Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we handle all the rest.
Special Note: This week’s Wordfence Intelligence Weekly WordPress Vulnerability Report is an extended edition to cover the last few weeks in December over the holidays and the first week in January.
Over the past three weeks, there were 459 vulnerabilities disclosed in 390 WordPress Plugins and 29 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 95 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to implement layered security, aligning with our overarching mission to secure WordPress with defense in depth strategies. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report. As the world’s leading quality vulnerability database provider for WordPress, site owners can rest assured knowing Wordfence has their back.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 32,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 219 |
| Unpatched | 240 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Low Severity | 2 |
| Medium Severity | 402 |
| High Severity | 48 |
| Critical Severity | 7 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Missing Authorization | 167 |
| Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) | 133 |
| Cross-Site Request Forgery (CSRF) | 52 |
| Improper Control of Filename for Include/Require Statement in PHP Program (‘PHP Remote File Inclusion’) | 25 |
| Exposure of Sensitive Information to an Unauthorized Actor | 24 |
| Authorization Bypass Through User-Controlled Key | 14 |
| Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) | 10 |
| Server-Side Request Forgery (SSRF) | 9 |
| Improper Control of Generation of Code (‘Code Injection’) | 4 |
| Unrestricted Upload of File with Dangerous Type | 3 |
| URL Redirection to Untrusted Site (‘Open Redirect’) | 3 |
| Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) | 2 |
| Authentication Bypass Using an Alternate Path or Channel | 1 |
| Concurrent Execution using Shared Resource with Improper Synchronization (‘Race Condition’) | 1 |
| Deserialization of Untrusted Data | 1 |
| External Control of File Name or Path | 1 |
| Generation of Error Message Containing Sensitive Information | 1 |
| Improper Authentication | 1 |
| Improper Input Validation | 1 |
| Improper Neutralization of Null Byte or NUL Character | 1 |
| Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 1 |
| Improper Privilege Management | 1 |
| Incorrect Authorization | 1 |
| Insertion of Sensitive Information into Log File | 1 |
| Weak Password Recovery Mechanism for Forgotten Password | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 49 | |
| 44 | |
| 35 | |
| 33 | |
| 33 | |
| 21 | |
| 21 | |
| 20 | |
| 11 | |
| 10 | |
| 10 | |
| 9 | |
| 8 | |
| 8 | |
| 8 | |
| 7 | |
| 7 | |
| 7 | |
| 6 | |
| 5 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| 6Storage Rentals | 6storage-rentals |
| 907 – Responsive Multi-Purpose WordPress Theme | wbc907-core |
| Academy LMS – WordPress LMS Plugin for Complete eLearning Solution | academy |
| Accept Donations with PayPal & Stripe | easy-paypal-donation |
| Accessibility Press | ilogic-accessibility |
| Accordion Slider Gallery | accordion-slider-gallery |
| Add Custom Codes – Insert Header, Footer, Custom PHP Snippets, CSS, Javascript | add-custom-codes |
| Add Featured Image Custom Link | custom-url-to-featured-image |
| Addonify – Quick View For WooCommerce | addonify-quick-view |
| Admin and Site Enhancements (ASE) | admin-site-enhancements |
| Advanced Ads – Ad Manager & AdSense | advanced-ads |
| Advanced Classifieds & Directory Pro | advanced-classifieds-and-directory-pro |
| Advanced Custom CSS | advanced-custom-css |
| AdWords Conversion Tracking Code | adwords-conversion-tracking-code |
| AI Content Writing Assistant | ai-content-writing-assistant |
| AI Copilot – ChatGPT Chatbot & AI Engine for Post Automation | ai-copilot |
| AI-Powered Business Directory and Classified Ads Listings – Listdom | listdom |
| All in One Accessibility | all-in-one-accessibility |
| All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements | mystickyelements |
| AM Events | am-events |
| Amazon affiliate lite Plugin | afiliados-de-amazon-lite |
| Animation Addons for Elementor – GSAP Powered Elementor Addons & Website Templates | animation-addons-for-elementor |
| AnyComment | anycomment |
| Appender – Copycat Content Protection for WordPress | appender |
| Appointify | appointify |
| Appointment Booking and Scheduler Plugin – Truebooker | truebooker-appointment-booking |
| Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin | simply-schedule-appointments |
| Appointment Bookings for Zoom GoogleMeet and more – Wappointment | wappointment |
| Astra Widgets | astra-widgets |
| Attachments Handler | attachments-handler |
| Audiomack | audiomack |
| Auto Featured Image (Auto Post Thumbnail) | auto-post-thumbnail |
| Auto Listings – Car Listings & Car Dealership Plugin for WordPress | auto-listings |
| BA Book Everything | ba-book-everything |
| Basticom Framework | basticom-framework |
| Beaver Builder Page Builder – Drag and Drop Website Builder | beaver-builder-lite-version |
| Behance Portfolio Manager | portfolio-manager-powered-by-behance |
| Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss | bp-better-messages |
| Blog Filter Post Filtering | blog-filter |
| Bold Timeline Lite | bold-timeline-lite |
| Booking Calendar | booking |
| Booking calendar, Appointment Booking System | booking-calendar |
| BoomDevs WordPress Coming Soon Plugin | coming-soon-by-boomdevs |
| Bootstrap Modals | bootstrap-modals |
| Branda – White Label & Branding, Free Login Page Customizer | branda-white-labeling |
| Brands for WooCommerce | brands-for-woocommerce |
| Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content | brave-popup-builder |
| BuddyPress Activity Shortcode | bp-activity-shortcode |
| Business Directory Plugin – Easy Listing Directories for WordPress | business-directory-plugin |
| Business Hours for WPBakery – Worker | worker-wpbakery |
| Business hours widget for Elementor – Worker | worker-elementor |
| BWL Knowledge Base Manager | bwl-kb-manager |
| BWL Pro Voting Manager | bwl-pro-voting-manager |
| Calendar | calendar |
| Calendar.online / Kalender.digital – Plugin | kalender-digital |
| Captivate Sync | captivatesync-trade |
| Category Icon | category-icon |
| CC Child Pages | cc-child-pages |
| CedCommerce Integration for Good Market | ced-good-market-integration |
| Chakra test | chakra-test |
| Changelog & Custom List for Elementor | logger-elementor |
| Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist | bit-assist |
| Cincopa video and media plug-in | video-playlist-and-gallery-plugin |
| Claspo – Popups, Spin the Wheel & Email Capture | claspo |
| Co-marquage service-public.fr | co-marquage-service-public |
| Colibri Page Builder | colibri-page-builder |
| Combo Offers WooCommerce | woo-combo-offers |
| Comments – wpDiscuz | wpdiscuz |
| Connect Contact Form 7 and Mailchimp | contact-form-7-mailchimp-extension |
| Contact Form 7 styler for Elementor – Conformer | conformer-elementor |
| Contact Form Widget | new-contact-form-widget |
| Content Fetcher | content-fetcher |
| Content Grid Slider | content-grid-slider |
| Converter for Media – Optimize images | Convert WebP & AVIF | webp-converter-for-media |
| Cooked – Recipe Management | cooked |
| Cookie Banner for GDPR / CCPA – WPLP Cookie Consent | gdpr-cookie-consent |
| CookieHint WP | cookiehint-wp |
| Core Web Vitals & PageSpeed Booster | core-web-vitals-pagespeed-booster |
| Countdowner – Countdown Timer for Elementor | countdowner-elementor |
| Couponer – Discount Coupons for Elementor | couponer-elementor |
| Criptopayer – Crypto Payment Button for Elementor | criptopayer-elementor |
| Crowdsignal Forms | crowdsignal-forms |
| CubeWP Framework | cubewp-framework |
| Curator.io | curatorio |
| Custom Background Changer | custom-background-changer |
| Custom Field Template | custom-field-template |
| Custom Post Status | custom-post-status |
| Custom Style | custom-style |
| Customizable heading for Elementor | headinger-elementor |
| CWW Companion | cww-companion |
| Dashboard Beacon | wp-dashboard-beacon |
| Demo Importer Plus | demo-importer-plus |
| DesignThemes Core | designthemes-core |
| DesignThemes LMS Addon | designthemes-lms-addon |
| DesignThemes Portfolio Addon | designthemes-portfolio-addon |
| Direct Payments WP | direct-payments-wp |
| Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings | directorist |
| Discussion Board – WordPress Forum Plugin | wp-discussion-board |
| DMCA Protection Badge | dmca-badge |
| Docket Cache – Object Cache Accelerator | docket-cache |
| Document Library Lite | document-library-lite |
| Dokan Pro | dokan-pro |
| Download Manager | download-manager |
| Download Media Library | download-media-library |
| Download Plugins and Themes in ZIP from Dashboard | download-plugins-dashboard |
| Draft Notify | draft-notify |
| Easy Appointment Booking & Scheduling System – Webba Booking Calendar | webba-booking-lite |
| Easy Digital Downloads – eCommerce Payments and Subscriptions made easy | easy-digital-downloads |
| Easy Form Builder by WhiteStudio — Drag & Drop Form Builder | easy-form-builder |
| Easy Invoice – PDF Invoice Generator & Quote Builder | easy-invoice |
| Easy Upload Files During Checkout | easy-upload-files-during-checkout |
| EasyIndex | easyindex |
| EasyTest – Simplify A/B Testing | convertpro |
| Editorial Calendar | editorial-calendar |
| Efí Bank | woo-gerencianet-official |
| Eight Day Week Print Workflow | eight-day-week-print-workflow |
| EInvoice App Malaysia | einvoiceapp-malaysia |
| Elementor Website Builder – More Than Just a Page Builder | elementor |
| ELEX WordPress HelpDesk & Customer Ticketing System | elex-helpdesk-customer-support-ticket-system |
| Email Marketing Plugin – WP Email Capture | wp-email-capture |
| Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files | embed-any-document |
| Embeds for YouTube | youtube-embed |
| Essential Addons for Elementor – Popular Elementor Templates & Widgets | essential-addons-for-elementor-lite |
| Event Organiser | event-organiser |
| Events Manager – Calendar, Bookings, Tickets, and more! | events-manager |
| Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin | everest-backup |
| Evergreen Post Tweeter | evergreen-post-tweeter |
| Extra Shortcodes | extra-shortcodes |
| F70 Lead Document Download | f70-lead-document-download |
| Fancy Product Designer | fancy-product-designer |
| FAPI Member | fapi-member |
| Fast User Switching | fast-user-switching |
| Featured Image Generator | featured-image-generator |
| Featured Video for WordPress – VideographyWP | videographywp |
| FiboSearch – Ajax Search for WooCommerce | ajax-search-for-woocommerce |
| File Uploader for WooCommerce | file-uploader-for-woocommerce |
| FileBird – WordPress Media Library Folders & File Manager | filebird |
| Five Star Restaurant Reservations – WordPress Booking Plugin | restaurant-reservations |
| Flex Store Users | flex-store-user |
| FlippingBook | flippingbook |
| Flowbox | flowbox |
| FluentAuth – The Ultimate Authorization & Security Plugin for WordPress | fluent-security |
| FormFacade – Embed Google Forms in your website | formfacade |
| Forumax – Advanced Community Forum Plugin | bbp-core |
| Fox LMS – WordPress LMS Plugin | fox-lms |
| Free Shipping Bar: Amount Left for Free Shipping for WooCommerce | amount-left-free-shipping-woocommerce |
| Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin | frontend-post-submission-manager-lite |
| FV Simpler SEO | fv-all-in-one-seo-pack |
| Gift Hunt | gift-hunt |
| GiveWP – Donation Plugin and Fundraising Platform | give |
| Gmedia Photo Gallery | grand-media |
| Google AdSense for Responsive Design – GARD | google-adsense-for-responsive-design-gard |
| Google Maps for Elementor | gmaper-elementor |
| Google Street View for Elementor – Walker | walker-elementor |
| Graphist – Graphs & Charts for Elementor | graphist-elementor |
| Greenhouse Job Board | greenhouse-job-board |
| GS Portfolio for Envato | gs-envato-portfolio |
| Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | essential-blocks |
| Gutenverse Form – Contact Form Builder, Booking, Reservation, Subscribe for Block Editor | gutenverse-form |
| Happy Addons for Elementor | happy-elementor-addons |
| HAPPY – Helpdesk Support Ticket System | happy-helpdesk-support-ticket-system |
| Health Check & Troubleshooting | health-check |
| Heateor Social Login WordPress | heateor-social-login |
| Hide Plugins | hide-plugins |
| Highlight and Share – Social Text and Image Sharing | highlight-and-share |
| History Timeline for Biography, Company History & Event Timeline | timeline-awesome |
| HomeFix Elementor Portfolio | homefix-ele-portfolio |
| Hotel Booking | nd-booking |
| HR Management Lite | hr-management-lite |
| HTML Forms – Simple WordPress Forms Plugin | html-forms |
| HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player | html5-audio-player |
| Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN | hummingbird-performance |
| HUSKY – Products Filter Professional for WooCommerce | woocommerce-products-filter |
| IF AS Shortcode | if-as-shortcode |
| Image Caption Hover Pro | image-caption-hover-pro |
| Image Photo Gallery Final Tiles Grid | final-tiles-grid-gallery-lite |
| Import into Easy Property Listings | easy-property-listings-xml-csv-import |
| Inboxify Sign Up Form | inboxify-sign-up-form |
| iNext Woo Pincode Checker | inext-woo-pincode-checker |
| Innovs WPBakery Visual Composer WHMCS Elements | void-visual-whmcs-element |
| Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms | cf7-hubspot |
| Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free | funnelforms-free |
| Interactive Content – H5P | h5p |
| Invelity SPS connect | invelity-sps-connect |
| JetBlog | jet-blog |
| JetFormBuilder — Dynamic Blocks Form Builder | jetformbuilder |
| JetPopup | jet-popup |
| JetSearch | jet-search |
| JetTabs | jet-tabs |
| Job Postings | job-postings |
| Knowledge Base documentation & wiki plugin – BasePress Docs | basepress |
| LearnPress – WordPress LMS Plugin | learnpress |
| Link Library | link-library |
| Live Composer – Free WordPress Website Builder | live-composer-page-builder |
| Live Shopping & Shoppable Videos For WooCommerce | live-shopping-video-streams |
| Livemesh Addons for Beaver Builder | addons-for-beaver-builder |
| Locatoraid Store Locator | locatoraid |
| Logo Slider , Logo Carousel , Logo showcase , Client Logo | tc-logo-slider |
| Lucky Wheel for WooCommerce – Spin a Sale | woo-lucky-wheel |
| MailerLite – WooCommerce integration | woo-mailerlite |
| MapSVG – Vector maps, Image maps, Google Maps | mapsvg-lite-interactive-vector-maps |
| MAS Videos | masvideos |
| Master Addons For Elementor – White Label, Free Widgets, Hover Effects, Conditions, & Animations | master-addons |
| Maximum Products per User for WooCommerce | maximum-products-per-user-for-woocommerce |
| Meks Quick Plugin Disabler | meks-quick-plugin-disabler |
| Membership For WooCommerce – WordPress Membership Plugin, Restrict Content, Build Online Communities, Paywall & Content Dripping | membership-for-woocommerce |
