Did you know Wordfence runs a Bug Bounty Program for all WordPress plugins and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we handle all the rest.
Last week, there were 111 vulnerabilities disclosed in 94 WordPress Plugins and 5 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 33 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to implement layered security, aligning with our overarching mission to secure WordPress with defense in depth strategies. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 24,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 37 |
| Unpatched | 74 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Low Severity | 2 |
| Medium Severity | 78 |
| High Severity | 18 |
| Critical Severity | 13 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) | 62 |
| Improper Control of Filename for Include/Require Statement in PHP Program (‘PHP Remote File Inclusion’) | 8 |
| Missing Authorization | 8 |
| Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) | 7 |
| Cross-Site Request Forgery (CSRF) | 4 |
| Deserialization of Untrusted Data | 4 |
| Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) | 4 |
| Server-Side Request Forgery (SSRF) | 3 |
| External Control of File Name or Path | 2 |
| Unrestricted Upload of File with Dangerous Type | 2 |
| Authentication Bypass Using an Alternate Path or Channel | 1 |
| Authorization Bypass Through User-Controlled Key | 1 |
| Exposure of Sensitive Information to an Unauthorized Actor | 1 |
| Improper Control of Generation of Code (‘Code Injection’) | 1 |
| Improper Input Validation | 1 |
| Use of a Broken or Risky Cryptographic Algorithm | 1 |
| Weak Password Recovery Mechanism for Forgotten Password | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 30 | |
| 8 | |
| 8 | |
| 8 | |
| 5 | |
| 4 | |
| 4 | |
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| 140+ Widgets | Xpro Addons For Elementor – FREE | xpro-elementor-addons |
| Ads24 Lite – Ultimate WP Ads Manager Plugin | wp-ad-management |
| Age Gate | age-gate |
| AHAthat Plugin | ahathat |
| AppReview | appreview |
| Are you robot google recaptcha for wordpress | are-you-robot-recaptcha |
| AuMenu | aumenu |
| Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop | woo-altcoin-payment-gateway |
| Bitspecter Suite | bitspecter-suite |
| Block Logic – Full Gutenberg Block Display Control | block-logic |
| BoomBox Theme Extensions | boombox-theme-extensions |
| CG Button | content-glass-button |
| CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts | cits-support-svg-webp-media-upload |
| Code Clone | code-clone |
| Cookies Pro | cookies-pro |
| CryoKey | cryokey |
| Custom Field List Widget | custom-field-list-widget |
| Custom Smilies | custom-smilies-se |
| Custom Twitter Feeds – A Tweets Widget or X Feed Widget | custom-twitter-feeds |
| custom-post-edit | front-end-post-edit |
| Display Post Meta | display-post-meta |
| Docpro | docpro |
| Easy Custom Admin Bar | easy-custom-admin-bar |
| En Masse WordPress | en-masse-wp |
| Event Manager, Events Calendar, Tickets, Registrations – Eventin | wp-event-solution |
| Export and Import Users and Customers | users-customers-import-export-for-wp-woocommerce |
| FancyBox | fancy-box |
| File Away | file-away |
| Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder | fluentform |
| FOMO Pay Chinese Payment Solution | fomo-payment-gateway-for-woocommerce |
| Formality | formality |
| Frontend Post Submission | frontend-post-submission |
| FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce | wp-marketing-automations |
| GDPR Tools | gdpr-tools |
| GetShop ecommerce | getshop-ecommerce |
| GiveWP – Donation Plugin and Fundraising Platform | give |
| GlobalPayments WooCommerce | global-payments-woocommerce |
| Google Plus | google-plus-google |
| Gotcha | Gesture-based Captcha | gotcha-gesture-based-captcha |
| HT Mega – Absolute Addons For Elementor | ht-mega-for-elementor |
| Improve My City | improve-my-city |
| Infugrator – Infusionsoft + WordPress | infugrator |
| Instant Appointment | instant-appointment |
| Já-Já Pagamentos for WooCommerce – Payment with MULTICAIXA Express | wc-ja-ja-pagamentos-multicaixa-express |
| LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes | lifterlms |
| LinkedIn Lite | linkedin-lite |
| LIVE TV | live-tv |
| Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation | gs-logo-slider |
| Management-screen-droptiles | cxc-sawa |
| MemberSpace – Membership Plugin and Paid Subscriptions | memberspace |
| Motors – Car Dealership & Classified Listings Plugin | motors-car-dealership-classified-listings |
| Multi Video Box | multi-video-box |
| Narnoo Operator | narnoo-shortcodes |
| Newsletters | newsletters-lite |
| NP Quote Request for WooCommerce | woo-rfq-for-woocommerce |
| NS Simple Intro Loader | ns-simple-intro-loader |
| Off Page SEO | off-page-seo |
| Order Export & Order Import for WooCommerce | order-import-export-for-woocommerce |
| Pixobe Cartography | pixobe-cartography |
| Product Puller | product-puller |
| ProfileGrid – User Profiles, Groups and Communities | profilegrid-user-profiles-groups-and-communities |
| Random Quotes | random-quotes |
| RDP inGroups+ | rdp-ingroups |
| RDP Linkedin Login | rdp-linkedin-login |
| Rizzi Guestbook | rizzi-guestbook |
| RWS Enquiry And Lead Follow-up | rws-enquiry |
| s2Member Pro | s2member-pro |
| Schedule | schedule |
| Secure Invites | wordpress-mu-secure-invites |
| Service Finder Bookings | sf-booking |
| Simple Post Series | simple-post-series |
| Site Editor Google Map – with drag and drop | site-editor-google-map |
| Sleekplan – User Feedback, Roadmap & Changelog | sleekplan |
| Snow Storm | snow-storm |
| SpatialMatch IDX | spatialmatch-free-lifestyle-search |
| Stencies | stencies |
| SUPER RESPONSIVE SLIDER | super-slider |
| ULTIMATE VIDEO GALLERY | ultimate-gallery |
| UTM tags + Landing page + “gclid” tracking for Contact Form 7 | cf7-utm-tracking |
| WooCommerce Multivendor Marketplace – REST API | wcfm-marketplace-rest-api |
| WordPress Theme Demo Bar | wordpress-theme-demo-bar |
| WP Azure offload | wp-azure-offload |
| WP Contact Form III | wp-contact-form-iii |
| WP Database Audit | database-audit |
| WP Email Delivery | wp-email-delivery |
| WP Ghost (Hide My WP Ghost) – Security & Firewall | hide-my-wp |
| WP Google Calendar Manager – Google Calendar Plugin | wp-gcalendar |
| Your Friendly Drag and Drop Page Builder — Make Builder | make-builder |
| Your Lightbox | your-lightbox |
| Zalo Live Chat | zalo-live-chat |
| ZD Scribd iPaper | zd-scribd-ipaper |
| ZenphotoPress | zenphotopress |
| ZhinaTwitterWidget | zhina-twitter-widget |
| Zielke Design Project Gallery | zielke-design-project-gallery |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Altair | altair |
| CozyStay – Hotel Booking WordPress Theme | cozystay |
| FoodBakery | Delivery Restaurant Directory WordPress Theme | wp-foodbakery |
