Skip to content
Founder-led WordPress incident response and care Request an assessment
3zerodigital Request a Website Assessment

WordPress security records

WordPress Vulnerability Listing

Filter Production Feed records and inspect affected software, version ranges, severity, patch information and source attribution without opening separate UUID pages.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

Clear filters

3 vulnerability records

MediumCVE-2023-2813

Multiple Themes (Various Versions) - Reflected Cross-Site Scripting via Search Field

College: Currently marked unpatchedAnfaust: Currently marked unpatchedBrain Power: Currently marked unpatchedBunnyPressLite: Currently marked unpatchedBazaar Lite: Currently marked unpatchedCafe Bistro: Currently marked unpatchedArendelle: Currently marked unpatchedAnand: Currently marked unpatchedAtlast Business: Currently marked unpatchedAapna: Currently marked unpatched

Affected versions: [*, 1.5.1); *; *; [*, 2.1); [*, 1.8.6); [*, 1.1.4); [*, 1.1.3); *

Vulnerability type: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected software, patched versions and attribution

Multiple themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the search field in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

College

Affected versions: [*, 1.5.1)

Patched versions: 1.5.1

Anfaust

Affected versions: *

Patched versions: Not supplied

Brain Power

Affected versions: *

Patched versions: Not supplied

BunnyPressLite

Affected versions: [*, 2.1)

Patched versions: 2.1

Bazaar Lite

Affected versions: [*, 1.8.6)

Patched versions: 1.8.6

Cafe Bistro

Affected versions: [*, 1.1.4)

Patched versions: 1.1.4

Arendelle

Affected versions: [*, 1.1.3)

Patched versions: 1.1.3

Anand

Affected versions: *

Patched versions: Not supplied

Atlast Business

Affected versions: *

Patched versions: Not supplied

Aapna

Affected versions: *

Patched versions: Not supplied

Researcher credit: Random Robbie

Applicable copyright and licence notices

This record contains material that is subject to copyright

Copyright 2012-2026 Defiant Inc.

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

Copyright 1999-2026 The MITRE Corporation

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record
Published
August 14, 2023
CVSS
6.1
MediumCVE-2023-3708

Multiple DeoThemes Themes <= (Various Versions) - Reflected Cross-Site Scripting

Everse: Currently marked unpatchedNokke: Currently marked unpatchedMedikAid | Medical Health Care RTL WordPress Theme: Currently marked unpatchedArendelle: Currently marked unpatchedAmela: Currently marked unpatched

Affected versions: *-1.8.10; *-1.2.3; *-1.1.2; *-1.1.12; *-1.0.13

Vulnerability type: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected software, patched versions and attribution

Several themes for WordPress by DeoThemes are vulnerable to Reflected Cross-Site Scripting via breadcrumbs in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

Everse

Affected versions: *-1.8.10

Patched versions: 1.8.12

Nokke

Affected versions: *-1.2.3

Patched versions: 1.2.4

MedikAid | Medical Health Care RTL WordPress Theme

Affected versions: *-1.1.2

Patched versions: 1.1.3

Arendelle

Affected versions: *-1.1.12

Patched versions: 1.1.13

Amela

Affected versions: *-1.0.13

Patched versions: 1.0.14

Researcher credit: R3N0

Applicable copyright and licence notices

This record contains material that is subject to copyright

Copyright 2012-2026 Defiant Inc.

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

Copyright 1999-2026 The MITRE Corporation

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record
Published
July 17, 2023
CVSS
6.1
MediumCVE-2022-4974