| Membership Plugin – Restrict Content | restrict-content |
| Mergado Pack | mergado-marketing-pack |
| Migration, Backup, Staging – WPvivid Backup & Migration | wpvivid-backuprestore |
| Mobile builder | mobile-builder |
| ModelTheme Addons for WPBakery and Elementor | modeltheme-addons-for-wpbakery |
| Modula Image Gallery – Photo Grid & Video Gallery | modula-best-grid-gallery |
| Multi-Step Checkout for WooCommerce | wp-multi-step-checkout |
| MX Time Zone Clocks | mx-time-zone-clocks |
| My auctions allegro | my-auctions-allegro-free-edition |
| My Calendar – Accessible Event Manager | my-calendar |
| MyBookTable Bookstore by Stormhill Media | mybooktable |
| myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program. | mycred |
| MyD Delivery | myd-delivery |
| Newsletter – Send awesome emails from WordPress | newsletter |
| Newsletters | newsletters-lite |
| Ninja Forms – The Contact Form Builder That Grows With You | ninja-forms |
| Ninja Tables – Easy Data Table Builder | ninja-tables |
| Noindex by Path | noindex-by-path |
| OneSignal – Web Push Notifications | onesignal-free-web-push-notifications |
| OpenHook | thesis-openhook |
| OpenID Connect Generic Client | daggerhart-openid-connect-generic |
| Order Cancellation & Returns for WooCommerce | wc-order-cancellation-return |
| Orders Chat for WooCommerce | orders-chat-for-woocommerce |
| Overstock Affiliate Links | overstock-affiliate-links |
| Page Title Splitter | page-title-splitter |
| PhastPress | phastpress |
| Photo Block – A Modern Image Block With Lightbox and Caption Support | photo-block |
| Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery | nextgen-gallery |
| Pixel Manager for WooCommerce – Track Conversions and Analytics, Google Ads, TikTok and more | woocommerce-google-adwords-conversion-tracking-tag |
| PixelYourSite – Your smart PIXEL (TAG) & API Manager | pixelyoursite |
| Plugin Optimizer – Speed Up Your WordPress Like Never Before | plugin-optimizer |
| Poll, Survey & Quiz Maker Plugin by Opinion Stage | social-polls-by-opinionstage |
| Popping Sidebars and Widgets Light | popping-sidebars-and-widgets-light |
| Poptics – Popup Builder, Email Opt-ins, Exit-Intent & WooCommerce Popups Sales | poptics |
| Popup Box – Create Countdown, Coupon, Video, Contact Form Popups | ays-popup-box |
| Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers | popup-builder-block |
| Portfolio Gallery – Responsive Image Gallery | gallery-portfolio |
| Post Grid | post-grid |
| Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX | ultimate-post |
| Post Snippets – Custom WordPress Code Snippets Customizer | post-snippets |
| Postie | postie |
| Premium Addons for Elementor – Powerful Elementor Templates & Widgets | premium-addons-for-elementor |
| Pretty Google Calendar | pretty-google-calendar |
| Prime Slider – Addons for Elementor | bdthemes-prime-slider-lite |
| Print Anywhere & Create PDFs of Order Receipts, Invoices, Labels & More. | print-google-cloud-print-gcp-woocommerce |
| Print Invoice & Delivery Notes for WooCommerce | woocommerce-delivery-notes |
| Product Delivery Date for WooCommerce – Lite | product-delivery-date-for-woocommerce-lite |
| Product Loops for WooCommerce | product-loops |
| Product Table for WooCommerce | woo-product-table |
| Project Manager – AI-Powered Project & Task Manager with Kanban Board & Gantt Chart | wedevs-project-manager |
| Protect WP Admin | protect-wp-admin |
| QuadLayers TikTok Feed | wp-tiktok-feed |
| Questionar – FAQ Accordions for Elementor | questionar-elementor |
| Quran Gateway | quran-gateway |
| Read More & Accordion | expand-maker |
| Real 3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder | real3d-flipbook-lite |
| Realbig For WordPress | realbig-media |
| Recent Posts From Each Category | recent-posts-from-each-category |
| Redirection for Contact Form 7 | wpcf7-redirect |
| RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login | custom-registration-form-builder-with-submission-manager |
| Rencontre – Dating Site | rencontre |
| Request a Quote Form Plugin – Price Quote Request Management Made Easy | request-a-quote |
| RESPONSIVE AND SWIPE SLIDER! | responsive-and-swipe-slider |
| Responsive Block Control – Hide blocks based on display width | responsive-block-control |
| Responsive Posts Carousel WordPress Plugin | responsive-posts-carousel-pro |
| RestroPress – Online Food Ordering System | restropress |
| Reuters Direct | reuters-direct |
| Review Disclaimer | review-disclaimer |
| Robots.txt rewrite | robotstxt-rewrite |
| Sailing | sailing |
| SALESmanago & Leadoo | salesmanago |
| Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories | post-expirator |
| Semrush Content Toolkit | semrush-contentshake |
| SensitiveTagCloud | sensitive-tag-cloud |
| SEO Slider | seo-slider |
| Serial Codes Generator and Validator with WooCommerce Support | serial-codes-generator-and-validator |
| Series | series |
| Sermon Manager | sermon-manager-for-wordpress |
| Share, Print and PDF Products for WooCommerce | share-print-pdf-woocommerce |
| Shortcodes and extra features for Phlox theme | auxin-elements |
| Signature Add-On for Gravity Forms | gravity-signature-forms-add-on |
| Simple Archive Generator | simple-archive-generator |
| Simple Calendar – Google Calendar Plugin | google-calendar-events |
| Simple File List | simple-file-list |
| Simple Folio | simple-folio |
| Simple Keyword to Link | simple-keyword-to-link |
| Simple Like Page Plugin | simple-facebook-plugin |
| Simple Link Directory | simple-link-directory |
| SiteLock Security – WP Hardening, Login Security & Malware Scans | sitelock |
| Sitewide Notice WP | sitewide-notice-wp |
| SlimStat Analytics | wp-slimstat |
| Sliper – Full-screen Slider for Elementor | sliper-elementor |
| Sober | sober |
| Social Profilr | social-profilr-display-social-network-profile |
| Sticky Notes for WP Dashboard | wb-sticky-notes |
| Stratum Widgets for Elementor | stratum |
| Strong Testimonials | strong-testimonials |
| Subscribe to Unlock Lite – Opt In Content Locker Plugin for WordPress | subscribe-to-unlock-lite |
| Sunshine Photo Cart: Free Client Photo Galleries for Photographers | sunshine-photo-cart |
| SureForms – Contact Form, Payment Form & Other Custom Form Builder | sureforms |
| Sweet Energy Efficiency | sweet-energy-efficiency |
| Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent | tablesome |
| Tainacan | tainacan |
| Tasty Recipes Lite | tasty-recipes-lite |
| Terms descriptions | terms-descriptions |
| The Moneytizer | the-moneytizer |
| Themebeez Toolkit | themebeez-toolkit |
| Themify Portfolio Post | themify-portfolio-post |
| ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin | thirstyaffiliates |
| Tooltips for WordPress | wordpress-tooltips |
| Trash Duplicate and 301 Redirect | trash-duplicate-and-301-redirect |
| TS Poll – Survey, Versus Poll, Image Poll, Video Poll | poll-wp |
| Twitch Player | ttv-easy-embed-player |
| Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin | ultimate-member |
| UnGrabber | ungrabber |
| User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds | userfeedback-lite |
| User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration | wp-user-frontend |
| User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin | user-registration |
| User Specific Content | user-specific-content |
| User Submitted Posts – Enable Users to Submit Posts from the Front End | user-submitted-posts |
| UserPro – Community and User Profile WordPress Plugin | userpro |
| UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP | userswp |
| UseStrict’s Calendly Embedder | cal-embedder-lite |
| Valenti Engine | valenti-engine |
| Varnish/Nginx Proxy Caching | vcaching |
| Vimeotheque – Vimeo WordPress Plugin & Video Gallery | codeflavors-vimeo-video-post-lite |
| Virusdie – One-click website security | virusdie |
| VK Google Job Posting Manager | vk-google-job-posting-manager |
| VPSUForm – Drag & Drop Contact Form Builder with Email Automation | v-form |
| Watcher – Flexible Video Player for Elementor | watcher-elementor |
| Watu Quiz | watu |
| Wawp – Order Notifications, OTP Login, Checkout Verifications and Country Code | automation-web-platform |
| Wbcom Designs – Private Community for BuddyPress | lock-my-bp |
| WC Builder – WooCommerce Page Builder for WPBakery | wc-builder |
| WCFM Marketplace – Multivendor Marketplace for WooCommerce | wc-multivendor-marketplace |
| WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible | wc-frontend-manager |
| Web and WooCommerce Addons for WPBakery Builder | vc-addons-by-bit14 |
| Web Directory Free | web-directory-free |
| Web to SugarCRM Lead | web-to-sugarcrm-lead |
| WebMan Amplifier | webman-amplifier |
| WeDesignTech Portfolio | wedesigntech-portfolio |
| weForms – Easy Drag & Drop Contact Form Builder For WordPress | weforms |
| WH Tweaks | wh-tweaks |
| Widgets for Social Photo Feed | social-photo-feed-widget |
| WING WordPress Migrator | wing-migrator |
| Wiremo – Product Reviews for WooCommerce | woo-reviews-by-wiremo |
| WishSuite – Wishlist for WooCommerce | wishsuite |
| WooCommerce Parcelas | woocommerce-parcelas |
| WordPress & WooCommerce Scraper Plugin, Import Data from Any WebSite. | wp_scraper |
| WordPress User Extra Fields | wp-user-extra-fields |
| WP Adminify – White Label WordPress, Admin Menu Editor, Login Customizer | adminify |
| WP Advanced PDF | wp-advanced-pdf |
| WP Attachments | wp-attachments |
| WP Custom Admin Interface | wp-custom-admin-interface |
| WP DB Booster | wp-db-booster |
| WP Document Revisions | wp-document-revisions |
| WP eBay Product Feeds | ebay-feeds-for-wordpress |
| WP Export Categories & Taxonomies | wp-export-categories-taxonomies |
| WP Gmail SMTP | wp-gmail-smtp |
| WP Hallo Welt | wp-hallo-welt |
| WP Import – Ultimate CSV XML Importer for WordPress | wp-ultimate-csv-importer |
| WP JobHunt | wp-jobhunt |
| WP Post Signature | wp-post-signature |
| WP Recipe Maker | wp-recipe-maker |
| WP Social Ninja – Embed Social Feeds, User Reviews & Chat Widgets | wp-social-reviews |
| WP Telegram Widget and Join Link | wptelegram-widget |
| Wp Text Slider Widget | wp-text-slider-widget |
| WP Time Slots Booking Form | wp-time-slots-booking-form |
| WP Visitor Statistics (Real Time Traffic) | wp-stats-manager |
| WP-CalDav2ICS | wp-caldav2ics |
| WP-EasyArchives | wp-easyarchives |
| WP-ShowHide | wp-showhide |
| WPBulky – WordPress Bulk Edit Post Types | wpbulky-wp-bulk-edit-post-types |
| WPCal.io – Easy Meeting Scheduler | wpcal |
| WPCOM Member | wpcom-member |
| WpStream – Live Streaming, Video on Demand, Pay Per View | wpstream |
| XStore Core | et-core-plugin |
| Yaad Sarig Payment Gateway For WC | yaad-sarig-payment-gateway-for-wc |
| Yada Wiki | yada-wiki |
| YITH Slider for page builders | yith-slider-for-page-builders |
| Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress | youzify |
| Zephyr Project Manager | zephyr-project-manager |
| Zoho ZeptoMail | transmail |
| پلاگین پرداخت دلخواه | pardakht-delkhah |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Aora – Home & Lifestyle Elementor WooCommerce Theme | aora |
| Arcane – The Gaming Community Theme | arcane |
| Backpack Traveler – Modern Travel Blog WordPress Theme | backpacktraveler |
| Besa – Elementor Marketplace WooCommerce Theme | besa |
| bookory | bookory |
| Cinerama – A WordPress Theme for Movie Studios and Filmmakers | cinerama |
| Consulting | consulting |
| Diza – Pharmacy Store Elementor WooCommerce Theme | diza |
| ekommart – All-in-one eCommerce WordPress Theme | ekommart |
| Fana – Fashion Shop WordPress Theme | fana |
| Fashion – WooCommerce Responsive WordPress Theme | fashion2 |
| FiveStar – Hotel Booking WordPress Theme | fivestar |
| Genemy – Creative Minimal Landing Page Builder for Digital Startup Design Studio Agency in Marketing | genemy |
| GreenMart – Organic & Food WooCommerce WordPress Theme | greenmart |
| Hara – Beauty and Cosmetics Shop WooCommerce Theme | hara |
| Lekker – Portfolio WordPress Theme | lekker |
| Medical Equipment eCommerce WordPress Theme | medicalequipment |
| Melos | melos |
| Minamaze | minamaze |
| Nika – Medical Elementor WooCommerce Theme | nika |
| Personal Portfolio Resume Theme | Kerge | kerge |
| Puca – Optimized Mobile WooCommerce Theme | puca |
| sailing | sailing |
| Shuttle | shuttle |
| Struktur – Creative Agency WordPress Theme | struktur |
| Urna – All-in-one WooCommerce WordPress Theme | urna |
| Vireo | vireo |
| Wilmër – Construction WordPress Theme | wilmer |
| Zota – Elementor Multi-Purpose WooCommerce Theme | zota |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
CVE-ID
CVE-2025-14998
CVE-2025-14998
Patch Status
Patched
Patched
Published
Jan 1, 2026
Jan 1, 2026
Affected Software
Branda – White Label & Branding, Free Login Page Customizer
Branda – White Label & Branding, Free Login Page Customizer
Researcher
File Uploader for WooCommerce <= 1.0.3 – Unauthenticated Arbitrary File Upload via add-image-data
9.8
CVE-ID
CVE-2025-13329
CVE-2025-13329
Patch Status
Patched
Patched
Published
Dec 19, 2025
Dec 19, 2025
Affected Software
File Uploader for WooCommerce
File Uploader for WooCommerce
Researcher
CVE-ID
CVE-2025-13619
CVE-2025-13619
Patch Status
Unpatched
Unpatched
Published
Dec 19, 2025
Dec 19, 2025
Affected Software
Flex Store Users
Flex Store Users
Researcher
CVE-ID
CVE-2025-14156
CVE-2025-14156
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Fox LMS – WordPress LMS Plugin
Fox LMS – WordPress LMS Plugin
Researcher
CVE-ID
CVE-2025-68860
CVE-2025-68860
Patch Status
Unpatched
Unpatched
Published
Dec 26, 2025
Dec 26, 2025
Affected Software
Mobile builder
Mobile builder
Researcher
CVE-ID
CVE-2025-14388
CVE-2025-14388
Patch Status
Patched
Patched
Published
Dec 22, 2025
Dec 22, 2025
Affected Software
PhastPress
PhastPress
Researcher
CVE-ID
CVE-2025-13773
CVE-2025-13773
Patch Status
Patched
Patched
Published
Dec 23, 2025
Dec 23, 2025
Affected Software
Print Invoice & Delivery Notes for WooCommerce
Print Invoice & Delivery Notes for WooCommerce
Researchers
CVE-ID
CVE-2025-14364
CVE-2025-14364
Patch Status
Patched
Patched
Published
Dec 17, 2025
Dec 17, 2025
Affected Software
Demo Importer Plus
Demo Importer Plus
Researcher
CVE-ID
CVE-2025-68897
CVE-2025-68897
Patch Status
Unpatched
Unpatched
Published
Dec 25, 2025
Dec 25, 2025
Affected Software
IF AS Shortcode
IF AS Shortcode
Researcher
CVE-ID
CVE-2025-68562
CVE-2025-68562
Patch Status
Patched
Patched
Published
Dec 24, 2025
Dec 24, 2025
Affected Software
MapSVG – Vector maps, Image maps, Google Maps
MapSVG – Vector maps, Image maps, Google Maps
Researcher
CVE-ID
CVE-2025-13641
CVE-2025-13641
Patch Status
Patched
Patched
Published
Dec 17, 2025
Dec 17, 2025
Affected Software
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery
Researcher
CVE-ID
CVE-2025-12934
CVE-2025-12934
Patch Status
Patched
Patched
Published
Dec 22, 2025
Dec 22, 2025
Affected Software
Beaver Builder Page Builder – Drag and Drop Website Builder
Beaver Builder Page Builder – Drag and Drop Website Builder
Researcher
CVE-ID
CVE-2025-68877
CVE-2025-68877
Patch Status
Unpatched
Unpatched
Published
