Last week, there were 549 vulnerabilities disclosed in 351 WordPress Plugins and 4 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 222 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to implement layered security, aligning with our overarching mission to secure WordPress with defense in depth strategies. That is why the Wordfence Intelligence user interface, vulnerability API, and webhook integration are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report. As the world’s leading quality vulnerability database provider for WordPress, site owners can rest assured knowing Wordfence has their back.
Enterprises, Hosting Providers, and even Individuals can utilize the vulnerability Database API to receive a complete dump of our database of over 40,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
New Firewall Rules Deployed Last Week
The Wordfence Threat Intelligence Team reviews each vulnerability to determine impact and severity, along with assessing the likelihood of exploitation, to verify that the Wordfence Firewall provides sufficient protection.
The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our Premium, Care, and Response customers last week:
-
- WordPress Core 4.7.0 – 7.1.3 – Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution
- The Grid <= 2.8.1 – Unauthenticated Remote Code Execution
- YOOtheme Pro 5.0.0 – 5.0.52 – Unauthenticated Arbitrary File Upload
- WAF-RULE-968 – Data redacted while we work with the vendor on a patch.
- WAF-RULE-972 – Data redacted while we work with the vendor on a patch.
Wordfence Premium, Care, and Response customers received this protection immediately, while users still running the free version of Wordfence will receive this enhanced protection after a 30 day delay.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 508 |
| Unpatched | 41 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Low Severity | 6 |
| Medium Severity | 394 |
| High Severity | 132 |
| Critical Severity | 17 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Improper Neutralization of Input During Web Page Generation | 209 |
| Missing Authorization | 128 |
| Deserialization of Untrusted Data | 35 |
| Improper Neutralization of Special Elements used in an SQL Command | 31 |
| Exposure of Sensitive Information to an Unauthorized Actor | 28 |
| Improper Authentication | 16 |
| Cross-Site Request Forgery | 14 |
| Improper Privilege Management | 14 |
| Improper Limitation of a Pathname to a Restricted Directory | 12 |
| Unrestricted Upload of File with Dangerous Type | 12 |
| Improper Control of Generation of Code | 11 |
| Authorization Bypass Through User-Controlled Key | 9 |
| Client-Side Enforcement of Server-Side Security | 3 |
| External Control of File Name or Path | 2 |
| Improper Control of Filename for Include/Require Statement in PHP Program | 2 |
| Insufficient Verification of Data Authenticity | 2 |
| Server-Side Request Forgery | 2 |
| Concurrent Execution using Shared Resource with Improper Synchronization | 1 |
| Improper Access Control | 1 |
| Improper Encoding or Escaping of Output | 1 |
| Improper Enforcement of Behavioral Workflow | 1 |
| Improper Input Validation | 1 |
| Improper Neutralization of CRLF Sequences | 1 |
| Improper Neutralization of Formula Elements in a CSV File | 1 |
| Improper Neutralization of Script-Related HTML Tags in a Web Page | 1 |
| Improper Neutralization of Special Elements in Output Used by a Downstream Component | 1 |
| Improper Restriction of Excessive Authentication Attempts | 1 |
| Improper Restriction of Rendered UI Layers or Frames | 1 |
| Improperly Controlled Modification of Object Prototype Attributes | 1 |
| Incorrect Authorization | 1 |
| Missing Authentication for Critical Functionality | 1 |
| Protection Mechanism Failure | 1 |
| Time-of-check Time-of-use (TOCTOU) Race Condition | 1 |
| Uncaught Exception | 1 |
| URL Redirection to Untrusted Site | 1 |
| Use of Cache Containing Sensitive Information | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 59 | |
| 29 | |
| 17 | |
| 14 | |
| 13 | |
| 12 | |
| 12 | |
| 9 | |
| 8 | |
| 8 | |
| 8 | |
| 8 | |
| 7 | |
| 7 | |
| 7 | |
| 6 | |
| 6 | |
| 6 | |
| 6 | |
| 6 | |
| 5 | |
| 5 | |
| 5 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| 10WebSocial | wd-instagram-feed |
| Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress | acadlix |
| Accordions | accordions |
| Ad Inserter – Ad Manager & AdSense Ads | ad-inserter |
| Advanced Ads – Tracking | advanced-ads-tracking |
| Advanced Custom Fields: Extended | acf-extended |
| Advanced Post Block – Display Your Posts Exactly How You Want | advanced-post-block |
| Advanced Views – Display Framework – Gutenberg/Elementor/Shortcode | acf-views |
| Affiliate Program Suite — SliceWP Affiliates | slicewp |
| affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display | affiliate-toolkit-starter |
| AI Alt Text Generator | ai-alt-text-generator |
| AI ChatBot for WooCommerce – WoowBot | woowbot-woocommerce-chatbot |
| AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini | ai-engine |
| AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media & Ai Chatbot | ai-marketing-expert |
| Ak Framework | ak-framework |
| All In One Lightbox – show any media in beautiful popups | lightbox-block |
| All In One Login | change-wp-admin-login |
| All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) | all-in-one-seo-pack |
| All-In-One Security (AIOS) – Security and Firewall | all-in-one-wp-security-and-firewall |
| All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos | all-in-one-video-gallery |
| AMP for WP – Accelerated Mobile Pages | accelerated-mobile-pages |
| Analytics Insights – Google Analytics Dashboard for WordPress | analytics-insights |
| Animated Text Block – Add Typing and Looping Text Effects | animated-text-block |
| Appointment Booking Calendar | appointment-booking-calendar |
| Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress | latepoint |
| Automated Import Products to Cart | auto-import-products-cart-dragdropfile |
| Avada (Fusion) Builder | fusion-builder |
| Awesome Support – WordPress HelpDesk & Support Plugin | awesome-support |
| BA Book Everything | ba-book-everything |
| Better Post & Filter Widgets for Elementor | better-post-filter-widgets-for-elementor |
| BeyondSEO – AI SEO to Improve Rankings, Listings & Online Visibility | beyondseo |
| Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More | bit-pi |
| Blocksy Companion | blocksy-companion |
| Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment | booking-and-rental-manager-for-woocommerce |
| Booking for Appointments and Events Calendar – Amelia | ameliabooking |
| Booking Package | booking-package |
| Bookit — Booking & Appointment Calendar | bookit |
| Booktics – Appointment Booking Calendar for Service Businesses | booktics |
| Bopo – WooCommerce Product Bundle Builder | bopo-woo-product-bundle-builder |
| Bot for Telegram on WooCommerce | bot-for-telegram-on-woocommerce |
| Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content | brave-popup-builder |
| Bricks Builder | bricksbuilder |
| Bricks Theme | UNKNOWN-CVE-2026-119325 |
| Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP | videowhisper-live-streaming-integration |
| bSlider – Build Sliders That Bring Your Content to Life | b-slider |
| BuddyBoss Platform | buddyboss-platform |
| BuddyForms | buddyforms |
| BuddyPress | buddypress |
| BuddyPress Xprofile Custom Field Types | bp-xprofile-custom-field-types |
| Bulk Media Register | bulk-media-register |
| Button Block – Stylish buttons that get more clicks | button-block |
| Casso Flow – Tự động xác nhận thanh toán chuyển khoản ngân hàng | casso-tu-dong-xac-nhan-thanh-toan-chuyen-khoan-ngan-hang |
| CF7 Mate – Contact Form 7 Styler, Multi-Step Forms & Conditional Logic | cf7-styler-for-divi |
| Chat AI with Dispatcher | chat-ai-with-dispatcher |
| Checkout Files Upload for WooCommerce | checkout-files-upload-woocommerce |
| Clean Login | clean-login |
| CMB2 | cmb2 |
| Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors | publishpress-authors |
| Community Events | community-events |
| Contact Form 7 | contact-form-7 |
| Contact Form by Supsystic – Drag & Drop Form Builder with Templates & Form Statistics | contact-form-by-supsystic |
| Contact Manager | contact-manager |
| Content Egg – Affiliate Product Importer & Price Comparison | content-egg |
| Content Pilot – Autoblogging & Affiliate Marketing Suite | wp-content-pilot |
| Content Slider Block – Bring your content to life with slides | content-slider-block |
| Cool FormKit Lite – Advanced Form Builder for Elementor | extensions-for-elementor-form |
| Copy Anything to Clipboard for WordPress – Copy Button, Copy Text & Copy Code | copy-the-code |