Freemius SDK <= 2.4.2 - Missing Authorization Checks

YASR – Yet Another Star Rating Plugin for WordPress: Currently marked unpatchedEvents Addon for Elementor: Currently marked unpatchedFraud Prevention For WooCommerce and EDD: Currently marked unpatchedGutenberg Blocks – ACF Blocks Suite: Currently marked unpatchedUltimeter: Currently marked unpatchedPast Events Extension: Currently marked unpatchedPootle Pagebuilder – WordPress Page builder: Currently marked unpatchedLocal Delivery Drivers for WooCommerce: Currently marked unpatchedUltimate Gutenberg – Custom Block Templates: Currently marked unpatchedWP Required Taxonomies – Categories and Tags Mandatory: Currently marked unpatchedFeatured Products First for WooCommerce – A Extension of WooCommerce (WooCommerce Addon Plugin): Currently marked unpatchedSSL Zen — SSL Certificate Installer & HTTPS Redirects: Currently marked unpatchedStreak CRM For Gmail For Contact Form 7 – WordPress Plugin: Currently marked unpatchedWordPress Dev Powers – ACF Color Coded Field Types Plugin: Currently marked unpatchedDancePress (TRWA): Currently marked unpatchedProduct Size Charts Plugin for WooCommerce: Currently marked unpatchedWp My Admin Bar: Currently marked unpatchedA no-code page builder for beautiful performance-based content: Currently marked unpatchedLocalSEOMap: Currently marked unpatchedEasy Prayer: Currently marked unpatchedAdFoxly – Ad Manager, AdSense Ads & Ads.txt: Currently marked unpatchedWP Get Personal: Currently marked unpatchedCheckout with Cash App on EDD: Currently marked unpatchedServer Info – System Health & Diagnostics Suite: Currently marked unpatchedCustom WooCommerce Checkout Fields Editor: Currently marked unpatchedKRSP Frontend File Uploader: Currently marked unpatchedPanorama – turn photos into immersive virtual tours: Currently marked unpatchedBulk Attachment Download: Currently marked unpatchedAutoSave Net: Currently marked unpatchedPremmerce Wholesale Pricing for WooCommerce: Currently marked unpatchedAny Popup – Popup Forms, Optins & Ads: Currently marked unpatchedCheckout with Venmo on EDD: Currently marked unpatchedPayment Gateway Per Product for WooCommerce: Currently marked unpatchedHQTheme Extra: Currently marked unpatchedVit Website Reviews: Currently marked unpatchedEU VAT Assistant for WooCommerce: Currently marked unpatchedWordPress Slider Block Gutenslider: Currently marked unpatchedHuCommerce | Magyar kiegészítések WooCommerce webáruházakhoz: Currently marked unpatchedKVoucher: Currently marked unpatchedVideo Player for YouTube – embed videos your visitors will love to watch: Currently marked unpatchedError Log Monitor: Currently marked unpatchedSlideDeck: Responsive WordPress Slider Plugin: Currently marked unpatchedPremmerce Multi-currency for Woocommerce: Currently marked unpatchedBooking Addon for WooCommerce: Currently marked unpatchedWP Event Partners – WordPress Plugin for Event and Conference Management: Currently marked unpatchedWC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce: Currently marked unpatchedAEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization: Currently marked unpatchedForceField: Currently marked unpatchedFIT: Featured Image Toolkit: Currently marked unpatchedAll in One Invite Codes: Currently marked unpatchedDynamic Pricing and Discount Rules for WooCommerce: Currently marked unpatchedBetter Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots: Currently marked unpatchedGrid & Styler For Contact Form 7 And Divi: Currently marked unpatchedProtect Uploads with Login – Protect Your Uploads: Currently marked unpatchedAtlas – Knowledge Base: Currently marked unpatchedSimple Sitemap – Create a Responsive HTML Sitemap: Currently marked unpatchedSuper Video Player – play your videos with playlists and subtitles: Currently marked unpatchedBooks Gallery – Book Showcase, Library & Affiliate Plugin: Currently marked unpatchedFiboSearch – Ajax Search for WooCommerce: Currently marked unpatchedTag Groups is the Advanced Way to Display Your Taxonomy Terms: Currently marked unpatchedWP Free SSL: Currently marked unpatchedClickerVolt – Affiliate Links & Click Tracking for Performance Marketers: Currently marked unpatchedConsultPress Lite: Currently marked unpatchedCF7 Mate – AI Form Builder, Styler & Multi-Step Forms for Contact Form 7: Currently marked unpatchedStreamWeasels Twitch Integration: Currently marked unpatchedMOBILOOK — Mobile View & Mobile‑Friendly Test: Currently marked unpatchedZip Code Redirect: Currently marked unpatchedGuestofy – Restaurant Reservations Plugin, Room Planer, Reservation Form: Currently marked unpatchedCF7 Constant Contact Fields Mapping: Currently marked unpatchedBookit — Booking & Appointment Calendar: Currently marked unpatchedEthereumICO: Currently marked unpatchedRT Easy Builder – Advanced addons for Elementor: Currently marked unpatchedWP Contact Slider – Contact Form Slider Widget: Currently marked unpatchedCountry Based Payments for WooCommerce: Currently marked unpatchedFilr – Secure document library: Currently marked unpatchedElasta: Currently marked unpatchedMapGeo – Interactive Geo Maps: Currently marked unpatchedWordPress Animation Plugin – Animated Everything: Currently marked unpatchedWP Notification Bell: Currently marked unpatchedActivity Log For MainWP: Currently marked unpatchedConnected Sermons: Currently marked unpatchedBulk Edit and Create User Profiles – WP Sheet Editor: Currently marked unpatchedКнопка ЮMoney: Currently marked unpatchedBulk WooCommerce Category Creator: Currently marked unpatchedEasy Math Captcha for CF7: Currently marked unpatchedMaster Accordion ( Former WP Awesome FAQ Plugin ): Currently marked unpatchedBetter Addons for Elementor: Currently marked unpatchedLivemesh Addons by Elementor: Currently marked unpatchedPlace Order Without Payment for WooCommerce: Currently marked unpatchedSTEWoo – Super Transactional Emails for WooCommerce: Currently marked unpatchedDeMomentSomTres Address: Currently marked unpatchedOut of stock display for woocommerce: Currently marked unpatchedUltimate Blocks – 25+ Blocks for Block Editor: Currently marked unpatchedBulk Auto Image Title Attribute (Image Title tag) optimizer (Image SEO): Currently marked unpatchedWP Radio – Worldwide Online Radio Stations Directory for WordPress: Currently marked unpatchedBookPress – For Book Authors: Currently marked unpatchedQyrr – simply and modern QR-Code creation: Currently marked unpatchedWordPress Directory Plugin For Business Listings – WP Local Plus: Currently marked unpatchedEqualize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance: Currently marked unpatchedFunnelmentals: Currently marked unpatchedBlockSpare – Gutenberg Blocks for News, Magazine, Blog & Business Websites: Currently marked unpatchedForms to Zapier, Integromat, IFTTT, Workato, Automate.io, elastic.io, Built.io, APIANT, Webhook: Currently marked unpatchedProduct Carousel For WooCommerce – WoorouSell: Currently marked unpatchedBetter Robots.txt – AI-Ready Crawl Control & Bot Governance: Currently marked unpatchedGFireM Fields: Currently marked unpatchedCoupon Affiliates – Affiliate Plugin for WooCommerce: Currently marked unpatchedWP Post Block: Currently marked unpatchedLMS Plugin – eLearning, Online Courses by Attest: Currently marked unpatchedFrontend Admin by DynamiApps: Currently marked unpatchedSimple Giveaways – Grow your business, email lists and traffic with contests: Currently marked unpatchedMasonry Gallery & Posts For Divi (WP Tools): Currently marked unpatchedGFireM Action After: Currently marked unpatchedUkrposhta: Currently marked unpatchedannasta Filters for WooCommerce: Currently marked unpatchedWP Lead Stream: Currently marked unpatchedThe Events Calendar: Currently marked unpatchedFocus on Reviews for WooCommerce: Currently marked unpatchedEmail Tracker: Currently marked unpatchedBlock Styler For Gravity Forms: Currently marked unpatchedWP Page Templates: Currently marked unpatchedProduct Customer List for WooCommerce: Currently marked unpatchedWP Moose: Currently marked unpatchedTeam Members – A WordPress Team Plugin with Gallery, Grid, Carousel, Slider, Table, List, and More: Currently marked unpatchedFloating Social Share Icons and Social Share buttons – Next Previous Post Links – FL: Currently marked unpatchedSouth Pole: Climate action now: Currently marked unpatchedLittleBot Invoices: Currently marked unpatchedGenealogical Tree – Family Tree & Ancestry for WordPress: Currently marked unpatchedAutomatic YouTube Gallery – Embed Auto-Updating YouTube Video Galleries, Feeds, Playlists & Channels: Currently marked unpatchedThank You Page for WooCommerce: Currently marked unpatchedMarijuana Age Verify: Currently marked unpatchedWooCommerce upcoming Products: Currently marked unpatchedFrontend Admin – Add and edit posts, pages, users and more all from the frontend: Currently marked unpatchedSV Tracking Manager: Currently marked unpatchedWP Easy Pay – Payment and Donation Form Builder for Square: Currently marked unpatchedWordPress SEO Checklist: Currently marked unpatchedwGauge – Free Version: Currently marked unpatchedPrime Slider Addons for Elementor – Widgets, Templates & Elementor Addons: Currently marked unpatchedPost Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC): Currently marked unpatchedWP Tools Divi Product Carousel: Currently marked unpatchedGuest posting / Frontend Posting / Front Editor – WP Front User Submit: Currently marked unpatchedSocial Gallery Lite: Currently marked unpatchedStackable – Page Builder Gutenberg Blocks: Currently marked unpatchedFive-Star Ratings Shortcode: Currently marked unpatchedCAPTCHA 4WP – Antispam CAPTCHA solution for WordPress: Currently marked unpatchedPremmerce Wishlist for WooCommerce: Currently marked unpatchedSalon Booking System – Free Version: Currently marked unpatchedSurbma | GDPR Proof Cookie Consent & Notice Bar: Currently marked unpatchedAdvanced Menu Manager Pro – Built for Content-heavy WordPress Sites to Add, Filter, Lock, and Edit Menus Easily: Currently marked unpatchedLive TV Player – Worldwide Live TV Channels Player for WordPress: Currently marked unpatchedMarket Exporter: Currently marked unpatchedAdminify – White Label, Admin Menu Editor, Login Customizer: Currently marked unpatchedTK Google Fonts GDPR Compliant: Currently marked unpatchedStarfish Review Generation & Marketing for WordPress: Currently marked unpatchedWP Emaily: Currently marked unpatchedEducation Addon for Elementor: Currently marked unpatchedSV Proven Expert: Currently marked unpatchedSurveyFunnel – Survey Plugin for WordPress: Currently marked unpatchedAdvanced Classifieds & Directory Pro: Currently marked unpatchedMusic Player for Elementor – Audio Player & Podcast Player: Currently marked unpatchedCryptocurrency Product for WooCommerce: Currently marked unpatchedWooCommerce Next Order Coupon: Currently marked unpatchedOverlay Image Divi Module: Currently marked unpatchedEmail Header Footer: Currently marked unpatchedDocument Viewer – let visitors view files right in the browser: Currently marked unpatchedPrice Bands for WooCommerce: Currently marked unpatchedAddon Elements for Elementor (formerly Elementor Addon Elements): Currently marked unpatchedSmart Variations Images & Swatches for WooCommerce: Currently marked unpatchedFeatured Images in RSS for Mailchimp & More: Currently marked unpatchedSimple Sponsorships: Currently marked unpatchedUnlimited Elements For Elementor: Currently marked unpatchedJoli Table Of Contents: Currently marked unpatchedSparrow: Product Reviews and Ratings for WooCommerce: Currently marked unpatchedMulti Page Auto Advance for Gravity Forms: Currently marked unpatchedGenerate Images (AI) – Magic Post Thumbnail: Currently marked unpatchedLive Scores for SportsPress: Currently marked unpatchedHide Shipping Method For WooCommerce: Currently marked unpatchedUltimate Carousel For Divi: Currently marked unpatchedWP Meta and Date Remover: Currently marked unpatchedImage Carousel For Divi: Currently marked unpatchedComments Not Replied To: Currently marked unpatchedContact Form 7 – Capsule CRM – Integration: Currently marked unpatchedOpensea: Currently marked unpatchedWordPress Translation plugin for Post, Pages & WooCommerce products. Tranzly IO AI DeepL automatic WordPress Translator.: Currently marked unpatchedPixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing: Currently marked unpatchedModern Addons for Elementor Page Builder: Currently marked unpatchedViralike: Currently marked unpatchedWordPress Dev Powers – Element Selector jQuery Powers Plugin: Currently marked unpatchedWP Munich Blocks – Gutenberg Blocks for WordPress: Currently marked unpatchedAvailability Datepicker – Booking Calendar for Contact Form 7 – Input WP: Currently marked unpatchedFooter Plugin for Divi: Currently marked unpatchedAidWP – Donation & Payment Forms (Stripe Powered): Currently marked unpatchedNew User Approve: Currently marked unpatchedGFireM Advance Search: Currently marked unpatchedWPMailer – The best mail builder, No More Core for your emails support Elementor, CF7 forms etc…: Currently marked unpatchedShared Files – File Upload & Download Manager: Currently marked unpatchedWPBITS Addons For Elementor Page Builder: Currently marked unpatchedSpeculor: Currently marked unpatchedWP Google Street View (with 360° virtual tour) & Google maps + Local SEO: Currently marked unpatchedWordPress Everse Starter Sites – Elementor Templates: Currently marked unpatchedMaster Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits: Currently marked unpatchedChoice Payment Gateway for WooCommerce: Currently marked unpatchedDomain Mapping System | Create Microsites with Multiple Alias Domains (multisite optional): Currently marked unpatchedOrder and Inventory Manager for WooCommerce: Currently marked unpatchedNinja Libs Amazon SES: Currently marked unpatchedWP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments: Currently marked unpatchedWP-Cron Status Checker: Currently marked unpatchedCodeKit – Custom Codes Editor: Currently marked unpatchedPhoto Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel: Currently marked unpatchedChange Price Title for WooCommerce: Currently marked unpatchedWordPress Gallery Plugin – Edge Photo Gallery: Currently marked unpatchedGlorious Services & Support: Currently marked unpatchedEasy Newsletter Signups: Currently marked unpatchedAnnouncement & Notification Banner – Bulletin: Currently marked unpatchedAdvanced Database Replacer: Currently marked unpatchedMultisite Robots.txt Manager: Currently marked unpatchedSimple Social Page Widget & Shortcode: Currently marked unpatchedProduct Country Restrictions for WooCommerce – Country Catalogs: Currently marked unpatchedFront End PM: Currently marked unpatchedUltimate Divi Modules Suite – Divi Sumo Lite: Currently marked unpatchedXT Points & Rewards for WooCommerce: Currently marked unpatchedWidgets for WooCommerce Products on Elementor: Currently marked unpatchedDelivery for WooCommerce: Currently marked unpatchedNotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce: Currently marked unpatchedSecurity Ninja – WordPress Security & Firewall: Currently marked unpatchedTinyMCE Annotate: Currently marked unpatchedJustified Gallery: Currently marked unpatchedBook BuyBack Prices: Currently marked unpatchedFuse Social Floating Sidebar: Currently marked unpatchedWP-HR Manager: The Human Resources Plugin for WordPress: Currently marked unpatchedEmails Blacklist for Everest Forms: Currently marked unpatchedAll-in-One Video Gallery: Currently marked unpatchedWoo Admin Product Notes: Currently marked unpatchedRemove Add to Cart WooCommerce: Currently marked unpatchedCheckout with Zelle on Woocommerce: Currently marked unpatchedDivi Gravity Forms (WP Tools): Currently marked unpatchedEverse: Currently marked unpatchedRun time Image resizing: Currently marked unpatchedRest Routes – Custom Endpoints for WordPress REST API: Currently marked unpatchedWidget for Contact form 7: Currently marked unpatchedAdd Pinterest conversion tags for Pinterest Ads + Site verification: Currently marked unpatchedWPGSI: Spreadsheet Integration: Currently marked unpatchedWP BugBot: Currently marked unpatchedFile Manager for Google Drive – Integrate Google Drive: Currently marked unpatchedNokke: Currently marked unpatchedCustomers Table for WooCommerce: View, Search, Bulk Editor: Currently marked unpatchedSync eCommerce NEO: Currently marked unpatchedPreloader for Divi: Currently marked unpatchedGet Better Reviews for WooCommerce: Currently marked unpatchedKnowledge Base documentation & wiki plugin – BasePress Docs: Currently marked unpatchedEasy Appointment Booking & Scheduling System – Webba Booking Calendar: Currently marked unpatchedShuban: Currently marked unpatchedACF for WooCommerce Product: Currently marked unpatchedScheduled Notification Bar: Currently marked unpatched3D Viewer – Turn Product Pages into Interactive 3D Experiences: Currently marked unpatchedFullscreen Menu: Currently marked unpatchedGallery PhotoBlocks: Currently marked unpatchedRedirection for Contact Form 7: Currently marked unpatchedDeMomentSomTres Grid Archive: Currently marked unpatchedInbound Brew: Currently marked unpatchedWP Photo Effects: Currently marked unpatchedWPOptin – AI-Powered Top Bars, PopUps & Lead Generation: Currently marked unpatchedExtra Fees for WooCommerce: Currently marked unpatchedReset Course Progress For LearnDash: Currently marked unpatchedPodcast Box – Best Podcasting Plugin for WordPress: Currently marked unpatchedThe best plugin for restrict content, support all Custom Post Types and Elementor – Password Protected: Currently marked unpatchedTurbo Widgets: Currently marked unpatchedPassster – Password Protect Pages and Content: Currently marked unpatchedGift Message for WooCommerce: Currently marked unpatchedazw woocommerce file uploads: Currently marked unpatchedBlog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News: Currently marked unpatchedBroadcast Lite: Currently marked unpatchedNotification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar: Currently marked unpatchedWP Author Bio: Currently marked unpatchedRW Divi Unite Gallery: Currently marked unpatchedTablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent: Currently marked unpatchedProduct Image Watermark for Woo: Currently marked unpatchedAdvanced Form Integration — Connect Forms to 200+ Apps: Currently marked unpatchedRevolution for Elementor: Currently marked unpatchedConeBlog – Elementor Blog Widgets: Currently marked unpatchedUnder Construction: Currently marked unpatchedWP Gratify: Currently marked unpatchedAutomizy Gravity Forms: Currently marked unpatchedWidgets on Pages: Currently marked unpatchedGet feedback from visitors – WP Feedback Suite Plugin: Currently marked unpatchedWordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule: Currently marked unpatchedContent Aware Sidebars – Fastest Widget Area Plugin: Currently marked unpatchedBani: Currently marked unpatchedFast WordPress: Currently marked unpatchedSKT Templates – 100% Free Templates for Elementor & Gutenberg: Currently marked unpatchedCategorify – WordPress Media Library Category & File Manager: Currently marked unpatchedIvory Search – WordPress Search Plugin: Currently marked unpatchedAdd Twitter Pixel for Twitter ads: Currently marked unpatchedXT Variation Swatches for WooCommerce: Currently marked unpatchedURL Shortify – Simple and Easy URL Shortener: Currently marked unpatchedSecure Gateway for Authorize.net and WooCommerce by Pledged Plugins: Currently marked unpatchedBuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages: Currently marked unpatchedAffiliate Link Builder Plugin for Amazon Associates – Review Engine: Currently marked unpatchedGlossary: Currently marked unpatchedBAVOKO SEO Tools – All-in-One WordPress SEO: Currently marked unpatchedCartoon Url: Currently marked unpatchedWP Frontend Admin – Display WP Admin Pages in the Frontend: Currently marked unpatchedBlock, Suspend, Report for BuddyPress: Currently marked unpatchedMenu Image, Icons made easy: Currently marked unpatchedXT Ajax Add To Cart for WooCommerce: Currently marked unpatchedOne Click Login: Currently marked unpatchedEther and ERC20 tokens WooCommerce Payment Gateway: Currently marked unpatchedChat Button- Leads and Order over Chat: Currently marked unpatchedShipping Gateway Per Product for WooCommerce: Currently