Dec 26, 2025
Dec 26, 2025
Affected Software
CedCommerce Integration for Good Market
CedCommerce Integration for Good Market
Researcher
CVE-ID
CVE-2025-68870
CVE-2025-68870
Patch Status
Unpatched
Unpatched
Published
Dec 25, 2025
Dec 25, 2025
Affected Software
CookieHint WP
CookieHint WP
Researcher
CVE-ID
CVE-2025-68506
CVE-2025-68506
Patch Status
Patched
Patched
Published
Dec 24, 2025
Dec 24, 2025
Affected Software
Docket Cache – Object Cache Accelerator
Docket Cache – Object Cache Accelerator
Researcher
CVE-ID
CVE-2025-69034
CVE-2025-69034
Patch Status
Unpatched
Unpatched
Published
Dec 30, 2025
Dec 30, 2025
Affected Software
Lekker – Portfolio WordPress Theme
Lekker – Portfolio WordPress Theme
Researcher
CVE-ID
CVE-2025-14800
CVE-2025-14800
Patch Status
Patched
Patched
Published
Dec 20, 2025
Dec 20, 2025
Affected Software
Redirection for Contact Form 7
Redirection for Contact Form 7
Researcher
CVE-ID
CVE-2025-14002
CVE-2025-14002
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
WPCOM Member
WPCOM Member
Researcher
CVE-ID
CVE-2025-7782
CVE-2025-7782
Patch Status
Unpatched
Unpatched
Published
Dec 20, 2025
Dec 20, 2025
Affected Software
WP JobHunt
WP JobHunt
Researcher
CVE-ID
CVE-2025-68985
CVE-2025-68985
Patch Status
Unpatched
Unpatched
Published
Dec 20, 2025
Dec 20, 2025
Affected Software
Aora – Home & Lifestyle Elementor WooCommerce Theme
Aora – Home & Lifestyle Elementor WooCommerce Theme
Researcher
CVE-ID
CVE-2025-67530
CVE-2025-67530
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Besa – Elementor Marketplace WooCommerce Theme
Besa – Elementor Marketplace WooCommerce Theme
Researcher
CVE-ID
CVE-2025-14383
CVE-2025-14383
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Booking Calendar
Booking Calendar
Researcher
CVE-ID
CVE-2025-68530
CVE-2025-68530
Patch Status
Patched
Patched
Published
Jan 1, 2026
Jan 1, 2026
Affected Software
bookory
bookory
Researcher
CVE-ID
CVE-2025-68987
CVE-2025-68987
Patch Status
Unpatched
Unpatched
Published
Dec 20, 2025
Dec 20, 2025
Affected Software
Cinerama – A WordPress Theme for Movie Studios and Filmmakers
Cinerama – A WordPress Theme for Movie Studios and Filmmakers
Researcher
CVE-ID
CVE-2025-68544
CVE-2025-68544
Patch Status
Patched
Patched
Published
Dec 23, 2025
Dec 23, 2025
Affected Software
Diza – Pharmacy Store Elementor WooCommerce Theme
Diza – Pharmacy Store Elementor WooCommerce Theme
Researcher
CVE-ID
CVE-2025-62114
CVE-2025-62114
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Download Media Library
Download Media Library
Researcher
CVE-ID
CVE-2025-67525
CVE-2025-67525
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
ekommart – All-in-one eCommerce WordPress Theme
ekommart – All-in-one eCommerce WordPress Theme
Researcher
CVE-ID
CVE-2025-68540
CVE-2025-68540
Patch Status
Patched
Patched
Published
Dec 28, 2025
Dec 28, 2025
Affected Software
Fana – Fashion Shop WordPress Theme
Fana – Fashion Shop WordPress Theme
Researcher
CVE-ID
CVE-2025-67529
CVE-2025-67529
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Fashion – WooCommerce Responsive WordPress Theme
Fashion – WooCommerce Responsive WordPress Theme
Researcher
CVE-ID
CVE-2025-68983
CVE-2025-68983
Patch Status
Unpatched
Unpatched
Published
Dec 20, 2025
Dec 20, 2025
Affected Software
GreenMart – Organic & Food WooCommerce WordPress Theme
GreenMart – Organic & Food WooCommerce WordPress Theme
Researcher
CVE-ID
CVE-2025-67532
CVE-2025-67532
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Hara – Beauty and Cosmetics Shop WooCommerce Theme
Hara – Beauty and Cosmetics Shop WooCommerce Theme
Researcher
CVE-ID
CVE-2025-14437
CVE-2025-14437
Patch Status
Patched
Patched
Published
Dec 17, 2025
Dec 17, 2025
CVE-ID
CVE-2025-14071
CVE-2025-14071
Patch Status
Unpatched
Unpatched
Published
Dec 20, 2025
Dec 20, 2025
Affected Software
Live Composer – Free WordPress Website Builder
Live Composer – Free WordPress Website Builder
Researcher
CVE-ID
CVE-2025-62753
CVE-2025-62753
Patch Status
Unpatched
Unpatched
Published
Dec 30, 2025
Dec 30, 2025
Affected Software
MAS Videos
MAS Videos
Researcher
CVE-ID
CVE-2025-68546
CVE-2025-68546
Patch Status
Patched
Patched
Published
Dec 23, 2025
Dec 23, 2025
Affected Software
Nika – Medical Elementor WooCommerce Theme
Nika – Medical Elementor WooCommerce Theme
Researcher
CVE-ID
CVE-2025-11924
CVE-2025-11924
Patch Status
Patched
Patched
Published
Dec 16, 2025
Dec 16, 2025
Affected Software
Ninja Forms – The Contact Form Builder That Grows With You
Ninja Forms – The Contact Form Builder That Grows With You
Researchers
CVE-ID
CVE-2025-12980
CVE-2025-12980
Patch Status
Patched
Patched
Published
Dec 20, 2025
Dec 20, 2025
Affected Software
Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX
Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX
Researcher
CVE-ID
CVE-2025-68984
CVE-2025-68984
Patch Status
Unpatched
Unpatched
Published
Dec 20, 2025
Dec 20, 2025
Affected Software
Puca – Optimized Mobile WooCommerce Theme
Puca – Optimized Mobile WooCommerce Theme
Researcher
CVE-ID
CVE-2025-68996
CVE-2025-68996
Patch Status
Patched
Patched
Published
Dec 25, 2025
Dec 25, 2025
Affected Software
Responsive Posts Carousel WordPress Plugin
Responsive Posts Carousel WordPress Plugin
Researcher
CVE-ID
CVE-2025-67526
CVE-2025-67526
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
sailing
sailing
Researcher
CVE-ID
CVE-2025-68563
CVE-2025-68563
Patch Status
Patched
Patched
Published
Dec 24, 2025
Dec 24, 2025
Affected Software
Subscribe to Unlock Lite – Opt In Content Locker Plugin for WordPress
Subscribe to Unlock Lite – Opt In Content Locker Plugin for WordPress
Researcher
CVE-ID
CVE-2025-62139
CVE-2025-62139
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Terms descriptions
Terms descriptions
Researcher
CVE-ID
CVE-2025-67528
CVE-2025-67528
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Urna – All-in-one WooCommerce WordPress Theme
Urna – All-in-one WooCommerce WordPress Theme
Researcher
CVE-ID
CVE-2025-62126
CVE-2025-62126
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Varnish/Nginx Proxy Caching
Varnish/Nginx Proxy Caching
Researcher
CVE-ID
CVE-2025-67515
CVE-2025-67515
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Wilmër – Construction WordPress Theme
Wilmër – Construction WordPress Theme
Researcher
CVE-ID
CVE-2025-68537
CVE-2025-68537
Patch Status
Patched
Patched
Published
Dec 27, 2025
Dec 27, 2025
Affected Software
Zota – Elementor Multi-Purpose WooCommerce Theme
Zota – Elementor Multi-Purpose WooCommerce Theme
Researcher
CVE-ID
CVE-2025-13592
CVE-2025-13592
Patch Status
Patched
Patched
Published
Dec 29, 2025
Dec 29, 2025
Affected Software
Advanced Ads – Ad Manager & AdSense
Advanced Ads – Ad Manager & AdSense
Researcher
CVE-ID
CVE-2025-9343
CVE-2025-9343
Patch Status
Patched
Patched
Published
Dec 20, 2025
Dec 20, 2025
Affected Software
ELEX WordPress HelpDesk & Customer Ticketing System
ELEX WordPress HelpDesk & Customer Ticketing System
Researcher
CVE-ID
CVE-2025-13999
CVE-2025-13999
Patch Status
Patched
Patched
Published
Dec 18, 2025
Dec 18, 2025
Affected Software
HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player
HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player
Researcher
CVE-ID
CVE-2025-67989
CVE-2025-67989
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Personal Portfolio Resume Theme | Kerge
Personal Portfolio Resume Theme | Kerge
Researcher
CVE-ID
CVE-2025-14509
CVE-2025-14509
Patch Status
Patched
Patched
Published
Dec 29, 2025
Dec 29, 2025
Affected Software
Lucky Wheel for WooCommerce – Spin a Sale
Lucky Wheel for WooCommerce – Spin a Sale
Researcher
CVE-ID
CVE-2025-14151
CVE-2025-14151
Patch Status
Patched
Patched
Published
Dec 18, 2025
Dec 18, 2025
Affected Software
SlimStat Analytics
SlimStat Analytics
Researcher
CVE-ID
CVE-2025-14855
CVE-2025-14855
Patch Status
Patched
Patched
Published
Dec 20, 2025
Dec 20, 2025
Affected Software
SureForms – Contact Form, Payment Form & Other Custom Form Builder
SureForms – Contact Form, Payment Form & Other Custom Form Builder
Researcher
CVE-ID
CVE-2025-62088
CVE-2025-62088
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
WordPress & WooCommerce Scraper Plugin, Import Data from Any WebSite.
WordPress & WooCommerce Scraper Plugin, Import Data from Any WebSite.
Researcher
CVE-ID
CVE-2025-69014
CVE-2025-69014
Patch Status
Unpatched
Unpatched
Published
Dec 27, 2025
Dec 27, 2025
Affected Software
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress
Researcher
CVE-ID
CVE-2025-66115
CVE-2025-66115
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Easy Invoice – PDF Invoice Generator & Quote Builder
Easy Invoice – PDF Invoice Generator & Quote Builder
Researcher
CVE-ID
CVE-2025-68519
CVE-2025-68519
Patch Status
Patched
Patched
Published
Dec 26, 2025
Dec 26, 2025
Affected Software
Brands for WooCommerce
Brands for WooCommerce
Researcher
CVE-ID
CVE-2025-68990
CVE-2025-68990
Patch Status
Unpatched
Unpatched
Published
Dec 22, 2025
Dec 22, 2025
Affected Software
BWL Pro Voting Manager
BWL Pro Voting Manager
Researcher
CVE-ID
CVE-2025-13231
CVE-2025-13231
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Fancy Product Designer
Fancy Product Designer
Researcher
CVE-ID
Unknown
Unknown
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
MailerLite – WooCommerce integration
MailerLite – WooCommerce integration
Researcher
CVE-ID
CVE-2025-68516
CVE-2025-68516
Patch Status
Patched
Patched
Published
Dec 22, 2025
Dec 22, 2025
Researcher
CVE-ID
CVE-2025-13880
CVE-2025-13880
Patch Status
Patched
Patched
Published
Dec 16, 2025
Dec 16, 2025
Affected Software
WP Social Ninja – Embed Social Feeds, User Reviews & Chat Widgets
WP Social Ninja – Embed Social Feeds, User Reviews & Chat Widgets
Researcher
CVE-ID
CVE-2025-68550
CVE-2025-68550
Patch Status
Patched
Patched
Published
Dec 23, 2025
Dec 23, 2025
Affected Software
WPBulky – WordPress Bulk Edit Post Types
WPBulky – WordPress Bulk Edit Post Types
Researcher
CVE-ID
CVE-2025-67623
CVE-2025-67623
Patch Status
Unpatched
Unpatched
Published
Dec 20, 2025
Dec 20, 2025
Affected Software
6Storage Rentals
6Storage Rentals
Researcher
CVE-ID
CVE-2025-68527
CVE-2025-68527
Patch Status
Patched
Patched
Published
Dec 30, 2025
Dec 30, 2025
Affected Software
Academy LMS – WordPress LMS Plugin for Complete eLearning Solution
Academy LMS – WordPress LMS Plugin for Complete eLearning Solution
Researcher
CVE-ID
CVE-2025-62149
CVE-2025-62149
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Researcher
CVE-ID
CVE-2025-62119
CVE-2025-62119
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Add Featured Image Custom Link
Add Featured Image Custom Link
Researcher
AdWords Conversion Tracking Code <= 1.0 – Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-ID
CVE-2025-62118
CVE-2025-62118
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
AdWords Conversion Tracking Code
AdWords Conversion Tracking Code
Researcher
CVE-ID
CVE-2025-49357
CVE-2025-49357
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Audiomack
Audiomack
Researcher
CVE-ID
CVE-2025-69089
CVE-2025-69089
Patch Status
Patched
Patched
Published
Dec 30, 2025
Dec 30, 2025
Affected Software
Auto Listings – Car Listings & Car Dealership Plugin for WordPress
Auto Listings – Car Listings & Car Dealership Plugin for WordPress
Researcher
CVE-ID
CVE-2025-14449
CVE-2025-14449
Patch Status
Patched
Patched
Published
Dec 18, 2025
Dec 18, 2025
Affected Software
BA Book Everything
BA Book Everything
Researcher
CVE-ID
CVE-2025-69033
CVE-2025-69033
Patch Status
Patched
Patched
Published
Dec 29, 2025
Dec 29, 2025
Affected Software
Blog Filter Post Filtering
Blog Filter Post Filtering
Researcher
CVE-ID
CVE-2025-68513
CVE-2025-68513
Patch Status
Patched
Patched
Published
Dec 27, 2025
Dec 27, 2025
Affected Software
Bold Timeline Lite
Bold Timeline Lite
Researcher
CVE-ID
CVE-2025-62095
CVE-2025-62095
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Bootstrap Modals
Bootstrap Modals
Researcher
BuddyPress Activity Shortcode <= 1.1.8 – Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-ID
CVE-2025-62760
CVE-2025-62760
Patch Status
Patched
Patched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
BuddyPress Activity Shortcode
BuddyPress Activity Shortcode
Researcher
CVE-ID
CVE-2025-68992
CVE-2025-68992
Patch Status
Unpatched
Unpatched
Published
Dec 22, 2025
Dec 22, 2025
Affected Software
BWL Knowledge Base Manager
BWL Knowledge Base Manager
Researcher
CVE-ID
CVE-2025-68991
CVE-2025-68991
Patch Status
Unpatched
Unpatched
Published
Dec 22, 2025
Dec 22, 2025
Affected Software
BWL Pro Voting Manager
BWL Pro Voting Manager
Researcher
CVE-ID
CVE-2025-62752
CVE-2025-62752
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Calendar.online / Kalender.digital – Plugin
Calendar.online / Kalender.digital – Plugin
Researcher
CVE-ID
CVE-2025-13608
CVE-2025-13608
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
CC Child Pages
CC Child Pages
Researcher
CVE-ID
CVE-2025-11747
CVE-2025-11747
Patch Status
Patched
Patched
Published
Dec 18, 2025
Dec 18, 2025
Affected Software
Colibri Page Builder
Colibri Page Builder
Researcher
CVE-ID
CVE-2025-69088
CVE-2025-69088
Patch Status
Patched
Patched
Published
Dec 30, 2025
Dec 30, 2025
Affected Software
Combo Offers WooCommerce
Combo Offers WooCommerce
Researcher
CVE-ID
CVE-2025-63032
CVE-2025-63032
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Consulting
Consulting
Researcher
CVE-ID
CVE-2025-49358
CVE-2025-49358
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Content Fetcher
Content Fetcher
Researcher
CVE-ID
CVE-2025-62742
CVE-2025-62742
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Curator.io
Curator.io
Researcher
CVE-ID
CVE-2025-62125
CVE-2025-62125
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Custom Background Changer
Custom Background Changer
Researcher
CVE-ID
CVE-2025-68607
CVE-2025-68607
Patch Status
Unpatched
Unpatched
Published
Dec 24, 2025
Dec 24, 2025
Affected Software
Custom Field Template
Custom Field Template
Researcher
CVE-ID
CVE-2025-68978
CVE-2025-68978
Patch Status
Unpatched
Unpatched
Published
Dec 17, 2025
Dec 17, 2025
Affected Software
DesignThemes Core
DesignThemes Core
Researcher
CVE-ID
CVE-2025-68977
CVE-2025-68977
Patch Status
Unpatched
Unpatched
Published
Dec 17, 2025
Dec 17, 2025
Affected Software
DesignThemes Portfolio Addon
DesignThemes Portfolio Addon
Researcher
CVE-ID
CVE-2025-11220
CVE-2025-11220
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Elementor Website Builder – More Than Just a Page Builder
Elementor Website Builder – More Than Just a Page Builder
Researcher
CVE-ID
CVE-2025-12885
CVE-2025-12885
Patch Status
Patched
Patched
Published
Dec 17, 2025
Dec 17, 2025
Affected Software
Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files
Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files
Researcher
CVE-ID
CVE-2025-13977
CVE-2025-13977
Patch Status
Patched
Patched
Published
Dec 16, 2025
Dec 16, 2025
Affected Software
Essential Addons for Elementor – Popular Elementor Templates & Widgets
Essential Addons for Elementor – Popular Elementor Templates & Widgets
Researcher
CVE-ID
CVE-2025-12976
CVE-2025-12976
Patch Status
Patched
Patched
Published
Dec 17, 2025
Dec 17, 2025
Affected Software
Events Manager – Calendar, Bookings, Tickets, and more!
