Last week, there were 497 vulnerabilities disclosed in 312 WordPress Plugins and 1 WordPress Theme that have been added to the Wordfence Intelligence Vulnerability Database, and there were 218 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to implement layered security, aligning with our overarching mission to secure WordPress with defense in depth strategies. That is why the Wordfence Intelligence user interface, vulnerability API, and webhook integration are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report. As the world’s leading quality vulnerability database provider for WordPress, site owners can rest assured knowing Wordfence has their back.
Enterprises, Hosting Providers, and even Individuals can utilize the vulnerability Database API to receive a complete dump of our database of over 40,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
New Firewall Rules Deployed Last Week
The Wordfence Threat Intelligence Team reviews each vulnerability to determine impact and severity, along with assessing the likelihood of exploitation, to verify that the Wordfence Firewall provides sufficient protection.
The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our Premium, Care, and Response customers last week:
-
- WAF-RULE-976 – Data redacted while we work with the vendor on a patch.
Wordfence Premium, Care, and Response customers received this protection immediately, while users still running the free version of Wordfence will receive this enhanced protection after a 30 day delay.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 457 |
| Unpatched | 40 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Low Severity | 6 |
| Medium Severity | 352 |
| High Severity | 118 |
| Critical Severity | 21 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Improper Neutralization of Input During Web Page Generation | 179 |
| Missing Authorization | 108 |
| Improper Privilege Management | 29 |
| Improper Control of Generation of Code | 28 |
| Exposure of Sensitive Information to an Unauthorized Actor | 27 |
| Authorization Bypass Through User-Controlled Key | 25 |
| Improper Neutralization of Special Elements used in an SQL Command | 19 |
| Incorrect Authorization | 12 |
| Improper Limitation of a Pathname to a Restricted Directory | 11 |
| Unrestricted Upload of File with Dangerous Type | 9 |
| Cross-Site Request Forgery | 8 |
| Improper Authentication | 7 |
| Deserialization of Untrusted Data | 5 |
| Client-Side Enforcement of Server-Side Security | 4 |
| Server-Side Request Forgery | 4 |
| Improper Control of Filename for Include/Require Statement in PHP Program | 3 |
| Concurrent Execution using Shared Resource with Improper Synchronization | 2 |
| Guessable CAPTCHA | 2 |
| Insufficient Verification of Data Authenticity | 2 |
| Uncontrolled Resource Consumption | 2 |
| Authentication Bypass by Capture-replay | 1 |
| Authentication Bypass by Spoofing | 1 |
| Authentication Bypass Using an Alternate Path or Channel | 1 |
| Generation of Error Message Containing Sensitive Information | 1 |
| Improper Restriction of Excessive Authentication Attempts | 1 |
| Improper Validation of Specified Quantity in Input | 1 |
| Improper Verification of Cryptographic Signature | 1 |
| Insertion of Sensitive Information into Log File | 1 |
| Plaintext Storage of a Password | 1 |
| Unverified Password Change | 1 |
| Use of Cache Containing Sensitive Information | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 25 | |
| 13 | |
| 12 | |
| 12 | |
| 11 | |
| 11 | |
| 11 | |
| 10 | |
| 10 | |
| 10 | |
| 10 | |
| 10 | |
| 10 | |
| 9 | |
| 7 | |
| 7 | |
| 7 | |
| 7 | |
| 6 | |
| 5 | |
| 5 | |
| 5 | |
| 5 | |
| 5 | |
| 5 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| 2Way VideoCalls and Random Chat – HTML5 Webcam Videochat | webcam-2way-videochat |
| AAA Autoload Optimizer | aaa-option-optimizer |
| aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder | ablocks |
| ACF Frontend Admin by DynamiApps | acf-frontend-form-element |
| Active Woot Products Tables for WooCommerce. 100% FREE | profit-products-tables-for-woocommerce |
| Add From Server Lite | add-from-server-reloaded |
| Addon Elements for Elementor (formerly Elementor Addon Elements) | addon-elements-for-elementor-page-builder |
| Advanced Appointment Booking & Scheduling | advanced-appointment-booking-scheduling |
| Advanced Custom Fields (ACF®) | advanced-custom-fields |
| Advanced Form Integration — Connect Forms to 300+ Apps | advanced-form-integration |
| Advanced Members for ACF | advanced-members |
| Affiliate Program Suite — SliceWP Affiliates | slicewp |
| AgenWebsite Shipping – Plugin Ongkos Kirim & Generate Resi Otomatis Semua Kurir Indonesia | woocommerce-jne |
| All In One Login | change-wp-admin-login |
| All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos | all-in-one-video-gallery |
| AMP for WP – Accelerated Mobile Pages | accelerated-mobile-pages |
| Anti-Spam, Spam FireWall by CleanTalk | cleantalk-spam-protect |
| Antom Payments | antom-payments |
| Appointment Booking Plugin for WooCommerce | Online Booking Calendar & Service Manager | service-booking-manager |
| Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress | latepoint |
| AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI | automatorwp |
| Autopay dla WooCommerce | pay-wp |
| AZEXO Store Locator | azexo-store-locator |
| BackUpWordPress | backupwordpress |
| Better Search – Relevant search results for WordPress | better-search |
| Booking for Appointments and Events Calendar – Amelia | ameliabooking |
| Booking for Appointments and Events Calendar – Amelia Pro | amelia |
| Booking Package | booking-package |
| Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP | videowhisper-live-streaming-integration |
| BuddyBoss App | buddyboss-app |
| BuddyForms | buddyforms |
| Car Dealer (Dealership) and Vehicle sales | cardealer |
| CartFlows – Funnel Builder & Checkout Plugin for WooCommerce | cartflows |
| CatFolders – WordPress Media Library Folders & Categories | catfolders |
| Checkout Field Editor for WooCommerce (Pro) | woocommerce-checkout-field-editor-pro |
| Checkout Files Upload for WooCommerce | checkout-files-upload-woocommerce |
| Church Admin | church-admin |
| ClickCease Click Fraud Protection | clickcease-click-fraud-protection |
| Cloud Blocks | cloud-blocks |
| Comments – wpDiscuz | wpdiscuz |
| Community Events | community-events |
| Confection WordPress Cable | confection |
| Contact Form 7 | contact-form-7 |
| Content Egg – Affiliate Product Importer & Price Comparison | content-egg |
| Contextual Related Posts | contextual-related-posts |
| CookieYes – Cookie Banner, Cookie Consent & Cookie Notice for GDPR/CCPA | cookie-law-info |
| Cool FormKit Lite – Advanced Form Builder for Elementor | extensions-for-elementor-form |
| Cool Media Filter | cool-media-filter |
| CURCY – Multi Currency for WooCommerce | woo-multi-currency |
| Customer Reviews for WooCommerce | customer-reviews-woocommerce |
| Customize WordPress Emails and Alerts – Better Notifications for WP | bnfw |
| Directorist: AI-Powered Business Directory, Listings & Classified Ads | directorist |
| Ditty – Responsive News Tickers, Sliders, and Lists | ditty-news-ticker |
| Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy | dokan-lite |
| DOOFINDER Search and Discovery for WP & WooCommerce | doofinder-for-woocommerce |
| Download Manager | download-manager |
| Dropshipping XML Import for WooCommerce | dropshipping-xml-for-woocommerce |
| DT LMS – elearning, WordPress LMS Plugin | dt-lms-lite |
| Duplicator Pro | duplicator-pro |
| Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More | duplicator |
| Dynific Addons for Elementor (formerly Anywhere Elementor) | anywhere-elementor |