marked unpatchedPurosa: Currently marked unpatchedNicheTable – Responsive Comparison Table Block: Currently marked unpatchedAdvanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress: Currently marked unpatchedWP Sierra: Currently marked unpatchedDigital Goods (Checkout Field Editor) for WooCommerce Checkout: Currently marked unpatchedSEO Booster: Currently marked unpatchedAnti-Spam Protection – No API Key, GDPR Friendly: Currently marked unpatchedUltimate Widgets Light: Currently marked unpatchedInsert or Embed Articulate Content into WordPress: Currently marked unpatchedAPPExperts – Mobile App Builder for WordPress | WooCommerce to iOS and Android Apps: Currently marked unpatchedUltimate Post Kit Addons for Elementor: Currently marked unpatchedCaxton – Create Pro page layouts in Gutenberg: Currently marked unpatchedNitek Carousel Slider Cool Transitions: Currently marked unpatchedExtend Filter Products By Price Widget: Currently marked unpatchedBlockMeister – Block Pattern Builder: Currently marked unpatchedYatri Tools: Currently marked unpatchedRestrict – membership, site, content and user access restrictions for WordPress: Currently marked unpatchedChange Prices with Time for WooCommerce: Currently marked unpatchedFlat Rate Shipping Method for WooCommerce: Currently marked unpatchedResponsive Social Slider Widget: Currently marked unpatchedMenu Item Scheduler: Currently marked unpatchedBlog Sidebar Widget: Currently marked unpatchedMultipurpose Gutenberg Block: Currently marked unpatchedFull Page Blog Designer: Currently marked unpatchedWooCommerce Variation Swatches for Products: Currently marked unpatchedWP Activity Log: Currently marked unpatchedSimple Feature Requests Free – User Feedback Board: Currently marked unpatchedBulk Edit Categories and Tags – Create Thousands Quickly on the Editor: Currently marked unpatchedLicense Manager for WooCommerce: Currently marked unpatchedSky Login Redirect: Currently marked unpatchedTrueAna – True Analytics Dashboard: Currently marked unpatchedDivi Collage: Currently marked unpatchedPersistent Login: Currently marked unpatchedDeals of the Day WooCommerce: Currently marked unpatchedAdd LinkedIn Insight Tag for LinkedIn Ads: Currently marked unpatchedEasy Settings for LearnDash: Currently marked unpatchedShare This Image: Currently marked unpatchedEasy Social Feed – Social Photos Gallery and Post Feed for WordPress: Currently marked unpatchedNEXUS: Currently marked unpatchedMeridia: Currently marked unpatchedWebinarIgnition – Live, Automated & Evergreen Webinar System also for WooCommerce: Currently marked unpatchedAuto Post Cleaner: Currently marked unpatchedBrand: Currently marked unpatchedWPBakery Page Builder Addons by Livemesh: Currently marked unpatchedWP Table Builder – Drag & Drop Table Builder: Currently marked unpatchedRadio Player – Live Shoutcast, Icecast and Any Audio Stream Player: Currently marked unpatchedDivi Content Restrictor: Currently marked unpatchedLogo Showcase – Responsive Logo Carousel, Logo Slider & Logo Grid: Currently marked unpatchedPremmerce Variation Swatches for WooCommerce: Currently marked unpatchedPowerFolio – Portfolio & Image Gallery for Elementor: Currently marked unpatchedSSL Atlas – Free SSL Certificate & HTTPS Redirect for WordPress: Currently marked unpatchedSimpLy Gallery: Currently marked unpatchedEasy TikTok Feed – TikTok Video, Feed & Gallery Plugin: Currently marked unpatchedPopOverXYZ – Show Light Weight Beautiful Tool Tips On Any Text: Currently marked unpatchedBulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO): Currently marked unpatchedNumber Chat: Currently marked unpatchedRating-Widget: Star Review System: Currently marked unpatchedSpotlight Social Feeds – Block, Shortcode, and Widget: Currently marked unpatchedExpire tags: Currently marked unpatchedGo Viral – social share, social sharebar, social locker, social chat, open graph, reactions, share & view counters: Currently marked unpatchedWOW Styler for CF7 – Visual Styler for Contact Form 7 Forms: Currently marked unpatchedDashy – Google Analytics advanced dashboard: Currently marked unpatchedPremmerce User Roles: Currently marked unpatchedRadio Station by netmix® – Manage and play your Show Schedule in WordPress!: Currently marked unpatchedPoints Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred: Currently marked unpatchedSEO Audit – WP Site Auditor: Currently marked unpatchedWordPress Reviews by ReviewPress: Currently marked unpatchedWP Travel Engine – Tour Booking Plugin – Tour Operator Software: Currently marked unpatchedWP Mobile Menu – The Mobile-Friendly Responsive Menu: Currently marked unpatchedWP Smart Export (Free): Currently marked unpatchedeaSYNC Booking – Hotels, Restaurants & Car Rentals: Currently marked unpatchedWP Conference Schedule: Currently marked unpatchedStrumenti Partita IVA per Woocommerce: Currently marked unpatchedAnfrageformular – Multi Step Drag & Drop Formular Builder – Leadgenerierung: Currently marked unpatchedPremmerce Brands for WooCommerce: Currently marked unpatchedEthereum Wallet: Currently marked unpatchedLimb Gallery | Create Beautiful Image & Video Galleries: Currently marked unpatchedCode Manager: Currently marked unpatchedPayment Gateway for PayFabric: Currently marked unpatchedCP Simple Newsletter: Currently marked unpatchedLittleBot ACH for Stripe + Plaid: Currently marked unpatchedAquarella Lite: Currently marked unpatchedCoinbase Business Gateway for WooCommerce: Currently marked unpatchedVillar: Currently marked unpatchedKikote – Location Picker at Checkout & Google Address AutoFill Plugin for WooCommerce: Currently marked unpatchedAge Verification Screen for WooCommerce: Currently marked unpatchedEnhanced Ecommerce Google Analytics for WooCommerce: Currently marked unpatchedJoli FAQ SEO – WordPress FAQ Plugin: Currently marked unpatchedMass Pages/Posts Creator: Currently marked unpatchedWP Relevant Ads: Currently marked unpatchedGloriousThemes Starter Sites: Currently marked unpatchedWP Group Promoter: Currently marked unpatchedAirpress: Currently marked unpatchedSchema Plugin For Divi, Gutenberg & Shortcodes: Currently marked unpatchedGiveaways for woocommerce: Currently marked unpatchedCustom Login Page Customizer: Currently marked unpatchedLearnMore: Currently marked unpatchedDeMomentSomTres Media Tools Auto: Currently marked unpatchedOcean Extra: Currently marked unpatchedkk Star Ratings – Rate Post & Collect User Feedbacks: Currently marked unpatchedDrop Shadow Boxes: Currently marked unpatchedFAQ Manager For Divi, Gutenberg Block & Shortcode: Currently marked unpatchedAds.txt & App-ads.txt Manager for WordPress: Currently marked unpatchedQuick Contact Form: Currently marked unpatchedWP Frontend Profile: Currently marked unpatchedSVG Flags – Beautiful Scalable Flags For All Countries!: Currently marked unpatchedDrip Feed Content Extended for Learndash: Currently marked unpatchedPost List Designer – Category Post, Recent Post, Post List: Currently marked unpatchedConversion de moneda Woocommerce: Currently marked unpatchedVidSEO – Video transcript embedding for WordPress & LLM: Currently marked unpatchedBefore and After Product Images for WooCommerce: Currently marked unpatchedWoocommerce Customer Reviews with Artificial Intelligence analyzis, with IBM Watson Tone Analyzer: Currently marked unpatchedLawPress – Law Firm Website Management: Currently marked unpatchedShipping Method Display Style for WooCommerce: Currently marked unpatchedRoyal Addons for Elementor – Addons and Templates Kit for Elementor: Currently marked unpatchedSQL Reporting Services – SSRS Plugin for WordPress: Currently marked unpatchedBulk Edit Posts and Products in Spreadsheet: Currently marked unpatchedDelete Duplicate Posts: Currently marked unpatchedWS Bootstrap: Currently marked unpatchedClean Social Icons: Currently marked unpatchedMedia Library File Download: Currently marked unpatchedWP Link Bio: Currently marked unpatchedAutomatic Internal Links for SEO by Pagup: Currently marked unpatchedGeo Mashup: Currently marked unpatchedBuilder for WooCommerce product reviews shortcodes – ReviewShort: Currently marked unpatchedContact List – Online Staff Directory & Address Book: Currently marked unpatchedPost Snippets – Custom WordPress Code Snippets Customizer: Currently marked unpatchedSocialMark – Easy Watermark/Logo on Social Media Post Link Share Preview: Currently marked unpatchedPrint My Blog – Print, PDF, & eBook Converter WordPress Plugin: Currently marked unpatchedWP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes): Currently marked unpatchedTreePress – Easy Family Trees & Ancestor Profiles: Currently marked unpatchedPostcode Redirect: Currently marked unpatchedProduct Author for WooCommerce: Currently marked unpatchedWP Coupons and Deals – WordPress Coupon Plugin: Currently marked unpatchedFeedpress Generator – External RSS Frontend Customizer: Currently marked unpatchedForm Vibes – Save Contact Form 7 & Elementor Form Entries to Database: Currently marked unpatchedWP AutoMedic: Currently marked unpatchedBanner Management For WooCommerce: Currently marked unpatchedDuplicate Variations for Woocommerce: Currently marked unpatchedSend Prebuilt Emails: Currently marked unpatchedHelpie FAQ — Accordion, Docs & Knowledge Base: Currently marked unpatchedLivemesh SiteOrigin Widgets: Currently marked unpatchedLivemesh Addons for Beaver Builder: Currently marked unpatchedTabs with Recommended Posts (Widget): Currently marked unpatchedConnect WooCommerce Shop to ERP/CRM, Verifactu and EU/VAT Compliance: Currently marked unpatchedRevivePress – Keep your Old Content Evergreen: Currently marked unpatchedWP fail2ban – Advanced Security: Currently marked unpatchedUltra Elementor Addons: Currently marked unpatchedRecurWP – WordPress Recurly Payment Gateway: Currently marked unpatchedButtonizer – Floating Menus, Sticky Buttons, & Popup Builder: Currently marked unpatchedQuick Event Manager: Currently marked unpatchedImage Photo Gallery Final Tiles Grid: Currently marked unpatchedLightbox & Modal Popup WordPress Plugin – FooBox: Currently marked unpatchedWP Dev Powers – Display Screen Dimensions to Admin Plugin: Currently marked unpatchedUltimate Bulk SEO Noindex Nofollow – Speed up Penalty Recovery Ultimate SEO Booster: Currently marked unpatchedWP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards: Currently marked unpatchedStoreCustomizer – A plugin to Customize all WooCommerce Pages: Currently marked unpatchedTopNewsWp – Display Tikcer News, RSS Feed Widget and Many More: Currently marked unpatchedUser Menus – Nav Menu Visibility: Currently marked unpatchedContact Form 7 Multi-Step Forms: Currently marked unpatchedEasy Age Verify: Currently marked unpatchedBlocked in China | Check if your site is available in the Chinese mainland: Currently marked unpatchedDisable Payment Methods based on cart conditions for WooCommerce: Currently marked unpatchedAwesome SSL: Currently marked unpatchedIks Menu – WordPress Category Accordion Menu & FAQs: Currently marked unpatchedPurus: Currently marked unpatchedHooked Editable Content: Currently marked unpatchedRun Contests, Raffles, and Giveaways with ContestsWP: Currently marked unpatchedPost Carousel Divi: Currently marked unpatchedMailChimp Manager: Currently marked unpatchedPremmerce Permalink Manager for WooCommerce: Currently marked unpatchedSecure IP Logins: Currently marked unpatchedVideopack: Currently marked unpatchedPremmerce WooCommerce Customers Manager: Currently marked unpatchedDynific Addons for Elementor (formerly AnyWhere Elementor): Currently marked unpatchedDivi Torque Lite – Divi Modules for the Divi Builder & Theme: Currently marked unpatchedEvents Calendar Registration: Currently marked unpatchedRocket Maintenance Mode & Coming Soon Page: Currently marked unpatchedWordPress WooCommerce Sync for Google Sheet: Currently marked unpatchedEasy Smooth Scroll Links – Smooth Scrolling Anchor: Currently marked unpatchedPage Builder Gutenberg Blocks – Kioken Blocks: Currently marked unpatchedCryptocurrency Portfolio Tracker: Currently marked unpatchedGo Fetch Jobs (for WP Job Manager): Currently marked unpatchedQuick Affiliate Store: Currently marked unpatchedWP Tools Divi Blog Carousel: Currently marked unpatchedPost to Google My Business (Google Business Profile): Currently marked unpatchedNicheBase: Currently marked unpatchedWPVisitorInfo – Show Visitor Information & Conditional Data Based On That Information: Currently marked unpatchedPremmerce: Currently marked unpatchedCartPops – High Converting Add To Cart Popup For WooCommerce: Currently marked unpatchedScrollsequence – Cinematic Scroll Image Animation Plugin: Currently marked unpatchedElation: Currently marked unpatchedCuisine Palace: Currently marked unpatchedProduct Attachment for WooCommerce: Currently marked unpatchedMaster Blocks – Gutenberg Site Builder: Currently marked unpatchedProduct Options and Price Calculation Formulas for WooCommerce – Uni CPO: Currently marked unpatchedWordPress Coupon Plugin for Bloggers and Marketers – WP Offers: Currently marked unpatchedWordPress form builder plugin for contact forms, surveys and quizzes – Tripetto: Currently marked unpatchedWidgets on Pages and Posts: Currently marked unpatchedBetter Messages – WCFM Integration: Currently marked unpatchedSheetPress – Manage WordPress Meta data with Google Sheets: Currently marked unpatchedAdvanced Custom Fields options import/export: Currently marked unpatchedQuick Paypal Payments: Currently marked unpatchedTarot Card Oracle: Currently marked unpatchedBetter Sharing: Currently marked unpatchedRestrict User Access – Ultimate Membership & Content Protection: Currently marked unpatchedWUPO Group Attributes for WooCommerce: Currently marked unpatchedNugget by Ingot: Easy, automated and native A/B testing for everyone: Currently marked unpatchedFeedbackScout: The easiest way to collect, prioritise, manage and track customer feedback.: Currently marked unpatchedArendelle: Currently marked unpatchedEasy Zillow Reviews: Currently marked unpatchedBattle Suit for Divi: Currently marked unpatchedStore Toolkit – WooCommerce Extensions, Quick Enhancements & Handy Tools: Currently marked unpatchedWCC SEO Keyword Research: Currently marked unpatchedElements for LifterLMS: Currently marked unpatchedCustom Registration and Custom Login Forms with New Recaptcha: Currently marked unpatchedB2B Request a Quote: Currently marked unpatchedWadi Survey: Currently marked unpatchedPerformance Kit: Currently marked unpatchedPage Builder for Gutenberg – StarterBlocks: Currently marked unpatchedImpexium Single Sign On: Currently marked unpatchedXT Quick View for WooCommerce: Currently marked unpatchedLive Drag and Drop Builder for Contact Form 7: Currently marked unpatchedPrimary Addon for Elementor: Currently marked unpatchedJDs Portfolio: Currently marked unpatchedTwentyFourth WP Scraper: Currently marked unpatchedBlocksy Companion: Currently marked unpatchedWordPress Google Translate: Currently marked unpatchedHasium: Currently marked unpatchedStation Pro – Advanced Audio Streaming & Player for WordPress: Currently marked unpatchedEvent Tickets and Registration: Currently marked unpatchedGateway for PayLate on WooCommerce: Currently marked unpatchedAuto SEO META keywords (META tags keywords) optimization + WooCommerce: Currently marked unpatchedClimateClick: Climate Action for all: Currently marked unpatchedPremmerce SEO for WooCommerce: Currently marked unpatchedWholesale for WooCommerce: Currently marked unpatchedFrontend group restriction for LearnDash: Currently marked unpatchedReally Simple Featured Video – Featured Video Support for Posts, Pages & WooCommerce Products: Currently marked unpatchedDisplay Eventbrite Events: Currently marked unpatchedXT Floating Cart for WooCommerce: Currently marked unpatchedWPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode: Currently marked unpatchedWP SPID Italia: Currently marked unpatchedTiered Pricing Table for WooCommerce: Currently marked unpatchedPrime Mover – Migrate WordPress Website & Backups: Currently marked unpatchedReplyable – Subscribe to Comments and Reply by Email: Currently marked unpatchedCourt Reservation – Manage Your Court Bookings Online: Currently marked unpatchedVO Store Locator – WP Store Locator Plugin: Currently marked unpatchedGet Directions Map: Currently marked unpatchedPremmerce Redirect Manager: Currently marked unpatchedSnazzyAdmin WP Admin Theme: Currently marked unpatchedAmela: Currently marked unpatchedWoocommerce Customers Order History: Currently marked unpatchedEthPress – Web3 Login: Currently marked unpatchedAnt Admin Notices for Team: Currently marked unpatchedBulk Edit Coupons for WooCommerce – WP Sheet Editor: Currently marked unpatchedPay For Post with WooCommerce: Currently marked unpatchedbbResolutions: Currently marked unpatchedAWCA – The Great Analytics Insights for Your eStore: Currently marked unpatchedTK SmugMug Slideshow Shortcode: Currently marked unpatchedLightbox – EverlightBox Gallery: Currently marked unpatchedUnakit: Currently marked unpatchedWP Affiliate Disclosure: Currently marked unpatchedMedia Cloud for Bunny CDN, Amazon S3, Cloudflare R2, Google Cloud Storage, DigitalOcean and more: Currently marked unpatchedRaCar Clear Cart for WooCommerce: Currently marked unpatchedWP Disable Sitemap: Currently marked unpatchedInternal Link Juicer: SEO Auto Linker for WordPress: Currently marked unpatchedBlock Slider – Responsive Image Slider, Video Slider & Post Slider: Currently marked unpatchedPinblocks — Gutenberg blocks with Pinterest widgets: Currently marked unpatchedContact Widgets For Elementor all the contact links you need in one place: Currently marked unpatchedTickera – Sell Tickets & Manage Events: Currently marked unpatchedStreamCast – bring live radio to your site with a sleek player: Currently marked unpatchedSticky add to cart for Woo: Currently marked unpatchedBlockyPage – Gutenberg Based Page Builder: Currently marked unpatchedPro Broken Links Maintainer: Currently marked unpatchedWP School Calendar: Currently marked unpatchedListPlus – Unlimited Listing Directory: Currently marked unpatchedWalker Core: Currently marked unpatchedAgy – Age verification for WooCommerce: Currently marked unpatchedModern Designs for Gravity Forms: Currently marked unpatchedRankBear: Currently marked unpatchedSTAX Header Builder: Currently marked unpatchedFast Checkout for WooCommerce: Currently marked unpatchedWooCommerce PayPlug: Currently marked unpatchedEasy Code Snippets: Currently marked unpatchedW3SCloud Contact Form 7 to Zoho CRM: Currently marked unpatchedWidget Detector for Elementor: Currently marked unpatchedAdd Tiktok Pixel for Tiktok ads (+Woocommerce): Currently marked unpatchedWP Encryption – Lifetime Free SSL Cert & HTTPS, Force SSL / HTTPS Redirect, SSL Security: Currently marked unpatchedBetter Messages – Integration for WC Vendors Marketplace: Currently marked unpatchedAlley Business Toolkit: Currently marked unpatchedPremmerce Product Filter for WooCommerce: Currently marked unpatchedWP Search Filter: Currently marked unpatchedEasy Post Views Count: Currently marked unpatchedPower Ups for Elementor: Currently marked unpatchedSocial Kit: Currently marked unpatchedPost Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider: Currently marked unpatchedHM Multiple Roles: Currently marked unpatchedMulticollab: Content Team Collaboration and Editorial Workflow: Currently marked unpatchedImage Alt Text Manager – Bulk & Dynamic Alt Tags For image SEO Optimization + AI: Currently marked unpatchedPremmerce Product Search for WooCommerce: Currently marked unpatchedSecurity Safe: Currently marked unpatchedBulk Edit Products for WooCommerce – WP Sheet Editor: Currently marked unpatchedDa Reactions: Currently marked unpatchedFood Store – Online Food Delivery & Pickup: Currently marked unpatchedAbeta Link PunchOut: Currently marked unpatchedjav's – WooCommerce and Trello integration WooTrello: Currently marked unpatchedPage Builder Sandwich – Front End WordPress Page Builder Plugin: Currently marked unpatchedWP Sessions Time Monitoring Full Automatic: Currently marked unpatchedWoowGallery: Currently marked unpatchedWordPress Auto SEO Plugin – Upfiv SEO Wizard: Currently marked unpatchedGreenshift – animation and page builder blocks: Currently marked unpatchedRestaurant & Cafe Addon for Elementor: Currently marked unpatched