| MinimogWP – The High Converting eCommerce WordPress Theme | minimog |
| TinySalt – Personal Food Blog WordPress Theme | tinysalt |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
CVE-ID
CVE-2024-13410
CVE-2024-13410
Patch Status
Patched
Patched
Published
Mar 18, 2025
Mar 18, 2025
Affected Software
CozyStay – Hotel Booking WordPress Theme
TinySalt – Personal Food Blog WordPress Theme
CozyStay – Hotel Booking WordPress Theme
TinySalt – Personal Food Blog WordPress Theme
Researcher
CVE-ID
CVE-2025-23952
CVE-2025-23952
Patch Status
Unpatched
Unpatched
Published
Mar 17, 2025
Mar 17, 2025
Affected Software
Custom Field List Widget
Custom Field List Widget
Researcher
CVE-ID
CVE-2025-28916
CVE-2025-28916
Patch Status
Unpatched
Unpatched
Published
Mar 23, 2025
Mar 23, 2025
Affected Software
Docpro
Docpro
Researcher
File Away <= 3.9.9.0.1 – Missing Authorization to Unauthenticated File Upload via upload Function
9.8
CVE-ID
CVE-2025-2512
CVE-2025-2512
Patch Status
Unpatched
Unpatched
Published
Mar 18, 2025
Mar 18, 2025
Affected Software
File Away
File Away
Researcher
CVE-ID
CVE-2025-24690
CVE-2025-24690
Patch Status
Patched
Patched
Published
Mar 17, 2025
Mar 17, 2025
Affected Software
Formality
Formality
Researcher
CVE-ID
CVE-2024-54362
CVE-2024-54362
Patch Status
Unpatched
Unpatched
Published
Mar 17, 2025
Mar 17, 2025
Affected Software
GetShop ecommerce
GetShop ecommerce
Researcher
CVE-ID
CVE-2025-26909
CVE-2025-26909
Patch Status
Patched
Patched
Published
Mar 19, 2025
Mar 19, 2025
Affected Software
WP Ghost (Hide My WP Ghost) – Security & Firewall
WP Ghost (Hide My WP Ghost) – Security & Firewall
Researcher
CVE-ID
Unknown
Unknown
Patch Status
Unpatched
Unpatched
Published
Mar 20, 2025
Mar 20, 2025
Affected Software
Instant Appointment
Instant Appointment
Researcher
CVE-ID
CVE-2025-23937
CVE-2025-23937
Patch Status
Unpatched
Unpatched
Published
Mar 17, 2025
Mar 17, 2025
Affected Software
LinkedIn Lite
LinkedIn Lite
Researcher
CVE-ID
CVE-2024-13790
CVE-2024-13790
Patch Status
Patched
Patched
Published
Mar 18, 2025
Mar 18, 2025
Affected Software
MinimogWP – The High Converting eCommerce WordPress Theme
MinimogWP – The High Converting eCommerce WordPress Theme
Researcher
CVE-ID
CVE-2024-13442
CVE-2024-13442
Patch Status
Patched
Patched
Published
Mar 18, 2025
Mar 18, 2025
Affected Software
Service Finder Bookings
Service Finder Bookings
Researcher
CVE-ID
CVE-2025-2303
CVE-2025-2303
Patch Status
Unpatched
Unpatched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
Block Logic – Full Gutenberg Block Display Control
Block Logic – Full Gutenberg Block Display Control
Researcher
CVE-ID
CVE-2024-12295
CVE-2024-12295
Patch Status
Patched
Patched
Published
Mar 18, 2025
Mar 18, 2025
Affected Software
BoomBox Theme Extensions
BoomBox Theme Extensions
Researcher
CVE-ID
CVE-2025-1770
CVE-2025-1770
Patch Status
Patched
Patched
Published
Mar 19, 2025
Mar 19, 2025
Affected Software
Event Manager, Events Calendar, Tickets, Registrations – Eventin
Event Manager, Events Calendar, Tickets, Registrations – Eventin
Researcher
CVE-ID
CVE-2024-13933
CVE-2024-13933
Patch Status
Unpatched
Unpatched
Published
Mar 18, 2025
Mar 18, 2025
Affected Software
FoodBakery | Delivery Restaurant Directory WordPress Theme
FoodBakery | Delivery Restaurant Directory WordPress Theme
Researcher
CVE-ID
CVE-2024-12920
CVE-2024-12920
Patch Status
Unpatched
Unpatched
Published
Mar 18, 2025
Mar 18, 2025
Affected Software
FoodBakery | Delivery Restaurant Directory WordPress Theme
