sunshine-photo-cart
Super Logos Showcase for WordPress superlogoshowcase-wp
SureForms – Drag & Drop Contact Form & Form Builder, Payment Form, Survey, Quiz & Calculator sureforms
Sweet Energy Efficiency sweet-energy-efficiency
Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent tablesome
Tainacan tainacan
Tasty Recipes Lite tasty-recipes-lite
teachPress teachpress
Team Showcase – Responsive Team Members Grid, Slider & Carousel Plugin team-showcase
Team – Team Members Showcase Plugin tlp-team
TechLife - Mobile, Tech & Electronics Repair Shop techlife-cpt
Terms descriptions terms-descriptions
Testimonial – Testimonial Slider, Reviews Slider, Testimonial By AI testimonial
The Moneytizer the-moneytizer
Theater for WordPress theatre
Themebeez Toolkit themebeez-toolkit
Themify Portfolio Post themify-portfolio-post
ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin thirstyaffiliates
Tooltips for WordPress wordpress-tooltips
Trash Duplicate and 301 Redirect trash-duplicate-and-301-redirect
TrueBooker – Appointment Booking and Scheduler System truebooker-appointment-booking
TS Poll – Survey, Versus Poll, Image Poll, Video Poll poll-wp
Tutor LMS – eLearning and online course solution tutor
Twitch Player ttv-easy-embed-player
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin ultimate-member
Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor ultimate-store-kit
UnGrabber ungrabber
Universal Video Player - WordPress Plugin universal-video-player
User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration wp-user-frontend
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder user-registration
User Specific Content user-specific-content
User Submitted Posts – Enable Users to Submit Posts from the Front End user-submitted-posts
UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds userfeedback-lite
UserPro - Community and User Profile WordPress Plugin userpro
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP userswp
UseStrict's Calendly Embedder cal-embedder-lite
Valenti Engine valenti-engine
Varnish/Nginx Proxy Caching vcaching
Vimeotheque – Vimeo WordPress Plugin & Video Gallery codeflavors-vimeo-video-post-lite
Virusdie | One-click website security virusdie
Visitor Stats Widget visitor-stats-widget
VK Google Job Posting Manager vk-google-job-posting-manager
VPSUForm – Drag & Drop Contact Form Builder with Email Automation v-form
Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments wallet-system-for-woocommerce
Watcher – Flexible Video Player for Elementor watcher-elementor
Watu Quiz watu
Wbcom Designs – Private Community for BuddyPress lock-my-bp
WC Builder – WooCommerce Page Builder for WPBakery wc-builder
WCFM Marketplace – Multivendor Marketplace for WooCommerce wc-multivendor-marketplace
WCFM – Frontend Manager for WooCommerce wc-frontend-manager
Web and WooCommerce Addons for WPBakery Builder vc-addons-by-bit14
Web Directory Free web-directory-free
Web to SugarCRM Lead web-to-sugarcrm-lead
WebMan Amplifier webman-amplifier
Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode coming-soon
WeDesignTech Portfolio wedesigntech-portfolio
WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon
weForms – Easy Drag & Drop Contact Form Builder For WordPress weforms
WH Tweaks wh-tweaks
Widgets for Social Photo Feed social-photo-feed-widget
WING Website Migrator wing-migrator
Wiremo – Product Reviews for WooCommerce woo-reviews-by-wiremo
Wishlist for WooCommerce: Multi Wishlists Per Customer wish-list-for-woocommerce
WishSuite – Wishlist for WooCommerce wishsuite
WooCommerce woocommerce
WooCommerce Parcelas woocommerce-parcelas
WordPress & WooCommerce Scraper Plugin, Import Data from Any WebSite. wp_scraper
Wordpress Movies Bulk Importer movies-importer
WordPress User Extra Fields wp-user-extra-fields
WP Advanced PDF wp-advanced-pdf
WP App Bar wp-app-bar
WP Attachments wp-attachments
WP Custom Admin Interface wp-custom-admin-interface
WP DB Booster wp-db-booster
WP Document Revisions wp-document-revisions
WP eBay Product Feeds ebay-feeds-for-wordpress
WP Export Categories & Taxonomies wp-export-categories-taxonomies
WP Gmail SMTP wp-gmail-smtp
WP Hallo Welt wp-hallo-welt
WP JobHunt wp-jobhunt
WP Post Signature wp-post-signature
WP Recipe Maker wp-recipe-maker
WP Social Ninja – Embed Social Feeds, User Reviews & Chat Widgets wp-social-reviews
WP Telegram Widget and Join Link wptelegram-widget
Wp Text Slider Widget wp-text-slider-widget
WP Time Slots Booking Form wp-time-slots-booking-form
WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel wp-ultimate-csv-importer
WP Visitor Statistics (Real Time Traffic) wp-stats-manager
WP-BusinessDirectory – Business directory plugin for WordPress wp-businessdirectory
WP-CalDav2ICS wp-caldav2ics
WP-EasyArchives wp-easyarchives
WP-ShowHide wp-showhide
WPBulky – WordPress Bulk Edit Post Types wpbulky-wp-bulk-edit-post-types
WPCal.io – Easy Meeting Scheduler wpcal
WPCOM Member wpcom-member
WpStream – Live Streaming, Video on Demand, Pay Per View wpstream
WPvivid — Backup, Migration & Staging wpvivid-backuprestore
XStore Core et-core-plugin
Yaad Sarig Payment Gateway For WC yaad-sarig-payment-gateway-for-wc
Yada Wiki yada-wiki
