Wordfence Intelligence Weekly WordPress Vulnerability Report (August 3, 2026 to August 9, 2026)
Last week, there were 294 vulnerabilities disclosed in 233 WordPress Plugins and 14 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 149 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to implement layered security, aligning with our overarching mission to secure WordPress with defense in depth strategies. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report. As the world’s leading quality vulnerability database provider for WordPress, site owners can rest assured knowing Wordfence has their back.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 35,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
New Firewall Rules Deployed Last Week
The Wordfence Threat Intelligence Team reviews each vulnerability to determine impact and severity, along with assessing the likelihood of exploitation, to verify that the Wordfence Firewall provides sufficient protection.
The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our Premium, Care, and Response customers last week:
- WAF-RULE-940 – Data redacted while we work with the vendor on a patch.
- WordPress Core <= 7.0.2 – Unauthenticated Reflected Cross-Site Scripting via log Parameter
- emer-run.php Malware Auth Bypass
Wordfence Premium, Care, and Response customers received this protection immediately, while users still running the free version of Wordfence will receive this enhanced protection after a 30 day delay.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 258 |
| Unpatched | 36 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Medium Severity | 178 |
| High Severity | 100 |
| Critical Severity | 16 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 69 |
| Missing Authorization | 65 |
| Exposure of Sensitive Information to an Unauthorized Actor | 30 |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 30 |
| Deserialization of Untrusted Data | 18 |
| Authorization Bypass Through User-Controlled Key | 15 |
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 10 |
| Cross-Site Request Forgery (CSRF) | 7 |
| Improper Privilege Management | 6 |
| Incorrect Privilege Assignment | 6 |
| Unrestricted Upload of File with Dangerous Type | 5 |
| Server-Side Request Forgery (SSRF) | 4 |
| Client-Side Enforcement of Server-Side Security | 3 |
| Improper Authentication | 3 |
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 2 |
| Improper Control of Generation of Code ('Code Injection') | 2 |
| Insufficient Verification of Data Authenticity | 2 |
| Uncontrolled Resource Consumption | 2 |
| Unverified Password Change | 2 |
| Use of Less Trusted Source | 2 |
| Weak Password Recovery Mechanism for Forgotten Password | 2 |
| Authentication Bypass Using an Alternate Path or Channel | 1 |
| Embedded Malicious Code | 1 |
| Guessable CAPTCHA | 1 |
| Improper Access Control | 1 |
| Improper Neutralization of CRLF Sequences ('CRLF Injection') | 1 |
| Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') | 1 |
| Improper Neutralization of Special Elements used in a Command ('Command Injection') | 1 |
| Incorrect Authorization | 1 |
| Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 18 | |
| 16 | |
| 10 | |
| 9 | |
| 9 | |
| 8 | |
| 7 | |
| 7 | |
| 7 | |
| 7 | |
| 5 | |
| 5 | |
| 5 | |
| 5 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| A.Williams | alisha-williams |
| Academy LMS | academy |
| Accept PayPal & Stripe with Subscriptions for WooCommerce | restore-paypal-standard-for-woocommerce |
| Active Woot Products Tables for WooCommerce. 100% FREE | profit-products-tables-for-woocommerce |
| AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress | acymailing |
| Ad Inserter – Ad Manager & AdSense Ads | ad-inserter |
| Admin Safety Guard — Login Security, Limit Logins, 2FA & Brute Force Protection | admin-safety-guard |
| Advanced AJAX Product Filters | woocommerce-ajax-filters |
| Advanced Classifieds & Directory Pro | advanced-classifieds-and-directory-pro |
| Advanced Custom Fields: Font Awesome Field | advanced-custom-fields-font-awesome |
| Advanced Excerpt | advanced-excerpt |
| AfterShip Tracking – All-In-One WooCommerce Order Tracking (Free plan available) | aftership-woocommerce-tracking |
| AI ChatBot for WooCommerce – WoowBot | woowbot-woocommerce-chatbot |
| AI Copilot – Content Generator | ai-copilot-content-generator |
| AI Engine – The Chatbot, AI Framework & MCP for WordPress | ai-engine |
| Ajax Search Lite – Live Search & Filter | ajax-search-lite |
| All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos | all-in-one-video-gallery |
| Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress | latepoint |
| Appointment Hour Booking – Booking Calendar | appointment-hour-booking |
| Askeet — Talk to Your WooCommerce Data | askeet |
| AutoNetTV Relay | autonettv-relay |
| Autopay | platnosci-online-blue-media |
| Backup Migration | backup-backup |
| Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) | clink-gateway-for-woocommerce |
| Block User Account | block-user-account |
| BNE Testimonials | bne-testimonials |