Events Manager – Calendar, Bookings, Tickets, and more!
Researcher
CVE-ID
CVE-2025-62111
CVE-2025-62111
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Extra Shortcodes
Extra Shortcodes
Researcher
CVE-ID
CVE-2025-62746
CVE-2025-62746
Patch Status
Patched
Patched
Published
Dec 30, 2025
Dec 30, 2025
Affected Software
Featured Video for WordPress – VideographyWP
Featured Video for WordPress – VideographyWP
Researcher
CVE-ID
CVE-2025-69019
CVE-2025-69019
Patch Status
Unpatched
Unpatched
Published
Dec 28, 2025
Dec 28, 2025
Affected Software
FlippingBook
FlippingBook
Researcher
CVE-ID
CVE-2025-13728
CVE-2025-13728
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
FluentAuth – The Ultimate Authorization & Security Plugin for WordPress
FluentAuth – The Ultimate Authorization & Security Plugin for WordPress
Researcher
CVE-ID
CVE-2025-68528
CVE-2025-68528
Patch Status
Patched
Patched
Published
Dec 30, 2025
Dec 30, 2025
Affected Software
Free Shipping Bar: Amount Left for Free Shipping for WooCommerce
Free Shipping Bar: Amount Left for Free Shipping for WooCommerce
Researcher
CVE-ID
CVE-2025-62758
CVE-2025-62758
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
Researcher
CVE-ID
CVE-2025-59138
CVE-2025-59138
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
CVE-ID
CVE-2025-14635
CVE-2025-14635
Patch Status
Patched
Patched
Published
Dec 22, 2025
Dec 22, 2025
Affected Software
Happy Addons for Elementor
Happy Addons for Elementor
Researcher
CVE-ID
CVE-2025-13693
CVE-2025-13693
Patch Status
Patched
Patched
Published
Dec 20, 2025
Dec 20, 2025
CVE-ID
CVE-2025-68597
CVE-2025-68597
Patch Status
Unpatched
Unpatched
Published
Dec 22, 2025
Dec 22, 2025
Affected Software
Job Postings
Job Postings
Researcher
CVE-ID
CVE-2025-62761
CVE-2025-62761
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Knowledge Base documentation & wiki plugin – BasePress Docs
Knowledge Base documentation & wiki plugin – BasePress Docs
Researcher
CVE-ID
CVE-2025-14387
CVE-2025-14387
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
LearnPress – WordPress LMS Plugin
LearnPress – WordPress LMS Plugin
Researcher
CVE-ID
CVE-2025-68600
CVE-2025-68600
Patch Status
Unpatched
Unpatched
Published
Dec 24, 2025
Dec 24, 2025
Affected Software
Link Library
Link Library
Researcher
CVE-ID
CVE-2025-13537
CVE-2025-13537
Patch Status
Unpatched
Unpatched
Published
Dec 16, 2025
Dec 16, 2025
Affected Software
Live Composer – Free WordPress Website Builder
Live Composer – Free WordPress Website Builder
Researcher
CVE-ID
CVE-2025-62990
CVE-2025-62990
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Livemesh Addons for Beaver Builder
Livemesh Addons for Beaver Builder
Researcher
CVE-ID
CVE-2025-62096
CVE-2025-62096
Patch Status
Patched
Patched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Maximum Products per User for WooCommerce
Maximum Products per User for WooCommerce
Researcher
CVE-ID
CVE-2025-62136
CVE-2025-62136
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Melos
Melos
Researcher
CVE-ID
CVE-2025-14000
CVE-2025-14000
Patch Status
Patched
Patched
Published
Dec 22, 2025
Dec 22, 2025
Affected Software
Membership Plugin – Restrict Content
Membership Plugin – Restrict Content
Researcher
CVE-ID
CVE-2025-62991
CVE-2025-62991
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Minamaze
Minamaze
Researcher
CVE-ID
CVE-2025-68532
CVE-2025-68532
Patch Status
Patched
Patched
Published
Dec 17, 2025
Dec 17, 2025
Affected Software
ModelTheme Addons for WPBakery and Elementor
ModelTheme Addons for WPBakery and Elementor
Researcher
CVE-ID
CVE-2025-62146
CVE-2025-62146
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
MX Time Zone Clocks
MX Time Zone Clocks
Researcher
CVE-ID
CVE-2025-62743
CVE-2025-62743
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
MyBookTable Bookstore by Stormhill Media
MyBookTable Bookstore by Stormhill Media
Researcher
CVE-ID
CVE-2025-69020
CVE-2025-69020
Patch Status
Unpatched
Unpatched
Published
Dec 28, 2025
Dec 28, 2025
Affected Software
Newsletters
Newsletters
Researcher
CVE-ID
CVE-2025-13730
CVE-2025-13730
Patch Status
Patched
Patched
Published
Dec 17, 2025
Dec 17, 2025
Affected Software
OpenID Connect Generic Client
OpenID Connect Generic Client
Researcher
CVE-ID
CVE-2025-68598
CVE-2025-68598
Patch Status
Unpatched
Unpatched
Published
Dec 22, 2025
Dec 22, 2025
Affected Software
Live Composer – Free WordPress Website Builder
Live Composer – Free WordPress Website Builder
Researcher
CVE-ID
CVE-2025-62744
CVE-2025-62744
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Page Title Splitter
Page Title Splitter
Researcher
Post Grid and Gutenberg Blocks <= 2.3.21 – Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-ID
CVE-2025-68605
CVE-2025-68605
Patch Status
Unpatched
Unpatched
Published
Dec 21, 2025
Dec 21, 2025
Affected Software
Post Grid
Post Grid
Researcher
CVE-ID
CVE-2025-62124
CVE-2025-62124
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
WP Post Signature
WP Post Signature
Researcher
CVE-ID
CVE-2025-63020
CVE-2025-63020
Patch Status
Patched
Patched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Postie
Postie
Researcher
CVE-ID
CVE-2025-68512
CVE-2025-68512
Patch Status
Patched
Patched
Published
Dec 22, 2025
Dec 22, 2025
Affected Software
Real 3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder
Real 3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder
Researcher
CVE-ID
CVE-2025-13610
CVE-2025-13610
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
Researcher
CVE-ID
CVE-2025-62135
CVE-2025-62135
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Responsive Block Control – Hide blocks based on display width
Responsive Block Control – Hide blocks based on display width
Researcher
Responsive Posts Carousel Pro <= 15.2 – Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-ID
CVE-2025-68548
CVE-2025-68548
Patch Status
Patched
Patched
Published
Dec 23, 2025
Dec 23, 2025
Affected Software
Responsive Posts Carousel WordPress Plugin
Responsive Posts Carousel WordPress Plugin
Researcher
CVE-ID
CVE-2025-69017
CVE-2025-69017
Patch Status
Unpatched
Unpatched
Published
Dec 27, 2025
Dec 27, 2025
Affected Software
RestroPress – Online Food Ordering System
RestroPress – Online Food Ordering System
Researcher
CVE-ID
CVE-2025-62097
CVE-2025-62097
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
SEO Slider
SEO Slider
Researcher
CVE-ID
CVE-2025-62759
CVE-2025-62759
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Series
Series
Researcher
CVE-ID
CVE-2025-63000
CVE-2025-63000
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Sermon Manager
Sermon Manager
Researcher
CVE-ID
CVE-2025-62137
CVE-2025-62137
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Shuttle
Shuttle
Researcher
CVE-ID
CVE-2025-68868
CVE-2025-68868
Patch Status
Unpatched
Unpatched
Published
Dec 25, 2025
Dec 25, 2025
Affected Software
Wp Text Slider Widget
Wp Text Slider Widget
Researcher
CVE-ID
CVE-2025-62756
CVE-2025-62756
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
The Moneytizer
The Moneytizer
Researcher
CVE-ID
CVE-2025-67533
CVE-2025-67533
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Themify Portfolio Post
Themify Portfolio Post
Researcher
CVE-ID
CVE-2025-67537
CVE-2025-67537
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin
ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin
Researcher
CVE-ID
CVE-2025-63005
CVE-2025-63005
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Tooltips for WordPress
Tooltips for WordPress
Researcher
CVE-ID
CVE-2025-13220
CVE-2025-13220
Patch Status
Patched
Patched
Published
Dec 20, 2025
Dec 20, 2025
CVE-ID
CVE-2025-13217
CVE-2025-13217
Patch Status
Patched
Patched
Published
Dec 16, 2025
Dec 16, 2025
Affected Software
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Researcher
CVE-ID
CVE-2025-13367
CVE-2025-13367
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
CVE-ID
CVE-2025-62749
CVE-2025-62749
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
User Specific Content
User Specific Content
Researcher
UseStrict’s Calendly Embedder <= 1.1.7.2 – Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-ID
CVE-2025-67555
CVE-2025-67555
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
UseStrict’s Calendly Embedder
UseStrict’s Calendly Embedder
Researcher
CVE-ID
CVE-2025-63021
CVE-2025-63021
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Valenti Engine
Valenti Engine
Researcher
CVE-ID
CVE-2025-67983
CVE-2025-67983
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
WP Visitor Statistics (Real Time Traffic)
WP Visitor Statistics (Real Time Traffic)
Researcher
VK Google Job Posting Manager <= 1.2.22 – Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-ID
CVE-2025-68070
CVE-2025-68070
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
VK Google Job Posting Manager
VK Google Job Posting Manager
Researcher
CVE-ID
CVE-2025-63027
CVE-2025-63027
Patch Status
Patched
Patched
Published
Dec 30, 2025
Dec 30, 2025
Affected Software
907 – Responsive Multi-Purpose WordPress Theme
907 – Responsive Multi-Purpose WordPress Theme
Researcher
CVE-ID
CVE-2025-68533
CVE-2025-68533
Patch Status
Patched
Patched
Published
Dec 27, 2025
Dec 27, 2025
Affected Software
WC Builder – WooCommerce Page Builder for WPBakery
WC Builder – WooCommerce Page Builder for WPBakery
Researcher
CVE-ID
CVE-2025-62748
CVE-2025-62748
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Web and WooCommerce Addons for WPBakery Builder
Web and WooCommerce Addons for WPBakery Builder
Researcher
CVE-ID
CVE-2025-69018
CVE-2025-69018
Patch Status
Patched
Patched
Published
Dec 28, 2025
Dec 28, 2025
Affected Software
Web Directory Free
Web Directory Free
Researcher
CVE-ID
CVE-2025-62757
CVE-2025-62757
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
WebMan Amplifier
WebMan Amplifier
Researcher
CVE-ID
CVE-2025-13838
CVE-2025-13838
Patch Status
Patched
Patched
Published
Dec 20, 2025
Dec 20, 2025
Affected Software
WishSuite – Wishlist for WooCommerce
WishSuite – Wishlist for WooCommerce
Researcher
CVE-ID
CVE-2025-14627
CVE-2025-14627
Patch Status
Patched
Patched
Published
Jan 1, 2026
Jan 1, 2026
Affected Software
WP Import – Ultimate CSV XML Importer for WordPress
WP Import – Ultimate CSV XML Importer for WordPress
Researchers
WP Recipe Maker <= 10.2.3 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-ID
CVE-2025-14385
CVE-2025-14385
Patch Status
Patched
Patched
Published
Dec 16, 2025
Dec 16, 2025
Affected Software
WP Recipe Maker
WP Recipe Maker
Researcher
CVE-ID
CVE-2025-67541
CVE-2025-67541
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
WP-ShowHide
WP-ShowHide
Researcher
CVE-ID
CVE-2025-68574
CVE-2025-68574
Patch Status
Unpatched
Unpatched
Published
Dec 17, 2025
Dec 17, 2025
Affected Software
Innovs WPBakery Visual Composer WHMCS Elements
Innovs WPBakery Visual Composer WHMCS Elements
Researcher
CVE-ID
CVE-2025-66103
CVE-2025-66103
Patch Status
Patched
Patched
Published
Dec 30, 2025
Dec 30, 2025
Affected Software
WPCal.io – Easy Meeting Scheduler
WPCal.io – Easy Meeting Scheduler
Researcher
CVE-ID
CVE-2025-64190
CVE-2025-64190
Patch Status
Patched
Patched
Published
Dec 30, 2025
Dec 30, 2025
Affected Software
XStore Core
XStore Core
Researcher
CVE-ID
CVE-2025-66094
CVE-2025-66094
Patch Status
Patched
Patched
Published
Dec 30, 2025
Dec 30, 2025
Affected Software
Yada Wiki
Yada Wiki
Researcher
CVE-ID
CVE-2025-68599
CVE-2025-68599
Patch Status
Unpatched
Unpatched
Published
Dec 22, 2025
Dec 22, 2025
Affected Software
Embeds for YouTube
Embeds for YouTube
Researcher
CVE-ID
CVE-2025-68878
CVE-2025-68878
Patch Status
Unpatched
Unpatched
Published
Dec 26, 2025
Dec 26, 2025
Affected Software
Advanced Custom CSS
Advanced Custom CSS
Researcher
CVE-ID
CVE-2025-12581
CVE-2025-12581
Patch Status
Unpatched
Unpatched
Published
Dec 19, 2025
Dec 19, 2025
Affected Software
Attachments Handler
Attachments Handler
Researcher
CVE-ID
CVE-2025-14154
CVE-2025-14154
Patch Status
Patched
Patched
Published
Dec 16, 2025
Dec 16, 2025
Affected Software
Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss
Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss
Researcher
CVE-ID
CVE-2025-68879
CVE-2025-68879
Patch Status
Unpatched
Unpatched
Published
Dec 25, 2025
Dec 25, 2025
Affected Software
Content Grid Slider
Content Grid Slider
Researcher
CVE-ID
CVE-2025-11496
CVE-2025-11496
Patch Status
Patched
Patched
Published
Dec 20, 2025
Dec 20, 2025
Affected Software
Five Star Restaurant Reservations – WordPress Booking Plugin
Five Star Restaurant Reservations – WordPress Booking Plugin
Researcher
HTML Forms – Simple WordPress Forms Plugin <= 1.6.0 – Unauthenticated Stored Cross-Site Scripting
6.1
CVE-ID
CVE-2025-13861
CVE-2025-13861
Patch Status
Patched
Patched
Published
Dec 16, 2025
Dec 16, 2025
Affected Software
HTML Forms – Simple WordPress Forms Plugin
HTML Forms – Simple WordPress Forms Plugin
Researcher
CVE-ID
CVE-2025-68876
CVE-2025-68876
Patch Status
Unpatched
Unpatched
Published
Dec 26, 2025
Dec 26, 2025
Affected Software
Invelity SPS connect
Invelity SPS connect
Researcher
CVE-ID
CVE-2025-13624
CVE-2025-13624
Patch Status
Unpatched
Unpatched
Published
Dec 19, 2025
Dec 19, 2025
Affected Software
Overstock Affiliate Links
Overstock Affiliate Links
Researcher
CVE-ID
CVE-2025-12398
CVE-2025-12398
Patch Status
Patched
Patched
Published
Dec 20, 2025
Dec 20, 2025
Affected Software
Product Table for WooCommerce
Product Table for WooCommerce
Researcher
CVE-ID
CVE-2025-13365
CVE-2025-13365
Patch Status
Unpatched
Unpatched
Published
Dec 19, 2025
Dec 19, 2025
Affected Software
WP Hallo Welt
WP Hallo Welt
Researcher
CVE-ID
CVE-2025-13439
CVE-2025-13439
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Fancy Product Designer
Fancy Product Designer
Researcher
CVE-ID
CVE-2025-64250
CVE-2025-64250
Patch Status
Unpatched
Unpatched
Published
Dec 15, 2025
Dec 15, 2025
Researcher
CVE-ID
CVE-2025-14721
CVE-2025-14721
Patch Status
Unpatched
Unpatched
Published
Dec 19, 2025
Dec 19, 2025
Affected Software
RESPONSIVE AND SWIPE SLIDER!