| Easy Social Icons | easy-social-icons |
| EASY-JS-WPAPI Client HANDLE for the WordPress REST-API | node-wpapi-auth |
| Ecommerce Affiliate | ecommerce-affiliate |
| Element Pack Addons for Elementor – MCP & AI-Ready Elementor Widgets, Elementor Templates, Elementor Addons | bdthemes-element-pack-lite |
| Elementor Website Builder – more than just a page builder | elementor |
| ELEX WordPress HelpDesk & Customer Ticketing System | elex-helpdesk-customer-support-ticket-system |
| Enable Media Replace | enable-media-replace |
| ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce | erp |
| Essential Real Estate | essential-real-estate |
| Event Tickets Manager for WooCommerce | event-tickets-manager-for-woocommerce |
| Event Tickets with Ticket Scanner | event-tickets-with-ticket-scanner |
| Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce | wp-event-solution |
| EventPrime – Events Calendar, Bookings, Tickets & AI | eventprime-event-calendar-management |
| Ever Accounting – Accounting & Invoicing Solution for Small Businesses | wp-ever-accounting |
| Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI | everest-forms |
| EWWW Image Optimizer | ewww-image-optimizer |
| Falang multilanguage for WordPress | falang |
| Featured Image from URL (FIFU) | featured-image-from-url |
| Fiber Admin | fiber-admin |
| Flipbox – Awesomes Flip Boxes Image Overlay | image-hover-effects-ultimate-visual-composer |
| FloristPress for Woo – Customize your eCommerce store for your Florist | bakkbone-florist-companion |
| Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution | fluent-booking |
| Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder | fluentform |
| Fluent Support – Helpdesk & Customer Support Ticket System | fluent-support |
| FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration | fluent-boards |
| Flying Images: Optimize and Lazy Load Images for Faster Page Speed | nazy-load |
| Football Pool | football-pool |
| Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | form-maker |
| Formidable Forms Signature Online Contract Automation | forms-signature-formidable-online-contract-automation |
| Forminator Forms – Contact Form, Payment Form & Custom Form Builder | forminator |
| FOX – Currency Switcher Professional for WooCommerce | woocommerce-currency-switcher |
| FraudLabs Pro SMS Verification | fraudlabs-pro-sms-verification |
| FunnelKit Payment Gateway for Stripe WooCommerce | funnelkit-stripe-woo-payment-gateway |
| Fusion Page Builder | fusion |
| FV Flowplayer Video Player | fv-wordpress-flowplayer |
| Gallery for Social Photo | feed-instagram-lite |
| GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI | gamipress |
| GemBooking – Appointment Booking, Booking Calendar & Reservations | gembooking |
| GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | geodirectory |
| GiveWP – Donation Plugin and Fundraising Platform | give |
| Grand Job | grand-job |
| Graphina – Charts and Graphs For Elementor | graphina-elementor-charts-and-graphs |
| Greenshift – animation and page builder blocks | greenshift-animation-and-page-builder-blocks |
| GS JWT Authentication for WP REST API | gs-jwt-auth-and-otp-varification |
| GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor | gutenkit-blocks-addon |
| Happyforms Pro | happyforms-upgrade |
| HivePress – Business Directory, Listings & Classified Ads Plugin | hivepress |
| HTML5 Video Player – embed fast, responsive videos with ease | html5-video-player |
| Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN | hummingbird-performance |
| If-So Dynamic Content – Elementor & All Page Builders Personalization | if-so |
| iLeads SMS Gateway by Exsile | exsile-sms-gateway |
| Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) | image-hover-effects-ultimate |
| Import and export users and customers | import-users-from-csv-with-meta |
| Interactive Real Estate – Floor Plan & Building Visualizer | interactive-real-estate |
| Invoice Gateway for WooCommerce – Invoice Payment Gateway | invoice-gateway-for-woocommerce |
| Iptanus File Upload | wp-file-upload |
| iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more | iubenda-cookie-law-solution |
| IVPAY payments | ivendpay-payments |
| JetEngine | jet-engine |
| JetFormBuilder – Hierarchical Select | jet-form-builder-hierarchical-select |
| JetFormBuilder — Dynamic Blocks Form Builder | jetformbuilder |
| JS Help Desk – AI-Powered Support & Ticketing System | js-support-ticket |
| Jupiter X Core | jupiterx-core |
| JWT Auth – WordPress JSON Web Token Authentication | jwt-auth |
| Kali Forms — Contact Form & Drag-and-Drop Builder | kali-forms |
| Komfortkasse for WooCommerce | komfortkasse-for-woocommerce |
| Kubio AI Page Builder | kubio |
| LearnPress – Course Review | learnpress-course-review |
| LearnPress – WordPress LMS Plugin for Create and Sell Online Courses | learnpress |
| LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes | lifterlms |
| Limit Login Attempts Security | limit-login-attempts-security |
| Link Library | link-library |
| LiteSpeed Cache | litespeed-cache |
| Live Composer – Free WordPress Website Builder | live-composer-page-builder |
| Live2DWebCanvas | live-2d |
| Magic Link – Secure one click passwordless login | magic-link |
| Mail Debug for WooCommerce | mail-debug-for-woocommerce |
| Mail Mage | mail-mage |
| Mang Board | mangboard |
| MapSVG – Vector maps, Google Maps, Image maps – with AI assistant | mapsvg-lite-interactive-vector-maps |
| MasterStudy LMS WordPress Plugin – for Online Courses and Education | masterstudy-lms-learning-management-system |
| MC4WP: Mailchimp for WordPress | mailchimp-for-wp |
| MCB – Stats | mcb-stats |
| MCP Server for WordPress – Connect Claude, ChatGPT & Gemini | AtlasMCP | ai-workflow-automation-ai-agent-hub |
| MDJM Event Management | mobile-dj-manager |
| MDTF – Meta Data and Taxonomies Filter | wp-meta-data-filter-and-taxonomy-filter |
| Media Library Assistant | media-library-assistant |
| Melapress Role Editor | melapress-role-editor |
| Meta Box – A Framework for Dynamic Websites | meta-box |
| MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor | metform |
| Mobile builder | mobile-builder |
| Modula Image Gallery – Photo Grid & Video Gallery | modula-best-grid-gallery |
| Mollie Payments for WooCommerce | mollie-payments-for-woocommerce |
| MoreConvert Wishlist for WooCommerce | smart-wishlist-for-more-convert |
| MotoPress Appointment Booking | motopress-appointment-lite |
| Motors – Car Dealership & Classified Listings Plugin | motors-car-dealership-classified-listings |
| mView 豆瓣电影 | mview |
| Naimur Email OTP Verification for WooCommerce | naimur-email-otp-for-woocommerce |
| Noptin – Newsletter, New Post Notifications & Email Automation | newsletter-optin-box |
| NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar | notificationx |
| OAuth Single Sign On – SSO (OAuth Client) | miniorange-login-with-eve-online-google-facebook |
| Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization | optimole-wp |
| Order Tracking – WordPress Status Tracking Plugin | order-tracking |
| Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction | paid-member-subscriptions |
| Parsi Date | بسته فارسی ساز وردپرس و ووکامرس پارسی دیت | wp-parsidate |
| Pay with Vipps and MobilePay for WooCommerce | woo-vipps |
| payever Checkout – Composable Payment Gateway | payever-woocommerce-gateway |
| Payment forms, Buy now buttons, and Invoicing System | GetPaid | invoicing |
| Paystack WooCommerce Payment Gateway | woo-paystack |
| Permalink Manager Lite | permalink-manager |
| Photo Gallery by Supsystic – Image Gallery, Masonry, Albums & Lightbox | gallery-by-supsystic |
| Pie Register – User Registration, Profiles & Content Restriction | pie-register |
