Last week, there were 497 vulnerabilities disclosed in 327 WordPress Plugins and 23 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 218 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to implement layered security, aligning with our overarching mission to secure WordPress with defense in depth strategies. That is why the Wordfence Intelligence user interface, vulnerability API, and webhook integration are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report. As the world’s leading quality vulnerability database provider for WordPress, site owners can rest assured knowing Wordfence has their back.
Enterprises, Hosting Providers, and even Individuals can utilize the vulnerability Database API to receive a complete dump of our database of over 40,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
New Firewall Rules Deployed Last Week
The Wordfence Threat Intelligence Team reviews each vulnerability to determine impact and severity, along with assessing the likelihood of exploitation, to verify that the Wordfence Firewall provides sufficient protection.
The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our Premium, Care, and Response customers last week:
-
- WAF-RULE-966 – Data redacted while we work with the vendor on a patch.
- WAF-RULE-967 – Data redacted while we work with the vendor on a patch.
- PHP Object Injection in Comments
Wordfence Premium, Care, and Response customers received this protection immediately, while users still running the free version of Wordfence will receive this enhanced protection after a 30 day delay.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 428 |
| Unpatched | 69 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Low Severity | 6 |
| Medium Severity | 315 |
| High Severity | 153 |
| Critical Severity | 23 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) | 159 |
| Missing Authorization | 116 |
| Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) | 34 |
| Deserialization of Untrusted Data | 33 |
| Exposure of Sensitive Information to an Unauthorized Actor | 31 |
| Improper Privilege Management | 22 |
| Authorization Bypass Through User-Controlled Key | 20 |
| Improper Control of Generation of Code (‘Code Injection’) | 15 |
| Unrestricted Upload of File with Dangerous Type | 11 |
| Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) | 10 |
| Insufficient Verification of Data Authenticity | 8 |
| Cross-Site Request Forgery (CSRF) | 7 |
| Improper Authentication | 6 |
| Improper Control of Filename for Include/Require Statement in PHP Program (‘PHP Remote File Inclusion’) | 5 |
| Client-Side Enforcement of Server-Side Security | 4 |
| Incorrect Authorization | 3 |
| Server-Side Request Forgery (SSRF) | 3 |
| Improper Input Validation | 2 |
| URL Redirection to Untrusted Site (‘Open Redirect’) | 2 |
| Concurrent Execution using Shared Resource with Improper Synchronization (‘Race Condition’) | 1 |
| Embedded Malicious Code | 1 |
| Improper Access Control | 1 |
| Improper Neutralization of Special Elements in Output Used by a Downstream Component (‘Injection’) | 1 |
| Improper Neutralization of Special Elements used in a Command (‘Command Injection’) | 1 |
| Use of Insufficiently Random Values | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 40 | |
| 19 | |
| 16 | |
| 15 | |
| 13 | |
| 11 | |
| 10 | |
| 10 | |
| 9 | |
| 8 | |
| 8 | |
| 8 | |
| 7 | |
| 7 | |
| 7 | |
| 6 | |
| 6 | |
| 6 | |
| 6 | |
| 6 | |
| 5 | |
| 5 | |
| 5 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| 10Web Booster – Website speed optimization, Cache & Page Speed optimizer | tenweb-speed-optimizer |
| 2Way VideoCalls and Random Chat – HTML5 Webcam Videochat | webcam-2way-videochat |
| Abandoned Cart Pro for WooCommerce | woocommerce-abandon-cart-pro |
| ACF Frontend Admin by DynamiApps | acf-frontend-form-element |
| Active Woot Products Tables for WooCommerce. 100% FREE | profit-products-tables-for-woocommerce |
| ActiveTrail for WooCommerce | activetrail-for-woocommerce |
| AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress | acymailing |
| Ad Inserter – Ad Manager & AdSense Ads | ad-inserter |
| Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution | file-manager-advanced |
| Advanced Post Manager | advanced-post-manager |
| affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display | affiliate-toolkit-starter |
| Affiliates | affiliates |
| AGE-GATE | wp-site-age-gate |
| AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini | ai-engine |
| Ajax Search Lite – Live Search & Filter | ajax-search-lite |
| Animated Number Counters | animated-number-counters |
| AnyComment | anycomment |
| App Builder – Create Native Android & iOS Apps On The Flight | app-builder |
| Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress | latepoint |
| Asaas Gateway for WooCommerce | woo-asaas |
| aThemeArt Theme Helper | athemeart-theme-helper |
| Auction Nudge – Your eBay Listings | auction-nudge |
| Avada (Fusion) Builder | fusion-builder |
| AWP Classifieds | another-wordpress-classifieds-plugin |
| Backuply – Backup, Restore, Migrate and Clone | backuply |
| bbPress | bbpress |
| BDM Digital Payment Gateway | bdm-digital-payment-gateway |
| Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation | bit-integrations |
| Blaze Demo Importer | blaze-demo-importer |
| Blog2Social: Social Media Auto Post & Scheduler | blog2social |
| Booking for Appointments and Events Calendar – Amelia | ameliabooking |
| Booking Package | booking-package |
| Bookit — Booking & Appointment Calendar | bookit |
| Books Gallery – Book Showcase, Library & Affiliate Plugin | wp-books-gallery |
| Booktics – Appointment Booking Calendar for Service Businesses | booktics |
| Booster Elite for WooCommerce | booster-elite-for-woocommerce |
| BP Profile Search | bp-profile-search |
| Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP | videowhisper-live-streaming-integration |
| Broken Link Checker | broken-link-checker |
| BSK PDF Manager | bsk-pdf-manager |
| BuddyPress XProfile Custom Image Field | buddypress-xprofile-image-field |
| Bulk Page Generator – LPagery | lpagery |
| Bus Ticket Booking with Seat Reservation | bus-ticket-booking-with-seat-reservation |
| CamPay Shortcode Payment Gateway | campay-shortcode-payment-gateway |
| Cardinity Payment Gateway for WooCommerce | cardinity-free-payment-gateway-for-woocommerce |
| Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails | woo-cart-abandonment-recovery |
| Checkout Field Manager (Checkout Manager) for WooCommerce | woocommerce-checkout-manager |
| Classified Listing – AI-Powered Classified ads & Business Directory | classified-listing |
| Click to Chat – HoliThemes | click-to-chat-for-whatsapp |
| CodeAtoZ B2B Suite for WooCommerce | codeatoz-b2b-suite-for-woocommerce |
| Coinbase Commerce Payment Gateway for WooCommerce | coinbase-commerce |
| Coinsnap Bitcoin Crowdfunding | coinsnap-bitcoin-crowdfunding |
| Colibri Page Builder | colibri-page-builder |
| Complianz GDPR/CCPA Cookie Consent Banner | complianz-gdpr |
| Contact Form 7 Signature Addon | contact-form-7-signature-addon |
| Contact Form DB for Enfold | contact-form-db-for-enfold |
| Cooked – Recipe Management | cooked |
| Countdown Timer – Widget Countdown | widget-countdown |
| CP Multi View Events Calendar | cp-multi-view-calendar |
| Cryptocurrency Donation Box – Bitcoin & Crypto Donations | cryptocurrency-donation-box |
| Custom Query Blocks | post-type-archive-mapping |
| Customer Email Verification for WooCommerce | emails-verification-for-woocommerce |
| Dark Mode – Improve Accessibility with AI Powered Dark Theme | wp-dark-mode |
| Database Addon for Contact Form 7 – CFDB7 | contact-form-cfdb7 |
| Debloat – Remove Unused CSS, Optimize JS | debloat |
