Wordfence Intelligence Weekly WordPress Vulnerability Report (January 5, 2026 to January 11, 2026)
📢 Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we handle all the rest.
Last week, there were 321 vulnerabilities disclosed in 258 WordPress Plugins and 37 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 89 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to implement layered security, aligning with our overarching mission to secure WordPress with defense in depth strategies. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report. As the world’s leading quality vulnerability database provider for WordPress, site owners can rest assured knowing Wordfence has their back.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 32,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
New Firewall Rules Deployed Last Week
The Wordfence Threat Intelligence Team reviews each vulnerability to determine impact and severity, along with assessing the likelihood of exploitation, to verify that the Wordfence Firewall provides sufficient protection.
The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our Premium, Care, and Response customers last week:
-
-
- WAF-RULE-885 – Data redacted while we work with the vendor on a patch.
- WAF-RULE-886 – Data redacted while we work with the vendor on a patch.
-
Wordfence Premium, Care, and Response customers received this protection immediately, while users still running the free version of Wordfence will receive this enhanced protection after a 30 day delay.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 184 |
| Unpatched | 137 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Low Severity | 1 |
| Medium Severity | 264 |
| High Severity | 50 |
| Critical Severity | 6 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 115 |
| Missing Authorization | 94 |
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 26 |
| Cross-Site Request Forgery (CSRF) | 20 |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 14 |
| Authorization Bypass Through User-Controlled Key | 11 |
| Exposure of Sensitive Information to an Unauthorized Actor | 8 |
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 5 |
| Incorrect Authorization | 5 |
| Improper Control of Generation of Code ('Code Injection') | 4 |
| Server-Side Request Forgery (SSRF) | 4 |
| Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 3 |
| Unrestricted Upload of File with Dangerous Type | 3 |
| Improper Authorization | 2 |
| Improper Privilege Management | 2 |
| External Control of File Name or Path | 1 |
| Files or Directories Accessible to External Parties | 1 |
| Missing Support for Integrity Check | 1 |
| Use of Insufficiently Random Values | 1 |
| Use of Less Trusted Source | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 34 | |
| 22 | |
| 17 | |
| 16 | |
| 12 | |
| 11 | |
| 9 | |
| 9 | |
| 9 | |
| 9 | |
| 8 | |
| 7 | |
| 7 | |
| 7 | |
| 7 | |
| 6 | |
| 6 | |
| 6 | |
| 6 | |
| 5 | |
| 5 | |
| 5 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| 1180px Shortcodes | 1180px-shortcodes |
| AA Block country | aa-block-country |
| aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder | ablocks |
| Absolute Addons For Elementor | absolute-addons |
| Accordions – Responsive Accordion & FAQ Plugin for WordPress | accordions-wp |
| ACF to REST API | acf-to-rest-api |
| AD Sliding FAQ | ad-sliding-faq |
| AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization | add-expires-headers |
| AffiliateX – Amazon Affiliate Plugin, Product Boxes, Comparison Tables & Affiliate Link Tracking | affiliatex |
| AH Shortcodes | ah-shortcodes |
| AI ChatBot for WordPress by AI BotKit – Live in 2 Minutes, No Code | ai-botkit-for-lead-generation |
| AMP for WP – Accelerated Mobile Pages | accelerated-mobile-pages |
| Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin | simply-schedule-appointments |
| AS Password Field In Default Registration Form | as-password-field-in-default-registration-form |
| Autogen Headers Menu | autogen-headers-menu |
| Awesome Hotel Booking | awesome-hotel-booking |
| BA Book Everything | ba-book-everything |
| BD Courier Order Ratio Checker | bd-courier-order-ratio-checker |
| Better Business Reviews – Trustpilot WordPress Plugin | better-business-reviews |
| BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot | betterdocs |
| Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder | bit-form |
| Block Slider – Responsive Image Slider, Video Slider & Post Slider | block-slider |
| Blockons – Gutenberg blocks for WordPress and WooCommerce websites | blockons |
| Blog2Social: Social Media Auto Post & Scheduler | blog2social |
| Booking Calendar | booking |
| Booking for Appointments and Events Calendar – Amelia | ameliabooking |
| Breadcrumbs for Elementor – Crumber | crumber-elementor |
| Brevo for WooCommerce | woocommerce-sendinblue-newsletter-subscription |
| BuddyPress Xprofile Custom Field Types | bp-xprofile-custom-field-types |
| Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO) | bulk-image-alt-text-with-yoast |
| Bulk Page Generator – LPagery | lpagery |
| BulletProof Security | bulletproof-security |
| Campaign Monitor for WordPress | forms-for-campaign-monitor |
| CBX Bookmark & Favorite | cbxwpbookmark |
| Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer | clearfy |