RESPONSIVE AND SWIPE SLIDER!
Researcher
CVE-ID
CVE-2025-14734
CVE-2025-14734
Patch Status
Unpatched
Unpatched
Published
Dec 19, 2025
Dec 19, 2025
Affected Software
Amazon affiliate lite Plugin
Amazon affiliate lite Plugin
Researcher
CVE-ID
CVE-2025-14298
CVE-2025-14298
Patch Status
Patched
Patched
Published
Dec 19, 2025
Dec 19, 2025
Affected Software
FiboSearch – Ajax Search for WooCommerce
FiboSearch – Ajax Search for WooCommerce
Researcher
CVE-ID
CVE-2025-14455
CVE-2025-14455
Patch Status
Patched
Patched
Published
Dec 18, 2025
Dec 18, 2025
Affected Software
Image Photo Gallery Final Tiles Grid
Image Photo Gallery Final Tiles Grid
Researcher
CVE-ID
CVE-2025-68578
CVE-2025-68578
Patch Status
Unpatched
Unpatched
Published
Dec 22, 2025
Dec 22, 2025
Affected Software
Addonify – Quick View For WooCommerce
Addonify – Quick View For WooCommerce
Researcher
CVE-ID
CVE-2025-62138
CVE-2025-62138
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
WP Advanced PDF
WP Advanced PDF
Researcher
CVE-ID
CVE-2025-62116
CVE-2025-62116
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
AI Copilot – ChatGPT Chatbot & AI Engine for Post Automation
AI Copilot – ChatGPT Chatbot & AI Engine for Post Automation
Researcher
CVE-ID
CVE-2025-13754
CVE-2025-13754
Patch Status
Patched
Patched
Published
Dec 18, 2025
Dec 18, 2025
Researcher
CVE-ID
CVE-2025-69031
CVE-2025-69031
Patch Status
Unpatched
Unpatched
Published
Dec 29, 2025
Dec 29, 2025
Affected Software
Arcane – The Gaming Community Theme
Arcane – The Gaming Community Theme
Researcher
CVE-ID
CVE-2025-68572
CVE-2025-68572
Patch Status
Patched
Patched
Published
Dec 24, 2025
Dec 24, 2025
Affected Software
Forumax – Advanced Community Forum Plugin
Forumax – Advanced Community Forum Plugin
Researcher
CVE-ID
CVE-2025-68596
CVE-2025-68596
Patch Status
Patched
Patched
Published
Dec 19, 2025
Dec 19, 2025
Affected Software
Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist
Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat – Bit Assist
Researcher
CVE-ID
CVE-2025-67574
CVE-2025-67574
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Booking calendar, Appointment Booking System
Booking calendar, Appointment Booking System
Researcher
CVE-ID
CVE-2025-62083
CVE-2025-62083
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
BoomDevs WordPress Coming Soon Plugin
BoomDevs WordPress Coming Soon Plugin
Researcher
CVE-ID
CVE-2025-68508
CVE-2025-68508
Patch Status
Patched
Patched
Published
Dec 23, 2025
Dec 23, 2025
Affected Software
Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content
Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content
Researcher
CVE-ID
CVE-2025-68568
CVE-2025-68568
Patch Status
Unpatched
Unpatched
Published
Dec 17, 2025
Dec 17, 2025
Affected Software
Claspo – Popups, Spin the Wheel & Email Capture
Claspo – Popups, Spin the Wheel & Email Capture
Researcher
CVE-ID
CVE-2025-68586
CVE-2025-68586
Patch Status
Unpatched
Unpatched
Published
Dec 24, 2025
Dec 24, 2025
Affected Software
Cooked – Recipe Management
Cooked – Recipe Management
Researcher
CVE-ID
CVE-2025-14061
CVE-2025-14061
Patch Status
Patched
Patched
Published
Dec 16, 2025
Dec 16, 2025
Affected Software
Cookie Banner for GDPR / CCPA – WPLP Cookie Consent
Cookie Banner for GDPR / CCPA – WPLP Cookie Consent
Researcher
CVE-ID
CVE-2025-66080
CVE-2025-66080
Patch Status
Patched
Patched
Published
Dec 30, 2025
Dec 30, 2025
Affected Software
Cookie Banner for GDPR / CCPA – WPLP Cookie Consent
Cookie Banner for GDPR / CCPA – WPLP Cookie Consent
Researcher
CVE-ID
CVE-2025-66133
CVE-2025-66133
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Cookie Banner for GDPR / CCPA – WPLP Cookie Consent
Cookie Banner for GDPR / CCPA – WPLP Cookie Consent
Researcher
CVE-ID
CVE-2025-68036
CVE-2025-68036
Patch Status
Patched
Patched
Published
Dec 26, 2025
Dec 26, 2025
Affected Software
CubeWP Framework
CubeWP Framework
Researcher
CVE-ID
CVE-2025-68982
CVE-2025-68982
Patch Status
Unpatched
Unpatched
Published
Dec 18, 2025
Dec 18, 2025
Affected Software
DesignThemes LMS Addon
DesignThemes LMS Addon
Researcher
CVE-ID
CVE-2025-62145
CVE-2025-62145
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
DMCA Protection Badge
DMCA Protection Badge
Researcher
CVE-ID
CVE-2025-67985
CVE-2025-67985
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Document Library Lite
Document Library Lite
Researcher
CVE-ID
CVE-2025-12809
CVE-2025-12809
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Dokan Pro
Dokan Pro
Researcher
CVE-ID
CVE-2025-68988
CVE-2025-68988
Patch Status
Unpatched
Unpatched
Published
Dec 21, 2025
Dec 21, 2025
Affected Software
EInvoice App Malaysia
EInvoice App Malaysia
Researcher
CVE-ID
CVE-2025-67577
CVE-2025-67577
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Easy Form Builder by WhiteStudio — Drag & Drop Form Builder
Easy Form Builder by WhiteStudio — Drag & Drop Form Builder
Researcher
CVE-ID
CVE-2025-63031
CVE-2025-63031
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
EasyTest – Simplify A/B Testing
EasyTest – Simplify A/B Testing
Researcher
CVE-ID
CVE-2025-62079
CVE-2025-62079
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
WP Export Categories & Taxonomies
WP Export Categories & Taxonomies
Researcher
CVE-ID
CVE-2025-14633
CVE-2025-14633
Patch Status
Unpatched
Unpatched
Published
Dec 19, 2025
Dec 19, 2025
Affected Software
F70 Lead Document Download
F70 Lead Document Download
Researcher
CVE-ID
Unknown
Unknown
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Fancy Product Designer
Fancy Product Designer
Researcher
CVE-ID
CVE-2025-66132
CVE-2025-66132
Patch Status
Unpatched
Unpatched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
FAPI Member
FAPI Member
Researcher
CVE-ID
CVE-2025-62747
CVE-2025-62747
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Featured Image Generator
Featured Image Generator
Researcher
CVE-ID
CVE-2025-49338
CVE-2025-49338
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Flowbox
Flowbox
Researcher
CVE-ID
CVE-2025-14080
CVE-2025-14080
Patch Status
Patched
Patched
Published
Dec 20, 2025
Dec 20, 2025
Researcher
CVE-ID
CVE-2025-14913
CVE-2025-14913
Patch Status
Patched
Patched
Published
Dec 25, 2025
Dec 25, 2025
Researcher
CVE-ID
CVE-2025-68582
CVE-2025-68582
Patch Status
Unpatched
Unpatched
Published
Dec 25, 2025
Dec 25, 2025
Affected Software
Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
Researcher
CVE-ID
CVE-2025-68579
CVE-2025-68579
Patch Status
Patched
Patched
Published
Dec 22, 2025
Dec 22, 2025
Affected Software
FV Simpler SEO
FV Simpler SEO
Researcher
CVE-ID
CVE-2025-59136
CVE-2025-59136
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Efí Bank
Efí Bank
Researcher
CVE-ID
CVE-2025-68979
CVE-2025-68979
Patch Status
Unpatched
Unpatched
Published
Dec 18, 2025
Dec 18, 2025
Affected Software
Simple Calendar – Google Calendar Plugin
Simple Calendar – Google Calendar Plugin
Researcher
CVE-ID
CVE-2025-62755
CVE-2025-62755
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
GS Portfolio for Envato
GS Portfolio for Envato
Researcher
CVE-ID
CVE-2025-68505
CVE-2025-68505
Patch Status
Patched
Patched
Published
Dec 28, 2025
Dec 28, 2025
Affected Software
Interactive Content – H5P
Interactive Content – H5P
Researcher
CVE-ID
CVE-2025-68556
CVE-2025-68556
Patch Status
Patched
Patched
Published
Dec 23, 2025
Dec 23, 2025
Affected Software
HAPPY – Helpdesk Support Ticket System
HAPPY – Helpdesk Support Ticket System
Researcher
CVE-ID
CVE-2025-67586
CVE-2025-67586
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Highlight and Share – Social Text and Image Sharing
Highlight and Share – Social Text and Image Sharing
Researcher
CVE-ID
CVE-2025-68981
CVE-2025-68981
Patch Status
Unpatched
Unpatched
Published
Dec 18, 2025
Dec 18, 2025
Affected Software
HomeFix Elementor Portfolio
HomeFix Elementor Portfolio
Researcher
CVE-ID
CVE-2025-63001
CVE-2025-63001
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Hotel Booking
Hotel Booking
Researcher
CVE-ID
CVE-2025-11991
CVE-2025-11991
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
JetFormBuilder — Dynamic Blocks Form Builder
JetFormBuilder — Dynamic Blocks Form Builder
Researcher
CVE-ID
CVE-2025-13956
CVE-2025-13956
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
LearnPress – WordPress LMS Plugin
LearnPress – WordPress LMS Plugin
Researcher
CVE-ID
CVE-2025-62081
CVE-2025-62081
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Live Shopping & Shoppable Videos For WooCommerce
Live Shopping & Shoppable Videos For WooCommerce
Researcher
CVE-ID
CVE-2025-63053
CVE-2025-63053
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Master Addons For Elementor – White Label, Free Widgets, Hover Effects, Conditions, & Animations
Master Addons For Elementor – White Label, Free Widgets, Hover Effects, Conditions, & Animations
Researcher
CVE-ID
CVE-2025-69009
CVE-2025-69009
Patch Status
Unpatched
Unpatched
Published
Dec 26, 2025
Dec 26, 2025
Affected Software
Medical Equipment eCommerce WordPress Theme
Medical Equipment eCommerce WordPress Theme
Researcher
CVE-ID
CVE-2025-67909
CVE-2025-67909
Patch Status
Patched
Patched
Published
Dec 24, 2025
Dec 24, 2025
CVE-ID
CVE-2025-49334
CVE-2025-49334
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
MyD Delivery
MyD Delivery
Researcher
CVE-ID
CVE-2025-13950
CVE-2025-13950
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
OneSignal – Web Push Notifications
OneSignal – Web Push Notifications
Researcher
CVE-ID
CVE-2025-67564
CVE-2025-67564
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Pixel Manager for WooCommerce – Track Conversions and Analytics, Google Ads, TikTok and more
Pixel Manager for WooCommerce – Track Conversions and Analytics, Google Ads, TikTok and more
Researcher
CVE-ID
CVE-2025-14280
CVE-2025-14280
Patch Status
Patched
Patched
Published
Dec 29, 2025
Dec 29, 2025
Affected Software
PixelYourSite – Your smart PIXEL (TAG) & API Manager
PixelYourSite – Your smart PIXEL (TAG) & API Manager
Researcher
CVE-ID
CVE-2025-68594
CVE-2025-68594
Patch Status
Unpatched
Unpatched
Published
Dec 22, 2025
Dec 22, 2025
Affected Software
Poll, Survey & Quiz Maker Plugin by Opinion Stage
Poll, Survey & Quiz Maker Plugin by Opinion Stage
Researcher
CVE-ID
CVE-2025-68606
CVE-2025-68606
Patch Status
Patched
Patched
Published
Dec 21, 2025
Dec 21, 2025
Affected Software
Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX
Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX
Researcher
CVE-ID
CVE-2025-14155
CVE-2025-14155
Patch Status
Patched
Patched
Published
Dec 22, 2025
Dec 22, 2025
Affected Software
Premium Addons for Elementor – Powerful Elementor Templates & Widgets
Premium Addons for Elementor – Powerful Elementor Templates & Widgets
Researcher
Pretty Google Calendar <= 2.0.0 – Missing Authorization to Unauthenticated Google API Key Exposure
5.3
CVE-ID
CVE-2025-12898
CVE-2025-12898
Patch Status
Patched
Patched
Published
Dec 19, 2025
Dec 19, 2025
Affected Software
Pretty Google Calendar
Pretty Google Calendar
Researcher
CVE-ID
CVE-2025-68994
CVE-2025-68994
Patch Status
Unpatched
Unpatched
Published
Dec 23, 2025
Dec 23, 2025
Affected Software
Product Loops for WooCommerce
Product Loops for WooCommerce
Researcher
CVE-ID
CVE-2025-64249
CVE-2025-64249
Patch Status
Unpatched
Unpatched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Protect WP Admin
Protect WP Admin
Researcher
CVE-ID
CVE-2025-63016
CVE-2025-63016
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
QuadLayers TikTok Feed
QuadLayers TikTok Feed
Researcher
CVE-ID
CVE-2025-62147
CVE-2025-62147
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Realbig For WordPress
Realbig For WordPress
Researcher
CVE-ID
CVE-2025-62129
CVE-2025-62129
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
RestroPress – Online Food Ordering System
RestroPress – Online Food Ordering System
Researcher
CVE-ID
CVE-2025-49349
CVE-2025-49349
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Reuters Direct
Reuters Direct
Researcher
CVE-ID
CVE-2025-67573
CVE-2025-67573
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Sailing
Sailing
Researcher
CVE-ID
CVE-2025-68571
CVE-2025-68571
Patch Status
Patched
Patched
Published
Dec 24, 2025
Dec 24, 2025
Affected Software
SALESmanago & Leadoo
SALESmanago & Leadoo
Researcher
CVE-ID
CVE-2025-68993
CVE-2025-68993
Patch Status
Unpatched
Unpatched
Published
Dec 23, 2025
Dec 23, 2025
Affected Software
Share, Print and PDF Products for WooCommerce
Share, Print and PDF Products for WooCommerce
Researcher
CVE-ID
CVE-2025-63022
CVE-2025-63022
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Simple Like Page Plugin
Simple Like Page Plugin
Researcher
CVE-ID
CVE-2025-67576
CVE-2025-67576
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Simple Link Directory
Simple Link Directory
Researcher
CVE-ID
CVE-2025-67575
CVE-2025-67575
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Sitewide Notice WP
Sitewide Notice WP
Researcher
CVE-ID
CVE-2025-67567
CVE-2025-67567
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Sober
Sober
Researcher
CVE-ID
CVE-2025-68589
CVE-2025-68589
Patch Status
Unpatched
Unpatched
Published
Dec 22, 2025
Dec 22, 2025
Affected Software