YITH Slider for page builders yith-slider-for-page-builders
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress youzify
Zephyr Project Manager zephyr-project-manager
Zoho ZeptoMail transmail
پلاگین پرداخت دلخواه pardakht-delkhah


WordPress Themes with Reported Vulnerabilities Last Week

Software Name Software Slug
Airtifact - Portfolio Creative WordPress Theme airtifact
Aora - Home & Lifestyle Elementor WooCommerce Theme aora
Arcane - The Gaming Community Theme arcane
Arlo | Portfolio WordPress Theme arlo
Backpack Traveler - Modern Travel Blog WordPress Theme backpacktraveler
Bailly - Elementor WooCommerce WordPress Theme bailly
Besa - Elementor Marketplace WooCommerce Theme besa
Bfres - Organic Food WooCommerce Theme bfres
bookory bookory
Calafate - Portfolio & WooCommerce Creative WordPress Theme calafate
Cinerama - A WordPress Theme for Movie Studios and Filmmakers cinerama
Cocco - Kids Store and Baby Shop WordPress Theme cocco
Consulting consulting
Curly - A Stylish WordPress Theme for Hairdressers and Hair Salons curly
Dating DA10
Dekoro - Furniture Store WooCommerce Theme dekoro
DiveIt - Scuba Diving School Travel WordPress Theme diveit
Diza - Pharmacy Store Elementor WooCommerce Theme diza
Dolcino - Pastry and Cake Shop WordPress Theme dolcino
Don Peppe - Pizza and Fast Food WordPress Theme donpeppe
ekommart - All-in-one eCommerce WordPress Theme ekommart
Eldon - Artist Portfolio WordPress Theme eldon
Fana - Fashion Shop WordPress Theme fana
Fashion - WooCommerce Responsive WordPress Theme fashion2
Fiorello - Florist and Flower Shop WordPress Theme fiorello
FiveStar - Hotel Booking WordPress Theme fivestar
Fleur - Wedding WordPress Theme fluer
Frappé - Smoothie, Juice Bar and Organic Food WordPress Theme frappe
FreeAgent - Freelance Marketplace Elementor WordPress Theme freeagent
Freshio - Organic & Food Store WordPress Theme freshio
Gecko 6.0 - Responsive Shopify Theme - RTL support gecko
Genemy - Creative Minimal Landing Page Builder for Digital Startup Design Studio Agency in Marketing genemy
Grand Blog WordPress grandblog
GreenMart – Organic & Food WooCommerce WordPress Theme greenmart
Hara - Beauty and Cosmetics Shop WooCommerce Theme hara
Hobo | Travel Lifestyle Blog WordPress Theme hobo
Holmes - Digital Agency WordPress Theme holmes
Hope | Non-Profit, Charity & Donations WordPress Theme + RTL charity-is-hope
Hyori - Organic Food WooCommerce Theme hyori
Indoor Plants | Houseplants Store & Gardening WordPress Theme indoor-plants
Innovio - Multipurpose Landing Page WordPress Theme innovio
Isabella - Digital Marketing Agency WordPress Theme issabella
Justicia - Lawyer WordPress Theme justicia
Lekker - Portfolio WordPress Theme lekker
Lindo - Jewelry Store WooCommerce Theme lindo
Malta - Windsurfing, Kitesurfing & Wakesurfing Center WordPress Theme malta
Maxshop - Responsive & Multi-Purpose eCommerce HTML Template sw_maxshop
Medical Equipment eCommerce WordPress Theme medicalequipment
Melos melos
Minamaze minamaze
Modern Housewife modernhousewife
MoveMe | Moving & Storage Relocation Company WordPress Theme moveme
Muji | Beauty Shop & Spa Salon WordPress Theme muji
Nika - Medical Elementor WooCommerce Theme nika
Overton - Creative WordPress Theme for Agencies and Freelancers overton
Overworld - eSports and Gaming WordPress Theme overworld
PartyMaker | Event Planner & Wedding Agency WordPress Theme partymaker
PawFriends - Pet Shop and Veterinary WordPress Theme pawfriends
Pearson Specter | Counsellor, Advocate Law WordPress Theme pearsonspecter
Personal Portfolio Resume Theme | Kerge kerge
Pets Land | Domestic Animals Shop & Veterinary WP petsland
PhotoMe | Photography Portfolio WordPress photome
Pippo - Kids Toys Store WooCommerce WordPress Theme pippo
Piqes | Creative Startup & Agency WordPress Theme piqes
Prider | LGBT & Gay Rights Festival WordPress Theme + Bar prider
Prowess - Fitness and Gym WordPress Theme prowess
Puca - Optimized Mobile WooCommerce Theme puca
Rashy - Sport Store WooCommerce Theme rashy
Roam - Travel & Tourism WordPress Theme roam
Shuttle shuttle
Snow Mountain | Ski Resort & Snowboard School WordPress Theme snowmountain
Sound | Musical Instruments Online Store WordPress Theme musicplace
Struktur - Creative Agency WordPress Theme struktur
Sweet Jane - Delightful Cake Shop Theme sweetjane
Tails | Veterinary Clinic, Pet Care & Animal WordPress Theme + Shop tails
TanTum | Car, Scooter, Boat & Bike Rental Services WordPress Theme tantum
Tornados | Basketball NBA Team WordPress Theme tornados
Triply - Tour Booking WordPress Theme triply
Töbel - Modern Furniture Store WordPress Theme tobel
uReach | Immigration & Relocation Consulting WordPress Theme ureach
Urna - All-in-one WooCommerce WordPress Theme urna
Vango - Elementor WooCommerce WordPress Theme vango
Verdure - Organic Tea Shop WordPress Theme verdure
VidMov - Video WordPress Theme vidmov
Vireo vireo
Wanderland - Travel Blog wanderland
Weedles | Virtual Reality Landing Page & Store WordPress Theme weedles
Wilmër - Construction WordPress Theme wilmer
Yolox | Business & Startup Blog WordPress Theme yolox
Zota - Elementor Multi-Purpose WooCommerce Theme zota


Vulnerability Details

Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.