| Booking for Appointments and Events Calendar – Amelia | ameliabooking |
| CAPTCHA 4WP – Antispam CAPTCHA solution for WordPress | advanced-nocaptcha-recaptcha |
| Car Rental Manager – Online Vehicle Booking System | car-rental-manager |
| ChamaWP – Monetize With Donations, Memberships, Crowdfunding, Commissions & Restricted Content | chama |
| Church Admin | church-admin |
| Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer | clearfy |
| Comments | advanced-comments |
| Contact Form Extender for Divi – Submissions DB & Extra Fields | contact-form-extender-for-divi-builder |
| Contact Form to Any API | contact-form-to-any-api |
| Content Egg – Affiliate Product Importer & Price Comparison | content-egg |
| Content Views – Post Grid & Filter (Shortcode, Blocks, Elementor Widgets) | content-views-query-and-display-post-page |
| Cost Calculator Builder | cost-calculator-builder |
| CubeWP Framework | cubewp-framework |
| Custom CSS and JavaScript | custom-css-and-javascript |
| Customer Reviews for WooCommerce | customer-reviews-woocommerce |
| Direct Payments for WooCommerce – Bank Transfer, Mobile Money, Crypto and Peer-to-Peer (P2P) Payments | direct-payments-for-woocommerce |
| Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy | dokan-lite |
| Download Manager | download-manager |
| Download Monitor | download-monitor |
| DTX – Dynamic Text Extension for Contact Form 7 | contact-form-7-dynamic-text-extension |
| Duplicate Post | duplicate-post-littlebizzy |
| Dynamic Pricing With Discount Rules for WooCommerce | aco-woo-dynamic-pricing |
| E2Pdf – Export Pdf Tool for WordPress | e2pdf |
| Easy Accordion – AI-Powered FAQ & Accordion Blocks, Product FAQ | easy-accordion-free |
| Easy Post Submission – Frontend Posting, Guest Publishing & Submit Content for WordPress | easy-post-submission |
| Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons | bdthemes-element-pack-lite |
| ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor | elementskit-lite |
| EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents | embedpress |
| ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce | erp |
| Estatik Real Estate Plugin | estatik |
| Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce | wp-event-solution |
| Events Manager – Calendar, Bookings, Tickets, and more! | events-manager |
| Export Import Menus | export-import-menus |
| F4 Post Tree | f4-tree |
| Featured Video Plus | featured-video-plus |
| FiboSearch – Ajax Search for WooCommerce | ajax-search-for-woocommerce |
| File Manager | file-manager |
| Fluent Forms Pro Add On Pack | fluentformpro |
| FluentSMTP – WP Mail SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTP | fluent-smtp |
| FlxWoo | flx-woo |
| FoodBoxBooker | foodboxbooker |
| Football Pool | football-pool |
| FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More | formgent |
| Forminator Forms – Contact Form, Payment Form & Custom Form Builder | forminator |
| Frontend Admin by DynamiApps | acf-frontend-form-element |
| GDPR Cookie Consent Plugin for WordPress | webtoffee-cookie-consent |
| Geeky Bot – AI Sales Assistant for WooCommerce | geeky-bot |
| Geo Mashup | geo-mashup |
| GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | geodirectory |
| GiveWP – Donation Plugin and Fundraising Platform | give |
| Google Authenticator | google-authenticator |
| Groundhogg — CRM, Newsletters, and Marketing Automation | groundhogg |
| Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder | gutena-forms |
| Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | essential-blocks |
| Hide My WP Ghost – Security & Firewall | hide-my-wp |
| Houzez Property Feed | houzez-property-feed |
| HT Contact Form – Drag & Drop Form Builder for WordPress | ht-contactform |
| If-So Dynamic Content – Elementor & All Page Builders Personalization | if-so |
| Independent Analytics – WordPress Analytics Plugin | independent-analytics |
| Iptanus File Upload | wp-file-upload |
| JetEngine | jet-engine |
| JetFormBuilder — Dynamic Blocks Form Builder | jetformbuilder |
| JoomSport – for Sports: Team & League, Football, Hockey & more | joomsport-sports-league-results-management |
| JS Help Desk – AI-Powered Support & Ticketing System | js-support-ticket |
| Kadence WooCommerce Email Designer | kadence-woocommerce-email-designer |
| Kirki – Freeform Page Builder, Website Builder & Customizer | kirki |
| Layouts for WPBakery | layouts-for-wpbakery |
| LearnPress – WordPress LMS Plugin for Create and Sell Online Courses | learnpress |
| Legal Text Connector of the IT-Recht Kanzlei | legal-texts-connector-it-recht-kanzlei |
| Library Management System | library-management-system |
| LightSync Pro – Connect & Sync Cloud Assets | Lightroom, Canva, Figma, Dropbox & Shutterstock | lightsyncpro |
| Link Library | link-library |
| Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator | live-copy-paste |
| Login & Register Customizer – Forms, Popup, Profile & WooCommerce | easy-login-woocommerce |
| login-social | login-social |
| LWS Optimize – All-in-One Speed Booster & Cache Tools | lws-optimize |