Affected versions: [*, 2.0.2); [*, 1.9.8); [*, 2.1.0); [*, 2.6.8); [*, 2.7.6); *; [*, 5.7.1); [*, 1.8.5)

Vulnerability type: CWE-862 Missing Authorization

Affected software, patched versions and attribution

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.

YASR – Yet Another Star Rating Plugin for WordPress

Affected versions: [*, 2.0.2)

Patched versions: 2.0.2

Events Addon for Elementor

Affected versions: [*, 1.9.8)

Patched versions: 1.9.8

Fraud Prevention For WooCommerce and EDD

Affected versions: [*, 2.1.0)

Patched versions: 2.1.0

Gutenberg Blocks – ACF Blocks Suite

Affected versions: [*, 2.6.8)

Patched versions: 2.6.8

Ultimeter

Affected versions: [*, 2.7.6)

Patched versions: 2.7.6

Past Events Extension

Affected versions: *

Patched versions: Not supplied

Pootle Pagebuilder – WordPress Page builder

Affected versions: [*, 5.7.1)

Patched versions: 5.7.1

Local Delivery Drivers for WooCommerce

Affected versions: [*, 1.8.5)

Patched versions: 1.8.5

Ultimate Gutenberg – Custom Block Templates

Affected versions: *

Patched versions: Not supplied

WP Required Taxonomies – Categories and Tags Mandatory

Affected versions: [*, 1.1.8)

Patched versions: 1.1.8

Featured Products First for WooCommerce – A Extension of WooCommerce (WooCommerce Addon Plugin)

Affected versions: *

Patched versions: Not supplied

SSL Zen — SSL Certificate Installer & HTTPS Redirects

Affected versions: *-4.0.4

Patched versions: 4.0.5

Streak CRM For Gmail For Contact Form 7 – WordPress Plugin

Affected versions: [*, 1.0.9)

Patched versions: 1.0.9

WordPress Dev Powers – ACF Color Coded Field Types Plugin

Affected versions: *

Patched versions: Not supplied

DancePress (TRWA)

Affected versions: *-3.1.2

Patched versions: 3.1.3

Product Size Charts Plugin for WooCommerce

Affected versions: [*, 2.2.3)

Patched versions: 2.2.3

Wp My Admin Bar

Affected versions: *

Patched versions: Not supplied

A no-code page builder for beautiful performance-based content

Affected versions: [*, 2.1.17)

Patched versions: 2.1.17

LocalSEOMap

Affected versions: *

Patched versions: Not supplied

Easy Prayer

Affected versions: *

Patched versions: Not supplied

AdFoxly – Ad Manager, AdSense Ads & Ads.txt

Affected versions: *-1.8.4

Patched versions: 1.8.5

WP Get Personal

Affected versions: *

Patched versions: Not supplied

Checkout with Cash App on EDD

Affected versions: *

Patched versions: Not supplied

Server Info – System Health & Diagnostics Suite

Affected versions: *

Patched versions: Not supplied

Custom WooCommerce Checkout Fields Editor

Affected versions: *-1.2.6

Patched versions: 1.2.7

KRSP Frontend File Uploader

Affected versions: *

Patched versions: Not supplied

Panorama – turn photos into immersive virtual tours

Affected versions: [*, 1.0.8)

Patched versions: 1.0.8

Bulk Attachment Download

Affected versions: [*, 1.3.5)

Patched versions: 1.3.5

AutoSave Net

Affected versions: *

Patched versions: Not supplied

Premmerce Wholesale Pricing for WooCommerce

Affected versions: [*, 1.1.8)

Patched versions: 1.1.8

Any Popup – Popup Forms, Optins & Ads

Affected versions: *

Patched versions: Not supplied

Checkout with Venmo on EDD

Affected versions: *

Patched versions: Not supplied

Payment Gateway Per Product for WooCommerce

Affected versions: [*, 3.1.6)

Patched versions: 3.1.6

HQTheme Extra

Affected versions: *

Patched versions: Not supplied

Vit Website Reviews

Affected versions: *

Patched versions: Not supplied

EU VAT Assistant for WooCommerce

Affected versions: [*, 2.0.28.220224)

Patched versions: 2.0.28.220224

WordPress Slider Block Gutenslider

Affected versions: [*, 5.7.0)

Patched versions: 5.7.0

HuCommerce | Magyar kiegészítések WooCommerce webáruházakhoz

Affected versions: [*, 30.3.0)

Patched versions: 30.3.0

KVoucher

Affected versions: *

Patched versions: Not supplied

Video Player for YouTube – embed videos your visitors will love to watch

Affected versions: [*, 1.5.1)

Patched versions: 1.5.1

Error Log Monitor

Affected versions: [*, 1.7.1)

Patched versions: 1.7.1

SlideDeck: Responsive WordPress Slider Plugin

Affected versions: *

Patched versions: Not supplied

Premmerce Multi-currency for Woocommerce

Affected versions: [*, 2.3.2)

Patched versions: 2.3.2

Booking Addon for WooCommerce

Affected versions: [*, 4.2.0)

Patched versions: 4.2.0

WP Event Partners – WordPress Plugin for Event and Conference Management

Affected versions: *-1.2.4

Patched versions: 1.2.5

WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce

Affected versions: [*, 4.2.1)

Patched versions: 4.2.1

AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization

Affected versions: [*, 2.6)

Patched versions: 2.6

ForceField

Affected versions: *

Patched versions: Not supplied

FIT: Featured Image Toolkit

Affected versions: *

Patched versions: Not supplied

All in One Invite Codes

Affected versions: [*, 1.0.13)

Patched versions: 1.0.13

Dynamic Pricing and Discount Rules for WooCommerce

Affected versions: [*, 2.2.3)

Patched versions: 2.2.3

Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots

Affected versions: [*, 1.9.9.170)

Patched versions: 1.9.9.170

Grid & Styler For Contact Form 7 And Divi

Affected versions: [*, 1.4.1)

Patched versions: 1.4.1

Protect Uploads with Login – Protect Your Uploads

Affected versions: *

Patched versions: Not supplied

Atlas – Knowledge Base

Affected versions: *

Patched versions: Not supplied

Simple Sitemap – Create a Responsive HTML Sitemap

Affected versions: [*, 3.5.5)

Patched versions: 3.5.5

Super Video Player – play your videos with playlists and subtitles

Affected versions: [*, 1.6.11)

Patched versions: 1.6.11

Books Gallery – Book Showcase, Library & Affiliate Plugin

Affected versions: [*, 3.6)

Patched versions: 3.6

FiboSearch – Ajax Search for WooCommerce

Affected versions: [*, 1.17.0)

Patched versions: 1.17.0

Tag Groups is the Advanced Way to Display Your Taxonomy Terms

Affected versions: [*, 1.43.10.1)

Patched versions: 1.43.10.1

WP Free SSL

Affected versions: [*, 1.2.7)

Patched versions: 1.2.7

ClickerVolt – Affiliate Links & Click Tracking for Performance Marketers

Affected versions: *

Patched versions: Not supplied

ConsultPress Lite

Affected versions: *

Patched versions: Not supplied

CF7 Mate – AI Form Builder, Styler & Multi-Step Forms for Contact Form 7

Affected versions: [*, 1.3.0)

Patched versions: 1.3.0

StreamWeasels Twitch Integration

Affected versions: [*, 1.3.4)

Patched versions: 1.3.4

MOBILOOK — Mobile View & Mobile‑Friendly Test

Affected versions: [*, 1.2.4)

Patched versions: 1.2.4

Zip Code Redirect

Affected versions: *-4.0.1

Patched versions: 4.1.1

Guestofy – Restaurant Reservations Plugin, Room Planer, Reservation Form

Affected versions: *

Patched versions: Not supplied

CF7 Constant Contact Fields Mapping

Affected versions: *

Patched versions: Not supplied

Bookit — Booking & Appointment Calendar

Affected versions: [*, 2.2.9)

