WordPress Vulnerability Report – July 27, 2023
DETAILS FROM DAN KNAUSS OF ITHEMES ON JULY 27, 2023
Last Updated on July 27, 2023
Since last week, 329 total vulnerabilities emerged in public disclosure. They may affect over 7 million WordPress sites. There are 209 plugin vulnerabilities and 18 theme vulnerabilities with security patches, so run those updates!
Additionally, there are 66 plugin vulnerabilities and 36 theme vulnerabilities with no patch available yet. If you use an unpatched plugin or theme, check their vendors’ intentions and progress on a security release. Suppose no patch is forthcoming or the vulnerable software has been marked “closed” and dropped from the official WordPress theme and plugin repositories. In that case, you should consider deactivation and removal in favor of alternative solutions.
Such an unusually high number of vulnerability reports is due to outdated versions of many plugins and themes that may use a common third-party dependency, Freemius’ WordPress SDK 2.5.9. Please see the Freemius WordPress SDK 2.5.9 Security Disclosure for more details.
Is Your WordPress Website Secure?
DID YOU KNOW – A staggering 83% of WordPress websites are not upgraded or updated, is your website one of these?
Hacks happen due to lack of website upkeep and protection, like updating WordPress or plugins, plus using weak passwords. Contrary to popular belief, web designers and website hosting companies are not responsible for the security of your WordPress website; you are. It’s like using your computer without Anti-virus!
WordPress Core Vulnerabilities
No new WordPress core vulnerabilities were disclosed this week.
WordPress Plugin Vulnerabilities – Patched
These are plugin vulnerabilities that have been fixed with the most recent updates, it’s recomended to update all plugins to the newest version to improve site safety.
Jump to section
WordPress Plugin Vulnerabilities – Unpatched
These are plugin vulnerabilities that have NOT been fixed with the most recent updates, it’s recomended you deactivate or remove these plugins from your site until they are fixed.
Jump to section
WordPress Theme Vulnerabilities
Jump to section
These are vulnerabilities that have occoured in themes for wordpress. If there is a patch for the issue you should update the theme immediately, if there is no fix you should change your site to a different theme.
WordPress Plugin Vulnerabilities – Patched
1 - Essential Addons for Elementor
Plugin -
Essential Addons for Elementor
Plugin Slug -
essential-addons-for-elementor-lite
Installations -
1,000,000+
Vulnerability -
Sensitive Data Exposure
Patched In Version -
5.8.2
Severity -
Medium
CVE Code -
2 - Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress
Plugin -
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress
Plugin Slug -
ninja-forms
Installations -
900,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.6.26
Severity -
High
CVE Code -
3 - Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress
Plugin -
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress
Plugin Slug -
ninja-forms
Installations -
900,000+
Vulnerability -
Broken Access Control
Patched In Version -
3.6.26
Severity -
High
CVE Code -
4 - Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress
Plugin -
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress
Plugin Slug -
ninja-forms
Installations -
900,000+
Vulnerability -
Broken Access Control
Patched In Version -
3.6.26
Severity -
High
CVE Code -
5 - The Events Calendar
Plugin -
Plugin Slug -
the-events-calendar
Installations -
800,000+
Vulnerability -
Broken Access Control
Patched In Version -
6.1.3
Severity -
Medium
CVE Code -
6 - The Events Calendar
Plugin -
Plugin Slug -
the-events-calendar
Installations -
800,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
6.1.0
Severity -
High
CVE Code -
7 - Popup Maker – Popup for opt-ins, lead gen, & more
Plugin -
Popup Maker – Popup for opt-ins, lead gen, & more
Plugin Slug -
popup-maker
Installations -
700,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.10.0
Severity -
High
CVE Code -
8 - WordPress Gallery Plugin – NextGEN Gallery
Plugin -
WordPress Gallery Plugin – NextGEN Gallery
Plugin Slug -
nextgen-gallery
Installations -
600,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.4.7
Severity -
High
CVE Code -
9 - WP Activity Log
Plugin -
Plugin Slug -
wp-security-audit-log
Installations -
200,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
4.4.3
Severity -
High
CVE Code -
10 - 404 to 301 – Redirect, Log and Notify 404 Errors
Plugin -
404 to 301 – Redirect, Log and Notify 404 Errors
Plugin Slug -
404-to-301
Installations -
100,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.0.6
Severity -
High
CVE Code -
11 - Elementor Addon Elements
Plugin -
Plugin Slug -
addon-elements-for-elementor-page-builder
Installations -
100,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.12
Severity -
High
CVE Code -
12 - CAPTCHA 4WP
Plugin -
Plugin Slug -
advanced-nocaptcha-recaptcha
Installations -
100,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
7.0.6
Severity -
High
CVE Code -
13 - WP AutoTerms: Privacy Policy Generator (GDPR & CCPA), Terms & Conditions Generator, Cookie Notice Banner
Plugin -
Plugin Slug -
auto-terms-of-service-and-privacy-policy
Installations -
100,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.0.0
Severity -
High
CVE Code -
14 - Blocksy Companion
Plugin -
Plugin Slug -
blocksy-companion
Installations -
100,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.8.47
Severity -
High
CVE Code -
15 - Meta Tag Manager
Plugin -
Plugin Slug -
meta-tag-manager
Installations -
100,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.1
Severity -
High
CVE Code -
16 - Pods – Custom Content Types and Fields
Plugin -
Pods – Custom Content Types and Fields
Plugin Slug -
pods
Installations -
100,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.8.23
Severity -
High
CVE Code -
17 - TI WooCommerce Wishlist
Plugin -
Plugin Slug -
ti-woocommerce-wishlist
Installations -
100,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.7.0
Severity -
High
CVE Code -
18 - Asset CleanUp: Page Speed Booster
Plugin -
Asset CleanUp: Page Speed Booster
Plugin Slug -
wp-asset-clean-up
Installations -
100,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.3.5.5
Severity -
High
CVE Code -
19 - AnyWhere Elementor
Plugin -
Plugin Slug -
anywhere-elementor
Installations -
90,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.2.8
Severity -
High
CVE Code -
20 - EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor
Plugin -
Plugin Slug -
embedpress
Installations -
80,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.0.3
Severity -
High
CVE Code -
21 - Event Tickets and Registration
Plugin -
Event Tickets and Registration
Plugin Slug -
event-tickets
Installations -
70,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
5.6.0
Severity -
High
CVE Code -
22 - Easy Watermark
Plugin -
Plugin Slug -
easy-watermark
Installations -
60,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.0.7
Severity -
High
CVE Code -
23 - Simple Author Box
Plugin -
Plugin Slug -
simple-author-box
Installations -
60,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.4
Severity -
High
CVE Code -
24 - WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect to Force HTTPS, SSL Score
Plugin -
WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect to Force HTTPS, SSL Score
Plugin Slug -
wp-letsencrypt-ssl
Installations -
60,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
6.3.0
Severity -
High
CVE Code -
25 - Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor
Plugin -
Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor
Plugin Slug -
gutentor
Installations -
50,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.0.3
Severity -
High
CVE Code -
26 - Preloader Plus – WordPress Loading Screen Plugin
Plugin -
Preloader Plus – WordPress Loading Screen Plugin
Plugin Slug -
preloader-plus
Installations -
50,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.1