| placester | placester |
| Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred | mycred |
| Polylang | polylang |
| Post Duplicator | post-duplicator |
| Post Fields for Contact Form 7 | cf7-post-fields |
| Posts Table with Search & Sort | posts-data-table |
| PowerPack Addons for Elementor: Widgets, Form Styler and Templates | powerpack-lite-for-elementor |
| PowerPress Podcasting plugin by Blubrry | powerpress |
| Premium Blocks – Gutenberg Blocks, Patterns & Templates | premium-blocks-for-gutenberg |
| Premium Packages – Sell Digital Products Securely | wpdm-premium-packages |
| Printcart Store – Web to Print Product Designer for WooCommerce | printcart-integration |
| Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping, AI & Social Channels | webappick-product-feed-for-woocommerce |
| Product Gallery Slider, Additional Variation Images for WooCommerce | woo-product-gallery-slider |
| Productive Commerce – Wishlist, Compare & MiniCart | productive-commerce |
| ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content | wp-user-avatar |
| Pronamic Pay doneren met Mollie | pronamic-pay-doneren-met-mollie |
| Pubjet | پابجت | pubjet |
| PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes | revisionary |
| QA Assistants – Driven by data | qa-heatmap-analytics |
| QODE Wishlist for WooCommerce | qode-wishlist-for-woocommerce |
| Quick Event Manager | quick-event-manager |
| Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker | quiz-master-next |
| Quttera ThreatSign – Web Malware Scanner for WordPress | quttera-web-malware-scanner |
| Radius Booking – Appointment Booking Calendar & Scheduling for Services & Events | radius-booking |
| Razorpay for WooCommerce | woo-razorpay |
| Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials | testimonial-free |
| Redirection for Contact Form 7 | wpcf7-redirect |
| Redux Framework | redux-framework |
| Registration Form for WooCommerce | registration-form-for-woocommerce |
| Remove Google Fonts – Disable, Block, or Replace with Bunny Fonts for GDPR Compliance | use-bunnyfont-host-google-fonts |
| RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress | computer-repair-shop |
| Royal Addons for Elementor – Addons and Templates Kit for Elementor | royal-elementor-addons |
| RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator | feedzy-rss-feeds |
| RSVP and Event Management | rsvp |
| s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions | s2member |
| SAML Single Sign On – SSO Login | miniorange-saml-20-single-sign-on |
| SchemaEngine AI – AI Schema Markup, Reviews & Rich Snippets for SEO | review-schema |
| Secure Custom Fields | secure-custom-fields |
| Security For WooCommerce | ultimate-security-for-woocommerce |
| Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce | sender-net-automated-emails |
| SEOPress – AI SEO Plugin & On-site SEO | wp-seopress |
| ShopEngine Gutenberg WooCommerce Builder Blocks Addon – All in One WooCommerce Solution | blocks-for-shopengine |
| ShopEngine – All-in-One Elementor WooCommerce Builder with eCommerce Templates & Woo Widgets | shopengine |
| Simple CAPTCHA with Cloudflare Turnstile | simple-cloudflare-turnstile |
| Simple Download Monitor | simple-download-monitor |
| Site Reviews | site-reviews |
| Slim Jetpack | slimjetpack |
| Smart Cookie Kit | smart-cookie-kit |
| Smush – Image Optimization, Compression, Lazy Load, WebP & CDN | wp-smushit |
| Social Slider Feed – Social Media Feed & Gallery Widgets | instagram-slider-widget |
| Spectra Legacy – Gutenberg Blocks | ultimate-addons-for-gutenberg |
| Stackable – Page Builder Gutenberg Blocks | stackable-ultimate-gutenberg-blocks |
| Stape Conversion Tracking | gtm-server-side |
| Static Snapshot | static-snapshot |
| Stop Spammers Classic | stop-spammer-registrations-plugin |
| Strong Testimonials | strong-testimonials |
| Subscribe2 – Form, Email Subscribers & Newsletters | subscribe2 |
| Subscriptions for WooCommerce | subscriptions-for-woocommerce |
| Superb Addons: Blocks, Patterns, Pre-built Pages, Sliders, Popups, Free Forms, Animations & More | superb-blocks |
| SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz | sureforms |
| Surfer – WordPress Plugin | surferseo |
| Sync Post With Other Site | sync-post-with-other-site |
| Text Typing – grab attention with animated typing headlines | text-typing |
| The Events Calendar | the-events-calendar |
| The Innovative Form Builder – IvyForms | ivyforms |
| TI WooCommerce Wishlist | ti-woocommerce-wishlist |
| Tournamatch | tournamatch |
| TranslatePress – Translate Multilingual sites with AI Translation | translatepress-multilingual |
| Travelly – Tour & Travel Booking Manager for WooCommerce | tour-booking-manager |
| Turisbook Booking System | turisbook-booking-system |
| Tutor LMS – eLearning and online course solution | tutor |
| Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin | ultimate-member |
| Ultimate Store Kit – Store Builder Addons for Elementor, WooCommerce Store Builder, EDD Store Builder | ultimate-store-kit |
| Ultra Addons for Contact Form 7 | ultimate-addons-for-contact-form-7 |
| Uncanny Automator – MCP Server + Automation MCP for Claude & ChatGPT | uncanny-automator |
| Uncanny Toolkit for LearnDash | uncanny-learndash-toolkit |
| Unlimited Elements for Elementor | unlimited-elements-for-elementor |
| Upsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups. | upsell-order-bump-offer-for-woocommerce |
| User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission | wp-user-frontend |
| User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder | user-registration |
| Userplace – Member Subscription, Restriction & Payments | userplace-member-subscription-restriction-payments |
| UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP | userswp |
| Vanquish Upload Files for WooCommerce | vanquish-upload-files-for-woocommerce |
| Vidplex – Ultimate Video Gallery Block for YouTube in Gutenberg | vidplex |
| Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… | vigilante |
| VikBooking Hotel Booking Engine & PMS | vikbooking |
| VikWidgetsLoader – Collection of Widgets | vikwidgetsloader |
| VOD Infomaniak | vod-infomaniak |
| WATI Chat and Notification | wati-chat-and-notification |
| WCFM Marketplace – Multivendor Marketplace for WooCommerce | wc-multivendor-marketplace |
| WCFM Membership – WooCommerce Memberships for Multivendor Marketplace | wc-multivendor-membership |
| WCFM – Frontend Manager for WooCommerce | wc-frontend-manager |
| WebToffee WP Backup and Migration | wp-migration-duplicator |
| weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot | wedocs |
| Welcart e-Commerce | usc-e-shop |
| weMail – Email Marketing, Newsletters Builder & Email Automations for WooCommerce | wemail |
| wePOS – Point Of Sale (POS) for WooCommerce & Dokan | wepos |
| WHIZZ | whizz |
| WooCommerce Stripe Payment Gateway | woocommerce-gateway-stripe |
| WP Activity Log | wp-security-audit-log |
| WP BASE Booking of Appointments, Services and Events | wp-base-booking-of-appointments-services-and-events |
| WP Booking System – Booking Calendar | wp-booking-system |
| WP Customer Area | customer-area |
| WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps | wp-data-access |
| WP Duplicate – WordPress Migration Plugin | local-sync |
| WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce | wp-event-manager |
| WP Fastest Cache – WordPress Cache Plugin | wp-fastest-cache |
| WP Google Review Slider | wp-google-places-review-slider |
| WP ImageViewer | wp-imageviewer |
| WP Inventory Manager | wp-inventory-manager |
| WP Libre Form | wp-libre-form |
| WP PageNavi Style | wp-pagenavi-style |
| WP Photo Album Plus | wp-photo-album-plus |
| WP Recipe Maker | wp-recipe-maker |