| Court Reservation – Tennis, Padel & Sports Court Booking | court-reservation |
| Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox | cozy-addons |
| CP Multi View Events Calendar | cp-multi-view-calendar |
| CryptoCloud – Crypto Payment Gateway | cryptocloud-crypto-payment-gateway |
| Custom Price for WooCommerce | custom-price-for-woocommerce |
| Customer Coupons for WooCommerce | woo-customer-coupons |
| Customer Email Verification for WooCommerce – OTP Verification, Block Fake Signups | customer-email-verification-for-woocommerce |
| Customer Engagement System – Popup Builder, Forms, CRM & Email Marketing Automation | popup-by-supsystic |
| Database Cleaner: Cleanup, Optimization & Repair | database-cleaner |
| Debug Log Manager – Conveniently Monitor and Inspect Errors | debug-log-manager |
| DEPART – Deposit and Part payment for Woo | depart-deposit-and-part-payment-for-woo |
| DesignSetGo | designsetgo |
| Discussion Board – WordPress Forum Plugin | wp-discussion-board |
| Document Embedder – let visitors read files without downloading | document-emberdder |
| Document Library Lite | document-library-lite |
| Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy | dokan-lite |
| DSGVO All in one for WP | dsgvo-all-in-one-for-wp |
| DT Directory Lite Addon | dt-directory-lite-addon |
| DXP ToolKit | dxp-toolkit |
| Dynamic QR Code – generator | dynamic-qr-code |
| E-cab Taxi Booking Manager for Woocommerce | ecab-taxi-booking-manager |
| Easy Appointment Booking & Scheduling Plugin – Webba Booking Calendar | webba-booking-lite |
| Easy Digital Downloads – eCommerce Payments and Subscriptions made easy | easy-digital-downloads |
| easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution | easyjobs |
| Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search | echo-knowledge-base |
| eCommerce Product Catalog | ecommerce-product-catalog |
| Email Templates Customizer and Designer for WordPress and WooCommerce | email-templates |
| Enable Media Replace | enable-media-replace |
| Enable SVG, WebP, and ICO Upload | enable-svg-webp-ico-upload |
| ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce | erp |
| Essential Addons for Elementor – Popular Elementor Templates & Widgets | essential-addons-for-elementor-lite |
| Eupago Gateway For Woocommerce | eupago-gateway-for-woocommerce |
| Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar | mage-eventpress |
| Event Tickets and Registration | event-tickets |
| EventPrime – Events Calendar, Bookings, Tickets & AI | eventprime-event-calendar-management |
| Events Made Easy | events-made-easy |
| Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI | everest-forms |
| Export and Import Users and Customers | users-customers-import-export-for-wp-woocommerce |
| Extensions for Leaflet Map | extensions-leaflet-map |
| Extra Fees for WooCommerce | woo-conditional-product-fees-for-checkout |
| Fast Velocity Minify | fast-velocity-minify |
| FeedWordPress | feedwordpress |
| Filter Everything — WordPress & WooCommerce Filters | filter-everything |
| Finale Lite – Sales Countdown Timer & Discount for WooCommerce | finale-woocommerce-sales-countdown-timer-discount |
| Firelight Lightbox | easy-fancybox |
| Flexible Chat – AI chatbot plugin for WordPress and WooCommerce | flexible-chat |
| Flexible Quantity & Price Calculator for WooCommerce | flexible-quantity-measurement-price-calculator-for-woocommerce |
| FlexStock – Product Stock Sync with Google Sheets for WooCommerce | stock-sync-with-google-sheet-for-woocommerce |
| FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution | fluent-crm |
| Food Store – Online Food Delivery & Pickup | food-store |
| Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder | formidable |
| Forminator Forms – Contact Form, Payment Form & Custom Form Builder | forminator |
| Fraud Prevention For WooCommerce and EDD | woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers |
| Frisbii Pay | reepay-checkout-gateway |
| Frontend Dashboard | frontend-dashboard |
| FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce | wp-marketing-automations |
| FV Flowplayer Video Player | fv-wordpress-flowplayer |
| Gallery PhotoBlocks | photoblocks-grid-gallery |
| Geo Mashup | geo-mashup |
| GEO my WP | geo-my-wp |
| GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | geodirectory |
| Germanized for WooCommerce | woocommerce-germanized |
| GIFTiT – Free Gifts for WooCommerce | ithemeland-free-gifts-for-woo |
| GiveWP – Donation Plugin and Fundraising Platform | give |
| GlobalPayments Gateway Provider for WooCommerce | global-payments-woocommerce |
| GoSMTP – SMTP for WordPress | gosmtp |
| Gravity Forms | gravityforms |
| Greenshift – animation and page builder blocks | greenshift-animation-and-page-builder-blocks |
| HANDMADE – Dropshipping for Etsy and WooCommerce | handmade-dropshipping-for-etsy-and-woo |
| HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates | happy-elementor-addons |
| Hide Price Until Login | hide-price-until-login |
| HivePress Claim Listings | hivepress-claim-listings |
| Hotel Booking | nd-booking |
| HT Mega Addons for Elementor – Elementor Widgets & Template Builder | ht-mega-for-elementor |
| HTML5 Video Player – embed fast, responsive videos with ease | html5-video-player |
| HUSKY – Products Filter for WooCommerce Professional. MCP is onboard | woocommerce-products-filter |
| Hustle – Email Marketing, Lead Generation, Optins, Popups | wordpress-popup |
| If-So Dynamic Content – Elementor & All Page Builders Personalization | if-so |
| Image Gallery Block – Showcase Photos in Stunning Responsive Grids | 3d-image-gallery |
| Import and export users and customers | import-users-from-csv-with-meta |
| Independent Analytics Pro | independent-analytics-pro |
| InstaWP Connect – 1-click WP Staging & Migration | instawp-connect |
| Iptanus File Upload | wp-file-upload |
| JetElements | jet-elements |
| JetEngine | jet-engine |
| JetFormBuilder — Dynamic Blocks Form Builder | jetformbuilder |
| JetSmartFilters | jet-smart-filters |
| Joinchat – Enhanced “click to chat” | creame-whatsapp-me |
| JoomSport – for Sports: Team & League, Football, Hockey & more | joomsport-sports-league-results-management |
| JS Help Desk – AI-Powered Support & Ticketing System | js-support-ticket |
| Jupiter X Core | jupiterx-core |
| Kadence Blocks — Page Builder Toolkit for Gutenberg Editor | kadence-blocks |
| Kali Forms — Contact Form & Drag-and-Drop Builder | kali-forms |
| Kirki – Freeform Page Builder, Website Builder & Customizer | kirki |
| Kit (formerly ConvertKit) – Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership | convertkit |
| Lazy Load for Videos | lazy-load-for-videos |
| LeadSnap | leadsnap |
| LearnPress – WordPress LMS Plugin for Create and Sell Online Courses | learnpress |
| LetterPress – Email Marketing, SMTP, Newsletter & Multi-Brand Subscriber Manager | letterpress |
Like Button Rating  LikeBtn |
likebtn-like-button |
| Link Library | link-library |
| LiteSpeed Cache | litespeed-cache |
| LogixFast Auth | logixfast-auth |
| Logo Slider – Logo Carousel, Logo Showcase, Logo Gallery & Client Logos | gs-logo-slider |
| Mail logging & Catcher | wp-mail-catcher |
| MailPoet – Newsletters, Email Marketing, and Automation | mailpoet |
| Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin | majestic-support |
| Mang Board | mangboard |
| MapPress – Free Map Plugin for Google Maps & OpenStreetMap | mappress-google-maps-for-wordpress |
| Mapster WP Maps | mapster-wp-maps |
| Masteriyo LMS – LMS Course Builder, Quizzes & Certificates | learning-management-system |
| MasterStudy LMS WordPress Plugin – for Online Courses and Education | masterstudy-lms-learning-management-system |
| Media Library Assistant | media-library-assistant |
| Media Player Addons for Elementor – Audio and Video Widgets for Elementor | media-player-addons-for-elementor |
| Memberpress | memberpress |
| MembershipWorks – Membership, Events & Directory | memberfindme |
| Menu Cart for WooCommerce | woocommerce-menu-bar-cart |
| Meow Gallery | meow-gallery |
| Meow Lightbox | meow-lightbox |
| Meta Box – A Framework for Dynamic Websites | meta-box |
| Motors – Car Dealership & Classified Listings Plugin | motors-car-dealership-classified-listings |
| MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar | mp3-music-player-by-sonaar |
| MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO | multiple-pages-generator-by-porthas |
| MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions | dc-woocommerce-multi-vendor |
| MW WP Form | mw-wp-form |
| MxChat – AI Chatbot & Content Generation for WordPress | mxchat-basic |
| My auctions allegro | my-auctions-allegro-free-edition |
| My Calendar – Accessible Event Manager | my-calendar |