Severity -
High
CVE Code -
![Spotlight Social Feeds [Block, Shortcode, and Widget]](https://ps.w.org/spotlight-social-photo-feeds/assets/banner-1544x500.jpg?rev=2682454)
27 - Spotlight Social Feeds [Block, Shortcode, and Widget]
Plugin -
Spotlight Social Feeds [Block, Shortcode, and Widget]
Plugin Slug -
spotlight-social-photo-feeds
Installations -
50,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.6.1
Severity -
High
CVE Code -
28 - Weglot Translate – Translate your WordPress website and go multilingual
Plugin -
Weglot Translate – Translate your WordPress website and go multilingual
Plugin Slug -
weglot
Installations -
50,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.9.3
Severity -
High
CVE Code -
29 - Customize WordPress Emails and Alerts – Better Notifications for WP
Plugin -
Customize WordPress Emails and Alerts – Better Notifications for WP
Plugin Slug -
bnfw
Installations -
40,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.7
Severity -
High
CVE Code -
30 - Stop User Enumeration
Plugin -
Plugin Slug -
stop-user-enumeration
Installations -
40,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.4.0
Severity -
High
CVE Code -
31 - Mail Bank – #1 Mail SMTP Plugin for WordPress
Plugin -
Mail Bank – #1 Mail SMTP Plugin for WordPress
Plugin Slug -
wp-mail-bank
Installations -
40,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.0.13
Severity -
High
CVE Code -
32 - Gutenberg Block Editor Toolkit – EditorsKit
Plugin -
Gutenberg Block Editor Toolkit – EditorsKit
Plugin Slug -
block-options
Installations -
30,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.17
Severity -
High
CVE Code -
33 - Contact Form 7 Module For Divi Builder
Plugin -
Contact Form 7 Module For Divi Builder
Plugin Slug -
cf7-styler-for-divi
Installations -
30,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.3.3
Severity -
High
CVE Code -
34 - Cost Calculator Builder
Plugin -
Plugin Slug -
cost-calculator-builder
Installations -
30,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.3.3
Severity -
High
CVE Code -
35 - Image Photo Gallery Final Tiles Grid
Plugin -
Image Photo Gallery Final Tiles Grid
Plugin Slug -
final-tiles-grid-gallery-lite
Installations -
30,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.5.8
Severity -
High
CVE Code -
36 - Hide Admin Bar Based on User Roles
Plugin -
Hide Admin Bar Based on User Roles
Plugin Slug -
hide-admin-bar-based-on-user-roles
Installations -
30,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.8
Severity -
High
CVE Code -
37 - Divi Carousel Lite
Plugin -
Plugin Slug -
wow-carousel-for-divi-lite
Installations -
30,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.2.12
Severity -
High
CVE Code -
38 - WP Google Review Slider
Plugin -
Plugin Slug -
wp-google-places-review-slider
Installations -
30,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
12.6
Severity -
High
CVE Code -
39 - Divi Torque Lite
Plugin -
Plugin Slug -
addons-for-divi
Installations -
20,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.6.0
Severity -
High
CVE Code -
40 - CF7 Skins for Contact Form 7
Plugin -
Plugin Slug -
contact-form-7-skins
Installations -
20,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.1.1
Severity -
High
CVE Code -
41 - Greenshift – animation and page builder blocks
Plugin -
Greenshift – animation and page builder blocks
Plugin Slug -
greenshift-animation-and-page-builder-blocks
Installations -
20,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
4.8.1
Severity -
High
CVE Code -
42 - New User Approve
Plugin -
Plugin Slug -
new-user-approve
Installations -
20,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.5.1
Severity -
High
CVE Code -
43 - PHP Everywhere
Plugin -
Plugin Slug -
php-everywhere
Installations -
20,000+
Vulnerability -
Remote Code Execution (RCE)
Patched In Version -
3.0.0
Severity -
Critical
CVE Code -
44 - PHP Everywhere
Plugin -
Plugin Slug -
php-everywhere
Installations -
20,000+
Vulnerability -
Remote Code Execution (RCE)
Patched In Version -
3.0.0
Severity -
Critical
CVE Code -
45 - PHP Everywhere
Plugin -
Plugin Slug -
php-everywhere
Installations -
20,000+
Vulnerability -
Remote Code Execution (RCE)
Patched In Version -
3.0.0
Severity -
Critical
CVE Code -
46 - Redirect 404 Error Page to Homepage or Custom Page with Logs
Plugin -
Redirect 404 Error Page to Homepage or Custom Page with Logs
Plugin Slug -
redirect-404-error-page-to-homepage-or-custom-page
Installations -
20,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.8.0
Severity -
High
CVE Code -
47 - Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery
Plugin -
Plugin Slug -
simply-gallery-block
Installations -
20,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.1.5
Severity -
High
CVE Code -
48 - Reduce HTTP Requests, Disable Emojis & Disable Embeds, Speedup WooCommerce
Plugin -
Reduce HTTP Requests, Disable Emojis & Disable Embeds, Speedup WooCommerce
Plugin Slug -
wp-disable
Installations -
20,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.5.0
Severity -
High
CVE Code -
49 - Media Library Categories
Plugin -
Plugin Slug -
wp-media-library-categories
Installations -
20,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.0.1
Severity -
Medium
CVE Code -
50 - WP to Twitter
Plugin -
Plugin Slug -
wp-to-twitter
Installations -
20,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.3.0
Severity -
High
CVE Code -
51 - Product Feed Manager – WooCommerce to Google Shopping, Social Catalogs, and 170+ Popular Marketplaces
Plugin -
Plugin Slug -
best-woocommerce-feed
Installations -
10,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.0
Severity -
High
CVE Code -
52 - DeMomentSomTres WordPress Export Posts With Images
Plugin -
DeMomentSomTres WordPress Export Posts With Images
Plugin Slug -
demomentsomtres-wp-export
Installations -
10,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
20200610
Severity -
High
CVE Code -
53 - Enjoy Social Feed plugin for WordPress website
Plugin -
Enjoy Social Feed plugin for WordPress website
Plugin Slug -
enjoy-instagram-instagram-responsive-images-gallery-and-carousel
Installations -
10,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
6.2.1
Severity -
High
CVE Code -
54 - eRoom – Zoom Meetings & Webinars
Plugin -
eRoom – Zoom Meetings & Webinars
Plugin Slug -
eroom-zoom-meetings-webinar
Installations -
10,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.3.4
Severity -
High
CVE Code -
55 - MasterStudy LMS WordPress Plugin – for Online Courses and Education
Plugin -
MasterStudy LMS WordPress Plugin – for Online Courses and Education
Plugin Slug -
masterstudy-lms-learning-management-system
Installations -
10,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.8.0
Severity -
High
CVE Code -
56 - Notification – Custom Notifications and Alerts for WordPress
Plugin -
Notification – Custom Notifications and Alerts for WordPress
Plugin Slug -
notification
Installations -
10,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
6.1.0
Severity -
High
CVE Code -
57 - PowerPack Lite for Beaver Builder
Plugin -
PowerPack Lite for Beaver Builder
Plugin Slug -
powerpack-addon-for-beaver-builder
Installations -
10,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.2.9.3
Severity -
High
CVE Code -
58 - Seo Optimized Images
Plugin -
Plugin Slug -
seo-optimized-images
Installations -
10,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.1
Severity -
High
CVE Code -
59 - WP News and Scrolling Widgets
Plugin -
Plugin Slug -
sp-news-and-widget
Installations -
10,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
4.2
Severity -
High
CVE Code -
60 - Stop WP Emails Going to Spam
Plugin -
Plugin Slug -
stop-wp-emails-going-to-spam
Installations -
10,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.0.0
Severity -
High
CVE Code -
61 - Tiered Pricing Table for WooCommerce
Plugin -
Tiered Pricing Table for WooCommerce
Plugin Slug -
tier-pricing-table
Installations -
10,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.5.1
Severity -