| WP Remote Users Sync | wp-remote-users-sync |
| WP Roster | wp-roster |
| Wp Social Login and Register Social Counter | wp-social |
| WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory | wp-user-manager |
| WP Visitor Statistics (Real Time Traffic) | wp-stats-manager |
| WP w3all phpBB | wp-w3all-phpbb-integration |
| WP-Lister Lite for Amazon | wp-lister-for-amazon |
| WP-Members Membership Plugin | wp-members |
| WP2LEADS | WordPress und KlickTipp einfach verbinden – WooCommerce und KlickTipp einfach verbinden | wp2leads |
| WPBakery Page Builder | js_composer |
| WPBruiser Security – No CAPTCHA Anti-Spam & Login Protection | goodbye-captcha |
| WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More | wpforms-lite |
| wpForo Forum | wpforo |
| WPJAM Basic | wpjam-basic |
| WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) | wpo365-login |
| WPSpeed – WordPress Speed, Cache & Performance Optimization (Core Web Vitals, PageSpeed 100) | wpspeed |
| WPSyncSheets For Contact Form 7 – CF7 Google Sheets Connector & Save to Database | contactsheets-lite |
| WPvivid — Backup, Migration & Staging | wpvivid-backuprestore |
| WS Form LITE – Drag & Drop Contact Form Builder | ws-form |
| Wurdey | wurdey |
| YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports | yaysmtp |
| YITH WooCommerce Gift Cards | yith-woocommerce-gift-cards |
| YITH WooCommerce Subscription | yith-woocommerce-subscription |
| YML for Yandex Market | yml-for-yandex-market |
| Zephyr Project Manager | zephyr-project-manager |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Soledad | soledad |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
Affected Software
BuddyForms [buddyforms]
Researcher
Affected Software
Confection WordPress Cable [confection]
Researcher
Affected Software
Contact Form 7 [contact-form-7]
Researcher
Affected Software
WP Duplicate – WordPress Migration Plugin [local-sync]
Researcher
Affected Software
EASY-JS-WPAPI Client HANDLE for the WordPress REST-API [node-wpapi-auth]
Researcher
Affected Software
Ecommerce Affiliate [ecommerce-affiliate]
Researchers
Affected Software
Fiber Admin [fiber-admin]
Researcher
Affected Software
WP Libre Form [wp-libre-form]
Researchers
Affected Software
Naimur Email OTP Verification for WooCommerce [naimur-email-otp-for-woocommerce]
Researcher
Affected Software
OAuth Single Sign On – SSO (OAuth Client) [miniorange-login-with-eve-online-google-facebook]
Researcher
Affected Software
payever Checkout – Composable Payment Gateway [payever-woocommerce-gateway]
Researcher
Printcart Store <= 2.13.2 – Unauthenticated Arbitrary File Upload via nbu_crop_image ‘url’ Parameter
9.8
Affected Software
Printcart Store – Web to Print Product Designer for WooCommerce [printcart-integration]
Researcher
Affected Software
Registration Form for WooCommerce [registration-form-for-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
Static Snapshot [static-snapshot]
Researchers
Affected Software
Ultra Addons for Contact Form 7 [ultimate-addons-for-contact-form-7]
Researcher
Affected Software
Researcher
Affected Software
Checkout Field Editor for WooCommerce (Pro) [woocommerce-checkout-field-editor-pro]
Researcher
Affected Software
ELEX WordPress HelpDesk & Customer Ticketing System [elex-helpdesk-customer-support-ticket-system]
Researcher
Affected Software
Advanced Members for ACF [advanced-members]
Researcher
BuddyBoss App <= 3.2.1 – Authenticated (Subscriber+) Arbitrary File Upload via Feedback Endpoint
8.8
Affected Software
BuddyBoss App [buddyboss-app]
Researcher
Affected Software
Researcher
Affected Software
Import and export users and customers [import-users-from-csv-with-meta]
Researcher
Affected Software
Interactive Real Estate – Floor Plan & Building Visualizer [interactive-real-estate]
Researcher
Komfortkasse for WooCommerce <= 1.4.8 – Cross-Site Request Forgery to Administrator Account Creation
8.8
Affected Software
Komfortkasse for WooCommerce [komfortkasse-for-woocommerce]
Researchers
Affected Software
Magic Link – Secure one click passwordless login [magic-link]
Researcher
Affected Software
MDJM Event Management [mobile-dj-manager]
Researcher
Affected Software
Mobile builder [mobile-builder]
Researcher
Affected Software
mView 豆瓣电影 [mview]
Researcher
Affected Software
QA Assistants – Driven by data [qa-heatmap-analytics]
Researcher
Affected Software
LiteSpeed Cache [litespeed-cache]
Researcher
Advanced Form Integration <= 2.10.2 – Unauthenticated PHP Object Injection via $_POST Parameters
8.1
Affected Software
Advanced Form Integration — Connect Forms to 300+ Apps [advanced-form-integration]
Researcher
Affected Software
All In One Login [change-wp-admin-login]
Researcher
Affected Software
Ever Accounting – Accounting & Invoicing Solution for Small Businesses [wp-ever-accounting]
Researcher
Affected Software
Live2DWebCanvas [live-2d]
Researcher
Affected Software
Motors – Car Dealership & Classified Listings Plugin [motors-car-dealership-classified-listings]
Researcher
Motors <= 1.4.128 – Authenticated (Subscriber+) File Deletion via ‘stm_dealer_logo_path’ Parameter
8.1
Affected Software
Motors – Car Dealership & Classified Listings Plugin [motors-car-dealership-classified-listings]
Researcher
Affected Software
Researcher
Affected Software
Tournamatch [tournamatch]
Researcher
Affected Software
Researcher
Affected Software
WPJAM Basic [wpjam-basic]
Researcher
Affected Software
Pubjet | پابجت [pubjet]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Booking for Appointments and Events Calendar – Amelia [ameliabooking]
Researcher
Affected Software
FunnelKit Payment Gateway for Stripe WooCommerce [funnelkit-stripe-woo-payment-gateway]
Researcher
Affected Software
GS JWT Authentication for WP REST API [gs-jwt-auth-and-otp-varification]
Researcher
Affected Software
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more [iubenda-cookie-law-solution]
Researcher
Affected Software
IVPAY payments [ivendpay-payments]
Researcher
Affected Software
SAML Single Sign On – SSO Login [miniorange-saml-20-single-sign-on]
Researcher
Affected Software
Travelly – Tour & Travel Booking Manager for WooCommerce [tour-booking-manager]
Researcher
Affected Software
Travelly – Tour & Travel Booking Manager for WooCommerce [tour-booking-manager]
Researcher
Affected Software
wpForo Forum [wpforo]
Researcher
Affected Software
wpForo Forum [wpforo]
Researcher
Affected Software
wpForo Forum [wpforo]
Researcher
Affected Software
WPSyncSheets For Contact Form 7 – CF7 Google Sheets Connector & Save to Database [contactsheets-lite]
Researcher
Affected Software
ACF Frontend Admin by DynamiApps [acf-frontend-form-element]
Researcher
Affected Software
JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder]
Researcher
Affected Software
Melapress Role Editor [melapress-role-editor]
Researcher
Affected Software
Researcher
Affected Software
placester [placester]
Researchers
Affected Software
Security For WooCommerce [ultimate-security-for-woocommerce]
Researcher
Affected Software
Uncanny Toolkit for LearnDash [uncanny-learndash-toolkit]
Researcher
Affected Software
Userplace – Member Subscription, Restriction & Payments [userplace-member-subscription-restriction-payments]
Researcher
Affected Software
WHIZZ [whizz]
Researcher
Affected Software
Researcher
Affected Software
ACF Frontend Admin by DynamiApps [acf-frontend-form-element]
Researcher
Affected Software
Advanced Custom Fields (ACF®) [advanced-custom-fields]
Researcher
Affected Software
Researcher
Affected Software
Anti-Spam, Spam FireWall by CleanTalk [cleantalk-spam-protect]
Researcher
Affected Software
Checkout Files Upload for WooCommerce [checkout-files-upload-woocommerce]
Researcher
Affected Software
Church Admin [church-admin]
Researcher
Affected Software