| Client Testimonial Slider | wp-client-testimonial |
| Contact Form vCard Generator | contact-form-vcard-generator |
| Contact Us Simple Form | contact-us-simple-form |
| Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | contest-gallery |
| ConvertForce – Notification Bars, Lightbox Popups & Slide-ins | convertforce-popup-builder |
| Cookies and Content Security Policy | cookies-and-content-security-policy |
| Cool YT Player | cool-yt-player |
| Copyscape Premium | copyscape-premium |
| Countdown Timer – Widget Countdown | widget-countdown |
| CountDown With Image or Video Background | countdown-with-background |
| Creator LMS – WordPress LMS Plugin for Coaches & Course Creators | creatorlms |
| Curved Text | curved-text |
| Custom Login Page Customizer | login-customizer |
| Customer Reviews for WooCommerce | customer-reviews-woocommerce |
| Dashboard Welcome for Beaver Builder | dashboard-welcome-for-beaver-builder |
| Debt.com Business in a Box | debtcom-business-in-a-box |
| Delay Redirects | delay-redirects |
| Demo Importer Plus | demo-importer-plus |
| Depicter — Popup & Slider Builder | depicter |
| Docket Cache – Object Cache Accelerator | docket-cache |
| Download Manager | download-manager |
| Drag and Drop Multiple File Upload for Contact Form 7 | drag-and-drop-multiple-file-upload-contact-form-7 |
| Easy Form Builder by WhiteStudio — Drag & Drop Form Builder | easy-form-builder |
| Easy GitHub Gist Shortcodes | easy-github-gist-shortcodes |
| Easy Media Download | easy-media-download |
| Easy Modal | easy-modal |
| EDD Download Info | edd-download-info |
| EduBlink Core | edublink-core |
| eHive Search | ehive-search |
| Email Customizer for WooCommerce | Drag and Drop Email Templates Builder | email-customizer-for-woocommerce |
| EmailKit – Email Customizer for WooCommerce & WP | emailkit |
| Entry Views | entry-views |
| Essential Addons for Elementor – Popular Elementor Templates & Widgets | essential-addons-for-elementor-lite |
| Event Countdown for The Events Calendar | countdown-for-the-events-calendar |
| Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) | wp-event-solution |
| Famous - Responsive Image And Video Grid Gallery WordPress Plugin | famous_grid_image_and_video_gallery |
| FastDup – Fastest WordPress Migration & Duplicator | fastdup |
| Featured Image from URL (FIFU) | featured-image-from-url |
| Felan Framework | felan-framework |
| FiboSearch – Ajax Search for WooCommerce | ajax-search-for-woocommerce |
| File Uploads Addon for WooCommerce | woo-addon-uploads |
| FireStorm Professional Real Estate Plugin | fs-real-estate-plugin |
| Flashcard Plugin for WordPress | flashcard |
| Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder | fluentform |
| Fluent Support – Helpdesk & Customer Support Ticket System | fluent-support |
| Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager | folders |
| Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database | form-vibes |
| Forminator Forms – Contact Form, Payment Form & Custom Form Builder | forminator |
| ForumWP – Forum & Discussion Board | forumwp |
| Frontend Admin by DynamiApps | acf-frontend-form-element |
| FS Registration Password | registration-password |
| GA4WP – Analytics Dashboard for the Website | ga-for-wp |
| GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress | gamipress |
| GetGenie – AI Content Writer with Keyword Research & SEO Tracking | getgenie |
| GiveWP – Donation Plugin and Fundraising Platform | give |
| Guest posting / Frontend Posting / Front Editor – WP Front User Submit | front-editor |
| Gutenverse Form – Contact Form Builder, Block Form & Booking Form | gutenverse-form |
| Handmade Framework | handmade-framework |
| HBLPAY Payment Gateway for WooCommerce | hblpay-payment-gateway-for-woocommerce |
| Header and Footer Scripts | header-and-footer-scripts |
| HelpDesk Contact Form | helpdesk-contact-form |
| HTML5 Video Player with Playlist & Multiple Skins | lbg-vp2-html5-rightside |
| HTML5 Video Player WordPress Plugin | lbg-vp2-html5-bottom |
| HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce | hurrytimer |
| Icegram Engage – Popups, Optins, CTAs & Lead Generation | icegram |
| ilGhera Support System for WooCommerce | wc-support-system |
| Image Slider Slideshow | image-slider-slideshow |
| Image&Video FullScreen Background | lbg_fullscreen_fullwidth_slider |
| IMGspider – 图片采集抓取插件 | imgspider |
| IndieWeb | indieweb |
| iPaymu Payment Gateway for WooCommerce | ipaymu-for-woocommerce |
| Japanized for WooCommerce | woocommerce-for-japan |
| Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | jeg-elementor-kit |
| JetEngine | jet-engine |
| Kadence Central – Site Management, Backups, Security, and Reporting | ithemes-sync |
| Kenta Companion | kenta-companion |
| Key Figures | key-figures |
| Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages | page-builder-add |
| Latest Registered Users | latest-registered-users |
| Latest Tabs | kento-latest-tabs |
| LearnPress – WordPress LMS Plugin for Create and Sell Online Courses | learnpress |
| Lesson Plan Book | lesson-plan-book |
| Link Whisper Free | link-whisper |
| Listeo-Core - Directory Plugin by Purethemes | listeo-core |
| ListingHub | listinghub |
| Logo Slider WP – Responsive Logo Carousel, Logo Gallery & Logo Showcase | logo-slider-wp |
