Skip to content
Founder-led WordPress incident response and care Request an assessment
3zerodigital Request a Website Assessment

Plugin security history

YITH WooCommerce Multi Vendor Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 4 vulnerability records associated with YITH WooCommerce Multi Vendor, published between 2019 and 2022.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

4Total records
0Critical
1High
3Medium
0Low
0Informational
2Patched records
2Currently marked unpatched
2019-10-31First disclosure
2022-11-11Latest disclosure
2 of 4CVE coverage

Year-by-Year Timeline

YearRecordsRelative volume
201911 records
202111 records
202222 records

Severity Breakdown

SeverityRecordsShare
High125%
Medium375%

Vulnerability-Type Breakdown

Missing Authorization

2 records50%

First: 2019. Latest: 2022.

Cross-Site Scripting

1 record25%

First: 2021. Latest: 2021.

CSRF

1 record25%

First: 2022. Latest: 2022.

Patch Status

Patched
2
Currently marked unpatched
2
Unknown status
0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

  • 3.8.1
  • 3.4.1

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected rangeVulnerabilityPublishedPatched versionSeverity
*-3.9.0YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request ForgeryNovember 11, 2022Not suppliedMedium
*-3.9.0YITH plugins by YITHEMES <= (Various Versions) - Missing AuthorizationNovember 11, 2022Not suppliedHigh
[*, 3.8.1)YITH WooCommerce Multi Vendor <= 3.8.0 - Reflected Cross-Site ScriptingOctober 11, 20213.8.1Medium
*-3.4.0YIT Plugin Framework <= 3.3.8 - Authenticated Settings ChangeOctober 31, 20193.4.1Medium

Selected source records

Latest Records

High

YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization

Published: November 11, 2022

Affected versions
*-1.2.27
Patched versions
Not supplied
Affected versions
*-2.14.0
Patched versions
2.15.0
Affected versions
*-1.21.0
Patched versions
1.21.1
Affected versions
*-2.10.0
Patched versions
2.11.0
Affected versions
*-2.15.0
Patched versions
2.16.0
Affected versions
*-1.17.0
Patched versions
1.17.1
Affected versions
*-1.5.0
Patched versions
Not supplied
Affected versions
*-1.2.6
Patched versions
Not supplied
Affected versions
*-1.3.0
Patched versions
Not supplied
Affected versions
*-2.7.0
Patched versions
2.8.0
Affected versions
*-1.8.0
Patched versions
Not supplied
Affected versions
*-2.16.0
Patched versions
2.16.1
Affected versions
*-1.20.0
Patched versions
1.20.1
Affected versions
*-4.15.0
Patched versions
4.16.0
Affected versions
*-3.14.0
Patched versions
3.15.0
Affected versions
*-2.0.17
Patched versions
Not supplied
Affected versions
*-1.9.0
Patched versions
Not supplied
Affected versions
*-1.3.0
Patched versions
Not supplied
Affected versions
*-2.20.0
Patched versions
2.20.1
Affected versions
*-1.25.0
Patched versions
1.25.1
Affected versions
*-1.25.0
Patched versions
1.25.1
Affected versions
*-2.13.0
Patched versions
2.14.0
Affected versions
*-2.5.0
Patched versions
Not supplied
Affected versions
*-1.7.0
Patched versions
1.8.0
Affected versions
*-3.9.0
Patched versions
Not supplied
Affected versions
*-2.5.0
Patched versions
2.6.0
Affected versions
*-1.16.0
Patched versions
1.17.0
Affected versions
*-2.15.0
Patched versions
2.15.1
Affected versions
*-1.21.0
Patched versions
1.21.1
Affected versions
*-1.3.0
Patched versions
Not supplied
Affected versions
*-1.6.0
Patched versions
Not supplied
Affected versions
*-2.5.0
Patched versions
2.6.0
Affected versions
*-2.14.0
Patched versions
2.15.0
Affected versions
*-1.3.1
Patched versions
Not supplied
Affected versions
*-1.6.1
Patched versions
Not supplied
Affected versions
*-2.0.5
Patched versions
Not supplied
Affected versions
*-1.8.0
Patched versions
Not supplied
Affected versions
*-1.16.0
Patched versions
1.16.1
Affected versions
*-2.16.0
Patched versions
2.16.1
Affected versions
*-2.7.0
Patched versions
2.8.0
Affected versions
*-1.21.0
Patched versions
1.21.1
Affected versions
*-1.7.0
Patched versions
Not supplied
Affected versions
*-1.18.0
Patched versions
1.19.1
Affected versions
*-1.18.0
Patched versions
1.18.1
Affected versions
*-1.4.9
Patched versions
Not supplied
Original Wordfence record
MediumCVE-2022-44630

YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery

Published: November 11, 2022

Affected versions
*-1.2.27
Patched versions
Not supplied
Affected versions
*-2.14.0
Patched versions
2.15.0
Affected versions
*-1.21.0
Patched versions
1.21.1
Affected versions
*-2.10.0
Patched versions
2.11.0
Affected versions
*-2.15.0
Patched versions
2.16.0
Affected versions
*-1.17.0
Patched versions
1.17.1
Affected versions
*-1.5.0
Patched versions
Not supplied
Affected versions
*-1.2.6
Patched versions
Not supplied
Affected versions
*-1.3.0
Patched versions
Not supplied
Affected versions
*-2.7.0
Patched versions
2.8.0
Affected versions
*-1.8.0
Patched versions
Not supplied
Affected versions
*-2.16.0
Patched versions
2.16.1
Affected versions
*-1.20.0
Patched versions
1.20.1
Affected versions
*-4.15.0
Patched versions
4.16.0
Affected versions
*-3.14.0
Patched versions
3.15.0
Affected versions
*-2.0.17
Patched versions
Not supplied
Affected versions
*-1.9.0
Patched versions
Not supplied
Affected versions
*-1.3.0
Patched versions
Not supplied
Affected versions
*-2.20.0
Patched versions
2.20.1
Affected versions
*-1.25.0
Patched versions
1.25.1
Affected versions
*-1.25.0
Patched versions
1.25.1
Affected versions
*-2.13.0
Patched versions
2.14.0
Affected versions
*-2.5.0
Patched versions
Not supplied
Affected versions
*-1.7.0
Patched versions
1.8.0
Affected versions
*-3.9.0
Patched versions
Not supplied
Affected versions
*-2.5.0
Patched versions
2.6.0
Affected versions
*-1.16.0
Patched versions
1.17.0
Affected versions
*-2.15.0
Patched versions
2.15.1
Affected versions
*-1.21.0
Patched versions
1.21.1
Affected versions
*-1.3.0
Patched versions
Not supplied
Affected versions
*-1.6.0
Patched versions
Not supplied
Affected versions
*-2.5.0
Patched versions
2.6.0
Affected versions
*-2.14.0
Patched versions
2.15.0
Affected versions
*-1.3.1
Patched versions
Not supplied
Affected versions
*-1.6.1
Patched versions
Not supplied
Affected versions
*-2.0.5
Patched versions
Not supplied
Affected versions
*-1.8.0
Patched versions
Not supplied
Affected versions
*-1.16.0
Patched versions
1.16.1
Affected versions
*-2.16.0
Patched versions
2.16.1
Affected versions
*-2.7.0
Patched versions
2.8.0
Affected versions
*-1.21.0
Patched versions
1.21.1
Affected versions
*-1.7.0
Patched versions
Not supplied
Affected versions
*-1.18.0
Patched versions
1.19.1
Affected versions
*-1.18.0
Patched versions
1.18.1
Affected versions
*-1.4.9
Patched versions
Not supplied
Original Wordfence record
Medium

YITH WooCommerce Multi Vendor <= 3.8.0 - Reflected Cross-Site Scripting

Published: October 11, 2021

Affected versions
[*, 3.8.1)
Patched versions
3.8.1
Original Wordfence record
MediumCVE-2019-16251

