(647) 243-4688

Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors? Researchers can earn up to $10,400, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we handle all the rest. 

Last week, there were 134 vulnerabilities disclosed in 110 WordPress Plugins and 1 WordPress Theme that have been added to the Wordfence Intelligence Vulnerability Database, and there were 46 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.

Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to make the internet more secure. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report.

Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 16,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.

Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.

Total Unpatched & Patched Vulnerabilities Last Week

Patch Status
Number of Vulnerabilities

Patched
99

Unpatched
35

Total Vulnerabilities by CVSS Severity Last Week

Severity Rating
Number of Vulnerabilities

Medium Severity
108

High Severity
19

Critical Severity
7

Total Vulnerabilities by CWE Type Last Week

Vulnerability Type by CWE
Number of Vulnerabilities

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)
67

Missing Authorization
15

Cross-Site Request Forgery (CSRF)
9

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
8

Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’)
7

Improper Access Control
4

Improper Control of Generation of Code (‘Code Injection’)
4

Deserialization of Untrusted Data
3

Improper Neutralization of Alternate XSS Syntax
3

Unrestricted Upload of File with Dangerous Type
3

Authentication Bypass Using an Alternate Path or Channel
2

Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’)
2

Server-Side Request Forgery (SSRF)
2

Exposure of Sensitive Data Through Data Queries
1

Improper Authorization
1

Improper Protection of Alternate Path
1

Information Exposure Through Log Files
1

Use of Hard-coded Password
1

Researchers That Contributed to WordPress Security Last Week

Researcher Name
Number of Vulnerabilities

21

14

12

12

11

8

7

4

3

2

2

2

2

2

2

2

2

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.

WordPress Plugins with Reported Vulnerabilities Last Week

Software Name
Software Slug

140+ Widgets | Best Addons For Elementor – FREE

xpro-elementor-addons

AdFoxly – Ad Manager, AdSense Ads & Ads.txt

adfoxly

Advanced iFrame

advanced-iframe

AI ChatBot for WordPress – WPBot

chatbot

Alemha watermarker

alemha-watermark

Amen

amen

ApplyOnline – Application Form Builder and Manager

apply-online

Automatic Translator with Google Translate

auto-translate

Awesome Contact Form7 for Elementor

awesome-contact-form7-for-elementor

AZAN Plugin

azan

BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin

bookingpress-appointment-booking

Brizy – Page Builder

brizy

Business Directory Plugin – Easy Listing Directories for WordPress

business-directory-plugin

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder

fluentform

Country State City Dropdown CF7

country-state-city-auto-dropdown

Crafthemes Demo Import

crafthemes-demo-import

Custom Fonts – Host Your Fonts Locally

custom-fonts

Debug Log – Manger Tool

debug-log-config-tool

Elegant Addons for elementor

elegant-addons-for-elementor

Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows)

bdthemes-element-pack-lite

Elementor Header & Footer Builder

header-footer-elementor

Elementor Website Builder – More than Just a Page Builder

elementor

ElementsKit Pro

elementskit

Email Log

email-log

Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce

email-subscribers

EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor

embedpress

Event post

event-post

Fastly

fastly

Hash Elements

hash-elements

Hash Form – Drag & Drop Form Builder

hash-form

HT Mega – Absolute Addons For Elementor

ht-mega-for-elementor

iframe

iframe

Inquiry cart

inquiry-cart

jQuery T(-) Countdown Widget

jquery-t-countdown-widget

LA-Studio Element Kit for Elementor

lastudio-element-kit

LayerSlider

LayerSlider

LearnPress – WordPress LMS Plugin

learnpress

LottieFiles – JSON Based Animation Lottie & Bodymovin for Elementor

include-lottie-animation-for-elementor

LuckyWP Table of Contents

luckywp-table-of-contents

Master Slider – Responsive Touch Slider

master-slider

Media Library Assistant

media-library-assistant

Memberpress

memberpress

Move Addons for Elementor

move-addons

ND Shortcodes

nd-shortcodes

NextScripts: Social Networks Auto-Poster

social-networks-auto-poster-facebook-twitter-g

Ninja Beaver Add-ons for Beaver Builder

ninja-beaver-lite-addons-for-beaver-builder

Opal Estate Pro – Property Management and Submission

opal-estate-pro

Oxygen Builder

oxygenbuilder

Page Builder by SiteOrigin

siteorigin-panels

Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress

wp-user-avatar

PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode

paypal-pay-buy-donation-and-cart-buttons-shortcode

Pie Register – Social Sites Login (Add on)