| Magic Responsive Slider and Carousel | magic_slider |
| Magic Responsive Slider and Carousel WordPress | magic_carousel |
| Mamurjor Employee Info | mamurjor-employee-info |
| MasterStudy LMS WordPress Plugin – for Online Courses and Education | masterstudy-lms-learning-management-system |
| Media Search Enhanced | media-search-enhanced |
| MediaPress | mediapress |
| Menu Card | menu-card |
| Merge + Minify + Refresh | merge-minify-refresh |
| MG AdvancedOptions | mg-advancedoptions |
| miniOrange OTP Verification and SMS Notification for WooCommerce | miniorange-sms-order-notification-otp-verification |
| Money Space | money-space |
| Moosend Landing Pages | moosend-landing-pages |
| Mstoic Shortcodes | mstoic-shortcodes |
| MTCaptcha WordPress Plugin | mtcaptcha |
| Multi-column Tag Map | multi-column-tag-map |
| My Album Gallery | my-album-gallery |
| Nearby Now Reviews | nearby-now-reviews |
| Neoforum | neoforum |
| Newsletter Email Subscribe | newsletter-email-subscribe |
| NextGEN Download Gallery | nextgen-download-gallery |
| Niche Hero | Beautifully-designed blocks in seconds | niche-hero |
| Ninja Tables – Easy Data Table Builder | ninja-tables |
| nK Themes Helper | nk-themes-helper |
| NS Ie Compatibility Fixer | ns-ie-compatibility-fixer |
| Optional Email | optional-email |
| Page Builder Gutenberg Blocks – CoBlocks | coblocks |
| Page Expire Popup/Redirection for WordPress | page-expire-popup |
| Page Keys | page-keys |
| Penci AI SmartContent Creator | penci-ai |
| Penci Filter Everything | penci-filter-everything |
| Penci Podcast | penci-podcast |
| Penci Recipe | penci-recipe |
| Penci Shortcodes & Performance | penci-shortcodes |
| PhotoFade | photofade |
| Piraeus Bank WooCommerce Payment Gateway | woo-payment-gateway-for-piraeus-bank |
| PopCash Code Integration Tool | popcashnet-code-integration-tool |
| Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers | popup-builder-block |
| Post and Page Builder by BoldGrid – Visual Drag and Drop Editor | post-and-page-builder |
| Post Like Dislike | post-like-dislike |
| Premmerce WooCommerce Customers Manager | woo-customers-manager |
| Proxy & VPN Blocker | proxy-vpn-blocker |
| PullQuote | pullquote |
| QR Code for WooCommerce order emails, PDF invoices, packing slips | qr-code-tag-for-wc-from-goaskle-com |
| Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker | quiz-master-next |
| Quote Comments | quote-comments |
| Rankology SEO and Analytics Tool | rankology-seo-and-analytics-tool |
| Re Gallery – Responsive Image & Photo Gallery | regallery |
| Real Estate Pro - WordPress Plugin | real-estate-pro |
| Recras | recras |
| RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login | custom-registration-form-builder-with-submission-manager |
| reHub Framework | rehub-framework |
| Responsive Pricing Table | dk-pricr-responsive-pricing-table |
| Reviewify — Review Discounts & Photo/Video Reviews for WooCommerce | review-for-discount |
| RSS Feed Widget | rss-feed-widget |
| Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories | post-expirator |
| Shabat Keeper | shabat-keeper |
| ShareThis Dashboard for Google Analytics | googleanalytics |
| ShopMagic – email automation | shopmagic-for-woocommerce |
| Shortcoder — Create Shortcodes for Anything | shortcoder |
| Shortcodes and extra features for Phlox theme | auxin-elements |
| Simcast | simcast |
| Simple User Meta Editor | simple-user-meta-editor |
| SlimStat Analytics | wp-slimstat |
| Smart App Banners | smart-app-banners |
| SMSA Shipping (official) | smsa-shipping-official |
| Snillrik Restaurant Menu | snillrik-restaurant-menu |
| Speed Kit | baqend |
| Spiffy Calendar | spiffy-calendar |
| Stackable – Page Builder Gutenberg Blocks | stackable-ultimate-gutenberg-blocks |
| Starred Review | starred-review |
| Sticky Action Buttons | sticky-action-buttons |
| STM Gallery 1.9 | stm-gallery |
| Stock Manager for WooCommerce | woocommerce-stock-manager |
| Stumble! for WordPress | stumble-for-wordpress |
| Stylish Cost Calculator – Quote Generator, Lead Gen & Price Estimator | stylish-cost-calculator |
| Stylish Order Form Builder | stylish-order-form-builder |
| Sugar Calendar – Events Calendar, Event Tickets, and Events Management Platform | sugar-calendar-lite |
| Suggestion Toolkit | suggestion-toolkit |
| Super Interactive Maps | super-interactive-maps |
| SVG Map by Smjrifle | svg-map-by-saedi |
| Table Field Add-on for ACF and SCF | advanced-custom-fields-table-field |
| Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms | simple-tags |
| tagDiv Composer | td-composer |
| Taskbuilder – Project Management & Task Management Tool With Kanban Board | taskbuilder |
| teachPress | teachpress |
| Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! | templately |
| Terms descriptions | terms-descriptions |
| Testimonial Master | testimonial-master |
| The Events Calendar | the-events-calendar |
| The Tooltip | the-tooltip |
| TheGem Theme Elements | thegem-elements-elementor |
| TheGem Theme Elements (for WPBakery) | thegem-elements |
| Tickera – Sell Tickets & Manage Events | tickera-event-ticketing-system |
| Timetics – Appointment Booking Calendar & Scheduling System | timetics |
| Top Position Google Finance | top-position-google-finance |
| Travel Bucket List – Wish To Go | wish-to-go |