High
CVE Code -
62 - WP Review Slider
Plugin -
Plugin Slug -
wp-facebook-reviews
Installations -
10,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.6
Severity -
High
CVE Code -
63 - WP Mail Log
Plugin -
Plugin Slug -
wp-mail-log
Installations -
10,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.1.1
Severity -
High
CVE Code -
64 - WP VR – 360 Panorama and Virtual Tour Builder For WordPress
Plugin -
WP VR – 360 Panorama and Virtual Tour Builder For WordPress
Plugin Slug -
wpvr
Installations -
10,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.0.2
Severity -
High
CVE Code -
65 - Frontend Admin by DynamiApps
Plugin -
Plugin Slug -
acf-frontend-form-element
Installations -
9,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.8.0
Severity -
High
CVE Code -
66 - HuCommerce | Magyar WooCommerce kiegészítések
Plugin -
HuCommerce | Magyar WooCommerce kiegészítések
Plugin Slug -
surbma-magyar-woocommerce
Installations -
9,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2022.0.3
Severity -
High
CVE Code -
67 - Post to Google My Business (Google Business Profile)
Plugin -
Post to Google My Business (Google Business Profile)
Plugin Slug -
post-to-google-my-business
Installations -
8,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.1.14
Severity -
High
CVE Code -
68 - PublishPress Planner: Organize and Schedule Your WordPress Content
Plugin -
PublishPress Planner: Organize and Schedule Your WordPress Content
Plugin Slug -
publishpress
Installations -
7,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.9.5
Severity -
High
CVE Code -
69 - Salon booking system
Plugin -
Plugin Slug -
salon-booking-system
Installations -
7,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
8.4.9
Severity -
High
CVE Code -
70 - Easy Photography Portfolio
Plugin -
Plugin Slug -
photography-portfolio
Installations -
5,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.4.9
Severity -
High
CVE Code -
71 - Quiz Cat – WordPress Quiz Plugin
Plugin -
Quiz Cat – WordPress Quiz Plugin
Plugin Slug -
quiz-cat
Installations -
5,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.2.0
Severity -
High
CVE Code -
72 - WooCommerce Google Ads Dynamic Remarketing
Plugin -
WooCommerce Google Ads Dynamic Remarketing
Plugin Slug -
woocommerce-google-dynamic-retargeting-tag
Installations -
5,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.7.17
Severity -
High
CVE Code -
73 - WP Travel – Best Travel Booking WordPress Plugin, Tour Management Engine
Plugin -
WP Travel – Best Travel Booking WordPress Plugin, Tour Management Engine
Plugin Slug -
wp-travel
Installations -
5,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
4.2.0
Severity -
High
CVE Code -
74 - WpStream – Live Streaming, Video on Demand, Pay Per View
Plugin -
WpStream – Live Streaming, Video on Demand, Pay Per View
Plugin Slug -
wpstream
Installations -
5,000+
Vulnerability -
Cross Site Request Forgery (CSRF)
Patched In Version -
4.5.5
Severity -
Medium
CVE Code -
75 - ACF-VC Integrator
Plugin -
Plugin Slug -
acf-vc-integrator
Installations -
4,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.3.1
Severity -
High
CVE Code -
76 - AnyComment
Plugin -
Plugin Slug -
anycomment
Installations -
4,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
0.0.99
Severity -
High
CVE Code -
77 - Tag Groups is the Advanced Way to Display Your Taxonomy Terms
Plugin -
Tag Groups is the Advanced Way to Display Your Taxonomy Terms
Plugin Slug -
tag-groups
Installations -
4,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.0.0
Severity -
High
CVE Code -
78 - Search Console
Plugin -
Plugin Slug -
search-console
Installations -
3,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.2.2
Severity -
High
CVE Code -
79 - Discussion Board – WordPress Forum Plugin
Plugin -
Discussion Board – WordPress Forum Plugin
Plugin Slug -
wp-discussion-board
Installations -
3,000+
Vulnerability -
Content Injection
Patched In Version -
2.4.9
Severity -
Medium
CVE Code -
80 - Photo Engine (Media Organizer & Lightroom)
Plugin -
Photo Engine (Media Organizer & Lightroom)
Plugin Slug -
wplr-sync
Installations -
3,000+
Vulnerability -
Insecure Direct Object References (IDOR)
Patched In Version -
6.2.6
Severity -
Medium
CVE Code -
81 - Image Carousel For Divi
Plugin -
Plugin Slug -
image-carousel-for-divi
Installations -
2,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.6.1
Severity -
High
CVE Code -
82 - Market Exporter
Plugin -
Plugin Slug -
market-exporter
Installations -
2,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.0.19
Severity -
High
CVE Code -
83 - Multiple Page Generator Plugin – MPG
Plugin -
Multiple Page Generator Plugin – MPG
Plugin Slug -
multiple-pages-generator-by-porthas
Installations -
2,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.0.0
Severity -
High
CVE Code -
84 - Share This Image
Plugin -
Plugin Slug -
share-this-image
Installations -
2,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.81
Severity -
High
CVE Code -
85 - Client Invoicing by Sprout Invoices – Easy Estimates and Invoices for WordPress
Plugin -
Client Invoicing by Sprout Invoices – Easy Estimates and Invoices for WordPress
Plugin Slug -
sprout-invoices
Installations -
2,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
19.1
Severity -
High
CVE Code -
86 - Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin
Plugin -
Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin
Plugin Slug -
woo-zoho
Installations -
2,000+
Vulnerability -
Open Redirection
Patched In Version -
1.3.7
Severity -
Medium
CVE Code -
87 - Spanish Market Enhancements for WooCommerce
Plugin -
Spanish Market Enhancements for WooCommerce
Plugin Slug -
woocommerce-es
Installations -
2,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.1
Severity -
High
CVE Code -
88 - Pay For Post with WooCommerce
Plugin -
Plugin Slug -
woocommerce-pay-per-post
Installations -
2,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.1.11
Severity -
High
CVE Code -
89 - 360 Javascript Viewer
Plugin -
Plugin Slug -
360deg-javascript-viewer
Installations -
1,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.5.3
Severity -
High
CVE Code -
90 - Activity Log For MainWP
Plugin -
Plugin Slug -
activity-log-mainwp
Installations -
1,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.0.0
Severity -
High
CVE Code -
91 - WooCommerce Attribute Stock – Share Stock Between Products (Lite Version)
Plugin -
WooCommerce Attribute Stock – Share Stock Between Products (Lite Version)
Plugin Slug -
attribute-stock-for-woocommerce
Installations -
1,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.3.0
Severity -
High
CVE Code -
92 - Message Filter for Contact Form 7
Plugin -
Message Filter for Contact Form 7
Plugin Slug -
cf7-message-filter
Installations -
1,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.4.3
Severity -
High
CVE Code -
93 - Church Admin
Plugin -
Plugin Slug -
church-admin
Installations -
1,000+
Vulnerability -
Server Side Request Forgery (SSRF)
Patched In Version -
3.8.0
Severity -
Medium
CVE Code -
![TempTool [Show Current Template Info]](https://ps.w.org/current-template-name/assets/banner-1544x500.png?rev=2779266)
94 - TempTool [Show Current Template Info]
Plugin -
TempTool [Show Current Template Info]
Plugin Slug -
current-template-name
Installations -
1,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.1.10
Severity -
High
CVE Code -
![XPlainer – WooCommerce Product FAQ [WooCommerce Accordion FAQ Plugin]](https://ps.w.org/faq-for-woocommerce/assets/banner-1544x500.png?rev=2714620)
95 - XPlainer – WooCommerce Product FAQ [WooCommerce Accordion FAQ Plugin]
Plugin -
XPlainer – WooCommerce Product FAQ [WooCommerce Accordion FAQ Plugin]
Plugin Slug -
faq-for-woocommerce
Installations -
1,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.4.0
Severity -
High
CVE Code -
96 - Team Members – A WordPress Team Plugin with Gallery, Grid, Carousel, Slider, Table, List, and More
Plugin -
Team Members – A WordPress Team Plugin with Gallery, Grid, Carousel, Slider, Table, List, and More