FoodBakery | Delivery Restaurant Directory WordPress Theme
Researcher
CVE-ID
CVE-2025-0724
CVE-2025-0724
Patch Status
Patched
Patched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
ProfileGrid – User Profiles, Groups and Communities
ProfileGrid – User Profiles, Groups and Communities
Researcher
CVE-ID
CVE-2024-12563
CVE-2024-12563
Patch Status
Unpatched
Unpatched
Published
Mar 18, 2025
Mar 18, 2025
Affected Software
s2Member Pro
s2Member Pro
Researcher
CVE-ID
CVE-2025-1970
CVE-2025-1970
Patch Status
Patched
Patched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
Export and Import Users and Customers
Export and Import Users and Customers
Researcher
CVE-ID
CVE-2024-13923
CVE-2024-13923
Patch Status
Patched
Patched
Published
Mar 19, 2025
Mar 19, 2025
Affected Software
Order Export & Order Import for WooCommerce
Order Export & Order Import for WooCommerce
Researcher
CVE-ID
CVE-2024-13412
CVE-2024-13412
Patch Status
Patched
Patched
Published
Mar 18, 2025
Mar 18, 2025
Affected Software
CozyStay – Hotel Booking WordPress Theme
CozyStay – Hotel Booking WordPress Theme
Researcher
CVE-ID
CVE-2025-2539
CVE-2025-2539
Patch Status
Unpatched
Unpatched
Published
Mar 19, 2025
Mar 19, 2025
Affected Software
File Away
File Away
Researcher
CVE-ID
CVE-2024-13558
CVE-2024-13558
Patch Status
Patched
Patched
Published
Mar 19, 2025
Mar 19, 2025
Affected Software
NP Quote Request for WooCommerce
NP Quote Request for WooCommerce
Researcher
CVE-ID
CVE-2025-2186
CVE-2025-2186
Patch Status
Patched
Patched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce
Researcher
CVE-ID
CVE-2025-22523
CVE-2025-22523
Patch Status
Unpatched
Unpatched
Published
Mar 17, 2025
Mar 17, 2025
Affected Software
Schedule
Schedule
Researcher
CVE-ID
CVE-2025-2262
CVE-2025-2262
Patch Status
Patched
Patched
Published
Mar 17, 2025
Mar 17, 2025
Affected Software
Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation
Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation
Researcher
CVE-ID
CVE-2025-1971
CVE-2025-1971
Patch Status
Patched
Patched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
Export and Import Users and Customers
Export and Import Users and Customers
Researcher
CVE-ID
CVE-2025-22501
CVE-2025-22501
Patch Status
Unpatched
Unpatched
Published
Mar 18, 2025
Mar 18, 2025
Affected Software
Improve My City
Improve My City
Researcher
CVE-ID
CVE-2024-13921
CVE-2024-13921
Patch Status
Patched
Patched
Published
Mar 19, 2025
Mar 19, 2025
Affected Software
Order Export & Order Import for WooCommerce
Order Export & Order Import for WooCommerce
Researcher
CVE-ID
CVE-2025-0723
CVE-2025-0723
Patch Status
Patched
Patched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
ProfileGrid – User Profiles, Groups and Communities
ProfileGrid – User Profiles, Groups and Communities
Researcher
CVE-ID
CVE-2025-1311
CVE-2025-1311
Patch Status
Unpatched
Unpatched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
WooCommerce Multivendor Marketplace – REST API
WooCommerce Multivendor Marketplace – REST API
Researcher
CVE-ID
CVE-2025-28939
CVE-2025-28939
Patch Status
Unpatched
Unpatched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
WP Google Calendar Manager – Google Calendar Plugin
WP Google Calendar Manager – Google Calendar Plugin
Researcher
CVE-ID
CVE-2025-2108
CVE-2025-2108
Patch Status
Patched
Patched
Published
Mar 19, 2025
Mar 19, 2025
Affected Software
140+ Widgets | Xpro Addons For Elementor – FREE