| Directorist: AI-Powered Business Directory, Listings & Classified Ads | directorist |
| Document Gallery | document-gallery |
| Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy | dokan-lite |
| Donation Thermometer | donation-thermometer |
| DoubleScale CRM | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More | doublescale |
| Download Monitor | download-monitor |
| Download Monitor integration for WooCommerce | download-monitor-integration-for-woocommerce |
| Easy Appointment Booking & Scheduling Plugin – Webba Booking Calendar | webba-booking-lite |
| Easy HTTPS Redirection (SSL) | https-redirection |
| Easy Property Listings | easy-property-listings |
| eaSYNC Booking – Hotels, Restaurants & Car Rentals | easync-booking |
| Electronic Signature Add-on for Fluent Forms | signature-fluent-contract-forms-add-on |
| Element Pack Addons for Elementor – MCP & AI-Ready Elementor Widgets, Elementor Templates, Elementor Addons | bdthemes-element-pack-lite |
| Elementor Website Builder – more than just a page builder | elementor |
| ElementsReady Addons for Elementor | element-ready-lite |
| ELEX WooCommerce Bulk Edit Products, Prices & Attributes (Basic) | elex-bulk-edit-products-prices-attributes-for-woocommerce-basic |
| ELEX WordPress HelpDesk & Customer Ticketing System | elex-helpdesk-customer-support-ticket-system |
| Email Customizer for WooCommerce (Pro) | woocommerce-email-customizer |
| Essential Addons for Elementor – Popular Elementor Templates & Widgets | essential-addons-for-elementor-lite |
| EU VAT Assistant for WooCommerce | woocommerce-eu-vat-assistant |
| European VAT Compliance Assistant for WooCommerce | woocommerce-eu-vat-compliance |
| Event Post | event-post |
| Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce | wp-event-solution |
| Events Made Easy | events-made-easy |
| Events Manager – Calendar, Bookings, Tickets, Appointments and more! | events-manager |
| Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI | everest-forms |
| Fancy Comments WordPress | fancy-facebook-comments |
| Fast Courier – Shipping & Freight | fast-courier-shipping-freight |
| Fastcache by Host.it | fastcache-by-host-it |
| FiboSearch – Ajax Search for WooCommerce | ajax-search-for-woocommerce |
| File Upload to Order for WooCommerce | file-upload-to-order |
| Flexible Quantity – Measurement Price Calculator for WooCommerce | flexible-quantity-measurement-price-calculator-for-woocommerce |
| Flexible Subscriptions | flexible-subscriptions |
| FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration | fluent-boards |
| FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler | fluent-cart |
| FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution | fluent-crm |
| Flying Scripts: Delay JavaScript to Improve Site Speed & Performance | flying-scripts |
| Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder | form-maker |
| FormFlow for GoHighLevel (GHL) – Send Form Leads to GHL CRM | formflow-for-gohighlevel |
| Forminator Forms – Contact Form, Payment Form & Custom Form Builder | forminator |
| Forms | forms-by-made-it |
| FOX – Currency Switcher Professional for WooCommerce | woocommerce-currency-switcher |
| Frontend Dashboard | frontend-dashboard |
| FunnelKit – Funnel Builder Plugin for WooCommerce Checkout | funnel-builder |
| FV Flowplayer Video Player | fv-wordpress-flowplayer |
| FV Player 8 | fv-player |
| FV Simpler SEO | fv-all-in-one-seo-pack |
| Gallery Custom Links | gallery-custom-links |
| GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI | gamipress |
| Gantry 5 Framework | gantry5 |
| Gateway for Vantiv on WC | gateway-for-vantiv-on-wc |
| GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | geodirectory |
| Gmedia Photo Gallery | grand-media |
| GoSMTP Pro | gosmtp-pro |
| Gravity Forms | gravityforms |
| Green Popups | halfdata-green-popups |
| Groundhogg — CRM, Newsletters, and Marketing Automation | groundhogg |
| Gutenverse Form – Contact Form Builder, Block Form & Booking Form | gutenverse-form |
| Gwolle Guestbook | gwolle-gb |
| Hide My WP Ghost – Security & Firewall | hide-my-wp |
| Hippoo Mobile App for WooCommerce | hippoo |
| HivePress – Business Directory, Listings & Classified Ads Plugin | hivepress |
| HUSKY – Products Filter for WooCommerce Professional | woocommerce-products-filter |
| Hyyan Integration for WooCommerce and Polylang | woo-poly-integration |
| Image Hub – Free Images from Unsplash, Pixabay, Pexels, Openverse & Giphy | image-hub |
| Image Photo Gallery Final Tiles Grid | final-tiles-grid-gallery-lite |
| Import and export users and customers | import-users-from-csv-with-meta |
| IMPress for IDX Broker | idx-broker-platinum |
| Infinite Uploads – Offload, Optimize & Organize Your Media Library | infinite-uploads |
| InstaWP Connect – 1-click WP Staging & Migration | instawp-connect |
| iPOSpays Payment Gateway for WooCommerce | ipospays-gateways-wc |
| Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | jeg-elementor-kit |
| JetElements | jet-elements |
| JetEngine | jet-engine |
| JetFormBuilder — Dynamic Blocks Form Builder | jetformbuilder |
| JetMenu | jet-menu |
| JetSmartFilters | jet-smart-filters |
| JTL-Connector for WooCommerce | woo-jtl-connector |
| Kirki – Freeform Page Builder, Website Builder & Customizer | kirki |
| Kit (formerly ConvertKit) – Email Newsletter, Email Marketing, Membership, Subscribers and Landing Pages | convertkit |
| Klarna for WooCommerce | klarna-payments-for-woocommerce |
| Knowledge Base | knowledgebase |
| LearnPress – WordPress LMS Plugin for Create and Sell Online Courses | learnpress |
| LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes | lifterlms |
| Lightweight Cookie Notice – Cookie Banner for Cookie Consent | lightweight-cookie-notice-free |
| Link Library | link-library |
| Link Whisper Free | link-whisper |
| LTL Freight Quotes – ODFL Edition | ltl-freight-quotes-odfl-edition |
| Mail Mint – Email Marketing, Automation & WooCommerce Emails with AI Assistance | mail-mint |
| MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. | mailoptin |
| MAIO – ChatGPT SEO Tracking & AI Search Optimization | maio-the-new-ai-geo-seo-tool |
| Mang Board | mangboard |
| MapSVG – Vector maps, Image maps, Google Maps | mapsvg-lite-interactive-vector-maps |
| MB Custom Post Types & Custom Taxonomies | mb-custom-post-type |
| MDTF – Meta Data and Taxonomies Filter | wp-meta-data-filter-and-taxonomy-filter |
| Membership & User Roles for WooCommerce (Automatic Role Changer) | dfx-woo-role-changer |
| Meow Lightbox | meow-lightbox |
| miniOrange OTP Login, Verification and SMS Notifications | miniorange-otp-verification |
| Mobile builder | mobile-builder |
| Modern Events Calendar | modern-events-calendar |
| Modern Events Calendar Lite | modern-events-calendar-lite |
| Modula Image Gallery – Photo Grid & Video Gallery | modula-best-grid-gallery |
| My Calendar – Accessible Event Manager | my-calendar |
| Name Directory | name-directory |
| News Kit Addons For Elementor | news-kit-elementor-addons |
| NewStatPress | newstatpress |
| NEX-Forms – Ultimate Forms Plugin for WordPress | nex-forms-express-wp-form-builder |
| Nexter Extension – Security, Performance, Code Snippets & Site Toolkit | nexter-extension |
| Ninja Forms Signature Contract Add-On | ninja-signature-contract-forms-add-on |
| NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar | notificationx |
| Ocean Extra | ocean-extra |
| Opti-Behavior – Self-Hosted Heatmaps, Funnels, A/B Testing & Smart Insights | opti-behavior |
| OTP Login & Register Woocommerce | mobile-login-woocommerce |
| OTP Login With Phone Number, OTP Verification | login-with-phone-number |
| Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE | otter-blocks |
| OttoKit: All-in-One Automation Platform | suretriggers |
| Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress | wp-user-avatar |
| Paid Videochat Turnkey Site – HTML5 PPV Live Webcams | ppv-live-webcams |
| Passster – Password Protect Pages and Content | content-protector |
| Patreon WordPress | patreon-connect |
| Pay for Payment for WooCommerce – Payment Gateway Fees & Discounts | woocommerce-pay-for-payment |
| PAYCOMET for WooCommerce | paytpv-for-woocommerce |
| Paymattic – Secure, Simple Payment & Donation with Subscription Payments, Recurring Donations, Customer Management | wp-payment-form |
| Payment forms, Buy now buttons, and Invoicing System | GetPaid | invoicing |
| PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) | peachpay-for-woocommerce |
| PeproDev Branches Map (Mapify) | pepro-mapify |
| PhastPress | phastpress |
| Photo Engine (Media Organizer & Lightroom) | wplr-sync |
| Photo Gallery by 10Web – Mobile-Friendly Image Gallery | photo-gallery |
| PickPlugins Product Designer for WooCommerce | product-designer |
| PilotPress | pilotpress |
| PlanetStudio Payment Gateway | planetstudio-payment-gateway |
| PO/MO Editor | pomo-editor |
| Polylang | polylang |
| Popup Box – Create Countdown, Coupon, Video, Contact Form Popups | ays-popup-box |
| Post and Page Builder by BoldGrid – Visual Drag and Drop Editor | post-and-page-builder |
| Post Export Import with Media | post-export-import-with-media |
| PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) | powerpack-lite-for-elementor |
| PowerPack Lite for Beaver Builder | powerpack-addon-for-beaver-builder |
| Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates | premium-addons-for-elementor |
| Premium Packages – Sell Digital Products Securely | wpdm-premium-packages |
| Presto Player | presto-player |
| Pricing Table – Block – Show Product or Service Pricing in Table Format | b-pricing-table |
| Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons | bdthemes-prime-slider-lite |
| Printcart Store – Web to Print Product Designer for WooCommerce | printcart-integration |
| Product Delivery Date for WooCommerce – Lite | product-delivery-date-for-woocommerce-lite |
| Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant | shopping-feed-for-google |
| Products Restricted Users for WooCommerce | woo-products-restricted-users |
| Push Notification for Post and BuddyPress | push-notification-for-post-and-buddypress |
| Quick PayPal Payments: Payment Button & Form | quick-paypal-payments |
| Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker | quiz-master-next |
| Quiz Maker by AYS | quiz-maker |
| Rank Math SEO PRO | seo-by-rank-math-pro |
| Rank Math SEO – AI SEO Tools to Dominate SEO Rankings | seo-by-rank-math |
| Record of Consent Extension for Complianz | record-of-consent-extension-for-complianz |
| Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit | woo-rede |
| Responsive Blocks – Page Builder for Blocks & Patterns | responsive-block-editor-addons |
| Responsive Slider | responsive-slider |
| Restricted Site Access | restricted-site-access |
| Robokassa payment gateway for Woocommerce | robokassa |
| RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator | feedzy-rss-feeds |
| rtMedia for WordPress, BuddyPress and bbPress | buddypress-media |
| Salevo Boost Sales for WooCommerce – Set up Up-Sells & Cross-Sells Popups & Auto Apply Coupon | woo-boost-sales |
| Salon Booking System – Appointment Booking for Salons, Barbershops & Spas | salon-booking-system |
| Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories | post-expirator |
| Schema & Structured Data for WP & AMP | schema-and-structured-data-for-wp |
| Search Regex | search-regex |
| ShopMagic – email automation for WordPress | shopmagic-for-woocommerce |
| Sifalo Pay – Mobile Money & Card Payments for WooCommerce | sifalo-pay |
| SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications | simple-form |
| Simply Schedule Appointments | simply-schedule-appointments |
| SimplyRETS Real Estate IDX | simply-rets |
| Site Reviews | site-reviews |
| SiteOrigin CSS | so-css |
| Skydropx | skydropx |
| Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated | slim-seo |
| Smart Forms – when you need more than just a contact form | smart-forms |
| SmartCrawl SEO checker, analyzer & optimizer | smartcrawl-seo |
| SMS Alert – SMS Notifications & OTP Login, COD Verification, Abandoned Cart Recovery | sms-alert |
| Smush – Image Optimization, Compression, Lazy Load, WebP & CDN | wp-smushit |
| Snap Finance | snap-finance-checkout |
| Snazzy Social Media Feed | snazzy-cacheable-facebook-feed |
| Social Share Buttons | share-button |
| Social Share Buttons & Analytics Plugin – GetSocial.io | wp-share-buttons-analytics-by-getsocial |
| Spin Wheel | spin-wheel |
| SQL Chart Builder | sql-chart-builder |
| Squeeze – Browser-Based Image Compression & WebP Converter (No API, No Limits) | squeeze |
| Strong Testimonials | strong-testimonials |
| Subscribe to Comments | subscribe-to-comments |
| Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers | sunshine-photo-cart |
| Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System | support-genix-lite |
| SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments | surecart |
| SureDash – Community, Courses & Member Dashboard | suredash |
| SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz | sureforms |
| Tainacan | tainacan |
| Tasty Recipes Lite – WordPress Recipe Card Plugin with Built-In Recipe Schema | tasty-recipes-lite |
| The Events Calendar | the-events-calendar |
| The Grid | the-grid |
| Theme My Login | theme-my-login |
| Themify Builder | themify-builder |
| Themify Popup | themify-popup |
| ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin | thirstyaffiliates |
| Tickera – Sell Tickets & Manage Events | tickera-event-ticketing-system |
| TMDS – Dropshipping for TEMU and Woo | tmds-dropshipping-for-temu-and-woo |
| Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental | tourfic |
| Tracking Code Manager | tracking-code-manager |
| TranslatePress – Translate Multilingual sites with AI Translation | translatepress-multilingual |
| TrueBooker – Appointment Booking and Scheduler System | truebooker-appointment-booking |
| Trust Payments Gateway for WooCommerce | trust-payments-hosted-payment-pages-integration |
| Tutor LMS – eLearning and online course solution | tutor |
| Ukr-To-Lat | ukr-to-lat |
| Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform | ultimate-multisite |
| Ultra Addons for Contact Form 7 | ultimate-addons-for-contact-form-7 |
| User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor | profile-builder |
| User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder | user-registration |
| User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin | user-registration-pro |
| User Rights Access Manager | user-rights-access-manager |
| Verified Reviews (Avis Vérifiés) | netreviews |
| VideoWhisper Site Manager for ChatGPT, Claude, Codex, Grok | videowhisper-site-manager |
| Visma Pay for Woocommerce | visma-pay-payment-gateway |
| Visual Form Builder | visual-form-builder |
| Vitepos – Point of Sale (POS) for WooCommerce | vitepos-lite |
| VK Blocks | vk-blocks |
| Vulnity Security | vulnity |
| Walletdoc Payment Gateway for WooCommerce | wc-walletdoc-payment-gateway |
| WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce | woosquare |
| Weaver Xtreme Theme Support | weaverx-theme-support |
| WebberZone Top 10 — Popular Posts | top-10 |
| weForms – Easy Drag & Drop Contact Form Builder For WordPress | weforms |
| Welcart e-Commerce | usc-e-shop |
| WholesaleX – All-in-One B2B Solution with Wholesale Pricing | wholesalex |
| WOLF – WordPress Posts Bulk Editor and Manager Professional | bulk-editor |
| WordLift – AI powered SEO – Schema | wordlift |