WP Telegram Widget and Join Link
WP Telegram Widget and Join Link
Researcher
CVE-ID
CVE-2025-69010
CVE-2025-69010
Patch Status
Unpatched
Unpatched
Published
Dec 26, 2025
Dec 26, 2025
Affected Software
Themebeez Toolkit
Themebeez Toolkit
Researcher
CVE-ID
CVE-2025-62122
CVE-2025-62122
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Trash Duplicate and 301 Redirect
Trash Duplicate and 301 Redirect
Researcher
CVE-ID
CVE-2025-67581
CVE-2025-67581
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Appointment Booking and Scheduler Plugin – Truebooker
Appointment Booking and Scheduler Plugin – Truebooker
Researcher
CVE-ID
CVE-2025-68565
CVE-2025-68565
Patch Status
Unpatched
Unpatched
Published
Dec 19, 2025
Dec 19, 2025
Affected Software
Twitch Player
Twitch Player
Researcher
CVE-ID
CVE-2025-12492
CVE-2025-12492
Patch Status
Patched
Patched
Published
Dec 19, 2025
Dec 19, 2025
CVE-ID
CVE-2025-67579
CVE-2025-67579
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
WordPress User Extra Fields
WordPress User Extra Fields
Researcher
CVE-ID
CVE-2025-68509
CVE-2025-68509
Patch Status
Patched
Patched
Published
Jan 1, 2026
Jan 1, 2026
Affected Software
User Submitted Posts – Enable Users to Submit Posts from the Front End
User Submitted Posts – Enable Users to Submit Posts from the Front End
Researcher
CVE-ID
CVE-2025-68608
CVE-2025-68608
Patch Status
Unpatched
Unpatched
Published
Dec 25, 2025
Dec 25, 2025
Affected Software
UserPro – Community and User Profile WordPress Plugin
UserPro – Community and User Profile WordPress Plugin
Researcher
CVE-ID
CVE-2025-68575
CVE-2025-68575
Patch Status
Unpatched
Unpatched
Published
Dec 21, 2025
Dec 21, 2025
Affected Software
Appointment Bookings for Zoom GoogleMeet and more – Wappointment
Appointment Bookings for Zoom GoogleMeet and more – Wappointment
Researcher
CVE-ID
CVE-2025-62141
CVE-2025-62141
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Researcher
CVE-ID
CVE-2025-67582
CVE-2025-67582
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Wbcom Designs – Private Community for BuddyPress
Wbcom Designs – Private Community for BuddyPress
Researcher
CVE-ID
CVE-2025-68980
CVE-2025-68980
Patch Status
Unpatched
Unpatched
Published
Dec 18, 2025
Dec 18, 2025
Affected Software
WeDesignTech Portfolio
WeDesignTech Portfolio
Researcher
CVE-ID
CVE-2025-69028
CVE-2025-69028
Patch Status
Patched
Patched
Published
Dec 29, 2025
Dec 29, 2025
Affected Software
weForms – Easy Drag & Drop Contact Form Builder For WordPress
weForms – Easy Drag & Drop Contact Form Builder For WordPress
Researcher
CVE-ID
CVE-2025-68595
CVE-2025-68595
Patch Status
Unpatched
Unpatched
Published
Dec 23, 2025
Dec 23, 2025
Affected Software
Widgets for Social Photo Feed
Widgets for Social Photo Feed
Researcher
CVE-ID
CVE-2025-62092
CVE-2025-62092
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Wiremo – Product Reviews for WooCommerce
Wiremo – Product Reviews for WooCommerce
Researcher
WP User Frontend <= 4.2.4 – Missing Authorization to Unauthenticated Arbitrary Attachment Deletion
5.3
CVE-ID
CVE-2025-14047
CVE-2025-14047
Patch Status
Patched
Patched
Published
Jan 1, 2026
Jan 1, 2026
Affected Software
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration
Researcher
CVE-ID
CVE-2025-68997
CVE-2025-68997
Patch Status
Unpatched
Unpatched
Published
Dec 25, 2025
Dec 25, 2025
Affected Software
Comments – wpDiscuz
Comments – wpDiscuz
Researcher
CVE-ID
CVE-2025-68521
CVE-2025-68521
Patch Status
Patched
Patched
Published
Dec 29, 2025
Dec 29, 2025
Affected Software
WpStream – Live Streaming, Video on Demand, Pay Per View
WpStream – Live Streaming, Video on Demand, Pay Per View
Researcher
CVE-ID
CVE-2025-66131
CVE-2025-66131
Patch Status
Unpatched
Unpatched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Yaad Sarig Payment Gateway For WC
Yaad Sarig Payment Gateway For WC
Researcher
CVE-ID
CVE-2025-59129
CVE-2025-59129
Patch Status
Unpatched
Unpatched
Published
Dec 30, 2025
Dec 30, 2025
Affected Software
Appointify
Appointify
Researcher
CVE-ID
CVE-2025-68570
CVE-2025-68570
Patch Status
Unpatched
Unpatched
Published
Dec 21, 2025
Dec 21, 2025
Affected Software
Captivate Sync
Captivate Sync
Researcher
CVE-ID
CVE-2025-68590
CVE-2025-68590
Patch Status
Patched
Patched
Published
Dec 25, 2025
Dec 25, 2025
Researcher
CVE-ID
CVE-2025-67999
CVE-2025-67999
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Newsletter – Send awesome emails from WordPress
Newsletter – Send awesome emails from WordPress
Researcher
CVE-ID
CVE-2025-67519
CVE-2025-67519
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Ninja Tables – Easy Data Table Builder
Ninja Tables – Easy Data Table Builder
Researcher
CVE-ID
CVE-2025-68496
CVE-2025-68496
Patch Status
Patched
Patched
Published
Dec 22, 2025
Dec 22, 2025
Affected Software
User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds
User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds
Researcher
CVE-ID
CVE-2025-12496
CVE-2025-12496
Patch Status
Patched
Patched
Published
Dec 16, 2025
Dec 16, 2025
Affected Software
Zephyr Project Manager
Zephyr Project Manager
Researcher
CVE-ID
CVE-2025-68602
CVE-2025-68602
Patch Status
Unpatched
Unpatched
Published
Dec 25, 2025
Dec 25, 2025
Affected Software
Accept Donations with PayPal & Stripe
Accept Donations with PayPal & Stripe
Researcher
CVE-ID
CVE-2025-49355
CVE-2025-49355
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Accessibility Press
Accessibility Press
Researcher
CVE-ID
CVE-2025-69006
CVE-2025-69006
Patch Status
Unpatched
Unpatched
Published
Dec 26, 2025
Dec 26, 2025
Affected Software
AM Events
AM Events
Researcher
Amazon affiliate lite Plugin <= 1.0.0 – Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-ID
CVE-2025-14735
CVE-2025-14735
Patch Status
Unpatched
Unpatched
Published
Dec 19, 2025
Dec 19, 2025
Affected Software
Amazon affiliate lite Plugin
Amazon affiliate lite Plugin
Researcher
CVE-ID
CVE-2025-68497
CVE-2025-68497
Patch Status
Patched
Patched
Published
Dec 28, 2025
Dec 28, 2025
Affected Software
Astra Widgets
Astra Widgets
Researcher
CVE-ID
CVE-2025-67629
CVE-2025-67629
Patch Status
Unpatched
Unpatched
Published
Dec 21, 2025
Dec 21, 2025
Affected Software
Basticom Framework
Basticom Framework
Researcher
CVE-ID
CVE-2025-59135
CVE-2025-59135
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Behance Portfolio Manager
Behance Portfolio Manager
Researcher
CVE-ID
CVE-2025-68525
CVE-2025-68525
Patch Status
Patched
Patched
Published
Dec 25, 2025
Dec 25, 2025
Affected Software
Category Icon
Category Icon
Researcher
CVE-ID
CVE-2025-62989
CVE-2025-62989
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Cooked – Recipe Management
Cooked – Recipe Management
Researcher
CVE-ID
CVE-2025-49337
CVE-2025-49337
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Dashboard Beacon
Dashboard Beacon
Researcher
CVE-ID
CVE-2025-67986
CVE-2025-67986
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Document Library Lite
Document Library Lite
Researcher
CVE-ID
CVE-2025-67627
CVE-2025-67627
Patch Status
Unpatched
Unpatched
Published
Dec 21, 2025
Dec 21, 2025
Affected Software
Draft Notify
Draft Notify
Researcher
CVE-ID
CVE-2025-67557
CVE-2025-67557
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
WP eBay Product Feeds
WP eBay Product Feeds
Researcher
CVE-ID
CVE-2025-67631
CVE-2025-67631
Patch Status
Unpatched
Unpatched
Published
Dec 24, 2025
Dec 24, 2025
Affected Software
Gift Hunt
Gift Hunt
Researcher
CVE-ID
CVE-2025-67632
CVE-2025-67632
Patch Status
Unpatched
Unpatched
Published
Dec 21, 2025
Dec 21, 2025
Affected Software
Google AdSense for Responsive Design – GARD
Google AdSense for Responsive Design – GARD
Researcher
CVE-ID
CVE-2025-67633
CVE-2025-67633
Patch Status
Unpatched
Unpatched
Published
Dec 21, 2025
Dec 21, 2025
Affected Software
Greenhouse Job Board
Greenhouse Job Board
Researcher
CVE-ID
CVE-2025-69008
CVE-2025-69008
Patch Status
Unpatched
Unpatched
Published
Dec 26, 2025
Dec 26, 2025
Affected Software
Inboxify Sign Up Form
Inboxify Sign Up Form
Researcher
CVE-ID
CVE-2025-62140
CVE-2025-62140
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Locatoraid Store Locator
Locatoraid Store Locator
Researcher
CVE-ID
CVE-2025-62121
CVE-2025-62121
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Logo Slider , Logo Carousel , Logo showcase , Client Logo
Logo Slider , Logo Carousel , Logo showcase , Client Logo
Researcher
CVE-ID
CVE-2025-67542
CVE-2025-67542
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Multi-Step Checkout for WooCommerce
Multi-Step Checkout for WooCommerce
Researcher
CVE-ID
CVE-2025-68566
CVE-2025-68566
Patch Status
Unpatched
Unpatched
Published
Dec 17, 2025
Dec 17, 2025
Affected Software
My auctions allegro
My auctions allegro
Researcher
CVE-ID
CVE-2025-69007
CVE-2025-69007
Patch Status
Unpatched
Unpatched
Published
Dec 26, 2025
Dec 26, 2025
Affected Software
Popping Sidebars and Widgets Light
Popping Sidebars and Widgets Light
Researcher
CVE-ID
CVE-2025-62142
CVE-2025-62142
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Cincopa video and media plug-in
Cincopa video and media plug-in
Researcher
CVE-ID
CVE-2025-67558
CVE-2025-67558
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Rencontre – Dating Site
Rencontre – Dating Site
Researcher
CVE-ID
CVE-2025-67628
CVE-2025-67628
Patch Status
Unpatched
Unpatched
Published
Dec 21, 2025
Dec 21, 2025
Affected Software
Review Disclaimer
Review Disclaimer
Researcher
CVE-ID
CVE-2025-14054
CVE-2025-14054
Patch Status
Patched
Patched
Published
Dec 20, 2025
Dec 20, 2025
Affected Software
WC Builder – WooCommerce Page Builder for WPBakery
WC Builder – WooCommerce Page Builder for WPBakery
Researcher
CVE-ID
CVE-2025-67630
CVE-2025-67630
Patch Status
Patched
Patched
Published
Dec 21, 2025
Dec 21, 2025
Affected Software
WH Tweaks
WH Tweaks
Researcher
CVE-ID
CVE-2025-62750
CVE-2025-62750
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
WooCommerce Parcelas
WooCommerce Parcelas
Researcher
CVE-ID
CVE-2025-62130
CVE-2025-62130
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Accordion Slider Gallery
Accordion Slider Gallery
Researcher
CVE-ID
CVE-2025-62108
CVE-2025-62108
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Researcher
CVE-ID
CVE-2025-64255
CVE-2025-64255
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Admin and Site Enhancements (ASE)
Admin and Site Enhancements (ASE)
Researcher
CVE-ID
CVE-2025-68593
CVE-2025-68593
Patch Status
Patched
Patched
Published
Dec 18, 2025
Dec 18, 2025
Affected Software
WP Adminify – White Label WordPress, Admin Menu Editor, Login Customizer
WP Adminify – White Label WordPress, Admin Menu Editor, Login Customizer
Researcher
CVE-ID
CVE-2025-68592
CVE-2025-68592
Patch Status
Patched
Patched
Published
Dec 18, 2025
Dec 18, 2025
Affected Software
WP Adminify – White Label WordPress, Admin Menu Editor, Login Customizer
WP Adminify – White Label WordPress, Admin Menu Editor, Login Customizer
Researcher
CVE-ID
CVE-2025-68580
CVE-2025-68580
Patch Status
Patched
Patched
Published
Dec 24, 2025
Dec 24, 2025
Affected Software
Advanced Classifieds & Directory Pro
Advanced Classifieds & Directory Pro
Researcher
CVE-ID
CVE-2025-62154
CVE-2025-62154
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
AI Content Writing Assistant
AI Content Writing Assistant
Researcher
CVE-ID
CVE-2025-63004
CVE-2025-63004
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
All in One Accessibility
All in One Accessibility
Researcher
Animation Addons for Elementor <= 2.4.5 – Authenticated (Contributor+) Arbitrary Content Deletion
4.3
CVE-ID
CVE-2025-67540
CVE-2025-67540
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Animation Addons for Elementor – GSAP Powered Elementor Addons & Website Templates
Animation Addons for Elementor – GSAP Powered Elementor Addons & Website Templates
Researcher
CVE-ID
CVE-2025-62874
CVE-2025-62874
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
AnyComment
AnyComment
Researcher
CVE-ID
CVE-2025-66150
CVE-2025-66150
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Appender – Copycat Content Protection for WordPress
Appender – Copycat Content Protection for WordPress
Researcher
CVE-ID
CVE-2025-59130
CVE-2025-59130
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Appointify
Appointify
Researcher
CVE-ID
CVE-2025-62888
CVE-2025-62888
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
WP Attachments
WP Attachments
Researcher
CVE-ID
CVE-2025-13794
CVE-2025-13794
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Auto Featured Image (Auto Post Thumbnail)
Auto Featured Image (Auto Post Thumbnail)
Researcher
CVE-ID
CVE-2025-69030
CVE-2025-69030
Patch Status
Unpatched
Unpatched
Published
Dec 29, 2025
Dec 29, 2025
Affected Software
Backpack Traveler – Modern Travel Blog WordPress Theme
Backpack Traveler – Modern Travel Blog WordPress Theme
Researcher
CVE-ID
CVE-2025-59137
CVE-2025-59137
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Behance Portfolio Manager
Behance Portfolio Manager
Researcher
CVE-ID
CVE-2025-69024
CVE-2025-69024
Patch Status
Patched
Patched
Published
Dec 29, 2025
Dec 29, 2025
Affected Software
Print Anywhere & Create PDFs of Order Receipts, Invoices, Labels & More.