| Trusona for WordPress | trusona |
| Tutor LMS – eLearning and online course solution | tutor |
| twinklesmtp – Email Service Provider For WordPress | twinklesmtp |
| Ultimate Gift Cards for WooCommerce | woo-gift-cards-lite |
| Ultimate Reviews | ultimate-reviews |
| Unify | unify |
| Uper – Back to Top Button for Elementor | uper-elementor |
| URL Image Importer | url-image-importer |
| User Activity Log | user-activity-log |
| User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder | user-registration |
| Viitor Button Shortcodes | viitor-shortcodes |
| Web Accessibility with Max Access | accessibility-toolbar |
| weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot | wedocs |
| Woffice Core | woffice-core |
| WooCommerce Orders & Customers Exporter | woocommerce-orders-ei |
| WooCommerce Square | woocommerce-square |
| Woodpecker for WordPress | woodpecker |
| Workreap | workreap |
| WP Attractive Donations System - Easy Stripe & Paypal donations | WP_AttractiveDonationsSystem |
| WP Enable WebP | wp-enable-webp |
| WP Google Street View (with 360° virtual tour) & Google maps + Local SEO | wp-google-street-view |
| WP Js List Pages Shortcodes | wp-js-list-pages-shortcodes |
| WP Lead Capturing Pages | wp-lead-capture |
| WP Page Permalink Extension | change-wp-page-permalinks |
| WP Photo Album Plus | wp-photo-album-plus |
| WP Popup Magic | wppopupmagic |
| WP Popups – WordPress Popup builder | wp-popups-lite |
| WP Quick Post Duplicator | wp-quick-post-duplicator |
| WP Recipe Manager | wp-recipe-manager |
| WP Status Notifier | wp-change-status-notifier |
| WP Table Builder – Drag & Drop Table Builder | wp-table-builder |
| WP Virtual Assistant | VirtualAssistant |
| WP Widget Changer | wp-widget-changer |
| WP-Members Membership Plugin | wp-members |
| WPAdverts – Classifieds Plugin | wpadverts |
| X Addons for Elementor | x-addons-elementor |
| Xagio SEO – AI Powered SEO | xagio-seo |
| xShare | xshare |
| YayMail – WooCommerce Email Customizer | yaymail |
| YITH Request a Quote for WooCommerce | yith-woocommerce-request-a-quote |
| Yoco Payments | yoco-payment-gateway |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| AeroLand - App Landing Software Website WordPress Theme | aeroland |
| Amuli | Property & Real Estate Marketplace WordPress Theme | amuli |
| Anarkali - Fashion Shop WooCommerce Elementor Theme | anarkali |
| Athens - Law Agency WordPress Theme | athens |
| atlas | atlas |
| Automotive Car Dealership Business WordPress Theme | automotive |
| Brook - Agency Business Creative WordPress Theme | brook |
| Corpkit - Business Consulting WordPress Theme | corpkit |
| Cream Magazine | cream-magazine |
| Curly - A Stylish WordPress Theme for Hairdressers and Hair Salons | curly |
| DeepDigital – Web Design Agency WordPress Theme | deepdigital |
| Depot - eCommerce WordPress Theme | depot |
| EduBlink - Education & Online Course WordPress Theme | edublink |
| Grand Restaurant WordPress | grandrestaurant |
| Hendon - Single Property WordPress Theme | hendon |
| Jobify - Job Board WordPress Theme | jobify |
| Lobo - WordPress Portfolio for Freelancers & Agencies | lobo |
| Mitech - Technology IT Solutions & Services WordPress Theme | mitech |
| Navian - Multi-Purpose Responsive WordPress Theme | navian |
| Neo Ocular - Optician and Optical Store WordPress Theme | neoocular |
| OchaHouse - Organic Tea Store WooCommerce WordPress Theme | ochahouse |
| Optimize - SEO & Social Media WordPress Theme | optimizewp |
| Oshin | oshin |
| Phlox | phlox |
| photography | photography |
| Racquet – Tennis, Badminton & Squash WordPress Theme | racquet |
| Rosebud - Flower Shop and Florist WordPress Theme | rosebud |
| Rozy - Flower Shop WooCommerce WordPress Theme (4+ Indexes + Mobile Layouts Ready) | rozy |
| Soledad | soledad |
| tm-moody | tm-moody |
| Travel Booking WordPress Theme | traveler |
| Typify - Newspaper & Magazine WordPress Theme | typify |
| VideoPro - Video WordPress Theme | videopro |
| WellSpring | Aqua Filters & Drinking Water Delivery WordPress Theme | wellspring |
| Woffice CRM | woffice |
| Woodmart | woodmart |
| zorka | zorka |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
Affected Software
AS Password Field In Default Registration Form [as-password-field-in-default-registration-form]
Researcher
Affected Software
Custom Login Page Customizer [login-customizer]
Researcher
Affected Software
Frontend Admin by DynamiApps [acf-frontend-form-element]
Researcher
Affected Software
FS Registration Password [registration-password]
Researcher
Affected Software
Optional Email [optional-email]
Researcher
Affected Software
Frontend Admin by DynamiApps [acf-frontend-form-element]
Researcher
Affected Software
BuddyPress Xprofile Custom Field Types [bp-xprofile-custom-field-types]
Researcher
Affected Software
Researcher
Affected Software
WP Enable WebP [wp-enable-webp]
Researcher
Affected Software
Money Space [money-space]
Researcher
Affected Software
iPaymu Payment Gateway for WooCommerce [ipaymu-for-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Athens - Law Agency WordPress Theme [athens]
Researcher
Affected Software
atlas [atlas]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
tm-moody [tm-moody]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Optimize - SEO & Social Media WordPress Theme [optimizewp]