Plugin Slug -
gs-team-members
Installations -
1,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.2.2
Severity -
High
CVE Code -
97 - Remove Duplicate Posts
Plugin -
Plugin Slug -
remove-duplicate-posts
Installations -
1,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.3
Severity -
High
CVE Code -
98 - WP Required Taxonomies – Categories and Tags Mandatory
Plugin -
WP Required Taxonomies – Categories and Tags Mandatory
Plugin Slug -
required-taxonomies
Installations -
1,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.1.8
Severity -
High
CVE Code -
99 - SV Proven Expert
Plugin -
Plugin Slug -
sv-provenexpert
Installations -
1,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.0.00
Severity -
High
CVE Code -
100 - SV Tracking Manager
Plugin -
Plugin Slug -
sv-tracking-manager
Installations -
1,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.0.00
Severity -
High
CVE Code -
101 - UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode)
Plugin -
Plugin Slug -
ultraaddons-elementor-lite
Installations -
1,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.1.0
Severity -
High
CVE Code -
102 - BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages
Plugin -
BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages
Plugin Slug -
wc4bp
Installations -
1,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.4.16
Severity -
High
CVE Code -
103 - Live Sales Notification for Woocommerce – Woomotiv
Plugin -
Live Sales Notification for Woocommerce – Woomotiv
Plugin Slug -
woomotiv
Installations -
1,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.4
Severity -
High
CVE Code -
104 - Integration for WooCommerce and QuickBooks
Plugin -
Integration for WooCommerce and QuickBooks
Plugin Slug -
wp-woocommerce-quickbooks
Installations -
1,000+
Vulnerability -
Open Redirection
Patched In Version -
1.2.4
Severity -
Medium
CVE Code -
105 - wpShopGermany IT-RECHT KANZLEI
Plugin -
wpShopGermany IT-RECHT KANZLEI
Plugin Slug -
wpshopgermany-it-recht-kanzlei
Installations -
900+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.8
Severity -
Medium
CVE Code -
106 - Limb Gallery | Create Beautiful Image & Video Galleries
Plugin -
Limb Gallery | Create Beautiful Image & Video Galleries
Plugin Slug -
limb-gallery
Installations -
800+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.5.6
Severity -
High
CVE Code -
107 - GraphComment Comment system
Plugin -
Plugin Slug -
graphcomment-comment-system
Installations -
700+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.3.5
Severity -
High
CVE Code -
108 - Terms & Conditions Per Product
Plugin -
Terms & Conditions Per Product
Plugin Slug -
terms-and-conditions-per-product
Installations -
700+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.2.6
Severity -
High
CVE Code -
109 - Chamber Dashboard Business Directory
Plugin -
Chamber Dashboard Business Directory
Plugin Slug -
chamber-dashboard-business-directory
Installations -
600+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.3.2
Severity -
High
CVE Code -
110 - Embed Docs – Elementor Files Addon,Elementor Docs Addon,Embed PDF, Word, PowerPoint and Excel Files in Gutenberg & Elementor
Plugin -
Plugin Slug -
embed-docs
Installations -
600+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.0.1
Severity -
High
CVE Code -
111 - Embed Video Thumbnail
Plugin -
Plugin Slug -
embed-video-thumbnail
Installations -
600+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.3.1
Severity -
High
CVE Code -
112 - Gutenberg Forms – WordPress Form Builder Plugin
Plugin -
Gutenberg Forms – WordPress Form Builder Plugin
Plugin Slug -
forms-gutenberg
Installations -
600+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.4.0
Severity -
High
CVE Code -
113 - FormsCRM
Plugin -
Plugin Slug -
formscrm
Installations -
600+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.6
Severity -
High
CVE Code -
114 - WZ Followed Posts – Display what visitors are reading
Plugin -
WZ Followed Posts – Display what visitors are reading
Plugin Slug -
where-did-they-go-from-here
Installations -
600+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.1.0
Severity -
High
CVE Code -
115 - Member Profile Forms / Custom Registration / Post From Profile in BuddyPress / BuddyBoss
Plugin -
Member Profile Forms / Custom Registration / Post From Profile in BuddyPress / BuddyBoss
Plugin Slug -
buddyforms-members
Installations -
500+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.4.12
Severity -
High
CVE Code -
116 - WPEventPartners Demo Import
Plugin -
Plugin Slug -
wep-demo-import
Installations -
500+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.0.4
Severity -
High
CVE Code -
117 - WooCommerce Google Analytics Integration By Advanced WC Analytics
Plugin -
WooCommerce Google Analytics Integration By Advanced WC Analytics
Plugin Slug -
advance-wc-analytics
Installations -
400+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.4.0
Severity -
High
CVE Code -
118 - WP Frontend Admin – Display WP Admin Pages in the Frontend
Plugin -
WP Frontend Admin – Display WP Admin Pages in the Frontend
Plugin Slug -
display-admin-page-on-frontend
Installations -
400+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.21.1
Severity -
High
CVE Code -
119 - Product Filter Widget for Elementor
Plugin -
Product Filter Widget for Elementor
Plugin Slug -
product-filter-widget-for-elementor
Installations -
400+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.0.2
Severity -
High
CVE Code -
120 - what3words Address Field
Plugin -
Plugin Slug -
3-word-address-validation-field
Installations -
300+
Vulnerability -
Sensitive Data Exposure
Patched In Version -
4.0.1
Severity -
Medium
CVE Code -
121 - Advanced Custom Fields Frontend Forms – ACF Forms – ACF Post Form – ACF Registration Form – ACF Content Form – ACF Profile Form
Plugin -
Plugin Slug -
buddyforms-acf
Installations -
300+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.3.5
Severity -
High
CVE Code -
122 - BuddyForms Ultimate Member
Plugin -
Plugin Slug -
buddyforms-ultimate-member
Installations -
300+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.3.8
Severity -
High
CVE Code -
123 - Gift Message for WooCommerce
Plugin -
Plugin Slug -
gift-message-for-woocommerce
Installations -
300+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.7.5
Severity -
High
CVE Code -
124 - Ultimate LinkedIn Integration
Plugin -
Plugin Slug -
linkedin-login
Installations -
300+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.0
Severity -
High
CVE Code -
125 - Shipping for Nova Poshta
Plugin -
Plugin Slug -
nova-poshta-ttn
Installations -
300+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.8.1
Severity -
High
CVE Code -
126 - Spice Blocks
Plugin -
Plugin Slug -
spice-blocks
Installations -
300+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.3
Severity -
High
CVE Code -
127 - WooCommerce Country Catalogs – Product Country Restrictions
Plugin -
WooCommerce Country Catalogs – Product Country Restrictions
Plugin Slug -
woo-country-restrictions-advanced
Installations -
300+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.14.3
Severity -
High
CVE Code -
128 - 2MB Autocode
Plugin -
Plugin Slug -
2mb-autocode
Installations -
200+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.2.6
Severity -
High
CVE Code -
129 - Checkbox
Plugin -
Plugin Slug -
checkbox
Installations -
200+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
0.8.5
Severity -
High
CVE Code -
130 - WordPress Image Compression and Optimizer Plugin – CheetahO
Plugin -
WordPress Image Compression and Optimizer Plugin – CheetahO
Plugin Slug -
cheetaho-image-optimizer
Installations -
200+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.4.3.1
Severity -
High
CVE Code -
131 - Multicollab – Google Docs-Style Editorial Collaboration in WordPress
Plugin -
Multicollab – Google Docs-Style Editorial Collaboration in WordPress
Plugin Slug -
commenting-feature
Installations -
200+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.2
Severity -