| Mailmunch Forms for Mailchimp | mailchimp-forms-by-mailmunch |
| Material Dashboard | material-dashboard |
| Media Library Assistant | media-library-assistant |
| Membership Plugin – Kadence Memberships | restrict-content |
| Meow Gallery | meow-gallery |
| Mercado Pago payments for WooCommerce | woocommerce-mercadopago |
| MotoPress Hotel Booking | motopress-hotel-booking-lite |
| MStore API – Create Native Android & iOS Apps On The Cloud | mstore-api |
| Multi Uploader for Gravity Forms | gf-multi-uploader |
| MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions | dc-woocommerce-multi-vendor |
| Newsletters | newsletters-lite |
| NewStatPress | newstatpress |
| Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder | the-plus-addons-for-block-editor |
| Ninja Tables Pro | ninja-tables-pro |
| Ninja Tables – Easy Data Table Builder | ninja-tables |
| Online Scheduling and Appointment Booking System – Bookly | bookly-responsive-appointment-booking-tool |
| Order Delivery Date for WooCommerce | order-delivery-date-for-woocommerce |
| OTP Login With Phone Number, OTP Verification | login-with-phone-number |
| Page and Post Restriction | page-and-post-restriction |
| Participants Database | participants-database |
| Passster – Password Protect Pages and Content | content-protector |
| Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content | password-protected |
| Payment Button for PayPal | wp-paypal |
| Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery | nextgen-gallery |
| PiWeb Cancel order / Refund request for WooCommerce | cancel-order-request-woocommerce |
| Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery | pixel-gallery |
| Plugins Garbage Collector (Database Cleanup) | plugins-garbage-collector |
| Podcast Player – Your Podcasting Companion | podcast-player |
| Points and Rewards for WooCommerce | points-and-rewards-for-woocommerce |
| Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder | popup-maker |
| Post Grid Gutenberg Blocks – PostX | ultimate-post |
| POUCO Import Users | pouco-import-users |
| Powerkit – Supercharge your WordPress Site | powerkit |
| PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links | pretty-link |
| Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons | bdthemes-prime-slider-lite |
| Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping, AI & Social Channels | webappick-product-feed-for-woocommerce |
| Product Input Fields for WooCommerce | product-input-fields-for-woocommerce |
| Profile Extra Fields by BestWebSoft | profile-extra-fields |
| ProSolution WP Client | prosolution-wp-client |
| Quick Paypal Payments | quick-paypal-payments |
| Ray Enterprise Translation | lingotek-translation |
| ReactPress – Create React App for WordPress | reactpress |
| RealPress – Real Estate Plugin | realpress |
| Relevanssi Premium – A Better Search | relevanssi-premium |
| Relevanssi – A Better Search | relevanssi |
| Remote API | remote-api |
| REST API Log | wp-rest-api-log |
| RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator | feedzy-rss-feeds |
| s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions | s2member |
| Saitama Addon Pack | cc-addon-pack |
| Salon Booking System – Appointment Booking for Salons, Barbershops & Spas | salon-booking-system |
| Search Analytics for WP | search-analytics |
| SEO Redirection Plugin – 301 Redirect Manager | seo-redirection |
| Seraphinite Accelerator | seraphinite-accelerator |
| ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | woolentor-addons |
| Simple Link Directory Pro - AI Powered | simple-link-directory-pro |
| Simple Membership | simple-membership |
| Simple Yearly Archive | simple-yearly-archive |
| Simply Schedule Appointments | simply-schedule-appointments |
| SiteGuard WP Plugin | siteguard |
| SKT Skill Bar | skt-skill-bar |
| Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider | ml-slider |
| Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated | slim-seo |
| Smart Admin Assistant – Dashboard and Site Enhancements | smart-admin-assistant |
| Smart Popup by Supsystic | popup-by-supsystic |
| Smash Balloon Social Photo Feed – Easy Social Feeds Plugin | instagram-feed |
| SMEPay: UPI Gateway for WooCommerce | smepay-for-woocommerce |
| SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery | sms-alert |
| Solace Extra | solace-extra |
| SOOZ – AI for SEO – Bulk Generate Focus Keyphrases, Metadata, Alt Text (SEO Autopilot) | ai-for-seo |
| Squeeze – Image Optimization & Compression, WEBP Conversion | squeeze |
| Stream – Activity Log & Audit Trail | stream |
| Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions | wp-full-stripe-free |
| Subscribe to Comments | subscribe-to-comments |
| Subscribe2 – Form, Email Subscribers & Newsletters | subscribe2 |
| Subscriptions for WooCommerce | subscriptions-for-woocommerce |
| Super Progressive Web Apps | super-progressive-web-apps |
| SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments | surecart |
| Survey Maker by AYS | survey-maker |