pie-register-social-site

Piotnet Addons For Elementor

piotnet-addons-for-elementor

Popup Builder by OptinMonster – WordPress Popups for Optins, Email Newsletters and Lead Generation

optinmonster

PopupAlly

popupally

Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks

post-grid

Post SMTP – WordPress SMTP Plugin with Email Logs and Mobile App for Failure Notifications – Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES and more

post-smtp

Praison SEO WordPress

seo-wordpress

Pray For Me

pray-for-me

Premium Addons for Elementor

premium-addons-for-elementor

Primary Addon for Elementor

primary-addon-for-elementor

Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider)

bdthemes-prime-slider-lite

Print-O-Matic

print-o-matic

Responsive Contact Form Builder & Lead Generation Plugin

lead-form-builder

Reviews and Rating – Google Reviews

g-business-reviews-rating

RomethemeForm For Elementor

romethemeform

Schema App Structured Data

schema-app-structured-data-for-schemaorg

Search & Replace

search-and-replace

SEOPress – On-site SEO

wp-seopress

ShareThis Share Buttons

sharethis-share-buttons

ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor)

woolentor-addons

Similarity

similarity

Simple Popup Manager

simple-popup-manager

SiteOrigin Widgets Bundle

so-widgets-bundle

Social Pixel

social-pixel

Social Sharing Plugin – Sassy Social Share

sassy-social-share

Spectra – WordPress Gutenberg Blocks

ultimate-addons-for-gutenberg

SVGMagic

svgmagic

Tainacan

tainacan

Testimonial Carousel For Elementor

testimonials-carousel-elementor

The Events Calendar

the-events-calendar

The Events Calendar Pro

the-events-calendar-pro

The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce

the-plus-addons-for-elementor-page-builder

Toolbar Extras for Elementor & More – WordPress Admin Bar Enhanced

toolbar-extras

UberMenu

ubermenu

Unlimited Elements For Elementor (Free Widgets, Addons, Templates)

unlimited-elements-for-elementor

UserPro – Community and User Profile WordPress Plugin

userpro

Videojs HTML5 Player

videojs-html5-player

Visual Website Collaboration, Feedback & Project Management – Atarim

atarim-visual-collaboration

Web Directory Free

web-directory-free

WordPress + Microsoft Office 365 / Azure AD | LOGIN

wpo365-login

WordPress Jitsi Shortcode

wp-jitsi-shortcodes

WP DSGVO Tools (GDPR)

shapepress-dsgvo

WP Font Awesome Share Icons

wp-font-awesome-share-icons

WP Go Maps (formerly WP Google Maps)

wp-google-maps

WP Next Post Navi

wp-next-post-navi

WP Photo Album Plus

wp-photo-album-plus

WP Prayer II

wp-prayers-request

WP Scraper

wp-scraper

WP Shortcodes Plugin — Shortcodes Ultimate

shortcodes-ultimate

WP Table Builder – WordPress Table Plugin

wp-table-builder

WP Ultimate Post Grid

wp-ultimate-post-grid

WP-ViperGB

wp-vipergb

WPB Elementor Addons

wpb-elementor-addons

WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce

wp-cafe

wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin

wpdatatables

WPKoi Templates for Elementor

wpkoi-templates-for-elementor

WPZOOM Addons for Elementor (Templates, Widgets)

wpzoom-elementor-addons

YITH WooCommerce Ajax Search

yith-woocommerce-ajax-search

YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress

youtube-showcase

WordPress Themes with Reported Vulnerabilities Last Week

Software Name
Software Slug

Blocksy

blocksy

Vulnerability Details

Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.