YIT Plugin Framework <= 3.3.8 - Authenticated Settings Change

Published: October 31, 2019

Affected versions
*-1.2.13
Patched versions
1.2.14
Affected versions
*-1.3.11
Patched versions
1.3.12
Affected versions
*-1.3.19
Patched versions
1.3.20
Affected versions
*-1.5.21
Patched versions
1.5.23
Affected versions
*-1.1.9
Patched versions
1.2.0
Affected versions
*-1.1.12
Patched versions
1.1.13
Affected versions
*-1.2.10
Patched versions
1.2.11
Affected versions
*-1.4.3
Patched versions
1.4.5
Affected versions
*-1.3.4
Patched versions
1.3.6
Affected versions
*-1.2.5
Patched versions
1.2.6
Affected versions
*-1.0.10
Patched versions
1.0.12
Affected versions
*-2.2.13
Patched versions
2.2.14
Affected versions
*-2.0.1
Patched versions
2.0.2
Affected versions
*-1.1.6
Patched versions
1.1.8
Affected versions
*-2.3.13
Patched versions
2.3.15
Affected versions
*-1.8.11
Patched versions
1.8.13
Affected versions
*-1.6.9
Patched versions
1.7.1
Affected versions
*-2.1.3
Patched versions
2.1.4
Affected versions
*-1.1.1
Patched versions
1.1.13
Affected versions
*-1.1.11
Patched versions
1.1.13
Affected versions
*-3.4.0
Patched versions
3.4.1
Affected versions
*-1.1.9
Patched versions
1.2.1
Affected versions
*-1.1.15
Patched versions
1.1.17
Affected versions
*-1.4.7
Patched versions
1.4.9
Affected versions
*-1.3.9
Patched versions
1.3.11
Affected versions
*-1.2.12
Patched versions
1.2.13
Affected versions
*-1.3.6
Patched versions
1.3.7
Affected versions
*-1.3.7
Patched versions
1.3.8
Affected versions
*-1.3.4
Patched versions
1.3.6
Affected versions
*-1.7.4
Patched versions
1.7.5
Affected versions
*-1.3.11
Patched versions
1.3.13
Affected versions
*-1.2.7
Patched versions
1.2.8
Affected versions
[*, 1.6.3)
Patched versions
1.6.3
Affected versions
*-1.3.13
Patched versions
1.3.15
Affected versions
*-1.3.9
Patched versions
1.4.0
Affected versions
*-1.2.10
Patched versions
1.2.11
Affected versions
*-1.3.2
Patched versions
1.3.4
Affected versions
*-1.3.4
Patched versions
1.3.6
Original Wordfence record

Highest-Severity Records

High

YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization

Published: November 11, 2022

Affected versions
*-1.2.27
Patched versions
Not supplied
Affected versions
*-2.14.0
Patched versions
2.15.0
Affected versions
*-1.21.0
Patched versions
1.21.1
Affected versions
*-2.10.0
Patched versions
2.11.0
Affected versions
*-2.15.0
Patched versions
2.16.0
Affected versions
*-1.17.0
Patched versions
1.17.1
Affected versions
*-1.5.0
Patched versions
Not supplied
Affected versions
*-1.2.6
Patched versions
Not supplied
Affected versions
*-1.3.0
Patched versions
Not supplied
Affected versions
*-2.7.0
Patched versions
2.8.0
Affected versions
*-1.8.0
Patched versions
Not supplied
Affected versions
*-2.16.0
Patched versions
2.16.1
Affected versions
*-1.20.0
Patched versions
1.20.1
Affected versions
*-4.15.0
Patched versions
4.16.0
Affected versions
*-3.14.0
Patched versions
3.15.0
Affected versions
*-2.0.17
Patched versions
Not supplied
Affected versions
*-1.9.0
Patched versions
Not supplied
Affected versions
*-1.3.0
Patched versions
Not supplied
Affected versions
*-2.20.0
Patched versions
2.20.1
Affected versions
*-1.25.0
Patched versions
1.25.1
Affected versions
*-1.25.0
Patched versions
1.25.1
Affected versions
*-2.13.0
Patched versions
2.14.0
Affected versions
*-2.5.0
Patched versions
Not supplied
Affected versions
*-1.7.0
Patched versions
1.8.0
Affected versions
*-3.9.0
Patched versions
Not supplied
Affected versions
*-2.5.0
Patched versions
2.6.0
Affected versions
*-1.16.0
Patched versions
1.17.0
Affected versions
*-2.15.0
Patched versions
2.15.1
Affected versions
*-1.21.0
Patched versions
1.21.1
Affected versions
*-1.3.0
Patched versions
Not supplied
Affected versions
*-1.6.0
Patched versions
Not supplied
Affected versions
*-2.5.0
Patched versions
2.6.0
Affected versions
*-2.14.0
Patched versions
2.15.0
Affected versions
*-1.3.1
Patched versions
Not supplied
Affected versions
*-1.6.1
Patched versions
Not supplied
Affected versions
*-2.0.5
Patched versions
Not supplied
Affected versions
*-1.8.0
Patched versions
Not supplied
Affected versions
*-1.16.0
Patched versions
1.16.1
Affected versions
*-2.16.0
Patched versions
2.16.1
Affected versions
*-2.7.0
Patched versions
2.8.0
Affected versions
*-1.21.0
Patched versions
1.21.1
Affected versions
*-1.7.0
Patched versions
Not supplied
Affected versions
*-1.18.0
Patched versions
1.19.1
Affected versions
*-1.18.0
Patched versions
1.18.1
Affected versions
*-1.4.9
Patched versions
Not supplied
Original Wordfence record
Medium