High
CVE Code -
132 - Content Blocks Builder
Plugin -
Plugin Slug -
content-blocks-builder
Installations -
200+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.3.17
Severity -
High
CVE Code -
133 - WordPress Job Board and Recruitment Plugin – JobWP
Plugin -
WordPress Job Board and Recruitment Plugin – JobWP
Plugin Slug -
jobwp
Installations -
200+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.0
Severity -
High
CVE Code -
134 - Joli FAQ SEO – WordPress FAQ Plugin
Plugin -
Joli FAQ SEO – WordPress FAQ Plugin
Plugin Slug -
joli-faq-seo
Installations -
200+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.3.1
Severity -
High
CVE Code -
135 - RSS Control
Plugin -
Plugin Slug -
rss-control
Installations -
200+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.0.8
Severity -
High
CVE Code -
136 - Simple Tour Guide
Plugin -
Plugin Slug -
simple-tour-guide
Installations -
200+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.0.6
Severity -
High
CVE Code -
137 - Coming Soon Pages for WordPress – Coming Soon Booster
Plugin -
Coming Soon Pages for WordPress – Coming Soon Booster
Plugin Slug -
wp-coming-soon-booster
Installations -
200+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.0.7
Severity -
High
CVE Code -
138 - WP SPID Italia
Plugin -
Plugin Slug -
wp-spid-italia
Installations -
200+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.5
Severity -
High
CVE Code -
139 - AI Tools – Chatbot, ChatGPT, Content Generator, Image Generator, Artificial Intelligence GPT
Plugin -
AI Tools – Chatbot, ChatGPT, Content Generator, Image Generator, Artificial Intelligence GPT
Plugin Slug -
artificial-intelligence-auto-content-generator
Installations -
100+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.0.0
Severity -
High
CVE Code -
140 - Coming Soon Master
Plugin -
Plugin Slug -
coming-soon-master
Installations -
100+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.2
Severity -
High
CVE Code -
141 - EthereumICO
Plugin -
Plugin Slug -
ethereumico
Installations -
100+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.4.4
Severity -
High
CVE Code -
142 - Files Download Delay
Plugin -
Plugin Slug -
files-download-delay
Installations -
100+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.0.9
Severity -
High
CVE Code -
143 - Bulk Landing Page Creator for WordPress – LPagery
Plugin -
Bulk Landing Page Creator for WordPress – LPagery
Plugin Slug -
lpagery
Installations -
100+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.2.6
Severity -
High
CVE Code -
144 - Mobile App Editor – WordPress to Android App Builder
Plugin -
Mobile App Editor – WordPress to Android App Builder
Plugin Slug -
mobile-app-editor
Installations -
100+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.2.0
Severity -
High
CVE Code -
145 - Search Field for Gravity Forms
Plugin -
Search Field for Gravity Forms
Plugin Slug -
search-field-for-gravity-forms
Installations -
100+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
0.6
Severity -
High
CVE Code -
146 - Stellar Places
Plugin -
Plugin Slug -
stellar-places
Installations -
100+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.1
Severity -
High
CVE Code -
147 - Subaccounts for WooCommerce
Plugin -
Plugin Slug -
subaccounts-for-woocommerce
Installations -
100+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.4.0
Severity -
High
CVE Code -
148 - WN Flipbox Pro
Plugin -
Plugin Slug -
wn-flipbox-pro
Installations -
100+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.1
Severity -
High
CVE Code -
149 - Bing Custom Search for WordPress
Plugin -
Bing Custom Search for WordPress
Plugin Slug -
wp-bing-search
Installations -
100+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.6.3
Severity -
High
CVE Code -
150 - WP Tools Divi Blog Carousel
Plugin -
Plugin Slug -
wp-tools-divi-blog-carousel
Installations -
100+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.3.1
Severity -
High
CVE Code -
151 - Display Data on your site! Create Dynamic Content Templates from any form of data. Works with ACF, Pods, BuddyPress/ BuddyBoss
Plugin -
Plugin Slug -
buddyforms-hook-fields
Installations -
90+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.3.2
Severity -
High
CVE Code -
152 - Contact Form By Mega Forms – Drag and Drop Form Builder
Plugin -
Contact Form By Mega Forms – Drag and Drop Form Builder
Plugin Slug -
mega-forms
Installations -
90+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.1.3
Severity -
High
CVE Code -
153 - Ultimate Custom ScrollBar
Plugin -
Plugin Slug -
ultimate-custom-scrollbar
Installations -
90+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.2
Severity -
High
CVE Code -
154 - WPGutenBlog Demo Import
Plugin -
Plugin Slug -
layouts-importer
Installations -
80+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.0.3
Severity -
High
CVE Code -
155 - SV100 Companion
Plugin -
Plugin Slug -
sv100-companion
Installations -
80+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.0.00
Severity -
High
CVE Code -
156 - Blocks Product Editor for WooCommerce
Plugin -
Blocks Product Editor for WooCommerce
Plugin Slug -
blocks-product-editor-for-woocommerce
Installations -
70+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.0.2
Severity -
High
CVE Code -
157 - Variable Inspector
Plugin -
Plugin Slug -
variable-inspector
Installations -
70+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.4.0
Severity -
High
CVE Code -
158 - Stripe Express
Plugin -
Plugin Slug -
wp-stripe-express
Installations -
60+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.12.1
Severity -
High
CVE Code -
159 - BuddyForms Form Elements for WooCommerce
Plugin -
BuddyForms Form Elements for WooCommerce
Plugin Slug -
buddyforms-woocommerce-form-elements
Installations -
50+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.4.3
Severity -
High
CVE Code -
160 - Order Redirects for WooCommerce
Plugin -
Order Redirects for WooCommerce
Plugin Slug -
order-redirects-for-woocommerce
Installations -
40+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
0.8.1
Severity -
High
CVE Code -
161 - Simple blueprint installer
Plugin -
Plugin Slug -
simple-blueprint-installer
Installations -
40+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.0.2
Severity -
High
CVE Code -
162 - BuddyForms Moderation ( Former: Review Logic )
Plugin -
BuddyForms Moderation ( Former: Review Logic )
Plugin Slug -
buddyforms-review
Installations -
30+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.4.8
Severity -
High
CVE Code -
163 - Connect WooCommerce Holded
Plugin -
Plugin Slug -
import-holded-products-woocommerce
Installations -
30+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.0
Severity -
High
CVE Code -
164 - Order Picking For WooCommerce
Plugin -
Plugin Slug -
order-picking-for-woocommerce
Installations -
30+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.0.2
Severity -
High
CVE Code -
165 - ShortcodeHub – MultiPurpose Shortcode Builder
Plugin -
ShortcodeHub – MultiPurpose Shortcode Builder
Plugin Slug -
shortcodehub
Installations -
30+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.4.0
Severity -
High
CVE Code -
166 - WPEForm Lite – Drag and Drop Live Form Builder for Contact, Payment & Quiz Forms
Plugin -
WPEForm Lite – Drag and Drop Live Form Builder for Contact, Payment & Quiz Forms
Plugin Slug -
wpeform-lite
Installations -
30+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.6.5
Severity -
High
CVE Code -
167 - ClimateClick: Climate Action for all
Plugin -
ClimateClick: Climate Action for all
Plugin Slug -
co2ok-for-woocommerce
Installations -
20+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.0.4
Severity -
High
CVE Code -
168 - SV Forms
Plugin -
Plugin Slug -
sv-forms
Installations -
20+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.0.02
Severity -
High
CVE Code -
169 - SV Posts
Plugin -
Plugin Slug -
sv-posts
Installations -
20+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.0.00
Severity -
High
CVE Code -
170 - Video Analytics for Cloudflare Stream
Plugin -