CVSS Rating
9.8 (Critical)
Patch Status
Patched
Published
Dec 18, 2025
Affected Software
Agency Toolkit [agency-toolkit]
CVSS Rating
9.8 (Critical)
Patch Status
Patched
Published
Dec 19, 2025
Affected Software
File Uploader for WooCommerce [file-uploader-for-woocommerce]
CVSS Rating
9.8 (Critical)
Patch Status
Unpatched
Published
Dec 19, 2025
Affected Software
Flex Store Users [flex-store-user]
Researcher
CVSS Rating
9.8 (Critical)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Researcher
CVSS Rating
9.8 (Critical)
Patch Status
Unpatched
Published
Dec 26, 2025
Affected Software
Mobile builder [mobile-builder]
CVSS Rating
9.8 (Critical)
Patch Status
Patched
Published
Dec 22, 2025
Affected Software
PhastPress [phastpress]
Researcher
CVSS Rating
9.8 (Critical)
Patch Status
Patched
Published
Dec 23, 2025
Affected Software
CVSS Rating
9.1 (Critical)
Patch Status
Unpatched
Published
Dec 23, 2025
Affected Software
E-xact | Hosted Payment | [e-xact-hosted-payment]
CVSS Rating
8.8 (High)
Patch Status
Patched
Published
Dec 17, 2025
Affected Software
Demo Importer Plus [demo-importer-plus]
Researcher
CVSS Rating
8.8 (High)
Patch Status
Unpatched
Published
Dec 25, 2025
Affected Software
IF AS Shortcode [if-as-shortcode]
CVSS Rating
8.8 (High)
Patch Status
Patched
Published
Dec 24, 2025
Affected Software
MapSVG – Vector maps, Image maps, Google Maps [mapsvg-lite-interactive-vector-maps]
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 30, 2025
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 30, 2025
Affected Software
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 26, 2025
Affected Software
CedCommerce Integration for Good Market [ced-good-market-integration]
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 25, 2025
Affected Software
CookieHint WP [cookiehint-wp]
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 30, 2025
Affected Software
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 31, 2025
Researcher
CVSS Rating
8.1 (High)
Patch Status
Patched
Published
Dec 24, 2025
Affected Software
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Jan 1, 2026
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Jan 1, 2026
CVSS Rating
8.1 (High)
Patch Status
Patched
Published
Dec 17, 2025
Affected Software
Frontend File Manager Plugin [nmedia-user-file-uploader]
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Jan 1, 2026
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 31, 2025
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Jan 1, 2026
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 30, 2025
Affected Software
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 31, 2025
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 30, 2025
Affected Software
iRecco Core [irecco-core]
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Jan 1, 2026
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 30, 2025
Affected Software
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 30, 2025
Affected Software
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 31, 2025
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 30, 2025
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Modern Housewife [modernhousewife]
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 31, 2025
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 31, 2025
Researcher
CVSS Rating
8.1 (High)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
Newsletters [newsletters-lite]
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 30, 2025
Affected Software
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 31, 2025
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 31, 2025
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 31, 2025
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 30, 2025
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 31, 2025
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 31, 2025
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 30, 2025
Affected Software
Researcher
CVSS Rating
8.1 (High)
Patch Status
Patched
Published
Dec 20, 2025
Affected Software
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 31, 2025
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 31, 2025
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 31, 2025
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 30, 2025
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 31, 2025
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 30, 2025
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 31, 2025
CVSS Rating
8.1 (High)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
WPCOM Member [wpcom-member]
Researcher
CVSS Rating
8.1 (High)
Patch Status
Unpatched
Published
Dec 31, 2025
Researcher
CVSS Rating
7.6 (High)
Patch Status
Unpatched
Published
Dec 20, 2025
Affected Software
WP JobHunt [wp-jobhunt]
Researcher
CVSS Rating
7.5 (High)
Patch Status
Unpatched
Published
Jan 1, 2026
CVSS Rating
7.5 (High)
Patch Status
Unpatched
Published
Dec 20, 2025
CVSS Rating
7.5 (High)
Patch Status
Patched
Published
Dec 15, 2025
CVSS Rating
7.5 (High)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
CVSS Rating
7.5 (High)
Patch Status
Patched
Published
Jan 1, 2026
Affected Software
bookory [bookory]
CVSS Rating
7.5 (High)
Patch Status
Unpatched
Published
Dec 30, 2025
Affected Software
Dental Care CPT [dentalcare-cpt]
Researcher
CVSS Rating
7.5 (High)
Patch Status
Patched
Published
Dec 23, 2025
CVSS Rating
7.5 (High)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Download Media Library [download-media-library]
Researcher
CVSS Rating
7.5 (High)
Patch Status
Patched
Published
Dec 15, 2025
CVSS Rating
7.5 (High)
Patch Status
Patched
Published
Dec 28, 2025
CVSS Rating
7.5 (High)
Patch Status
Patched
Published
Dec 15, 2025
CVSS Rating
7.5 (High)
Patch Status
Unpatched
Published
Jan 1, 2026
CVSS Rating
7.5 (High)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Infility Global [infility-global]
CVSS Rating
7.5 (High)
Patch Status
Unpatched
Published
Dec 30, 2025
Affected Software
MAS Videos [masvideos]
Researcher
CVSS Rating
7.5 (High)
Patch Status
Patched
Published
Dec 23, 2025
CVSS Rating
7.5 (High)
Patch Status
Unpatched
Published
Dec 20, 2025
CVSS Rating
7.5 (High)
Patch Status
Unpatched
Published
Dec 25, 2025
Affected Software
Responsive Posts Carousel WordPress Plugin [responsive-posts-carousel-pro]
Researcher
CVSS Rating
7.5 (High)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Sailing [sailing]
CVSS Rating
7.5 (High)
Patch Status
Patched
Published
Dec 24, 2025
Researcher
CVSS Rating
7.5 (High)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
CVSS Rating
7.5 (High)
Patch Status
Unpatched
Published
Dec 30, 2025
Affected Software
Researcher
CVSS Rating
7.5 (High)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Terms descriptions [terms-descriptions]
CVSS Rating
7.5 (High)
Patch Status
Unpatched
Published
Jan 1, 2026
CVSS Rating
7.5 (High)
Patch Status
Patched
Published
Dec 15, 2025
CVSS Rating
7.5 (High)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
7.5 (High)
Patch Status
Patched
Published
Dec 15, 2025
CVSS Rating
7.5 (High)
Patch Status
Patched
Published
Dec 25, 2025
CVSS Rating
7.5 (High)
Patch Status
Patched
Published
Dec 27, 2025
CVSS Rating
7.2 (High)
Patch Status
Patched
Published
Dec 29, 2025
Affected Software
Researcher
CVSS Rating
7.2 (High)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
CVSS Rating
7.2 (High)
Patch Status
Patched
Published
Dec 30, 2025