Researcher
Affected Software
Oshin [oshin]
Researcher
Affected Software
photography [photography]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
SMSA Shipping (official) [smsa-shipping-official]
Researcher
Affected Software
Researcher
Affected Software
VideoPro - Video WordPress Theme [videopro]
Researcher
Affected Software
Researcher
Affected Software
Automotive Car Dealership Business WordPress Theme [automotive]
Researcher
Affected Software
Researcher
Affected Software
EduBlink Core [edublink-core]
Researcher
Affected Software
Felan Framework [felan-framework]
Researcher
Affected Software
Handmade Framework [handmade-framework]
Researcher
Affected Software
Latest Registered Users [latest-registered-users]
Researcher
Affected Software
WP Lead Capturing Pages [wp-lead-capture]
Researcher
Affected Software
Reviewify — Review Discounts & Photo/Video Reviews for WooCommerce [review-for-discount]
Researcher
TheGem Theme Elements (for Elementor) <= 5.11.0 - Authenticated (Contributor+) Local File Inclusion
7.5
Affected Software
TheGem Theme Elements [thegem-elements-elementor]
Researcher
Affected Software
User Activity Log [user-activity-log]
Researcher
Affected Software
WooCommerce Square [woocommerce-square]
Researcher
Affected Software
Yoco Payments [yoco-payment-gateway]
Researcher
Affected Software
Download Manager [download-manager]
Researcher
Affected Software
Brevo for WooCommerce [woocommerce-sendinblue-newsletter-subscription]
Researcher
Affected Software
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) [wp-event-solution]
Researcher
Affected Software
Frontend Admin by DynamiApps [acf-frontend-form-element]
Researcher
Affected Software
ListingHub [listinghub]
Researcher
Affected Software
SlimStat Analytics [wp-slimstat]
Researcher
Affected Software
SlimStat Analytics [wp-slimstat]
Researcher
Affected Software
WP Virtual Assistant [VirtualAssistant]
Researcher
Affected Software
WP Photo Album Plus [wp-photo-album-plus]
Researcher
Affected Software
Researcher
Affected Software
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin [simply-schedule-appointments]
Researcher
Affected Software
Researcher
Affected Software
Researcher
CBX Bookmark & Favorite <= 2.0.4 - Authenticated (Subscriber+) SQL Injection via `orderby` Parameter
6.5
Affected Software
CBX Bookmark & Favorite [cbxwpbookmark]
Researcher
Affected Software
DeepDigital – Web Design Agency WordPress Theme [deepdigital]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Flashcard Plugin for WordPress [flashcard]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Media Search Enhanced [media-search-enhanced]
Researcher
Affected Software
Ninja Tables – Easy Data Table Builder [ninja-tables]
Researcher
Affected Software
Page Expire Popup/Redirection for WordPress [page-expire-popup]
Affected Software
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker [quiz-master-next]
Researcher
Affected Software
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker [quiz-master-next]
Researcher
Affected Software
Researcher
Affected Software
WooCommerce Orders & Customers Exporter [woocommerce-orders-ei]
Researcher
Affected Software
Woodmart [woodmart]
Researcher
Affected Software
WP Page Permalink Extension [change-wp-page-permalinks]
Researcher
Affected Software
1180px Shortcodes [1180px-shortcodes]
Researcher
Affected Software
AD Sliding FAQ [ad-sliding-faq]
Researcher
Affected Software
AH Shortcodes [ah-shortcodes]
Researcher
Affected Software
AI ChatBot for WordPress by AI BotKit – Live in 2 Minutes, No Code [ai-botkit-for-lead-generation]
Researcher
AMP for WP <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG File Upload
6.4
Affected Software
AMP for WP – Accelerated Mobile Pages [accelerated-mobile-pages]
Researcher
Affected Software
Autogen Headers Menu [autogen-headers-menu]
Researcher
Affected Software
Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO) [bulk-image-alt-text-with-yoast]
Researcher
Affected Software
Client Testimonial Slider [wp-client-testimonial]
Researcher
Affected Software
ConvertForce – Notification Bars, Lightbox Popups & Slide-ins [convertforce-popup-builder]
Affected Software
Cool YT Player [cool-yt-player]
Researcher
Affected Software
Countdown Timer – Widget Countdown [widget-countdown]
Researcher
Affected Software
Curved Text [curved-text]
Researcher
Affected Software
Customer Reviews for WooCommerce [customer-reviews-woocommerce]
Researcher
Affected Software
Debt.com Business in a Box [debtcom-business-in-a-box]
Researcher
Affected Software
Easy GitHub Gist Shortcodes [easy-github-gist-shortcodes]
Researcher
Affected Software
Easy Media Download [easy-media-download]
Researcher
Affected Software
Easy Modal [easy-modal]
Researcher
Affected Software
EDD Download Info [edd-download-info]
Researcher
Affected Software
Entry Views [entry-views]
Researcher
Essential Addons for Elementor <= 6.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite]
Researcher
Affected Software
ForumWP – Forum & Discussion Board [forumwp]
Researcher
Gutenverse Form <= 2.3.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
6.4
Affected Software
Gutenverse Form – Contact Form Builder, Block Form & Booking Form [gutenverse-form]
Researcher
Affected Software
Header and Footer Scripts [header-and-footer-scripts]
Researcher