Print Anywhere & Create PDFs of Order Receipts, Invoices, Labels & More.
Researcher
CVE-ID
CVE-2025-64630
CVE-2025-64630
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Business Directory Plugin – Easy Listing Directories for WordPress
Business Directory Plugin – Easy Listing Directories for WordPress
Researcher
CVE-ID
CVE-2025-68557
CVE-2025-68557
Patch Status
Patched
Patched
Published
Dec 23, 2025
Dec 23, 2025
Affected Software
Chakra test
Chakra test
Researcher
CVE-ID
CVE-2025-62113
CVE-2025-62113
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Co-marquage service-public.fr
Co-marquage service-public.fr
Researcher
CVE-ID
CVE-2025-66148
CVE-2025-66148
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Contact Form 7 styler for Elementor – Conformer
Contact Form 7 styler for Elementor – Conformer
Researcher
Contact Form 7 Extension For Mailchimp <= 0.9.54 – Authenticated (Contributor+) Information Exposure
4.3
CVE-ID
CVE-2025-68989
CVE-2025-68989
Patch Status
Unpatched
Unpatched
Published
Dec 21, 2025
Dec 21, 2025
Affected Software
Connect Contact Form 7 and Mailchimp
Connect Contact Form 7 and Mailchimp
Researcher
CVE-ID
CVE-2025-62134
CVE-2025-62134
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Contact Form Widget
Contact Form Widget
Researcher
CVE-ID
CVE-2025-13750
CVE-2025-13750
Patch Status
Patched
Patched
Published
Dec 16, 2025
Dec 16, 2025
Affected Software
Converter for Media – Optimize images | Convert WebP & AVIF
Converter for Media – Optimize images | Convert WebP & AVIF
Researcher
CVE-ID
CVE-2025-62144
CVE-2025-62144
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Core Web Vitals & PageSpeed Booster
Core Web Vitals & PageSpeed Booster
Researcher
CVE-ID
CVE-2025-66151
CVE-2025-66151
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Countdowner – Countdown Timer for Elementor
Countdowner – Countdown Timer for Elementor
Researcher
CVE-ID
CVE-2025-66154
CVE-2025-66154
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Couponer – Discount Coupons for Elementor
Couponer – Discount Coupons for Elementor
Researcher
CVE-ID
CVE-2025-66152
CVE-2025-66152
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Criptopayer – Crypto Payment Button for Elementor
Criptopayer – Crypto Payment Button for Elementor
Researcher
CVE-ID
CVE-2025-69015
CVE-2025-69015
Patch Status
Unpatched
Unpatched
Published
Dec 27, 2025
Dec 27, 2025
Affected Software
Crowdsignal Forms
Crowdsignal Forms
Researcher
CVE-ID
CVE-2025-63038
CVE-2025-63038
Patch Status
Patched
Patched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
WP Custom Admin Interface
WP Custom Admin Interface
Researcher
CVE-ID
CVE-2025-68885
CVE-2025-68885
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Custom Post Status
Custom Post Status
Researcher
CVE-ID
CVE-2025-49342
CVE-2025-49342
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Custom Style
Custom Style
Researcher
CVE-ID
CVE-2025-67473
CVE-2025-67473
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
CWW Companion
CWW Companion
Researcher
CVE-ID
CVE-2025-49340
CVE-2025-49340
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Direct Payments WP
Direct Payments WP
Researcher
CVE-ID
CVE-2025-49339
CVE-2025-49339
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Direct Payments WP
Direct Payments WP
Researcher
CVE-ID
CVE-2025-69023
CVE-2025-69023
Patch Status
Unpatched
Unpatched
Published
Dec 28, 2025
Dec 28, 2025
Affected Software
Discussion Board – WordPress Forum Plugin
Discussion Board – WordPress Forum Plugin
Researcher
CVE-ID
CVE-2025-68585
CVE-2025-68585
Patch Status
Patched
Patched
Published
Dec 25, 2025
Dec 25, 2025
Affected Software
WP Document Revisions
WP Document Revisions
Researcher
CVE-ID
CVE-2025-13498
CVE-2025-13498
Patch Status
Patched
Patched
Published
Dec 17, 2025
Dec 17, 2025
Affected Software
Download Manager
Download Manager
Researcher
CVE-ID
CVE-2025-14399
CVE-2025-14399
Patch Status
Patched
Patched
Published
Dec 16, 2025
Dec 16, 2025
Affected Software
Download Plugins and Themes in ZIP from Dashboard
Download Plugins and Themes in ZIP from Dashboard
Researcher
CVE-ID
CVE-2025-14783
CVE-2025-14783
Patch Status
Patched
Patched
Published
Dec 30, 2025
Dec 30, 2025
Affected Software
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy
Researcher
CVE-ID
CVE-2025-62078
CVE-2025-62078
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Easy Upload Files During Checkout
Easy Upload Files During Checkout
Researcher
CVE-ID
CVE-2025-62117
CVE-2025-62117
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
EasyIndex
EasyIndex
Researcher
CVE-ID
CVE-2025-68603
CVE-2025-68603
Patch Status
Unpatched
Unpatched
Published
Dec 20, 2025
Dec 20, 2025
Affected Software
Editorial Calendar
Editorial Calendar
Researcher
CVE-ID
CVE-2025-67621
CVE-2025-67621
Patch Status
Patched
Patched
Published
Dec 21, 2025
Dec 21, 2025
Affected Software
Eight Day Week Print Workflow
Eight Day Week Print Workflow
Researcher
CVE-ID
CVE-2025-68529
CVE-2025-68529
Patch Status
Patched
Patched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Email Marketing Plugin – WP Email Capture
Email Marketing Plugin – WP Email Capture
Researcher
Essential Blocks <= 5.7.2 – Missing Authorization To Authenticated (Author+) Information Disclosure
4.3
CVE-ID
CVE-2025-11369
CVE-2025-11369
Patch Status
Patched
Patched
Published
Dec 16, 2025
Dec 16, 2025
Researcher
CVE-ID
CVE-2025-69012
CVE-2025-69012
Patch Status
Unpatched
Unpatched
Published
Dec 27, 2025
Dec 27, 2025
Affected Software
Event Organiser
Event Organiser
Researcher
CVE-ID
CVE-2025-62992
CVE-2025-62992
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Researcher
CVE-ID
CVE-2025-67622
CVE-2025-67622
Patch Status
Unpatched
Unpatched
Published
Dec 18, 2025
Dec 18, 2025
Affected Software
Evergreen Post Tweeter
Evergreen Post Tweeter
Researcher
CVE-ID
CVE-2025-68583
CVE-2025-68583
Patch Status
Unpatched
Unpatched
Published
Dec 25, 2025
Dec 25, 2025
Affected Software
Fast User Switching
Fast User Switching
Researcher
CVE-ID
CVE-2025-12900
CVE-2025-12900
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
FileBird – WordPress Media Library Folders & File Manager
FileBird – WordPress Media Library Folders & File Manager
Researcher
CVE-ID
CVE-2025-68601
CVE-2025-68601
Patch Status
Patched
Patched
Published
Dec 24, 2025
Dec 24, 2025
Affected Software
Five Star Restaurant Reservations – WordPress Booking Plugin
Five Star Restaurant Reservations – WordPress Booking Plugin
Researcher
CVE-ID
CVE-2025-69032
CVE-2025-69032
Patch Status
Unpatched
Unpatched
Published
Dec 29, 2025
Dec 29, 2025
Affected Software
FiveStar – Hotel Booking WordPress Theme
FiveStar – Hotel Booking WordPress Theme
Researcher
CVE-ID
CVE-2025-62133
CVE-2025-62133
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
FormFacade – Embed Google Forms in your website
FormFacade – Embed Google Forms in your website
Researcher
CVE-ID
CVE-2025-67467
CVE-2025-67467
Patch Status
Patched
Patched
Published
Dec 23, 2025
Dec 23, 2025
Affected Software
GiveWP – Donation Plugin and Fundraising Platform
GiveWP – Donation Plugin and Fundraising Platform
Researcher
CVE-ID
CVE-2025-62123
CVE-2025-62123
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
WP Gmail SMTP
WP Gmail SMTP
Researcher
CVE-ID
CVE-2025-66158
CVE-2025-66158
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Google Maps for Elementor
Google Maps for Elementor
Researcher
CVE-ID
CVE-2025-63014
CVE-2025-63014
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Gmedia Photo Gallery
Gmedia Photo Gallery
Researcher
CVE-ID
CVE-2025-66160
CVE-2025-66160
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Graphist – Graphs & Charts for Elementor
Graphist – Graphs & Charts for Elementor
Researcher
CVE-ID
CVE-2025-68511
CVE-2025-68511
Patch Status
Patched
Patched
Published
Dec 20, 2025
Dec 20, 2025
Affected Software
Gutenverse Form – Contact Form Builder, Booking, Reservation, Subscribe for Block Editor
Gutenverse Form – Contact Form Builder, Booking, Reservation, Subscribe for Block Editor
Researcher
CVE-ID
CVE-2025-66153
CVE-2025-66153
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Customizable heading for Elementor
Customizable heading for Elementor
Researcher
CVE-ID
CVE-2025-68998
CVE-2025-68998
Patch Status
Unpatched
Unpatched
Published
Dec 26, 2025
Dec 26, 2025
Affected Software
Heateor Social Login WordPress
Heateor Social Login WordPress
Researcher
CVE-ID
CVE-2025-62115
CVE-2025-62115
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Hide Plugins
Hide Plugins
Researcher
CVE-ID
CVE-2025-62150
CVE-2025-62150
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
History Timeline for Biography, Company History & Event Timeline
History Timeline for Biography, Company History & Event Timeline
Researcher
CVE-ID
CVE-2025-69022
CVE-2025-69022
Patch Status
Unpatched
Unpatched
Published
Dec 28, 2025
Dec 28, 2025
Affected Software
HR Management Lite
HR Management Lite
Researcher
CVE-ID
CVE-2025-13110
CVE-2025-13110
Patch Status
Patched
Patched
Published
Dec 17, 2025
Dec 17, 2025
Affected Software
HUSKY – Products Filter Professional for WooCommerce
HUSKY – Products Filter Professional for WooCommerce
Researcher
CVE-ID
CVE-2025-67562
CVE-2025-67562
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Image Caption Hover Pro
Image Caption Hover Pro
Researcher
CVE-ID
CVE-2025-14003
CVE-2025-14003
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
CVE-ID
CVE-2025-62112
CVE-2025-62112
Patch Status
Patched
Patched
Published
Dec 30, 2025
Dec 30, 2025
Affected Software
Import into Easy Property Listings
Import into Easy Property Listings
Researcher
CVE-ID
CVE-2025-62084
CVE-2025-62084
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
iNext Woo Pincode Checker
iNext Woo Pincode Checker
Researcher
CVE-ID
CVE-2025-67560
CVE-2025-67560
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
AI-Powered Business Directory and Classified Ads Listings – Listdom
AI-Powered Business Directory and Classified Ads Listings – Listdom
Researcher
CVE-ID
CVE-2025-62080
CVE-2025-62080
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Live Shopping & Shoppable Videos For WooCommerce
Live Shopping & Shoppable Videos For WooCommerce
Researcher
CVE-ID
CVE-2025-66146
CVE-2025-66146
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Changelog & Custom List for Elementor
Changelog & Custom List for Elementor
Researcher
CVE-ID
CVE-2025-68083
CVE-2025-68083
Patch Status
Unpatched
Unpatched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Meks Quick Plugin Disabler
Meks Quick Plugin Disabler
Researcher
CVE-ID
CVE-2025-62089
CVE-2025-62089
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Mergado Pack
Mergado Pack
Researcher
CVE-ID
CVE-2025-68567
CVE-2025-68567
Patch Status
Unpatched
Unpatched
Published
Dec 17, 2025
Dec 17, 2025
Affected Software
My auctions allegro
My auctions allegro
Researcher
CVE-ID
CVE-2025-67592
CVE-2025-67592
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
My Calendar – Accessible Event Manager
My Calendar – Accessible Event Manager
Researcher
CVE-ID
CVE-2025-68995
CVE-2025-68995
Patch Status
Patched
Patched
Published
Dec 25, 2025
Dec 25, 2025
Affected Software
All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements
All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements
Researcher
CVE-ID
CVE-2025-14428
CVE-2025-14428
Patch Status
Patched
Patched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements
All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements
Researcher
CVE-ID
CVE-2025-12361
CVE-2025-12361
Patch Status
Patched
Patched
Published
Dec 18, 2025
Dec 18, 2025
Affected Software
myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program.
myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program.