Video Analytics for Cloudflare Stream
Plugin Slug -
video-analytics-for-cloudflare-stream
Installations -
20+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.2
Severity -
High
CVE Code -
171 - WP Table Pixie
Plugin -
Plugin Slug -
wp-table-pixie
Installations -
20+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.2.0
Severity -
High
CVE Code -
172 - CF7 ReCaptcha Mine
Plugin -
Plugin Slug -
cf7-recaptcha-mine
Installations -
10+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.0.0
Severity -
High
CVE Code -
173 - Convoworks WP
Plugin -
Plugin Slug -
convoworks-wp
Installations -
10+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
0.22.15
Severity -
High
CVE Code -
174 - Custom Welcome Guide
Plugin -
Plugin Slug -
custom-welcome-guide
Installations -
10+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.0.9
Severity -
High
CVE Code -
175 - DeMomentSomTres Gravity Forms Improvements
Plugin -
DeMomentSomTres Gravity Forms Improvements
Plugin Slug -
demomentsomtres-gravity-forms-improvements
Installations -
10+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
201805021810
Severity -
High
CVE Code -
176 - Fast Custom Social Share by CodeBard
Plugin -
Fast Custom Social Share by CodeBard
Plugin Slug -
fast-custom-social-share-by-codebard
Installations -
10+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.1.0
Severity -
High
CVE Code -
177 - Contact form builder for Gutenberg – Formello
Plugin -
Contact form builder for Gutenberg – Formello
Plugin Slug -
formello
Installations -
10+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.3.1
Severity -
High
CVE Code -
178 - Menukaart – Restaurant Menu & Online Ordering with WooCommerce
Plugin -
Menukaart – Restaurant Menu & Online Ordering with WooCommerce
Plugin Slug -
menukaart
Installations -
10+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.4
Severity -
High
CVE Code -
179 - SV Columns Manager
Plugin -
Plugin Slug -
sv-columns-manager
Installations -
10+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.0.00
Severity -
High
CVE Code -
180 - Divi Testimonial Plus
Plugin -
Plugin Slug -
website-testimonials
Installations -
10+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
6.1.1
Severity -
High
CVE Code -
181 - WP Signals
Plugin -
Plugin Slug -
wp-signals
Installations -
10+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.0.0
Severity -
High
CVE Code -
182 - BuddyForms Anonymous Author
Plugin -
Plugin Slug -
buddyforms-anonymous-author
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.1
Severity -
High
CVE Code -
183 - BuddyForms Attach Post with Group
Plugin -
BuddyForms Attach Post with Group
Plugin Slug -
buddyforms-attach-posts-to-groups-extension
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.2.3
Severity -
High
CVE Code -
184 - BuddyForms Hierarchical Posts
Plugin -
Plugin Slug -
buddyforms-hierarchical-posts
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.1.4
Severity -
High
CVE Code -
185 - BuddyForms Posts 2 Posts
Plugin -
Plugin Slug -
buddyforms-posts-to-posts-integration
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.1
Severity -
High
CVE Code -
186 - BuddyForms Remote
Plugin -
Plugin Slug -
buddyforms-remote
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.0.5
Severity -
High
CVE Code -
187 - Caldera Forms
Plugin -
Plugin Slug -
caldera-forms
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.7.5.1
Severity -
High
CVE Code -
188 - Simple Freemius Shop
Plugin -
Plugin Slug -
checkout-freemius-rewamped
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.0.0
Severity -
High
CVE Code -
189 - Convert Pro
Plugin -
Plugin Slug -
convertpro
Vulnerability -
Broken Access Control
Patched In Version -
1.7.6
Severity -
High
CVE Code -
190 - DeMomentSomTres Subscribe
Plugin -
Plugin Slug -
demomentsomtres-mailchimp-subscribe
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.201903272301
Severity -
High
CVE Code -
191 - DEV.LAND
Plugin -
Plugin Slug -
dev-land
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.0.5
Severity -
High
CVE Code -
192 - DokoBuilder : DIY Product Bundle for WooCommerce
Plugin -
DokoBuilder : DIY Product Bundle for WooCommerce
Plugin Slug -
doko-box-builder
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.0.1
Severity -
High
CVE Code -
193 - Expandable Paywall
Plugin -
Plugin Slug -
expandable-paywall
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.0.17
Severity -
High
CVE Code -
194 - External Media Upload
Plugin -
Plugin Slug -
external-media-upload
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
0.4
Severity -
High
CVE Code -
195 - Frontend Admin – Add and edit posts, pages, users and more all from the frontend
Plugin -
Frontend Admin – Add and edit posts, pages, users and more all from the frontend
Plugin Slug -
frontend-admin
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.8.0
Severity -
High
CVE Code -
196 - Gallery Bank
Plugin -
Plugin Slug -
gallery-bank
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
4.0.19
Severity -
High
CVE Code -
197 - Map Plugin alternative to Google Maps using MapQuest, with directions
Plugin -
Map Plugin alternative to Google Maps using MapQuest, with directions
Plugin Slug -
get-directions
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.16.2
Severity -
High
CVE Code -
198 - Information for help
Plugin -
Plugin Slug -
information-for-help
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
0.0.3
Severity -
High
CVE Code -
199 - Google Maps Plugin by Intergeo
Plugin -
Google Maps Plugin by Intergeo
Plugin Slug -
intergeo-maps
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.1.6
Severity -
High
CVE Code -
200 - Oxygen Builder
Plugin -
Plugin Slug -
oxygen
Vulnerability -
Cross Site Request Forgery (CSRF)
Patched In Version -
4.4
Severity -
Medium
CVE Code -
201 - Popups
Plugin -
Plugin Slug -
popups
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.8
Severity -
High
CVE Code -
202 - Remove WP Update Nags
Plugin -
Plugin Slug -
remove-wp-update-nags
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.5.0
Severity -
High
CVE Code -
203 - SV Media Library
Plugin -
Plugin Slug -
sv-media-library
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.0.00
Severity -
High
CVE Code -
204 - BuddyPress Groups Integration for WooCommerce
Plugin -
BuddyPress Groups Integration for WooCommerce
Plugin Slug -
wc4bp-groups
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.1.1
Severity -
High
CVE Code -
205 - WP Cloud Server
Plugin -
Plugin Slug -
wp-cloud-server
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.0.0
Severity -
High
CVE Code -
206 - WP Native Articles – Instant Articles Plugin for WordPress
Plugin -
WP Native Articles – Instant Articles Plugin for WordPress
Plugin Slug -
wp-native-articles
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.2.0
Severity -
High
CVE Code -
207 - Schema Pro
Plugin -
Plugin Slug -
wp-schema-pro
Vulnerability -
Cross Site Request Forgery (CSRF)
Patched In Version -
2.7.8
Severity -
Medium
CVE Code -
208 - WP Scrive by Webbstart
Plugin -
Plugin Slug -
wp-scrive
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.2.4
Severity -
High
CVE Code -
209 - WPCasa Mail Alert
Plugin -
Plugin Slug -
wpcasa-mail-alert
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
3.3.0
Severity -
High
CVE Code -
Protect Your WordPress Website Today With Website Guardian
Join hundreds of businesses like yours who trust InterwebDEFENCE to protect their websites and livelihood. Using our proven website security analysis and best-in-class AI ‘Website Guardian” software, we are able to protect, monitor and backup your WordPress website.
Go ahead, keep the good guys In and the bad guys out – Click HERE to see our Website Guardian security plans NOW
PLUS
Find out about our unconditional ‘Double Protection’ Guarantee. This guarantee is better than risk free!
We’ll have you scanned, protected and secure in no time, giving you total peace of mind that your website is safe, leaving you to focus on your business success.