Affected Software
CodeColorer [codecolorer]
Researcher
CVSS Rating
7.2 (High)
Patch Status
Patched
Published
Dec 20, 2025
Affected Software
ELEX WordPress HelpDesk & Customer Ticketing System [elex-helpdesk-customer-support-ticket-system]
CVSS Rating
7.2 (High)
Patch Status
Unpatched
Published
Dec 29, 2025
Affected Software
Flaming Password Reset [flaming-password-reset]
Researcher
CVSS Rating
7.2 (High)
Patch Status
Patched
Published
Jan 2, 2026
Affected Software
CVSS Rating
7.2 (High)
Patch Status
Patched
Published
Dec 15, 2025
CVSS Rating
7.2 (High)
Patch Status
Patched
Published
Jan 2, 2026
Affected Software
CVSS Rating
7.2 (High)
Patch Status
Patched
Published
Dec 18, 2025
Affected Software
SlimStat Analytics [wp-slimstat]
Researcher
CVSS Rating
6.6 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
CVSS Rating
6.5 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
BM Content Builder [bm-builder]
Researcher
CVSS Rating
6.5 (Medium)
Patch Status
Patched
Published
Dec 26, 2025
Affected Software
Brands for WooCommerce [brands-for-woocommerce]
Researcher
CVSS Rating
6.5 (Medium)
Patch Status
Unpatched
Published
Dec 22, 2025
Affected Software
BWL Pro Voting Manager [bwl-pro-voting-manager]
Researcher
CVSS Rating
6.5 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Fancy Product Designer [fancy-product-designer]
CVSS Rating
6.5 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
Affected Software
CVSS Rating
6.5 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Researcher
CVSS Rating
6.5 (Medium)
Patch Status
Patched
Published
Dec 17, 2025
Affected Software
Relevanssi Premium [relevanssi-premium]
CVSS Rating
6.5 (Medium)
Patch Status
Patched
Published
Dec 23, 2025
Affected Software
WPBulky – WordPress Bulk Edit Post Types [wpbulky-wp-bulk-edit-post-types]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 20, 2025
Affected Software
6Storage Rentals [6storage-rentals]
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
Affected Software
Academy LMS [academy]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Add Featured Image Custom Link [custom-url-to-featured-image]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
AdWords Conversion Tracking Code [adwords-conversion-tracking-code]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Audiomack [audiomack]
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 18, 2025
Affected Software
BA Book Everything [ba-book-everything]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 29, 2025
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 27, 2025
Affected Software
Bold Timeline Lite [bold-timeline-lite]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Bootstrap Modals [bootstrap-modals]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
BuddyPress Activity Shortcode [bp-activity-shortcode]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 22, 2025
Affected Software
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 22, 2025
Affected Software
BWL Pro Voting Manager [bwl-pro-voting-manager]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 22, 2025
Affected Software
Calendar [calendar]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 30, 2025
Affected Software
Carousel Horizontal Posts Content Slider [carousel-horizontal-posts-content-slider]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
CC Child Pages [cc-child-pages]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 18, 2025
Affected Software
Colibri Page Builder [colibri-page-builder]
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
Affected Software
Combo Offers WooCommerce [woo-combo-offers]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Consulting [consulting]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Content Fetcher [content-fetcher]
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 26, 2025
Affected Software
Cool Tag Cloud [cool-tag-cloud]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
Curator.io [curatorio]
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Custom Background Changer [custom-background-changer]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 24, 2025
Affected Software
Custom Field Template [custom-field-template]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 17, 2025
Affected Software
DesignThemes Core [designthemes-core]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 17, 2025
Affected Software
DesignThemes Portfolio Addon [designthemes-portfolio-addon]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Effect Maker [effect-maker]
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Extra Shortcodes [extra-shortcodes]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 28, 2025
Affected Software
FlippingBook [flippingbook]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 22, 2025
Affected Software
Happy Addons for Elementor [happy-elementor-addons]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
Affected Software
JetElements [jet-elements]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
Affected Software
JetSearch [jet-search]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
Affected Software
JetTabs [jet-tabs]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 22, 2025
Affected Software
Job Postings [job-postings]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 24, 2025
Affected Software
Link Library [link-library]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Livemesh Addons for Beaver Builder [addons-for-beaver-builder]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
Maximum Products per User for WooCommerce [maximum-products-per-user-for-woocommerce]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Melos [melos]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 30, 2025
Affected Software
Menu In Post [menu-in-post]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Minamaze [minamaze]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 17, 2025
Affected Software
ModelTheme Addons for WPBakery and Elementor [modeltheme-addons-for-wpbakery]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
MX Time Zone Clocks [mx-time-zone-clocks]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 28, 2025
Affected Software
Newsletters [newsletters-lite]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 17, 2025
Affected Software
OpenID Connect Generic Client [daggerhart-openid-connect-generic]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 22, 2025
Affected Software
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Page Title Splitter [page-title-splitter]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 21, 2025
Affected Software
Post Grid [post-grid]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
WP Post Signature [wp-post-signature]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
Postie [postie]
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 23, 2025
Affected Software
Responsive Posts Carousel WordPress Plugin [responsive-posts-carousel-pro]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 27, 2025
Affected Software
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
SEO Slider [seo-slider]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Series [series]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 21, 2025
Affected Software
Seriously Simple Podcasting [seriously-simple-podcasting]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Sermon Manager [sermon-manager-for-wordpress]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Shuttle [shuttle]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