| WP 2FA – Two-factor authentication for WordPress | wp-2fa |
| WP Booking System – Booking Calendar | wp-booking-system |
| WP Compress – Instant Performance & Speed Optimization | wp-compress-image-optimizer |
| WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps | wp-data-access |
| WP Easy Pay – Payment and Donation Form Builder for Square | wp-easy-pay |
| WP Encryption: Easy SSL / HTTPS & Free SSL certificate, HTTPS redirect | wp-letsencrypt-ssl |
| WP Mail Logging | wp-mail-logging |
| WP Map Block – Google Maps, OpenStreetMap, Mapbox, Store & Shop Locator, Directory, Listings & Filters | wp-map-block |
| WP OAuth Server ( Login with WordPress ) | miniorange-oauth-20-server |
| WP Photo Album Plus | wp-photo-album-plus |
| WP Sessions Time Monitoring Full Automatic | activitytime |
| WP Testimonials | testimonial-widgets |
| WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory | wp-user-manager |
| WP w3all phpBB | wp-w3all-phpbb-integration |
| WP-Members Membership Plugin | wp-members |
| WPBot – ChatBot Conversational Forms | conversational-forms |
| WPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager | insert-headers-and-footers |
| WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice) | wpconsent-cookies-banner-privacy-suite |
| WPeMatico RSS Feed Fetcher | wpematico |
| WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More | wpforms-lite |
| WPGraphQL | wp-graphql |
| WSP MCP – Free MCP Plugin for WordPress: Connect Claude, ChatGPT & AI Agents | wsp-mcp-ai-agents-connector |
| WX Subscribe 微信支付付费订阅 | wx-subscribe |
| xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN | xspeed |
| YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports | yaysmtp |
| YITH PayPal Express Checkout for WooCommerce | yith-paypal-express-checkout-for-woocommerce |
| YITH WooCommerce Compare | yith-woocommerce-compare |
| YITH WooCommerce Popup | yith-woocommerce-popup |
| YMC Filter | ymc-smart-filter |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Avventure | avventure |
| Bonbon | bonbon |
| Coinpress | coinpress |
| Edge Decor | edge-decor |
| EmojiNation | emojination |
| eStore | estore |
| Filmax | Cinema & Movie News Magazine WordPress Theme | filmax |
| gamezone | gamezone |
| Gamic – Gaming Metaverse Game & Crypto WordPress Theme | gamic |
| Good Homes – Real Estate WordPress Theme | good-homes |
| Gunslinger | gunslinger |
| Houzez | houzez |
| Le Truffe | letruffe |
| Legal Stone | Lawyers & Attorneys WordPress Theme | legal-stone |
| Marcell – Personal Blog & Magazine WordPress Theme | marcell |
| Marin | marin |
| Meals & Wheels | meals-wheels |
| Mission | mission |
| Motorix | motorix |
| Muzicon – Music Festival & Concert WordPress Theme | muzicon |
| Nuts | nuts |
| Orpheus | orpheus |
| XStore | xstore |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
Affected Software
10Web Booster – Website speed optimization, Cache & Page Speed optimizer [tenweb-speed-optimizer]
Researcher
Affected Software
Abandoned Cart Pro for WooCommerce [woocommerce-abandon-cart-pro]
Researcher
Affected Software
Abandoned Cart Pro for WooCommerce [woocommerce-abandon-cart-pro]
Researcher
Affected Software
ELEX WordPress HelpDesk & Customer Ticketing System [elex-helpdesk-customer-support-ticket-system]
Researcher
Affected Software
JTL-Connector for WooCommerce [woo-jtl-connector]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Mang Board [mangboard]
Researcher
Affected Software
MDTF – Meta Data and Taxonomies Filter [wp-meta-data-filter-and-taxonomy-filter]
Researcher
Affected Software
My Calendar – Accessible Event Manager [my-calendar]
Researcher
Affected Software
OTP Login & Register Woocommerce [mobile-login-woocommerce]
Researcher
Affected Software
Printcart Store – Web to Print Product Designer for WooCommerce [printcart-integration]
Researcher
Affected Software
Researcher
Snazzy Social Media Feed <= 2.5 – Unauthenticated Arbitrary File Upload via ‘pluginURL’ Parameter
9.8
Affected Software
Snazzy Social Media Feed [snazzy-cacheable-facebook-feed]
Researcher
Affected Software
Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers [sunshine-photo-cart]
Researcher
Affected Software
The Grid [the-grid]
Researcher
Affected Software
Theme My Login [theme-my-login]
Researcher
Affected Software
Researcher
Patch Status
Unpatched
Unpatched
Published
Oct 13, 2026
Oct 13, 2026
Affected Software
BuddyPress XProfile Custom Image Field [buddypress-xprofile-image-field]
Researcher
Affected Software
Click to Chat – HoliThemes [click-to-chat-for-whatsapp]
Researcher
Affected Software
File Upload to Order for WooCommerce [file-upload-to-order]
Researcher
Affected Software
affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display [affiliate-toolkit-starter]
Researcher
Affected Software
Researcher
Affected Software
Email Customizer for WooCommerce (Pro) [woocommerce-email-customizer]
Researcher
Affected Software
FV Flowplayer Video Player [fv-wordpress-flowplayer]
Researcher
Affected Software
Researcher
Affected Software
MapSVG – Vector maps, Image maps, Google Maps [mapsvg-lite-interactive-vector-maps]
Researcher
Affected Software
PilotPress [pilotpress]
Researcher
Affected Software
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas [salon-booking-system]
Researcher
Affected Software
WP Photo Album Plus [wp-photo-album-plus]
Researcher
Affected Software
Researcher
Affected Software
Affiliates [affiliates]
Researcher
Affected Software
BP Profile Search [bp-profile-search]
Researcher
Affected Software
Checkout Field Manager (Checkout Manager) for WooCommerce [woocommerce-checkout-manager]
Researcher
Affected Software
Customer Email Verification for WooCommerce [emails-verification-for-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
Edge Decor [edge-decor]
Researcher
Affected Software
EmojiNation [emojination]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Good Homes – Real Estate WordPress Theme [good-homes]
Researcher
Affected Software
Gravity Forms [gravityforms]
Researcher
Affected Software
Researcher
Affected Software
Gunslinger [gunslinger]
Researcher
Legal Stone | Lawyers & Attorneys WordPress Theme <= 1.2.11 – Unauthenticated PHP Object Injection
8.1
Affected Software
Legal Stone | Lawyers & Attorneys WordPress Theme [legal-stone]
Researcher
Affected Software
Mang Board [mangboard]
Researcher
Affected Software
MapSVG – Vector maps, Image maps, Google Maps [mapsvg-lite-interactive-vector-maps]
Researcher
Marcell – Personal Blog & Magazine WordPress Theme <= 1.2.14 – Unauthenticated PHP Object Injection
8.1
Affected Software
Researcher
Affected Software
Meals & Wheels [meals-wheels]
Researcher
Affected Software
miniOrange OTP Login, Verification and SMS Notifications [miniorange-otp-verification]
Researcher
Muzicon – Music Festival & Concert WordPress Theme <= 1.15 – Unauthenticated PHP Object Injection
8.1
Affected Software
Researcher
Affected Software
ShopMagic – email automation for WordPress [shopmagic-for-woocommerce]
Researcher
Affected Software
Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform [ultimate-multisite]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Vulnity Security [vulnity]
Researcher
Affected Software
WPBot – ChatBot Conversational Forms [conversational-forms]
Researcher
Affected Software
Researcher
Affected Software
Search Regex [search-regex]
Researcher
Affected Software
10Web Booster – Website speed optimization, Cache & Page Speed optimizer [tenweb-speed-optimizer]
Researcher
Affected Software
Abandoned Cart Pro for WooCommerce [woocommerce-abandon-cart-pro]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Booking for Appointments and Events Calendar – Amelia [ameliabooking]
Researcher
Affected Software
Booking Package [booking-package]
