Cross-Site Scripting
4 records40%First: 2010. Latest: 2025.
Plugin security history
WPtouch – Make your WordPress Website Mobile-Friendly Vulnerability History & Security Timeline
The Wordfence Intelligence dataset currently contains 10 vulnerability records associated with WPtouch – Make your WordPress Website Mobile-Friendly, published between 2010 and 2025.
Dataset last synchronized: 2026-08-03 00:31:25 UTC
At a glance
Security Snapshot
10Total records
1Critical
4High
5Medium
0Low
0Informational
10Patched records
0Currently marked unpatched
2010-12-01First disclosure
2025-06-05Latest disclosure
5 of 10CVE coverage
Use this history
Check and watch WPtouch – Make your WordPress Website Mobile-Friendly.
A history record does not establish whether the version installed on your website is affected. Enter the exact version in the checker, or add this software to a private Critical/High alert watchlist.
Year-by-Year Timeline
| Year | Records | Relative volume |
|---|---|---|
| 2010 | 1 | |
| 2011 | 1 | |
| 2014 | 2 | |
| 2015 | 2 | |
| 2022 | 3 | |
| 2025 | 1 |
Severity Breakdown
| Severity | Records | Share |
|---|---|---|
| Critical | 1 | 10% |
| High | 4 | 40% |
| Medium | 5 | 50% |
Vulnerability-Type Breakdown
Other
3 records30%First: 2014. Latest: 2022.
Arbitrary File Upload
2 records20%First: 2014. Latest: 2022.
SQL Injection
1 record10%First: 2011. Latest: 2011.
Patch Status
- Patched
- 10
- Currently marked unpatched
- 0
- Unknown status
- 0
Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.
Latest Known Patched Versions
4.3.614.3.454.3.443.7.63.73.4.31.9.301.9.8.11.9.20
Affected-Version History
Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.
| Affected range | Vulnerability | Published | Patched version | Severity |
|---|---|---|---|---|
*-4.3.60 | WPtouch <= 4.3.60 - Authenticated (Administrator+) Stored Cross-Site Scripting | June 5, 2025 | 4.3.61 | Medium |
*-4.3.44 | WPtouch <= 4.3.44 - Authenticated (Administrator+) Arbitrary File Upload | December 19, 2022 | 4.3.45 | High |
*-4.3.44 | WPtouch <= 4.3.44 - Authenticated (Administrator+) PHP Object Injection | December 19, 2022 | 4.3.45 | High |
*-4.3.42 | WPtouch <= 4.3.42 - Reflected Cross-Site Scripting | August 25, 2022 | 4.3.44 | Medium |
[*, 3.7.6) | WPtouch <= 3.7.5.3 - Cross-Site Scripting | April 20, 2015 | 3.7.6 | High |
[*, 3.7) | WPTouch < 3.7 - Open Redirect | January 29, 2015 | 3.7 | Medium |
*-3.4.2 | WPtouch <= 3.4.2 - Arbitrary File Upload | August 1, 2014 | 3.4.3 | Critical |
[*, 1.9.30) | WPtouch < 1.9.30 - Open Redirect | August 1, 2014 | 1.9.30 | Medium |
[*, 1.9.8.1) | WPtouch <= 1.9.8 - SQL Injection | October 27, 2011 | 1.9.8.1 | High |
[*, 1.9.20) | WPtouch < 1.9.20 - Cross-Site Scripting | December 1, 2010 | 1.9.20 | Medium |
Selected source records
Latest Records
MediumCVE-2025-49318
WPtouch <= 4.3.60 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published: June 5, 2025
- Affected versions
- *-4.3.60
- Patched versions
- 4.3.61
HighCVE-2022-3417
WPtouch <= 4.3.44 - Authenticated (Administrator+) PHP Object Injection
Published: December 19, 2022
- Affected versions
- *-4.3.44
- Patched versions
- 4.3.45
HighCVE-2022-3416
WPtouch <= 4.3.44 - Authenticated (Administrator+) Arbitrary File Upload
Published: December 19, 2022
- Affected versions
- *-4.3.44
- Patched versions
- 4.3.45
Medium
WPtouch <= 4.3.42 - Reflected Cross-Site Scripting
Published: August 25, 2022
- Affected versions
- *-4.3.42
- Patched versions
- 4.3.44
High
WPtouch <= 3.7.5.3 - Cross-Site Scripting
Published: April 20, 2015
- Affected versions
- [*, 3.7.6)
- Patched versions
- 3.7.6
Medium
WPTouch < 3.7 - Open Redirect
Published: January 29, 2015
- Affected versions
- [*, 3.7)
- Patched versions
- 3.7
Medium
WPtouch < 1.9.30 - Open Redirect
Published: August 1, 2014
- Affected versions
- [*, 1.9.30)
- Patched versions
- 1.9.30
Critical
WPtouch <= 3.4.2 - Arbitrary File Upload
Published: August 1, 2014
- Affected versions
- *-3.4.2
- Patched versions
- 3.4.3
Highest-Severity Records
Critical
WPtouch <= 3.4.2 - Arbitrary File Upload
Published: August 1, 2014
- Affected versions
- *-3.4.2
- Patched versions
- 3.4.3
HighCVE-2011-4803
WPtouch <= 1.9.8 - SQL Injection
Published: October 27, 2011
- Affected versions
- [*, 1.9.8.1)
- Patched versions
- 1.9.8.1
High
WPtouch <= 3.7.5.3 - Cross-Site Scripting
Published: April 20, 2015
- Affected versions
- [*, 3.7.6)
- Patched versions
- 3.7.6
HighCVE-2022-3417
WPtouch <= 4.3.44 - Authenticated (Administrator+) PHP Object Injection
Published: December 19, 2022
- Affected versions
- *-4.3.44
- Patched versions
- 4.3.45
HighCVE-2022-3416
WPtouch <= 4.3.44 - Authenticated (Administrator+) Arbitrary File Upload
Published: December 19, 2022
- Affected versions
- *-4.3.44
- Patched versions
- 4.3.45
Medium
WPtouch <= 4.3.42 - Reflected Cross-Site Scripting
Published: August 25, 2022
- Affected versions
- *-4.3.42
- Patched versions
- 4.3.44
Medium
WPtouch < 1.9.30 - Open Redirect
Published: August 1, 2014
- Affected versions
- [*, 1.9.30)
- Patched versions
- 1.9.30
MediumCVE-2010-4779
WPtouch < 1.9.20 - Cross-Site Scripting
Published: December 1, 2010
- Affected versions
- [*, 1.9.20)
- Patched versions
- 1.9.20
Need help reviewing an exposed WordPress website?
Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.
Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.
Data Source, Attribution and Methodology
This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.