Affected Software
Researcher
Affected Software
IMGspider – 图片采集抓取插件 [imgspider]
Researcher
IndieWeb <= 4.0.5 - Authenticated (Author+) Stored Cross-Site Scripting via 'Telephone' Parameter
6.4
Affected Software
IndieWeb [indieweb]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
MediaPress [mediapress]
Researcher
Affected Software
MediaPress [mediapress]
Researcher
Affected Software
Menu Card [menu-card]
Researcher
Affected Software
Mstoic Shortcodes [mstoic-shortcodes]
Researcher
Affected Software
My Album Gallery [my-album-gallery]
Researcher
Affected Software
My Album Gallery [my-album-gallery]
Affected Software
Nearby Now Reviews [nearby-now-reviews]
Researcher
Affected Software
Niche Hero | Beautifully-designed blocks in seconds [niche-hero]
Researcher
Affected Software
nK Themes Helper [nk-themes-helper]
Researcher
Affected Software
Page Builder Gutenberg Blocks – CoBlocks [coblocks]
Researcher
Affected Software
Penci Filter Everything [penci-filter-everything]
Researcher
Affected Software
Penci Podcast [penci-podcast]
Researcher
Affected Software
Penci Recipe [penci-recipe]
Researcher
Penci Shortcodes & Performance <= 6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Penci Shortcodes & Performance [penci-shortcodes]
Researcher
Affected Software
Phlox [phlox]
Researcher
Affected Software
PhotoFade [photofade]
Researcher
PullQuote <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
6.4
Affected Software
PullQuote [pullquote]
Researcher
Affected Software
QR Code for WooCommerce order emails, PDF invoices, packing slips [qr-code-tag-for-wc-from-goaskle-com]
Affected Software
Recras [recras]
Researcher
Affected Software
Responsive Pricing Table [dk-pricr-responsive-pricing-table]
Researcher
Affected Software
Responsive Pricing Table [dk-pricr-responsive-pricing-table]
Researcher
Affected Software
Shortcoder — Create Shortcodes for Anything [shortcoder]
Researcher
Affected Software
Shortcodes and extra features for Phlox theme [auxin-elements]
Researcher
Affected Software
Smart App Banners [smart-app-banners]
Researcher
Affected Software
Snillrik Restaurant Menu [snillrik-restaurant-menu]
Researcher
Affected Software
Soledad [soledad]
Researcher
Affected Software
Stackable – Page Builder Gutenberg Blocks [stackable-ultimate-gutenberg-blocks]
Researcher
Affected Software
STM Gallery 1.9 [stm-gallery]
Researcher
Affected Software
Stylish Cost Calculator – Quote Generator, Lead Gen & Price Estimator [stylish-cost-calculator]
Researcher
Affected Software
Stylish Order Form Builder [stylish-order-form-builder]
Researcher
Affected Software
Table Field Add-on for ACF and SCF [advanced-custom-fields-table-field]
Researcher
Affected Software
tagDiv Composer [td-composer]
Researcher
Affected Software
The Tooltip [the-tooltip]
Researcher
Affected Software
TheGem Theme Elements [thegem-elements-elementor]
Researcher
Affected Software
TheGem Theme Elements (for WPBakery) [thegem-elements]
Researcher
Affected Software
Travel Bucket List – Wish To Go [wish-to-go]
Researcher
Affected Software
URL Image Importer [url-image-importer]
Researcher
Affected Software
Viitor Button Shortcodes [viitor-shortcodes]
Researcher
Affected Software
Woodpecker for WordPress [woodpecker]
Researcher
Affected Software
WP Google Street View (with 360° virtual tour) & Google maps + Local SEO [wp-google-street-view]
Researcher
Affected Software
WP Js List Pages Shortcodes [wp-js-list-pages-shortcodes]
Researcher
Affected Software
WP Popup Magic [wppopupmagic]
Researcher
Affected Software
WP Recipe Manager [wp-recipe-manager]
Researcher
Affected Software
X Addons for Elementor [x-addons-elementor]
Researcher
Affected Software
Xagio SEO – AI Powered SEO [xagio-seo]
Researcher
Affected Software
CountDown With Image or Video Background [countdown-with-background]
Researcher
Affected Software
Drag and Drop Multiple File Upload for Contact Form 7 [drag-and-drop-multiple-file-upload-contact-form-7]
Researcher
Affected Software
eHive Search [ehive-search]
Researcher
Famous - Responsive Image And Video Grid Gallery WordPress <= 1.4 - Reflected Cross-Site Scripting
6.1
Affected Software
Famous - Responsive Image And Video Grid Gallery WordPress Plugin [famous_grid_image_and_video_gallery]
Researcher
Affected Software
Grand Restaurant WordPress [grandrestaurant]
Researcher
Affected Software
HBLPAY Payment Gateway for WooCommerce [hblpay-payment-gateway-for-woocommerce]
Researcher
Affected Software
HTML5 Video Player WordPress Plugin [lbg-vp2-html5-bottom]
Researcher
Affected Software
HTML5 Video Player with Playlist & Multiple Skins [lbg-vp2-html5-rightside]
Researcher
Affected Software
Image&Video FullScreen Background [lbg_fullscreen_fullwidth_slider]
Researcher
Affected Software
Jobify - Job Board WordPress Theme [jobify]
Researcher
Affected Software
Lesson Plan Book [lesson-plan-book]
Researcher
Affected Software
Link Whisper Free [link-whisper]
Researcher
Affected Software
Listeo-Core - Directory Plugin by Purethemes [listeo-core]
Researcher
Affected Software
Magic Responsive Slider and Carousel WordPress [magic_carousel]
Researcher
Affected Software
Magic Responsive Slider and Carousel [magic_slider]
Researcher
Affected Software
MG AdvancedOptions [mg-advancedoptions]
Researcher
Affected Software
Post Like Dislike [post-like-dislike]
Researcher
Affected Software