| TableOn – WordPress Posts Table Filterable | posts-table-filterable |
| Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! | templately |
| Term Pages | term-pages |
| Theme My Login | theme-my-login |
| Thrive Visual Editor | thrive-visual-editor |
| Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid | boldgrid-backup |
| Tracking Code Manager | tracking-code-manager |
| TranslatePress – Translate Multilingual sites with AI Translation | translatepress-multilingual |
| TrueBooker – Appointment Booking and Scheduler System | truebooker-appointment-booking |
| Type Hub | typehub |
| Udimi Tools | udimi-optin |
| Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin | ultimate-member |
| Ultimate Post Kit | ultimate-post-kit |
| Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor | ultimate-store-kit |
| Ultra Addons for Contact Form 7 | ultimate-addons-for-contact-form-7 |
| Unlimited Elements For Elementor | unlimited-elements-for-elementor |
| User Access Manager | user-access-manager |
| UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP | userswp |
| VikAppointments Services Booking Calendar | vikappointments |
| VikRentItems Flexible Rental Management System | vikrentitems |
| Visitor Traffic Real Time Statistics pro | visitors-traffic-real-time-statistics-pro |
| Vitepos | vitepos |
| Webinfos | webinfos |
| wiseCampaign – WooCommerce Flash Sale, Countdown Timer, Discount Rules & Sales Notification | wisecampaign |
| WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards | wp-data-access |
| WP Directory Kit | wpdirectorykit |
| WP Events Manager | wp-events-manager |
| WP Go Maps – Google Map, OpenStreetMap, Leaflet Map | wp-google-maps |
| WP Job Portal – AI-Powered Recruitment System for Company or Job Board website | wp-job-portal |
| Wp Maps | wp-maps |
| WP Maps Pro | wp-google-map-gold |
| WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters | wp-google-map-plugin |
| WP Photo Album Plus | wp-photo-album-plus |
| WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars | wp-post-author |
| WP Real IP-based Access Control | wp-real-ip-based-access-control |
| WP Social Avatar | wp-social-avatar |
| WP Statistics – Simple, privacy-friendly Google Analytics alternative | wp-statistics |
| WP Travel Engine – Tour Booking Plugin – Tour Operator Software | wp-travel-engine |
| WP Travel – Ultimate Travel Booking System, Tour Management Engine | wp-travel |
| WP TripAdvisor Review Slider | wp-tripadvisor-review-slider |
| WP-Stats | wp-stats |
| WPBruiser {no- Captcha anti-Spam} | goodbye-captcha |
| WPC Order Tip for WooCommerce | wpc-order-tip |
| WPCargo Track & Trace | wpcargo |
| WPFormify – Stripe Payments with Form and Checkout | wpformify |
| WPIDE – File Manager & Code Editor | wpide |
| WPJAM Basic | wpjam-basic |
| WPMU DEV Dashboard | wpmudev-updates |
| Xpro Addons — 150+ Widgets for Elementor | xpro-elementor-addons |
| YITH WooCommerce Product Gallery & Image Zoom | yith-woocommerce-zoom-magnifier |
| YMC Filter | ymc-smart-filter |
| YOP Poll | yop-poll |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| 69 Clothing | Brand Store & Fashion Boutique WordPress Theme | clothing69 |
| Abelle | abelle |
| Abogado - Lawyer WordPress Theme | abogado |
| Accalia | Dermatology Clinic & Cosmetology WordPress Theme + Elementor | accalia |
| Accelerate | accelerate |
| Adrena | Airsoft Club & Paintball WordPress Theme | adrena |
| Advice - Psychology, Therapy & Counseling Theme | advice |
| Agora — Event & Conference WordPress Theme | agora |
| Agricola - Agriculture & Organic Farm Theme | agricola |
| Agrion - Agriculture Farm & Farmers Template Kit | agrion |
| AI ANN - AI Generator & AI Agency WordPress Theme | ann |
| AI Hub - Startup & Technology WordPress Theme | aihub |
| ColorFolio | colorfolio |
| Lenxel WP | lenxel-wp |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
Affected Software
AI Copilot – Content Generator [ai-copilot-content-generator]
Researcher
Affected Software
Frontend Admin by DynamiApps [acf-frontend-form-element]
Researcher
Affected Software
Kadence WooCommerce Email Designer [kadence-woocommerce-email-designer]
Researcher
Affected Software
login-social [login-social]
Researcher
Affected Software
OTP Login With Phone Number, OTP Verification [login-with-phone-number]
Researcher
Affected Software
POUCO Import Users [pouco-import-users]
Researcher
Affected Software
Product Input Fields for WooCommerce [product-input-fields-for-woocommerce]
Researcher
Affected Software
TrueBooker – Appointment Booking and Scheduler System [truebooker-appointment-booking]
Researcher
Affected Software
TrueBooker – Appointment Booking and Scheduler System [truebooker-appointment-booking]
Researcher
Affected Software
Webinfos [webinfos]
Researcher
Affected Software
Membership Plugin – Kadence Memberships [restrict-content]
Researcher
Affected Software
Easy Post Submission – Frontend Posting, Guest Publishing & Submit Content for WordPress [easy-post-submission]
Researcher
Affected Software
Multi Uploader for Gravity Forms [gf-multi-uploader]
Researcher
Affected Software