Affected Software
teachPress [teachpress]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 25, 2025
Affected Software
Wp Text Slider Widget [wp-text-slider-widget]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
The Moneytizer [the-moneytizer]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Themify Portfolio Post [themify-portfolio-post]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Tooltips for WordPress [wordpress-tooltips]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
User Specific Content [user-specific-content]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
UseStrict's Calendly Embedder [cal-embedder-lite]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Valenti Engine [valenti-engine]
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
VK Google Job Posting Manager [vk-google-job-posting-manager]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 27, 2025
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 28, 2025
Affected Software
Web Directory Free [web-directory-free]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
WebMan Amplifier [webman-amplifier]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
Affected Software
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 20, 2025
Affected Software
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 16, 2025
Affected Software
WP Recipe Maker [wp-recipe-maker]
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
WP-ShowHide [wp-showhide]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 17, 2025
Affected Software
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
Affected Software
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
Affected Software
XStore Core [et-core-plugin]
CVSS Rating
6.4 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
Affected Software
Yada Wiki [yada-wiki]
Researcher
CVSS Rating
6.4 (Medium)
Patch Status
Unpatched
Published
Dec 22, 2025
Affected Software
Embeds for YouTube [youtube-embed]
Researcher
CVSS Rating
6.1 (Medium)
Patch Status
Unpatched
Published
Dec 26, 2025
Affected Software
Advanced Custom CSS [advanced-custom-css]
Researcher
CVSS Rating
6.1 (Medium)
Patch Status
Unpatched
Published
Dec 29, 2025
Affected Software
WP App Bar [wp-app-bar]
Researcher
CVSS Rating
6.1 (Medium)
Patch Status
Unpatched
Published
Dec 19, 2025
Affected Software
Attachments Handler [attachments-handler]
Researcher
CVSS Rating
6.1 (Medium)
Patch Status
Unpatched
Published
Dec 25, 2025
Affected Software
Content Grid Slider [content-grid-slider]
Researcher
CVSS Rating
6.1 (Medium)
Patch Status
Unpatched
Published
Dec 30, 2025
Affected Software
e-shopsカート2 [e-shops-cart2]
Researcher
CVSS Rating
6.1 (Medium)
Patch Status
Unpatched
Published
Dec 30, 2025
Affected Software
Researcher
CVSS Rating
6.1 (Medium)
Patch Status
Patched
Published
Dec 29, 2025
Affected Software
GLS Shipping for WooCommerce [gls-shipping-for-woocommerce]
Researcher
CVSS Rating
6.1 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Hotel Listings [hotel-listing]
CVSS Rating
6.1 (Medium)
Patch Status
Unpatched
Published
Dec 26, 2025
Affected Software
Invelity SPS connect [invelity-sps-connect]
Researcher
CVSS Rating
6.1 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
CVSS Rating
6.1 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
ListingPro Reviews [listingpro-reviews]
CVSS Rating
6.1 (Medium)
Patch Status
Patched
Published
Dec 29, 2025
Affected Software
Netgsm [netgsm]
Researcher
CVSS Rating
6.1 (Medium)
Patch Status
Unpatched
Published
Dec 19, 2025
Affected Software
Overstock Affiliate Links [overstock-affiliate-links]
CVSS Rating
6.1 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
6.1 (Medium)
Patch Status
Unpatched
Published
Dec 30, 2025
Affected Software
Pinpoll [pinpoll]
Researcher
CVSS Rating
6.1 (Medium)
Patch Status
Unpatched
Published
Dec 29, 2025
Affected Software
PRIMER by chloédigital [primer-by-chloedigital]
Researcher
CVSS Rating
6.1 (Medium)
Patch Status
Patched
Published
Dec 20, 2025
Affected Software
Product Table for WooCommerce [woo-product-table]
CVSS Rating
6.1 (Medium)
Patch Status
Unpatched
Published
Dec 29, 2025
Affected Software
Scroll rss excerpt [scroll-rss-excerpt]
Researcher
CVSS Rating
6.1 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Super Logos Showcase for WordPress [superlogoshowcase-wp]
Researcher
CVSS Rating
6.1 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
CVSS Rating
6.1 (Medium)
Patch Status
Unpatched
Published
Dec 30, 2025
Affected Software
Researcher
CVSS Rating
6.1 (Medium)
Patch Status
Unpatched
Published
Dec 29, 2025
Affected Software
Visitor Stats Widget [visitor-stats-widget]
Researcher
CVSS Rating
6.1 (Medium)
Patch Status
Unpatched
Published
Dec 19, 2025
Affected Software
WP Hallo Welt [wp-hallo-welt]
Researcher
CVSS Rating
6.1 (Medium)
Patch Status
Unpatched
Published
Dec 30, 2025
Affected Software
Researcher
CVSS Rating
5.8 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
CVSS Rating
5.5 (Medium)
Patch Status
Unpatched
Published
Dec 19, 2025
Affected Software
RESPONSIVE AND SWIPE SLIDER! [responsive-and-swipe-slider]
Researcher
CVSS Rating
5.4 (Medium)
Patch Status
Unpatched
Published
Dec 19, 2025
Affected Software
Amazon affiliate lite Plugin [afiliados-de-amazon-lite]
Researcher
CVSS Rating
5.4 (Medium)
Patch Status
Patched
Published
Dec 18, 2025
Affected Software
Image Photo Gallery Final Tiles Grid [final-tiles-grid-gallery-lite]
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 22, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
WP Advanced PDF [wp-advanced-pdf]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Jan 3, 2026
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 29, 2025
Affected Software
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Jan 1, 2026
Affected Software
Aruba HiSpeed Cache [aruba-hispeed-cache]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 24, 2025
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 19, 2025
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 23, 2025
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
Affected Software
Civic Cookie Control [civic-cookie-control-8]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 17, 2025
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 24, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 26, 2025
Affected Software
CubeWP Framework [cubewp-framework]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 25, 2025
Affected Software
Custom Related Posts [custom-related-posts]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 18, 2025
Affected Software
DesignThemes LMS Addon [designthemes-lms-addon]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 18, 2025
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Document Library Lite [document-library-lite]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Dokan Pro [dokan-pro]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 21, 2025
Affected Software
EInvoice App Malaysia [einvoiceapp-malaysia]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
WP Export Categories & Taxonomies [wp-export-categories-taxonomies]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 19, 2025
Affected Software
F70 Lead Document Download [f70-lead-document-download]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Fancy Product Designer [fancy-product-designer]