Patched versions: 2.2.9

EthereumICO

Affected versions: [*, 2.3.11)

Patched versions: 2.3.11

RT Easy Builder – Advanced addons for Elementor

Affected versions: *-1.4

Patched versions: 1.5

WP Contact Slider – Contact Form Slider Widget

Affected versions: [*, 2.4.5)

Patched versions: 2.4.5

Country Based Payments for WooCommerce

Affected versions: [*, 1.4.1)

Patched versions: 1.4.1

Filr – Secure document library

Affected versions: [*, 1.2.1)

Patched versions: 1.2.1

Elasta

Affected versions: [*, 1.0.8)

Patched versions: 1.0.8

MapGeo – Interactive Geo Maps

Affected versions: [*, 1.5.4)

Patched versions: 1.5.4

WordPress Animation Plugin – Animated Everything

Affected versions: *

Patched versions: Not supplied

WP Notification Bell

Affected versions: [*, 1.3.13)

Patched versions: 1.3.13

Activity Log For MainWP

Affected versions: [*, 1.7.1)

Patched versions: 1.7.1

Connected Sermons

Affected versions: *

Patched versions: Not supplied

Bulk Edit and Create User Profiles – WP Sheet Editor

Affected versions: [*, 1.5.13)

Patched versions: 1.5.13

Кнопка ЮMoney

Affected versions: *

Patched versions: Not supplied

Bulk WooCommerce Category Creator

Affected versions: *

Patched versions: Not supplied

Easy Math Captcha for CF7

Affected versions: *

Patched versions: Not supplied

Master Accordion ( Former WP Awesome FAQ Plugin )

Affected versions: [*, 4.1.8)

Patched versions: 4.1.8

Better Addons for Elementor

Affected versions: [*, 1.3.1)

Patched versions: 1.3.1

Livemesh Addons by Elementor

Affected versions: [*, 7.1.4)

Patched versions: 7.1.4

Place Order Without Payment for WooCommerce

Affected versions: [*, 2.2)

Patched versions: 2.2

STEWoo – Super Transactional Emails for WooCommerce

Affected versions: [*, 1.2.4)

Patched versions: 1.2.4

DeMomentSomTres Address

Affected versions: *

Patched versions: Not supplied

Out of stock display for woocommerce

Affected versions: *

Patched versions: Not supplied

Ultimate Blocks – 25+ Blocks for Block Editor

Affected versions: [*, 2.4.13)

Patched versions: 2.4.13

Bulk Auto Image Title Attribute (Image Title tag) optimizer (Image SEO)

Affected versions: [*, 1.2.3)

Patched versions: 1.2.3

WP Radio – Worldwide Online Radio Stations Directory for WordPress

Affected versions: [*, 3.1.4)

Patched versions: 3.1.4

BookPress – For Book Authors

Affected versions: [*, 1.2.3)

Patched versions: 1.2.3

Qyrr – simply and modern QR-Code creation

Affected versions: [*, 0.8)

Patched versions: 0.8

WordPress Directory Plugin For Business Listings – WP Local Plus

Affected versions: [*, 1.4.5)

Patched versions: 1.4.5

Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance

Affected versions: [*, 1.2.8)

Patched versions: 1.2.8

Funnelmentals

Affected versions: *

Patched versions: Not supplied

BlockSpare – Gutenberg Blocks for News, Magazine, Blog & Business Websites

Affected versions: [*, 2.0.1)

Patched versions: 2.0.1

Forms to Zapier, Integromat, IFTTT, Workato, Automate.io, elastic.io, Built.io, APIANT, Webhook

Affected versions: [*, 1.1.9)

Patched versions: 1.1.9

Product Carousel For WooCommerce – WoorouSell

Affected versions: [*, 1.0.9)

Patched versions: 1.0.9

Better Robots.txt – AI-Ready Crawl Control & Bot Governance

Affected versions: [*, 1.4.4)

Patched versions: 1.4.4

GFireM Fields

Affected versions: *

Patched versions: Not supplied

Coupon Affiliates – Affiliate Plugin for WooCommerce

Affected versions: [*, 4.16.4)

Patched versions: 4.16.4

WP Post Block

Affected versions: *

Patched versions: Not supplied

LMS Plugin – eLearning, Online Courses by Attest

Affected versions: *

Patched versions: Not supplied

Frontend Admin by DynamiApps

Affected versions: [*, 3.3.33)

Patched versions: 3.3.33

Simple Giveaways – Grow your business, email lists and traffic with contests

Affected versions: [*, 2.42.1)

Patched versions: 2.42.1

Masonry Gallery & Posts For Divi (WP Tools)

Affected versions: [*, 3.1.2)

Patched versions: 3.1.2

GFireM Action After

Affected versions: *

Patched versions: Not supplied

Ukrposhta

Affected versions: [*, 1.6.18)

Patched versions: 1.6.18

annasta Filters for WooCommerce

Affected versions: [*, 1.5.0)

Patched versions: 1.5.0

WP Lead Stream

Affected versions: *

Patched versions: Not supplied

The Events Calendar

Affected versions: [*, 5.14.0.4)

Patched versions: 5.14.0.4

Focus on Reviews for WooCommerce

Affected versions: *

Patched versions: Not supplied

Email Tracker

Affected versions: *-5.3.8

Patched versions: 5.3.9

Block Styler For Gravity Forms

Affected versions: *-6.1.0

Patched versions: 6.2.0

WP Page Templates

Affected versions: [*, 1.1.13)

Patched versions: 1.1.13

Product Customer List for WooCommerce

Affected versions: [*, 3.0.0)

Patched versions: 3.0.0

WP Moose

Affected versions: [*, 1.0.1)

Patched versions: 1.0.1

Team Members – A WordPress Team Plugin with Gallery, Grid, Carousel, Slider, Table, List, and More

Affected versions: [*, 1.1.0)

Patched versions: 1.1.0

Floating Social Share Icons and Social Share buttons – Next Previous Post Links – FL

Affected versions: [*, 3.6.0)

Patched versions: 3.6.0

South Pole: Climate action now

Affected versions: [*, 1.0.2.0)

Patched versions: 1.0.2.0

LittleBot Invoices

Affected versions: *

Patched versions: Not supplied

Genealogical Tree – Family Tree & Ancestry for WordPress

Affected versions: *-2.1.5

Patched versions: 2.1.6

Automatic YouTube Gallery – Embed Auto-Updating YouTube Video Galleries, Feeds, Playlists & Channels

Affected versions: [*, 1.6.5)

Patched versions: 1.6.5

Thank You Page for WooCommerce

Affected versions: [*, 3.1)

Patched versions: 3.1

Marijuana Age Verify

Affected versions: [*, 1.3.1)

Patched versions: 1.3.1

WooCommerce upcoming Products

Affected versions: *

Patched versions: Not supplied

Frontend Admin – Add and edit posts, pages, users and more all from the frontend

Affected versions: [*, 3.3.33)

Patched versions: 3.3.33

SV Tracking Manager

Affected versions: [*, 1.8.02)

Patched versions: 1.8.02

WP Easy Pay – Payment and Donation Form Builder for Square

Affected versions: [*, 4.0.2)

Patched versions: 4.0.2

WordPress SEO Checklist

Affected versions: *

Patched versions: Not supplied

wGauge – Free Version

Affected versions: *

Patched versions: Not supplied

Prime Slider Addons for Elementor – Widgets, Templates & Elementor Addons

Affected versions: [*, 2.7.0)

Patched versions: 2.7.0

Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)

Affected versions: [*, 2.6.3)

Patched versions: 2.6.3

WP Tools Divi Product Carousel

Affected versions: [*, 1.5.0)

Patched versions: 1.5.0

Guest posting / Frontend Posting / Front Editor – WP Front User Submit

Affected versions: [*, 3.4.1)

Patched versions: 3.4.1

Social Gallery Lite

Affected versions: *

Patched versions: Not supplied

Stackable – Page Builder Gutenberg Blocks

Affected versions: [*, 3.1.5)

Patched versions: 3.1.5

Five-Star Ratings Shortcode

Affected versions: [*, 1.2.39)

Patched versions: 1.2.39

CAPTCHA 4WP – Antispam CAPTCHA solution for WordPress

Affected versions: [*, 7.0.5)

Patched versions: 7.0.5

Premmerce Wishlist for WooCommerce

Affected versions: [*, 1.1.8)

Patched versions: 1.1.8

Salon Booking System – Free Version

Affected versions: [*, 7.6.3)

Patched versions: 7.6.3

Surbma | GDPR Proof Cookie Consent & Notice Bar

Affected versions: [*, 17.5.3)

Patched versions: 17.5.3

Advanced Menu Manager Pro – Built for Content-heavy WordPress Sites to Add, Filter, Lock, and Edit Menus Easily

Affected versions: *

Patched versions: Not supplied

Live TV Player – Worldwide Live TV Channels Player for WordPress

Affected versions: [*, 1.2.3)

Patched versions: 1.2.3

Market Exporter

Affected versions: *-2.0.13

Patched versions: 2.0.14

Adminify – White Label, Admin Menu Editor, Login Customizer

Affected versions: [*, 2.0.5)

Patched versions: 2.0.5

TK Google Fonts GDPR Compliant

Affected versions: [*, 2.2.1)

Patched versions: 2.2.1

Starfish Review Generation & Marketing for WordPress

Affected versions: [*, 3.0.26)

Patched versions: 3.0.26

WP Emaily

Affected versions: *

Patched versions: Not supplied

Education Addon for Elementor

Affected versions: [*, 1.2)

Patched versions: 1.2

SV Proven Expert

Affected versions: [*, 1.8.01)

Patched versions: 1.8.01

SurveyFunnel – Survey Plugin for WordPress

Affected versions: [*, 1.1.3)

Patched versions: 1.1.3

Advanced Classifieds & Directory Pro

Affected versions: [*, 1.8.8)

Patched versions: 1.8.8

Music Player for Elementor – Audio Player & Podcast Player

Affected versions: [*, 1.5.5)

Patched versions: 1.5.5

Cryptocurrency Product for WooCommerce

Affected versions: [*, 3.14.6)

Patched versions: 3.14.6

WooCommerce Next Order Coupon

Affected versions: *

Patched versions: Not supplied

Overlay Image Divi Module

Affected versions: [*, 1.3.2)

Patched versions: 1.3.2

Email Header Footer

Affected versions: *

Patched versions: Not supplied

Document Viewer – let visitors view files right in the browser

Affected versions: [*, 2.2.5)

Patched versions: 2.2.5

Price Bands for WooCommerce

Affected versions: *

Patched versions: Not supplied

Addon Elements for Elementor (formerly Elementor Addon Elements)

Affected versions: [*, 1.11.14)

Patched versions: 1.11.14

Smart Variations Images & Swatches for WooCommerce

Affected versions: [*, 5.1.10)

Patched versions: 5.1.10

Featured Images in RSS for Mailchimp & More

Affected versions: [*, 1.5.9)

Patched versions: 1.5.9

Simple Sponsorships

Affected versions: *

Patched versions: Not supplied

Unlimited Elements For Elementor

Affected versions: [*, 1.5.3)

Patched versions: 1.5.3

Joli Table Of Contents

Affected versions: [*, 1.3.9)

Patched versions: 1.3.9

Sparrow: Product Reviews and Ratings for WooCommerce

Affected versions: *

Patched versions: Not supplied

Multi Page Auto Advance for Gravity Forms

Affected versions: [*, 4.3)

Patched versions: 4.3

Generate Images (AI) – Magic Post Thumbnail

Affected versions: [*, 3.3.11)

Patched versions: 3.3.11

Live Scores for SportsPress

Affected versions: *

Patched versions: Not supplied

Hide Shipping Method For WooCommerce

Affected versions: [*, 1.3.1)

Patched versions: 1.3.1

Ultimate Carousel For Divi

Affected versions: [*, 4.3.1)

Patched versions: 4.3.1

WP Meta and Date Remover

Affected versions: [*, 1.9.6)

Patched versions: 1.9.6

Image Carousel For Divi

Affected versions: [*, 1.5.0)

Patched versions: 1.5.0

Comments Not Replied To

Affected versions: [*, 1.5.3)

Patched versions: 1.5.3

Contact Form 7 – Capsule CRM – Integration

Affected versions: [*, 1.0.5)

Patched versions: 1.0.5

Opensea

Affected versions: [*, 1.0.3)

Patched versions: 1.0.3

WordPress Translation plugin for Post, Pages & WooCommerce products. Tranzly IO AI DeepL automatic WordPress Translator.