Premmerce WooCommerce Customers Manager [woo-customers-manager]
Affected Software
Real Estate Pro - WordPress Plugin [real-estate-pro]
Researcher
Affected Software
Shabat Keeper [shabat-keeper]
Researcher
Affected Software
Starred Review [starred-review]
Researcher
Affected Software
Stumble! for WordPress [stumble-for-wordpress]
Researcher
Affected Software
Super Interactive Maps [super-interactive-maps]
Researcher
Affected Software
SVG Map by Smjrifle [svg-map-by-saedi]
Researcher
Affected Software
Researcher
Affected Software
Testimonial Master [testimonial-master]
Researcher
Affected Software
Top Position Google Finance [top-position-google-finance]
Researcher
Affected Software
Woffice CRM [woffice]
Researcher
Affected Software
WP Widget Changer [wp-widget-changer]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
MasterStudy LMS WordPress Plugin – for Online Courses and Education [masterstudy-lms-learning-management-system]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
AA Block country [aa-block-country]
Researcher
Affected Software
Researcher
Affected Software
Booking for Appointments and Events Calendar – Amelia [ameliabooking]
Researcher
Affected Software
WP Attractive Donations System - Easy Stripe & Paypal donations [WP_AttractiveDonationsSystem]
Researcher
Affected Software
Awesome Hotel Booking [awesome-hotel-booking]
Researcher
Affected Software
Researcher
Affected Software
Booking Calendar [booking]
Researcher
Affected Software
Booking for Appointments and Events Calendar – Amelia [ameliabooking]
Researcher
Affected Software
BulletProof Security [bulletproof-security]
Researcher
Affected Software
Contact Form vCard Generator [contact-form-vcard-generator]
Researcher
Affected Software
Cookies and Content Security Policy [cookies-and-content-security-policy]
Researcher
Affected Software
Cream Magazine [cream-magazine]
Researcher
Affected Software
Researcher
Affected Software
Dashboard Welcome for Beaver Builder [dashboard-welcome-for-beaver-builder]
Researcher
Affected Software
Depicter — Popup & Slider Builder [depicter]
Researcher
Affected Software
Depicter — Popup & Slider Builder [depicter]
Researcher
Affected Software
Researcher
Affected Software
Felan Framework [felan-framework]
Researcher
Affected Software
FiboSearch – Ajax Search for WooCommerce [ajax-search-for-woocommerce]
Researcher
Affected Software
File Uploads Addon for WooCommerce [woo-addon-uploads]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
ilGhera Support System for WooCommerce [wc-support-system]
Researcher
Affected Software
Japanized for WooCommerce [woocommerce-for-japan]
Researcher
Affected Software
Researcher
Affected Software
miniOrange OTP Verification and SMS Notification for WooCommerce [miniorange-sms-order-notification-otp-verification]
Researcher
Affected Software
Moosend Landing Pages [moosend-landing-pages]
Researcher
Affected Software
NextGEN Download Gallery [nextgen-download-gallery]
Researcher
Affected Software
Piraeus Bank WooCommerce Payment Gateway [woo-payment-gateway-for-piraeus-bank]
Researcher
Affected Software
PopCash Code Integration Tool [popcashnet-code-integration-tool]
Researcher
Affected Software
Re Gallery – Responsive Image & Photo Gallery [regallery]
Researcher
Affected Software
reHub Framework [rehub-framework]
Researcher
Affected Software
ShopMagic – email automation [shopmagic-for-woocommerce]
Researcher
Affected Software
Shortcodes and extra features for Phlox theme [auxin-elements]
Researcher
Affected Software
Researcher
Timetics <= 1.0.46 - Incorrect Authorization to Authenticated (Timetics Customer+) User Creation
5.3
Affected Software
Researcher
Affected Software
Travel Booking WordPress Theme [traveler]
Researcher
Affected Software
Ultimate Gift Cards for WooCommerce [woo-gift-cards-lite]
Researcher
Affected Software
Ultimate Reviews [ultimate-reviews]
Researcher
Affected Software
Unify [unify]
Researcher
Affected Software
User Activity Log [user-activity-log]
Researcher
Affected Software
Researcher
Affected Software
Woffice Core [woffice-core]
Researcher
WP-Members Membership Plugin <= 3.5.4.4 - Unauthenticated Information Exposure via Unprotected Files
5.3
Affected Software
WP-Members Membership Plugin [wp-members]
Researcher
Affected Software
YITH Request a Quote for WooCommerce [yith-woocommerce-request-a-quote]
Researcher
Affected Software
zorka [zorka]
Researcher
Affected Software
FireStorm Professional Real Estate Plugin [fs-real-estate-plugin]
Researcher
Affected Software
Researcher
ShareThis Dashboard for Google Analytics <= 3.2.4 - Unauthenticated Google Analytics Data Exposure
4.7
Affected Software
ShareThis Dashboard for Google Analytics [googleanalytics]
Researcher
Affected Software
Accordions – Responsive Accordion & FAQ Plugin for WordPress [accordions-wp]
Researcher
Affected Software
Contact Us Simple Form [contact-us-simple-form]
Researcher
Affected Software
Delay Redirects [delay-redirects]
Researcher
Affected Software
Email Customizer for WooCommerce | Drag and Drop Email Templates Builder [email-customizer-for-woocommerce]
Researcher
Affected Software
Key Figures [key-figures]
Researcher
Affected Software
Multi-column Tag Map [multi-column-tag-map]
Researcher
Affected Software
Simple User Meta Editor [simple-user-meta-editor]
Researcher
Affected Software
Terms descriptions [terms-descriptions]