Researcher
Affected Software
File Manager [file-manager]
Researcher
Affected Software
Researcher
Affected Software
Affected Software
Smart Popup by Supsystic [popup-by-supsystic]
Researcher
Affected Software
Researcher
Affected Software
Vitepos [vitepos]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
A.Williams [alisha-williams]
Researcher
Affected Software
Abogado - Lawyer WordPress Theme [abogado]
Researcher
Affected Software
Researcher
Adrena | Airsoft Club & Paintball WordPress Theme <= 1.2.14 - Unauthenticated PHP Object Injection
8.1
Affected Software
Researcher
Advice - Psychology, Therapy & Counseling Theme <= 1.18.0 - Unauthenticated PHP Object Injection
8.1
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Agricola - Agriculture & Organic Farm Theme [agricola]
Researcher
AI ANN - AI Generator & AI Agency WordPress Theme <= 1.29.0 - Unauthenticated PHP Object Injection
8.1
Affected Software
Researcher
Affected Software
Ajax Search Lite – Live Search & Filter [ajax-search-lite]
Researcher
Affected Software
Ajax Search Lite – Live Search & Filter [ajax-search-lite]
Researcher
Affected Software
Researcher
Affected Software
Affected Software
Researcher
Affected Software
Geo Mashup [geo-mashup]
Researcher
Affected Software
Researcher
Affected Software
Login & Register Customizer – Forms, Popup, Profile & WooCommerce [easy-login-woocommerce]
Researcher
Affected Software
Mailmunch Forms for Mailchimp [mailchimp-forms-by-mailmunch]
Researcher
Affected Software
WP Maps Pro [wp-google-map-gold]
Researcher
Affected Software
Newsletters [newsletters-lite]
Researcher
Affected Software
Remote API [remote-api]
Researcher
Affected Software
Search Analytics for WP [search-analytics]
Researchers
Affected Software
WPBruiser {no- Captcha anti-Spam} [goodbye-captcha]
Researcher
Affected Software
WPMU DEV Dashboard [wpmudev-updates]
Researcher
Affected Software
Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
AI Copilot – Content Generator [ai-copilot-content-generator]
Researcher
ColorFolio - Freelance Designer WordPress <= 1.3 - Authenticated (Subscriber+) PHP Object Injection
7.5
Affected Software
ColorFolio [colorfolio]
Researcher
Patch Status
Patched
Patched
Published
Aug 4, 2026
Aug 4, 2026
Affected Software
Contact Form Extender for Divi – Submissions DB & Extra Fields [contact-form-extender-for-divi-builder]
Researcher
Affected Software
WP Directory Kit [wpdirectorykit]
Researcher
Affected Software
Iptanus File Upload [wp-file-upload]
Researcher
Affected Software
Iptanus File Upload [wp-file-upload]
Researcher
Affected Software
Wp Maps [wp-maps]
Researcher
Affected Software
WP Maps Pro [wp-google-map-gold]
Researcher
Online Scheduling and Appointment Booking System – Bookly < 27.8 - Unauthenticated SQL Injection
7.5
Affected Software
Online Scheduling and Appointment Booking System – Bookly [bookly-responsive-appointment-booking-tool]
Researcher
Affected Software
Page and Post Restriction [page-and-post-restriction]
Researcher
Affected Software
Participants Database [participants-database]
Researcher
Affected Software
ProSolution WP Client [prosolution-wp-client]
Affected Software
ProSolution WP Client [prosolution-wp-client]
Researcher
Affected Software
RealPress – Real Estate Plugin [realpress]
Researcher
Affected Software
TableOn – WordPress Posts Table Filterable [posts-table-filterable]
Affected Software
Term Pages [term-pages]
Researcher
Affected Software
VikAppointments Services Booking Calendar [vikappointments]
Researcher
Affected Software
Researcher
Affected Software
WP Go Maps – Google Map, OpenStreetMap, Leaflet Map [wp-google-maps]
Researcher
Affected Software
WPCargo Track & Trace [wpcargo]
Researcher
Affected Software
FoodBoxBooker [foodboxbooker]
Researcher
Affected Software
Material Dashboard [material-dashboard]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Advanced AJAX Product Filters [woocommerce-ajax-filters]
Researcher
Affected Software
Autopay [platnosci-online-blue-media]
Researcher
Affected Software
Backup Migration [backup-backup]
Researcher
Affected Software
Download Manager [download-manager]
Researcher
Affected Software
Dynamic Pricing With Discount Rules for WooCommerce [aco-woo-dynamic-pricing]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Events Manager – Calendar, Bookings, Tickets, and more! [events-manager]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Geeky Bot – AI Sales Assistant for WooCommerce [geeky-bot]
Researcher
Affected Software
Geo Mashup [geo-mashup]
Researcher
Affected Software
Houzez Property Feed [houzez-property-feed]
Researcher
Affected Software
Independent Analytics – WordPress Analytics Plugin [independent-analytics]
Researcher
Affected Software
JetEngine [jet-engine]
Researcher
Affected Software
LWS Optimize – All-in-One Speed Booster & Cache Tools [lws-optimize]
Researcher
Affected Software
Media Library Assistant [media-library-assistant]
Researcher
Affected Software
NewStatPress [newstatpress]
Researcher
Affected Software
Ninja Tables – Easy Data Table Builder [ninja-tables]
Researcher