CVSS Rating
Critical (9.8)
CVE-ID
CVE-2024-3495
Patch Status
Patched
Published
May 21, 2024

Researcher

CVSS Rating
Critical (9.8)
CVE-ID
CVE-2024-5084
Patch Status
Patched
Published
May 22, 2024

CVSS Rating
Critical (9.8)
CVE-ID
CVE-2024-4544
Patch Status
Patched
Published
May 23, 2024

CVSS Rating
Critical (9.8)
CVE-ID
CVE-2024-35700
Patch Status
Patched
Published
May 21, 2024

CVSS Rating
Critical (9.8)
CVE-ID
CVE-2024-3552
Patch Status
Patched
Published
May 23, 2024

CVSS Rating
Critical (9.8)
CVE-ID
CVE-2024-5147
Patch Status
Patched
Published
May 21, 2024

CVSS Rating
High (8.8)
CVE-ID
CVE-2024-34800
Patch Status
Unpatched
Published
May 20, 2024

Affected Software
Crafthemes Demo Import
Researcher

CVSS Rating
High (8.8)
CVE-ID
CVE-2024-1974
Patch Status
Patched
Published
May 23, 2024

CVSS Rating
High (8.8)
CVE-ID
CVE-2024-3518
Patch Status
Patched
Published
May 21, 2024

Affected Software
Media Library Assistant
Researcher

CVSS Rating
High (8.8)
CVE-ID
CVE-2024-4662
Patch Status
Patched
Published
May 22, 2024

Affected Software
Oxygen Builder
Researcher

CVSS Rating
High (8.5)
CVE-ID
CVE-2024-5031
Patch Status
Patched
Published
May 21, 2024

Affected Software
Memberpress
Researcher

CVSS Rating
High (8.5)
CVE-ID
CVE-2024-2088
Patch Status
Patched
Published
May 21, 2024

Researcher

CVSS Rating
High (8.1)
CVE-ID
CVE-2024-0867
Patch Status
Patched
Published
May 23, 2024

Affected Software
Email Log
Researcher

CVSS Rating
High (8.1)
CVE-ID
CVE-2024-5085
Patch Status
Patched
Published
May 22, 2024

CVSS Rating
High (7.2)
CVE-ID
CVE-2024-4262
Patch Status
Patched
Published
May 21, 2024

Affected Software
Piotnet Addons For Elementor
Researcher

CVSS Rating
High (7.2)
CVE-ID
CVE-2024-3966
Patch Status
Unpatched
Published
May 24, 2024

Affected Software
Pray For Me
Researcher

CVSS Rating
High (7.2)
CVE-ID
CVE-2024-0756
Patch Status
Patched
Published
May 23, 2024

Affected Software
Search & Replace
Researcher

CVSS Rating
High (7.2)
CVE-ID
CVE-2024-34794
Patch Status
Patched
Published
May 20, 2024

Affected Software
Tainacan
Researcher

CVSS Rating
High (7.2)
CVE-ID
CVE-2024-4455
Patch Status
Patched
Published
May 23, 2024

Affected Software
YITH WooCommerce Ajax Search
Researcher

CVSS Rating
Medium (6.5)
CVE-ID
CVE-2024-4037
Patch Status
Patched
Published
May 23, 2024

Affected Software
WP Photo Album Plus
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-4365
Patch Status
Patched
Published
May 22, 2024

Affected Software
Advanced iFrame
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-3754
Patch Status
Unpatched
Published
May 24, 2024

Affected Software
Alemha watermarker
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-4943
Patch Status
Patched
Published
May 20, 2024

Affected Software
Blocksy

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-3066
Patch Status
Unpatched
Published
May 21, 2024

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-5092
Patch Status
Unpatched
Published
May 21, 2024

Affected Software
Elegant Addons for elementor
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-2618
Patch Status
Patched
Published
May 23, 2024

Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-4452
Patch Status
Patched
Published
May 20, 2024