Researcher
Affected Software
Researcher
Affected Software
Contact Form 7 Signature Addon [contact-form-7-signature-addon]
Researcher
Affected Software
Fast Courier – Shipping & Freight [fast-courier-shipping-freight]
Researchers
Affected Software
Researcher
Affected Software
Researcher
Affected Software
FunnelKit – Funnel Builder Plugin for WooCommerce Checkout [funnel-builder]
Researcher
Affected Software
Gmedia Photo Gallery [grand-media]
Researcher
Affected Software
Green Popups [halfdata-green-popups]
Researcher
Affected Software
InstaWP Connect – 1-click WP Staging & Migration [instawp-connect]
Researcher
Affected Software
JTL-Connector for WooCommerce [woo-jtl-connector]
Researcher
Affected Software
Researcher
Affected Software
Klarna for WooCommerce [klarna-payments-for-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
Link Library [link-library]
Researcher
Affected Software
Link Whisper Free [link-whisper]
Researcher
Affected Software
Link Whisper Free [link-whisper]
Researcher
Affected Software
Mang Board [mangboard]
Researcher
Affected Software
Membership & User Roles for WooCommerce (Automatic Role Changer) [dfx-woo-role-changer]
Researcher
Affected Software
Mobile builder [mobile-builder]
Researcher
Affected Software
Modula Image Gallery – Photo Grid & Video Gallery [modula-best-grid-gallery]
Researcher
Affected Software
Nexter Extension – Security, Performance, Code Snippets & Site Toolkit [nexter-extension]
Researcher
Affected Software
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker [quiz-master-next]
Researcher
Affected Software
Strong Testimonials [strong-testimonials]
Researcher
Affected Software
Researcher
Affected Software
Vitepos – Point of Sale (POS) for WooCommerce [vitepos-lite]
Researcher
Affected Software
Walletdoc Payment Gateway for WooCommerce [wc-walletdoc-payment-gateway]
Researcher
Affected Software
WP Booking System – Booking Calendar [wp-booking-system]
Researcher
Affected Software
WX Subscribe 微信支付付费订阅 [wx-subscribe]
Researcher
Affected Software
Researcher
Affected Software
ACF Frontend Admin by DynamiApps [acf-frontend-form-element]
Researcher
Affected Software
Researcher
Affected Software
OTP Login With Phone Number, OTP Verification [login-with-phone-number]
Researcher
Affected Software
OttoKit: All-in-One Automation Platform [suretriggers]
Researcher
Affected Software
PhastPress [phastpress]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
User Rights Access Manager [user-rights-access-manager]
Researchers
Affected Software
WPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager [insert-headers-and-footers]
Researcher
AcyMailing <= 11.1.0 – Unauthenticated Stored Cross-Site Scripting via ‘customField[]’ Parameter
7.2
Affected Software
Researcher
Affected Software
AnyComment [anycomment]
Researcher
Affected Software
Auction Nudge – Your eBay Listings [auction-nudge]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
BSK PDF Manager [bsk-pdf-manager]
Researcher
Affected Software
Colibri Page Builder [colibri-page-builder]
Researcher
Affected Software
Complianz GDPR/CCPA Cookie Consent Banner [complianz-gdpr]
Researcher
Affected Software
Contact Form DB for Enfold [contact-form-db-for-enfold]
Researcher
Affected Software
CP Multi View Events Calendar [cp-multi-view-calendar]
Researcher
Affected Software
Cryptocurrency Donation Box – Bitcoin & Crypto Donations [cryptocurrency-donation-box]
Researcher
Affected Software
Document Gallery [document-gallery]
Researcher
Affected Software
Easy Property Listings [easy-property-listings]
Researcher
Affected Software
EU VAT Assistant for WooCommerce [woocommerce-eu-vat-assistant]
Researcher
Affected Software
European VAT Compliance Assistant for WooCommerce [woocommerce-eu-vat-compliance]
Researcher
Affected Software
Researcher
Affected Software
Flying Scripts: Delay JavaScript to Improve Site Speed & Performance [flying-scripts]
Researcher
Affected Software
Forms [forms-by-made-it]
Affected Software
FV Flowplayer Video Player [fv-wordpress-flowplayer]
Researcher
Affected Software
GoSMTP Pro [gosmtp-pro]
Researcher
Affected Software
Researcher
Affected Software
Hide My WP Ghost – Security & Firewall [hide-my-wp]
Researcher
HivePress <= 1.7.32 – Unauthenticated Stored Cross-Site Scripting via Custom User Attribute Value
7.2
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
LTL Freight Quotes – ODFL Edition [ltl-freight-quotes-odfl-edition]
Researcher
Affected Software
Mang Board [mangboard]
Researcher
Affected Software
Mang Board [mangboard]
Researcher
Affected Software
Mang Board [mangboard]
Researcher
Affected Software
NewStatPress [newstatpress]
Researcher
Affected Software
NewStatPress [newstatpress]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams [ppv-live-webcams]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Post Export Import with Media [post-export-import-with-media]
Researcher
Affected Software
PowerPack Lite for Beaver Builder [powerpack-addon-for-beaver-builder]
Researcher
Affected Software
Premium Packages – Sell Digital Products Securely [wpdm-premium-packages]
Researcher
Affected Software
Record of Consent Extension for Complianz [record-of-consent-extension-for-complianz]
Researcher
Affected Software
Researcher
Affected Software
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas [salon-booking-system]
Researcher
Affected Software
Schema & Structured Data for WP & AMP [schema-and-structured-data-for-wp]
Researcher
Affected Software
Simply Schedule Appointments [simply-schedule-appointments]
Researcher
Affected Software
Simply Schedule Appointments [simply-schedule-appointments]
Researcher
Affected Software
SiteOrigin CSS [so-css]
Researcher
Affected Software
SiteOrigin CSS [so-css]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
TranslatePress – Translate Multilingual sites with AI Translation [translatepress-multilingual]
Researcher
Affected Software
Ultra Addons for Contact Form 7 [ultimate-addons-for-contact-form-7]
Researcher
User Profile Builder <= 4.0.3 – Unauthenticated Stored Cross-Site Scripting via First Name Field
7.2
Affected Software
Researcher
Affected Software
Researcher
User Registration PRO <= 6.2.9 – Unauthenticated Stored Cross-Site Scripting via HTTP Referer Header
7.2
Affected Software
User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin [user-registration-pro]
Researcher
Affected Software
Verified Reviews (Avis Vérifiés) [netreviews]
Researcher
Affected Software
WP Booking System – Booking Calendar [wp-booking-system]
Researcher
Affected Software
WP Sessions Time Monitoring Full Automatic [activitytime]
Researcher
Affected Software
WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice) [wpconsent-cookies-banner-privacy-suite]
Researcher
Affected Software
Photo Engine (Media Organizer & Lightroom) [wplr-sync]
Researcher
Affected Software
WP Booking System – Booking Calendar [wp-booking-system]
Researcher
Affected Software
ACF Frontend Admin by DynamiApps [acf-frontend-form-element]
Researcher
Affected Software
Polylang [polylang]
Researcher
Affected Software
Booster Elite for WooCommerce [booster-elite-for-woocommerce]
Researcher
Broken Link Checker <= 2.4.14.1 – Unauthenticated Arbitrary Shortcode Execution via parser_callback
6.5
Affected Software
Broken Link Checker [broken-link-checker]
Researcher
Affected Software
BSK PDF Manager [bsk-pdf-manager]
Researcher
Affected Software
CP Multi View Events Calendar [cp-multi-view-calendar]
Researcher
Affected Software
Researcher
Affected Software
Researchers
Affected Software
Researcher
Affected Software
Hyyan Integration for WooCommerce and Polylang [woo-poly-integration]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
MapSVG – Vector maps, Image maps, Google Maps <= 8.16.1 – Authenticated (Contributor+) SQL Injection
6.5
Affected Software
MapSVG – Vector maps, Image maps, Google Maps [mapsvg-lite-interactive-vector-maps]
Researcher
Affected Software
Modern Events Calendar Lite [modern-events-calendar-lite]
Modern Events Calendar [modern-events-calendar]
Researcher
Affected Software
Modern Events Calendar Lite [modern-events-calendar-lite]
Researcher
Affected Software
Ocean Extra [ocean-extra]
Researcher
Affected Software
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas [salon-booking-system]
Researcher
Affected Software
Researcher
Affected Software
Tainacan [tainacan]
Researcher
Affected Software
Ukr-To-Lat [ukr-to-lat]
Researcher
Affected Software
Vitepos – Point of Sale (POS) for WooCommerce [vitepos-lite]
Researcher
Affected Software
WP Booking System – Booking Calendar [wp-booking-system]
Researcher
Affected Software
WSP MCP – Free MCP Plugin for WordPress: Connect Claude, ChatGPT & AI Agents [wsp-mcp-ai-agents-connector]
Researcher
Affected Software
Ad Inserter – Ad Manager & AdSense Ads [ad-inserter]
Researcher
Affected Software
Blaze Demo Importer [blaze-demo-importer]
Researcher
Affected Software
Booking Package [booking-package]
Researcher
Affected Software
Books Gallery – Book Showcase, Library & Affiliate Plugin [wp-books-gallery]
Researcher
Affected Software
Cooked – Recipe Management [cooked]
Researcher
Affected Software
Countdown Timer – Widget Countdown [widget-countdown]
Researcher
Affected Software
Custom Query Blocks [post-type-archive-mapping]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Document Gallery [document-gallery]
Researcher
Affected Software
Donation Thermometer [donation-thermometer]
Researcher
Affected Software
Download Monitor [download-monitor]
Researcher
Affected Software
Element Pack Addons for Elementor – MCP & AI-Ready Elementor Widgets, Elementor Templates, Elementor Addons [bdthemes-element-pack-lite]
Researcher
Affected Software
FiboSearch – Ajax Search for WooCommerce [ajax-search-for-woocommerce]
Researcher
Affected Software
FV Flowplayer Video Player [fv-wordpress-flowplayer]
Researcher
Affected Software
FV Player 8 [fv-player]
Researcher
Affected Software
FV Simpler SEO [fv-all-in-one-seo-pack]
Researcher
Affected Software
Researcher
GeoDirectory <= 2.8.190 – Authenticated (Subscriber+) Stored Cross-Site Scripting via Image Title
6.4
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Gutenverse Form – Contact Form Builder, Block Form & Booking Form [gutenverse-form]
Researcher
Affected Software
Researcher
Affected Software
Image Photo Gallery Final Tiles Grid [final-tiles-grid-gallery-lite]
Researcher
Affected Software
Image Photo Gallery Final Tiles Grid [final-tiles-grid-gallery-lite]
Researcher
Affected Software
Import and export users and customers [import-users-from-csv-with-meta]
Researcher
Affected Software
IMPress for IDX Broker [idx-broker-platinum]
Researcher
Affected Software
JetElements [jet-elements]
Researcher
Affected Software
JetSmartFilters [jet-smart-filters]
Researcher
Kirki <= 6.2.0 – Authenticated (Custom+) Stored Cross-Site Scripting via Page Builder Text Content
6.4
Affected Software
Researcher
Mang Board <= 2.4.3 – Authenticated (Custom+) Stored Cross-Site Scripting via ‘content’ Parameter
6.4
Affected Software
Mang Board [mangboard]
Researcher
Affected Software
Mang Board [mangboard]
Researcher
Affected Software
MapSVG – Vector maps, Image maps, Google Maps [mapsvg-lite-interactive-vector-maps]
Researcher
Affected Software
MDTF – Meta Data and Taxonomies Filter [wp-meta-data-filter-and-taxonomy-filter]
Researcher
Affected Software
Meow Lightbox [meow-lightbox]
Researcher
Affected Software
Name Directory [name-directory]
Researcher
Patch Status
Patched
Patched
Published
Oct 16, 2026
Oct 16, 2026
Affected Software
News Kit Addons For Elementor [news-kit-elementor-addons]
Researcher
Affected Software
PeproDev Branches Map (Mapify) [pepro-mapify]
Researcher
Affected Software
PO/MO Editor [pomo-editor]
Researcher
Affected Software
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor [post-and-page-builder]
Researcher
Affected Software
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) [powerpack-lite-for-elementor]
Researcher
Affected Software
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) [powerpack-lite-for-elementor]
Researcher
Affected Software
Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates [premium-addons-for-elementor]
Researcher
Affected Software
Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates [premium-addons-for-elementor]
Researcher
Premium Packages <= 7.2.8 – Authenticated (Subscriber+) Stored Cross-Site Scripting via Order Notes
6.4
Affected Software
Premium Packages – Sell Digital Products Securely [wpdm-premium-packages]
Researcher
Affected Software
Presto Player [presto-player]
Researcher
Affected Software
Pricing Table – Block – Show Product or Service Pricing in Table Format [b-pricing-table]
Researcher
Affected Software
Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons [bdthemes-prime-slider-lite]
Researcher
Affected Software
Quick PayPal Payments: Payment Button & Form [quick-paypal-payments]
Researcher
Affected Software
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker [quiz-master-next]
Researcher
Affected Software
Responsive Slider [responsive-slider]
Researcher
Affected Software
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas [salon-booking-system]
Researcher
Affected Software
Researcher
Affected Software
Social Share Buttons & Analytics Plugin – GetSocial.io [wp-share-buttons-analytics-by-getsocial]
Researcher
Affected Software
Social Share Buttons [share-button]
Researcher
Affected Software
Social Share Buttons [share-button]
Researcher
Affected Software
SQL Chart Builder [sql-chart-builder]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
The Events Calendar [the-events-calendar]
Researcher
Affected Software
Themify Builder [themify-builder]
Researcher
Affected Software
Themify Popup [themify-popup]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
VK Blocks [vk-blocks]
Researcher
Affected Software
Weaver Xtreme Theme Support [weaverx-theme-support]
Researcher
Affected Software
WebberZone Top 10 — Popular Posts [top-10]
Researcher
Affected Software
Dark Mode – Improve Accessibility with AI Powered Dark Theme [wp-dark-mode]
Affected Software
WP Testimonials [testimonial-widgets]
Researcher
Affected Software
WP w3all phpBB [wp-w3all-phpbb-integration]
Researcher
Affected Software
Researcher
Affected Software
YITH WooCommerce Compare [yith-woocommerce-compare]
Researcher
Affected Software
YMC Filter [ymc-smart-filter]
Researcher
Affected Software
Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite]
Researcher
Affected Software
Researcher
Affected Software
Frontend Dashboard [frontend-dashboard]
Researcher
Affected Software
Document Gallery [document-gallery]
Researcher
Affected Software
eStore [estore]
Researcher
Affected Software
Fancy Comments WordPress [fancy-facebook-comments]
Researcher
Affected Software
Gwolle Guestbook [gwolle-gb]
Researcher
Affected Software
Hippoo Mobile App for WooCommerce [hippoo]
Researcher
Affected Software
Hippoo Mobile App for WooCommerce [hippoo]
Researcher
Affected Software
Houzez [houzez]
Researcher
Affected Software
Link Whisper Free [link-whisper]
Researcher
Affected Software
Marin [marin]
Researcher
Affected Software
PAYCOMET for WooCommerce [paytpv-for-woocommerce]
Researcher
Affected Software
WP Photo Album Plus [wp-photo-album-plus]
Researcher
Affected Software
Photo Gallery by 10Web – Mobile-Friendly Image Gallery [photo-gallery]
Researcher
Affected Software
Quiz Maker by AYS [quiz-maker]
Researcher
Affected Software
SimplyRETS Real Estate IDX [simply-rets]
Researcher
Affected Software
Tracking Code Manager [tracking-code-manager]
Researcher