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 15, 2025
Affected Software
FAPI Member [fapi-member]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Featured Image Generator [featured-image-generator]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Jan 2, 2026
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Flowbox [flowbox]
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 25, 2025
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 22, 2025
Affected Software
FV Simpler SEO [fv-all-in-one-seo-pack]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Efí Bank [woo-gerencianet-official]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 18, 2025
Affected Software
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
GS Portfolio for Envato [gs-envato-portfolio]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 28, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 23, 2025
Affected Software
HAPPY – Helpdesk Support Ticket System [happy-helpdesk-support-ticket-system]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 18, 2025
Affected Software
HomeFix Elementor Portfolio [homefix-ele-portfolio]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Hotel Booking [nd-booking]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 26, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 24, 2025
Affected Software
Membership For WooCommerce [membership-for-woocommerce]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
MyD Delivery [myd-delivery]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
OneSignal – Web Push Notifications [onesignal-free-web-push-notifications]
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 29, 2025
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 22, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 21, 2025
Affected Software
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 19, 2025
Affected Software
Pretty Google Calendar [pretty-google-calendar]
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 23, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Protect WP Admin [protect-wp-admin]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Jan 3, 2026
Affected Software
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
QuadLayers TikTok Feed [wp-tiktok-feed]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Realbig For WordPress [realbig-media]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
Affected Software
Registration & Login with Mobile Phone Number for WooCommerce [registration-login-with-mobile-phone-number]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Reuters Direct [reuters-direct]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Sailing [sailing]
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 24, 2025
Affected Software
Manago AI & Leadoo AI [salesmanago]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
Affected Software
Sell Downloads [sell-downloads]
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 23, 2025
Affected Software
Share, Print and PDF Products for WooCommerce [share-print-pdf-woocommerce]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Simple Link Directory – AI Powered [simple-link-directory]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Sitewide Notice WP [sitewide-notice-wp]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 29, 2025
Affected Software
Slider Templates [slider-templates]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Sober [sober]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 20, 2025
Affected Software
Tainacan [tainacan]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 22, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 26, 2025
Affected Software
Themebeez Toolkit [themebeez-toolkit]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Trash Duplicate and 301 Redirect [trash-duplicate-and-301-redirect]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 19, 2025
Affected Software
Twitch Player [ttv-easy-embed-player]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
WordPress User Extra Fields [wp-user-extra-fields]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Jan 1, 2026
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 25, 2025
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Jan 3, 2026
Affected Software
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 21, 2025
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 18, 2025
Affected Software
WeDesignTech Portfolio [wedesigntech-portfolio]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 29, 2025
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 23, 2025
Affected Software
Widgets for Social Photo Feed [social-photo-feed-widget]
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 25, 2025
Affected Software
CVSS Rating
5.3 (Medium)
Patch Status
Patched
Published
Dec 29, 2025
CVSS Rating
5.3 (Medium)
Patch Status
Unpatched
Published
Dec 15, 2025
Affected Software
Yaad Sarig Payment Gateway For WC [yaad-sarig-payment-gateway-for-wc]
Researcher
CVSS Rating
4.9 (Medium)
Patch Status
Unpatched
Published
Dec 30, 2025
Affected Software
Appointify [appointify]
CVSS Rating
4.9 (Medium)
Patch Status
Patched
Published
Dec 21, 2025
Affected Software
Captivate Sync [captivatesync-trade]
Researcher
CVSS Rating
4.9 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
CVSS Rating
4.9 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Researcher
CVSS Rating
4.9 (Medium)
Patch Status
Patched
Published
Dec 22, 2025
CVSS Rating
4.9 (Medium)
Patch Status
Patched
Published
Dec 16, 2025
Affected Software
Zephyr Project Manager [zephyr-project-manager]
Researcher
CVSS Rating
4.7 (Medium)
Patch Status
Patched
Published
Dec 25, 2025
Affected Software
Researcher
CVSS Rating
4.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Accessibility Press [ilogic-accessibility]
Researcher
CVSS Rating
4.4 (Medium)
Patch Status
Unpatched
Published
Dec 26, 2025
Affected Software
AM Events [am-events]
CVSS Rating
4.4 (Medium)
Patch Status
Unpatched
Published
Dec 19, 2025
Affected Software
Amazon affiliate lite Plugin [afiliados-de-amazon-lite]
Researcher
CVSS Rating
4.4 (Medium)
Patch Status
Patched
Published
Dec 28, 2025
Affected Software
Astra Widgets [astra-widgets]
Researcher
CVSS Rating
4.4 (Medium)
Patch Status
Patched
Published
Dec 21, 2025
Affected Software
Basticom Framework [basticom-framework]
CVSS Rating
4.4 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
Behance Portfolio Manager [portfolio-manager-powered-by-behance]
CVSS Rating
4.4 (Medium)
Patch Status
Patched
Published
Dec 25, 2025
Affected Software
Category Icon [category-icon]
Researcher
CVSS Rating
4.4 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
4.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Dashboard Beacon [wp-dashboard-beacon]
Researcher
CVSS Rating
4.4 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Document Library Lite [document-library-lite]
Researcher
CVSS Rating
4.4 (Medium)
Patch Status
Unpatched
Published
Dec 21, 2025
Affected Software
Draft Notify [draft-notify]
CVSS Rating
4.4 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
WP eBay Product Feeds [ebay-feeds-for-wordpress]
CVSS Rating
4.4 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
CVSS Rating
4.4 (Medium)
Patch Status
Unpatched
Published
Dec 24, 2025
Affected Software
Gift Hunt [gift-hunt]
Researcher
CVSS Rating
4.4 (Medium)
Patch Status
Unpatched
Published
Dec 21, 2025
Affected Software
Google AdSense for Responsive Design – GARD [google-adsense-for-responsive-design-gard]