Affected Software
ElementsKit Pro
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-5177
Patch Status
Patched
Published
May 22, 2024

Affected Software
Hash Elements
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-4876
Patch Status
Patched
Published
May 20, 2024

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-4783
Patch Status
Unpatched
Published
May 22, 2024

Affected Software
jQuery T(-) Countdown Widget
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-4431
Patch Status
Patched
Published
May 22, 2024

Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-4575
Patch Status
Patched
Published
May 22, 2024

Affected Software
LayerSlider
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-4971
Patch Status
Patched
Published
May 21, 2024

Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-4470
Patch Status
Patched
Published
May 20, 2024

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-5025
Patch Status
Patched
Published
May 21, 2024

Affected Software
Memberpress
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-4695
Patch Status
Patched
Published
May 20, 2024

Affected Software
Move Addons for Elementor
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-5220
Patch Status
Patched
Published
May 24, 2024

Affected Software
ND Shortcodes
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-2163
Patch Status
Unpatched
Published
May 21, 2024

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-4361
Patch Status
Patched
Published
May 20, 2024

Affected Software
Page Builder by SiteOrigin
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-34801
Patch Status
Unpatched
Published
May 20, 2024

Affected Software
Praison SEO WordPress
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-4378
Patch Status
Patched
Published
May 22, 2024

Affected Software
Premium Addons for Elementor
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-5229
Patch Status
Patched
Published
May 24, 2024

Affected Software
Primary Addon for Elementor
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-3671
Patch Status
Unpatched
Published
May 21, 2024

Affected Software
Print-O-Matic
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-5218
Patch Status
Patched
Published
May 24, 2024

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-1134
Patch Status
Patched
Published
May 23, 2024

Affected Software
SEOPress – On-site SEO
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-3648
Patch Status
Patched
Published
May 22, 2024

Affected Software
ShareThis Share Buttons
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-4362
Patch Status
Patched
Published
May 21, 2024

Affected Software
SiteOrigin Widgets Bundle
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-4366
Patch Status
Patched
Published
May 23, 2024

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-4270
Patch Status
Unpatched
Published
May 24, 2024

Affected Software
SVGMagic

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-34795
Patch Status
Patched
Published
May 20, 2024

Affected Software
Tainacan
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-4710
Patch Status
Patched
Published
May 20, 2024

Affected Software
UberMenu
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-5205
Patch Status
Patched
Published
May 23, 2024

Affected Software
Videojs HTML5 Player
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-3978
Patch Status
Unpatched
Published
May 24, 2024

Affected Software
WordPress Jitsi Shortcode
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-3201
Patch Status
Patched
Published
May 22, 2024

Affected Software
WP DSGVO Tools (GDPR)
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-3198
Patch Status
Unpatched
Published
May 21, 2024

Affected Software
WP Font Awesome Share Icons
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-3557
Patch Status
Patched
Published
May 23, 2024

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-4700
Patch Status
Patched
Published
May 20, 2024

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-4043
Patch Status
Patched
Published
May 22, 2024

Affected Software
WP Ultimate Post Grid
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-4896
Patch Status
Patched
Published
May 21, 2024

Affected Software
WPB Elementor Addons
Researcher

CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-4980
Patch Status
Patched
Published
May 21, 2024

Affected Software
WPKoi Templates for Elementor
Researcher

CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-3993
Patch Status
Unpatched
Published
May 24, 2024

Affected Software
AZAN Plugin
Researcher

CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-2119
Patch Status
Unpatched
Published
May 21, 2024

Affected Software
LuckyWP Table of Contents
Researcher

CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-3519
Patch Status
Patched
Published
May 21, 2024

Affected Software
Media Library Assistant
Researcher

CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-1762
Patch Status
Patched
Published
May 21, 2024

CVSS Rating
Medium (5.5)
CVE-ID
CVE-2024-2953
Patch Status
Unpatched
Published
May 21, 2024

Affected Software
LuckyWP Table of Contents
Researcher

CVSS Rating
Medium (5.5)
CVE-ID
CVE-2024-34793
Patch Status
Unpatched
Published
May 20, 2024