WordPress Plugin Vulnerabilities – Unpatched
1 - WPS Limit Login
Plugin -
Plugin Slug -
wps-limit-login
Installations -
60,000+
Vulnerability -
Race Condition
Patched In Version -
No Fix
Severity -
Low
CVE Code -
2 - Custom Field Template
Plugin -
Plugin Slug -
custom-field-template
Installations -
50,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
3 - Social Share Icons & Social Share Buttons
Plugin -
Social Share Icons & Social Share Buttons
Plugin Slug -
ultimate-social-media-plus
Installations -
30,000+
Vulnerability -
Broken Access Control
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
![WP-CopyProtect [Protect your blog posts]](https://ps.w.org/wp-copyprotect/assets/banner-772x250.png?rev=1186194)
4 - WP-CopyProtect [Protect your blog posts]
Plugin -
WP-CopyProtect [Protect your blog posts]
Plugin Slug -
wp-copyprotect
Installations -
20,000+
Vulnerability -
Cross Site Request Forgery (CSRF)
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
5 - Elastic Email Sender
Plugin -
Plugin Slug -
elastic-email-sender
Installations -
10,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
6 - GTmetrix for WordPress
Plugin -
Plugin Slug -
gtmetrix-for-wordpress
Installations -
10,000+
Vulnerability -
Cross Site Request Forgery (CSRF)
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
7 - Author Box for Authors, Co-Authors, Multiple Authors and Guest Authors – Molongui
Plugin -
Author Box for Authors, Co-Authors, Multiple Authors and Guest Authors – Molongui
Plugin Slug -
molongui-authorship
Installations -
9,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
8 - Pinpoint Booking System – #1 WordPress Booking Plugin
Plugin -
Pinpoint Booking System – #1 WordPress Booking Plugin
Plugin Slug -
booking-system
Installations -
5,000+
Vulnerability -
Content Spoofing
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
9 - Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg
Plugin -
Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg
Plugin Slug -
borderless
Installations -
5,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
10 - Art Decoration Shortcode
Plugin -
Plugin Slug -
art-decoration-shortcode
Installations -
4,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
11 - Banner Management For WooCommerce
Plugin -
Banner Management For WooCommerce
Plugin Slug -
banner-management-for-woocommerce
Installations -
4,000+
Vulnerability -
Cross Site Request Forgery (CSRF)
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
12 - Fraud Prevention For Woocommerce
Plugin -
Fraud Prevention For Woocommerce
Plugin Slug -
woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers
Installations -
4,000+
Vulnerability -
Cross Site Request Forgery (CSRF)
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
13 - Google Map Shortcode
Plugin -
Plugin Slug -
google-map-shortcode
Installations -
3,000+
Vulnerability -
Cross Site Request Forgery (CSRF)
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
14 - MultiParcels Shipping For WooCommerce
Plugin -
MultiParcels Shipping For WooCommerce
Plugin Slug -
multiparcels-shipping-for-woocommerce
Installations -
3,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
15 - Server Info
Plugin -
Plugin Slug -
server-info
Installations -
3,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
16 - WordPress Language
Plugin -
Plugin Slug -
wordpress-language
Installations -
3,000+
Vulnerability -
Broken Access Control
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
17 - WP Emoji One
Plugin -
Plugin Slug -
wp-emoji-one
Installations -
3,000+
Vulnerability -
Cross Site Request Forgery (CSRF)
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
18 - WP Quick Post Duplicator
Plugin -
Plugin Slug -
wp-quick-post-duplicator
Installations -
3,000+
Vulnerability -
Broken Access Control
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
19 - Booster Elementor Addons
Plugin -
Plugin Slug -
booster-for-elementor
Installations -
2,000+
Vulnerability -
Broken Access Control
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
20 - Instant CSS
Plugin -
Plugin Slug -
instant-css
Installations -
2,000+
Vulnerability -
Broken Access Control
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
21 - CodeBard's Patron Button and Widgets for Patreon
Plugin -
CodeBard's Patron Button and Widgets for Patreon
Plugin Slug -
patron-button-and-widgets-by-codebard
Installations -
2,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
22 - Simple Googlebot Visit
Plugin -
Plugin Slug -
simple-googlebot-visit
Installations -
2,000+
Vulnerability -
Broken Access Control
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
23 - QR code MeCard/vCard generator
Plugin -
QR code MeCard/vCard generator
Plugin Slug -
wp-qrcode-me-v-card
Installations -
2,000+
Vulnerability -
Broken Access Control
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
24 - WRC Pricing Tables
Plugin -
Plugin Slug -
wrc-pricing-tables
Installations -
2,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
25 - Audio Player with Playlist Ultimate
Plugin -
Audio Player with Playlist Ultimate
Plugin Slug -
audio-player-with-playlist-ultimate
Installations -
1,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
26 - Client Portal : SuiteDash Direct Login
Plugin -
Client Portal : SuiteDash Direct Login
Plugin Slug -
client-portal-suitedash-login
Installations -
1,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
27 - Go Fetch Jobs (for WP Job Manager)
Plugin -
Go Fetch Jobs (for WP Job Manager)
Plugin Slug -
go-fetch-jobs-wp-job-manager
Installations -
1,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
28 - Mobile Address Bar Changer
Plugin -
Plugin Slug -
mobile-address-bar-changer
Installations -
1,000+
Vulnerability -
Cross Site Request Forgery (CSRF)
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
29 - Perelink Pro
Plugin -
Plugin Slug -
perelink
Installations -
1,000+
Vulnerability -
Cross Site Request Forgery (CSRF)
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
30 - Post List With Featured Image
Plugin -
Plugin Slug -
post-list-with-featured-image
Installations -
1,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
31 - Post Affiliate Pro
Plugin -
Plugin Slug -
postaffiliatepro
Installations -
1,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
32 - Remove Duplicate Posts
Plugin -
Plugin Slug -
remove-duplicate-posts
Installations -
1,000+
Vulnerability -
Broken Access Control
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
33 - Donations Made Easy – Smart Donations
Plugin -
Donations Made Easy – Smart Donations
Plugin Slug -
smart-donations
Installations -
1,000+
Vulnerability -
Broken Access Control
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
34 - Taboola
Plugin -
Plugin Slug -
taboola
Installations -
1,000+
Vulnerability -
Cross Site Request Forgery (CSRF)
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
35 - Exifography
Plugin -
Plugin Slug -
thesography
Installations -
1,000+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
36 - Onepage Builder – Easiest Landing Page Builder For WordPress
Plugin -
Onepage Builder – Easiest Landing Page Builder For WordPress
Plugin Slug -
tx-onepager
Installations -
1,000+
Vulnerability -
SQL Injection
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
37 - Free Booking Plugin for Hotels, Restaurant and Car Rental – eaSYNC
Plugin -
Free Booking Plugin for Hotels, Restaurant and Car Rental – eaSYNC
Plugin Slug -
easync-booking
Installations -
300+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
38 - Post Connector
Plugin -
Plugin Slug -
post-connector
Installations -
100+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
39 - Smarty for WordPress
Plugin -
Plugin Slug -
smarty-for-wordpress
Installations -
100+
Vulnerability -
Cross Site Request Forgery (CSRF)
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
40 - Gestion-Pymes
Plugin -
Plugin Slug -
gestion-pymes
Installations -
10+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
41 - Woocommerce Delivery Date Premium
Plugin -
Woocommerce Delivery Date Premium
Plugin Slug -
woocommerce-delivery-date
Installations -
10+
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
42 - bbResolutions
Plugin -
Plugin Slug -
bbresolutions
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
43 - BlogPost – BlogPost Widgets – Amazing Blog Layouts
Plugin -
BlogPost – BlogPost Widgets – Amazing Blog Layouts
Plugin Slug -
blogpost-widgets
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
44 - CF7 Constant Contact Fields Mapping
Plugin -
CF7 Constant Contact Fields Mapping
Plugin Slug -
cf7-constant-contact-fields-mapping
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
45 - WP Clone Menu
Plugin -
Plugin Slug -
clone-menu
Vulnerability -
Broken Access Control
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
46 - DancePress (TRWA)
Plugin -
Plugin Slug -
dancepress-trwa
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
47 - DeMomentSomTres Immediate Send
Plugin -
DeMomentSomTres Immediate Send
Plugin Slug -
demomentsomtres-mailchimp-immediate-send
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
48 - Disabler
Plugin -
Plugin Slug -
disabler
Vulnerability -
Cross Site Request Forgery (CSRF)
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
49 - WordPress Easy Call Now Button by elixirs.io
Plugin -
WordPress Easy Call Now Button by elixirs.io
Plugin Slug -
easy-call-now-button
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
50 - Extend Filter Products By Price Widget
Plugin -
Extend Filter Products By Price Widget
Plugin Slug -
extend-filter-products-by-price-widget
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
51 - Easy Responsive Pricing Tables
Plugin -
Easy Responsive Pricing Tables
Plugin Slug -
fullworks-pricing-tables
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
52 - JupiterX Core
Plugin -
Plugin Slug -
jupiterx-core
Vulnerability -
Arbitrary File Download
Patched In Version -
No Fix
Severity -
High
CVE Code -
53 - WP Logger
Plugin -
Plugin Slug -
lite-wp-logger
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
54 - LWS Affiliation
Plugin -
Plugin Slug -
lws-affiliation
Vulnerability -
Local File Inclusion
Patched In Version -
No Fix
Severity -
Critical
CVE Code -
55 - Menu Item Scheduler
Plugin -
Plugin Slug -
menu-item-scheduler
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
56 - Protect Uploads with Login – Protect Your Uploads
Plugin -
Protect Uploads with Login – Protect Your Uploads
Plugin Slug -
protect-uploads-with-login-page
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
57 - Quasar form
Plugin -
Plugin Slug -
quasar-form
Vulnerability -
SQL Injection
Patched In Version -
No Fix
Severity -
High
CVE Code -
58 - Role Based Bulk Quantity Pricing
Plugin -
Role Based Bulk Quantity Pricing
Plugin Slug -
role-based-bulk-quantity-pricing
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
59 - Page Builder for Gutenberg – StarterBlocks
Plugin -
Page Builder for Gutenberg – StarterBlocks
Plugin Slug -
starterblocks
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
60 - Subscribe to Category
Plugin -
Plugin Slug -
subscribe-to-category
Vulnerability -
SQL Injection
Patched In Version -
No Fix
Severity -
Critical
CVE Code -
61 - tagDiv Composer
Plugin -
Plugin Slug -
td-composer
Vulnerability -
Cross Site Request Forgery (CSRF)
Patched In Version -
No Fix
Severity -
High
CVE Code -
62 - Ultra Elementor Addons
Plugin -
Plugin Slug -
ultra-elementor-addons
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
63 - WordPress Auto SEO Plugin – Upfiv SEO Wizard
Plugin -
WordPress Auto SEO Plugin – Upfiv SEO Wizard
Plugin Slug -
upfiv-complete-all-in-one-seo-wizard
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
64 - User Email Verification for WooCommerce
Plugin -
User Email Verification for WooCommerce
Plugin Slug -
woo-confirmation-email
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
65 - WP-FlyBox
Plugin -
Plugin Slug -
wp-flybox
Vulnerability -
Cross Site Request Forgery (CSRF)
Patched In Version -
No Fix
Severity -
Medium
CVE Code -
66 - WordPress WooCommerce Sync for Google Sheet
Plugin -
WordPress WooCommerce Sync for Google Sheet
Plugin Slug -
wp-woo-commerce-sync-for-g-sheet
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
Protect Your WordPress Website Today With Website Guardian
Join hundreds of businesses like yours who trust InterwebDEFENCE to protect their websites and livelihood. Using our proven website security analysis and best-in-class AI ‘Website Guardian” software, we are able to protect, monitor and backup your WordPress website.