| myPOS Checkout | mypos-virtual-for-woocommerce |
| News Kit Addons For Elementor | news-kit-elementor-addons |
| Newsletters | newsletters-lite |
| NewsmanApp | newsmanapp |
| NEX-Forms – Ultimate Forms Plugin for WordPress | nex-forms-express-wp-form-builder |
| Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder | ninja-forms |
| OpenStation – Admin Dashboard Notes, Custom Dashboard, AI Assistant & PWA | desktop-mode |
| Optima Express IDX | optima-express |
| OTP Login With Phone Number, OTP Verification | login-with-phone-number |
| Page and Post Restriction | page-and-post-restriction |
| Page Builder by SiteOrigin | siteorigin-panels |
| Panorama – Turn Photos into Immersive Virtual Tours | panorama |
| Password Protected | password-protected |
| Payable Payment Gateway for WooCommerce | payable-payment-gateway-for-woocommerce |
| PAYCOMET for WooCommerce | paytpv-for-woocommerce |
| Payconiq | wc-payconiq |
| PayHere Payment Gateway | payhere-payment-gateway |
| Payment Forms for Paystack | payment-forms-for-paystack |
| Payment forms, Buy now buttons, and Invoicing System | GetPaid | invoicing |
| PayPal Brasil para WooCommerce | paypal-brasil-para-woocommerce |
| PayPlug for WooCommerce (Official) | payplug |
| PDF Invoice for WooCommerce + Drag and Drop Template Builder | pdf-for-woocommerce |
| PDF Invoices & Packing Slips for WooCommerce | woocommerce-pdf-invoices-packing-slips |
| PDF Invoices & Packing Slips For WooCommerce | pdf-invoices-for-woocommerce |
| PDF Poster – Let visitors read PDF’s without leaving the page | pdf-poster |
| Perfect Images: Regenerate Thumbnails, Image Sizes, WebP & AVIF | wp-retina-2x |
| Phoenix Media Rename | phoenix-media-rename |
| Photo Engine (Media Organizer & Lightroom) | wplr-sync |
| Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery | nextgen-gallery |
| Pie Register Premium | pie-register-premium |
| PiWeb Disable payment method / Partial payment for WooCommerce | disable-payment-method-for-woocommerce |
| Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred | mycred |
| Popup Builder – Create highly converting, mobile friendly marketing popups. | popup-builder |
| Post Snippets – Custom WordPress Code Snippets Customizer | post-snippets |
| Postie | postie |
| PPWP – Password Protect Pages | password-protect-page |
| Premium Packages – Sell Digital Products Securely | wpdm-premium-packages |
| Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons | bdthemes-prime-slider-lite |
| Product Addons for Woocommerce – Product Options with Custom Fields | woo-custom-product-addons |
| Product Catalog Feed by PixelYourSite | product-catalog-feed |
| Product Designer for WooCommerce WordPress | Lumise | lumise |
| Product Feed Manager for WooCommerce – RexFeed – Sell on 200+ Shopping Channels | best-woocommerce-feed |
| Product Filter for WooCommerce by WBW | woo-product-filter |
| Product Import Export for WooCommerce – CSV Product Importer & Exporter | product-import-export-for-woo |
| ProfileGrid – User Profiles, Groups and Communities | profilegrid-user-profiles-groups-and-communities |
| Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker | wedevs-project-manager |
| Qode Membership | qode-membership |
| Quick Event Manager | quick-event-manager |
| Rank Math SEO – AI SEO Tools to Dominate SEO Rankings | seo-by-rank-math |
| Recipe Card Blocks Lite | recipe-card-blocks-by-wpzoom |
| Redux Framework | redux-framework |
| Related Posts for WordPress | related-posts-for-wp |
| Relevanssi – A Better Search | relevanssi |
| Revopic – Photo Reviews for WooCommerce | woo-photo-reviews |
| Rich Showcase for Google Reviews | widget-google-reviews |
| Rox Appointment Booking – Event, Calendar & Appointment Scheduling | rox-appointment-booking |
| Royal Addons for Elementor – Addons and Templates Kit for Elementor | royal-elementor-addons |
| Royal MCP – Secure AI Connector for Claude, ChatGPT & any LLM via MCP | royal-mcp |
| RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator | feedzy-rss-feeds |
| s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions | s2member |
| Schema App Structured Data | schema-app-structured-data-for-schemaorg |
| Security Optimizer – The All-In-One Protection Plugin | sg-security |
| Security Plugin, Firewall & Malware Scanner with Auto Removal | security-malware-firewall |
| SendPress Newsletters | sendpress |
| SEO Engine – Smart SEO with AI, Schema & Redirection for WordPress | seo-engine |
| SEOPress – AI SEO Plugin & On-site SEO | wp-seopress |
| Sequential Order Numbers for WooCommerce | sequential-order-numbers-for-woocommerce |
| Seraphinite Accelerator | seraphinite-accelerator |
| Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning | wp-simple-firewall |
| Shipping Zones by Drawing for WooCommerce | shipping-zones-by-drawing-for-woocommerce |
| ShopBuilder – WooCommerce Builder For Elementor | shopbuilder |
| Simple CAPTCHA with Cloudflare Turnstile | simple-cloudflare-turnstile |
| SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications | simple-form |
| Site Reviews | site-reviews |
| Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News | post-carousel |
| SMS Alert – SMS Notifications & OTP Login, COD Verification, Abandoned Cart Recovery | sms-alert |
| Social Snap — Social Share Buttons & Click to Tweet | socialsnap |
| Social Web Suite – Social Media Auto Post, Social Media Auto Publish | social-web-suite |
| Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews | gs-testimonial |
| Spectra Legacy – Gutenberg Blocks | ultimate-addons-for-gutenberg |
| Spexo Addons for Elementor – Elementor Widgets, Mega Menu, Popup Builder, Template Kits and Starter Templates for Elementor | sastra-essential-addons-for-elementor |
| SSL Wireless SMS Notification | ssl-wireless-sms-notification |
| StreamCast – bring live radio to your site with a sleek player | streamcast |
| Strong Testimonials | strong-testimonials |
| SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments | surecart |
| SureDash – Community, Courses & Member Dashboard | suredash |
| SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz | sureforms |
| TableOn – WordPress Posts Table Filterable | posts-table-filterable |
| Tainacan | tainacan |
| Text Typing – grab attention with animated typing headlines | text-typing |
| The Events Calendar | the-events-calendar |
| The Innovative Form Builder – IvyForms | ivyforms |
| The Plus Addons for Elementor – Mega Menu, Header Footer, Post Grid, AI Widgets & Templates | the-plus-addons-for-elementor-page-builder |
| The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid | the-post-grid |
| Themify Builder | themify-builder |
| ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin | thirstyaffiliates |
| Thrive Automator | thrive-automator |
| Timetics – Appointment Booking Calendar & Scheduling | timetics |
| Transliterator – Multilingual and Multi-script Text Conversion | serbian-transliteration |
| Travelly – Tour & Travel Booking Manager for WooCommerce | tour-booking-manager |
| Two Factor Authentication | tokenizer-two-factor-authentication |
| UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks | uichemy |
| Ultimate Addons for Elementor – Widgets, Templates, WooCommerce & Header Footer Builder | header-footer-elementor |
| Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin | ultimate-member |
| Uncanny Toolkit for LearnDash | uncanny-learndash-toolkit |
| UniPAY Payment Gateway For WooCommerce | unipay-payment-gateway-for-woocommerce |
| Unlimited Elements for Elementor | unlimited-elements-for-elementor |
| Upsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups. | upsell-order-bump-offer-for-woocommerce |
| User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission | wp-user-frontend |
| User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor | profile-builder |
| User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder | user-registration |
| User Submitted Posts – Enable Users to Submit Posts from the Front End | user-submitted-posts |
| UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP | userswp |
| Video Gallery Block – showcase your videos in a filterable gallery | video-gallery-block |
| Video Player for YouTube – Embed Videos Your Visitors Will Love to Watch | yt-player |
| VikRentCar Car Rental Management System | vikrentcar |
| vTables – Data Table Builder for CSV, Excel & JSON | vtables |
| W3 Total Cache | w3-total-cache |
| Waitlist Woocommerce ( Back in stock notifier ) | waitlist-woocommerce |
| Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments | wallet-system-for-woocommerce |
| WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce | woosquare |
| Web 2.0 Directory plugin for WordPress | w2dc |