Cloud Blocks [cloud-blocks]
Researcher
Affected Software
Comments – wpDiscuz [wpdiscuz]
Researcher
Affected Software
Download Manager [download-manager]
Researcher
Affected Software
Researcher
Affected Software
Featured Image from URL (FIFU) [featured-image-from-url]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
FV Flowplayer Video Player [fv-wordpress-flowplayer]
Researcher
Affected Software
FV Flowplayer Video Player [fv-wordpress-flowplayer]
Researcher
Affected Software
Gallery for Social Photo [feed-instagram-lite]
Researcher
Affected Software
Researcher
Affected Software
Graphina – Charts and Graphs For Elementor [graphina-elementor-charts-and-graphs]
Researcher
Affected Software
Happyforms Pro [happyforms-upgrade]
Researcher
Affected Software
Happyforms Pro [happyforms-upgrade]
Researcher
Affected Software
Invoice Gateway for WooCommerce – Invoice Payment Gateway [invoice-gateway-for-woocommerce]
Researcher
Affected Software
Iptanus File Upload [wp-file-upload]
Researcher
Affected Software
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more [iubenda-cookie-law-solution]
Researcher
Affected Software
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more [iubenda-cookie-law-solution]
Researcher
JetFormBuilder — Dynamic Blocks Form Builder <= 3.6.8 – Unauthenticated Stored Cross-Site Scripting
7.2
Affected Software
JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder]
Researcher
JetFormBuilder — Dynamic Blocks Form Builder <= 3.6.8 – Unauthenticated Stored Cross-Site Scripting
7.2
Affected Software
JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder]
Researcher
JetFormBuilder <= 3.6.7 – Unauthenticated Stored Cross-Site Scripting via Form Record Preset Source
7.2
Affected Software
JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder]
Researcher
Affected Software
JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder]
Researcher
Affected Software
Link Library [link-library]
Researcher
Affected Software
MCB – Stats [mcb-stats]
Researcher
Affected Software
MDTF – Meta Data and Taxonomies Filter [wp-meta-data-filter-and-taxonomy-filter]
Researcher
Affected Software
Noptin – Newsletter, New Post Notifications & Email Automation [newsletter-optin-box]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Optimole <= 4.2.18 – Unauthenticated Stored Cross-Site Scripting via Page Profiler srcset Descriptor
7.2
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping, AI & Social Channels [webappick-product-feed-for-woocommerce]
Researcher
Quttera ThreatSign <= 4.1.0.48 – Unauthenticated Stored Cross-Site Scripting via User-Agent Header
7.2
Affected Software
Quttera ThreatSign – Web Malware Scanner for WordPress [quttera-web-malware-scanner]
Researcher
Affected Software
Remove Google Fonts – Disable, Block, or Replace with Bunny Fonts for GDPR Compliance [use-bunnyfont-host-google-fonts]
Researcher
Affected Software
RSVP and Event Management [rsvp]
Researcher
Affected Software
Slim Jetpack [slimjetpack]
Researcher
Affected Software
Stape Conversion Tracking [gtm-server-side]
Researcher
Affected Software
Strong Testimonials [strong-testimonials]
Researcher
Affected Software
Subscribe2 – Form, Email Subscribers & Newsletters [subscribe2]
Researcher
Affected Software
TranslatePress – Translate Multilingual sites with AI Translation [translatepress-multilingual]
Researcher
Affected Software
TranslatePress – Translate Multilingual sites with AI Translation [translatepress-multilingual]
Researcher
Affected Software
TranslatePress – Translate Multilingual sites with AI Translation [translatepress-multilingual]
Researcher
Affected Software
Turisbook Booking System [turisbook-booking-system]
Researcher
Affected Software
Unlimited Elements for Elementor [unlimited-elements-for-elementor]
Researcher
Affected Software
Unlimited Elements for Elementor [unlimited-elements-for-elementor]
Researcher
User Frontend <= 4.3.13 – Unauthenticated Stored Cross-Site Scripting via Taxonomy Field Text-Input
7.2
Affected Software
Researcher
Affected Software
VikBooking Hotel Booking Engine & PMS [vikbooking]
Researcher
Affected Software
WCFM Membership – WooCommerce Memberships for Multivendor Marketplace [wc-multivendor-membership]
Researcher
Affected Software
Welcart e-Commerce [usc-e-shop]
Researcher
Affected Software
WP Booking System – Booking Calendar [wp-booking-system]
Researcher
Affected Software
WP Customer Area [customer-area]
Researcher
Affected Software
WP Customer Area [customer-area]
Researcher
Affected Software
WP Photo Album Plus [wp-photo-album-plus]
Researcher
Affected Software
WP Visitor Statistics (Real Time Traffic) [wp-stats-manager]
Researcher
Affected Software
WP Visitor Statistics (Real Time Traffic) [wp-stats-manager]
Researcher
Affected Software
Researcher
Affected Software
WPvivid — Backup, Migration & Staging [wpvivid-backuprestore]
Researcher
WS Form LITE <= 1.12.18 – Unauthenticated Stored Cross-Site Scripting via Text Field Array Value
7.2
Affected Software
Researcher
Affected Software
Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce]
Researcher
Affected Software
Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce]
Researcher
Affected Software
Booking for Appointments and Events Calendar – Amelia [ameliabooking]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Cool FormKit Lite – Advanced Form Builder for Elementor [extensions-for-elementor-form]
Researcher
Affected Software
Researcher
Affected Software
Duplicator Pro [duplicator-pro]
Researcher
Affected Software
Dynific Addons for Elementor (formerly Anywhere Elementor) [anywhere-elementor]
Researcher
Affected Software
Dynific Addons for Elementor (formerly Anywhere Elementor) [anywhere-elementor]
Researcher
Affected Software
Dynific Addons for Elementor (formerly Anywhere Elementor) [anywhere-elementor]
Researcher
Affected Software
Event Tickets with Ticket Scanner [event-tickets-with-ticket-scanner]
Researcher
Affected Software
Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce [wp-event-solution]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder]
Researcher
Affected Software
JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder]
Researcher
Affected Software
MC4WP: Mailchimp for WordPress [mailchimp-for-wp]
Researcher
Affected Software
Media Library Assistant [media-library-assistant]
Researcher
Affected Software
Researcher
Affected Software
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker [quiz-master-next]
Researcher
Affected Software
Site Reviews [site-reviews]
Researcher
Affected Software
The Events Calendar [the-events-calendar]
Researcher
Affected Software
Travelly – Tour & Travel Booking Manager for WooCommerce [tour-booking-manager]
Researcher
Affected Software
Researcher
Affected Software
Welcart e-Commerce [usc-e-shop]
Researcher
Affected Software
WP w3all phpBB [wp-w3all-phpbb-integration]
Researcher
Affected Software
wpForo Forum [wpforo]
Researcher
Affected Software
Researcher
Affected Software
Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce]
Researcher
Affected Software
Add From Server Lite [add-from-server-reloaded]
Researcher
Affected Software
All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos [all-in-one-video-gallery]
Researcher
Affected Software
All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos [all-in-one-video-gallery]
Researcher
Affected Software
All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos [all-in-one-video-gallery]
Researcher
Affected Software
All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos [all-in-one-video-gallery]
Researcher
Affected Software
Appointment Booking Plugin for WooCommerce | Online Booking Calendar & Service Manager [service-booking-manager]
Researcher
Affected Software
ShopEngine Gutenberg WooCommerce Builder Blocks Addon – All in One WooCommerce Solution [blocks-for-shopengine]