Affected versions: [*, 1.1.1)

Patched versions: 1.1.1

Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing

Affected versions: [*, 1.14.3)

Patched versions: 1.14.3

Modern Addons for Elementor Page Builder

Affected versions: [*, 1.2.0)

Patched versions: 1.2.0

Viralike

Affected versions: *

Patched versions: Not supplied

WordPress Dev Powers – Element Selector jQuery Powers Plugin

Affected versions: *

Patched versions: Not supplied

WP Munich Blocks – Gutenberg Blocks for WordPress

Affected versions: [*, 0.11.0)

Patched versions: 0.11.0

Availability Datepicker – Booking Calendar for Contact Form 7 – Input WP

Affected versions: *-2.1

Patched versions: 2.2

Footer Plugin for Divi

Affected versions: *

Patched versions: Not supplied

AidWP – Donation & Payment Forms (Stripe Powered)

Affected versions: [*, 2.9)

Patched versions: 2.9

New User Approve

Affected versions: [*, 2.1)

Patched versions: 2.1

GFireM Advance Search

Affected versions: *

Patched versions: Not supplied

WPMailer – The best mail builder, No More Core for your emails support Elementor, CF7 forms etc…

Affected versions: *

Patched versions: Not supplied

Shared Files – File Upload & Download Manager

Affected versions: [*, 1.6.72)

Patched versions: 1.6.72

WPBITS Addons For Elementor Page Builder

Affected versions: [*, 1.3.2)

Patched versions: 1.3.2

Speculor

Affected versions: *

Patched versions: Not supplied

WP Google Street View (with 360° virtual tour) & Google maps + Local SEO

Affected versions: [*, 1.0.9)

Patched versions: 1.0.9

WordPress Everse Starter Sites – Elementor Templates

Affected versions: [*, 1.2.1)

Patched versions: 1.2.1

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

Affected versions: [*, 1.8.5)

Patched versions: 1.8.5

Choice Payment Gateway for WooCommerce

Affected versions: [*, 2.0.5)

Patched versions: 2.0.5

Domain Mapping System | Create Microsites with Multiple Alias Domains (multisite optional)

Affected versions: [*, 1.7)

Patched versions: 1.7

Order and Inventory Manager for WooCommerce

Affected versions: [*, 1.4.3)

Patched versions: 1.4.3

Ninja Libs Amazon SES

Affected versions: *

Patched versions: Not supplied

WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments

Affected versions: [*, 4.3)

Patched versions: 4.3

WP-Cron Status Checker

Affected versions: [*, 1.2.4)

Patched versions: 1.2.4

CodeKit – Custom Codes Editor

Affected versions: [*, 2.3)

Patched versions: 2.3

Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel

Affected versions: [*, 2.1.34)

Patched versions: 2.1.34

Change Price Title for WooCommerce

Affected versions: *-2.5

Patched versions: 2.6

WordPress Gallery Plugin – Edge Photo Gallery

Affected versions: *

Patched versions: Not supplied

Glorious Services & Support

Affected versions: *

Patched versions: Not supplied

Easy Newsletter Signups

Affected versions: [*, 1.0.4)

Patched versions: 1.0.4

Announcement & Notification Banner – Bulletin

Affected versions: [*, 3.1.0)

Patched versions: 3.1.0

Advanced Database Replacer

Affected versions: *

Patched versions: Not supplied

Multisite Robots.txt Manager

Affected versions: *

Patched versions: Not supplied

Simple Social Page Widget & Shortcode

Affected versions: *

Patched versions: Not supplied

Product Country Restrictions for WooCommerce – Country Catalogs

Affected versions: [*, 1.13.0)

Patched versions: 1.13.0

Front End PM

Affected versions: [*, 11.3.4)

Patched versions: 11.3.4

Ultimate Divi Modules Suite – Divi Sumo Lite

Affected versions: *

Patched versions: Not supplied

XT Points & Rewards for WooCommerce

Affected versions: [*, 1.4.3)

Patched versions: 1.4.3

Widgets for WooCommerce Products on Elementor

Affected versions: [*, 1.0.9)

Patched versions: 1.0.9

Delivery for WooCommerce

Affected versions: *

Patched versions: Not supplied

NotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce

Affected versions: [*, 1.3.7)

Patched versions: 1.3.7

Security Ninja – WordPress Security & Firewall

Affected versions: [*, 5.135)

Patched versions: 5.135

TinyMCE Annotate

Affected versions: *

Patched versions: Not supplied

Justified Gallery

Affected versions: [*, 1.5.1)

Patched versions: 1.5.1

Book BuyBack Prices

Affected versions: *

Patched versions: Not supplied

Fuse Social Floating Sidebar

Affected versions: [*, 5.4.3)

Patched versions: 5.4.3

WP-HR Manager: The Human Resources Plugin for WordPress

Affected versions: [*, 3.0.3)

Patched versions: 3.0.3

Emails Blacklist for Everest Forms

Affected versions: [*, 1.0.4)

Patched versions: 1.0.4

All-in-One Video Gallery

Affected versions: [*, 2.5.4)

Patched versions: 2.5.4

Woo Admin Product Notes

Affected versions: *

Patched versions: Not supplied

Remove Add to Cart WooCommerce

Affected versions: [*, 1.4.3)

Patched versions: 1.4.3

Checkout with Zelle on Woocommerce

Affected versions: [*, 2.0)

Patched versions: 2.0

Divi Gravity Forms (WP Tools)

Affected versions: [*, 6.6.3)

Patched versions: 6.6.3

Everse

Affected versions: [*, 1.8.6)

Patched versions: 1.8.6

Run time Image resizing

Affected versions: *

Patched versions: Not supplied

Rest Routes – Custom Endpoints for WordPress REST API

Affected versions: [*, 4.24.0)

Patched versions: 4.24.0

Widget for Contact form 7

Affected versions: *

Patched versions: Not supplied

Add Pinterest conversion tags for Pinterest Ads + Site verification

Affected versions: [*, 1.2.3)

Patched versions: 1.2.3

WPGSI: Spreadsheet Integration

Affected versions: [*, 3.6.1)

Patched versions: 3.6.1

WP BugBot

Affected versions: *

Patched versions: Not supplied

File Manager for Google Drive – Integrate Google Drive

Affected versions: [*, 1.1.0)

Patched versions: 1.1.0

Nokke

Affected versions: [*, 1.0.11)

Patched versions: 1.0.11

Customers Table for WooCommerce: View, Search, Bulk Editor

Affected versions: [*, 1.0.8)

Patched versions: 1.0.8

Sync eCommerce NEO

Affected versions: *

Patched versions: Not supplied

Preloader for Divi

Affected versions: *

Patched versions: Not supplied

Get Better Reviews for WooCommerce

Affected versions: *-3.0.6

Patched versions: 3.0.7

Knowledge Base documentation & wiki plugin – BasePress Docs

Affected versions: [*, 2.15.14)

Patched versions: 2.15.14

Easy Appointment Booking & Scheduling System – Webba Booking Calendar

Affected versions: [*, 4.2.18)

Patched versions: 4.2.18

Shuban

Affected versions: *

Patched versions: Not supplied

ACF for WooCommerce Product

Affected versions: [*, 1.8)

Patched versions: 1.8

Scheduled Notification Bar

Affected versions: *

Patched versions: Not supplied

3D Viewer – Turn Product Pages into Interactive 3D Experiences

Affected versions: [*, 1.2.7)

Patched versions: 1.2.7

Fullscreen Menu

Affected versions: *-2.2.7

Patched versions: 2.2.8

Gallery PhotoBlocks

Affected versions: [*, 1.2.6)

Patched versions: 1.2.6

Redirection for Contact Form 7

Affected versions: [*, 2.5.0)

Patched versions: 2.5.0

DeMomentSomTres Grid Archive

Affected versions: *

Patched versions: Not supplied

Inbound Brew

Affected versions: *

Patched versions: Not supplied

WP Photo Effects

Affected versions: [*, 1.2.1)

Patched versions: 1.2.1

WPOptin – AI-Powered Top Bars, PopUps & Lead Generation

Affected versions: *-1.2.3

Patched versions: 1.2.4

Extra Fees for WooCommerce

Affected versions: [*, 3.8.2)

Patched versions: 3.8.2

Reset Course Progress For LearnDash

Affected versions: *

Patched versions: Not supplied

Podcast Box – Best Podcasting Plugin for WordPress

Affected versions: [*, 1.0.2)

Patched versions: 1.0.2

The best plugin for restrict content, support all Custom Post Types and Elementor – Password Protected

Affected versions: *

Patched versions: Not supplied

Turbo Widgets

Affected versions: *

Patched versions: Not supplied

Passster – Password Protect Pages and Content

Affected versions: [*, 3.5.5.2)

Patched versions: 3.5.5.2

Gift Message for WooCommerce

Affected versions: [*, 1.6.0)

Patched versions: 1.6.0

azw woocommerce file uploads

Affected versions: *

Patched versions: Not supplied

Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News

Affected versions: [*, 2.3.1)

Patched versions: 2.3.1

Broadcast Lite

Affected versions: [*, 2.0.3)

Patched versions: 2.0.3

Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar

Affected versions: [*, 2.1.15)

Patched versions: 2.1.15

WP Author Bio

Affected versions: *

Patched versions: Not supplied

RW Divi Unite Gallery

Affected versions: *-1.0

Patched versions: Not supplied

Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent

Affected versions: [*, 0.6.7)

Patched versions: 0.6.7

Product Image Watermark for Woo

Affected versions: [*, 1.0.4)

Patched versions: 1.0.4

Advanced Form Integration — Connect Forms to 200+ Apps

Affected versions: [*, 1.49.0)

Patched versions: 1.49.0

Revolution for Elementor

Affected versions: *

Patched versions: Not supplied

ConeBlog – Elementor Blog Widgets

Affected versions: [*, 1.4.6)

Patched versions: 1.4.6

Under Construction

Affected versions: [*, 4.0)

Patched versions: 4.0

WP Gratify

Affected versions: *

Patched versions: Not supplied

Automizy Gravity Forms

Affected versions: *

Patched versions: Not supplied

Widgets on Pages

Affected versions: [*, 1.6.0)

Patched versions: 1.6.0

Get feedback from visitors – WP Feedback Suite Plugin

Affected versions: *

Patched versions: Not supplied

WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule

Affected versions: [*, 2020.1.0)

Patched versions: 2020.1.0

Content Aware Sidebars – Fastest Widget Area Plugin

Affected versions: [*, 3.17.2)

Patched versions: 3.17.2

Bani

Affected versions: *

Patched versions: Not supplied

Fast WordPress

Affected versions: *

Patched versions: Not supplied

SKT Templates – 100% Free Templates for Elementor & Gutenberg

Affected versions: [*, 4.3)

Patched versions: 4.3

Categorify – WordPress Media Library Category & File Manager

Affected versions: [*, 1.0.5)

Patched versions: 1.0.5

Ivory Search – WordPress Search Plugin

Affected versions: [*, 5.4.4)

Patched versions: 5.4.4

Add Twitter Pixel for Twitter ads

Affected versions: [*, 1.0.4)

Patched versions: 1.0.4

XT Variation Swatches for WooCommerce

Affected versions: [*, 1.8.1)

Patched versions: 1.8.1

URL Shortify – Simple and Easy URL Shortener

Affected versions: [*, 1.5.11)

Patched versions: 1.5.11

Secure Gateway for Authorize.net and WooCommerce by Pledged Plugins

Affected versions: [*, 5.1.27)

Patched versions: 5.1.27

BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages

Affected versions: [*, 3.4.2)

Patched versions: 3.4.2

Affiliate Link Builder Plugin for Amazon Associates – Review Engine

Affected versions: *

Patched versions: Not supplied

Glossary

Affected versions: [*, 2.1.8)

Patched versions: 2.1.8

BAVOKO SEO Tools – All-in-One WordPress SEO

Affected versions: *

Patched versions: Not supplied

Cartoon Url

Affected versions: *

Patched versions: Not supplied

WP Frontend Admin – Display WP Admin Pages in the Frontend

Affected versions: [*, 1.17.0.4)

Patched versions: 1.17.0.4

Block, Suspend, Report for BuddyPress

Affected versions: [*, 3.3.3)

Patched versions: 3.3.3

Menu Image, Icons made easy

Affected versions: [*, 3.0.6)

Patched versions: 3.0.6

XT Ajax Add To Cart for WooCommerce

Affected versions: [*, 1.0.4)

Patched versions: 1.0.4

One Click Login

Affected versions: *

Patched versions: Not supplied

Ether and ERC20 tokens WooCommerce Payment Gateway

Affected versions: [*, 4.12.9)

Patched versions: 4.12.9

Chat Button- Leads and Order over Chat

Affected versions: [*, 1.6.1)

Patched versions: 1.6.1

Shipping Gateway Per Product for WooCommerce

Affected versions: [*, 2.0.4)

Patched versions: 2.0.4

Purosa

Affected versions: [*, 1.1.0)

Patched versions: 1.1.0

NicheTable – Responsive Comparison Table Block

Affected versions: [*, 2.2.3)

Patched versions: 2.2.3

Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress

Affected versions: [*, 6.0.0)

Patched versions: 6.0.0

WP Sierra

Affected versions: *

Patched versions: Not supplied

Digital Goods (Checkout Field Editor) for WooCommerce Checkout

Affected versions: [*, 3.6.4)

Patched versions: 3.6.4

SEO Booster

Affected versions: [*, 3.8.5)

Patched versions: 3.8.5

Anti-Spam Protection – No API Key, GDPR Friendly

Affected versions: [*, 1.3.2)