| Webheadcoder Multi-Step Forms for Contact Form 7 | contact-form-7-multi-step-module |
| Webmention | webmention |
| Welcart e-Commerce | usc-e-shop |
| Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets | widget-options |
| Wild Apricot Login | wild-apricot-login |
| WooCommerce Extra Product Options Pro | woocommerce-extra-product-options-pro |
| WP Activity Log | wp-security-audit-log |
| WP BASE Booking of Appointments, Services and Events | wp-base-booking-of-appointments-services-and-events |
| WP Booking System – Booking Calendar | wp-booking-system |
| WP Crowdfunding | wp-crowdfunding |
| WP Customer Area | customer-area |
| WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps | wp-data-access |
| WP Directory Kit | wpdirectorykit |
| WP Easy Pay – Payment and Donation Form Builder for Square | wp-easy-pay |
| WP Inventory Manager | wp-inventory-manager |
| WP Job Portal – AI-Powered Recruitment System for Company or Job Board website | wp-job-portal |
| WP Media folders | wp-media-folders |
| WP Photo Album Plus | wp-photo-album-plus |
| WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars | wp-post-author |
| WP REST Cache | wp-rest-cache |
| WP Roster | wp-roster |
| Wp Social Login and Register Social Counter | wp-social |
| WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory | wp-user-manager |
| WP Visitor Statistics (Real Time Traffic) | wp-stats-manager |
| WP2LEADS | WordPress und KlickTipp einfach verbinden – WooCommerce und KlickTipp einfach verbinden | wp2leads |
| WPCargo Track & Trace | wpcargo |
| WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell | wpfunnels |
| WPO365 | MICROSOFT 365 GRAPH MAILER | wpo365-msgraphmailer |
| WPOrLogin – Custom Login, Social Login, CAPTCHA & Security | wporlogin |
| YITH PayPal Express Checkout for WooCommerce | yith-paypal-express-checkout-for-woocommerce |
| YITH WooCommerce Product Add-Ons | yith-woocommerce-product-add-ons |
| Zippy | zippy |
| Zoho Flow – No-Code Workflow Automation | zoho-flow |
| افزونه پیامک ووکامرس | Persian WooCommerce SMS | persian-woocommerce-sms |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Avada | Website Builder For WordPress & WooCommerce | Avada |
| Newsmatic | newsmatic |
| OceanWP | oceanwp |
| Royal Event | Catering & Wedding Chef WordPress Theme | royal-event |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
Affected Software
Bot for Telegram on WooCommerce [bot-for-telegram-on-woocommerce]
Researcher
Affected Software
Chat AI with Dispatcher [chat-ai-with-dispatcher]
Researchers
Affected Software
Checkout Files Upload for WooCommerce [checkout-files-upload-woocommerce]
Researcher
Patch Status
Patched
Patched
Published
Oct 31, 2026
Oct 31, 2026
Affected Software
Contact Form 7 [contact-form-7]
Researchers
Affected Software
Contact Manager [contact-manager]
Researcher
Affected Software
Gravity Forms [gravityforms]
Researchers
Affected Software
Jupiter X Core [jupiterx-core]
Researcher
Affected Software
LogixFast Auth [logixfast-auth]
Researcher
Affected Software
PDF Invoice for WooCommerce + Drag and Drop Template Builder [pdf-for-woocommerce]
Researcher
Affected Software
Pie Register Premium [pie-register-premium]
Researcher
Affected Software
Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker [wedevs-project-manager]
Researcher
Affected Software
Qode Membership [qode-membership]
Researcher
Affected Software
Researcher
Uncanny Toolkit for LearnDash <= 3.8.2 – Unauthenticated Authentication Bypass via ’email’ Parameter
9.8
Affected Software
Uncanny Toolkit for LearnDash [uncanny-learndash-toolkit]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
WP Booking System – Booking Calendar [wp-booking-system]
Researcher
Affected Software
Ak Framework [ak-framework]
Researcher
Affected Software
BuddyBoss Platform [buddyboss-platform]
Researcher
Affected Software
Export and Import Users and Customers [users-customers-import-export-for-wp-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Memberpress [memberpress]
Researcher
Affected Software
OTP Login With Phone Number, OTP Verification [login-with-phone-number]
Researcher
Affected Software
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery]
Researcher
Affected Software
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math]
Researcher
Affected Software
Rox Appointment Booking – Event, Calendar & Appointment Scheduling [rox-appointment-booking]
Researcher
Affected Software
The Innovative Form Builder – IvyForms [ivyforms]
Researcher
Affected Software
Researcher
Affected Software
VikRentCar Car Rental Management System [vikrentcar]
Researcher
Affected Software
Researcher
Affected Software
Database Cleaner: Cleanup, Optimization & Repair [database-cleaner]
Researcher
Affected Software
Researcher
Affected Software
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy [easy-digital-downloads]
Researcher
Affected Software
Enable Media Replace [enable-media-replace]
Researcher
Affected Software
Frontend Dashboard [frontend-dashboard]
ProfileGrid – User Profiles, Groups and Communities [profilegrid-user-profiles-groups-and-communities]
Researcher
Affected Software
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce [wp-marketing-automations]
Researcher
Affected Software
LeadSnap [leadsnap]
Researcher
Affected Software
Royal Event | Catering & Wedding Chef WordPress Theme [royal-event]
Researcher
Affected Software
Security Plugin, Firewall & Malware Scanner with Auto Removal [security-malware-firewall]
Researcher
SSL Wireless SMS Notification <= 3.8.1 – Unauthenticated Authentication Bypass to Account Takeover
8.1
Affected Software
SSL Wireless SMS Notification [ssl-wireless-sms-notification]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
WordPress Core 4.7.0 – 7.1.3 – Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution
8.1
Affected Software
WordPress [wordpress]
Researcher
Affected Software
Wp Social Login and Register Social Counter [wp-social]
Researcher
Affected Software
Zoho Flow – No-Code Workflow Automation [zoho-flow]
Researcher
Affected Software
10WebSocial [wd-instagram-feed]
Researcher
Affected Software
Advanced Custom Fields: Extended [acf-extended]
Researcher
Affected Software
affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display [affiliate-toolkit-starter]
Researcher
Affected Software
Researcher
Affected Software
Animated Text Block – Add Typing and Looping Text Effects [animated-text-block]
Researcher
Affected Software
Researcher
BuddyPress Xprofile Custom Field Types <= 1.3.1 – Authenticated (Subscriber+) PHP Object Injection
7.5
Affected Software
BuddyPress Xprofile Custom Field Types [bp-xprofile-custom-field-types]
Researcher
Affected Software
DXP ToolKit [dxp-toolkit]
Researcher
Affected Software
Dynamic QR Code – generator [dynamic-qr-code]
Researcher
Affected Software
Email Templates Customizer and Designer for WordPress and WooCommerce [email-templates]
Researcher
Affected Software
Enable Media Replace [enable-media-replace]
Researcher
Affected Software
Extra Fees for WooCommerce [woo-conditional-product-fees-for-checkout]
Researcher
Affected Software
Filter Everything — WordPress & WooCommerce Filters [filter-everything]
Researcher
Affected Software
Researcher
Affected Software
Frisbii Pay [reepay-checkout-gateway]
Researcher
Affected Software
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce [wp-marketing-automations]
Researcher
Affected Software
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce [wp-marketing-automations]
Researcher
Affected Software
Researcher
Affected Software
Mail logging & Catcher [wp-mail-catcher]
Researcher
Affected Software
MasterStudy LMS WordPress Plugin – for Online Courses and Education [masterstudy-lms-learning-management-system]
Researcher
Affected Software
Motors – Car Dealership & Classified Listings Plugin [motors-car-dealership-classified-listings]
Researcher
Affected Software
News Kit Addons For Elementor [news-kit-elementor-addons]
Researcher
Affected Software
Phoenix Media Rename [phoenix-media-rename]
Researcher
Affected Software
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery]
Researcher
Affected Software
Researcher
Affected Software
SendPress Newsletters [sendpress]
Researcher
Affected Software
Social Snap — Social Share Buttons & Click to Tweet [socialsnap]
Researcher
Affected Software
Social Web Suite – Social Media Auto Post, Social Media Auto Publish [social-web-suite]
Researcher
Affected Software
Researcher
Affected Software
Spexo Addons for Elementor – Elementor Widgets, Mega Menu, Popup Builder, Template Kits and Starter Templates for Elementor [sastra-essential-addons-for-elementor]
Researcher
Affected Software
Transliterator – Multilingual and Multi-script Text Conversion [serbian-transliteration]
Researcher
Affected Software