Order Delivery Date for WooCommerce <= 4.6.0 - Authenticated (Shop Manager+) Privilege Escalation
7.2
Affected Software
Order Delivery Date for WooCommerce [order-delivery-date-for-woocommerce]
Researcher
Affected Software
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery]
Researcher
Affected Software
Podcast Player – Your Podcasting Companion [podcast-player]
Researcher
Affected Software
Researcher
Affected Software
Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping, AI & Social Channels [webappick-product-feed-for-woocommerce]
Researcher
Affected Software
ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin [woolentor-addons]
Affected Software
SiteGuard WP Plugin [siteguard]
Researcher
Affected Software
Researcher
Affected Software
Survey Maker by AYS [survey-maker]
Researcher
Affected Software
Thrive Visual Editor [thrive-visual-editor]
Researcher
Affected Software
TranslatePress – Translate Multilingual sites with AI Translation [translatepress-multilingual]
Researcher
Affected Software
VikRentItems Flexible Rental Management System [vikrentitems]
Researcher
Affected Software
Visitor Traffic Real Time Statistics pro [visitors-traffic-real-time-statistics-pro]
Researcher
Affected Software
Researcher
Affected Software
WP Real IP-based Access Control [wp-real-ip-based-access-control]
Researcher
Affected Software
Researcher
Affected Software
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce [wp-event-solution]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
File Manager [file-manager]
Researcher
Affected Software
Content Views – Post Grid & Filter (Shortcode, Blocks, Elementor Widgets) [content-views-query-and-display-post-page]
Researcher
Affected Software
Cost Calculator Builder [cost-calculator-builder]
Researcher
Affected Software
WP Directory Kit [wpdirectorykit]
Researcher
Affected Software
Researcher
Groundhogg — CRM, Newsletters, and Marketing Automation <= 4.5.2 - Insecure Direct Object Reference
6.5
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Layouts for WPBakery [layouts-for-wpbakery]
Researchers
Affected Software
Library Management System [library-management-system]
Researcher
Affected Software
WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters [wp-google-map-plugin]
Researcher
Relevanssi <= 4.27.1 and Relevanssi Premium <= 2.30.2 - Authenticated (Contributor+) SQL Injection
6.5
Affected Software
Relevanssi – A Better Search [relevanssi]
Relevanssi Premium – A Better Search [relevanssi-premium]
Researcher
Affected Software
Stream – Activity Log & Audit Trail [stream]
Researcher
Affected Software
Udimi Tools [udimi-optin]
Researcher
Unlimited Elements For Elementor <= 2.0.14 - Authenticated (Contributor+) Arbitrary File Download
6.5
Affected Software
Unlimited Elements For Elementor [unlimited-elements-for-elementor]
Researcher
Affected Software
User Access Manager [user-access-manager]
Researcher
Affected Software
Visitor Traffic Real Time Statistics pro [visitors-traffic-real-time-statistics-pro]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
AfterShip Tracking – All-In-One WooCommerce Order Tracking (Free plan available) [aftership-woocommerce-tracking]
Researcher
Affected Software
All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos [all-in-one-video-gallery]
Researcher
Affected Software
BNE Testimonials [bne-testimonials]
Researcher
Affected Software
Easy Accordion – AI-Powered FAQ & Accordion Blocks, Product FAQ [easy-accordion-free]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Meow Gallery [meow-gallery]
Researcher
Affected Software
Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder [the-plus-addons-for-block-editor]
Researcher
PostX <= 5.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Comments Block
6.4
Affected Software
Post Grid Gutenberg Blocks – PostX [ultimate-post]
Researcher
Affected Software
Powerkit – Supercharge your WordPress Site [powerkit]
Researcher
Affected Software
Profile Extra Fields by BestWebSoft [profile-extra-fields]
Researcher
Affected Software
Researcher
Affected Software
Saitama Addon Pack [cc-addon-pack]
Researcher
Affected Software
Simple Yearly Archive [simple-yearly-archive]
Researcher
Affected Software
SKT Skill Bar [skt-skill-bar]
Researcher
Affected Software
Researcher
Affected Software
Ultra Addons for Contact Form 7 [ultimate-addons-for-contact-form-7]
Researcher
Affected Software
Researcher
Patch Status
Patched
Patched
Published
Aug 8, 2026
Aug 8, 2026
Affected Software
WordPress [wordpress]
Researcher
Affected Software
YMC Filter [ymc-smart-filter]
Researcher
Affected Software
YMC Filter [ymc-smart-filter]
Researcher
Affected Software
Researcher
Affected Software
Football Pool [football-pool]
Researcher
Affected Software
Link Library [link-library]
Researcher
Affected Software
Seraphinite Accelerator [seraphinite-accelerator]
Researcher
Affected Software
Subscribe2 – Form, Email Subscribers & Newsletters [subscribe2]
Researcher
Affected Software
TranslatePress – Translate Multilingual sites with AI Translation [translatepress-multilingual]
Researcher
Affected Software
WordPress [wordpress]