Affected Software
WP Next Post Navi
Researcher

CVSS Rating
Medium (5.4)
CVE-ID
CVE-2024-1446
Patch Status
Patched
Published
May 21, 2024

CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-34802
Patch Status
Unpatched
Published
May 20, 2024

CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-34799
Patch Status
Patched
Published
May 20, 2024

CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-34798
Patch Status
Patched
Published
May 20, 2024

Affected Software
Debug Log – Manger Tool
Researcher

CVSS Rating
Medium (5.3)
CVE-ID
CVE-2023-6325
Patch Status
Patched
Published
May 22, 2024

Affected Software
RomethemeForm For Elementor
Researcher

CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-4858
Patch Status
Patched
Published
May 24, 2024

CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-1855
Patch Status
Patched
Published
May 22, 2024

CVSS Rating
Medium (5.0)
CVE-ID
CVE-2024-0453
Patch Status
Patched
Published
May 21, 2024

CVSS Rating
Medium (5.0)
CVE-ID
CVE-2024-0451
Patch Status
Patched
Published
May 21, 2024

CVSS Rating
Medium (5.0)
CVE-ID
CVE-2024-0452
Patch Status
Patched
Published
May 21, 2024

CVSS Rating
Medium (5.0)
CVE-ID
CVE-2023-6844
Patch Status
Patched
Published
May 22, 2024

Affected Software
iframe
Researcher

CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-3992
Patch Status
Unpatched
Published
May 24, 2024

Affected Software
Amen
Researcher

CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-0632
Patch Status
Unpatched
Published
May 21, 2024

Researcher

CVSS Rating
Medium (4.4)
CVE-ID
CVE-2023-6487
Patch Status
Unpatched
Published
May 21, 2024

Affected Software
LuckyWP Table of Contents
Researcher

CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-34796
Patch Status
Patched
Published
May 20, 2024

Affected Software
PopupAlly
Researcher

CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-4924
Patch Status
Patched
Published
May 22, 2024

CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-34797
Patch Status
Unpatched
Published
May 20, 2024

Affected Software
Simple Popup Manager
Researcher

CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-4005
Patch Status
Unpatched
Published
May 24, 2024

Affected Software
Social Pixel
Researcher

CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-3977
Patch Status
Unpatched
Published
May 24, 2024

Affected Software
WordPress Jitsi Shortcode
Researcher

CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-3711
Patch Status
Patched
Published
May 22, 2024

Affected Software
Brizy – Page Builder
Researcher

CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-1376
Patch Status
Patched
Published
May 23, 2024

Affected Software
Event post
Researcher

CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-34803
Patch Status
Patched
Published
May 20, 2024

Affected Software
Fastly
Researcher

CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-4875
Patch Status
Patched
Published
May 20, 2024

CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-5155
Patch Status
Unpatched
Published
May 24, 2024

Affected Software
Inquiry cart
Researcher

CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-3965
Patch Status
Unpatched
Published
May 24, 2024

Affected Software
Pray For Me
Researcher

CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-0893
Patch Status
Unpatched
Published
May 23, 2024

Affected Software
Schema App Structured Data
Researcher

CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-3971
Patch Status
Unpatched
Published
May 24, 2024

Affected Software
Similarity
Researcher

CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-3972
Patch Status
Unpatched
Published
May 24, 2024

Affected Software
Similarity
Researcher

CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-4480
Patch Status
Unpatched
Published
May 24, 2024

Affected Software
WP Prayer II
Researcher

CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-4751
Patch Status
Unpatched
Published
May 24, 2024

Affected Software
WP Prayer II
Researcher

CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-3663
Patch Status
Unpatched
Published
May 21, 2024

Affected Software
WP Scraper
Researcher

CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-4409
Patch Status
Patched
Published
May 23, 2024

Affected Software
WP-ViperGB

As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.

This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.

Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.

The post Wordfence Intelligence Weekly WordPress Vulnerability Report (May 20, 2024 to May 26, 2024) appeared first on Wordfence.