Patched versions: 1.3.2

Ultimate Widgets Light

Affected versions: *

Patched versions: Not supplied

Insert or Embed Articulate Content into WordPress

Affected versions: [*, 4.3000000016)

Patched versions: 4.3000000016

APPExperts – Mobile App Builder for WordPress | WooCommerce to iOS and Android Apps

Affected versions: [*, 1.2.2)

Patched versions: 1.2.2

Ultimate Post Kit Addons for Elementor

Affected versions: [*, 2.9.1)

Patched versions: 2.9.1

Caxton – Create Pro page layouts in Gutenberg

Affected versions: [*, 1.30.0)

Patched versions: 1.30.0

Nitek Carousel Slider Cool Transitions

Affected versions: *

Patched versions: Not supplied

Extend Filter Products By Price Widget

Affected versions: *

Patched versions: Not supplied

BlockMeister – Block Pattern Builder

Affected versions: [*, 3.0.5)

Patched versions: 3.0.5

Yatri Tools

Affected versions: [*, 1.1.3)

Patched versions: 1.1.3

Restrict – membership, site, content and user access restrictions for WordPress

Affected versions: [*, 2.1.9)

Patched versions: 2.1.9

Change Prices with Time for WooCommerce

Affected versions: *

Patched versions: Not supplied

Flat Rate Shipping Method for WooCommerce

Affected versions: [*, 4.0.3)

Patched versions: 4.0.3

Responsive Social Slider Widget

Affected versions: *

Patched versions: Not supplied

Menu Item Scheduler

Affected versions: *

Patched versions: Not supplied

Blog Sidebar Widget

Affected versions: *

Patched versions: Not supplied

Multipurpose Gutenberg Block

Affected versions: *-1.7.3

Patched versions: 1.7.4

Full Page Blog Designer

Affected versions: *

Patched versions: Not supplied

WooCommerce Variation Swatches for Products

Affected versions: *

Patched versions: Not supplied

WP Activity Log

Affected versions: [*, 4.4.0)

Patched versions: 4.4.0

Simple Feature Requests Free – User Feedback Board

Affected versions: [*, 2.2.4)

Patched versions: 2.2.4

Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor

Affected versions: [*, 1.5.23)

Patched versions: 1.5.23

License Manager for WooCommerce

Affected versions: [*, 2.2.6)

Patched versions: 2.2.6

Sky Login Redirect

Affected versions: [*, 3.6.0)

Patched versions: 3.6.0

TrueAna – True Analytics Dashboard

Affected versions: [*, 1.3)

Patched versions: 1.3

Divi Collage

Affected versions: *

Patched versions: Not supplied

Persistent Login

Affected versions: [*, 2.0.0)

Patched versions: 2.0.0

Deals of the Day WooCommerce

Affected versions: *

Patched versions: Not supplied

Add LinkedIn Insight Tag for LinkedIn Ads

Affected versions: [*, 1.2.4)

Patched versions: 1.2.4

Easy Settings for LearnDash

Affected versions: *

Patched versions: Not supplied

Share This Image

Affected versions: [*, 1.67)

Patched versions: 1.67

Easy Social Feed – Social Photos Gallery and Post Feed for WordPress

Affected versions: [*, 6.3.4)

Patched versions: 6.3.4

NEXUS

Affected versions: *

Patched versions: Not supplied

Meridia

Affected versions: [*, 2.2.7)

Patched versions: 2.2.7

WebinarIgnition – Live, Automated & Evergreen Webinar System also for WooCommerce

Affected versions: [*, 2.8.12)

Patched versions: 2.8.12

Auto Post Cleaner

Affected versions: [*, 2.1.2)

Patched versions: 2.1.2

Brand

Affected versions: *

Patched versions: Not supplied

WPBakery Page Builder Addons by Livemesh

Affected versions: [*, 2.9.2)

Patched versions: 2.9.2

WP Table Builder – Drag & Drop Table Builder

Affected versions: [*, 1.3.16)

Patched versions: 1.3.16

Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player

Affected versions: [*, 1.0.8)

Patched versions: 1.0.8

Divi Content Restrictor

Affected versions: *-1.3.0

Patched versions: 1.4.1

Logo Showcase – Responsive Logo Carousel, Logo Slider & Logo Grid

Affected versions: [*, 2.0.3)

Patched versions: 2.0.3

Premmerce Variation Swatches for WooCommerce

Affected versions: [*, 1.2.1)

Patched versions: 1.2.1

PowerFolio – Portfolio & Image Gallery for Elementor

Affected versions: [*, 2.1.7)

Patched versions: 2.1.7

SSL Atlas – Free SSL Certificate & HTTPS Redirect for WordPress

Affected versions: [*, 1.1.1)

Patched versions: 1.1.1

SimpLy Gallery

Affected versions: [*, 2.3.6)

Patched versions: 2.3.6

Easy TikTok Feed – TikTok Video, Feed & Gallery Plugin

Affected versions: [*, 1.1.1)

Patched versions: 1.1.1

PopOverXYZ – Show Light Weight Beautiful Tool Tips On Any Text

Affected versions: *

Patched versions: Not supplied

Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO)

Affected versions: [*, 1.4.5.0)

Patched versions: 1.4.5.0

Number Chat

Affected versions: *

Patched versions: Not supplied

Rating-Widget: Star Review System

Affected versions: [*, 3.1.4)

Patched versions: 3.1.4

Spotlight Social Feeds – Block, Shortcode, and Widget

Affected versions: [*, 0.10.2)

Patched versions: 0.10.2

Expire tags

Affected versions: *

Patched versions: Not supplied

Go Viral – social share, social sharebar, social locker, social chat, open graph, reactions, share & view counters

Affected versions: [*, 1.8.0)

Patched versions: 1.8.0

WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms

Affected versions: [*, 1.4.2)

Patched versions: 1.4.2

Dashy – Google Analytics advanced dashboard

Affected versions: *

Patched versions: Not supplied

Premmerce User Roles

Affected versions: [*, 1.0.11)

Patched versions: 1.0.11

Radio Station by netmix® – Manage and play your Show Schedule in WordPress!

Affected versions: [*, 2.4.0.6)

Patched versions: 2.4.0.6

Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred

Affected versions: [*, 2.4.3.1)

Patched versions: 2.4.3.1

SEO Audit – WP Site Auditor

Affected versions: [*, 1.2.5)

Patched versions: 1.2.5

WordPress Reviews by ReviewPress

Affected versions: *

Patched versions: Not supplied

WP Travel Engine – Tour Booking Plugin – Tour Operator Software

Affected versions: [*, 5.3.8)

Patched versions: 5.3.8

WP Mobile Menu – The Mobile-Friendly Responsive Menu

Affected versions: [*, 2.8.2.7)

Patched versions: 2.8.2.7

WP Smart Export (Free)

Affected versions: *

Patched versions: Not supplied

eaSYNC Booking – Hotels, Restaurants & Car Rentals

Affected versions: [*, 1.1.10)

Patched versions: 1.1.10

WP Conference Schedule

Affected versions: [*, 1.1.0)

Patched versions: 1.1.0

Strumenti Partita IVA per Woocommerce

Affected versions: [*, 1.3.23)

Patched versions: 1.3.23

Anfrageformular – Multi Step Drag & Drop Formular Builder – Leadgenerierung

Affected versions: *

Patched versions: Not supplied

Premmerce Brands for WooCommerce

Affected versions: [*, 1.2.12)

Patched versions: 1.2.12

Ethereum Wallet

Affected versions: [*, 4.0.9)

Patched versions: 4.0.9

Limb Gallery | Create Beautiful Image & Video Galleries

Affected versions: [*, 1.5.2)

Patched versions: 1.5.2

Code Manager

Affected versions: [*, 1.0.14)

Patched versions: 1.0.14

Payment Gateway for PayFabric

Affected versions: *

Patched versions: Not supplied

CP Simple Newsletter

Affected versions: *

Patched versions: Not supplied

LittleBot ACH for Stripe + Plaid

Affected versions: *

Patched versions: Not supplied

Aquarella Lite

Affected versions: *

Patched versions: Not supplied

Coinbase Business Gateway for WooCommerce

Affected versions: [*, 1.4.1)

Patched versions: 1.4.1

Villar

Affected versions: [*, 1.0.8)

Patched versions: 1.0.8

Kikote – Location Picker at Checkout & Google Address AutoFill Plugin for WooCommerce

Affected versions: [*, 1.4.5)

Patched versions: 1.4.5

Age Verification Screen for WooCommerce

Affected versions: [*, 1.0.1)

Patched versions: 1.0.1

Enhanced Ecommerce Google Analytics for WooCommerce

Affected versions: [*, 3.6.3)

Patched versions: 3.6.3

Joli FAQ SEO – WordPress FAQ Plugin

Affected versions: [*, 1.0.4)

Patched versions: 1.0.4

Mass Pages/Posts Creator

Affected versions: [*, 2.1.5)

Patched versions: 2.1.5

WP Relevant Ads

Affected versions: *

Patched versions: Not supplied

GloriousThemes Starter Sites

Affected versions: *

Patched versions: Not supplied

WP Group Promoter

Affected versions: *

Patched versions: Not supplied

Airpress

Affected versions: *

Patched versions: Not supplied

Schema Plugin For Divi, Gutenberg & Shortcodes

Affected versions: *-4.0.1

Patched versions: 4.0.2

Giveaways for woocommerce

Affected versions: *

Patched versions: Not supplied

Custom Login Page Customizer

Affected versions: [*, 2.1.8)

Patched versions: 2.1.8

LearnMore

Affected versions: *

Patched versions: Not supplied

DeMomentSomTres Media Tools Auto

Affected versions: *

Patched versions: Not supplied

Ocean Extra

Affected versions: [*, 1.9.4)

Patched versions: 1.9.4

kk Star Ratings – Rate Post & Collect User Feedbacks

Affected versions: [*, 5.2.9)

Patched versions: 5.2.9

Drop Shadow Boxes

Affected versions: [*, 1.7.4)

Patched versions: 1.7.4

FAQ Manager For Divi, Gutenberg Block & Shortcode

Affected versions: [*, 5.4.1)

Patched versions: 5.4.1

Ads.txt & App-ads.txt Manager for WordPress

Affected versions: [*, 1.1.7.0)

Patched versions: 1.1.7.0

Quick Contact Form

Affected versions: [*, 8.0.2)

Patched versions: 8.0.2

WP Frontend Profile

Affected versions: [*, 1.2.5)

Patched versions: 1.2.5

SVG Flags – Beautiful Scalable Flags For All Countries!

Affected versions: [*, 0.9.6)

Patched versions: 0.9.6

Drip Feed Content Extended for Learndash

Affected versions: *

Patched versions: Not supplied

Post List Designer – Category Post, Recent Post, Post List

Affected versions: [*, 2.1.7)

Patched versions: 2.1.7

Conversion de moneda Woocommerce

Affected versions: *

Patched versions: Not supplied

VidSEO – Video transcript embedding for WordPress & LLM

Affected versions: [*, 1.2.4)

Patched versions: 1.2.4

Before and After Product Images for WooCommerce

Affected versions: *

Patched versions: Not supplied

Woocommerce Customer Reviews with Artificial Intelligence analyzis, with IBM Watson Tone Analyzer

Affected versions: *

Patched versions: Not supplied

LawPress – Law Firm Website Management

Affected versions: *

Patched versions: Not supplied

Shipping Method Display Style for WooCommerce

Affected versions: [*, 3.7.5)

Patched versions: 3.7.5

Royal Addons for Elementor – Addons and Templates Kit for Elementor

Affected versions: [*, 1.3.33)

Patched versions: 1.3.33

SQL Reporting Services – SSRS Plugin for WordPress

Affected versions: *

Patched versions: Not supplied

Bulk Edit Posts and Products in Spreadsheet

Affected versions: [*, 2.24.13)

Patched versions: 2.24.13

Delete Duplicate Posts

Affected versions: [*, 4.7.5)

Patched versions: 4.7.5

WS Bootstrap

Affected versions: *

Patched versions: Not supplied

Clean Social Icons

Affected versions: *

Patched versions: Not supplied

Media Library File Download

Affected versions: [*, 1.1)

Patched versions: 1.1

WP Link Bio

Affected versions: [*, 1.4.5)

Patched versions: 1.4.5

Automatic Internal Links for SEO by Pagup

Affected versions: [*, 1.0.4)

Patched versions: 1.0.4

Geo Mashup

Affected versions: [*, 1.13.6)

Patched versions: 1.13.6

Builder for WooCommerce product reviews shortcodes – ReviewShort

Affected versions: [*, 1.0.17)

Patched versions: 1.0.17

Contact List – Online Staff Directory & Address Book

Affected versions: [*, 2.9.50)

Patched versions: 2.9.50

Post Snippets – Custom WordPress Code Snippets Customizer

Affected versions: [*, 3.1.7)

Patched versions: 3.1.7

SocialMark – Easy Watermark/Logo on Social Media Post Link Share Preview

Affected versions: [*, 2.0.5)

Patched versions: 2.0.5

Print My Blog – Print, PDF, & eBook Converter WordPress Plugin

Affected versions: [*, 3.11.4)