Researcher
CVE-ID
CVE-2025-49353
CVE-2025-49353
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Noindex by Path
Noindex by Path
Researcher
CVE-ID
CVE-2025-62120
CVE-2025-62120
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
OpenHook
OpenHook
Researcher
CVE-ID
CVE-2025-49352
CVE-2025-49352
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Order Cancellation & Returns for WooCommerce
Order Cancellation & Returns for WooCommerce
Researcher
CVE-ID
CVE-2025-49356
CVE-2025-49356
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Orders Chat for WooCommerce
Orders Chat for WooCommerce
Researcher
CVE-ID
CVE-2025-62101
CVE-2025-62101
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
پلاگین پرداخت دلخواه
پلاگین پرداخت دلخواه
Researcher
CVE-ID
CVE-2025-64254
CVE-2025-64254
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Photo Block – A Modern Image Block With Lightbox and Caption Support
Photo Block – A Modern Image Block With Lightbox and Caption Support
Researcher
CVE-ID
CVE-2025-68861
CVE-2025-68861
Patch Status
Unpatched
Unpatched
Published
Dec 25, 2025
Dec 25, 2025
Affected Software
Plugin Optimizer – Speed Up Your WordPress Like Never Before
Plugin Optimizer – Speed Up Your WordPress Like Never Before
Researcher
CVE-ID
CVE-2025-69025
CVE-2025-69025
Patch Status
Patched
Patched
Published
Dec 29, 2025
Dec 29, 2025
Researcher
CVE-ID
CVE-2025-69021
CVE-2025-69021
Patch Status
Patched
Patched
Published
Dec 28, 2025
Dec 28, 2025
Affected Software
Popup Box – Create Countdown, Coupon, Video, Contact Form Popups
Popup Box – Create Countdown, Coupon, Video, Contact Form Popups
Researcher
CVE-ID
CVE-2025-69026
CVE-2025-69026
Patch Status
Unpatched
Unpatched
Published
Dec 29, 2025
Dec 29, 2025
Affected Software
Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers
Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers
Researcher
CVE-ID
CVE-2025-62098
CVE-2025-62098
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Portfolio Gallery – Responsive Image Gallery
Portfolio Gallery – Responsive Image Gallery
Researcher
CVE-ID
CVE-2025-63040
CVE-2025-63040
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Post Snippets – Custom WordPress Code Snippets Customizer
Post Snippets – Custom WordPress Code Snippets Customizer
Researcher
CVE-ID
CVE-2025-62143
CVE-2025-62143
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Cincopa video and media plug-in
Cincopa video and media plug-in
Researcher
Premium Addons for Elementor <= 4.11.53 – Cross-Site Request Forgery via ‘insert_inner_template’
4.3
CVE-ID
CVE-2025-14163
CVE-2025-14163
Patch Status
Patched
Patched
Published
Dec 22, 2025
Dec 22, 2025
Affected Software
Premium Addons for Elementor – Powerful Elementor Templates & Widgets
Premium Addons for Elementor – Powerful Elementor Templates & Widgets
Researcher
CVE-ID
CVE-2025-14277
CVE-2025-14277
Patch Status
Patched
Patched
Published
Dec 17, 2025
Dec 17, 2025
Affected Software
Prime Slider – Addons for Elementor
Prime Slider – Addons for Elementor
Researcher
CVE-ID
CVE-2025-69027
CVE-2025-69027
Patch Status
Unpatched
Unpatched
Published
Dec 29, 2025
Dec 29, 2025
Affected Software
Product Delivery Date for WooCommerce – Lite
Product Delivery Date for WooCommerce – Lite
Researcher
CVE-ID
CVE-2025-68040
CVE-2025-68040
Patch Status
Unpatched
Unpatched
Published
Dec 26, 2025
Dec 26, 2025
Affected Software
Project Manager – AI-Powered Project & Task Manager with Kanban Board & Gantt Chart
Project Manager – AI-Powered Project & Task Manager with Kanban Board & Gantt Chart
Researcher
CVE-ID
CVE-2025-66155
CVE-2025-66155
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Questionar – FAQ Accordions for Elementor
Questionar – FAQ Accordions for Elementor
Researcher
CVE-ID
CVE-2025-14164
CVE-2025-14164
Patch Status
Unpatched
Unpatched
Published
Dec 19, 2025
Dec 19, 2025
Affected Software
Quran Gateway
Quran Gateway
Researcher
CVE-ID
CVE-2025-64247
CVE-2025-64247
Patch Status
Unpatched
Unpatched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Read More & Accordion
Read More & Accordion
Researcher
CVE-ID
CVE-2025-49354
CVE-2025-49354
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Recent Posts From Each Category
Recent Posts From Each Category
Researcher
CVE-ID
CVE-2025-64248
CVE-2025-64248
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Request a Quote Form Plugin – Price Quote Request Management Made Easy
Request a Quote Form Plugin – Price Quote Request Management Made Easy
Researcher
CVE-ID
CVE-2025-62148
CVE-2025-62148
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Robots.txt rewrite
Robots.txt rewrite
Researcher
CVE-ID
CVE-2025-13741
CVE-2025-13741
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
CVE-ID
CVE-2025-68082
CVE-2025-68082
Patch Status
Unpatched
Unpatched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Semrush Content Toolkit
Semrush Content Toolkit
Researcher
CVE-ID
CVE-2025-49344
CVE-2025-49344
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
SensitiveTagCloud
SensitiveTagCloud
Researcher
CVE-ID
CVE-2025-62091
CVE-2025-62091
Patch Status
Patched
Patched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Serial Codes Generator and Validator with WooCommerce Support
Serial Codes Generator and Validator with WooCommerce Support
Researcher
CVE-ID
CVE-2025-69016
CVE-2025-69016
Patch Status
Unpatched
Unpatched
Published
Dec 27, 2025
Dec 27, 2025
Affected Software
Shortcodes and extra features for Phlox theme
Shortcodes and extra features for Phlox theme
Researcher
CVE-ID
CVE-2025-62099
CVE-2025-62099
Patch Status
Patched
Patched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Signature Add-On for Gravity Forms
Signature Add-On for Gravity Forms
Researcher
CVE-ID
CVE-2025-49346
CVE-2025-49346
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Simple Archive Generator
Simple Archive Generator
Researcher
CVE-ID
CVE-2025-68591
CVE-2025-68591
Patch Status
Unpatched
Unpatched
Published
Dec 25, 2025
Dec 25, 2025
Affected Software
Simple File List
Simple File List
Researcher
CVE-ID
CVE-2025-64256
CVE-2025-64256
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Simple Folio
Simple Folio
Researcher
CVE-ID
CVE-2025-68573
CVE-2025-68573
Patch Status
Unpatched
Unpatched
Published
Dec 17, 2025
Dec 17, 2025
Affected Software
Simple Keyword to Link
Simple Keyword to Link
Researcher
CVE-ID
CVE-2025-67465
CVE-2025-67465
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Simple Link Directory
Simple Link Directory
Researcher
CVE-ID
CVE-2025-62128
CVE-2025-62128
Patch Status
Patched
Patched
Published
Dec 30, 2025
Dec 30, 2025
Affected Software
SiteLock Security – WP Hardening, Login Security & Malware Scans
SiteLock Security – WP Hardening, Login Security & Malware Scans
Researcher
CVE-ID
CVE-2025-66157
CVE-2025-66157
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Sliper – Full-screen Slider for Elementor
Sliper – Full-screen Slider for Elementor
Researcher
CVE-ID
CVE-2025-49343
CVE-2025-49343
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Social Profilr
Social Profilr
Researcher
CVE-ID
CVE-2025-62087
CVE-2025-62087
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Sticky Notes for WP Dashboard
Sticky Notes for WP Dashboard
Researcher
CVE-ID
CVE-2025-69013
CVE-2025-69013
Patch Status
Patched
Patched
Published
Dec 27, 2025
Dec 27, 2025
Affected Software
Stratum Widgets for Elementor
Stratum Widgets for Elementor
Researcher
CVE-ID
CVE-2025-14426
CVE-2025-14426
Patch Status
Patched
Patched
Published
Dec 29, 2025
Dec 29, 2025
Affected Software
Strong Testimonials
Strong Testimonials
Researcher
CVE-ID
CVE-2025-69029
CVE-2025-69029
Patch Status
Unpatched
Unpatched
Published
Dec 29, 2025
Dec 29, 2025
Affected Software
Struktur – Creative Agency WordPress Theme
Struktur – Creative Agency WordPress Theme
Researcher
CVE-ID
CVE-2025-68535
CVE-2025-68535
Patch Status
Patched
Patched
Published
Dec 30, 2025
Dec 30, 2025
Affected Software
Sunshine Photo Cart: Free Client Photo Galleries for Photographers
Sunshine Photo Cart: Free Client Photo Galleries for Photographers
Researcher
CVE-ID
CVE-2025-14618
CVE-2025-14618
Patch Status
Patched
Patched
Published
Dec 17, 2025
Dec 17, 2025
Affected Software
Sweet Energy Efficiency
Sweet Energy Efficiency
Researcher
CVE-ID
CVE-2025-68517
CVE-2025-68517
Patch Status
Patched
Patched
Published
Dec 22, 2025
Dec 22, 2025
Researcher
CVE-ID
CVE-2025-62132
CVE-2025-62132
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Tasty Recipes Lite
Tasty Recipes Lite
Researcher
CVE-ID
CVE-2025-62131
CVE-2025-62131
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Tasty Recipes Lite
Tasty Recipes Lite
Researcher
CVE-ID
CVE-2025-68569
CVE-2025-68569
Patch Status
Patched
Patched
Published
Dec 20, 2025
Dec 20, 2025
Affected Software
WP Time Slots Booking Form
WP Time Slots Booking Form
Researcher
CVE-ID
CVE-2025-68588
CVE-2025-68588
Patch Status
Unpatched
Unpatched
Published
Dec 22, 2025
Dec 22, 2025
Affected Software
TS Poll – Survey, Versus Poll, Image Poll, Video Poll
TS Poll – Survey, Versus Poll, Image Poll, Video Poll
Researcher
CVE-ID
CVE-2025-14081
CVE-2025-14081
Patch Status
Patched
Patched
Published
Dec 16, 2025
Dec 16, 2025
CVE-ID
CVE-2025-66149
CVE-2025-66149
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
UnGrabber
UnGrabber
Researcher
CVE-ID
CVE-2025-67593
CVE-2025-67593
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP
Researcher
CVE-ID
CVE-2025-68584
CVE-2025-68584
Patch Status
Patched
Patched
Published
Dec 25, 2025
Dec 25, 2025
Affected Software
Vimeotheque – Vimeo WordPress Plugin & Video Gallery
Vimeotheque – Vimeo WordPress Plugin & Video Gallery
Researcher
CVE-ID
CVE-2025-68576
CVE-2025-68576
Patch Status
Patched
Patched
Published
Dec 21, 2025
Dec 21, 2025
Affected Software
Virusdie – One-click website security
Virusdie – One-click website security
Researcher
CVE-ID
CVE-2025-68577
CVE-2025-68577
Patch Status
Patched
Patched
Published
Dec 21, 2025
Dec 21, 2025
Affected Software
Virusdie – One-click website security
Virusdie – One-click website security
Researcher
CVE-ID
CVE-2025-68551
CVE-2025-68551
Patch Status
Patched
Patched
Published
Dec 23, 2025
Dec 23, 2025
Affected Software
VPSUForm – Drag & Drop Contact Form Builder with Email Automation
VPSUForm – Drag & Drop Contact Form Builder with Email Automation
Researcher
CVE-ID
CVE-2025-66159
CVE-2025-66159
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Google Street View for Elementor – Walker
Google Street View for Elementor – Walker
Researcher
CVE-ID
CVE-2025-66156
CVE-2025-66156
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Watcher – Flexible Video Player for Elementor
Watcher – Flexible Video Player for Elementor
Researcher
CVE-ID
CVE-2025-54004
CVE-2025-54004
Patch Status
Unpatched
Unpatched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible
WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible
Researcher
CVE-ID
CVE-2025-64631
CVE-2025-64631
Patch Status
Unpatched
Unpatched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
WCFM Marketplace – Multivendor Marketplace for WooCommerce
WCFM Marketplace – Multivendor Marketplace for WooCommerce
Researcher
CVE-ID
CVE-2025-13361
CVE-2025-13361
Patch Status
Patched
Patched
Published
Dec 20, 2025
Dec 20, 2025
Affected Software
Web to SugarCRM Lead
Web to SugarCRM Lead
Researcher
CVE-ID
CVE-2025-66530
CVE-2025-66530
Patch Status
Patched
Patched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Easy Appointment Booking & Scheduling System – Webba Booking Calendar
Easy Appointment Booking & Scheduling System – Webba Booking Calendar
Researcher
CVE-ID
CVE-2025-52835
CVE-2025-52835
Patch Status
Unpatched
Unpatched
Published
Dec 30, 2025
Dec 30, 2025
Affected Software
WING WordPress Migrator
WING WordPress Migrator
Researcher
CVE-ID
CVE-2025-66144
CVE-2025-66144
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Business hours widget for Elementor – Worker
Business hours widget for Elementor – Worker
Researcher
CVE-ID
CVE-2025-66145
CVE-2025-66145
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Business Hours for WPBakery – Worker
Business Hours for WPBakery – Worker
Researcher
CVE-ID
CVE-2025-14168
CVE-2025-14168
Patch Status
Unpatched
Unpatched
Published
Dec 19, 2025
Dec 19, 2025
Affected Software
WP DB Booster
WP DB Booster
Researcher
CVE-ID
CVE-2025-7733
CVE-2025-7733
Patch Status
Unpatched
Unpatched
Published
Dec 20, 2025
Dec 20, 2025
Affected Software
WP JobHunt
WP JobHunt
Researcher
CVE-ID
CVE-2025-59131
CVE-2025-59131
Patch Status
Unpatched
Unpatched
Published
Dec 30, 2025
Dec 30, 2025
Affected Software
WP-CalDav2ICS
WP-CalDav2ICS
Researcher
CVE-ID
CVE-2025-49345
CVE-2025-49345
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
WP-EasyArchives
WP-EasyArchives
Researcher
CVE-ID
CVE-2025-68522
CVE-2025-68522
Patch Status
Patched
Patched
Published
Dec 30, 2025
Dec 30, 2025
Affected Software
WpStream – Live Streaming, Video on Demand, Pay Per View
WpStream – Live Streaming, Video on Demand, Pay Per View
Researcher
CVE-ID
CVE-2025-68581
CVE-2025-68581
Patch Status
Unpatched
Unpatched
Published
Dec 24, 2025
Dec 24, 2025
Affected Software
YITH Slider for page builders
YITH Slider for page builders
Researcher
CVE-ID
CVE-2025-49028
CVE-2025-49028
Patch Status
Unpatched
Unpatched
Published
Dec 31, 2025
Dec 31, 2025
Affected Software
Zoho ZeptoMail
Zoho ZeptoMail
Researcher
CVE-ID
CVE-2025-64253
CVE-2025-64253
Patch Status
Unpatched
Unpatched
Published
Dec 15, 2025
Dec 15, 2025
Affected Software
Health Check & Troubleshooting
Health Check & Troubleshooting
Researcher
CVE-ID
CVE-2025-12654
CVE-2025-12654
Patch Status
Patched
Patched
Published
Dec 20, 2025
Dec 20, 2025
Affected Software
Migration, Backup, Staging – WPvivid Backup & Migration
Migration, Backup, Staging – WPvivid Backup & Migration
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
The post Wordfence Intelligence Weekly WordPress Vulnerability Report (December 15, 2025 to January 4, 2026) appeared first on Wordfence.
