Wordfence Intelligence Weekly WordPress Vulnerability Report (July 27, 2026 to August 2, 2026)
Last week, there were 301 vulnerabilities disclosed in 236 WordPress Plugins and 2 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 150 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to implement layered security, aligning with our overarching mission to secure WordPress with defense in depth strategies. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report. As the world’s leading quality vulnerability database provider for WordPress, site owners can rest assured knowing Wordfence has their back.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 35,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
New Firewall Rules Deployed Last Week
The Wordfence Threat Intelligence Team reviews each vulnerability to determine impact and severity, along with assessing the likelihood of exploitation, to verify that the Wordfence Firewall provides sufficient protection.
The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our Premium, Care, and Response customers last week:
- WPMU DEV Dashboard <= 5.0.0 – Authentication Bypass to Arbitrary Plugin Installation (Remote Code Execution) via Forged WDP_AUTH HMAC on ?wpmudev-hub= Endpoint
- Advanced Responsive Video Embedder for Rumble, Odysee, YouTube, Vimeo, Kick … 10.8.7 – Unauthenticated Authentication Bypass via Hardcoded Backdoor in ‘_wplogin’ Parameter
- WAF-RULE-935 – Data redacted while we work with the vendor on a patch.
- WAF-RULE-937 – Data redacted while we work with the vendor on a patch.
Wordfence Premium, Care, and Response customers received this protection immediately, while users still running the free version of Wordfence will receive this enhanced protection after a 30 day delay.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 273 |
| Unpatched | 28 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Low Severity | 1 |
| Medium Severity | 217 |
| High Severity | 68 |
| Critical Severity | 15 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 91 |
| Missing Authorization | 69 |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 34 |
| Exposure of Sensitive Information to an Unauthorized Actor | 25 |
| Authorization Bypass Through User-Controlled Key | 22 |
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 11 |
| Cross-Site Request Forgery (CSRF) | 10 |
| Server-Side Request Forgery (SSRF) | 9 |
| Unrestricted Upload of File with Dangerous Type | 7 |
| Improper Privilege Management | 5 |
| Deserialization of Untrusted Data | 4 |
| Improper Control of Generation of Code ('Code Injection') | 4 |
| Authentication Bypass by Alternate Name | 1 |
| Authentication Bypass Using an Alternate Path or Channel | 1 |
| Client-Side Enforcement of Server-Side Security | 1 |
| Embedded Malicious Code | 1 |
| External Control of Assumed-Immutable Web Parameter | 1 |
| Improper Authentication | 1 |
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 1 |
| Incorrect Authorization | 1 |
| Incorrect Privilege Assignment | 1 |
| Unverified Password Change | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 49 | |
| 26 | |
| 11 | |
| 8 | |
| 7 | |
| 6 | |
| 6 | |
| 5 | |
| 5 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Ad Invalid Click Protector (AICP) | ad-invalid-click-protector |
| Admin and Site Enhancements (ASE) Pro | admin-site-enhancements-pro |
| Admin Columns for ACF Fields | admin-columns-for-acf-fields |
| Advanced Form Integration — Connect Forms to 300+ Apps | advanced-form-integration |
| Advanced Responsive Video Embedder for Rumble, Odysee, YouTube, Vimeo, Kick … | advanced-responsive-video-embedder |
| Advanced Shipment Tracking for WooCommerce | woo-advanced-shipment-tracking |
| Advanced Views – Display Framework for Gutenberg & Elementor | acf-views |
| Advanced Woo Labels – Product Labels & Badges for WooCommerce | advanced-woo-labels |
| AffiliateWP | affiliate-wp |
| AI Copilot – Content Generator | ai-copilot-content-generator |
| AI Engine – The Chatbot, AI Framework & MCP for WordPress | ai-engine |
| Ajax Load More – Infinite Scroll, Load More, & Lazy Load | ajax-load-more |
| Animation Addons for Elementor – GSAP Motion Elementor Addons & Website Templates | animation-addons-for-elementor |
| AnsPress – Question and answer | anspress-question-answer |
| Anti Spam and list cleaner – AcyChecker | acychecker |
| Auto Featured Image (Auto Post Thumbnail) | auto-post-thumbnail |
| BackWPup – WordPress Backup & Restore Plugin | backwpup |
| Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots | bp-better-messages |
| Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder | bit-form |
| Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation | bit-integrations |
| Booking Calendar | booking |
| Booking for Appointments and Events Calendar – Amelia | ameliabooking |
| Booking System Trafft | booking-system-trafft |
| BOX NOW Delivery Croatia + Slovenia | box-now-delivery-croatia |
| Breakdance | breakdance |
| Brizy – Page Builder | brizy |
| BuddyPress | buddypress |
| Business Directory Plugin – Easy Listing & Member Directories for WordPress | business-directory-plugin |
| Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) | charitable |
| Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist | bit-assist |
| Chaty Pro | chaty-pro |
| Checkimate — WooCommerce Checkout, Abandoned Cart Recovery & Order Bumps | checkimate |
| Checkout Field Editor for WooCommerce – Checkout Manager | checkout-field-editor-and-manager-for-woocommerce |
| Child Pages Card | child-pages-card |
| Clever Mega Menu for Visual Composer | clever-mega-menu |
| Codeless Page Builder | codeless-page-builder |
| Colissimo shipping methods for WooCommerce | colissimo-shipping-methods-for-woocommerce |
| Contact Form to Any API | contact-form-to-any-api |
| Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | contest-gallery |
| Cost Calculator Builder PRO | cost-calculator-builder-pro |
| Cozy Blocks – Website Builder for Block Editor | 59 Gutenberg Blocks, 700+ Patterns, 50+ Templates | cozy-addons |
| Creative Mail – Easier WordPress & WooCommerce Email Marketing | creative-mail-by-constant-contact |
| CubeWP Framework | cubewp-framework |
| Database Collation Fix | database-collation-fix |
| Database for CF7 | database-for-cf7 |
| Database for Contact Form 7, WPforms, Elementor forms | contact-form-entries |
| Demi – One Click Demo Import, Backup & Site Migration | demi-backup-migration |
| DHL Shipping Germany for WooCommerce | dhl-for-woocommerce |
| Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy | dokan-lite |
| Download Manager | download-manager |
| Drag and Drop Multiple File Upload for WooCommerce | drag-and-drop-multiple-file-upload-for-woocommerce |
| Easy Appointments | easy-appointments |
| Easy Digital Downloads – eCommerce Payments and Subscriptions made easy | easy-digital-downloads |
| Easy Integration for Dropbox – File Manager | easy-dropbox-integration |
| Easy PayPal & Stripe Buy Now Button | wp-ecommerce-paypal |
| Easy Property Listings | easy-property-listings |
| Eazy Plugin Manager | plugins-on-steroids |
| Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons | bdthemes-element-pack-lite |
| EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents | embedpress |
| EONSR AEO Agent | eonsr-aeo-agent |
| Essential Addons for Elementor – Popular Elementor Templates & Widgets | essential-addons-for-elementor-lite |
| Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar | mage-eventpress |
| Event Tickets and Registration | event-tickets |
| Events Manager – Calendar, Bookings, Tickets, and more! | events-manager |
| Exclusive Addons for Elementor | exclusive-addons-for-elementor |
| Export User Data | export-user-data |
| Extra Checkout Options - addon for Extra Product Options plugin | woocommerce-tm-extra-checkout-options-addon |
| Facturación Electrónica Costa Rica | factura-electronica-cr |
| Five Star Restaurant Reservations – WordPress Booking Plugin | restaurant-reservations |
| FleekDash V2 | fleekdash |
| Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder | fluentform |
| Fluent Support – Helpdesk & Customer Support Ticket System | fluent-support |
| FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration | fluent-boards |
| FormCraft | formcraft |
| FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More | formgent |
| Formidable Forms Signature Online Contract Automation | forms-signature-formidable-online-contract-automation |
| Frontend File Manager Plugin | nmedia-user-file-uploader |
| FundEngine – Donation and Crowdfunding Platform | wp-fundraising-donation |
| FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) | fusewp |
| Gallery PhotoBlocks | photoblocks-grid-gallery |
| GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI | gamipress |
| GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law | gdpr-cookie-compliance |
| GenerateBlocks | generateblocks |
| GEO Plugin by Squirrly SEO | squirrly-seo |
| GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | geodirectory |
| GetGenie – AI SEO Assistant & Content Writer with Keyword Research, AEO & GEO | getgenie |
| GiveWP – Donation Plugin and Fundraising Platform | give |
| GSheetConnector – CF7 Google Sheets Connector & Save CF7 Entries to Database | cf7-google-sheets-connector |
| GTM4WP – A Google Tag Manager (GTM) plugin for WordPress | duracelltomi-google-tag-manager |
| Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder | gutena-forms |
| HBook - Hotel booking system - WordPress Plugin | hbook |
| Icegram Engage – Popups, Optins, CTAs & Lead Generation | icegram |
| Icegram Mailer – Reliable Email Deliverability, No-code SMTP Replacement & Email logs | icegram-mailer |
| Improved Save Button | improved-save-button |
| Insert Headers and Footers Code – HT Script | insert-headers-and-footers-script |
| Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | jeg-elementor-kit |
| JetBlocks for Elementor | jet-blocks |
| JetEngine | jet-engine |
| JetReviews | jet-reviews |
| JetSearch | jet-search |
| Kadence Blocks — Page Builder Toolkit for Gutenberg Editor | kadence-blocks |
| Kali Forms — Contact Form & Drag-and-Drop Builder | kali-forms |
| Kirki – Freeform Page Builder, Website Builder & Customizer | kirki |
| Klubraum Membership Request | klubraum-membership-request |
| LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes | lifterlms |
| Link Library | link-library |
| Location Weather – WordPress Weather Forecast, Air Quality & Weather Widget | location-weather |
| LWS Optimize – All-in-One Speed Booster & Cache Tools | lws-optimize |
| MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder | mailchimp-subscribe-sm |
| MailerPress – Email Marketing, Newsletter, Email Automation & WooCommerce Emails | mailerpress |
| MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. | mailoptin |
| Mapster WP Maps | mapster-wp-maps |
| MasterStudy LMS WordPress Plugin – for Online Courses and Education | masterstudy-lms-learning-management-system |
| Media Cleaner: Clean your WordPress! | media-cleaner |
| Message Filter for Contact Form 7 | cf7-message-filter |
| Meta Box AIO | meta-box-aio |
| Meta Box – A Framework for Dynamic Websites | meta-box |
| Meta for WooCommerce | facebook-for-woocommerce |
| Meta pixel for WordPress | official-facebook-pixel |
| miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) | miniorange-2-factor-authentication |
| miniOrange OTP Login, Verification and SMS Notifications | miniorange-otp-verification |
| MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings | mlsimport |
| MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) | google-analytics-for-wordpress |
| MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions | dc-woocommerce-multi-vendor |
| Narrative Publisher | narrative-so |
| Nested Pages | wp-nested-pages |
| Newsletters | newsletters-lite |
| NEX-Forms – Ultimate Forms Plugin for WordPress | nex-forms-express-wp-form-builder |
| Online Scheduling and Appointment Booking System – Bookly | bookly-responsive-appointment-booking-tool |
| Open User Map – Interactive Leaflet Maps | open-user-map |
| Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More | themeisle-companion |
| Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction | paid-member-subscriptions |
| Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions | paid-memberships-pro |
| Passster – Password Protect Pages and Content | content-protector |
| Payment forms, Buy now buttons, and Invoicing System | GetPaid | invoicing |
| Payment Gateway for Redsys & WooCommerce Lite | woo-redsys-gateway-light |
| PDFDraft – Drag & Drop PDF Builder, PDF Viewer, Embed & Download PDF, Certificate & Invoice Designer | pdfdraft |
| PeproDev WooCommerce Receipt Uploader | pepro-bacs-receipt-upload-for-woocommerce |
| Photonic Gallery & Lightbox for Flickr, SmugMug & Others | photonic |
| PickPlugins Question Answer | question-answer |
| Pinpoint Booking System – Version 2 | booking-system |
| Pixelavo – Server Side Tracking & Pixel + AI Ads Tools | pixelavo |
| PixelYourSite Pro – Your smart PIXEL (TAG) Manager | pixelyoursite-pro |
| PixelYourSite – Your smart PIXEL (TAG) & API Manager | pixelyoursite |
| Plugin Organizer | plugin-organizer |
| Podlove Podcast Publisher | podlove-podcasting-plugin-for-wordpress |
| Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred | mycred |
| Powerkit – Supercharge your WordPress Site | powerkit |
| PowerPress Podcasting plugin by Blubrry | powerpress |
| Premium Packages – Sell Digital Products Securely | wpdm-premium-packages |
| Product Attachment for WooCommerce | woo-product-attachment |
| ProfileGrid – User Profiles, Groups and Communities | profilegrid-user-profiles-groups-and-communities |
| Pronamic Pay | pronamic-ideal |
| Qode Tours | qode-tours |
| Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker | quiz-master-next |
| Rank Math SEO – AI SEO Tools to Dominate SEO Rankings | seo-by-rank-math |
| RealHomes Memberships | inspiry-memberships |
| Realtyna Organic IDX plugin + WPL Real Estate | real-estate-listing-realtyna-wpl |
| RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login | custom-registration-form-builder-with-submission-manager |
| Responsive Thumbnail Slider | wp-responsive-thumbnail-slider |
| REST API Log | wp-rest-api-log |
| RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator | feedzy-rss-feeds |
| RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg | rt-mega-menu |
| Search Atlas SEO – OTTO AI SEO Automation for WordPress | metasync |
| SendPulse Email Marketing Newsletter | sendpulse-email-marketing-newsletter |
| ShopLentor Pro | woolentor-addons-pro |
| ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | woolentor-addons |
| Shortcodify | shortcodify |
| Simple Link Directory Pro - AI Powered | simple-link-directory-pro |
| Simply Schedule Appointments | simply-schedule-appointments |
| Single Sign On For TNG | single-sign-on-for-tng |
| Slick Slider | slick-slider |
| SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery | sms-alert |
| Social Share, Social Login and Social Comments Plugin – Super Socializer | super-socializer |
| Spam protection, Honeypot, Anti-Spam by CleanTalk | cleantalk-spam-protect |
| SpeedyCache – Cache, Optimization, Performance | speedycache |
| Spider Analyser – WordPress搜索引擎蜘蛛分析插件 | spider-analyser |
| Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light | excel-like-price-change-for-woocommerce-and-wp-e-commerce-light |
| Staff Training | staff-training |
| StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce | storegrowth-sales-booster |
| Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions | wp-full-stripe-free |
| Subscriptions for WooCommerce | subscriptions-for-woocommerce |
| Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers | sunshine-photo-cart |
| SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz | sureforms |
| Survey Form Block – collect answers and insights from your audience | survey-form-block |
| Sync Post With Other Site | sync-post-with-other-site |
| Taskbuilder – Project Management & Task Management Tool With Kanban Board | taskbuilder |
| Teydea Login Security – Password Policy, Complexity Rules & Expiration | password-requirements |
| The GDPR Framework By Data443 | gdpr-framework |
| Theme Editor | theme-editor |
| Thrive Leads | thrive-leads |
| Tour Master - Tour Booking, Travel, Hotel | tourmaster |
| TrueBooker – Appointment Booking and Scheduler System | truebooker-appointment-booking |
| Tutor LMS – eLearning and online course solution | tutor |
| Ultimate Addons for Elementor | ultimate-elementor |
| Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor | ultimate-store-kit |
| Ultra Addons for Contact Form 7 | ultimate-addons-for-contact-form-7 |
| Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included | uncanny-automator |
| User Access Manager | user-access-manager |
| User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor | profile-builder |
| User Profile Picture | metronet-profile-picture |
| User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder | user-registration |
| Vimeo | vimeo |
| Visualizer – Tables & Charts Manager with Built-in AI Generator | visualizer |
| W3 Total Cache | w3-total-cache |
| Web Directory Free | web-directory-free |
| Welcart e-Commerce | usc-e-shop |
| Wholesale for WooCommerce | woo-wholesale-pricing |
| Wired Impact Volunteer Management | wired-impact-volunteer-management |
| WooCommerce - Social Login | woo-social-login |
| WooCommerce PayPal Payments | woocommerce-paypal-payments |
| WowStore – Store Builder & Product Blocks for WooCommerce | product-blocks |
| WP CTA – Call Now Button, Sticky Button & Call to Action Builder | easy-sticky-sidebar |
| WP Custom HTML Page | wp-custom-html-pages |
| WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) | delicious-recipes |
| WP Fast Total Search – The Power of Indexed Search | fulltext-search |
| WP Google Review Slider | wp-google-places-review-slider |
| WP Hotel Booking | wp-hotel-booking |
| WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters | wp-google-map-plugin |
| WP OAuth Server ( Login with WordPress ) | miniorange-oauth-20-server |
| WP Photo Album Plus | wp-photo-album-plus |
| WP Travel – Ultimate Travel Booking System, Tour Management Engine | wp-travel |
| WP-Lister Lite for eBay | wp-lister-for-ebay |
| WPBot – AI ChatBot for Live Support, Lead Generation, WordPress Automation, AI Services | chatbot |
| WPC Badge Management for WooCommerce | wpc-badge-management |
| WPC Name Your Price for WooCommerce | wpc-name-your-price |
| wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin | wpdatatables |
| wpForo Forum | wpforo |
| WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode | gdpr-cookie-consent |
| WPML Multilingual & Multicurrency for WooCommerce | woocommerce-multilingual |
| WPvivid — Backup, Migration & Staging | wpvivid-backuprestore |
| Xendit Payment | woo-xendit-virtual-accounts |
| YayPricing – WooCommerce Dynamic Pricing & Discounts | yaypricing |
| zportals | zportals |
| ЮKassa для WooCommerce | yookassa |
| المنتور فارسی | persian-elementor |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Betheme | betheme |
| Gillion | Multi-Concept Blog/Magazine & Shop WordPress AMP Theme | gillion |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
Affected Software
Admin and Site Enhancements (ASE) Pro [admin-site-enhancements-pro]
Researcher
Affected Software
Advanced Responsive Video Embedder for Rumble, Odysee, YouTube, Vimeo, Kick … [advanced-responsive-video-embedder]
Researcher
Affected Software
AI Copilot – Content Generator [ai-copilot-content-generator]
Researcher
Affected Software
Researcher
Affected Software
Cost Calculator Builder PRO [cost-calculator-builder-pro]
Researcher
Affected Software
Realtyna Organic IDX plugin + WPL Real Estate [real-estate-listing-realtyna-wpl]
Researcher
Affected Software
Single Sign On For TNG [single-sign-on-for-tng]
Researcher
Affected Software
Researcher
Affected Software
Spider Analyser – WordPress搜索引擎蜘蛛分析插件 [spider-analyser]
Researcher
Affected Software
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light [excel-like-price-change-for-woocommerce-and-wp-e-commerce-light]
Researcher
Affected Software
WooCommerce - Social Login [woo-social-login]
Researcher
Affected Software
Demi – One Click Demo Import, Backup & Site Migration [demi-backup-migration]
Researcher
Affected Software
Affected Software
Meta Box AIO [meta-box-aio]
Researcher
Affected Software
Researcher
Affected Software
Eazy Plugin Manager [plugins-on-steroids]
Researcher
Affected Software
Extra Checkout Options - addon for Extra Product Options plugin [woocommerce-tm-extra-checkout-options-addon]
Researcher
Affected Software
FleekDash V2 [fleekdash]
Researcher
Affected Software
Pronamic Pay [pronamic-ideal]
Affected Software
Realtyna Organic IDX plugin + WPL Real Estate [real-estate-listing-realtyna-wpl]
Researcher
Affected Software
Subscriptions for WooCommerce [subscriptions-for-woocommerce]
Researcher
Affected Software
Wholesale for WooCommerce [woo-wholesale-pricing]
Researchers
Affected Software
Teydea Login Security – Password Policy, Complexity Rules & Expiration [password-requirements]
Researcher
Affected Software
zportals [zportals]
Researcher
Kali Forms <= 2.4.20 - Unauthenticated Remote Code Execution via 'thisPermalink' Field Parameter
8.1
Affected Software
Kali Forms — Contact Form & Drag-and-Drop Builder [kali-forms]
Researcher
Affected Software
NEX-Forms – Ultimate Forms Plugin for WordPress [nex-forms-express-wp-form-builder]
Researcher
Affected Software
Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more]
Researcher
Affected Software
Researcher
Affected Software
BuddyPress [buddypress]
Researcher
CubeWP Framework <= 1.1.30 - Unauthenticated Arbitrary File Read via prev_icon/next_icon Parameter
7.5
Affected Software
CubeWP Framework [cubewp-framework]
Researcher
Affected Software
Researcher
Affected Software
Export User Data [export-user-data]
Researcher
Affected Software
Researcher
Affected Software
Online Scheduling and Appointment Booking System – Bookly [bookly-responsive-appointment-booking-tool]
Researcher
Affected Software
PickPlugins Question Answer [question-answer]
Researcher
Affected Software
Premium Packages – Sell Digital Products Securely [wpdm-premium-packages]
Researcher
Affected Software
Qode Tours [qode-tours]
Researcher
Affected Software
Simply Schedule Appointments [simply-schedule-appointments]
Researcher
Affected Software
TrueBooker – Appointment Booking and Scheduler System [truebooker-appointment-booking]
Researcher
Affected Software
Researcher
Affected Software
User Access Manager [user-access-manager]
Researcher
Affected Software
Web Directory Free [web-directory-free]
Researchers
Affected Software
WP Fast Total Search – The Power of Indexed Search [fulltext-search]
Researcher
Affected Software
WP OAuth Server ( Login with WordPress ) [miniorange-oauth-20-server]
Researcher
Patch Status
Patched
Patched
Published
Jul 28, 2026
Jul 28, 2026
Affected Software
Advanced Shipment Tracking for WooCommerce [woo-advanced-shipment-tracking]
Researcher
Affected Software
AffiliateWP [affiliate-wp]
Researcher
Affected Software
Researcher
Affected Software
Anti Spam and list cleaner – AcyChecker [acychecker]
Researcher
Affected Software
BackWPup – WordPress Backup & Restore Plugin [backwpup]
Researcher
Affected Software
Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots [bp-better-messages]
Researcher
Affected Software
Researcher
Affected Software
Booking Calendar [booking]
Researcher
Affected Software
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe [contest-gallery]
Researcher
Database for CF7 <= 1.2.6 - Unauthenticated Stored Cross-Site Scripting via Array Form Field Values
7.2
Affected Software
Database for CF7 [database-for-cf7]
Researcher
Affected Software
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy [easy-digital-downloads]
Researcher
Affected Software
Easy PayPal & Stripe Buy Now Button [wp-ecommerce-paypal]
Researcher
Affected Software
Researcher
Affected Software
EONSR AEO Agent [eonsr-aeo-agent]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
GTM4WP – A Google Tag Manager (GTM) plugin for WordPress [duracelltomi-google-tag-manager]
Researcher
Affected Software
Researcher
Affected Software
Kali Forms — Contact Form & Drag-and-Drop Builder [kali-forms]
Researcher
Affected Software
MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder [mailchimp-subscribe-sm]
Researcher
Affected Software
Message Filter for Contact Form 7 [cf7-message-filter]
Researcher
Affected Software
Meta for WooCommerce [facebook-for-woocommerce]
Researcher
Affected Software
Meta pixel for WordPress [official-facebook-pixel]
Researcher
Affected Software
miniOrange OTP Login, Verification and SMS Notifications [miniorange-otp-verification]
Researcher
Affected Software
Newsletters [newsletters-lite]
Researcher
Affected Software
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math]
Researcher
Affected Software
Simple Link Directory Pro - AI Powered [simple-link-directory-pro]
Researcher
Affected Software
Simply Schedule Appointments [simply-schedule-appointments]
Researcher
Affected Software
Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer]
Researcher
Affected Software
Spam protection, Honeypot, Anti-Spam by CleanTalk [cleantalk-spam-protect]
Researcher
Affected Software
StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce [storegrowth-sales-booster]
Researcher
Affected Software
Subscriptions for WooCommerce [subscriptions-for-woocommerce]
Researcher
Affected Software
Ultra Addons for Contact Form 7 [ultimate-addons-for-contact-form-7]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Creative Mail – Easier WordPress & WooCommerce Email Marketing [creative-mail-by-constant-contact]
Researcher
CubeWP Framework <= 1.1.30 - Authenticated (Subscriber+) SQL Injection via 'relation_id' Parameter
6.5
Affected Software
CubeWP Framework [cubewp-framework]
Researchers
Affected Software
Database for Contact Form 7, WPforms, Elementor forms [contact-form-entries]
Researcher
Affected Software
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy [easy-digital-downloads]
Researcher
Affected Software
Researcher
Affected Software
Improved Save Button [improved-save-button]
Researcher
Affected Software
MasterStudy LMS WordPress Plugin – for Online Courses and Education [masterstudy-lms-learning-management-system]
Researcher
Affected Software
Plugin Organizer [plugin-organizer]
Researcher
Affected Software
Researcher
Affected Software
WP Hotel Booking [wp-hotel-booking]
Researcher
Admin Columns for ACF Fields <= 0.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Admin Columns for ACF Fields [admin-columns-for-acf-fields]
Researcher
Affected Software
Advanced Woo Labels – Product Labels & Badges for WooCommerce [advanced-woo-labels]
Researcher
Affected Software
Animation Addons for Elementor – GSAP Motion Elementor Addons & Website Templates [animation-addons-for-elementor]
Researcher
Affected Software
Auto Featured Image (Auto Post Thumbnail) [auto-post-thumbnail]
Researcher
Affected Software
PowerPress Podcasting plugin by Blubrry [powerpress]
Researcher
Affected Software
Booking System Trafft [booking-system-trafft]
Researcher
Affected Software
Brizy – Page Builder [brizy]
Researcher
Affected Software
Brizy – Page Builder [brizy]
Researcher
Affected Software
Business Directory Plugin – Easy Listing & Member Directories for WordPress [business-directory-plugin]
Researcher
Affected Software
Child Pages Card [child-pages-card]
Affected Software
Codeless Page Builder [codeless-page-builder]
Researcher
Affected Software
Contact Form to Any API [contact-form-to-any-api]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
WP Custom HTML Page [wp-custom-html-pages]
Affected Software
Download Manager [download-manager]
Researcher
Affected Software
Easy Property Listings [easy-property-listings]
Researcher
Affected Software
Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons [bdthemes-element-pack-lite]
Researcher
Affected Software
Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite]
Researcher
Affected Software
Exclusive Addons for Elementor [exclusive-addons-for-elementor]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Gallery PhotoBlocks [photoblocks-grid-gallery]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
GenerateBlocks [generateblocks]
Researcher
Affected Software
Researcher
Affected Software
Kadence Blocks — Page Builder Toolkit for Gutenberg Editor [kadence-blocks]
Researcher
Affected Software
Kadence Blocks — Page Builder Toolkit for Gutenberg Editor [kadence-blocks]
Researcher
Affected Software
Researcher
Affected Software
Location Weather – WordPress Weather Forecast, Air Quality & Weather Widget [location-weather]
Researcher
Affected Software
Researcher
Affected Software
Narrative Publisher [narrative-so]
Affected Software
Newsletters [newsletters-lite]
Researcher
Affected Software
Newsletters [newsletters-lite]
Researcher
Affected Software
Open User Map – Interactive Leaflet Maps [open-user-map]
Researcher
Affected Software
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More [themeisle-companion]
Researcher
Affected Software
Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro]
Researcher
Affected Software
Researcher
Affected Software
Powerkit – Supercharge your WordPress Site [powerkit]
Researcher
Affected Software
Powerkit – Supercharge your WordPress Site [powerkit]
Researcher
Affected Software
Powerkit – Supercharge your WordPress Site [powerkit]
Researcher
Affected Software
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker [quiz-master-next]
Researcher
Affected Software
RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg [rt-mega-menu]
Researcher
Affected Software
SendPulse Email Marketing Newsletter [sendpulse-email-marketing-newsletter]
Researcher
Affected Software
Slick Slider [slick-slider]
Researcher
Affected Software
Researcher
Ultimate Addons for Elementor <= 1.45.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Ultimate Addons for Elementor [ultimate-elementor]
Researcher
Affected Software
Researcher
Affected Software
WowStore – Store Builder & Product Blocks for WooCommerce [product-blocks]
Researcher
Affected Software
WowStore – Store Builder & Product Blocks for WooCommerce [product-blocks]
Researcher
Affected Software
WPC Badge Management for WooCommerce [wpc-badge-management]
Researcher
Affected Software
WPML Multilingual & Multicurrency for WooCommerce [woocommerce-multilingual]
Researcher
Affected Software
Researcher
Affected Software
GEO Plugin by Squirrly SEO [squirrly-seo]
Researcher
Affected Software
Link Library [link-library]
Researcher
Affected Software
Responsive Thumbnail Slider [wp-responsive-thumbnail-slider]
Researcher
Affected Software
Ad Invalid Click Protector (AICP) [ad-invalid-click-protector]
Researcher
Affected Software
Researcher
Affected Software
BOX NOW Delivery Croatia + Slovenia [box-now-delivery-croatia]
Researcher
Affected Software
Breakdance [breakdance]
Researcher
Affected Software
Researcher
Affected Software
Passster – Password Protect Pages and Content [content-protector]
Researcher
Affected Software
Passster – Password Protect Pages and Content [content-protector]
Researcher
Affected Software
Database Collation Fix [database-collation-fix]
Researcher
Affected Software
Demi – One Click Demo Import, Backup & Site Migration [demi-backup-migration]
Researcher
Affected Software
DHL Shipping Germany for WooCommerce [dhl-for-woocommerce]
Researchers
Affected Software
DHL Shipping Germany for WooCommerce [dhl-for-woocommerce]
Researcher
Affected Software
Easy Integration for Dropbox – File Manager [easy-dropbox-integration]
Affected Software
Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons [bdthemes-element-pack-lite]
Researcher
Affected Software
Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite]
Researcher
Affected Software
Event Tickets and Registration [event-tickets]
Researcher
Affected Software
Events Manager – Calendar, Bookings, Tickets, and more! [events-manager]
Researcher
Affected Software
Exclusive Addons for Elementor [exclusive-addons-for-elementor]
Researcher
Affected Software
Researcher
Affected Software
Formidable Forms Signature Online Contract Automation [forms-signature-formidable-online-contract-automation]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
JetBlocks for Elementor [jet-blocks]
Researcher
Affected Software
JetReviews [jet-reviews]
Researcher
Affected Software
JetSearch [jet-search]
Researcher
Affected Software
Klubraum Membership Request [klubraum-membership-request]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Mapster WP Maps [mapster-wp-maps]
Researcher
Affected Software
MasterStudy LMS WordPress Plugin – for Online Courses and Education [masterstudy-lms-learning-management-system]
Researcher
Affected Software
MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) [google-analytics-for-wordpress]
Researcher
Affected Software
Payment Gateway for Redsys & WooCommerce Lite [woo-redsys-gateway-light]
Researcher
Affected Software
Researcher
Affected Software
PeproDev WooCommerce Receipt Uploader [pepro-bacs-receipt-upload-for-woocommerce]
Researcher
Affected Software
PeproDev WooCommerce Receipt Uploader [pepro-bacs-receipt-upload-for-woocommerce]
Researcher
Persian Elementor (المنتور فارسی) <= 2.8.1 - Unauthenticated Price Manipulation via ZarinPal Widget
5.3
Affected Software
المنتور فارسی [persian-elementor]
Researcher
Affected Software
Researcher
Affected Software
PixelYourSite – Your smart PIXEL (TAG) & API Manager [pixelyoursite]
PixelYourSite Pro – Your smart PIXEL (TAG) Manager [pixelyoursite-pro]
Researcher
Affected Software
Product Attachment for WooCommerce [woo-product-attachment]
Researcher
Affected Software
ProfileGrid – User Profiles, Groups and Communities [profilegrid-user-profiles-groups-and-communities]
Researcher
Affected Software
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login [custom-registration-form-builder-with-submission-manager]
Researcher
Affected Software
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login [custom-registration-form-builder-with-submission-manager]
Researcher
Affected Software
REST API Log [wp-rest-api-log]
Researcher
Affected Software
ShopLentor Pro [woolentor-addons-pro]
Researcher
Affected Software
Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer]
Researcher
Affected Software
Staff Training [staff-training]
Researcher
Affected Software
StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce [storegrowth-sales-booster]
Researcher
Affected Software
StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce [storegrowth-sales-booster]
Researcher
Affected Software
Researcher
Affected Software
Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers [sunshine-photo-cart]
Researcher
Affected Software
The GDPR Framework By Data443 [gdpr-framework]
Researcher
Affected Software
Thrive Leads [thrive-leads]
Researcher
Affected Software
Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor [ultimate-store-kit]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
W3 Total Cache [w3-total-cache]
Researcher
Affected Software
WooCommerce PayPal Payments [woocommerce-paypal-payments]
Researcher
Affected Software
WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) [delicious-recipes]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
WPC Name Your Price for WooCommerce [wpc-name-your-price]
Researcher
Affected Software
Xendit Payment [woo-xendit-virtual-accounts]
Researcher
Affected Software
Shortcodify [shortcodify]
Researcher
Affected Software
WP Google Review Slider [wp-google-places-review-slider]
Researcher
Affected Software
GSheetConnector – CF7 Google Sheets Connector & Save CF7 Entries to Database [cf7-google-sheets-connector]
Researcher
Affected Software
Researcher
Affected Software
Researchers
Affected Software
Pinpoint Booking System – Version 2 [booking-system]
Researcher
Affected Software
ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin [woolentor-addons]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
SpeedyCache – Cache, Optimization, Performance [speedycache]
Researcher
Affected Software
Researcher
Affected Software
Welcart e-Commerce [usc-e-shop]
Researcher
Affected Software
WP CTA – Call Now Button, Sticky Button & Call to Action Builder [easy-sticky-sidebar]
Researchers
Affected Software
WP Photo Album Plus [wp-photo-album-plus]
Researcher
Affected Software
WP-Lister Lite for eBay [wp-lister-for-ebay]
Researchers
Affected Software
WPvivid — Backup, Migration & Staging [wpvivid-backuprestore]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Checkout Field Editor for WooCommerce – Checkout Manager [checkout-field-editor-and-manager-for-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
Nested Pages [wp-nested-pages]
Researcher
Affected Software
Researcher
Affected Software
Advanced Form Integration — Connect Forms to 300+ Apps [advanced-form-integration]
Researcher
Affected Software
AnsPress – Question and answer [anspress-question-answer]
Researcher
Affected Software
Booking for Appointments and Events Calendar – Amelia [ameliabooking]
Researcher
Affected Software
Brizy – Page Builder [brizy]
Researcher
Affected Software
Brizy – Page Builder [brizy]
Researcher
Affected Software
Clever Mega Menu for Visual Composer [clever-mega-menu]
Researcher
Affected Software
Colissimo shipping methods for WooCommerce [colissimo-shipping-methods-for-woocommerce]
Researcher
Affected Software
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe [contest-gallery]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Easy Appointments [easy-appointments]
Researcher
Affected Software
Easy Appointments [easy-appointments]
Researcher
Affected Software
Easy Appointments [easy-appointments]
Researcher
Affected Software
Easy Appointments [easy-appointments]
Researcher
Affected Software
Easy Appointments [easy-appointments]
Researcher
Affected Software
Easy Appointments [easy-appointments]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Event Tickets and Registration [event-tickets]
Researcher
Facturación Electrónica Costa Rica <= 2.0.2 - Cross-Site Request Forgery to Plugin Settings Update
4.3
Affected Software
Facturación Electrónica Costa Rica [factura-electronica-cr]
Researcher
Affected Software
Five Star Restaurant Reservations – WordPress Booking Plugin [restaurant-reservations]
Researcher
Affected Software
Fluent Support – Helpdesk & Customer Support Ticket System [fluent-support]
Researcher
Affected Software
Researcher
Affected Software
Frontend File Manager Plugin [nmedia-user-file-uploader]
Researcher
Affected Software
FundEngine – Donation and Crowdfunding Platform [wp-fundraising-donation]
Researcher
Affected Software
Researcher
Affected Software
GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law [gdpr-cookie-compliance]
Researcher
GeoDirectory <= 2.8.167 - Information Exposure to Authenticated (Contributor+) User Email Disclosure
4.3
Affected Software
Researcher
Affected Software
WP Google Review Slider [wp-google-places-review-slider]
Researcher
Affected Software
Insert Headers and Footers Code – HT Script [insert-headers-and-footers-script]
Researcher
Affected Software
Researcher
Affected Software
Kadence Blocks — Page Builder Toolkit for Gutenberg Editor [kadence-blocks]
Researcher
Affected Software
Researcher
Affected Software
LWS Optimize – All-in-One Speed Booster & Cache Tools [lws-optimize]
Researcher
Affected Software
Meta Box – A Framework for Dynamic Websites [meta-box]
Researcher
Affected Software
miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) [miniorange-2-factor-authentication]
Researcher
Affected Software
Researcher
Affected Software
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions [dc-woocommerce-multi-vendor]
Researcher
Affected Software
Researcher
Affected Software
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction [paid-member-subscriptions]
Researcher
Affected Software
Podlove Podcast Publisher [podlove-podcasting-plugin-for-wordpress]
Researcher
Affected Software
ProfileGrid – User Profiles, Groups and Communities [profilegrid-user-profiles-groups-and-communities]
Researcher
Affected Software
RealHomes Memberships [inspiry-memberships]
Researcher
Affected Software
RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg [rt-mega-menu]
Researcher
Affected Software
Researcher
Affected Software
ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin [woolentor-addons]
Researcher
Affected Software
ShopLentor Pro [woolentor-addons-pro]
Researcher
Affected Software
Survey Form Block – collect answers and insights from your audience [survey-form-block]
Researcher
Affected Software
Sync Post With Other Site [sync-post-with-other-site]
Researcher
Affected Software
Theme Editor [theme-editor]
Researcher
Affected Software
Researcher
Affected Software
User Profile Picture [metronet-profile-picture]
Researcher
Affected Software
Wired Impact Volunteer Management [wired-impact-volunteer-management]
Researcher
Affected Software
WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters [wp-google-map-plugin]
Researcher
Affected Software
Researcher
Affected Software
wpForo Forum [wpforo]
Researcher
Affected Software
YayPricing – WooCommerce Dynamic Pricing & Discounts [yaypricing]
Researcher
Affected Software
YayPricing – WooCommerce Dynamic Pricing & Discounts [yaypricing]
Researcher
Affected Software
ЮKassa для WooCommerce [yookassa]
Researcher
Affected Software
Media Cleaner: Clean your WordPress! [media-cleaner]
Researcher
Affected Software
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Comments