Unlimited Elements for Elementor [unlimited-elements-for-elementor]
Researcher
Affected Software
Affected Software
Wild Apricot Login [wild-apricot-login]
Researcher
Affected Software
WP Directory Kit [wpdirectorykit]
Researcher
WP Easy Pay – Payment and Donation Form Builder for Square <= 4.5.4 – Unauthenticated Path Traversal
7.5
Affected Software
Researcher
Affected Software
WP Media folders [wp-media-folders]
Researcher
Affected Software
WPCargo Track & Trace [wpcargo]
Researcher
Affected Software
Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite]
Researcher
Affected Software
Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite]
Researcher
Affected Software
Researcher
Affected Software
Ad Inserter – Ad Manager & AdSense Ads [ad-inserter]
Researcher
Affected Software
Researcher
Affiliate Program Suite — SliceWP Affiliates <= 1.2.13 – Unauthenticated Stored Cross-Site Scripting
7.2
Affected Software
Researcher
Affected Software
affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display [affiliate-toolkit-starter]
Researcher
Affected Software
Researcher
Affected Software
All In One Login [change-wp-admin-login]
Researcher
Affected Software
AMP for WP – Accelerated Mobile Pages [accelerated-mobile-pages]
Researcher
Affected Software
Analytics Insights – Google Analytics Dashboard for WordPress [analytics-insights]
Researcher
Affected Software
BA Book Everything [ba-book-everything]
Researcher
Affected Software
Community Events [community-events]
Researcher
Affected Software
Contact Form by Supsystic – Drag & Drop Form Builder with Templates & Form Statistics [contact-form-by-supsystic]
Researcher
Affected Software
Customer Engagement System – Popup Builder, Forms, CRM & Email Marketing Automation [popup-by-supsystic]
Researcher
Affected Software
Customer Engagement System – Popup Builder, Forms, CRM & Email Marketing Automation [popup-by-supsystic]
Researcher
Affected Software
Debug Log Manager – Conveniently Monitor and Inspect Errors [debug-log-manager]
Researcher
Affected Software
DSGVO All in one for WP [dsgvo-all-in-one-for-wp]
Researcher
Affected Software
DXP ToolKit [dxp-toolkit]
Researcher
Affected Software
Researcher
Affected Software
eCommerce Product Catalog [ecommerce-product-catalog]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Fast Velocity Minify [fast-velocity-minify]
Researcher
FeedWordPress <= 2026.0517 – Unauthenticated Stored Cross-Site Scripting via Syndicated Feed Content
7.2
Affected Software
FeedWordPress [feedwordpress]
Researcher
Affected Software
Food Store – Online Food Delivery & Pickup [food-store]
Researcher
Affected Software
Food Store – Online Food Delivery & Pickup [food-store]
Researcher
Affected Software
GlobalPayments Gateway Provider for WooCommerce [global-payments-woocommerce]
Researcher
Affected Software
Gravity Forms [gravityforms]
Researcher
Affected Software
Gravity Forms [gravityforms]
Researcher
Affected Software
Independent Analytics Pro [independent-analytics-pro]
Researcher
Affected Software
Iptanus File Upload [wp-file-upload]
Researcher
Affected Software
JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder]
Researcher
Affected Software
Mang Board [mangboard]
Researcher
Affected Software
Mapster WP Maps [mapster-wp-maps]
Researcher
Affected Software
Menu Cart for WooCommerce [woocommerce-menu-bar-cart]
Researcher
Affected Software
Meow Lightbox [meow-lightbox]
Researcher
Affected Software
MxChat – AI Chatbot & Content Generation for WordPress [mxchat-basic]
Researcher
Affected Software
NewsmanApp [newsmanapp]
Researcher
Affected Software
NEX-Forms – Ultimate Forms Plugin for WordPress [nex-forms-express-wp-form-builder]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
PDF Invoices & Packing Slips for WooCommerce [woocommerce-pdf-invoices-packing-slips]
Researcher
Affected Software
PDF Invoices & Packing Slips For WooCommerce [pdf-invoices-for-woocommerce]
Researcher
Affected Software
PPWP – Password Protect Pages [password-protect-page]
Researcher
Affected Software
Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons [bdthemes-prime-slider-lite]
Researcher
Affected Software
Relevanssi – A Better Search [relevanssi]
Researcher
Affected Software
Schema App Structured Data [schema-app-structured-data-for-schemaorg]
Researcher
Affected Software
Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning [wp-simple-firewall]
Researcher
Affected Software
Shipping Zones by Drawing for WooCommerce [shipping-zones-by-drawing-for-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
User Submitted Posts – Enable Users to Submit Posts from the Front End [user-submitted-posts]
Researcher
Affected Software
VikRentCar Car Rental Management System [vikrentcar]
Researcher
Affected Software
VikRentCar Car Rental Management System [vikrentcar]
Researcher
Affected Software
VikRentCar Car Rental Management System [vikrentcar]
Researcher
Affected Software
VikRentCar Car Rental Management System [vikrentcar]
Researcher
Affected Software
WP Visitor Statistics (Real Time Traffic) [wp-stats-manager]
Researcher
Affected Software
W3 Total Cache [w3-total-cache]
Researcher
Affected Software
Welcart e-Commerce [usc-e-shop]
Researcher
Affected Software
WPO365 | MICROSOFT 365 GRAPH MAILER [wpo365-msgraphmailer]
Researcher
Affected Software
Accordions [accordions]
Researcher
Affected Software
Researcher
Affected Software
Finale Lite – Sales Countdown Timer & Discount for WooCommerce [finale-woocommerce-sales-countdown-timer-discount]
Researcher
Affected Software
FV Flowplayer Video Player [fv-wordpress-flowplayer]
Researcher
Affected Software
myPOS Checkout [mypos-virtual-for-woocommerce]
Researcher
Product Catalog Feed by PixelYourSite <= 3.1.4 – Authenticated (Shop Manager+) PHP Object Injection
6.6
Affected Software
Product Catalog Feed by PixelYourSite [product-catalog-feed]
Researcher
Affected Software
Product Feed Manager for WooCommerce – RexFeed – Sell on 200+ Shopping Channels [best-woocommerce-feed]
Researcher
Affected Software
Zippy [zippy]
Researcher
Affected Software
Ad Inserter – Ad Manager & AdSense Ads [ad-inserter]
Researcher
Affected Software
Advanced Ads – Tracking [advanced-ads-tracking]
Researcher
Affected Software
Automated Import Products to Cart [auto-import-products-cart-dragdropfile]
Researcher
Affected Software
BuddyPress [buddypress]
Researcher
Affected Software
BuddyPress [buddypress]
Researcher
Affected Software
Bulk Media Register [bulk-media-register]
Researcher
Affected Software
CF7 Mate – Contact Form 7 Styler, Multi-Step Forms & Conditional Logic [cf7-styler-for-divi]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
GIFTiT – Free Gifts for WooCommerce [ithemeland-free-gifts-for-woo]
Researcher
JoomSport <= 5.7.11 – Authenticated (Contributor+) SQL Injection via ‘team_id’ Shortcode Attribute
6.5
Affected Software
JoomSport – for Sports: Team & League, Football, Hockey & more [joomsport-sports-league-results-management]
Researcher
JoomSport <= 5.7.14 – Authenticated (Contributor+) SQL Injection via ‘pgroup’ Shortcode Attribute
6.5
Affected Software
JoomSport – for Sports: Team & League, Football, Hockey & more [joomsport-sports-league-results-management]
Researcher
Affected Software
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin [majestic-support]
Researcher
Affected Software
Media Library Assistant [media-library-assistant]
Researcher
Affected Software
Meow Gallery [meow-gallery]
Researcher
Affected Software
My Calendar – Accessible Event Manager [my-calendar]
Researcher
Affected Software
Researcher
Affected Software
Page and Post Restriction [page-and-post-restriction]
Researcher
Affected Software
Recipe Card Blocks Lite [recipe-card-blocks-by-wpzoom]
Researcher
Affected Software
Redux Framework [redux-framework]
Researcher
Affected Software
Rich Showcase for Google Reviews [widget-google-reviews]
Researcher
Affected Software
Spectra Legacy – Gutenberg Blocks [ultimate-addons-for-gutenberg]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
VikRentCar Car Rental Management System [vikrentcar]
Researcher
Affected Software
Researcher
Affected Software
WP Inventory Manager [wp-inventory-manager]
Researcher
Affected Software
WP Visitor Statistics (Real Time Traffic) [wp-stats-manager]
Researcher
Affected Software
Researcher
Affected Software
Ad Inserter – Ad Manager & AdSense Ads [ad-inserter]
Researcher
Affected Software
All In One Lightbox – show any media in beautiful popups [lightbox-block]
Researcher
Affected Software
All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos [all-in-one-video-gallery]
Researcher
Affected Software
All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos [all-in-one-video-gallery]
Researcher
Affected Software
Appointment Booking Calendar [appointment-booking-calendar]
Researcher
Affected Software