Go ahead, keep the good guys In and the bad guys out – Click HERE to see our Website Guardian security plans NOW
PLUS
Find out about our unconditional ‘Double Protection’ Guarantee. This guarantee is better than risk free!
We’ll have you scanned, protected and secure in no time, giving you total peace of mind that your website is safe, leaving you to focus on your business success.
WordPress Theme Vulnerabilities
1 - Bootstrap Blog
Theme -
Bootstrap Blog
Theme Slug -
bootstrap-blog
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
10.2.3
Severity -
High
CVE Code -
2 - Ona
Theme -
Ona
Theme Slug -
ona
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.18.3
Severity -
High
CVE Code -
3 - Yuki
Theme -
Yuki
Theme Slug -
yuki
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
4 - Techism
Theme -
Techism
Theme Slug -
techism
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
5 - Chic Lifestyle
Theme -
Chic Lifestyle
Theme Slug -
chic-lifestyle
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
10.0.8
Severity -
High
CVE Code -
6 - Lifestyle Magazine
Theme -
Lifestyle Magazine
Theme Slug -
lifestyle-magazine
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
10.2.1
Severity -
High
CVE Code -
7 - SalesZone
Theme -
SalesZone
Theme Slug -
saleszone
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
8 - Travel Tour
Theme -
Travel Tour
Theme Slug -
travel-tour
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.2.0
Severity -
High
CVE Code -
9 - Brand
Theme -
Brand
Theme Slug -
brand
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
10 - WP Sierra
Theme -
WP Sierra
Theme Slug -
wp-sierra
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
11 - Eighteen tags
Theme -
Eighteen tags
Theme Slug -
eighteen-tags
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
12 - Hasium
Theme -
Hasium
Theme Slug -
hasium
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
13 - Broadcast Lite
Theme -
Broadcast Lite
Theme Slug -
broadcast-lite
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.0.8
Severity -
High
CVE Code -
14 - Salzburg Blog
Theme -
Salzburg Blog
Theme Slug -
salzburg-blog
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
15 - Everse
Theme -
Everse
Theme Slug -
everse
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.8.12
Severity -
High
CVE Code -
16 - Speculor
Theme -
Speculor
Theme Slug -
speculor
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
17 - Meridia
Theme -
Meridia
Theme Slug -
meridia
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
2.2.8
Severity -
High
CVE Code -
18 - Aquarella Lite
Theme -
Aquarella Lite
Theme Slug -
aquarella-lite
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
19 - ConsultPress Lite
Theme -
ConsultPress Lite
Theme Slug -
consultpress-lite
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
20 - Topcat Lite
Theme -
Topcat Lite
Theme Slug -
topcat-lite
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
21 - Shuban
Theme -
Shuban
Theme Slug -
shuban
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
22 - Purus
Theme -
Purus
Theme Slug -
purus
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
23 - Elation
Theme -
Elation
Theme Slug -
elation
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
24 - GutenBook
Theme -
GutenBook
Theme Slug -
gutenbook
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
25 - Chained
Theme -
Chained
Theme Slug -
chained
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
26 - Elasta
Theme -
Elasta
Theme Slug -
elasta
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.0.9
Severity -
High
CVE Code -
27 - Purosa
Theme -
Purosa
Theme Slug -
purosa
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.1.3
Severity -
High
CVE Code -
28 - LearnMore
Theme -
LearnMore
Theme Slug -
learnmore
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
29 - WPCake
Theme -
WPCake
Theme Slug -
wpcake
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
30 - Nokke
Theme -
Nokke
Theme Slug -
nokke
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.2.4
Severity -
High
CVE Code -
31 - Arendelle
Theme -
Arendelle
Theme Slug -
arendelle
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.1.13
Severity -
High
CVE Code -
32 - PixiGo
Theme -
PixiGo
Theme Slug -
pixigo
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
33 - WP Moose
Theme -
WP Moose
Theme Slug -
wp-moose
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
34 - G Blog
Theme -
G Blog
Theme Slug -
g-blog
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
35 - NicheBase
Theme -
NicheBase
Theme Slug -
nichebase
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.2.3
Severity -
High
CVE Code -
36 - Cuisine Palace
Theme -
Cuisine Palace
Theme Slug -
cuisine-palace
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
37 - Amela
Theme -
Amela
Theme Slug -
amela
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.0.14
Severity -
High
CVE Code -
38 - Agncy
Theme -
Agncy
Theme Slug -
agncy
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
39 - Travel Agency Booking
Theme -
Travel Agency Booking
Theme Slug -
travel-agency-booking
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
40 - Bootstrap Fitness
Theme -
Bootstrap Fitness
Theme Slug -
bootstrap-fitness
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.0.6
Severity -
High
CVE Code -
41 - Bootstrap Coach
Theme -
Bootstrap Coach
Theme Slug -
bootstrap-coach
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.1.2
Severity -
High
CVE Code -
42 - Blockst
Theme -
Blockst
Theme Slug -
blockst
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.0.9
Severity -
High
CVE Code -
43 - Relax Spa
Theme -
Relax Spa
Theme Slug -
relax-spa
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
1.1.1
Severity -
High
CVE Code -
44 - Villar
Theme -
Villar
Theme Slug -
villar
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
45 - BlogHub
Theme -
BlogHub
Theme Slug -
bloghub
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
46 - Viralike
Theme -
Viralike
Theme Slug -
viralike
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
47 - NewsHit
Theme -
NewsHit
Theme Slug -
newshit
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
48 - Simplifii
Theme -
Simplifii
Theme Slug -
simplifii
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
49 - Roven Blog
Theme -
Roven Blog
Theme Slug -
roven-blog
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
50 - Krste
Theme -
Krste
Theme Slug -
krste
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
51 - Unakit
Theme -
Unakit
Theme Slug -
unakit
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
52 - Temp Mail X
Theme -
Temp Mail X
Theme Slug -
temp-mail-x
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
53 - Rovenstart
Theme -
Rovenstart
Theme Slug -
rovenstart
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
54 - Bani
Theme -
Bani
Theme Slug -
bani
Vulnerability -
Cross Site Scripting (XSS)
Patched In Version -
No Fix
Severity -
High
CVE Code -
Protect Your WordPress Website Today With Website Guardian
Join hundreds of businesses like yours who trust InterwebDEFENCE to protect their websites and livelihood. Using our proven website security analysis and best-in-class AI ‘Website Guardian” software, we are able to protect, monitor and backup your WordPress website.
Go ahead, keep the good guys In and the bad guys out – Click HERE to see our Website Guardian security plans NOW
PLUS
Find out about our unconditional ‘Double Protection’ Guarantee. This guarantee is better than risk free!
We’ll have you scanned, protected and secure in no time, giving you total peace of mind that your website is safe, leaving you to focus on your business success.