YITH WooCommerce Multi Vendor <= 3.8.0 - Reflected Cross-Site Scripting

Published: October 11, 2021

Affected versions
[*, 3.8.1)
Patched versions
3.8.1
Original Wordfence record
MediumCVE-2019-16251

YIT Plugin Framework <= 3.3.8 - Authenticated Settings Change

Published: October 31, 2019

Affected versions
*-1.2.13
Patched versions
1.2.14
Affected versions
*-1.3.11
Patched versions
1.3.12
Affected versions
*-1.3.19
Patched versions
1.3.20
Affected versions
*-1.5.21
Patched versions
1.5.23
Affected versions
*-1.1.9
Patched versions
1.2.0
Affected versions
*-1.1.12
Patched versions
1.1.13
Affected versions
*-1.2.10
Patched versions
1.2.11
Affected versions
*-1.4.3
Patched versions
1.4.5
Affected versions
*-1.3.4
Patched versions
1.3.6
Affected versions
*-1.2.5
Patched versions
1.2.6
Affected versions
*-1.0.10
Patched versions
1.0.12
Affected versions
*-2.2.13
Patched versions
2.2.14
Affected versions
*-2.0.1
Patched versions
2.0.2
Affected versions
*-1.1.6
Patched versions
1.1.8
Affected versions
*-2.3.13
Patched versions
2.3.15
Affected versions
*-1.8.11
Patched versions
1.8.13
Affected versions
*-1.6.9
Patched versions
1.7.1
Affected versions
*-2.1.3
Patched versions
2.1.4
Affected versions
*-1.1.1
Patched versions
1.1.13
Affected versions
*-1.1.11
Patched versions
1.1.13
Affected versions
*-3.4.0
Patched versions
3.4.1
Affected versions
*-1.1.9
Patched versions
1.2.1
Affected versions
*-1.1.15
Patched versions
1.1.17
Affected versions
*-1.4.7
Patched versions
1.4.9
Affected versions
*-1.3.9
Patched versions
1.3.11
Affected versions
*-1.2.12
Patched versions
1.2.13
Affected versions
*-1.3.6
Patched versions
1.3.7
Affected versions
*-1.3.7
Patched versions
1.3.8
Affected versions
*-1.3.4
Patched versions
1.3.6
Affected versions
*-1.7.4
Patched versions
1.7.5
Affected versions
*-1.3.11
Patched versions
1.3.13
Affected versions
*-1.2.7
Patched versions
1.2.8
Affected versions
[*, 1.6.3)
Patched versions
1.6.3
Affected versions
*-1.3.13
Patched versions
1.3.15
Affected versions
*-1.3.9
Patched versions
1.4.0
Affected versions
*-1.2.10
Patched versions
1.2.11
Affected versions
*-1.3.2
Patched versions
1.3.4
Affected versions
*-1.3.4
Patched versions
1.3.6
Original Wordfence record
MediumCVE-2022-44630

YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery

Published: November 11, 2022

Affected versions
*-1.2.27
Patched versions
Not supplied
Affected versions
*-2.14.0
Patched versions
2.15.0
Affected versions
*-1.21.0
Patched versions
1.21.1
Affected versions
*-2.10.0
Patched versions
2.11.0
Affected versions
*-2.15.0
Patched versions
2.16.0
Affected versions
*-1.17.0
Patched versions
1.17.1
Affected versions
*-1.5.0
Patched versions
Not supplied
Affected versions
*-1.2.6
Patched versions
Not supplied
Affected versions
*-1.3.0
Patched versions
Not supplied
Affected versions
*-2.7.0
Patched versions
2.8.0
Affected versions
*-1.8.0
Patched versions
Not supplied
Affected versions
*-2.16.0
Patched versions
2.16.1
Affected versions
*-1.20.0
Patched versions
1.20.1
Affected versions
*-4.15.0
Patched versions
4.16.0
Affected versions
*-3.14.0
Patched versions
3.15.0
Affected versions
*-2.0.17
Patched versions
Not supplied
Affected versions
*-1.9.0
Patched versions
Not supplied
Affected versions
*-1.3.0
Patched versions
Not supplied
Affected versions
*-2.20.0
Patched versions
2.20.1
Affected versions
*-1.25.0
Patched versions
1.25.1
Affected versions
*-1.25.0
Patched versions
1.25.1
Affected versions
*-2.13.0
Patched versions
2.14.0
Affected versions
*-2.5.0
Patched versions
Not supplied
Affected versions
*-1.7.0
Patched versions
1.8.0
Affected versions
*-3.9.0
Patched versions
Not supplied
Affected versions
*-2.5.0
Patched versions
2.6.0
Affected versions
*-1.16.0
Patched versions
1.17.0
Affected versions
*-2.15.0
Patched versions
2.15.1
Affected versions
*-1.21.0
Patched versions
1.21.1
Affected versions
*-1.3.0
Patched versions
Not supplied
Affected versions
*-1.6.0
Patched versions
Not supplied
Affected versions
*-2.5.0
Patched versions
2.6.0
Affected versions
*-2.14.0
Patched versions
2.15.0
Affected versions
*-1.3.1
Patched versions
Not supplied
Affected versions
*-1.6.1
Patched versions
Not supplied
Affected versions
*-2.0.5
Patched versions
Not supplied
Affected versions
*-1.8.0
Patched versions
Not supplied
Affected versions
*-1.16.0
Patched versions
1.16.1
Affected versions
*-2.16.0
Patched versions
2.16.1
Affected versions
*-2.7.0
Patched versions
2.8.0
Affected versions
*-1.21.0
Patched versions
1.21.1
Affected versions
*-1.7.0
Patched versions
Not supplied
Affected versions
*-1.18.0
Patched versions
1.19.1
Affected versions
*-1.18.0
Patched versions
1.18.1
Affected versions
*-1.4.9
Patched versions
Not supplied
Original Wordfence record

Currently Marked Unpatched Records

High

YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization

Published: November 11, 2022

Affected versions
*-1.2.27
Patched versions
Not supplied
Affected versions
*-2.14.0
Patched versions
2.15.0
Affected versions
*-1.21.0
Patched versions
1.21.1
Affected versions
*-2.10.0
Patched versions
2.11.0
Affected versions
*-2.15.0
Patched versions
2.16.0
Affected versions
*-1.17.0
Patched versions
1.17.1
Affected versions
*-1.5.0
Patched versions
Not supplied
Affected versions
*-1.2.6
Patched versions
Not supplied
Affected versions
*-1.3.0
Patched versions
Not supplied
Affected versions
*-2.7.0
Patched versions
2.8.0
Affected versions
*-1.8.0
Patched versions
Not supplied
Affected versions
*-2.16.0
Patched versions
2.16.1
Affected versions
*-1.20.0
Patched versions
1.20.1
Affected versions
*-4.15.0
Patched versions
4.16.0
Affected versions
*-3.14.0
Patched versions
3.15.0
Affected versions
*-2.0.17
Patched versions
Not supplied
Affected versions
*-1.9.0
Patched versions
Not supplied
Affected versions
*-1.3.0
Patched versions
Not supplied
Affected versions
*-2.20.0
Patched versions
2.20.1
Affected versions
*-1.25.0
Patched versions
1.25.1
Affected versions
*-1.25.0
Patched versions
1.25.1
Affected versions
*-2.13.0
Patched versions
2.14.0
Affected versions
*-2.5.0
Patched versions
Not supplied
Affected versions
*-1.7.0
Patched versions
1.8.0
Affected versions
*-3.9.0
Patched versions
Not supplied
Affected versions
*-2.5.0
Patched versions
2.6.0
Affected versions
*-1.16.0
Patched versions
1.17.0
Affected versions
*-2.15.0
Patched versions
2.15.1
Affected versions
*-1.21.0
Patched versions
1.21.1
Affected versions
*-1.3.0
Patched versions
Not supplied
Affected versions
*-1.6.0
Patched versions
Not supplied
Affected versions
*-2.5.0
Patched versions
2.6.0
Affected versions
*-2.14.0
Patched versions
2.15.0
Affected versions
*-1.3.1
Patched versions
Not supplied
Affected versions
*-1.6.1
Patched versions
Not supplied
Affected versions
*-2.0.5
Patched versions
Not supplied
Affected versions
*-1.8.0
Patched versions
Not supplied
Affected versions
*-1.16.0
Patched versions
1.16.1
Affected versions
*-2.16.0
Patched versions
2.16.1
Affected versions
*-2.7.0
Patched versions
2.8.0
Affected versions
*-1.21.0
Patched versions
1.21.1
Affected versions
*-1.7.0
Patched versions
Not supplied
Affected versions
*-1.18.0
Patched versions
1.19.1
Affected versions
*-1.18.0
Patched versions
1.18.1
Affected versions
*-1.4.9
Patched versions
Not supplied
Original Wordfence record
MediumCVE-2022-44630

YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery

Published: November 11, 2022

Affected versions
*-1.2.27
Patched versions
Not supplied
Affected versions
*-2.14.0
Patched versions
2.15.0
Affected versions
*-1.21.0
Patched versions
1.21.1
Affected versions
*-2.10.0
Patched versions
2.11.0
Affected versions
*-2.15.0
Patched versions
2.16.0
Affected versions
*-1.17.0
Patched versions
1.17.1
Affected versions
*-1.5.0
Patched versions
Not supplied
Affected versions
*-1.2.6
Patched versions
Not supplied
Affected versions
*-1.3.0
Patched versions
Not supplied
Affected versions
*-2.7.0
Patched versions
2.8.0
Affected versions
*-1.8.0
Patched versions
Not supplied
Affected versions
*-2.16.0
Patched versions
2.16.1
Affected versions
*-1.20.0
Patched versions
1.20.1
Affected versions
*-4.15.0
Patched versions
4.16.0
Affected versions
*-3.14.0
Patched versions
3.15.0
Affected versions
*-2.0.17
Patched versions
Not supplied
Affected versions
*-1.9.0
Patched versions
Not supplied
Affected versions
*-1.3.0
Patched versions
Not supplied
Affected versions
*-2.20.0
Patched versions
2.20.1
Affected versions
*-1.25.0
Patched versions
1.25.1
Affected versions
*-1.25.0
Patched versions
1.25.1
Affected versions
*-2.13.0
Patched versions
2.14.0
Affected versions
*-2.5.0
Patched versions
Not supplied
Affected versions
*-1.7.0
Patched versions
1.8.0
Affected versions
*-3.9.0
Patched versions
Not supplied
Affected versions
*-2.5.0
Patched versions
2.6.0
Affected versions
*-1.16.0
Patched versions
1.17.0
Affected versions
*-2.15.0
Patched versions
2.15.1
Affected versions
*-1.21.0
Patched versions
1.21.1
Affected versions
*-1.3.0
Patched versions
Not supplied
Affected versions
*-1.6.0
Patched versions
Not supplied
Affected versions
*-2.5.0
Patched versions
2.6.0
Affected versions
*-2.14.0
Patched versions
2.15.0
Affected versions
*-1.3.1
Patched versions
Not supplied
Affected versions
*-1.6.1
Patched versions
Not supplied
Affected versions
*-2.0.5
Patched versions
Not supplied
Affected versions
*-1.8.0
Patched versions
Not supplied
Affected versions
*-1.16.0
Patched versions
1.16.1
Affected versions
*-2.16.0
Patched versions
2.16.1
Affected versions
*-2.7.0
Patched versions
2.8.0
Affected versions
*-1.21.0
Patched versions
1.21.1
Affected versions
*-1.7.0
Patched versions
Not supplied
Affected versions
*-1.18.0
Patched versions
1.19.1
Affected versions
*-1.18.0
Patched versions
1.18.1
Affected versions
*-1.4.9
Patched versions
Not supplied
Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory