Did you know Wordfence runs a Bug Bounty Program for all WordPress plugins and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we handle all the rest.
Last week, there were 147 vulnerabilities disclosed in 125 WordPress Plugins and 7 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 47 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to implement layered security, aligning with our overarching mission to secure WordPress with defense in depth strategies. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 24,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
New Firewall Rules Deployed Last Week
The Wordfence Threat Intelligence Team reviews each vulnerability to determine impact and severity, along with assessing the likelihood of exploitation, to verify that the Wordfence Firewall provides sufficient protection.
The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our Premium, Care, and Response customers last week:
- WAF-RULE-813 – Data redacted while we work with the vendor on a patch.
- WAF-RULE-814 – Data redacted while we work with the vendor on a patch.
Wordfence Premium, Care, and Response customers received this protection immediately, while users still running the free version of Wordfence will receive this enhanced protection after a 30 day delay.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 50 |
| Unpatched | 97 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Medium Severity | 114 |
| High Severity | 24 |
| Critical Severity | 9 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) | 45 |
| Cross-Site Request Forgery (CSRF) | 43 |
| Missing Authorization | 20 |
| Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) | 8 |
| Authentication Bypass Using an Alternate Path or Channel | 5 |
| Authorization Bypass Through User-Controlled Key | 5 |
| Deserialization of Untrusted Data | 2 |
| Improper Control of Filename for Include/Require Statement in PHP Program (‘PHP Remote File Inclusion’) | 2 |
| Improper Control of Generation of Code (‘Code Injection’) | 2 |
| Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) | 2 |
| Improper Privilege Management | 2 |
| Authentication Bypass by Alternate Name | 1 |
| Exposure of Private Personal Information to an Unauthorized Actor | 1 |
| Exposure of Sensitive Information to an Unauthorized Actor | 1 |
| Improper Access Control | 1 |
| Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 1 |
| Incorrect Privilege Assignment | 1 |
| Relative Path Traversal | 1 |
| Server-Side Request Forgery (SSRF) | 1 |
| Unrestricted Upload of File with Dangerous Type | 1 |
| URL Redirection to Untrusted Site (‘Open Redirect’) | 1 |
| Use of Hard-coded Cryptographic Key | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 15 | |
| 13 | |
| 12 | |
| 10 | |
| 9 | |
| 9 | |
| 8 | |
| 6 | |
| 6 | |
| 5 | |
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Accounting for WooCommerce | accounting-for-woocommerce |
| All-in-One WP Migration and Backup | all-in-one-wp-migration |
| AnalyticsWP | analyticswp |
| Another Events Calendar | another-events-calendar |
| Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin | simply-schedule-appointments |
| AppPresser – Mobile App Framework | apppresser |
| Appsero Helper | appsero-helper |
| ArielBrailovsky-ViralAd | arielbrailovsky-viralad |
| AS English Admin | as-english-admin |
| Awesome Surveys | awesome-surveys |
| Back To Top | backtotop |
| binlayerpress | binlayerpress |
| Block Spam By Math Reloaded | block-spam-by-math-reloaded |
| BlogBuzzTime for WP | blogbuzztime-for-wp |
| BP Email Assign Templates | bp-email-assign-templates |
| Builder for Contact Form 7 by Webconstruct – Drag & Drop Contact Form Builder | cf7-builder |
| Business Directory Plugin – Easy Listing Directories for WordPress | business-directory-plugin |
| CC-IMG-Shortcode | cc-img-shortcode |
| CM FAQ – Simplify support with an intuitive FAQ management tool | cm-faq |
| Comment Date and Gravatar remover | remove-date-and-gravatar-under-comment |
| Contact Form 7 Select Box Editor Button | contact-form-7-select-box-editor-button |
| CRM and Lead Management by vcita | crm-customer-relationship-management-by-vcita |
| Custom Dashboard Page | custom-dashboard-page |
| Custom top bar | custom-top-bar |
| Delete Original Image | delete-original-image |
| DethemeKit for Elementor | dethemekit-for-elementor |
| Directory Listings WordPress plugin – uListing | ulisting |
| Display Template Name | display-template-name |
| Domain Theme | domain-theme |
| Download Manager | download-manager |
| DP ALTerminator – Missing ALT manager | dp-alterminator-missing-alt-manager |
| Easy Image Display | easy-image-display |
| Event post | event-post |
| Featured Image Thumbnail Grid | thumbnail-grid |
| Featured Posts Grid | featured-posts-grid |
| Finale Lite – Sales Countdown Timer & Discount for WooCommerce | finale-woocommerce-sales-countdown-timer-discount |
| Frontpage category filter | frontpage-category-filter |
| FTP Sync – Theme, Media & Plugin Files | ftp-sync |
| GetSocial | getsocial |
| GiveWP – Donation Plugin and Fundraising Platform | give |
| GNUCommerce | gnucommerce |
| GNUPress | gnupress |
| Go To Top | go-to-top |
| Google News Editors Picks Feed Generator | google-news-editors-picks-news-feeds |
| HUSKY – Products Filter Professional for WooCommerce | woocommerce-products-filter |
| In Stock Mailer for WooCommerce | in-stock-mailer-for-woocommerce |
| Insert Code | insert-code |
| InstaWP Connect – 1-click WP Staging & Migration | instawp-connect |
| JobCareer | Job Board Responsive WordPress Theme | jobcareer |
| Lava Ajax Search | lava-ajax-search |
| Layer Slider | bee-layer-slider |
| List Mixcloud | list-mixcloud |
| List of Posts from each Category plugin for WordPress | list-posts-by-category |
| Login Logger | login-logger |
| LoginPress | wp-login Custom Login Page Customizer | loginpress |
| Lunar – Sell photos online | lunar-sell-photos-online |
| Maintenance Notice | maintenance-notice |
| MaxA/B | maxab |
| Members page only for logged in users | members-page-only-for-logged-in-users |
| MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet | paid-membership |
| NEX-Forms – Ultimate Form Builder – Contact forms and much more | nex-forms-express-wp-form-builder |
| No Disposable Email | no-disposable-email |
| Omnipress | omnipress |
| Page Builder: Pagelayer – Drag and Drop website builder | pagelayer |
| Picture Gallery – Frontend Image Uploads, AJAX Photo List | picture-gallery |
| pipDisqus – Lightweight Disqus Comments | pipdisqus |
| pixelstats | pixelstats |
| Plugin Name: amoCRM WebForm | amocrm-webform |
| Plugins Last Updated Column | plugins-last-updated-column |
| Portfolio and Projects | portfolio-and-projects |
| Post Read Time | post-read-time |
| price-calc | price-calc |
| ProductDyno | productdyno |
| Qubely – Advanced Gutenberg Blocks | qubely |
| Rankchecker.io Integration | rankchecker-io-integration |
| Realteo | realteo |
| Responsive Google Map | responsive-google-map |
| REST API TO MiniProgram | rest-api-to-miniprogram |
| Review Schema – Review & Structure Data Schema Plugin | review-schema |
| School Management System – WPSchoolPress | wpschoolpress |
| Search & Filter Pro | search-filter-pro |
| SecuPress Free — WordPress Security | secupress |
| ShareThis Dashboard for Google Analytics | googleanalytics |
| ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) | woolentor-addons |
| Simple Amazon Affiliate | simple-amazon-affiliate |
| Skitter Slideshow | wp-skitter-slideshow |
| Skrill – WooCommerce | official-skrill-woocommerce |
| SoundRise Music | soundrise-music |
| spam-byebye | spam-byebye |
| Tabbed Login Widget | tabbed-login |
| TabGarb Pro | tabgarb |
| TBTestimonials | tb-testimonials |
| ThemeEgg ToolKit | themeegg-toolkit |
| Thumbnail carousel slider | wp-responsive-thumbnail-slider |
| Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin | uncanny-automator |
| Video Share VOD – Turnkey Video Site Builder Script | video-share-vod |
| VidoRev Extensions | vidorev-extensions |
| W3Counter Free Real-Time Web Stats | blog-stats-by-w3counter |
| WATI Chat and Notification | wati-chat-and-notification |
| WC Affiliate – A Complete WooCommerce Affiliate Plugin | wc-affiliate |
| WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto | tripetto |
| WordPress Hashtags | wp-hashtags |
| wordpress login form to anywhere | wp-show-login-form |
| WordPress Mobile Themes | wp-mobile-themes |
| WordPress Report Brute Force Attacks and Login Protection ReportAttacks Plugins | reportattacks |
| Workreap | workreap |
| WP Add Active Class To Menu Item | wp-add-active-class-to-menu-item |
| WP Bulk Post Duplicator | wp-bulk-post-duplicator |
| WP Compare Tables | wp-compare-tables |
| WP Crowdfunding | wp-crowdfunding |
| WP Ghost (Hide My WP Ghost) – Security & Firewall | hide-my-wp |
| WP Hide Admin Bar | wp-hide-admin-bar |
| WP JobHunt | wp-jobhunt |
| WP jQuery Persian Datepicker | wpjqp-datepicker |
| WP Last Modified | wp-last-modified |
| WP No-Bot Question | wp-no-bot-question |
| WP Performance Pack | wp-performance-pack |
| WP Recipe Maker | wp-recipe-maker |
| WP Simple Slideshow | wp-simple-slideshow |
| WP Test Email | wp-test-email |
| WP01 – Speed, Security, SEO consultant | wp01 |
| WPCOM Member | wpcom-member |
| WPCS – WordPress Currency Switcher Professional | currency-switcher |
| ZipList Recipe Plugin | ziplist-recipe-plugin |
| Zoorum Comments | zoorum-comments |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Civi – Job Board & Freelance Marketplace WordPress Theme | civi |
| CiyaShop – Multipurpose WooCommerce Theme | ciyashop |
| Eco Nature – Environment & Ecology WordPress Theme | eco-nature |
| Industrial | industrial |
| Resido – Real Estate WordPress Theme | resido |
| Travel Booking WordPress Theme | traveler |
| Zegen – Church WordPress Theme | zegen |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
CVE-ID
CVE-2024-13771
CVE-2024-13771
Patch Status
Unpatched
Unpatched
Published
Mar 13, 2025
Mar 13, 2025
Affected Software
Civi – Job Board & Freelance Marketplace WordPress Theme
Civi – Job Board & Freelance Marketplace WordPress Theme
Researcher
CVE-ID
CVE-2024-13824
CVE-2024-13824
Patch Status
Patched
Patched
Published
Mar 13, 2025
Mar 13, 2025
Affected Software
CiyaShop – Multipurpose WooCommerce Theme
CiyaShop – Multipurpose WooCommerce Theme
Researcher
CVE-ID
CVE-2025-1661
CVE-2025-1661
Patch Status
Patched
Patched
Published
Mar 10, 2025
Mar 10, 2025
Affected Software
HUSKY – Products Filter Professional for WooCommerce
HUSKY – Products Filter Professional for WooCommerce
Researcher
CVE-ID
CVE-2025-1771
CVE-2025-1771
Patch Status
Patched
Patched
Published
Mar 14, 2025
Mar 14, 2025
Affected Software
Travel Booking WordPress Theme
Travel Booking WordPress Theme
Researcher
CVE-ID
CVE-2024-11286
CVE-2024-11286
Patch Status
Unpatched
Unpatched
Published
Mar 13, 2025
Mar 13, 2025
Affected Software
WP JobHunt
WP JobHunt
Researcher
CVE-ID
CVE-2024-11285
CVE-2024-11285
Patch Status
Unpatched
Unpatched
Published
Mar 13, 2025
Mar 13, 2025
Affected Software
WP JobHunt
WP JobHunt
Researcher
CVE-ID
CVE-2024-11284
CVE-2024-11284
Patch Status
Unpatched
Unpatched
Published
Mar 13, 2025
Mar 13, 2025
Affected Software
WP JobHunt
WP JobHunt
Researcher
CVE-ID
CVE-2025-1653
CVE-2025-1653
Patch Status
Unpatched
Unpatched
Published
Mar 14, 2025
Mar 14, 2025
Affected Software
Directory Listings WordPress plugin – uListing
Directory Listings WordPress plugin – uListing
Researcher
CVE-ID
CVE-2025-1657
CVE-2025-1657
Patch Status
Unpatched
Unpatched
Published
Mar 14, 2025
Mar 14, 2025
Affected Software
Directory Listings WordPress plugin – uListing
Directory Listings WordPress plugin – uListing
Researcher
Industrial <= 1.7.8 – Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
8.8
CVE-ID
CVE-2024-13376
CVE-2024-13376
Patch Status
Patched
Patched
Published
Mar 13, 2025
Mar 13, 2025
Affected Software
Industrial
Industrial
Researcher
CVE-ID
CVE-2024-13913
CVE-2024-13913
Patch Status
Patched
Patched
Published
Mar 13, 2025
Mar 13, 2025
Affected Software
InstaWP Connect – 1-click WP Staging & Migration
InstaWP Connect – 1-click WP Staging & Migration
Researcher
CVE-ID
CVE-2024-12810
CVE-2024-12810
Patch Status
Unpatched
Unpatched
Published
Mar 13, 2025
Mar 13, 2025
Affected Software
JobCareer | Job Board Responsive WordPress Theme
JobCareer | Job Board Responsive WordPress Theme
Researcher
CVE-ID
CVE-2025-1707
CVE-2025-1707
Patch Status
Patched
Patched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Review Schema – Review & Structure Data Schema Plugin
Review Schema – Review & Structure Data Schema Plugin
Researcher
CVE-ID
CVE-2025-1667
CVE-2025-1667
Patch Status
Unpatched
Unpatched
Published
Mar 14, 2025
Mar 14, 2025
Affected Software
School Management System – WPSchoolPress
School Management System – WPSchoolPress
Researcher
CVE-ID
CVE-2025-2103
CVE-2025-2103
Patch Status
Patched
Patched
Published
Mar 13, 2025
Mar 13, 2025
Affected Software
SoundRise Music
SoundRise Music
Researcher
CVE-ID
CVE-2025-0952
CVE-2025-0952
Patch Status
Patched
Patched
Published
Mar 13, 2025
Mar 13, 2025
Affected Software
Eco Nature – Environment & Ecology WordPress Theme
Eco Nature – Environment & Ecology WordPress Theme
Researcher
CVE-ID
CVE-2024-10942
CVE-2024-10942
Patch Status
Patched
Patched
Published
Mar 12, 2025
Mar 12, 2025
Affected Software
All-in-One WP Migration and Backup
All-in-One WP Migration and Backup
Researcher
CVE-ID
CVE-2024-13321
CVE-2024-13321
Patch Status
Patched
Patched
Published
Mar 13, 2025
Mar 13, 2025
Affected Software
AnalyticsWP
AnalyticsWP
Researcher
CVE-ID
CVE-2025-2106
CVE-2025-2106
Patch Status
Unpatched
Unpatched
Published
Mar 12, 2025
Mar 12, 2025
Affected Software
ArielBrailovsky-ViralAd
ArielBrailovsky-ViralAd
Researcher
CVE-ID
CVE-2025-2107
CVE-2025-2107
Patch Status
Unpatched
Unpatched
Published
Mar 12, 2025
Mar 12, 2025
Affected Software
ArielBrailovsky-ViralAd
ArielBrailovsky-ViralAd
Researcher
CVE-ID
CVE-2025-1764
CVE-2025-1764
Patch Status
Patched
Patched
Published
Mar 13, 2025
Mar 13, 2025
Affected Software
LoginPress | wp-login Custom Login Page Customizer
LoginPress | wp-login Custom Login Page Customizer
Researcher
CVE-ID
CVE-2025-2056
CVE-2025-2056
Patch Status
Patched
Patched
Published
Mar 13, 2025
Mar 13, 2025
Affected Software
WP Ghost (Hide My WP Ghost) – Security & Firewall
WP Ghost (Hide My WP Ghost) – Security & Firewall
Researcher
CVE-ID
CVE-2024-11283
CVE-2024-11283
Patch Status
Unpatched
Unpatched
Published
Mar 13, 2025
Mar 13, 2025
Affected Software
WP JobHunt
WP JobHunt
Researcher
CVE-ID
CVE-2025-2221
CVE-2025-2221
Patch Status
Patched
Patched
Published
Mar 13, 2025
Mar 13, 2025
Affected Software
WPCOM Member
WPCOM Member
Researcher
CVE-ID
CVE-2025-1119
CVE-2025-1119
Patch Status
Patched
Patched
Published
Mar 12, 2025
Mar 12, 2025
Researcher
Civi – Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 – Sensitive Information Exposure
7.3
CVE-ID
CVE-2024-13773
CVE-2024-13773
Patch Status
Unpatched
Unpatched
Published
Mar 13, 2025
Mar 13, 2025
Affected Software
Civi – Job Board & Freelance Marketplace WordPress Theme
Civi – Job Board & Freelance Marketplace WordPress Theme
Researcher
CVE-ID
CVE-2025-2169
CVE-2025-2169
Patch Status
Patched
Patched
Published
Mar 10, 2025
Mar 10, 2025
Affected Software
WPCS – WordPress Currency Switcher Professional
WPCS – WordPress Currency Switcher Professional
Researcher
CVE-ID
CVE-2025-1561
CVE-2025-1561
Patch Status
Patched
Patched
Published
Mar 12, 2025
Mar 12, 2025
Affected Software
AppPresser – Mobile App Framework
AppPresser – Mobile App Framework
Researcher
CVE-ID
CVE-2025-28915
CVE-2025-28915
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
ThemeEgg ToolKit
ThemeEgg ToolKit
Researcher
CVE-ID
CVE-2024-13497
CVE-2024-13497
Patch Status
Patched
Patched
Published
Mar 14, 2025
Mar 14, 2025
Researcher
CVE-ID
CVE-2025-2325
CVE-2025-2325
Patch Status
Patched
Patched
Published
Mar 14, 2025
Mar 14, 2025
Affected Software
WP Test Email
WP Test Email
Researcher
CVE-ID
CVE-2025-28874
CVE-2025-28874
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
BP Email Assign Templates
BP Email Assign Templates
Researcher
CVE-ID
CVE-2025-2025
CVE-2025-2025
Patch Status
Patched
Patched
Published
Mar 14, 2025
Mar 14, 2025
Affected Software
GiveWP – Donation Plugin and Fundraising Platform
GiveWP – Donation Plugin and Fundraising Platform
Researcher
CVE-ID
CVE-2025-1670
CVE-2025-1670
Patch Status
Unpatched
Unpatched
Published
Mar 14, 2025
Mar 14, 2025
Affected Software
School Management System – WPSchoolPress
School Management System – WPSchoolPress
Researcher
CVE-ID
CVE-2025-1669
CVE-2025-1669
Patch Status
Unpatched
Unpatched
Published
Mar 14, 2025
Mar 14, 2025
Affected Software
School Management System – WPSchoolPress
School Management System – WPSchoolPress
Researcher
CVE-ID
CVE-2024-12336
CVE-2024-12336
Patch Status
Patched
Patched
Published
Mar 14, 2025
Mar 14, 2025
Affected Software
WC Affiliate – A Complete WooCommerce Affiliate Plugin
WC Affiliate – A Complete WooCommerce Affiliate Plugin
Researcher
CVE-ID
CVE-2025-2267
CVE-2025-2267
Patch Status
Unpatched
Unpatched
Published
Mar 14, 2025
Mar 14, 2025
Affected Software
WP01 – Speed, Security, SEO consultant
WP01 – Speed, Security, SEO consultant
Researcher
CVE-ID
CVE-2025-28870
CVE-2025-28870
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Plugin Name: amoCRM WebForm
Plugin Name: amoCRM WebForm
Researcher
CVE-ID
CVE-2025-28879
CVE-2025-28879
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Layer Slider
Layer Slider
Researcher
CVE-ID
CVE-2025-1559
CVE-2025-1559
Patch Status
Unpatched
Unpatched
Published
Mar 12, 2025
Mar 12, 2025
Affected Software
CC-IMG-Shortcode
CC-IMG-Shortcode
Researcher
CVE-ID
CVE-2025-1526
CVE-2025-1526
Patch Status
Patched
Patched
Published
Mar 13, 2025
Mar 13, 2025
Affected Software
DethemeKit for Elementor
DethemeKit for Elementor
Researcher
CVE-ID
CVE-2025-28919
CVE-2025-28919
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Easy Image Display
Easy Image Display
Researcher
CVE-ID
CVE-2025-26923
CVE-2025-26923
Patch Status
Patched
Patched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Event post
Event post
Researcher
Featured Image Thumbnail Grid <= 6.6.1 – Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-ID
CVE-2025-28918
CVE-2025-28918
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Featured Image Thumbnail Grid
Featured Image Thumbnail Grid
Researcher
CVE-ID
CVE-2024-12589
CVE-2024-12589
Patch Status
Patched
Patched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Finale Lite – Sales Countdown Timer & Discount for WooCommerce
Finale Lite – Sales Countdown Timer & Discount for WooCommerce
Researcher
CVE-ID
CVE-2025-28930
CVE-2025-28930
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
List Mixcloud
List Mixcloud
Researcher
CVE-ID
CVE-2025-1527
CVE-2025-1527
Patch Status
Patched
Patched
Published
Mar 11, 2025
Mar 11, 2025
CVE-ID
CVE-2025-28929
CVE-2025-28929
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Tabbed Login Widget
Tabbed Login Widget
Researcher
CVE-ID
CVE-2025-1503
CVE-2025-1503
Patch Status
Patched
Patched
Published
Mar 12, 2025
Mar 12, 2025
Affected Software
WP Recipe Maker
WP Recipe Maker
Researcher
CVE-ID
CVE-2025-26536
CVE-2025-26536
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Another Events Calendar
Another Events Calendar
Researcher
CVE-ID
CVE-2024-13436
CVE-2024-13436
Patch Status
Patched
Patched
Published
Mar 10, 2025
Mar 10, 2025
Affected Software
Appsero Helper
Appsero Helper
Researcher
CVE-ID
CVE-2025-2166
CVE-2025-2166
Patch Status
Patched
Patched
Published
Mar 13, 2025
Mar 13, 2025
Affected Software
CM FAQ – Simplify support with an intuitive FAQ management tool
CM FAQ – Simplify support with an intuitive FAQ management tool
Researcher
CVE-ID
CVE-2025-28905
CVE-2025-28905
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Featured Posts Grid
Featured Posts Grid
Researcher
CVE-ID
CVE-2025-28892
CVE-2025-28892
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
FTP Sync – Theme, Media & Plugin Files
FTP Sync – Theme, Media & Plugin Files
Researcher
CVE-ID
CVE-2025-22283
CVE-2025-22283
Patch Status
Unpatched
Unpatched
Published
Mar 12, 2025
Mar 12, 2025
Affected Software
GetSocial
GetSocial
Researcher
CVE-ID
CVE-2025-26564
CVE-2025-26564
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
GNUCommerce
GNUCommerce
Researcher
CVE-ID
CVE-2025-26565
CVE-2025-26565
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
GNUPress
GNUPress
Researcher
CVE-ID
CVE-2025-28922
CVE-2025-28922
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Go To Top
Go To Top
Researcher
CVE-ID
CVE-2025-28860
CVE-2025-28860
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Google News Editors Picks Feed Generator
Google News Editors Picks Feed Generator
Researcher
CVE-ID
CVE-2025-28931
CVE-2025-28931
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
WordPress Hashtags
WordPress Hashtags
Researcher
CVE-ID
CVE-2025-26566
CVE-2025-26566
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
In Stock Mailer for WooCommerce
In Stock Mailer for WooCommerce
Researcher
CVE-ID
CVE-2025-28932
CVE-2025-28932
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Insert Code
Insert Code
Researcher
CVE-ID
CVE-2025-28894
CVE-2025-28894
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
List of Posts from each Category plugin for WordPress
List of Posts from each Category plugin for WordPress
Researcher
CVE-ID
CVE-2025-28933
CVE-2025-28933
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
MaxA/B
MaxA/B
Researcher
CVE-ID
CVE-2025-28901
CVE-2025-28901
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Members page only for logged in users
Members page only for logged in users
Researcher
CVE-ID
CVE-2025-26579
CVE-2025-26579
Patch Status
Unpatched
Unpatched
Published
Mar 12, 2025
Mar 12, 2025
Affected Software
MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet
MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet
Researcher
CVE-ID
CVE-2025-28923
CVE-2025-28923
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
No Disposable Email
No Disposable Email
Researcher
CVE-ID
CVE-2025-26581
CVE-2025-26581
Patch Status
Unpatched
Unpatched
Published
Mar 12, 2025
Mar 12, 2025
Affected Software
Picture Gallery – Frontend Image Uploads, AJAX Photo List
Picture Gallery – Frontend Image Uploads, AJAX Photo List
Researcher
CVE-ID
CVE-2025-2164
CVE-2025-2164
Patch Status
Unpatched
Unpatched
Published
Mar 14, 2025
Mar 14, 2025
Affected Software
pixelstats
pixelstats
Researcher
CVE-ID
CVE-2025-28891
CVE-2025-28891
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
price-calc
price-calc
Researcher
CVE-ID
CVE-2024-13413
CVE-2024-13413
Patch Status
Patched
Patched
Published
Mar 10, 2025
Mar 10, 2025
Affected Software
ProductDyno
ProductDyno
Researcher
CVE-ID
CVE-2025-28857
CVE-2025-28857
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Rankchecker.io Integration
Rankchecker.io Integration
Researcher
CVE-ID
CVE-2025-2077
CVE-2025-2077
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Simple Amazon Affiliate
Simple Amazon Affiliate
Researcher
CVE-ID
CVE-2025-28900
CVE-2025-28900
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
TabGarb Pro
TabGarb Pro
Researcher
CVE-ID
CVE-2025-26584
CVE-2025-26584
Patch Status
Unpatched
Unpatched
Published
Mar 12, 2025
Mar 12, 2025
Affected Software
TBTestimonials
TBTestimonials
Researcher
CVE-ID
CVE-2025-1773
CVE-2025-1773
Patch Status
Patched
Patched
Published
Mar 14, 2025
Mar 14, 2025
Affected Software
Travel Booking WordPress Theme
Travel Booking WordPress Theme
Researcher
CVE-ID
CVE-2025-26583
CVE-2025-26583
Patch Status
Unpatched
Unpatched
Published
Mar 12, 2025
Mar 12, 2025
Affected Software
Video Share VOD – Turnkey Video Site Builder Script
Video Share VOD – Turnkey Video Site Builder Script
Researcher
CVE-ID
CVE-2025-28925
CVE-2025-28925
Patch Status
Patched
Patched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
WATI Chat and Notification
WATI Chat and Notification
Researcher
CVE-ID
CVE-2025-28883
CVE-2025-28883
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
WP Compare Tables
WP Compare Tables
Researcher
WP jQuery Persian Datepicker <= 0.1.0 – Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-ID
CVE-2025-28861
CVE-2025-28861
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
WP jQuery Persian Datepicker
WP jQuery Persian Datepicker
Researcher
CVE-ID
CVE-2025-26576
CVE-2025-26576
Patch Status
Unpatched
Unpatched
Published
Mar 12, 2025
Mar 12, 2025
Affected Software
WP Simple Slideshow
WP Simple Slideshow
Researcher
CVE-ID
CVE-2025-2163
CVE-2025-2163
Patch Status
Unpatched
Unpatched
Published
Mar 14, 2025
Mar 14, 2025
Affected Software
Zoorum Comments
Zoorum Comments
Researcher
CVE-ID
CVE-2024-13772
CVE-2024-13772
Patch Status
Unpatched
Unpatched
Published
Mar 13, 2025
Mar 13, 2025
Affected Software
Civi – Job Board & Freelance Marketplace WordPress Theme
Civi – Job Board & Freelance Marketplace WordPress Theme
Researcher
CVE-ID
CVE-2025-28878
CVE-2025-28878
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Awesome Surveys
Awesome Surveys
Researcher
CVE-ID
CVE-2025-28875
CVE-2025-28875
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
BP Email Assign Templates
BP Email Assign Templates
Researcher
CVE-ID
CVE-2024-13838
CVE-2024-13838
Patch Status
Patched
Patched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin
Researcher
CVE-ID
CVE-2025-28895
CVE-2025-28895
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Custom top bar
Custom top bar
Researcher
CVE-ID
CVE-2025-1785
CVE-2025-1785
Patch Status
Patched
Patched
Published
Mar 12, 2025
Mar 12, 2025
Affected Software
Download Manager
Download Manager
Researcher
CVE-ID
CVE-2025-28896
CVE-2025-28896
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
AS English Admin
AS English Admin
Researcher
CVE-ID
CVE-2025-28872
CVE-2025-28872
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Block Spam By Math Reloaded
Block Spam By Math Reloaded
Researcher
CVE-ID
CVE-2024-13887
CVE-2024-13887
Patch Status
Patched
Patched
Published
Mar 12, 2025
Mar 12, 2025
Affected Software
Business Directory Plugin – Easy Listing Directories for WordPress
Business Directory Plugin – Easy Listing Directories for WordPress
Researcher
CVE-ID
CVE-2024-13498
CVE-2024-13498
Patch Status
Patched
Patched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
NEX-Forms – Ultimate Form Builder – Contact forms and much more
NEX-Forms – Ultimate Form Builder – Contact forms and much more
Researcher
CVE-ID
CVE-2025-1285
CVE-2025-1285
Patch Status
Patched
Patched
Published
Mar 13, 2025
Mar 13, 2025
Affected Software
Resido – Real Estate WordPress Theme
Resido – Real Estate WordPress Theme
Researcher
CVE-ID
CVE-2025-28920
CVE-2025-28920
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Responsive Google Map
Responsive Google Map
Researcher
CVE-ID
CVE-2025-1507
CVE-2025-1507
Patch Status
Patched
Patched
Published
Mar 13, 2025
Mar 13, 2025
Affected Software
ShareThis Dashboard for Google Analytics
ShareThis Dashboard for Google Analytics
Researcher
VidoRev Extensions <= 2.9.9.9.9.9.5 – Missing Authorization to Unauthenticated Youtube Video Import
5.3
CVE-ID
CVE-2025-0955
CVE-2025-0955
Patch Status
Patched
Patched
Published
Mar 13, 2025
Mar 13, 2025
Affected Software
VidoRev Extensions
VidoRev Extensions
Researcher
CVE-ID
CVE-2025-1508
CVE-2025-1508
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
WP Crowdfunding
WP Crowdfunding
Researcher
CVE-ID
CVE-2024-13847
CVE-2024-13847
Patch Status
Unpatched
Unpatched
Published
Mar 14, 2025
Mar 14, 2025
Affected Software
Portfolio and Projects
Portfolio and Projects
Researcher
CVE-ID
CVE-2019-25222
CVE-2019-25222
Patch Status
Patched
Patched
Published
Mar 14, 2025
Mar 14, 2025
Affected Software
Thumbnail carousel slider
Thumbnail carousel slider
Researcher
CVE-ID
CVE-2025-2250
CVE-2025-2250
Patch Status
Patched
Patched
Published
Mar 12, 2025
Mar 12, 2025
Researcher
CVE-ID
CVE-2025-26929
CVE-2025-26929
Patch Status
Patched
Patched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Accounting for WooCommerce
Accounting for WooCommerce
Researcher
CVE-ID
CVE-2025-2076
CVE-2025-2076
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
binlayerpress
binlayerpress
Researcher
Block Spam By Math Reloaded <= 2.2.4 – Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-ID
CVE-2025-28871
CVE-2025-28871
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Block Spam By Math Reloaded
Block Spam By Math Reloaded
Researcher
CVE-ID
CVE-2025-2078
CVE-2025-2078
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
BlogBuzzTime for WP
BlogBuzzTime for WP
Researcher
CVE-ID
CVE-2025-28943
CVE-2025-28943
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
DP ALTerminator – Missing ALT manager
DP ALTerminator – Missing ALT manager
Researcher
CVE-ID
CVE-2025-28937
CVE-2025-28937
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Lava Ajax Search
Lava Ajax Search
Researcher
CVE-ID
CVE-2025-28936
CVE-2025-28936
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Lunar – Sell photos online
Lunar – Sell photos online
Researcher
CVE-ID
CVE-2025-28908
CVE-2025-28908
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
pipDisqus – Lightweight Disqus Comments
pipDisqus – Lightweight Disqus Comments
Researcher
CVE-ID
CVE-2025-28926
CVE-2025-28926
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Post Read Time
Post Read Time
Researcher
CVE-ID
CVE-2025-28906
CVE-2025-28906
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Skitter Slideshow
Skitter Slideshow
Researcher
wordpress login form to anywhere <= 0.2 – Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-ID
CVE-2025-28914
CVE-2025-28914
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
wordpress login form to anywhere
wordpress login form to anywhere
Researcher
CVE-ID
CVE-2025-28907
CVE-2025-28907
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
WP Last Modified
WP Last Modified
Researcher
CVE-ID
CVE-2025-28940
CVE-2025-28940
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Back To Top
Back To Top
Researcher
CVE-ID
CVE-2025-28864
CVE-2025-28864
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Researcher
CVE-ID
CVE-2025-28862
CVE-2025-28862
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Comment Date and Gravatar remover
Comment Date and Gravatar remover
Researcher
CVE-ID
CVE-2025-28902
CVE-2025-28902
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Contact Form 7 Select Box Editor Button
Contact Form 7 Select Box Editor Button
Researcher
CVE-ID
CVE-2024-13703
CVE-2024-13703
Patch Status
Unpatched
Unpatched
Published
Mar 12, 2025
Mar 12, 2025
Affected Software
CRM and Lead Management by vcita
CRM and Lead Management by vcita
Researcher
CVE-ID
CVE-2025-28912
CVE-2025-28912
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Custom Dashboard Page
Custom Dashboard Page
Researcher
CVE-ID
CVE-2025-28863
CVE-2025-28863
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Delete Original Image
Delete Original Image
Researcher
CVE-ID
CVE-2025-28927
CVE-2025-28927
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Display Template Name
Display Template Name
Researcher
CVE-ID
CVE-2025-28897
CVE-2025-28897
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Domain Theme
Domain Theme
Researcher
CVE-ID
CVE-2025-28867
CVE-2025-28867
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Frontpage category filter
Frontpage category filter
Researcher
CVE-ID
CVE-2025-28866
CVE-2025-28866
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Login Logger
Login Logger
Researcher
CVE-ID
CVE-2025-28859
CVE-2025-28859
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Maintenance Notice
Maintenance Notice
Researcher
CVE-ID
CVE-2025-28881
CVE-2025-28881
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
WordPress Mobile Themes
WordPress Mobile Themes
Researcher
CVE-ID
CVE-2024-13430
CVE-2024-13430
Patch Status
Patched
Patched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Page Builder: Pagelayer – Drag and Drop website builder
Page Builder: Pagelayer – Drag and Drop website builder
Researcher
CVE-ID
CVE-2025-2104
CVE-2025-2104
Patch Status
Patched
Patched
Published
Mar 12, 2025
Mar 12, 2025
Affected Software
Page Builder: Pagelayer – Drag and Drop website builder
Page Builder: Pagelayer – Drag and Drop website builder
Researcher
CVE-ID
CVE-2025-28887
CVE-2025-28887
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Plugins Last Updated Column
Plugins Last Updated Column
Researcher
CVE-ID
CVE-2024-13228
CVE-2024-13228
Patch Status
Patched
Patched
Published
Mar 10, 2025
Mar 10, 2025
Affected Software
Qubely – Advanced Gutenberg Blocks
Qubely – Advanced Gutenberg Blocks
Researcher
CVE-ID
CVE-2025-28886
CVE-2025-28886
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
REST API TO MiniProgram
REST API TO MiniProgram
Researcher
CVE-ID
CVE-2025-1668
CVE-2025-1668
Patch Status
Unpatched
Unpatched
Published
Mar 14, 2025
Mar 14, 2025
Affected Software
School Management System – WPSchoolPress
School Management System – WPSchoolPress
Researcher
CVE-ID
CVE-2025-1528
CVE-2025-1528
Patch Status
Patched
Patched
Published
Mar 13, 2025
Mar 13, 2025
Affected Software
Search & Filter Pro
Search & Filter Pro
Researcher
CVE-ID
CVE-2025-28876
CVE-2025-28876
Patch Status
Patched
Patched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
Skrill – WooCommerce
Skrill – WooCommerce
Researcher
CVE-ID
CVE-2025-1530
CVE-2025-1530
Patch Status
Patched
Patched
Published
Mar 14, 2025
Mar 14, 2025
Researcher
CVE-ID
CVE-2025-28856
CVE-2025-28856
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
W3Counter Free Real-Time Web Stats
W3Counter Free Real-Time Web Stats
Researcher
CVE-ID
CVE-2025-28913
CVE-2025-28913
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
WP Add Active Class To Menu Item
WP Add Active Class To Menu Item
Researcher
CVE-ID
CVE-2025-28884
CVE-2025-28884
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
WP Bulk Post Duplicator
WP Bulk Post Duplicator
Researcher
CVE-ID
CVE-2025-28910
CVE-2025-28910
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
WP Hide Admin Bar
WP Hide Admin Bar
Researcher
CVE-ID
CVE-2025-28909
CVE-2025-28909
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
WP No-Bot Question
WP No-Bot Question
Researcher
CVE-ID
CVE-2025-28938
CVE-2025-28938
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
WP Performance Pack
WP Performance Pack
Researcher
CVE-ID
CVE-2025-2289
CVE-2025-2289
Patch Status
Unpatched
Unpatched
Published
Mar 13, 2025
Mar 13, 2025
Affected Software
Zegen – Church WordPress Theme
Zegen – Church WordPress Theme
Researcher
CVE-ID
CVE-2025-28868
CVE-2025-28868
Patch Status
Unpatched
Unpatched
Published
Mar 11, 2025
Mar 11, 2025
Affected Software
ZipList Recipe Plugin
ZipList Recipe Plugin
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
The post Wordfence Intelligence Weekly WordPress Vulnerability Report (March 10, 2025 to March 16, 2025) appeared first on Wordfence.