Avada (Fusion) Builder [fusion-builder]
Researcher
Affected Software
Awesome Support – WordPress HelpDesk & Support Plugin [awesome-support]
Researcher
Affected Software
Better Post & Filter Widgets for Elementor [better-post-filter-widgets-for-elementor]
Researcher
Affected Software
Blocksy Companion [blocksy-companion]
Researcher
Affected Software
Booking for Appointments and Events Calendar – Amelia [ameliabooking]
Researcher
Affected Software
Researcher
BuddyBoss Platform <= 3.6.0 – Authenticated (Subscriber+) Stored Cross-Site Scripting via Group Name
6.4
Affected Software
BuddyBoss Platform [buddyboss-platform]
Researcher
Affected Software
Button Block – Stylish buttons that get more clicks [button-block]
Researcher
Affected Software
Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors [publishpress-authors]
Researcher
Affected Software
Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors [publishpress-authors]
Researcher
Affected Software
Content Slider Block – Bring your content to life with slides [content-slider-block]
Researcher
Affected Software
Cool FormKit Lite – Advanced Form Builder for Elementor [extensions-for-elementor-form]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
CP Multi View Events Calendar [cp-multi-view-calendar]
Researcher
Affected Software
Discussion Board – WordPress Forum Plugin [wp-discussion-board]
Researcher
Affected Software
Discussion Board – WordPress Forum Plugin [wp-discussion-board]
Researcher
Affected Software
Document Embedder – let visitors read files without downloading [document-emberdder]
Researcher
Affected Software
Researcher
Affected Software
Enable SVG, WebP, and ICO Upload [enable-svg-webp-ico-upload]
Researcher
Enable SVG, WebP, and ICO Upload 1.1.3 – 1.1.5 – Authenticated (Author+) Stored Cross-Site Scripting
6.4
Affected Software
Enable SVG, WebP, and ICO Upload [enable-svg-webp-ico-upload]
Researcher
Affected Software
Events Made Easy [events-made-easy]
Researcher
Affected Software
Firelight Lightbox [easy-fancybox]
Researcher
Affected Software
Firelight Lightbox [easy-fancybox]
Researcher
Affected Software
FlexStock – Product Stock Sync with Google Sheets for WooCommerce [stock-sync-with-google-sheet-for-woocommerce]
Researcher
Affected Software
FV Flowplayer Video Player [fv-wordpress-flowplayer]
Researcher
Affected Software
Gallery PhotoBlocks [photoblocks-grid-gallery]
Researcher
Affected Software
Gallery PhotoBlocks [photoblocks-grid-gallery]
Researcher
Affected Software
Geo Mashup [geo-mashup]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates [happy-elementor-addons]
Researcher
Affected Software
HTML5 Video Player – embed fast, responsive videos with ease [html5-video-player]
Researcher
Affected Software
Hustle – Email Marketing, Lead Generation, Optins, Popups [wordpress-popup]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Image Gallery Block – Showcase Photos in Stunning Responsive Grids [3d-image-gallery]
Researcher
Affected Software
Import and export users and customers [import-users-from-csv-with-meta]
Researcher
Affected Software
JetElements [jet-elements]
Researcher
Affected Software
JetElements [jet-elements]
Researcher
Affected Software
JetSmartFilters [jet-smart-filters]
Researcher
Affected Software
JetSmartFilters [jet-smart-filters]
Researcher
Affected Software
Joinchat – Enhanced “click to chat” [creame-whatsapp-me]
Researcher
Affected Software
Jupiter X Core [jupiterx-core]
Researcher
Affected Software
Kadence Blocks — Page Builder Toolkit for Gutenberg Editor [kadence-blocks]
Researcher
Affected Software
Kadence Blocks — Page Builder Toolkit for Gutenberg Editor [kadence-blocks]
Researcher
Affected Software
Kali Forms — Contact Form & Drag-and-Drop Builder [kali-forms]
Researcher
Affected Software
Lazy Load for Videos [lazy-load-for-videos]
Researcher
Affected Software
LiteSpeed Cache [litespeed-cache]
Researcher
Affected Software
Mang Board [mangboard]
Researcher
Affected Software
Media Library Assistant [media-library-assistant]
Researcher
Affected Software
Media Library Assistant [media-library-assistant]
Researcher
Affected Software
Media Player Addons for Elementor – Audio and Video Widgets for Elementor [media-player-addons-for-elementor]
Researcher
Affected Software
Meow Gallery [meow-gallery]
Researcher
Affected Software
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar [mp3-music-player-by-sonaar]
Researcher
Affected Software
MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO [multiple-pages-generator-by-porthas]
Researcher
Affected Software
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions [dc-woocommerce-multi-vendor]
Researcher
Affected Software
Page Builder by SiteOrigin [siteorigin-panels]
Researcher
Affected Software
Researcher
Affected Software
Password Protected [password-protected]
Researcher
Affected Software
Researcher
Affected Software
Photo Engine (Media Organizer & Lightroom) [wplr-sync]
Researcher
Affected Software
Post Snippets – Custom WordPress Code Snippets Customizer [post-snippets]
Researcher
Affected Software
Product Import Export for WooCommerce – CSV Product Importer & Exporter [product-import-export-for-woo]
Researcher
Affected Software
Redux Framework [redux-framework]
Researcher
Affected Software
Royal Addons for Elementor – Addons and Templates Kit for Elementor [royal-elementor-addons]
Researcher
Affected Software
Royal Addons for Elementor – Addons and Templates Kit for Elementor [royal-elementor-addons]
Researcher
Affected Software
Royal Addons for Elementor – Addons and Templates Kit for Elementor [royal-elementor-addons]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
SEOPress – AI SEO Plugin & On-site SEO [wp-seopress]
Researcher
Affected Software
Sequential Order Numbers for WooCommerce [sequential-order-numbers-for-woocommerce]
Researcher
Affected Software
Site Reviews [site-reviews]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Strong Testimonials [strong-testimonials]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
The Events Calendar [the-events-calendar]
Researcher
Affected Software
The Events Calendar [the-events-calendar]
Researcher
Affected Software
The Plus Addons for Elementor – Mega Menu, Header Footer, Post Grid, AI Widgets & Templates [the-plus-addons-for-elementor-page-builder]
Researcher
Affected Software
Researcher
Affected Software
Themify Builder [themify-builder]
Researcher
Affected Software
Travelly – Tour & Travel Booking Manager for WooCommerce [tour-booking-manager]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Video Gallery Block – showcase your videos in a filterable gallery [video-gallery-block]
Researcher
Affected Software
VikRentCar Car Rental Management System [vikrentcar]
Researcher
Affected Software
Waitlist Woocommerce ( Back in stock notifier ) [waitlist-woocommerce]
Researcher
Patch Status
Patched
Patched
Published
Oct 29, 2026
Oct 29, 2026
Affected Software
WordPress [wordpress]
Researcher
Patch Status
Patched
Patched
Published
Oct 29, 2026
Oct 29, 2026
Affected Software
WordPress [wordpress]
Researcher
Patch Status
Patched
Patched
Published
Oct 29, 2026
Oct 29, 2026
Affected Software
WordPress [wordpress]
Researcher
Patch Status
Patched
Patched
Published
Oct 29, 2026
Oct 29, 2026
Affected Software
WordPress [wordpress]
Researcher
Patch Status
Patched
Patched
Published
Oct 29, 2026
Oct 29, 2026
Affected Software
WordPress [wordpress]
Researcher
Patch Status
Patched
Patched
Published
Oct 29, 2026
Oct 29, 2026
Affected Software
WordPress [wordpress]
Researcher
Patch Status
Patched
Patched
Published
Oct 29, 2026
Oct 29, 2026
Affected Software
WordPress [wordpress]
Researcher
Patch Status
Patched
Patched
Published
Oct 29, 2026
Oct 29, 2026
Affected Software
WordPress [wordpress]
Researcher
Patch Status
Patched
Patched
Published
Oct 29, 2026
Oct 29, 2026
Affected Software
WordPress [wordpress]
Researchers
Patch Status
Patched
Patched
Published
Oct 29, 2026
Oct 29, 2026
Affected Software
WordPress [wordpress]
Researcher
Affected Software
WP Customer Area [customer-area]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite]
Researcher
Affected Software
GoSMTP – SMTP for WordPress [gosmtp]
Researcher
Affected Software
Researcher
Affected Software
WP BASE Booking of Appointments, Services and Events [wp-base-booking-of-appointments-services-and-events]
Researcher
Affected Software
Ad Inserter – Ad Manager & AdSense Ads [ad-inserter]
Researcher
Affected Software
Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search [echo-knowledge-base]
Researcher
Affected Software
eCommerce Product Catalog [ecommerce-product-catalog]
Researcher
Affected Software
Researcher
MailPoet – Newsletters, Email Marketing, and Automation < 5.14.2 – Reflected Cross-Site Scripting
6.1
Patch Status
Patched
Patched
Published
Oct 26, 2026