CVSS Rating
4.4 (Medium)
Patch Status
Unpatched
Published
Dec 21, 2025
Affected Software
Greenhouse Job Board [greenhouse-job-board]
CVSS Rating
4.4 (Medium)
Patch Status
Unpatched
Published
Dec 26, 2025
Affected Software
Inboxify Sign Up Form [inboxify-sign-up-form]
CVSS Rating
4.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
4.4 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Multi-Step Checkout for WooCommerce [wp-multi-step-checkout]
Researcher
CVSS Rating
4.4 (Medium)
Patch Status
Unpatched
Published
Dec 17, 2025
Affected Software
My auctions allegro [my-auctions-allegro-free-edition]
CVSS Rating
4.4 (Medium)
Patch Status
Patched
Published
Dec 19, 2025
Affected Software
NEX-Forms – Ultimate Forms Plugin for WordPress [nex-forms-express-wp-form-builder]
CVSS Rating
4.4 (Medium)
Patch Status
Unpatched
Published
Jan 1, 2026
Affected Software
Owl Carousel WP [owl-carousel-wp]
Researcher
CVSS Rating
4.4 (Medium)
Patch Status
Unpatched
Published
Dec 26, 2025
Affected Software
Popping Sidebars and Widgets Light [popping-sidebars-and-widgets-light]
CVSS Rating
4.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Cincopa video and media plug-in [video-playlist-and-gallery-plugin]
Researcher
CVSS Rating
4.4 (Medium)
Patch Status
Patched
Published
Dec 22, 2025
Affected Software
Quiz Maker by AYS [quiz-maker]
Researcher
CVSS Rating
4.4 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Researcher
CVSS Rating
4.4 (Medium)
Patch Status
Unpatched
Published
Dec 21, 2025
Affected Software
Review Disclaimer [review-disclaimer]
CVSS Rating
4.4 (Medium)
Patch Status
Patched
Published
Dec 21, 2025
Affected Software
WH Tweaks [wh-tweaks]
CVSS Rating
4.4 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
WooCommerce Parcelas [woocommerce-parcelas]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Accordion Slider Gallery [accordion-slider-gallery]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Admin and Site Enhancements (ASE) [admin-site-enhancements]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 18, 2025
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 18, 2025
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 24, 2025
Affected Software
Advanced Classifieds & Directory Pro [advanced-classifieds-and-directory-pro]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
AI Content Writing Assistant [ai-content-writing-assistant]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
All in One Accessibility [all-in-one-accessibility]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
AnyComment [anycomment]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Appointify [appointify]
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
WP Attachments [wp-attachments]
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 30, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 29, 2025
Affected Software
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
Behance Portfolio Manager [portfolio-manager-powered-by-behance]
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 29, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 26, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 24, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 23, 2025
Affected Software
Chakra test [chakra-test]
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Co-marquage service-public.fr [co-marquage-service-public]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 21, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Contact Form Widget [new-contact-form-widget]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Core Web Vitals & PageSpeed Booster [core-web-vitals-pagespeed-booster]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 27, 2025
Affected Software
Crowdsignal Forms [crowdsignal-forms]
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
WP Custom Admin Interface [wp-custom-admin-interface]
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Custom Post Status [custom-post-status]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Custom Style [custom-style]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
CWW Companion [cww-companion]
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 23, 2025
Affected Software
Dating [DA10]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 18, 2025
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 28, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 25, 2025
Affected Software
WP Document Revisions [wp-document-revisions]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Jan 2, 2026
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Jan 3, 2026
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 17, 2025
Affected Software
Download Manager [download-manager]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 16, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
Easy Upload Files During Checkout [easy-upload-files-during-checkout]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
EasyIndex [easyindex]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 20, 2025
Affected Software
Editorial Calendar [editorial-calendar]
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 21, 2025
Affected Software
Eight Day Week Print Workflow [eight-day-week-print-workflow]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 27, 2025
Affected Software
Event Organiser [event-organiser]
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 18, 2025
Affected Software
Evergreen Post Tweeter [evergreen-post-tweeter]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 25, 2025
Affected Software
Fast User Switching [fast-user-switching]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Jan 1, 2026
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 24, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 29, 2025
Affected Software
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Jan 1, 2026
Affected Software
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 23, 2025
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
WP Gmail SMTP [wp-gmail-smtp]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Google Maps for Elementor [gmaper-elementor]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Gmedia Photo Gallery [grand-media]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 20, 2025
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 26, 2025
Affected Software
Heateor Social Login WordPress [heateor-social-login]
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Hide Plugins [hide-plugins]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Jan 1, 2026
Affected Software
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 28, 2025
Affected Software
HR Management Lite [hr-management-lite]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Image Caption Hover Pro [image-caption-hover-pro]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
Affected Software
Import into Easy Property Listings [easy-property-listings-xml-csv-import]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
iNext Woo Pincode Checker [inext-woo-pincode-checker]
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Jan 2, 2026
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
Affected Software
JetBlog [jet-blog]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
Affected Software
JetEngine [jet-engine]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
Affected Software
JetPopup [jet-popup]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