140+ Widgets | Xpro Addons For Elementor – FREE
Researcher
Bitspecter Suite <= 1.0.0 – Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
6.4
CVE-ID
CVE-2025-2577
CVE-2025-2577
Patch Status
Patched
Patched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
Bitspecter Suite
Bitspecter Suite
Researcher
CVE-ID
CVE-2025-26537
CVE-2025-26537
Patch Status
Unpatched
Unpatched
Published
Mar 20, 2025
Mar 20, 2025
Affected Software
GDPR Tools
GDPR Tools
Researcher
CVE-ID
CVE-2025-1802
CVE-2025-1802
Patch Status
Patched
Patched
Published
Mar 19, 2025
Mar 19, 2025
Affected Software
HT Mega – Absolute Addons For Elementor
HT Mega – Absolute Addons For Elementor
Researcher
CVE-ID
CVE-2024-13856
CVE-2024-13856
Patch Status
Patched
Patched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
Your Friendly Drag and Drop Page Builder — Make Builder
Your Friendly Drag and Drop Page Builder — Make Builder
Researcher
CVE-ID
CVE-2025-23458
CVE-2025-23458
Patch Status
Unpatched
Unpatched
Published
Mar 18, 2025
Mar 18, 2025
Affected Software
Ads24 Lite – Ultimate WP Ads Manager Plugin
Ads24 Lite – Ultimate WP Ads Manager Plugin
Researcher
CVE-ID
CVE-2025-23714
CVE-2025-23714
Patch Status
Unpatched
Unpatched
Published
Mar 20, 2025
Mar 20, 2025
Affected Software
AppReview
AppReview
Researcher
CVE-ID
CVE-2025-28928
CVE-2025-28928
Patch Status
Unpatched
Unpatched
Published
Mar 22, 2025
Mar 22, 2025
Affected Software
Are you robot google recaptcha for wordpress
Are you robot google recaptcha for wordpress
Researcher
CVE-ID
CVE-2025-23728
CVE-2025-23728
Patch Status
Unpatched
Unpatched
Published
Mar 20, 2025
Mar 20, 2025
Affected Software
AuMenu
AuMenu
Researcher
CVE-ID
CVE-2025-26541
CVE-2025-26541
Patch Status
Unpatched
Unpatched
Published
Mar 20, 2025
Mar 20, 2025
Researcher
CVE-ID
CVE-2025-23632
CVE-2025-23632
Patch Status
Unpatched
Unpatched
Published
Mar 19, 2025
Mar 19, 2025
Affected Software
CG Button
CG Button
Researcher
CVE-ID
CVE-2025-26546
CVE-2025-26546
Patch Status
Unpatched
Unpatched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
Cookies Pro
Cookies Pro
Researcher
CVE-ID
CVE-2025-28917
CVE-2025-28917
Patch Status
Unpatched
Unpatched
Published
Mar 23, 2025
Mar 23, 2025
Affected Software
Custom Smilies
Custom Smilies
Researcher
CVE-ID
CVE-2025-23667
CVE-2025-23667
Patch Status
Unpatched
Unpatched
Published
Mar 19, 2025
Mar 19, 2025
Affected Software
custom-post-edit
custom-post-edit
Researcher
CVE-ID
CVE-2025-26575
CVE-2025-26575
Patch Status
Unpatched
Unpatched
Published
Mar 20, 2025
Mar 20, 2025
Affected Software
Display Post Meta
Display Post Meta
Researcher
CVE-ID
CVE-2025-2479
CVE-2025-2479
Patch Status
Unpatched
Unpatched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
Easy Custom Admin Bar
Easy Custom Admin Bar
Researcher
CVE-ID
CVE-2025-23707
CVE-2025-23707
Patch Status
Unpatched
Unpatched
Published
Mar 19, 2025
Mar 19, 2025
Affected Software
En Masse WordPress
En Masse WordPress
Researcher
CVE-ID
CVE-2025-23543
CVE-2025-23543
Patch Status
Unpatched
Unpatched
Published
Mar 18, 2025
Mar 18, 2025
Affected Software
FOMO Pay Chinese Payment Solution
FOMO Pay Chinese Payment Solution
Researcher
CVE-ID
CVE-2025-23638
CVE-2025-23638
Patch Status
Unpatched
Unpatched
Published
Mar 19, 2025
Mar 19, 2025
Affected Software
Frontend Post Submission
Frontend Post Submission
Researcher
CVE-ID
CVE-2025-22767
CVE-2025-22767
Patch Status
Unpatched
Unpatched
Published
Mar 18, 2025
Mar 18, 2025
Affected Software
GlobalPayments WooCommerce