Researcher
Affected Software
twinklesmtp – Email Service Provider For WordPress [twinklesmtp]
Researcher
Affected Software
Web Accessibility with Max Access [accessibility-toolbar]
Researcher
Affected Software
Absolute Addons For Elementor [absolute-addons]
Researcher
Affected Software
ACF to REST API [acf-to-rest-api]
Researcher
Affected Software
Researcher
AMP for WP – Accelerated Mobile Pages <= 1.1.9 - Cross-Site Request Forgery to Comment Submission
4.3
Affected Software
AMP for WP – Accelerated Mobile Pages [accelerated-mobile-pages]
Researcher
Affected Software
BA Book Everything [ba-book-everything]
Researcher
Affected Software
BD Courier Order Ratio Checker [bd-courier-order-ratio-checker]
Researcher
Affected Software
Better Business Reviews – Trustpilot WordPress Plugin [better-business-reviews]
Researcher
Affected Software
Better Business Reviews – Trustpilot WordPress Plugin [better-business-reviews]
Researcher
Affected Software
Researcher
Affected Software
Blog2Social: Social Media Auto Post & Scheduler [blog2social]
Researcher
Affected Software
Bulk Page Generator – LPagery [lpagery]
Researcher
Affected Software
Campaign Monitor for WordPress [forms-for-campaign-monitor]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Copyscape Premium [copyscape-premium]
Researcher
Affected Software
Breadcrumbs for Elementor – Crumber [crumber-elementor]
Researcher
Affected Software
Demo Importer Plus [demo-importer-plus]
Researcher
Affected Software
Docket Cache – Object Cache Accelerator [docket-cache]
Researcher
Affected Software
Easy Form Builder by WhiteStudio — Drag & Drop Form Builder [easy-form-builder]
Researcher
Affected Software
Featured Image from URL (FIFU) [featured-image-from-url]
Researcher
Affected Software
Fluent Support – Helpdesk & Customer Support Ticket System [fluent-support]
Researcher
Affected Software
Researcher
Affected Software
GA4WP – Analytics Dashboard for the Website [ga-for-wp]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
HelpDesk Contact Form [helpdesk-contact-form]
Researcher
Affected Software
Image Slider Slideshow [image-slider-slideshow]
Researcher
Affected Software
Kenta Companion [kenta-companion]
Researcher
Affected Software
Latest Tabs [kento-latest-tabs]
Researcher
Affected Software
Mamurjor Employee Info [mamurjor-employee-info]
Researcher
Affected Software
Merge + Minify + Refresh [merge-minify-refresh]
Researcher
Affected Software
MTCaptcha WordPress Plugin [mtcaptcha]
Researcher
Affected Software
Newsletter Email Subscribe [newsletter-email-subscribe]
Researcher
Affected Software
NS Ie Compatibility Fixer [ns-ie-compatibility-fixer]
Researcher
Affected Software
Penci AI SmartContent Creator [penci-ai]
Researcher
Affected Software
Researcher
Affected Software
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor [post-and-page-builder]
Researcher
Affected Software
Researcher
Affected Software
Proxy & VPN Blocker [proxy-vpn-blocker]
Researcher
Affected Software
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker [quiz-master-next]
Researcher
Affected Software
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker [quiz-master-next]
Researcher
Affected Software
Quote Comments [quote-comments]
Researcher
Affected Software
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login [custom-registration-form-builder-with-submission-manager]
Researcher
Affected Software
Researcher
Affected Software
RSS Feed Widget [rss-feed-widget]
Researcher
Affected Software
Simcast [simcast]
Researcher
Solid Central – Site Management, Backups, Security, and Reporting <= 3.2.8 - Missing Authorization
4.3
Affected Software
Researcher
Affected Software
Speed Kit [baqend]
Researcher
Affected Software
Spiffy Calendar [spiffy-calendar]
Researcher
Affected Software
Sticky Action Buttons [sticky-action-buttons]
Researcher
Affected Software
Stock Manager for WooCommerce [woocommerce-stock-manager]
Researcher
Affected Software
Sugar Calendar – Events Calendar, Event Tickets, and Events Management Platform [sugar-calendar-lite]
Researcher
Affected Software
Suggestion Toolkit [suggestion-toolkit]
Researcher
Affected Software
Researcher
Affected Software
teachPress [teachpress]
Researcher
Affected Software
The Events Calendar [the-events-calendar]
Researcher
Affected Software
Event Countdown for The Events Calendar [countdown-for-the-events-calendar]
Researcher
Affected Software
Tickera – Sell Tickets & Manage Events [tickera-event-ticketing-system]
Researcher
Affected Software
Trusona for WordPress [trusona]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Uper – Back to Top Button for Elementor [uper-elementor]
Researcher
Affected Software
WP Popups – WordPress Popup builder [wp-popups-lite]
Researcher
Affected Software
WP Quick Post Duplicator [wp-quick-post-duplicator]
Researcher
Affected Software
WP Status Notifier [wp-change-status-notifier]
Researcher
Affected Software
WP Table Builder – Drag & Drop Table Builder [wp-table-builder]
Researcher
Affected Software
WPAdverts – Classifieds Plugin [wpadverts]
Researcher
Affected Software
xShare [xshare]
Researcher
Affected Software
YayMail – WooCommerce Email Customizer [yaymail]
Researcher
Affected Software
Rankology SEO and Analytics Tool [rankology-seo-and-analytics-tool]
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Comments