Affected Software
JetTabs [jet-tabs]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Jan 2, 2026
Affected Software
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 15, 2025
Affected Software
Meks Quick Plugin Disabler [meks-quick-plugin-disabler]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Mergado Pack [mergado-marketing-pack]
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 30, 2025
Affected Software
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 17, 2025
Affected Software
My auctions allegro [my-auctions-allegro-free-edition]
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 25, 2025
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Noindex by Path [noindex-by-path]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
OpenHook [thesis-openhook]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
Order Cancellation & Returns for WooCommerce [wc-order-cancellation-return]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Orders Chat for WooCommerce [orders-chat-for-woocommerce]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 30, 2025
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 25, 2025
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 29, 2025
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 28, 2025
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 29, 2025
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Cincopa video and media plug-in [video-playlist-and-gallery-plugin]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 22, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 17, 2025
Affected Software
Prime Slider Addons for Elementor [bdthemes-prime-slider-lite]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 29, 2025
Affected Software
Product Delivery Date for WooCommerce – Lite [product-delivery-date-for-woocommerce-lite]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 19, 2025
Affected Software
Quran Gateway [quran-gateway]
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Read More & Accordion [expand-maker]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Recent Posts From Each Category [recent-posts-from-each-category]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Jan 2, 2026
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Robots.txt rewrite [robotstxt-rewrite]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 30, 2025
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Semrush Content Toolkit [semrush-contentshake]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
SensitiveTagCloud [sensitive-tag-cloud]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 20, 2025
Affected Software
Pretty Search Permalinks [wp-seo-search]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 27, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
Signature Add-On for Gravity Forms [gravity-signature-forms-add-on]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Simple Archive Generator [simple-archive-generator]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 25, 2025
Affected Software
Simple File List [simple-file-list]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Simple Folio [simple-folio]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 17, 2025
Affected Software
Simple Keyword to Link [simple-keyword-to-link]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Simple Link Directory – AI Powered [simple-link-directory]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 30, 2025
Affected Software
Simple XML Sitemap [simple-xml-sitemap]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Social Profilr [social-profilr-display-social-network-profile]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 27, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 29, 2025
Affected Software
Strong Testimonials [strong-testimonials]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 28, 2025
Affected Software
Strong Testimonials [strong-testimonials]
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 29, 2025
Affected Software
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 17, 2025
Affected Software
Sweet Energy Efficiency [sweet-energy-efficiency]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Jan 2, 2026
Affected Software
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 22, 2025
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
Tasty Recipes Lite [tasty-recipes-lite]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
Tasty Recipes Lite [tasty-recipes-lite]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 25, 2025
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 28, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 20, 2025
Affected Software
WP Time Slots Booking Form [wp-time-slots-booking-form]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 22, 2025
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Jan 2, 2026
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
UnGrabber [ungrabber]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Jan 2, 2026
Affected Software
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Jan 2, 2026
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 25, 2025
Affected Software
Vimeotheque – Vimeo WordPress Plugin & Video Gallery [codeflavors-vimeo-video-post-lite]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Vireo [vireo]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 21, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 21, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Watu Quiz [watu]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 17, 2025
Affected Software
Watu Quiz [watu]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 15, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 20, 2025
Affected Software
Web to SugarCRM Lead [web-to-sugarcrm-lead]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 15, 2025
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Jan 1, 2026
Affected Software
WeDesignTech Ultimate Booking Addon [wedesigntech-ultimate-booking-addon]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
Affected Software
WING Website Migrator [wing-migrator]
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 22, 2025
Affected Software
WooCommerce [woocommerce]
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 19, 2025
Affected Software
WP DB Booster [wp-db-booster]
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 20, 2025
Affected Software
WP JobHunt [wp-jobhunt]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 30, 2025
Affected Software
WP-CalDav2ICS [wp-caldav2ics]
CVSS Rating
4.3 (Medium)
Patch Status
Unpatched
Published
Dec 31, 2025
Affected Software
WP-EasyArchives [wp-easyarchives]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 30, 2025
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 24, 2025
Affected Software
YITH Slider for page builders [yith-slider-for-page-builders]
Researcher
CVSS Rating
4.3 (Medium)
Patch Status
Patched
Published
Dec 31, 2025
Affected Software
Zoho ZeptoMail [transmail]
Researcher
CVSS Rating
2.7 (Low)
Patch Status
Unpatched
Published
Dec 15, 2025
Affected Software
Researcher
CVSS Rating
2.7 (Low)
Patch Status
Patched
Published
Dec 20, 2025
Affected Software
Researcher


As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.

This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.

Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.

Did you enjoy this post? Share it!

Comments

No Comments