GlobalPayments WooCommerce
Researcher
CVE-ID
CVE-2025-23964
CVE-2025-23964
Patch Status
Unpatched
Unpatched
Published
Mar 20, 2025
Mar 20, 2025
Affected Software
Google Plus
Google Plus
Researcher
CVE-ID
CVE-2025-2482
CVE-2025-2482
Patch Status
Unpatched
Unpatched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
Gotcha | Gesture-based Captcha
Gotcha | Gesture-based Captcha
Researcher
CVE-ID
CVE-2025-23735
CVE-2025-23735
Patch Status
Unpatched
Unpatched
Published
Mar 20, 2025
Mar 20, 2025
Affected Software
Infugrator – Infusionsoft + WordPress
Infugrator – Infusionsoft + WordPress
Researcher
CVE-ID
CVE-2024-51624
CVE-2024-51624
Patch Status
Unpatched
Unpatched
Published
Mar 17, 2025
Mar 17, 2025
Affected Software
Já-Já Pagamentos for WooCommerce – Payment with MULTICAIXA Express
Já-Já Pagamentos for WooCommerce – Payment with MULTICAIXA Express
Researcher
CVE-ID
CVE-2025-23608
CVE-2025-23608
Patch Status
Unpatched
Unpatched
Published
Mar 19, 2025
Mar 19, 2025
Affected Software
LIVE TV
LIVE TV
Researcher
CVE-ID
CVE-2025-23666
CVE-2025-23666
Patch Status
Unpatched
Unpatched
Published
Mar 19, 2025
Mar 19, 2025
Affected Software
Management-screen-droptiles
Management-screen-droptiles
Researcher
CVE-ID
CVE-2025-26874
CVE-2025-26874
Patch Status
Patched
Patched
Published
Mar 20, 2025
Mar 20, 2025
Affected Software
MemberSpace – Membership Plugin and Paid Subscriptions
MemberSpace – Membership Plugin and Paid Subscriptions
Researcher
CVE-ID
CVE-2025-2484
CVE-2025-2484
Patch Status
Unpatched
Unpatched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
Multi Video Box
Multi Video Box
Researcher
CVE-ID
CVE-2025-23680
CVE-2025-23680
Patch Status
Unpatched
Unpatched
Published
Mar 19, 2025
Mar 19, 2025
Affected Software
Narnoo Operator
Narnoo Operator
Researcher
CVE-ID
CVE-2024-13739
CVE-2024-13739
Patch Status
Patched
Patched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
Newsletters
Newsletters
Researcher
CVE-ID
CVE-2025-23459
CVE-2025-23459
Patch Status
Unpatched
Unpatched
Published
Mar 18, 2025
Mar 18, 2025
Affected Software
NS Simple Intro Loader
NS Simple Intro Loader
Researcher
CVE-ID
CVE-2025-23554
CVE-2025-23554
Patch Status
Unpatched
Unpatched
Published
Mar 19, 2025
Mar 19, 2025
Affected Software
Off Page SEO
Off Page SEO
Researcher
CVE-ID
CVE-2025-23612
CVE-2025-23612
Patch Status
Unpatched
Unpatched
Published
Mar 19, 2025
Mar 19, 2025
Affected Software
Pixobe Cartography
Pixobe Cartography
Researcher
CVE-ID
CVE-2025-23550
CVE-2025-23550
Patch Status
Unpatched
Unpatched
Published
Mar 18, 2025
Mar 18, 2025
Affected Software
Product Puller
Product Puller
Researcher
CVE-ID
CVE-2025-27267
CVE-2025-27267
Patch Status
Unpatched
Unpatched
Published
Mar 20, 2025
Mar 20, 2025
Affected Software
Random Quotes
Random Quotes
Researcher
CVE-ID
CVE-2025-23546
CVE-2025-23546
Patch Status
Unpatched
Unpatched
Published
Mar 18, 2025
Mar 18, 2025
Affected Software
RDP inGroups+
RDP inGroups+
Researcher
CVE-ID
CVE-2025-23542
CVE-2025-23542
Patch Status
Unpatched
Unpatched
Published
Mar 18, 2025
Mar 18, 2025
Affected Software
RDP Linkedin Login
RDP Linkedin Login
Researcher
CVE-ID
CVE-2025-26573
CVE-2025-26573
Patch Status
Unpatched
Unpatched
Published
Mar 20, 2025
Mar 20, 2025
Affected Software
Rizzi Guestbook
Rizzi Guestbook
Researcher
CVE-ID
CVE-2025-23460
CVE-2025-23460
Patch Status
Unpatched
Unpatched
Published
Mar 18, 2025
Mar 18, 2025
Affected Software
RWS Enquiry And Lead Follow-up
RWS Enquiry And Lead Follow-up