Researcher
Patch Status
Patched
Patched
Published
Aug 8, 2026
Aug 8, 2026
Affected Software
WordPress [wordpress]
Researcher
Affected Software
Subscribe to Comments [subscribe-to-comments]
Researcher
Affected Software
Ad Inserter – Ad Manager & AdSense Ads [ad-inserter]
Researcher
Affected Software
Admin Safety Guard — Login Security, Limit Logins, 2FA & Brute Force Protection [admin-safety-guard]
Researcher
Affected Software
Advanced Classifieds & Directory Pro [advanced-classifieds-and-directory-pro]
Researcher
Affected Software
AI ChatBot for WooCommerce – WoowBot [woowbot-woocommerce-chatbot]
Researcher
Affected Software
Researcher
Affected Software
Appointment Hour Booking – Booking Calendar [appointment-hour-booking]
Researchers
Affected Software
AutoNetTV Relay [autonettv-relay]
Researcher
Affected Software
File Manager [file-manager]
Researcher
Affected Software
Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) [clink-gateway-for-woocommerce]
Researcher
Affected Software
PiWeb Cancel order / Refund request for WooCommerce [cancel-order-request-woocommerce]
Researcher
Affected Software
CAPTCHA 4WP – Antispam CAPTCHA solution for WordPress [advanced-nocaptcha-recaptcha]
Researcher
Affected Software
Car Rental Manager – Online Vehicle Booking System [car-rental-manager]
Researcher
Affected Software
Contact Form to Any API [contact-form-to-any-api]
Researcher
Affected Software
Custom CSS and JavaScript [custom-css-and-javascript]
Researcher
Affected Software
Researcher
Affected Software
Direct Payments for WooCommerce – Bank Transfer, Mobile Money, Crypto and Peer-to-Peer (P2P) Payments [direct-payments-for-woocommerce]
Researcher
Affected Software
Download Monitor [download-monitor]
Researcher
Affected Software
Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons [bdthemes-element-pack-lite]
Researcher
Affected Software
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks]
Researcher
Affected Software
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks]
Researcher
Affected Software
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce [wp-event-solution]
Researcher
Affected Software
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce [wp-event-solution]
Researcher
Affected Software
Export Import Menus [export-import-menus]
Researcher
Affected Software
Featured Video Plus [featured-video-plus]
Researcher
Affected Software
FlxWoo [flx-woo]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
HT Contact Form – Drag & Drop Form Builder for WordPress [ht-contactform]
Researcher
Affected Software
JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder]
Researcher
Affected Software
Legal Text Connector of the IT-Recht Kanzlei [legal-texts-connector-it-recht-kanzlei]
Researcher
Affected Software
Login & Register Customizer – Forms, Popup, Profile & WooCommerce [easy-login-woocommerce]
Researcher
Mercado Pago payments for WooCommerce <= 8.9.0 - Unauthenticated Insecure Direct Object Reference
5.3
Affected Software
Mercado Pago payments for WooCommerce [woocommerce-mercadopago]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions [dc-woocommerce-multi-vendor]
Researcher
Affected Software
Passster – Password Protect Pages and Content [content-protector]
Researcher
Affected Software
Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content [password-protected]
Researcher
Affected Software
Payment Button for PayPal [wp-paypal]
Researcher
Affected Software
WP Photo Album Plus [wp-photo-album-plus]
Researcher
Affected Software
Points and Rewards for WooCommerce [points-and-rewards-for-woocommerce]
Researcher
Affected Software
Quick Paypal Payments [quick-paypal-payments]
Researcher
Affected Software
REST API Log [wp-rest-api-log]
Researcher
Affected Software
Accept PayPal & Stripe with Subscriptions for WooCommerce [restore-paypal-standard-for-woocommerce]
Researcher
Affected Software
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas [salon-booking-system]
Researcher
Affected Software
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas [salon-booking-system]
Researcher
Affected Software
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas [salon-booking-system]
Researcher
Salon Booking System – Free Version <= 10.30.33 - Unauthenticated Booking Information Disclosure
5.3
Affected Software
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas [salon-booking-system]
Researcher
Affected Software
Simple Membership [simple-membership]
Researcher
Affected Software
Simply Schedule Appointments [simply-schedule-appointments]
Researcher
Affected Software
SMEPay: UPI Gateway for WooCommerce [smepay-for-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
Subscriptions for WooCommerce [subscriptions-for-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
GDPR Cookie Consent Plugin for WordPress [webtoffee-cookie-consent]
Researcher
Patch Status
Patched
Patched
Published
Aug 8, 2026
Aug 8, 2026
Affected Software
WordPress [wordpress]
Researcher
Affected Software
Hide My WP Ghost – Security & Firewall [hide-my-wp]
Researcher
Affected Software
WP Social Avatar [wp-social-avatar]