Researcher
Affected Software
CookieYes – Cookie Banner, Cookie Consent & Cookie Notice for GDPR/CCPA [cookie-law-info]
Researcher
Affected Software
Customer Reviews for WooCommerce [customer-reviews-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Ditty – Responsive News Tickers, Sliders, and Lists [ditty-news-ticker]
Researcher
Affected Software
Dynific Addons for Elementor (formerly Anywhere Elementor) [anywhere-elementor]
Researcher
Affected Software
Dynific Addons for Elementor (formerly Anywhere Elementor) [anywhere-elementor]
Researcher
Affected Software
Easy Social Icons [easy-social-icons]
Researcher
Affected Software
Element Pack Addons for Elementor – MCP & AI-Ready Elementor Widgets, Elementor Templates, Elementor Addons [bdthemes-element-pack-lite]
Researcher
Affected Software
Researcher
Affected Software
Enable Media Replace [enable-media-replace]
Researcher
Affected Software
Researcher
Affected Software
EWWW Image Optimizer [ewww-image-optimizer]
Researcher
Affected Software
Falang multilanguage for WordPress [falang]
Researcher
Affected Software
Flipbox – Awesomes Flip Boxes Image Overlay [image-hover-effects-ultimate-visual-composer]
Researcher
Affected Software
Football Pool [football-pool]
Researcher
Affected Software
Researcher
Affected Software
FV Flowplayer Video Player [fv-wordpress-flowplayer]
Researcher
Affected Software
FV Flowplayer Video Player [fv-wordpress-flowplayer]
Researcher
Affected Software
GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor [gutenkit-blocks-addon]
Researcher
Affected Software
HTML5 Video Player – embed fast, responsive videos with ease [html5-video-player]
Researcher
Affected Software
Researcher
Affected Software
JS Help Desk – AI-Powered Support & Ticketing System [js-support-ticket]
Researcher
Affected Software
Kali Forms — Contact Form & Drag-and-Drop Builder [kali-forms]
Researcher
Affected Software
Kubio AI Page Builder [kubio]
Researcher
Affected Software
LearnPress – Course Review [learnpress-course-review]
Researcher
Affected Software
Researcher
Affected Software
Live Composer – Free WordPress Website Builder [live-composer-page-builder]
Researcher
Affected Software
Mang Board [mangboard]
Researcher
Affected Software
MDJM Event Management [mobile-dj-manager]
Researcher
Affected Software
Meta Box – A Framework for Dynamic Websites [meta-box]
Researcher
Affected Software
Modula Image Gallery – Photo Grid & Video Gallery [modula-best-grid-gallery]
Researcher
Affected Software
MoreConvert Wishlist for WooCommerce [smart-wishlist-for-more-convert]
Researcher
Affected Software
Motors – Car Dealership & Classified Listings Plugin [motors-car-dealership-classified-listings]
Researcher
Affected Software
Motors – Car Dealership & Classified Listings Plugin [motors-car-dealership-classified-listings]
Researcher
Affected Software
WP PageNavi Style [wp-pagenavi-style]
Researchers
Affected Software
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction [paid-member-subscriptions]
Researcher
Permalink Manager Lite <= 2.6.1 – Authenticated (Author+) Stored Cross-Site Scripting via Post Slug
6.4
Affected Software
Permalink Manager Lite [permalink-manager]
Researcher
Post Fields for Contact Form 7 <= 2.6.0 – Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Post Fields for Contact Form 7 [cf7-post-fields]
Researcher
Posts Table with Search & Sort <= 1.4.14 – Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
Affected Software
Posts Table with Search & Sort [posts-data-table]
Researcher
Affected Software
Posts Table with Search & Sort [posts-data-table]
Researcher
Affected Software
PowerPack Addons for Elementor: Widgets, Form Styler and Templates [powerpack-lite-for-elementor]
Researcher
Affected Software
Redux Framework [redux-framework]
Researcher
Affected Software
Redux Framework [redux-framework]
Researcher
Affected Software
Redux Framework [redux-framework]
Researcher
Affected Software
Redux Framework [redux-framework]
Researcher
Affected Software
SEOPress – AI SEO Plugin & On-site SEO [wp-seopress]
Researcher
Affected Software
SEOPress – AI SEO Plugin & On-site SEO [wp-seopress]
Researcher
Affected Software
Researcher
Affected Software
Simple CAPTCHA with Cloudflare Turnstile [simple-cloudflare-turnstile]
Researcher
Affected Software
Researcher
Affected Software
Social Slider Feed – Social Media Feed & Gallery Widgets [instagram-slider-widget]
Researcher
Soledad <= 8.7.7 – Authenticated (Subscriber+) Stored Cross-Site Scripting via Social Profile Fields
6.4
Affected Software
Spectra Legacy – Gutenberg Blocks [ultimate-addons-for-gutenberg]
Researcher
Stackable <= 3.19.9 – Authenticated (Contributor+) Stored Cross-Site Scripting via ‘save’ Parameter
6.4
Affected Software
Stackable – Page Builder Gutenberg Blocks [stackable-ultimate-gutenberg-blocks]
Researcher
Affected Software
Researcher
Affected Software
The Events Calendar [the-events-calendar]
Researcher
Affected Software
TI WooCommerce Wishlist [ti-woocommerce-wishlist]
Researcher
Affected Software
Researcher
Affected Software
Unlimited Elements for Elementor [unlimited-elements-for-elementor]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
VikWidgetsLoader – Collection of Widgets [vikwidgetsloader]
Researcher
Affected Software
WCFM – Frontend Manager for WooCommerce [wc-frontend-manager]
Researcher
Affected Software
WCFM Marketplace – Multivendor Marketplace for WooCommerce [wc-multivendor-marketplace]
Researcher
Affected Software
Researcher
Affected Software
WP Activity Log [wp-security-audit-log]
Researcher
Affected Software
WP Customer Area [customer-area]
Researcher
Affected Software
WP Customer Area [customer-area]
Researcher
Affected Software
WP Customer Area [customer-area]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
WP ImageViewer [wp-imageviewer]
Researcher
Affected Software
Parsi Date | بسته فارسی ساز وردپرس و ووکامرس پارسی دیت [wp-parsidate]
Researcher
Affected Software
WP Recipe Maker [wp-recipe-maker]
Researcher
Affected Software
Researcher
Affected Software
WP-Members Membership Plugin [wp-members]
Researcher
Affected Software
WPBakery Page Builder [js_composer]
Researcher
Affected Software
wpForo Forum [wpforo]
Researcher
Affected Software
Researcher
Affected Software
WP BASE Booking of Appointments, Services and Events [wp-base-booking-of-appointments-services-and-events]
Researcher
Affected Software
Cool Media Filter [cool-media-filter]
Researchers
Affected Software
iLeads SMS Gateway by Exsile [exsile-sms-gateway]
Researcher
Affected Software
MCP Server for WordPress – Connect Claude, ChatGPT & Gemini | AtlasMCP [ai-workflow-automation-ai-agent-hub]
Researcher
Affected Software
RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress [computer-repair-shop]
Researcher
Affected Software
Surfer – WordPress Plugin [surferseo]
Researcher
Affected Software
WCFM Membership – WooCommerce Memberships for Multivendor Marketplace [wc-multivendor-membership]
Researcher
Affected Software
Researcher
Affected Software
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP [videowhisper-live-streaming-integration]
Researcher
Affected Software
Duplicator Pro [duplicator-pro]
Researcher
Elementor Website Builder – more than just a page builder <= 4.3.5 – Reflected Cross-Site Scripting
6.1
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Mang Board [mangboard]
Researcher
Affected Software
QODE Wishlist for WooCommerce [qode-wishlist-for-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
WP Inventory Manager [wp-inventory-manager]
Researcher
Affected Software
Jupiter X Core [jupiterx-core]
Researcher
Affected Software
Noptin – Newsletter, New Post Notifications & Email Automation [newsletter-optin-box]
Researcher
Affected Software
Vanquish Upload Files for WooCommerce [vanquish-upload-files-for-woocommerce]
Researcher
Affected Software
WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache]
Researcher
Affected Software
WebToffee WP Backup and Migration [wp-migration-duplicator]
Researcher
Affected Software
AMP for WP – Accelerated Mobile Pages [accelerated-mobile-pages]
Researcher
Affected Software
Researcher
Affected Software
BuddyForms [buddyforms]
Researcher
Affected Software
Ditty – Responsive News Tickers, Sliders, and Lists [ditty-news-ticker]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
FV Flowplayer Video Player [fv-wordpress-flowplayer]
Researcher
Affected Software
Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks]
Researcher
Affected Software
JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder]
Researcher
Affected Software
Jupiter X Core [jupiterx-core]
Researcher
Affected Software
MasterStudy LMS WordPress Plugin – for Online Courses and Education [masterstudy-lms-learning-management-system]
Researcher
Affected Software
MotoPress Appointment Booking [motopress-appointment-lite]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
RSS Aggregator by Feedzy <= 5.2.13 – Unauthenticated Stored Cross-Site Scripting via Feed Item Title
5.4
Affected Software
Researcher
Affected Software
Smart Cookie Kit [smart-cookie-kit]
Researcher
Affected Software
Zephyr Project Manager [zephyr-project-manager]
Researcher
Affected Software
2Way VideoCalls and Random Chat – HTML5 Webcam Videochat [webcam-2way-videochat]
Researcher
Affected Software
Addon Elements for Elementor (formerly Elementor Addon Elements) [addon-elements-for-elementor-page-builder]
Researcher
Affected Software
Advanced Appointment Booking & Scheduling [advanced-appointment-booking-scheduling]
Researcher
Affected Software
All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos [all-in-one-video-gallery]
Researcher
Affected Software
All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos [all-in-one-video-gallery]
Researcher
Affected Software
Antom Payments [antom-payments]
Researcher
Affected Software
Researcher
Affected Software
Autopay dla WooCommerce [pay-wp]
Researcher
Affected Software
Better Search – Relevant search results for WordPress [better-search]
Researcher
Affected Software
Booking Package [booking-package]
Researcher
Affected Software
Car Dealer (Dealership) and Vehicle sales [cardealer]
Researcher
Affected Software
Researcher
Affected Software
ClickCease Click Fraud Protection [clickcease-click-fraud-protection]
Researcher
Affected Software
Community Events [community-events]
Researcher
Affected Software
Researcher
Affected Software
CURCY – Multi Currency for WooCommerce [woo-multi-currency]
Researcher
Affected Software
CURCY – Multi Currency for WooCommerce [woo-multi-currency]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
DOOFINDER Search and Discovery for WP & WooCommerce <= 2.17.2 – Unauthenticated Information Exposure
5.3
Affected Software
DOOFINDER Search and Discovery for WP & WooCommerce [doofinder-for-woocommerce]
Researcher
Affected Software
DT LMS – elearning, WordPress LMS Plugin [dt-lms-lite]
Researchers
Affected Software
Duplicator Pro [duplicator-pro]
Researcher
Affected Software
Dynific Addons for Elementor (formerly Anywhere Elementor) [anywhere-elementor]
Researcher
Affected Software
Essential Real Estate [essential-real-estate]
Researcher
Affected Software
Essential Real Estate [essential-real-estate]
Researcher
Affected Software
Essential Real Estate [essential-real-estate]
Researcher
Affected Software
Researcher
Event Tickets Manager for WooCommerce <= 1.5.0 – Unauthenticated Insecure Direct Object Reference
5.3
Affected Software
Event Tickets Manager for WooCommerce [event-tickets-manager-for-woocommerce]
Researcher
Affected Software
Event Tickets Manager for WooCommerce [event-tickets-manager-for-woocommerce]
Researcher
Affected Software
EventPrime – Events Calendar, Bookings, Tickets & AI [eventprime-event-calendar-management]
Researcher
Affected Software
Fiber Admin [fiber-admin]
Researchers
Affected Software
FloristPress for Woo – Customize your eCommerce store for your Florist [bakkbone-florist-companion]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Formidable Forms Signature Online Contract Automation [forms-signature-formidable-online-contract-automation]
Researcher
Affected Software
Researcher
Affected Software
FOX – Currency Switcher Professional for WooCommerce [woocommerce-currency-switcher]
Researcher
Affected Software
FraudLabs Pro SMS Verification [fraudlabs-pro-sms-verification]
Affected Software
Researcher
Affected Software
Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks]
Researcher
JetFormBuilder – Hierarchical Select <= 1.0.10 – Unauthenticated Insecure Direct Object Reference
5.3
Affected Software
JetFormBuilder – Hierarchical Select [jet-form-builder-hierarchical-select]
Researcher
Affected Software
JS Help Desk – AI-Powered Support & Ticketing System [js-support-ticket]
Researcher
Affected Software
Jupiter X Core [jupiterx-core]
Researcher
Affected Software
Researcher
Affected Software
Mail Debug for WooCommerce [mail-debug-for-woocommerce]
Researcher
MapSVG – Vector maps, Google Maps, Image maps – with AI assistant <= 8.16.3 – Missing Authorization
5.3
Affected Software
MapSVG – Vector maps, Google Maps, Image maps – with AI assistant [mapsvg-lite-interactive-vector-maps]
Researcher
Affected Software
MC4WP: Mailchimp for WordPress [mailchimp-for-wp]
Researcher
Affected Software
MC4WP: Mailchimp for WordPress [mailchimp-for-wp]
Researcher
Affected Software
MDJM Event Management [mobile-dj-manager]
Researcher
Affected Software
Mollie Payments for WooCommerce [mollie-payments-for-woocommerce]
Researcher
Affected Software
Mollie Payments for WooCommerce [mollie-payments-for-woocommerce]
Researcher
Affected Software
MoreConvert Wishlist for WooCommerce [smart-wishlist-for-more-convert]
Researcher
Affected Software
Order Tracking – WordPress Status Tracking Plugin [order-tracking]
Researcher
Affected Software
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction [paid-member-subscriptions]
Researcher
Affected Software
Pay with Vipps and MobilePay for WooCommerce [woo-vipps]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Paystack WooCommerce Payment Gateway [woo-paystack]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Premium Blocks – Gutenberg Blocks, Patterns & Templates [premium-blocks-for-gutenberg]
Researcher
Affected Software
Premium Blocks – Gutenberg Blocks, Patterns & Templates [premium-blocks-for-gutenberg]
Researcher
Affected Software
Premium Packages – Sell Digital Products Securely [wpdm-premium-packages]
Researcher
Affected Software
Premium Packages – Sell Digital Products Securely [wpdm-premium-packages]
Researcher
Affected Software
Pronamic Pay doneren met Mollie [pronamic-pay-doneren-met-mollie]
Researcher
Affected Software
Quick Event Manager [quick-event-manager]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Razorpay for WooCommerce [woo-razorpay]
Researcher
Affected Software
Razorpay for WooCommerce [woo-razorpay]
Researcher
Affected Software
WP Recipe Maker [wp-recipe-maker]
Researcher
Affected Software
Redirection for Contact Form 7 [wpcf7-redirect]
Researcher
Affected Software
Redux Framework [redux-framework]
Researcher
Affected Software
Simple CAPTCHA with Cloudflare Turnstile [simple-cloudflare-turnstile]
Researcher
Affected Software
Simple CAPTCHA with Cloudflare Turnstile [simple-cloudflare-turnstile]
Researcher
Affected Software
Subscriptions for WooCommerce [subscriptions-for-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
The Innovative Form Builder – IvyForms [ivyforms]
Researcher
Affected Software
Researcher
Affected Software