Affected Software
Researcher
Affected Software
XStore [xstore]
Researcher
Affected Software
Debloat – Remove Unused CSS, Optimize JS [debloat]
Researcher
Affected Software
Events Made Easy [events-made-easy]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
WPeMatico RSS Feed Fetcher [wpematico]
Researcher
Affected Software
2Way VideoCalls and Random Chat – HTML5 Webcam Videochat [webcam-2way-videochat]
Researcher
Affected Software
Active Woot Products Tables for WooCommerce. 100% FREE [profit-products-tables-for-woocommerce]
Researcher
Affected Software
ActiveTrail for WooCommerce [activetrail-for-woocommerce]
Researcher
Affected Software
Ajax Search Lite – Live Search & Filter [ajax-search-lite]
Researcher
Affected Software
Researcher
Affected Software
Asaas Gateway for WooCommerce [woo-asaas]
Researcher
Affected Software
Avada (Fusion) Builder [fusion-builder]
Researcher
Affected Software
AWP Classifieds [another-wordpress-classifieds-plugin]
Researcher
Affected Software
bbPress [bbpress]
Researcher
Affected Software
BDM Digital Payment Gateway [bdm-digital-payment-gateway]
Researcher
Affected Software
Booking for Appointments and Events Calendar – Amelia [ameliabooking]
Researcher
Affected Software
Researcher
Booktics – Appointment Booking Calendar for Service Businesses <= 1.0.28 – Missing Authorization
5.3
Affected Software
Researcher
Affected Software
Broken Link Checker [broken-link-checker]
Researcher
Affected Software
Bus Ticket Booking with Seat Reservation [bus-ticket-booking-with-seat-reservation]
Researcher
Affected Software
CamPay Shortcode Payment Gateway [campay-shortcode-payment-gateway]
Affected Software
Cardinity Payment Gateway for WooCommerce [cardinity-free-payment-gateway-for-woocommerce]
Researcher
Affected Software
Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails [woo-cart-abandonment-recovery]
Researcher
Affected Software
CodeAtoZ B2B Suite for WooCommerce [codeatoz-b2b-suite-for-woocommerce]
Researcher
Affected Software
Coinbase Commerce Payment Gateway for WooCommerce [coinbase-commerce]
Researcher
Affected Software
Coinsnap Bitcoin Crowdfunding [coinsnap-bitcoin-crowdfunding]
Researcher
Affected Software
Database Addon for Contact Form 7 – CFDB7 [contact-form-cfdb7]
Researcher
Affected Software
Document Gallery [document-gallery]
Researcher
Affected Software
Document Gallery [document-gallery]
Researcher
Affected Software
Easy Appointment Booking & Scheduling Plugin – Webba Booking Calendar [webba-booking-lite]
Researcher
Affected Software
Easy Property Listings [easy-property-listings]
Researcher
Affected Software
eaSYNC Booking – Hotels, Restaurants & Car Rentals [easync-booking]
Researchers
Affected Software
Electronic Signature Add-on for Fluent Forms [signature-fluent-contract-forms-add-on]
Researcher
Affected Software
ElementsReady Addons for Elementor [element-ready-lite]
Researcher
Affected Software
Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce [wp-event-solution]
Researcher
Affected Software
Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce [wp-event-solution]
Researcher
Affected Software
Events Manager – Calendar, Bookings, Tickets, Appointments and more! [events-manager]
Researcher
Flexible Quantity – Measurement Price Calculator for WooCommerce <= 2.3.22 – Missing Authorization
5.3
Affected Software
Flexible Quantity – Measurement Price Calculator for WooCommerce [flexible-quantity-measurement-price-calculator-for-woocommerce]
Researcher
Flexible Quantity – Measurement Price Calculator for WooCommerce <= 2.3.23 – Missing Authorization
5.3
Affected Software
Flexible Quantity – Measurement Price Calculator for WooCommerce [flexible-quantity-measurement-price-calculator-for-woocommerce]
Researcher
Affected Software
Researcher
Affected Software
FormFlow for GoHighLevel (GHL) – Send Form Leads to GHL CRM [formflow-for-gohighlevel]
Researcher
Affected Software
Researcher
Affected Software
FOX – Currency Switcher Professional for WooCommerce [woocommerce-currency-switcher]
Researcher
Affected Software
ACF Frontend Admin by DynamiApps [acf-frontend-form-element]
Researcher
Affected Software
Researcher
Affected Software
Gantry 5 Framework [gantry5]
Researcher
Affected Software
Gateway for Vantiv on WC [gateway-for-vantiv-on-wc]
Researcher
HUSKY <= 1.4.5 – Unauthenticated Sensitive Information Exposure in ‘woof_tm_data’ Localized Script
5.3
Affected Software
HUSKY – Products Filter for WooCommerce Professional [woocommerce-products-filter]
Researcher
Affected Software
iPOSpays Payment Gateway for WooCommerce [ipospays-gateways-wc]
Researcher
Affected Software
JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder]
Researcher
Affected Software
Researcher
Affected Software
Knowledge Base [knowledgebase]
Researcher
Affected Software
Lightweight Cookie Notice – Cookie Banner for Cookie Consent [lightweight-cookie-notice-free]
Researcher
Affected Software
MAIO – ChatGPT SEO Tracking & AI Search Optimization [maio-the-new-ai-geo-seo-tool]
Researcher
Affected Software
MapSVG – Vector maps, Image maps, Google Maps [mapsvg-lite-interactive-vector-maps]
Researcher
Affected Software
NEX-Forms – Ultimate Forms Plugin for WordPress [nex-forms-express-wp-form-builder]
Researcher
Affected Software
Ninja Forms Signature Contract Add-On [ninja-signature-contract-forms-add-on]
Researcher
Affected Software
Researcher
Affected Software
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams [ppv-live-webcams]
Researcher
Affected Software
Passster – Password Protect Pages and Content [content-protector]
Researcher
Affected Software
Patreon WordPress [patreon-connect]
Researcher
Pay for Payment for WooCommerce – Payment Gateway Fees & Discounts <= 3.0.1 – Missing Authorization
5.3
Affected Software
Pay for Payment for WooCommerce – Payment Gateway Fees & Discounts [woocommerce-pay-for-payment]
Researcher
Affected Software
PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) [peachpay-for-woocommerce]
Researcher
Affected Software
PlanetStudio Payment Gateway [planetstudio-payment-gateway]
Researcher
Affected Software
Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates [premium-addons-for-elementor]
Researcher
Affected Software
PickPlugins Product Designer for WooCommerce [product-designer]
Researcher
Affected Software
Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant [shopping-feed-for-google]
Researcher
Affected Software
Products Restricted Users for WooCommerce [woo-products-restricted-users]
Researcher
Affected Software
Push Notification for Post and BuddyPress [push-notification-for-post-and-buddypress]
Researcher
Affected Software
Quick PayPal Payments: Payment Button & Form [quick-paypal-payments]
Researcher
Affected Software
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math]
Researcher
Affected Software
Restricted Site Access [restricted-site-access]
Researcher
Affected Software
Robokassa payment gateway for Woocommerce [robokassa]
Researcher
Affected Software
Researcher
Affected Software
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas [salon-booking-system]
Researcher
Affected Software
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas [salon-booking-system]
Researcher
Affected Software
Researcher
Affected Software
Affected Software
Site Reviews [site-reviews]
Researcher
Affected Software
Snap Finance [snap-finance-checkout]
Researcher
Affected Software
Snap Finance [snap-finance-checkout]
Researcher
Affected Software
Spin Wheel [spin-wheel]
Researcher
Affected Software
Subscribe to Comments [subscribe-to-comments]
Researcher
Affected Software
Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers [sunshine-photo-cart]
Researcher
Affected Software
Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers [sunshine-photo-cart]
Researcher
Affected Software
Researcher
Affected Software
Tickera – Sell Tickets & Manage Events [tickera-event-ticketing-system]
Researcher
Affected Software
TrueBooker – Appointment Booking and Scheduler System [truebooker-appointment-booking]
Researcher
Affected Software
TrueBooker – Appointment Booking and Scheduler System [truebooker-appointment-booking]
Researcher
Affected Software
TrueBooker – Appointment Booking and Scheduler System [truebooker-appointment-booking]
Researcher
Affected Software
TrueBooker – Appointment Booking and Scheduler System [truebooker-appointment-booking]
Researcher
Affected Software
Trust Payments Gateway for WooCommerce [trust-payments-hosted-payment-pages-integration]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Visma Pay for Woocommerce [visma-pay-payment-gateway]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
WP Encryption: Easy SSL / HTTPS & Free SSL certificate, HTTPS redirect [wp-letsencrypt-ssl]
Affected Software
WP OAuth Server ( Login with WordPress ) [miniorange-oauth-20-server]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
WPGraphQL [wp-graphql]
Researcher
Affected Software
YITH PayPal Express Checkout for WooCommerce [yith-paypal-express-checkout-for-woocommerce]
Researcher
Affected Software
affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display [affiliate-toolkit-starter]
Researcher
Animated Number Counters <= 3.0 – Authenticated (Editor+) SQL Injection via ‘counterid’ Parameter
4.9
Affected Software
Animated Number Counters [animated-number-counters]
Researcher
Affected Software
Researcher
Affected Software
Gallery Custom Links [gallery-custom-links]
Researcher
Affected Software
Link Whisper Free [link-whisper]
Researcher
Affected Software
Post Export Import with Media [post-export-import-with-media]
Researcher
Welcart e-Commerce <= 2.12.4 – Authenticated (Editor+) SQL Injection via ‘wp_usces_order_old’ Cookie
4.9
Affected Software
Welcart e-Commerce [usc-e-shop]
Researcher
Affected Software
Researcher
WP Booking System <= 2.1.0.1 – Authenticated (Administrator+) SQL Injection via ‘orderby’ Parameter
4.9
Affected Software
WP Booking System – Booking Calendar [wp-booking-system]
Researcher
Affected Software
Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box]
Researcher
Affected Software
WP Compress – Instant Performance & Speed Optimization [wp-compress-image-optimizer]
Researcher
Affected Software
Researcher
Affected Software
Patreon WordPress [patreon-connect]
Researcher
Affected Software
Responsive Blocks – Page Builder for Blocks & Patterns [responsive-block-editor-addons]
Researcher
Affected Software
Researcher
Affected Software
Ad Inserter – Ad Manager & AdSense Ads [ad-inserter]
Researcher
Affected Software
Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution [file-manager-advanced]
Researcher
Affected Software
Advanced Post Manager [advanced-post-manager]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
aThemeArt Theme Helper [athemeart-theme-helper]
Researcher
Booktics – Appointment Booking Calendar for Service Businesses <= 1.0.28 – Missing Authorization
4.3
Affected Software
Researcher
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP <= 7.3.6 – Missing Authorization
4.3
Affected Software
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP [videowhisper-live-streaming-integration]
Researcher
Affected Software
Bulk Page Generator – LPagery [lpagery]
Researcher
Classified Listing – AI-Powered Classified ads & Business Directory < 6.1.1 – Missing Authorization
4.3
Affected Software
Classified Listing – AI-Powered Classified ads & Business Directory [classified-listing]
Researcher
Affected Software
Researcher
Affected Software
Download Monitor integration for WooCommerce [download-monitor-integration-for-woocommerce]
Researcher
Affected Software
Easy HTTPS Redirection (SSL) [https-redirection]
Researcher
Affected Software
Easy Property Listings [easy-property-listings]
Researcher
Affected Software
Researcher
Affected Software
ElementsReady Addons for Elementor [element-ready-lite]
Researcher
Affected Software
ELEX WooCommerce Bulk Edit Products, Prices & Attributes (Basic) [elex-bulk-edit-products-prices-attributes-for-woocommerce-basic]
Researcher
Affected Software
Event Post [event-post]
Researcher
Affected Software
Event Post [event-post]
Researcher
Affected Software
Fastcache by Host.it [fastcache-by-host-it]
Researcher
Affected Software
Flexible Subscriptions [flexible-subscriptions]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Image Hub <= 1.2.0 – Authenticated (Subscriber+) Sensitive Information Exposure in Admin Page HTML
4.3
Affected Software
Researcher
Affected Software
Infinite Uploads – Offload, Optimize & Organize Your Media Library [infinite-uploads]
Researcher
Affected Software
MB Custom Post Types & Custom Taxonomies [mb-custom-post-type]
Researcher
Affected Software
Modern Events Calendar Lite [modern-events-calendar-lite]
Researcher
Modern Events Calendar Lite <= 7.36.3 – Authenticated (Subscriber+) Insecure Direct Object Reference
4.3
Affected Software
Modern Events Calendar Lite [modern-events-calendar-lite]
Researcher
Affected Software
OTP Login With Phone Number, OTP Verification [login-with-phone-number]
Researcher
Affected Software
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams [ppv-live-webcams]
Researcher
Affected Software
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams [ppv-live-webcams]
Researcher
Affected Software
Patreon WordPress [patreon-connect]
Researcher
Affected Software
Patreon WordPress [patreon-connect]
Researcher
Affected Software
Patreon WordPress [patreon-connect]
Researcher
Affected Software
Product Delivery Date for WooCommerce – Lite [product-delivery-date-for-woocommerce-lite]
Researcher
Affected Software
rtMedia for WordPress, BuddyPress and bbPress [buddypress-media]
Researcher
Affected Software
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas [salon-booking-system]
Researcher
Affected Software
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas [salon-booking-system]
Researcher
Affected Software
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas [salon-booking-system]
Researcher
Affected Software
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas [salon-booking-system]
Researcher
Affected Software
Simply Schedule Appointments [simply-schedule-appointments]
Researcher
Affected Software
SmartCrawl SEO checker, analyzer & optimizer [smartcrawl-seo]
Researcher
Affected Software
Researcher
Affected Software
Blog2Social: Social Media Auto Post & Scheduler [blog2social]
Researcher
Affected Software
Researcher
Affected Software
Strong Testimonials [strong-testimonials]
Researcher
Affected Software
Strong Testimonials [strong-testimonials]
Researcher
Affected Software
Tasty Recipes Lite – WordPress Recipe Card Plugin with Built-In Recipe Schema [tasty-recipes-lite]
Researcher
Affected Software
TMDS – Dropshipping for TEMU and Woo [tmds-dropshipping-for-temu-and-woo]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
VideoWhisper Site Manager for ChatGPT, Claude, Codex, Grok [videowhisper-site-manager]
Researcher
Affected Software
Visual Form Builder [visual-form-builder]
Researcher
Affected Software
Visual Form Builder [visual-form-builder]
Researcher
Affected Software
WordLift – AI powered SEO – Schema [wordlift]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
WP-Members Membership Plugin [wp-members]
Researcher
Affected Software
YITH WooCommerce Popup [yith-woocommerce-popup]
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
Researcher
Affected Software
WP Mail Logging [wp-mail-logging]
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
The post Wordfence Intelligence Weekly WordPress Vulnerability Report (October 12, 2026 to October 18, 2026) appeared first on Wordfence.