Oct 26, 2026
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Product Filter for WooCommerce by WBW [woo-product-filter]
Researcher
Affected Software
TableOn – WordPress Posts Table Filterable [posts-table-filterable]
Researcher
Affected Software
Unlimited Elements for Elementor [unlimited-elements-for-elementor]
Researcher
Affected Software
Upsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups. [upsell-order-bump-offer-for-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Webheadcoder Multi-Step Forms for Contact Form 7 [contact-form-7-multi-step-module]
Researcher
Webmention <= 5.10.1 – Unauthenticated Stored Cross-Site Scripting via Open Graph og:title Meta Tag
6.1
Affected Software
Webmention [webmention]
Researcher
Affected Software
WooCommerce Extra Product Options Pro [woocommerce-extra-product-options-pro]
Researcher
Affected Software
افزونه پیامک ووکامرس | Persian WooCommerce SMS [persian-woocommerce-sms]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Advanced Post Block – Display Your Posts Exactly How You Want [advanced-post-block]
Researcher
Affected Software
CMB2 [cmb2]
Researcher
Affected Software
Content Pilot – Autoblogging & Affiliate Marketing Suite [wp-content-pilot]
Researcher
Affected Software
Extensions for Leaflet Map [extensions-leaflet-map]
Researcher
Affected Software
FV Flowplayer Video Player [fv-wordpress-flowplayer]
Researcher
Affected Software
FV Flowplayer Video Player [fv-wordpress-flowplayer]
Researcher
Affected Software
Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks]
Researcher
Affected Software
Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks]
Researcher
Affected Software
HT Mega Addons for Elementor – Elementor Widgets & Template Builder [ht-mega-for-elementor]
Researcher
Affected Software
LiteSpeed Cache [litespeed-cache]
Researcher
Affected Software
Researcher
Affected Software
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery]
Researcher
Affected Software
Revopic – Photo Reviews for WooCommerce [woo-photo-reviews]
Researcher
Affected Software
Postie [postie]
Researcher
Affected Software
Ultimate Addons for Elementor – Widgets, Templates, WooCommerce & Header Footer Builder [header-footer-elementor]
Researcher
Affected Software
W3 Total Cache [w3-total-cache]
Researcher
Affected Software
Advanced Custom Fields: Extended [acf-extended]
Researcher
Affected Software
AI Alt Text Generator [ai-alt-text-generator]
Researcher
Affected Software
Researcher
Affected Software
All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos [all-in-one-video-gallery]
Researcher
Affected Software
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment [booking-and-rental-manager-for-woocommerce]
Researcher
Affected Software
Booking for Appointments and Events Calendar – Amelia [ameliabooking]
Researcher
Affected Software
Booking for Appointments and Events Calendar – Amelia [ameliabooking]
Researcher
Affected Software
Booking Package [booking-package]
Researcher
Booktics – Appointment Booking Calendar for Service Businesses <= 1.0.31 – Missing Authorization
5.3
Affected Software
Researcher
Affected Software
Bopo – WooCommerce Product Bundle Builder [bopo-woo-product-bundle-builder]
Researcher
Affected Software
Researcher
Affected Software
Bricks Builder [bricksbuilder]
Researcher
Affected Software
BuddyForms [buddyforms]
Researcher
Affected Software
BuddyForms [buddyforms]
Researcher
Affected Software
Casso Flow – Tự động xác nhận thanh toán chuyển khoản ngân hàng [casso-tu-dong-xac-nhan-thanh-toan-chuyen-khoan-ngan-hang]
Researcher
Affected Software
Contact Form by Supsystic – Drag & Drop Form Builder with Templates & Form Statistics [contact-form-by-supsystic]
Researcher
Affected Software
Contact Form by Supsystic – Drag & Drop Form Builder with Templates & Form Statistics [contact-form-by-supsystic]
Researcher
Affected Software
Contact Form by Supsystic – Drag & Drop Form Builder with Templates & Form Statistics [contact-form-by-supsystic]
Researcher
Affected Software
Contact Form by Supsystic – Drag & Drop Form Builder with Templates & Form Statistics [contact-form-by-supsystic]
Researcher
Affected Software
Court Reservation – Tennis, Padel & Sports Court Booking [court-reservation]
Researcher
Affected Software
Court Reservation – Tennis, Padel & Sports Court Booking [court-reservation]
Researcher
Affected Software
CryptoCloud – Crypto Payment Gateway [cryptocloud-crypto-payment-gateway]
Researcher
Affected Software
Custom Price for WooCommerce [custom-price-for-woocommerce]
Researcher
Affected Software
Discussion Board – WordPress Forum Plugin [wp-discussion-board]
Researcher
Affected Software
Document Library Lite [document-library-lite]
Researcher
Affected Software
DT Directory Lite Addon [dt-directory-lite-addon]
Researcher
Affected Software
E-cab Taxi Booking Manager for Woocommerce [ecab-taxi-booking-manager]
Researcher
Affected Software
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy [easy-digital-downloads]
Researcher
Affected Software
Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite]
Researcher
Affected Software
Eupago Gateway For Woocommerce [eupago-gateway-for-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
Flexible Chat – AI chatbot plugin for WordPress and WooCommerce [flexible-chat]
Researcher
Affected Software
Flexible Quantity & Price Calculator for WooCommerce [flexible-quantity-measurement-price-calculator-for-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Hide Price Until Login [hide-price-until-login]
Researcher
Affected Software
HUSKY – Products Filter for WooCommerce Professional. MCP is onboard [woocommerce-products-filter]
Researcher
Affected Software
HUSKY – Products Filter for WooCommerce Professional. MCP is onboard [woocommerce-products-filter]
Researcher
Affected Software
JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder]
Researcher
Affected Software
Kali Forms — Contact Form & Drag-and-Drop Builder [kali-forms]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Link Library [link-library]
Researcher
Affected Software
Link Library [link-library]
Researcher
Affected Software
MapPress – Free Map Plugin for Google Maps & OpenStreetMap [mappress-google-maps-for-wordpress]
Researcher
Affected Software
Mapster WP Maps [mapster-wp-maps]
Researcher
Affected Software
Masteriyo LMS – LMS Course Builder, Quizzes & Certificates [learning-management-system]
Researcher
Affected Software
MembershipWorks – Membership, Events & Directory [memberfindme]
Researcher
Affected Software
MW WP Form [mw-wp-form]
Researcher
Affected Software
Newsletters [newsletters-lite]
Researcher
Affected Software
Optima Express IDX [optima-express]
Researcher
Affected Software
Page and Post Restriction [page-and-post-restriction]
Researcher
Affected Software
Payable Payment Gateway for WooCommerce [payable-payment-gateway-for-woocommerce]
Researchers
Affected Software
PAYCOMET for WooCommerce [paytpv-for-woocommerce]
Researcher
Affected Software
Payconiq [wc-payconiq]
Researcher
Affected Software
PayHere Payment Gateway [payhere-payment-gateway]
Researcher
Affected Software
PayPal Brasil para WooCommerce [paypal-brasil-para-woocommerce]
Researcher
Affected Software
PayPlug for WooCommerce (Official) [payplug]
Researcher
PayPlug for WooCommerce (Official) 2.9.0 – 3.1.0 – Unauthenticated Insecure Direct Object Reference
5.3
Affected Software
PayPlug for WooCommerce (Official) [payplug]
Researcher
Affected Software
PDF Invoices & Packing Slips for WooCommerce [woocommerce-pdf-invoices-packing-slips]
Researcher
Affected Software
PiWeb Disable payment method / Partial payment for WooCommerce [disable-payment-method-for-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Premium Packages – Sell Digital Products Securely [wpdm-premium-packages]
Researcher
Affected Software
Product Feed Manager for WooCommerce – RexFeed – Sell on 200+ Shopping Channels [best-woocommerce-feed]
Researcher
Affected Software
Product Filter for WooCommerce by WBW [woo-product-filter]
Researcher
Affected Software
Quick Event Manager [quick-event-manager]
Researcher
Affected Software
Recipe Card Blocks Lite [recipe-card-blocks-by-wpzoom]
Researcher
Affected Software
Royal Addons for Elementor – Addons and Templates Kit for Elementor [royal-elementor-addons]
Researcher
Affected Software
Royal Addons for Elementor – Addons and Templates Kit for Elementor [royal-elementor-addons]
Researcher
Affected Software
Royal Addons for Elementor – Addons and Templates Kit for Elementor [royal-elementor-addons]
Researcher
Affected Software
Royal Addons for Elementor – Addons and Templates Kit for Elementor [royal-elementor-addons]
Researcher
Affected Software
Seraphinite Accelerator [seraphinite-accelerator]
Researcher
Affected Software
ShopBuilder – WooCommerce Builder For Elementor [shopbuilder]