Researcher
CVE-ID
CVE-2025-26559
CVE-2025-26559
Patch Status
Unpatched
Unpatched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
Secure Invites
Secure Invites
Researcher
CVE-ID
CVE-2025-28934
CVE-2025-28934
Patch Status
Unpatched
Unpatched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
Simple Post Series
Simple Post Series
Researcher
CVE-ID
CVE-2025-23466
CVE-2025-23466
Patch Status
Unpatched
Unpatched
Published
Mar 18, 2025
Mar 18, 2025
Affected Software
Site Editor Google Map – with drag and drop
Site Editor Google Map – with drag and drop
Researcher
CVE-ID
CVE-2025-23469
CVE-2025-23469
Patch Status
Unpatched
Unpatched
Published
Mar 18, 2025
Mar 18, 2025
Affected Software
Sleekplan – User Feedback, Roadmap & Changelog
Sleekplan – User Feedback, Roadmap & Changelog
Researcher
CVE-ID
CVE-2025-28921
CVE-2025-28921
Patch Status
Unpatched
Unpatched
Published
Mar 23, 2025
Mar 23, 2025
Affected Software
SpatialMatch IDX
SpatialMatch IDX
Researcher
CVE-ID
CVE-2025-22356
CVE-2025-22356
Patch Status
Unpatched
Unpatched
Published
Mar 18, 2025
Mar 18, 2025
Affected Software
Stencies
Stencies
Researcher
CVE-ID
CVE-2025-22575
CVE-2025-22575
Patch Status
Unpatched
Unpatched
Published
Mar 18, 2025
Mar 18, 2025
Affected Software
SUPER RESPONSIVE SLIDER
SUPER RESPONSIVE SLIDER
Researcher
CVE-ID
CVE-2025-25134
CVE-2025-25134
Patch Status
Unpatched
Unpatched
Published
Mar 20, 2025
Mar 20, 2025
Affected Software
WordPress Theme Demo Bar
WordPress Theme Demo Bar
Researcher
CVE-ID
CVE-2025-22566
CVE-2025-22566
Patch Status
Unpatched
Unpatched
Published
Mar 18, 2025
Mar 18, 2025
Affected Software
ULTIMATE VIDEO GALLERY
ULTIMATE VIDEO GALLERY
Researcher
CVE-ID
CVE-2025-26544
CVE-2025-26544
Patch Status
Unpatched
Unpatched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
UTM tags + Landing page + “gclid” tracking for Contact Form 7
UTM tags + Landing page + “gclid” tracking for Contact Form 7
Researcher
CVE-ID
CVE-2025-22360
CVE-2025-22360
Patch Status
Unpatched
Unpatched
Published
Mar 17, 2025
Mar 17, 2025
Affected Software
WP Azure offload
WP Azure offload
Researcher
CVE-ID
CVE-2025-26560
CVE-2025-26560
Patch Status
Unpatched
Unpatched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
WP Contact Form III
WP Contact Form III
Researcher
CVE-ID
CVE-2025-23633
CVE-2025-23633
Patch Status
Unpatched
Unpatched
Published
Mar 19, 2025
Mar 19, 2025
Affected Software
WP Database Audit
WP Database Audit
Researcher
CVE-ID
Unknown
Unknown
Patch Status
Unpatched
Unpatched
Published
Mar 17, 2025
Mar 17, 2025
Affected Software
WP Email Delivery
WP Email Delivery
Researcher
CVE-ID
CVE-2025-23704
CVE-2025-23704
Patch Status
Unpatched
Unpatched
Published
Mar 19, 2025
Mar 19, 2025
Affected Software
Your Lightbox
Your Lightbox
Researcher
CVE-ID
CVE-2025-26542
CVE-2025-26542
Patch Status
Unpatched
Unpatched
Published
Mar 20, 2025
Mar 20, 2025
Affected Software
Zalo Live Chat
Zalo Live Chat
Researcher
CVE-ID
CVE-2025-23757
CVE-2025-23757
Patch Status
Unpatched
Unpatched
Published
Mar 20, 2025
Mar 20, 2025
Affected Software
ZD Scribd iPaper
ZD Scribd iPaper
Researcher
CVE-ID
CVE-2025-28924
CVE-2025-28924
Patch Status
Unpatched
Unpatched
Published
Mar 22, 2025
Mar 22, 2025
Affected Software
ZenphotoPress
ZenphotoPress
Researcher
CVE-ID
CVE-2025-23719
CVE-2025-23719
Patch Status
Unpatched
Unpatched
Published
Mar 20, 2025
Mar 20, 2025
Affected Software
ZhinaTwitterWidget
ZhinaTwitterWidget
Researcher
CVE-ID
CVE-2025-23705