Researcher
Affected Software
Researcher
Affected Software
WP Travel Engine – Tour Booking Plugin – Tour Operator Software [wp-travel-engine]
Researcher
Affected Software
WPC Order Tip for WooCommerce [wpc-order-tip]
Researcher
Affected Software
YITH WooCommerce Product Gallery & Image Zoom [yith-woocommerce-zoom-magnifier]
Researcher
Affected Software
YOP Poll [yop-poll]
Researcher
Affected Software
Researcher
Affected Software
JoomSport – for Sports: Team & League, Football, Hockey & more [joomsport-sports-league-results-management]
Researcher
Affected Software
Researcher
Affected Software
Vitepos [vitepos]
Researcher
WordPress Core <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Quick Edit
4.9
Patch Status
Patched
Patched
Published
Aug 8, 2026
Aug 8, 2026
Affected Software
WordPress [wordpress]
Researchers
Affected Software
WP TripAdvisor Review Slider [wp-tripadvisor-review-slider]
Researcher
Affected Software
Smash Balloon Social Photo Feed – Easy Social Feeds Plugin [instagram-feed]
Researcher
Affected Software
Subscriptions for WooCommerce [subscriptions-for-woocommerce]
Researcher
Affected Software
Advanced Excerpt [advanced-excerpt]
Researcher
Affected Software
DTX – Dynamic Text Extension for Contact Form 7 [contact-form-7-dynamic-text-extension]
Researcher
Affected Software
FiboSearch – Ajax Search for WooCommerce [ajax-search-for-woocommerce]
Researcher
Affected Software
Super Progressive Web Apps [super-progressive-web-apps]
Researcher
Affected Software
Academy LMS [academy]
Researcher
Affected Software
Accelerate [accelerate]
Researcher
Affected Software
Advanced Custom Fields: Font Awesome Field [advanced-custom-fields-font-awesome]
Researcher
Affected Software
Booking for Appointments and Events Calendar – Amelia [ameliabooking]
Researcher
Affected Software
File Manager [file-manager]
Researcher
Affected Software
Block User Account [block-user-account]
Researcher
Affected Software
Church Admin [church-admin]
Researcher
Affected Software
Researcher
Content Protector (Passster) <= 4.3.6 - Authenticated (Contributor+) Sensitive Information Exposure
4.3
Affected Software
Passster – Password Protect Pages and Content [content-protector]
Researcher
Affected Software
Duplicate Post [duplicate-post-littlebizzy]
Researcher
Affected Software
CubeWP Framework [cubewp-framework]
Researcher
Affected Software
Customer Reviews for WooCommerce [customer-reviews-woocommerce]
Researcher
Affected Software
WP Directory Kit [wpdirectorykit]
Researcher
Affected Software
WP Directory Kit [wpdirectorykit]
Researcher
Affected Software
WP Directory Kit [wpdirectorykit]
Researcher
Affected Software
Researcher
Affected Software
Estatik Real Estate Plugin [estatik]
Researcher
Affected Software
WP Events Manager [wp-events-manager]
Researcher
Affected Software
F4 Post Tree [f4-tree]
Researcher
Affected Software
FoodBoxBooker [foodboxbooker]
Researcher
Affected Software
Frontend Admin by DynamiApps [acf-frontend-form-element]
Researcher
Affected Software
Frontend Admin by DynamiApps [acf-frontend-form-element]
Researcher
Affected Software
Google Authenticator [google-authenticator]
Researcher
Affected Software
MotoPress Hotel Booking [motopress-hotel-booking-lite]
Researcher
Affected Software
JS Help Desk – AI-Powered Support & Ticketing System [js-support-ticket]
Researcher
Affected Software
MotoPress Hotel Booking [motopress-hotel-booking-lite]
Researcher
Affected Software
Researcher
Affected Software
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions [dc-woocommerce-multi-vendor]
Researcher
Affected Software
Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder [the-plus-addons-for-block-editor]
Researcher
Affected Software
Plugins Garbage Collector (Database Cleanup) [plugins-garbage-collector]
Researcher
Affected Software
Ray Enterprise Translation [lingotek-translation]
Researcher
Affected Software
ReactPress – Create React App for WordPress [reactpress]
Researcher
Affected Software
Researcher
Affected Software
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas [salon-booking-system]
Researcher
Affected Software
SEO Redirection Plugin – 301 Redirect Manager [seo-redirection]
Researcher
Affected Software
Simple Link Directory Pro - AI Powered [simple-link-directory-pro]
Researcher
Affected Software
Researcher
Affected Software
Solace Extra [solace-extra]
Researcher
Affected Software
Solace Extra [solace-extra]
Researcher
Affected Software
Researcher
Affected Software
Subscriptions for WooCommerce [subscriptions-for-woocommerce]
Researcher
Affected Software
Theme My Login [theme-my-login]
Researcher
Affected Software
Tracking Code Manager [tracking-code-manager]
Researcher
Affected Software
Unlimited Elements For Elementor [unlimited-elements-for-elementor]
Researcher
Patch Status
Patched
Patched
Published
Aug 8, 2026
Aug 8, 2026
Affected Software
WordPress [wordpress]
Researcher
Affected Software
WPJAM Basic [wpjam-basic]
Researcher
Affected Software
Xpro Addons — 150+ Widgets for Elementor [xpro-elementor-addons]
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Comments