Researcher
Affected Software
Simple CAPTCHA with Cloudflare Turnstile [simple-cloudflare-turnstile]
Researcher
Affected Software
Researcher
Affected Software
The Events Calendar [the-events-calendar]
Researcher
Affected Software
Researcher
UniPAY Payment Gateway For WooCommerce <= 2.3 – Unauthenticated Arbitrary Order Status Manipulation
5.3
Affected Software
UniPAY Payment Gateway For WooCommerce [unipay-payment-gateway-for-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Welcart e-Commerce [usc-e-shop]
Researcher
Patch Status
Patched
Patched
Published
Oct 29, 2026
Oct 29, 2026
Affected Software
WordPress [wordpress]
Researcher
Affected Software
WP Crowdfunding [wp-crowdfunding]
Researcher
Affected Software
WP REST Cache [wp-rest-cache]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
YITH PayPal Express Checkout for WooCommerce [yith-paypal-express-checkout-for-woocommerce]
Researcher
Affected Software
YITH WooCommerce Product Add-Ons [yith-woocommerce-product-add-ons]
Researcher
Affected Software
Customer Engagement System – Popup Builder, Forms, CRM & Email Marketing Automation [popup-by-supsystic]
Researcher
Affected Software
Hustle – Email Marketing, Lead Generation, Optins, Popups [wordpress-popup]
Researcher
Affected Software
JS Help Desk – AI-Powered Support & Ticketing System [js-support-ticket]
Researcher
Affected Software
Meta Box – A Framework for Dynamic Websites [meta-box]
Researcher
Affected Software
Tainacan [tainacan]
Researcher
Affected Software
Thrive Automator [thrive-automator]
Researcher
Affected Software
WP Visitor Statistics (Real Time Traffic) [wp-stats-manager]
Researchers
Affected Software
Welcart e-Commerce [usc-e-shop]
Researcher
Affected Software
Advanced Custom Fields: Extended [acf-extended]
Researcher
Affected Software
Customer Email Verification for WooCommerce – OTP Verification, Block Fake Signups [customer-email-verification-for-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
Like Button Rating LikeBtn [likebtn-like-button]
LikeBtn [likebtn-like-button]
Researcher
Affected Software
Media Library Assistant [media-library-assistant]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Welcart e-Commerce [usc-e-shop]
Researcher
Affected Software
DesignSetGo [designsetgo]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Product Addons for Woocommerce – Product Options with Custom Fields [woo-custom-product-addons]
Researcher
Affected Software
AI ChatBot for WooCommerce – WoowBot [woowbot-woocommerce-chatbot]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Better Post & Filter Widgets for Elementor [better-post-filter-widgets-for-elementor]
Researcher
Affected Software
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment [booking-and-rental-manager-for-woocommerce]
Researcher
Affected Software
Researcher
Booktics – Appointment Booking Calendar for Service Businesses <= 1.0.31 – Missing Authorization
4.3
Affected Software
Researcher
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP <= 7.3.9 – Missing Authorization
4.3
Affected Software
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP [videowhisper-live-streaming-integration]
Researcher
Affected Software
BuddyForms [buddyforms]
Researcher
Affected Software
Clean Login [clean-login]
Researcher
Affected Software
Contact Form by Supsystic – Drag & Drop Form Builder with Templates & Form Statistics [contact-form-by-supsystic]
Researcher
Affected Software
Contact Form by Supsystic – Drag & Drop Form Builder with Templates & Form Statistics [contact-form-by-supsystic]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Customer Coupons for WooCommerce [woo-customer-coupons]
Researcher
Affected Software
DEPART – Deposit and Part payment for Woo [depart-deposit-and-part-payment-for-woo]
Researcher
Affected Software
Easy Appointment Booking & Scheduling Plugin – Webba Booking Calendar [webba-booking-lite]
Researcher
Affected Software
Easy Appointment Booking & Scheduling Plugin – Webba Booking Calendar [webba-booking-lite]
Researcher
Affected Software
Enable Media Replace [enable-media-replace]
Researcher
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.10 – Missing Authorization
4.3
Affected Software
Researcher
Affected Software
Event Tickets and Registration [event-tickets]
Researcher
Affected Software
Event Tickets and Registration [event-tickets]
Researcher
Affected Software
EventPrime – Events Calendar, Bookings, Tickets & AI [eventprime-event-calendar-management]
Researcher
Affected Software
Researcher
Affected Software
Fraud Prevention For WooCommerce and EDD [woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers]
Researcher
Affected Software
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce [wp-marketing-automations]
Researcher
Affected Software
Geo Mashup [geo-mashup]
Researcher
Affected Software
Researcher
Affected Software
Germanized for WooCommerce [woocommerce-germanized]
Researcher
Affected Software
HANDMADE – Dropshipping for Etsy and WooCommerce [handmade-dropshipping-for-etsy-and-woo]
Researcher
Affected Software
HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates [happy-elementor-addons]
Researcher
Affected Software
HivePress Claim Listings [hivepress-claim-listings]
Researcher
Affected Software
Hotel Booking [nd-booking]
Researcher
Affected Software
Hustle – Email Marketing, Lead Generation, Optins, Popups [wordpress-popup]
Researcher
Affected Software
InstaWP Connect – 1-click WP Staging & Migration [instawp-connect]
Researcher
Affected Software
JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder]
Researcher
Affected Software
Kali Forms — Contact Form & Drag-and-Drop Builder [kali-forms]
Researcher
Affected Software
Kali Forms — Contact Form & Drag-and-Drop Builder [kali-forms]
Researcher
Affected Software
Kali Forms — Contact Form & Drag-and-Drop Builder [kali-forms]
Researcher
Affected Software
Researcher
Affected Software
MasterStudy LMS WordPress Plugin – for Online Courses and Education [masterstudy-lms-learning-management-system]
Researcher
Affected Software
MasterStudy LMS WordPress Plugin – for Online Courses and Education [masterstudy-lms-learning-management-system]
Researcher
Affected Software
MasterStudy LMS WordPress Plugin – for Online Courses and Education [masterstudy-lms-learning-management-system]
Researcher
Affected Software
Media Library Assistant [media-library-assistant]
Researcher
Affected Software
Media Library Assistant [media-library-assistant]
Researcher
Affected Software
Media Library Assistant [media-library-assistant]
Researcher
Affected Software
Media Library Assistant [media-library-assistant]
Researcher
Affected Software
Media Library Assistant [media-library-assistant]
Researcher
Affected Software
My auctions allegro [my-auctions-allegro-free-edition]
Researcher
Affected Software
Newsletters [newsletters-lite]
Researcher
Affected Software
Researchers
Affected Software
Page Builder by SiteOrigin [siteorigin-panels]
Researcher
Affected Software
Payment Forms for Paystack [payment-forms-for-paystack]
Researcher
Affected Software
Researcher
Affected Software
WP Photo Album Plus [wp-photo-album-plus]
Researcher
Affected Software
Photo Engine (Media Organizer & Lightroom) [wplr-sync]
Researcher
Affected Software
Researcher
Affected Software
Redux Framework [redux-framework]
Researcher
Affected Software
Related Posts for WordPress [related-posts-for-wp]
Researcher
Affected Software
Related Posts for WordPress [related-posts-for-wp]
Researcher
Affected Software
Royal Addons for Elementor – Addons and Templates Kit for Elementor [royal-elementor-addons]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Security Optimizer – The All-In-One Protection Plugin [sg-security]
Researcher
Affected Software
Researcher
Affected Software
The Events Calendar [the-events-calendar]
Researcher
Affected Software
Travelly – Tour & Travel Booking Manager for WooCommerce [tour-booking-manager]
Researcher
Affected Software
Two Factor Authentication [tokenizer-two-factor-authentication]
All-In-One Security (AIOS) – Security and Firewall [all-in-one-wp-security-and-firewall]
Researcher
Affected Software
Unlimited Elements for Elementor [unlimited-elements-for-elementor]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Welcart e-Commerce [usc-e-shop]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Patch Status
Patched
Patched
Published
Oct 29, 2026
Oct 29, 2026
Affected Software
WordPress [wordpress]
Researcher
Affected Software
Researcher
Affected Software
Security Plugin, Firewall & Malware Scanner with Auto Removal [security-malware-firewall]
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
The post Wordfence Intelligence Weekly WordPress Vulnerability Report (October 26, 2026 to November 1, 2026) appeared first on Wordfence.