CVE-2025-23705
Patch Status
Unpatched
Unpatched
Published
Mar 19, 2025
Mar 19, 2025
Affected Software
Zielke Design Project Gallery
Zielke Design Project Gallery
Researcher
CVE-ID
CVE-2025-1766
CVE-2025-1766
Patch Status
Patched
Patched
Published
Mar 19, 2025
Mar 19, 2025
Affected Software
Event Manager, Events Calendar, Tickets, Registrations – Eventin
Event Manager, Events Calendar, Tickets, Registrations – Eventin
Researcher
CVE-ID
CVE-2024-13666
CVE-2024-13666
Patch Status
Patched
Patched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
Researcher
CVE-ID
CVE-2025-2331
CVE-2025-2331
Patch Status
Patched
Patched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
GiveWP – Donation Plugin and Fundraising Platform
GiveWP – Donation Plugin and Fundraising Platform
Researcher
CVE-ID
CVE-2025-2290
CVE-2025-2290
Patch Status
Patched
Patched
Published
Mar 18, 2025
Mar 18, 2025
Affected Software
LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes
LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes
Researcher
CVE-ID
CVE-2025-2511
CVE-2025-2511
Patch Status
Unpatched
Unpatched
Published
Mar 18, 2025
Mar 18, 2025
Affected Software
AHAthat Plugin
AHAthat Plugin
Researcher
CVE-ID
CVE-2025-2478
CVE-2025-2478
Patch Status
Unpatched
Unpatched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
Code Clone
Code Clone
Researcher
CVE-ID
CVE-2025-1973
CVE-2025-1973
Patch Status
Patched
Patched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
Export and Import Users and Customers
Export and Import Users and Customers
Researcher
CVE-ID
CVE-2024-13920
CVE-2024-13920
Patch Status
Patched
Patched
Published
Mar 19, 2025
Mar 19, 2025
Affected Software
Order Export & Order Import for WooCommerce
Order Export & Order Import for WooCommerce
Researcher
CVE-ID
CVE-2024-13768
CVE-2024-13768
Patch Status
Unpatched
Unpatched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts
CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts
Researcher
CVE-ID
CVE-2025-0807
CVE-2025-0807
Patch Status
Unpatched
Unpatched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts
CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts
Researcher
CVE-ID
CVE-2025-1314
CVE-2025-1314
Patch Status
Patched
Patched
Published
Mar 19, 2025
Mar 19, 2025
Affected Software
Custom Twitter Feeds – A Tweets Widget or X Feed Widget
Custom Twitter Feeds – A Tweets Widget or X Feed Widget
Researcher
CVE-ID
CVE-2024-13737
CVE-2024-13737
Patch Status
Patched
Patched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
Motors – Car Dealership & Classified Listings Plugin
Motors – Car Dealership & Classified Listings Plugin
Researcher
CVE-ID
CVE-2025-1408
CVE-2025-1408
Patch Status
Patched
Patched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
ProfileGrid – User Profiles, Groups and Communities
ProfileGrid – User Profiles, Groups and Communities
Researcher
CVE-ID
CVE-2025-1972
CVE-2025-1972
Patch Status
Patched
Patched
Published
Mar 21, 2025
Mar 21, 2025
Affected Software
Export and Import Users and Customers
Export and Import Users and Customers
Researcher
CVE-ID
CVE-2024-13922
CVE-2024-13922
Patch Status
Patched
Patched
Published
Mar 19, 2025
Mar 19, 2025
Affected Software
Order Export & Order Import for WooCommerce
Order Export & Order Import for WooCommerce
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
The post Wordfence Intelligence Weekly WordPress Vulnerability Report (March 17, 2025 to March 23, 2025) appeared first on Wordfence.
