Did you know Wordfence runs a Bug Bounty Program for all WordPress plugins and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we handle all the rest.
Last week, there were 168 vulnerabilities disclosed in 157 WordPress Plugins and 5 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 61 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to implement layered security, aligning with our overarching mission to secure WordPress with defense in depth strategies. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 24,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 79 |
| Unpatched | 89 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Low Severity | 1 |
| Medium Severity | 131 |
| High Severity | 26 |
| Critical Severity | 10 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) | 68 |
| Cross-Site Request Forgery (CSRF) | 32 |
| Missing Authorization | 18 |
| Exposure of Sensitive Information to an Unauthorized Actor | 8 |
| Deserialization of Untrusted Data | 6 |
| Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) | 5 |
| Server-Side Request Forgery (SSRF) | 5 |
| Authentication Bypass Using an Alternate Path or Channel | 4 |
| Improper Control of Filename for Include/Require Statement in PHP Program (‘PHP Remote File Inclusion’) | 3 |
| Improper Control of Generation of Code (‘Code Injection’) | 3 |
| Improper Privilege Management | 3 |
| Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) | 2 |
| Unverified Password Change | 2 |
| Authorization Bypass Through User-Controlled Key | 1 |
| Exposure of Private Personal Information to an Unauthorized Actor | 1 |
| External Control of File Name or Path | 1 |
| Guessable CAPTCHA | 1 |
| Improper Access Control | 1 |
| Improper Input Validation | 1 |
| Incorrect Privilege Assignment | 1 |
| Unrestricted Upload of File with Dangerous Type | 1 |
| Weak Password Recovery Mechanism for Forgotten Password | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 15 | |
| 10 | |
| 9 | |
| 8 | |
| 7 | |
| 7 | |
| 7 | |
| 6 | |
| 6 | |
| 5 | |
| 5 | |
| 5 | |
| 4 | |
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| 1 click passwordless login, temporary login, social login & user switching – Login Me Now | login-me-now |
| Academist Membership | academist-membership |
| Add Linked Images To Gallery | add-linked-images-to-gallery-v01 |
| ADFO – Custom data in admin dashboard | admin-form |
| Admin Menu Manager | admin-menu-manager |
| Advanced AJAX Product Filters | woocommerce-ajax-filters |
| Advanced Google reCAPTCHA | advanced-google-recaptcha |
| Album Gallery – WordPress Gallery | new-album-gallery |
| All-In-One Cufon | all-in-one-cufon |
| Alloggio Membership | alloggio-membership |
| Animated Text Block | animated-text-block |
| Archive Page | archive-page |
| Authors List | authors-list |
| Auto Ad Inserter – Increase Google Adsense and Ad Manager Revenue | revenueflex-easy-ads |
| Auto Tag Links | auto-tag-links |
| Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss | bp-better-messages |
| Blighty Explorer | blighty-explorer |
| Booking Calendar and Notification | booking-calendar-and-notification |
| Booknetic | booknetic |
| Bravo Search & Replace | bravo-search-and-replace |
| Buddyboss Platform | buddyboss-platform |
| BuddyHolis TableSearch | tablesearch |
| BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages | wc4bp |
| Bulk Content Creator | bulk-content-creator |
| Card Elements for Elementor | card-elements-for-elementor |
| Classified Listing – Classified ads & Business Directory Plugin | classified-listing |
| Clicface Trombi | clicface-trombi |
| Contact Form 7 Star Rating | contact-form-7-star-rating |
| Contact Form 7 Star Rating with font Awesome | contact-form-7-star-rating-with-font-awersome |
| Counter Box: Add Engaging Countdowns, Timers & Counters to Your WordPress Site | counter-box |
| Currency Switcher for WooCommerce | currency-switcher-woocommerce |
| Database Backup and check Tables Automated With Scheduler 2024 | database-backup |
| DefendWP Firewall | defend-wp-firewall |
| DHVC Form | dhvc-form |
| Direct Checkout Button for WooCommerce | woo-direct-checkout-button |
| Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings | directorist |
| Download HTML TinyMCE Button | download-html-tinymce-button |
| Easy Digital Downloads Google Sheet Connector | gsheetconnector-easy-digital-downloads |
| Edd Google Sheet Connector Pro | edd-google-sheet-connector-pro |
| Elementor Website Builder – More Than Just a Page Builder | elementor |
| Erima Zarinpal Donate | erima-zarinpal-donate |
| Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates | essential-blocks |
| Events Manager – Calendar, Bookings, Tickets, and more! | events-manager |
| Exclusive Addons for Elementor | exclusive-addons-for-elementor |
| Exertio Framework | exertio-framework |
| EZ InLinkz linkup | inlinkz-scripter |
| F12-Profiler | f12-profiler |
| Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp – Chaty | chaty |
| Fluent Support – Helpdesk & Customer Support Ticket System | fluent-support |
| FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel | foogallery |
| Forex Calculators | fx-calculators |
| Forminator Forms – Contact Form, Payment Form & Custom Form Builder | forminator |
| Fresh Framework | fresh-framework |
| GenerateBlocks | generateblocks |
| Get Posts | nurelm-get-posts |
| Google Maps for WordPress | google-maps-for-wordpress |
| Gutenberg Blocks with AI by Kadence WP – Page Builder Features | kadence-blocks |
| Hover Image Button | hover-image-button |
| Ibtana – WordPress Website Builder | ibtana-visual-editor |
| Image Photo Gallery Final Tiles Grid | final-tiles-grid-gallery-lite |
| IP2Location Redirection | ip2location-redirection |
| Jeg Elementor Kit | jeg-elementor-kit |
| JPG, PNG Compression and Optimization | wp-image-compression |
| Just Variables | just-wp-variables |
| KiviCare – Clinic & Patient Management System (EHR) | kivicare-clinic-management-system |
| Link My Posts | linkmyposts |
| List Related Attachments | list-related-attachments-widget |
| Live Streaming Video Player – by SRS Player | srs-player |
| Local Search SEO Contact Page | local-search-seo-contact-page |
| mEintopf | meintopf |
| MemberSpace – Membership Plugin and Paid Subscriptions | memberspace |
| Minimum Password Strength | minimum-password-strength |
| MK Google Directions | google-distance-calculator |
| Modal Portfolio | modal-portfolio |
| Multilevel Referral Affiliate Plugin for WooCommerce | multilevel-referral-plugin-for-woocommerce |
| My Quota | my-quota |
| Namaste! LMS | namaste-lms |
| NextMove Lite – Thank You Page for WooCommerce | woo-thank-you-page-nextmove-lite |
| NHR Options Table Manager | nhrrob-options-table-manager |
| Ninja Pages | ninja-page-categories-and-tags |
| OneStore Sites | onestore-sites |
| Order Attachments for WooCommerce | order-attachments-for-woocommerce |
| Page Builder by SiteOrigin | siteorigin-panels |
| Passbeemedia Web Push Notification | passbeemedia-web-push-notifications |
| Pathomation | pathomation |
| Phee’s LinkPreview | linkpreview |
| Photo Gallery ( Responsive ) | photo-gallery-pearlbells |
| Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons | contest-gallery |
| Pie Register Premium | pie-register-premium |
| PiwigoPress | piwigopress |
| PixelYourSite – Your smart PIXEL (TAG) & API Manager | pixelyoursite |
| PlayerJS | playerjs |
| Post Grid and Gutenberg Blocks – ComboBlocks | post-grid |
| Pricing Table by PickPlugins | pricingtable |
| Private Content | private-content |
| Product Catalog Simple | post-type-x |
| Profile Widget Ninja | profile-widget-ninja |
| Quiz Organizer | quiz-organizer |
| Quotes llama | quotes-llama |
| RateMyAgent Official | ratemyagent-official |
| RAYS Grid | rays-grid |
| Reactive Mortgage Calculator | reactive-mortgage-calculator |
| School Management System – SakolaWP | sakolawp-lite |
| SecuPress Free — WordPress Security | secupress |
| Secure Copy Content Protection and Content Locking | secure-copy-content-protection |
| SetSail Membership | setsail-membership |
| Simple Download Counter | simple-download-counter |
| Simple Google Sitemap | simple-google-sitemap |
| Simple:Press Forum | simplepress |
| Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) | sina-extension-for-elementor |
| Site Mailer – SMTP Replacement, Email API Deliverability & Email Log | site-mailer |
| SKU Generator for WooCommerce | sku-for-woocommerce |
| Smart Maintenance & Countdown | smart-maintenance-countdown |
| Social Share And Social Locker – ARSocial | social-share-and-social-locker-arsocial |
| SpotBot | spotbot |
| Sticky Header On Scroll | sticky-header-on-scroll |
| Subscriptions & Memberships for PayPal | subscriptions-memberships-for-paypal |
| SureMembers | suremembers |
| SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity | surveyjs |
| SVG Support | svg-support |
| Table of Contents Block | table-of-contents |
| Tabs for WooCommerce | wc-tabs |
| TemplatesNext ToolKit | templatesnext-toolkit |
| Templines Elementor Helper Core | templines-helper-core |
| The Ark | WordPress Theme made for Freelancers | ark-core |
| ThemeMakers PayPal Express Checkout | tmm_paypal_checkout |
| ThemeMakers Stripe Checkout | tmm_stripe_checkout |
| Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid | boldgrid-backup |
| Ultra Addons Lite for Elementor | ut-elementor-addons-lite |
| URL Media Uploader | url-media-uploader |
| User Registration & Membership – Custom Registration Form, Login Form, and User Profile | user-registration |
| VG PostCarousel | vg-postcarousel |
| Video.js HLS Player | videojs-hls-player |
| ViperBar | viperbar |
| WHMCS Client Area for WordPress by WHMpress | WHMpress_Client_Area_Api |
| WHMpress – WHMCS WordPress Integration Plugin | whmpress |
| WooCommerce Display Products by Tags | woocommerce-display-products-by-tags |
| WooCommerce Recargo de Equivalencia | woo-recargo-de-equivalencia |
| WooCommerce Ultimate Gift Card | woocommerce-ultimate-gift-card |
| Woocommerce – Loi Hamon | loi-hamon |
| WordPress File Upload | wp-file-upload |
| WOW Entrance Effects (WEE!) | wow-entrance-effects-wee |
| WP About Author | wp-about-author |
| WP Activity Log | wp-security-audit-log |
| WP Posts Carousel | wp-posts-carousel |
| WP Sitemap | wp-sitemap |
| Wp Social Login and Register Social Counter | wp-social |
| WP Social SEO Booster – Knowledge Graph Social Signals SEO | wp-social-seo-booster |
| WP tarteaucitron.js Self Hosted | wp-tarteaucitron-js-self-hosted |
| WP Video Posts | wp-video-posts |
| WP-Asambleas | wp-asambleas |
| WP-PManager | wp-programmmanager |
| WP-PostRatings Cheater | wp-postratings-cheater |
| wpForo Forum | wpforo |
| Yawave | yawave |
| Önceki Yazı Link | onceki-yazi-linki |
| ć— č§…ç›¸ĺ…łć–‡ç« ćŹ’ä»¶ | wumii-related-posts |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Bricks | bricks |
| Car Dealer Automotive WordPress Theme – Responsive | cardealer |
| Enfold – Responsive Multi-Purpose Theme | enfold |
| Nokri – Job Board WordPress Theme | nokri |
| Travel Booking WordPress Theme | traveler |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
CVE-ID
CVE-2025-1671
CVE-2025-1671
Patch Status
Patched
Patched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
Academist Membership
Academist Membership
Researcher
CVE-ID
CVE-2025-1638
CVE-2025-1638
Patch Status
Patched
Patched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
Alloggio Membership
Alloggio Membership
Researcher
CVE-ID
CVE-2025-26970
CVE-2025-26970
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
The Ark | WordPress Theme made for Freelancers
The Ark | WordPress Theme made for Freelancers
Researcher
CVE-ID
CVE-2025-26936
CVE-2025-26936
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Fresh Framework
Fresh Framework
Researcher
CVE-ID
CVE-2024-12824
CVE-2024-12824
Patch Status
Patched
Patched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
Nokri – Job Board WordPress Theme
Nokri – Job Board WordPress Theme
Researcher
CVE-ID
CVE-2025-26966
CVE-2025-26966
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Private Content
Private Content
Researcher
CVE-ID
CVE-2025-1564
CVE-2025-1564
Patch Status
Patched
Patched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
SetSail Membership
SetSail Membership
Researcher
CVE-ID
CVE-2024-9193
CVE-2024-9193
Patch Status
Patched
Patched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
WHMpress – WHMCS WordPress Integration Plugin
WHMpress – WHMCS WordPress Integration Plugin
Researcher
CVE-ID
CVE-2024-8425
CVE-2024-8425
Patch Status
Unpatched
Unpatched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
WooCommerce Ultimate Gift Card
WooCommerce Ultimate Gift Card
Researcher
CVE-ID
CVE-2025-1282
CVE-2025-1282
Patch Status
Patched
Patched
Published
Feb 26, 2025
Feb 26, 2025
Affected Software
Car Dealer Automotive WordPress Theme – Responsive
Car Dealer Automotive WordPress Theme – Responsive
Researcher
CVE-ID
CVE-2025-1682
CVE-2025-1682
Patch Status
Patched
Patched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
Car Dealer Automotive WordPress Theme – Responsive
Car Dealer Automotive WordPress Theme – Responsive
Researcher
CVE-ID
CVE-2025-1687
CVE-2025-1687
Patch Status
Patched
Patched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
Car Dealer Automotive WordPress Theme – Responsive
Car Dealer Automotive WordPress Theme – Responsive
Researcher
CVE-ID
CVE-2024-12544
CVE-2024-12544
Patch Status
Patched
Patched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity
SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity
Researcher
CVE-ID
CVE-2025-1295
CVE-2025-1295
Patch Status
Patched
Patched
Published
Feb 26, 2025
Feb 26, 2025
Affected Software
Templines Elementor Helper Core
Templines Elementor Helper Core
Researcher
CVE-ID
CVE-2024-12811
CVE-2024-12811
Patch Status
Unpatched
Unpatched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
Travel Booking WordPress Theme
Travel Booking WordPress Theme
Researcher
CVE-ID
CVE-2025-27272
CVE-2025-27272
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
VG PostCarousel
VG PostCarousel
Researcher
WHMPress – WHMCS Client Area <= 4.3-revision-3- Authenticated (Subscriber+) Arbitrary Options Update
8.8
CVE-ID
CVE-2024-9195
CVE-2024-9195
Patch Status
Unpatched
Unpatched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
WHMCS Client Area for WordPress by WHMpress
WHMCS Client Area for WordPress by WHMpress
Researcher
CVE-ID
CVE-2025-27298
CVE-2025-27298
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
WP Video Posts
WP Video Posts
Researcher
CVE-ID
CVE-2025-1570
CVE-2025-1570
Patch Status
Patched
Patched
Published
Feb 27, 2025
Feb 27, 2025
Researcher
CVE-ID
CVE-2024-13373
CVE-2024-13373
Patch Status
Patched
Patched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
Exertio Framework
Exertio Framework
Researcher
CVE-ID
CVE-2025-1717
CVE-2025-1717
Patch Status
Unpatched
Unpatched
Published
Feb 26, 2025
Feb 26, 2025
Affected Software
1 click passwordless login, temporary login, social login & user switching – Login Me Now
1 click passwordless login, temporary login, social login & user switching – Login Me Now
Researcher
CVE-ID
CVE-2025-0769
CVE-2025-0769
Patch Status
Patched
Patched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
PixelYourSite – Your smart PIXEL (TAG) & API Manager
PixelYourSite – Your smart PIXEL (TAG) & API Manager
Researcher
CVE-ID
CVE-2024-13611
CVE-2024-13611
Patch Status
Patched
Patched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss
Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss
Researcher
CVE-ID
CVE-2024-13568
CVE-2024-13568
Patch Status
Patched
Patched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
Fluent Support – Helpdesk & Customer Support Ticket System
Fluent Support – Helpdesk & Customer Support Ticket System
Researcher
CVE-ID
CVE-2025-1648
CVE-2025-1648
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Yawave
Yawave
Researcher
CVE-ID
CVE-2025-27294
CVE-2025-27294
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
WP-Asambleas
WP-Asambleas
Researcher
CVE-ID
CVE-2025-27300
CVE-2025-27300
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
ADFO – Custom data in admin dashboard
ADFO – Custom data in admin dashboard
Researcher
CVE-ID
CVE-2024-13833
CVE-2024-13833
Patch Status
Patched
Patched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
Album Gallery – WordPress Gallery
Album Gallery – WordPress Gallery
Researcher
CVE-ID
CVE-2024-13911
CVE-2024-13911
Patch Status
Patched
Patched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
Database Backup and check Tables Automated With Scheduler 2024
Database Backup and check Tables Automated With Scheduler 2024
Researcher
CVE-ID
CVE-2024-13910
CVE-2024-13910
Patch Status
Patched
Patched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
Database Backup and check Tables Automated With Scheduler 2024
Database Backup and check Tables Automated With Scheduler 2024
Researcher
CVE-ID
CVE-2025-27301
CVE-2025-27301
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
NHR Options Table Manager
NHR Options Table Manager
Researcher
CVE-ID
CVE-2025-1513
CVE-2025-1513
Patch Status
Patched
Patched
Published
Feb 27, 2025
Feb 27, 2025
CVE-ID
CVE-2025-1319
CVE-2025-1319
Patch Status
Patched
Patched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
Site Mailer – SMTP Replacement, Email API Deliverability & Email Log
Site Mailer – SMTP Replacement, Email API Deliverability & Email Log
Researcher
CVE-ID
CVE-2024-13831
CVE-2024-13831
Patch Status
Unpatched
Unpatched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
Tabs for WooCommerce
Tabs for WooCommerce
Researcher
CVE-ID
CVE-2025-0767
CVE-2025-0767
Patch Status
Patched
Patched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
WP Activity Log
WP Activity Log
Researcher
CVE-ID
CVE-2024-13806
CVE-2024-13806
Patch Status
Patched
Patched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
Authors List
Authors List
Researcher
CVE-ID
CVE-2024-13746
CVE-2024-13746
Patch Status
Unpatched
Unpatched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
Booking Calendar and Notification
Booking Calendar and Notification
Researchers
CVE-ID
CVE-2025-1572
CVE-2025-1572
Patch Status
Patched
Patched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
KiviCare – Clinic & Patient Management System (EHR)
KiviCare – Clinic & Patient Management System (EHR)
Researcher
CVE-ID
CVE-2024-13750
CVE-2024-13750
Patch Status
Unpatched
Unpatched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
Multilevel Referral Affiliate Plugin for WooCommerce
Multilevel Referral Affiliate Plugin for WooCommerce
Researcher
CVE-ID
CVE-2025-1730
CVE-2025-1730
Patch Status
Patched
Patched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
Simple Download Counter
Simple Download Counter
Researcher
CVE-ID
CVE-2025-27312
CVE-2025-27312
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
WP Sitemap
WP Sitemap
Researcher
CVE-ID
CVE-2025-0764
CVE-2025-0764
Patch Status
Patched
Patched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
wpForo Forum
wpForo Forum
Researcher
CVE-ID
CVE-2025-27280
CVE-2025-27280
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Archive Page
Archive Page
Researcher
CVE-ID
CVE-2024-13402
CVE-2024-13402
Patch Status
Patched
Patched
Published
Feb 26, 2025
Feb 26, 2025
Affected Software
Buddyboss Platform
Buddyboss Platform
Researcher
CVE-ID
Unknown
Unknown
Patch Status
Unpatched
Unpatched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
BuddyHolis TableSearch
BuddyHolis TableSearch
Researcher
CVE-ID
CVE-2024-13734
CVE-2024-13734
Patch Status
Patched
Patched
Published
Feb 26, 2025
Feb 26, 2025
Affected Software
Card Elements for Elementor
Card Elements for Elementor
Researcher
Clicface Trombi <= 2.08 – Authenticated (Contributor+) Stored Cross-Site Scripting via nom Parameter
6.4
CVE-ID
CVE-2025-0820
CVE-2025-0820
Patch Status
Unpatched
Unpatched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
Clicface Trombi
Clicface Trombi
Researcher
CVE-ID
CVE-2025-27347
CVE-2025-27347
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Direct Checkout Button for WooCommerce
Direct Checkout Button for WooCommerce
Researcher
CVE-ID
CVE-2024-54444
CVE-2024-54444
Patch Status
Patched
Patched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Elementor Website Builder – More Than Just a Page Builder
Elementor Website Builder – More Than Just a Page Builder
Researcher
CVE-ID
CVE-2024-13695
CVE-2024-13695
Patch Status
Patched
Patched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Enfold – Responsive Multi-Purpose Theme
Enfold – Responsive Multi-Purpose Theme
Researcher
CVE-ID
CVE-2024-13803
CVE-2024-13803
Patch Status
Patched
Patched
Published
Feb 25, 2025
Feb 25, 2025
Affected Software
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates
Researcher
CVE-ID
CVE-2025-1571
CVE-2025-1571
Patch Status
Patched
Patched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
Exclusive Addons for Elementor
Exclusive Addons for Elementor
Researcher
CVE-ID
CVE-2025-27329
CVE-2025-27329
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
EZ InLinkz linkup
EZ InLinkz linkup
Researcher
CVE-ID
CVE-2025-1450
CVE-2025-1450
Patch Status
Patched
Patched
Published
Feb 26, 2025
Feb 26, 2025
CVE-ID
CVE-2025-0469
CVE-2025-0469
Patch Status
Patched
Patched
Published
Feb 26, 2025
Feb 26, 2025
Affected Software
Forminator Forms – Contact Form, Payment Form & Custom Form Builder
Forminator Forms – Contact Form, Payment Form & Custom Form Builder
Researcher
CVE-ID
CVE-2025-27349
CVE-2025-27349
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Get Posts
Get Posts
Researcher
CVE-ID
CVE-2025-27265
CVE-2025-27265
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Google Maps for WordPress
Google Maps for WordPress
Researcher
CVE-ID
CVE-2025-1291
CVE-2025-1291
Patch Status
Patched
Patched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
Gutenberg Blocks with AI by Kadence WP – Page Builder Features
Gutenberg Blocks with AI by Kadence WP – Page Builder Features
Researcher
CVE-ID
CVE-2025-27266
CVE-2025-27266
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Hover Image Button
Hover Image Button
Researcher
CVE-ID
CVE-2025-26891
CVE-2025-26891
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Ibtana – WordPress Website Builder
Ibtana – WordPress Website Builder
Researcher
CVE-ID
CVE-2024-6261
CVE-2024-6261
Patch Status
Patched
Patched
Published
Feb 26, 2025
Feb 26, 2025
Affected Software
Image Photo Gallery Final Tiles Grid
Image Photo Gallery Final Tiles Grid
Researcher
CVE-ID
CVE-2025-26897
CVE-2025-26897
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
List Related Attachments
List Related Attachments
Researcher
CVE-ID
CVE-2025-27327
CVE-2025-27327
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Live Streaming Video Player – by SRS Player
Live Streaming Video Player – by SRS Player
Researcher
Local Search SEO Contact Page <= 4.0.1 – Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-ID
CVE-2025-27351
CVE-2025-27351
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Local Search SEO Contact Page
Local Search SEO Contact Page
Researcher
CVE-ID
CVE-2024-12820
CVE-2024-12820
Patch Status
Patched
Patched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
MK Google Directions
MK Google Directions
Researcher
CVE-ID
CVE-2025-1459
CVE-2025-1459
Patch Status
Patched
Patched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
Page Builder by SiteOrigin
Page Builder by SiteOrigin
Researcher
CVE-ID
CVE-2025-27306
CVE-2025-27306
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Pathomation
Pathomation
Researcher
CVE-ID
CVE-2025-26896
CVE-2025-26896
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
PiwigoPress
PiwigoPress
Researcher
CVE-ID
CVE-2025-27330
CVE-2025-27330
Patch Status
Patched
Patched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
PlayerJS
PlayerJS
Researcher
Pricing Table by PickPlugins <= 1.12.10 – Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-ID
CVE-2024-13469
CVE-2024-13469
Patch Status
Unpatched
Unpatched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
Pricing Table by PickPlugins
Pricing Table by PickPlugins
Researcher
CVE-ID
CVE-2025-1405
CVE-2025-1405
Patch Status
Patched
Patched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
Product Catalog Simple
Product Catalog Simple
Researcher
CVE-ID
CVE-2025-27320
CVE-2025-27320
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Profile Widget Ninja
Profile Widget Ninja
Researcher
CVE-ID
CVE-2025-27307
CVE-2025-27307
Patch Status
Patched
Patched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Quotes llama
Quotes llama
Researcher
CVE-ID
CVE-2025-27341
CVE-2025-27341
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Reactive Mortgage Calculator
Reactive Mortgage Calculator
Researcher
CVE-ID
CVE-2024-9019
CVE-2024-9019
Patch Status
Unpatched
Unpatched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
SecuPress Free — WordPress Security
SecuPress Free — WordPress Security
Researcher
CVE-ID
CVE-2025-1517
CVE-2025-1517
Patch Status
Patched
Patched
Published
Feb 25, 2025
Feb 25, 2025
CVE-ID
CVE-2025-27305
CVE-2025-27305
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Table of Contents Block
Table of Contents Block
Researcher
CVE-ID
CVE-2024-13559
CVE-2024-13559
Patch Status
Unpatched
Unpatched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
TemplatesNext ToolKit
TemplatesNext ToolKit
Researcher
CVE-ID
CVE-2025-1689
CVE-2025-1689
Patch Status
Patched
Patched
Published
Feb 26, 2025
Feb 26, 2025
Affected Software
ThemeMakers PayPal Express Checkout
ThemeMakers PayPal Express Checkout
Researcher
CVE-ID
CVE-2025-1690
CVE-2025-1690
Patch Status
Patched
Patched
Published
Feb 26, 2025
Feb 26, 2025
Affected Software
ThemeMakers Stripe Checkout
ThemeMakers Stripe Checkout
Researcher
URL Media Uploader <= 1.0.0 – Authenticated (Author+) Server-Side Request Forgery via DNS Rebinding
6.4
CVE-ID
CVE-2025-1662
CVE-2025-1662
Patch Status
Patched
Patched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
URL Media Uploader
URL Media Uploader
Researcher
CVE-ID
CVE-2025-27325
CVE-2025-27325
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Video.js HLS Player
Video.js HLS Player
Researcher
CVE-ID
CVE-2025-27331
CVE-2025-27331
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
WooCommerce Display Products by Tags
WooCommerce Display Products by Tags
Researcher
CVE-ID
CVE-2025-1560
CVE-2025-1560
Patch Status
Unpatched
Unpatched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
WOW Entrance Effects (WEE!)
WOW Entrance Effects (WEE!)
Researcher
CVE-ID
CVE-2025-27323
CVE-2025-27323
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
WP About Author
WP About Author
Researcher
CVE-ID
CVE-2025-1491
CVE-2025-1491
Patch Status
Patched
Patched
Published
Mar 1, 2025
Mar 1, 2025
Affected Software
WP Posts Carousel
WP Posts Carousel
Researcher
CVE-ID
CVE-2025-27348
CVE-2025-27348
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
WP Social SEO Booster – Knowledge Graph Social Signals SEO
WP Social SEO Booster – Knowledge Graph Social Signals SEO
Researcher
CVE-ID
CVE-2025-27277
CVE-2025-27277
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Add Linked Images To Gallery
Add Linked Images To Gallery
Researcher
CVE-ID
CVE-2025-1505
CVE-2025-1505
Patch Status
Patched
Patched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
Advanced AJAX Product Filters
Advanced AJAX Product Filters
Researcher
CVE-ID
CVE-2025-27321
CVE-2025-27321
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Blighty Explorer
Blighty Explorer
Researcher
CVE-ID
CVE-2024-9217
CVE-2024-9217
Patch Status
Unpatched
Unpatched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
Currency Switcher for WooCommerce
Currency Switcher for WooCommerce
Researcher
CVE-ID
CVE-2025-1286
CVE-2025-1286
Patch Status
Unpatched
Unpatched
Published
Feb 26, 2025
Feb 26, 2025
Affected Software
Download HTML TinyMCE Button
Download HTML TinyMCE Button
Researcher
CVE-ID
CVE-2025-22624
CVE-2025-22624
Patch Status
Unpatched
Unpatched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel
FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel
Researcher
CVE-ID
CVE-2025-27336
CVE-2025-27336
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Just Variables
Just Variables
Researcher
CVE-ID
CVE-2024-13881
CVE-2024-13881
Patch Status
Unpatched
Unpatched
Published
Feb 26, 2025
Feb 26, 2025
Affected Software
Link My Posts
Link My Posts
Researcher
CVE-ID
CVE-2024-13876
CVE-2024-13876
Patch Status
Unpatched
Unpatched
Published
Feb 26, 2025
Feb 26, 2025
Affected Software
mEintopf
mEintopf
Researcher
CVE-ID
CVE-2024-13727
CVE-2024-13727
Patch Status
Patched
Patched
Published
Mar 2, 2025
Mar 2, 2025
Affected Software
MemberSpace – Membership Plugin and Paid Subscriptions
MemberSpace – Membership Plugin and Paid Subscriptions
Researcher
CVE-ID
CVE-2024-13880
CVE-2024-13880
Patch Status
Unpatched
Unpatched
Published
Feb 26, 2025
Feb 26, 2025
Affected Software
My Quota
My Quota
Researcher
CVE-ID
CVE-2024-13877
CVE-2024-13877
Patch Status
Unpatched
Unpatched
Published
Feb 26, 2025
Feb 26, 2025
Affected Software
Passbeemedia Web Push Notification
Passbeemedia Web Push Notification
Researcher
CVE-ID
CVE-2024-9212
CVE-2024-9212
Patch Status
Unpatched
Unpatched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
SKU Generator for WooCommerce
SKU Generator for WooCommerce
Researcher
Smart Maintenance & Countdown <= 1.2 – Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-ID
CVE-2025-27332
CVE-2025-27332
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Smart Maintenance & Countdown
Smart Maintenance & Countdown
Researcher
CVE-ID
CVE-2024-13878
CVE-2024-13878
Patch Status
Unpatched
Unpatched
Published
Feb 26, 2025
Feb 26, 2025
Affected Software
SpotBot
SpotBot
Researcher
CVE-ID
CVE-2025-1511
CVE-2025-1511
Patch Status
Patched
Patched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
User Registration & Membership – Custom Registration Form, Login Form, and User Profile
User Registration & Membership – Custom Registration Form, Login Form, and User Profile
Researcher
CVE-ID
CVE-2025-26557
CVE-2025-26557
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
ViperBar
ViperBar
Researcher
CVE-ID
CVE-2025-27355
CVE-2025-27355
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Woocommerce – Loi Hamon
Woocommerce – Loi Hamon
Researcher
CVE-ID
CVE-2024-13875
CVE-2024-13875
Patch Status
Unpatched
Unpatched
Published
Feb 26, 2025
Feb 26, 2025
Affected Software
WP-PManager
WP-PManager
Researcher
CVE-ID
CVE-2025-27352
CVE-2025-27352
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
ć— č§…ç›¸ĺ…łć–‡ç« ćŹ’ä»¶
ć— č§…ç›¸ĺ…łć–‡ç« ćŹ’ä»¶
Researcher
CVE-ID
CVE-2024-13638
CVE-2024-13638
Patch Status
Unpatched
Unpatched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
Order Attachments for WooCommerce
Order Attachments for WooCommerce
Researcher
CVE-ID
CVE-2024-13851
CVE-2024-13851
Patch Status
Unpatched
Unpatched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
Modal Portfolio
Modal Portfolio
Researchers
CVE-ID
CVE-2025-1681
CVE-2025-1681
Patch Status
Patched
Patched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
Car Dealer Automotive WordPress Theme – Responsive
Car Dealer Automotive WordPress Theme – Responsive
Researcher
CVE-ID
CVE-2025-1262
CVE-2025-1262
Patch Status
Patched
Patched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Advanced Google reCAPTCHA
Advanced Google reCAPTCHA
Researcher
CVE-ID
CVE-2025-1063
CVE-2025-1063
Patch Status
Patched
Patched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Classified Listing – Classified ads & Business Directory Plugin
Classified Listing – Classified ads & Business Directory Plugin
Researcher
Enfold <= 6.0.9 – Missing Authorization to Sensitive Information Disclosure in avia-export-class.php
5.3
CVE-ID
CVE-2024-13693
CVE-2024-13693
Patch Status
Patched
Patched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Enfold – Responsive Multi-Purpose Theme
Enfold – Responsive Multi-Purpose Theme
Researcher
CVE-ID
CVE-2025-1249
CVE-2025-1249
Patch Status
Patched
Patched
Published
Feb 26, 2025
Feb 26, 2025
Affected Software
Events Manager – Calendar, Bookings, Tickets, and more!
Events Manager – Calendar, Bookings, Tickets, and more!
Researcher
CVE-ID
CVE-2025-1502
CVE-2025-1502
Patch Status
Patched
Patched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
IP2Location Redirection
IP2Location Redirection
Researcher
CVE-ID
CVE-2024-13905
CVE-2024-13905
Patch Status
Unpatched
Unpatched
Published
Feb 26, 2025
Feb 26, 2025
Affected Software
OneStore Sites
OneStore Sites
Researcher
Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.6 – Unauthenticated User Information Exposure
5.3
CVE-ID
CVE-2024-13796
CVE-2024-13796
Patch Status
Patched
Patched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
Post Grid and Gutenberg Blocks – ComboBlocks
Post Grid and Gutenberg Blocks – ComboBlocks
Researcher
CVE-ID
CVE-2025-1404
CVE-2025-1404
Patch Status
Patched
Patched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
Secure Copy Content Protection and Content Locking
Secure Copy Content Protection and Content Locking
Researcher
CVE-ID
CVE-2024-12434
CVE-2024-12434
Patch Status
Patched
Patched
Published
Feb 25, 2025
Feb 25, 2025
Affected Software
SureMembers
SureMembers
Researcher
CVE-ID
CVE-2025-27297
CVE-2025-27297
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Bravo Search & Replace
Bravo Search & Replace
Researcher
CVE-ID
CVE-2024-13907
CVE-2024-13907
Patch Status
Patched
Patched
Published
Feb 26, 2025
Feb 26, 2025
Researcher
CVE-ID
CVE-2024-13697
CVE-2024-13697
Patch Status
Patched
Patched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss
Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss
Researcher
CVE-ID
CVE-2025-27303
CVE-2025-27303
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Contact Form 7 Star Rating
Contact Form 7 Star Rating
Researcher
CVE-ID
CVE-2025-27304
CVE-2025-27304
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Contact Form 7 Star Rating with font Awesome
Contact Form 7 Star Rating with font Awesome
Researcher
CVE-ID
CVE-2024-13901
CVE-2024-13901
Patch Status
Patched
Patched
Published
Feb 28, 2025
Feb 28, 2025
Researcher
CVE-ID
CVE-2025-1454
CVE-2025-1454
Patch Status
Unpatched
Unpatched
Published
Feb 26, 2025
Feb 26, 2025
Affected Software
Ninja Pages
Ninja Pages
Researcher
CVE-ID
CVE-2024-6810
CVE-2024-6810
Patch Status
Unpatched
Unpatched
Published
Feb 25, 2025
Feb 25, 2025
Affected Software
Quiz Organizer
Quiz Organizer
Researcher
CVE-ID
CVE-2024-11189
CVE-2024-11189
Patch Status
Patched
Patched
Published
Feb 25, 2025
Feb 25, 2025
Affected Software
Social Share And Social Locker – ARSocial
Social Share And Social Locker – ARSocial
Researcher
CVE-ID
CVE-2025-26925
CVE-2025-26925
Patch Status
Unpatched
Unpatched
Published
Feb 26, 2025
Feb 26, 2025
Affected Software
Admin Menu Manager
Admin Menu Manager
Researcher
CVE-ID
CVE-2025-27315
CVE-2025-27315
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
All-In-One Cufon
All-In-One Cufon
Researcher
CVE-ID
CVE-2025-26883
CVE-2025-26883
Patch Status
Patched
Patched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Animated Text Block
Animated Text Block
Researcher
CVE-ID
CVE-2025-27335
CVE-2025-27335
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Auto Tag Links
Auto Tag Links
Researcher
CVE-ID
CVE-2025-26926
CVE-2025-26926
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Booknetic
Booknetic
Researcher
CVE-ID
CVE-2024-13358
CVE-2024-13358
Patch Status
Patched
Patched
Published
Feb 28, 2025
Feb 28, 2025
Researcher
CVE-ID
CVE-2025-1780
CVE-2025-1780
Patch Status
Patched
Patched
Published
Feb 28, 2025
Feb 28, 2025
Researcher
CVE-ID
CVE-2025-27311
CVE-2025-27311
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Bulk Content Creator
Bulk Content Creator
Researcher
CVE-ID
CVE-2025-22280
CVE-2025-22280
Patch Status
Patched
Patched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
DefendWP Firewall
DefendWP Firewall
Researcher
CVE-ID
CVE-2023-2334
CVE-2023-2334
Patch Status
Patched
Patched
Published
Mar 2, 2025
Mar 2, 2025
Researcher
CVE-ID
CVE-2025-27290
CVE-2025-27290
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Erima Zarinpal Donate
Erima Zarinpal Donate
Researcher
CVE-ID
CVE-2025-27340
CVE-2025-27340
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
F12-Profiler
F12-Profiler
Researcher
Forex Calculators <= 1.3.7 – Missing Authorization to Authenticated (Subscriber+) Settings Update
4.3
CVE-ID
CVE-2024-13716
CVE-2024-13716
Patch Status
Patched
Patched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
Forex Calculators
Forex Calculators
Researcher
CVE-ID
CVE-2024-13546
CVE-2024-13546
Patch Status
Patched
Patched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
GenerateBlocks
GenerateBlocks
Researcher
CVE-ID
CVE-2024-13217
CVE-2024-13217
Patch Status
Patched
Patched
Published
Feb 26, 2025
Feb 26, 2025
Affected Software
Jeg Elementor Kit
Jeg Elementor Kit
Researcher
CVE-ID
CVE-2025-27316
CVE-2025-27316
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
JPG, PNG Compression and Optimization
JPG, PNG Compression and Optimization
Researcher
CVE-ID
CVE-2025-27339
CVE-2025-27339
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Minimum Password Strength
Minimum Password Strength
Researcher
CVE-ID
CVE-2025-27353
CVE-2025-27353
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Namaste! LMS
Namaste! LMS
Researcher
CVE-ID
CVE-2024-10860
CVE-2024-10860
Patch Status
Patched
Patched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
NextMove Lite – Thank You Page for WooCommerce
NextMove Lite – Thank You Page for WooCommerce
Researcher
CVE-ID
CVE-2025-27357
CVE-2025-27357
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Önceki Yazı Link
Önceki Yazı Link
Researcher
CVE-ID
CVE-2025-27344
CVE-2025-27344
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Phee’s LinkPreview
Phee’s LinkPreview
Researcher
CVE-ID
CVE-2025-27276
CVE-2025-27276
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Photo Gallery ( Responsive )
Photo Gallery ( Responsive )
Researcher
CVE-ID
CVE-2025-26948
CVE-2025-26948
Patch Status
Patched
Patched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Pie Register Premium
Pie Register Premium
Researcher
CVE-ID
CVE-2025-0801
CVE-2025-0801
Patch Status
Patched
Patched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
RateMyAgent Official
RateMyAgent Official
Researcher
CVE-ID
CVE-2025-27317
CVE-2025-27317
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
RAYS Grid
RAYS Grid
Researcher
CVE-ID
CVE-2024-13647
CVE-2024-13647
Patch Status
Unpatched
Unpatched
Published
Feb 26, 2025
Feb 26, 2025
Affected Software
School Management System – SakolaWP
School Management System – SakolaWP
Researcher
CVE-ID
CVE-2025-27318
CVE-2025-27318
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Simple Google Sitemap
Simple Google Sitemap
Researcher
CVE-ID
CVE-2024-13518
CVE-2024-13518
Patch Status
Unpatched
Unpatched
Published
Feb 28, 2025
Feb 28, 2025
Affected Software
Simple:Press Forum
Simple:Press Forum
Researcher
CVE-ID
CVE-2025-27356
CVE-2025-27356
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Sticky Header On Scroll
Sticky Header On Scroll
Researcher
CVE-ID
CVE-2024-13560
CVE-2024-13560
Patch Status
Patched
Patched
Published
Feb 25, 2025
Feb 25, 2025
Affected Software
Subscriptions & Memberships for PayPal
Subscriptions & Memberships for PayPal
Researcher
Ultra Addons Lite for Elementor <= 1.1.8 – Authenticated (Contributor+) Restricted Post Disclosure
4.3
CVE-ID
CVE-2024-13832
CVE-2024-13832
Patch Status
Unpatched
Unpatched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
Ultra Addons Lite for Elementor
Ultra Addons Lite for Elementor
Researcher
CVE-ID
CVE-2025-27342
CVE-2025-27342
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
WooCommerce Recargo de Equivalencia
WooCommerce Recargo de Equivalencia
Researcher
CVE-ID
CVE-2024-13494
CVE-2024-13494
Patch Status
Patched
Patched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
WordPress File Upload
WordPress File Upload
Researcher
Wp Social Login and Register Social Counter <= 3.1.0 – Cross-Site Request Forgery to Settings Update
4.3
CVE-ID
CVE-2025-1506
CVE-2025-1506
Patch Status
Patched
Patched
Published
Feb 27, 2025
Feb 27, 2025
Affected Software
Wp Social Login and Register Social Counter
Wp Social Login and Register Social Counter
Researcher
CVE-ID
CVE-2025-27328
CVE-2025-27328
Patch Status
Unpatched
Unpatched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
WP-PostRatings Cheater
WP-PostRatings Cheater
Researcher
CVE-ID
CVE-2025-27296
CVE-2025-27296
Patch Status
Patched
Patched
Published
Feb 24, 2025
Feb 24, 2025
Affected Software
Auto Ad Inserter – Increase Google Adsense and Ad Manager Revenue
Auto Ad Inserter – Increase Google Adsense and Ad Manager Revenue
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
The post Wordfence Intelligence Weekly WordPress Vulnerability Report (February 24, 2025 to March 2, 2025) appeared first on Wordfence.