Uncanny Automator – MCP Server + Automation MCP for Claude & ChatGPT [uncanny-automator]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
WATI Chat and Notification [wati-chat-and-notification]
Researcher
Affected Software
WCFM Marketplace – Multivendor Marketplace for WooCommerce [wc-multivendor-marketplace]
Researcher
Affected Software
WCFM Membership – WooCommerce Memberships for Multivendor Marketplace [wc-multivendor-membership]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
WP Remote Users Sync [wp-remote-users-sync]
Researcher
Affected Software
Researcher
Affected Software
WP-Lister Lite for Amazon [wp-lister-for-amazon]
Researcher
Affected Software
YITH WooCommerce Gift Cards [yith-woocommerce-gift-cards]
Researcher
Affected Software
YITH WooCommerce Subscription [yith-woocommerce-subscription]
Researcher
Affected Software
YML for Yandex Market [yml-for-yandex-market]
Researcher
Affected Software
AAA Autoload Optimizer [aaa-option-optimizer]
Researcher
Affected Software
Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) [image-hover-effects-ultimate]
Researcher
Affected Software
Razorpay for WooCommerce [woo-razorpay]
Researcher
Affected Software
WPvivid — Backup, Migration & Staging [wpvivid-backuprestore]
Researcher
Affected Software
WPvivid — Backup, Migration & Staging [wpvivid-backuprestore]
Researcher
YaySMTP <= 2.7.8 – Authenticated (Administrator+) SQL Injection via ‘params[searchKey]’ Parameter
4.9
Affected Software
Researcher
Affected Software
Researcher
Stop Spammers Classic <= 2026.6 – Unauthenticated Stored Cross-Site Scripting via ‘author’ Parameter
4.7
Affected Software
Stop Spammers Classic [stop-spammer-registrations-plugin]
Researcher
Affected Software
Easy Social Icons [easy-social-icons]
Researcher
Affected Software
Live Composer – Free WordPress Website Builder [live-composer-page-builder]
Researcher
Affected Software
Secure Custom Fields [secure-custom-fields]
Researcher
Affected Software
Researcher
Affected Software
Advanced Custom Fields (ACF®) [advanced-custom-fields]
Researcher
Affected Software
Advanced Custom Fields (ACF®) [advanced-custom-fields]
Researcher
Affected Software
Advanced Custom Fields (ACF®) [advanced-custom-fields]
Researcher
Affected Software
AZEXO Store Locator [azexo-store-locator]
Researcher
Affected Software
BackUpWordPress [backupwordpress]
Researcher
Affected Software
Researcher
Affected Software
Contextual Related Posts [contextual-related-posts]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Dropshipping XML Import for WooCommerce [dropshipping-xml-for-woocommerce]
Researcher
Affected Software
Dynific Addons for Elementor (formerly Anywhere Elementor) [anywhere-elementor]
Researcher
Affected Software
Dynific Addons for Elementor (formerly Anywhere Elementor) [anywhere-elementor]
Researcher
Affected Software
Dynific Addons for Elementor (formerly Anywhere Elementor) [anywhere-elementor]
Researcher
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce < 1.17.11 – Missing Authorization
4.3
Affected Software
Researcher
Affected Software
Essential Real Estate [essential-real-estate]
Researcher
Affected Software
Essential Real Estate [essential-real-estate]
Researcher
Essential Real Estate 4.4.3 – 5.3.4 – Authenticated (Subscriber+) Insecure Direct Object Reference
4.3
Affected Software
Essential Real Estate [essential-real-estate]
Researcher
Affected Software
Researcher
Affected Software
Event Tickets with Ticket Scanner [event-tickets-with-ticket-scanner]
Researcher
Affected Software
Researcher
Affected Software
FloristPress for Woo – Customize your eCommerce store for your Florist [bakkbone-florist-companion]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Fusion Page Builder [fusion]
Researchers
Affected Software
FV Flowplayer Video Player [fv-wordpress-flowplayer]
Researcher
Affected Software
FV Flowplayer Video Player [fv-wordpress-flowplayer]
Researcher
Affected Software
FV Flowplayer Video Player [fv-wordpress-flowplayer]
Researcher
Affected Software
Researcher
Affected Software
WP Google Review Slider [wp-google-places-review-slider]
Researcher
HivePress – Business Directory, Listings & Classified Ads Plugin <= 1.8.1 – Missing Authorization
4.3
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Limit Login Attempts Security [limit-login-attempts-security]
Researcher
Affected Software
Limit Login Attempts Security [limit-login-attempts-security]
Researcher
Affected Software
Media Library Assistant [media-library-assistant]
Researcher
Affected Software
Melapress Role Editor [melapress-role-editor]
Researcher
Affected Software
Meta Box – A Framework for Dynamic Websites [meta-box]
Researcher
Affected Software
Researcher
Affected Software
Motors – Car Dealership & Classified Listings Plugin [motors-car-dealership-classified-listings]
Researcher
Affected Software
Motors – Car Dealership & Classified Listings Plugin [motors-car-dealership-classified-listings]
Researcher
Payment forms, Buy now buttons, and Invoicing System | GetPaid <= 2.8.62 – Missing Authorization
4.3
Affected Software
Researcher
Affected Software
Photo Gallery by Supsystic – Image Gallery, Masonry, Albums & Lightbox [gallery-by-supsystic]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Polylang [polylang]
Researcher
Affected Software
Post Duplicator [post-duplicator]
Researcher
Affected Software
PowerPress Podcasting plugin by Blubrry [powerpress]
Researcher
Affected Software
PowerPress Podcasting plugin by Blubrry [powerpress]
Researcher
Affected Software
Product Gallery Slider, Additional Variation Images for WooCommerce [woo-product-gallery-slider]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Royal Addons for Elementor – Addons and Templates Kit for Elementor [royal-elementor-addons]
Researcher
Affected Software
Secure Custom Fields [secure-custom-fields]
Researcher
Affected Software
Secure Custom Fields [secure-custom-fields]
Researcher
Affected Software
Secure Custom Fields [secure-custom-fields]
Researcher
Affected Software
Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce [sender-net-automated-emails]
Researcher
Affected Software
Simple Download Monitor [simple-download-monitor]
Researcher
Affected Software
Researcher
Affected Software
Sync Post With Other Site [sync-post-with-other-site]
Researcher
Affected Software
Researcher
Affected Software
Upsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups. [upsell-order-bump-offer-for-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
VOD Infomaniak [vod-infomaniak]
Researcher
Affected Software
VOD Infomaniak [vod-infomaniak]
Researcher
Affected Software
WCFM Marketplace – Multivendor Marketplace for WooCommerce [wc-multivendor-marketplace]
Researcher
Affected Software
WCFM Membership – WooCommerce Memberships for Multivendor Marketplace [wc-multivendor-membership]
Researcher
Affected Software
WCFM Membership – WooCommerce Memberships for Multivendor Marketplace [wc-multivendor-membership]
Researcher
Affected Software
Researcher
Affected Software
WooCommerce Stripe Payment Gateway [woocommerce-gateway-stripe]
Researcher
Affected Software
Researcher
Affected Software
Wp Social Login and Register Social Counter [wp-social]
Researcher
Affected Software
WPBruiser Security – No CAPTCHA Anti-Spam & Login Protection [goodbye-captcha]
Researcher
Affected Software
Fluent Support – Helpdesk & Customer Support Ticket System [fluent-support]
Researcher
Affected Software
Researcher
Affected Software
Post Duplicator [post-duplicator]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
WPvivid — Backup, Migration & Staging [wpvivid-backuprestore]
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
The post Wordfence Intelligence Weekly WordPress Vulnerability Report (November 2, 2026 to November 8, 2026) appeared first on Wordfence.