Patched versions: 3.11.4

WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes)

Affected versions: [*, 1.3.5)

Patched versions: 1.3.5

TreePress – Easy Family Trees & Ancestor Profiles

Affected versions: [*, 2.0.21)

Patched versions: 2.0.21

Postcode Redirect

Affected versions: *-4.4.1

Patched versions: 5.0.0

Product Author for WooCommerce

Affected versions: [*, 1.0.3)

Patched versions: 1.0.3

WP Coupons and Deals – WordPress Coupon Plugin

Affected versions: [*, 3.1.12)

Patched versions: 3.1.12

Feedpress Generator – External RSS Frontend Customizer

Affected versions: [*, 1.2.0)

Patched versions: 1.2.0

Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database

Affected versions: [*, 1.4.3)

Patched versions: 1.4.3

WP AutoMedic

Affected versions: *

Patched versions: Not supplied

Banner Management For WooCommerce

Affected versions: [*, 2.2.3)

Patched versions: 2.2.3

Duplicate Variations for Woocommerce

Affected versions: *

Patched versions: Not supplied

Send Prebuilt Emails

Affected versions: *

Patched versions: Not supplied

Helpie FAQ — Accordion, Docs & Knowledge Base

Affected versions: [*, 1.7.7)

Patched versions: 1.7.7

Livemesh SiteOrigin Widgets

Affected versions: [*, 2.8.3)

Patched versions: 2.8.3

Livemesh Addons for Beaver Builder

Affected versions: [*, 2.8.4)

Patched versions: 2.8.4

Tabs with Recommended Posts (Widget)

Affected versions: *

Patched versions: Not supplied

Connect WooCommerce Shop to ERP/CRM, Verifactu and EU/VAT Compliance

Affected versions: [*, 2.1)

Patched versions: 2.1

RevivePress – Keep your Old Content Evergreen

Affected versions: [*, 1.3.1)

Patched versions: 1.3.1

WP fail2ban – Advanced Security

Affected versions: [*, 4.4.0.2)

Patched versions: 4.4.0.2

Ultra Elementor Addons

Affected versions: *

Patched versions: Not supplied

RecurWP – WordPress Recurly Payment Gateway

Affected versions: *

Patched versions: Not supplied

Buttonizer – Floating Menus, Sticky Buttons, & Popup Builder

Affected versions: [*, 2.6.3)

Patched versions: 2.6.3

Quick Event Manager

Affected versions: [*, 9.2.17)

Patched versions: 9.2.17

Image Photo Gallery Final Tiles Grid

Affected versions: [*, 3.5.5)

Patched versions: 3.5.5

Lightbox & Modal Popup WordPress Plugin – FooBox

Affected versions: [*, 2.7.17)

Patched versions: 2.7.17

WP Dev Powers – Display Screen Dimensions to Admin Plugin

Affected versions: *

Patched versions: Not supplied

Ultimate Bulk SEO Noindex Nofollow – Speed up Penalty Recovery Ultimate SEO Booster

Affected versions: *

Patched versions: Not supplied

WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards

Affected versions: [*, 5.1.4)

Patched versions: 5.1.4

StoreCustomizer – A plugin to Customize all WooCommerce Pages

Affected versions: [*, 2.3.8)

Patched versions: 2.3.8

TopNewsWp – Display Tikcer News, RSS Feed Widget and Many More

Affected versions: [*, 2.0)

Patched versions: 2.0

User Menus – Nav Menu Visibility

Affected versions: [*, 1.2.9)

Patched versions: 1.2.9

Contact Form 7 Multi-Step Forms

Affected versions: [*, 4.1.91)

Patched versions: 4.1.91

Easy Age Verify

Affected versions: [*, 1.6.1)

Patched versions: 1.6.1

Blocked in China | Check if your site is available in the Chinese mainland

Affected versions: [*, 1.0.3)

Patched versions: 1.0.3

Disable Payment Methods based on cart conditions for WooCommerce

Affected versions: [*, 1.13.1.1)

Patched versions: 1.13.1.1

Awesome SSL

Affected versions: *

Patched versions: Not supplied

Iks Menu – WordPress Category Accordion Menu & FAQs

Affected versions: [*, 1.9.2)

Patched versions: 1.9.2

Purus

Affected versions: *

Patched versions: Not supplied

Hooked Editable Content

Affected versions: *

Patched versions: Not supplied

Run Contests, Raffles, and Giveaways with ContestsWP

Affected versions: [*, 1.9.0)

Patched versions: 1.9.0

Post Carousel Divi

Affected versions: [*, 1.1.2)

Patched versions: 1.1.2

MailChimp Manager

Affected versions: *

Patched versions: Not supplied

Premmerce Permalink Manager for WooCommerce

Affected versions: [*, 2.3.5)

Patched versions: 2.3.5

Secure IP Logins

Affected versions: *

Patched versions: Not supplied

Videopack

Affected versions: [*, 4.7.4)

Patched versions: 4.7.4

Premmerce WooCommerce Customers Manager

Affected versions: [*, 1.1.13)

Patched versions: 1.1.13

Dynific Addons for Elementor (formerly AnyWhere Elementor)

Affected versions: [*, 1.2.5)

Patched versions: 1.2.5

Divi Torque Lite – Divi Modules for the Divi Builder & Theme

Affected versions: [*, 3.5.0)

Patched versions: 3.5.0

Events Calendar Registration

Affected versions: *

Patched versions: Not supplied

Rocket Maintenance Mode & Coming Soon Page

Affected versions: [*, 4.3)

Patched versions: 4.3

WordPress WooCommerce Sync for Google Sheet

Affected versions: *

Patched versions: Not supplied

Easy Smooth Scroll Links – Smooth Scrolling Anchor

Affected versions: [*, 2.23.1)

Patched versions: 2.23.1

Page Builder Gutenberg Blocks – Kioken Blocks

Affected versions: *

Patched versions: Not supplied

Cryptocurrency Portfolio Tracker

Affected versions: *

Patched versions: Not supplied

Go Fetch Jobs (for WP Job Manager)

Affected versions: *-1.7.3.2

Patched versions: 1.7.3.2.4

Quick Affiliate Store

Affected versions: *

Patched versions: Not supplied

WP Tools Divi Blog Carousel

Affected versions: [*, 1.3.0)

Patched versions: 1.3.0

Post to Google My Business (Google Business Profile)

Affected versions: [*, 3.0.10)

Patched versions: 3.0.10

NicheBase

Affected versions: [*, 1.2.2)

Patched versions: 1.2.2

WPVisitorInfo – Show Visitor Information & Conditional Data Based On That Information

Affected versions: *

Patched versions: Not supplied

Premmerce

Affected versions: [*, 1.3.16)

Patched versions: 1.3.16

CartPops – High Converting Add To Cart Popup For WooCommerce

Affected versions: [*, 1.4.17)

Patched versions: 1.4.17

Scrollsequence – Cinematic Scroll Image Animation Plugin

Affected versions: [*, 1.2.4)

Patched versions: 1.2.4

Elation

Affected versions: *

Patched versions: Not supplied

Cuisine Palace

Affected versions: *

Patched versions: Not supplied

Product Attachment for WooCommerce

Affected versions: [*, 2.1.3)

Patched versions: 2.1.3

Master Blocks – Gutenberg Site Builder

Affected versions: *

Patched versions: Not supplied

Product Options and Price Calculation Formulas for WooCommerce – Uni CPO

Affected versions: [*, 4.9.14)

Patched versions: 4.9.14

WordPress Coupon Plugin for Bloggers and Marketers – WP Offers

Affected versions: [*, 1.1.4)

Patched versions: 1.1.4

WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto

Affected versions: [*, 5.3.1)

Patched versions: 5.3.1

Widgets on Pages and Posts

Affected versions: *

Patched versions: Not supplied

Better Messages – WCFM Integration

Affected versions: *

Patched versions: Not supplied

SheetPress – Manage WordPress Meta data with Google Sheets

Affected versions: *

Patched versions: Not supplied

Advanced Custom Fields options import/export

Affected versions: *

Patched versions: Not supplied

Quick Paypal Payments

Affected versions: [*, 5.7.22)

Patched versions: 5.7.22

Tarot Card Oracle

Affected versions: [*, 1.0.6)

Patched versions: 1.0.6

Better Sharing

Affected versions: *-1.7.1

Patched versions: 1.7.2

Restrict User Access – Ultimate Membership & Content Protection

Affected versions: [*, 2.2.2)

Patched versions: 2.2.2

WUPO Group Attributes for WooCommerce

Affected versions: *-2.0.0

Patched versions: 2.0.1

Nugget by Ingot: Easy, automated and native A/B testing for everyone

Affected versions: *

Patched versions: Not supplied

FeedbackScout: The easiest way to collect, prioritise, manage and track customer feedback.

Affected versions: *

Patched versions: Not supplied

Arendelle

Affected versions: [*, 1.1.3)

Patched versions: 1.1.3

Easy Zillow Reviews

Affected versions: [*, 1.4.1)

Patched versions: 1.4.1

Battle Suit for Divi

Affected versions: *

Patched versions: Not supplied

Store Toolkit – WooCommerce Extensions, Quick Enhancements & Handy Tools

Affected versions: [*, 2.3.4)

Patched versions: 2.3.4

WCC SEO Keyword Research

Affected versions: *

Patched versions: Not supplied

Elements for LifterLMS

Affected versions: *

Patched versions: Not supplied

Custom Registration and Custom Login Forms with New Recaptcha

Affected versions: *

Patched versions: Not supplied

B2B Request a Quote

Affected versions: [*, 1.4.9)

Patched versions: 1.4.9

Wadi Survey

Affected versions: *

Patched versions: Not supplied

Performance Kit

Affected versions: *

Patched versions: Not supplied

Page Builder for Gutenberg – StarterBlocks

Affected versions: *

Patched versions: Not supplied

Impexium Single Sign On

Affected versions: *

Patched versions: Not supplied

XT Quick View for WooCommerce

Affected versions: [*, 1.9.6)

Patched versions: 1.9.6

Live Drag and Drop Builder for Contact Form 7

Affected versions: [*, 1.2.4)

Patched versions: 1.2.4

Primary Addon for Elementor

Affected versions: [*, 1.5.2)

Patched versions: 1.5.2

JDs Portfolio

Affected versions: *

Patched versions: Not supplied

TwentyFourth WP Scraper

Affected versions: *

Patched versions: Not supplied

Blocksy Companion

Affected versions: [*, 1.8.20)

Patched versions: 1.8.20

WordPress Google Translate

Affected versions: [*, 1.2)

Patched versions: 1.2

Hasium

Affected versions: [*, 1.6.5)

Patched versions: 1.6.5

Station Pro – Advanced Audio Streaming & Player for WordPress

Affected versions: *

Patched versions: Not supplied

Event Tickets and Registration

Affected versions: [*, 5.3.0.1)

Patched versions: 5.3.0.1

Gateway for PayLate on WooCommerce

Affected versions: *-1.4

Patched versions: 1.5.2

Auto SEO META keywords (META tags keywords) optimization + WooCommerce

Affected versions: [*, 1.0.4)

Patched versions: 1.0.4

ClimateClick: Climate Action for all

Affected versions: *-1.0.9.21

Patched versions: 1.0.9.22

Premmerce SEO for WooCommerce

Affected versions: [*, 2.1.5)

Patched versions: 2.1.5

Wholesale for WooCommerce

Affected versions: [*, 1.6.1)

Patched versions: 1.6.1

Frontend group restriction for LearnDash

Affected versions: *

Patched versions: Not supplied

Really Simple Featured Video – Featured Video Support for Posts, Pages & WooCommerce Products

Affected versions: *-0.5.1

Patched versions: 0.5.2

Display Eventbrite Events

Affected versions: [*, 4.4.8)

Patched versions: 4.4.8

XT Floating Cart for WooCommerce

Affected versions: [*, 2.6.3)

Patched versions: 2.6.3

WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode

Affected versions: [*, 2.1.1)

Patched versions: 2.1.1

WP SPID Italia

Affected versions: [*, 2.3.5)

Patched versions: 2.3.5

Tiered Pricing Table for WooCommerce

Affected versions: [*, 2.6.1)

Patched versions: 2.6.1

Prime Mover – Migrate WordPress Website & Backups

Affected versions: [*, 1.5.0)

Patched versions: 1.5.0

Replyable – Subscribe to Comments and Reply by Email

Affected versions: [*, 2.2.9)

Patched versions: 2.2.9

Court Reservation – Manage Your Court Bookings Online

Affected versions: [*, 1.7.0)

Patched versions: 1.7.0

VO Store Locator – WP Store Locator Plugin

Affected versions: *

Patched versions: Not supplied

Get Directions Map

Affected versions: [*, 2.15.8)

Patched versions: Not supplied

Premmerce Redirect Manager

Affected versions: [*, 1.0.7)

Patched versions: 1.0.7

SnazzyAdmin WP Admin Theme

Affected versions: *

Patched versions: Not supplied

Amela

Affected versions: [*, 1.0.5)

Patched versions: 1.0.5

Woocommerce Customers Order History

Affected versions: [*, 5.2.1)

Patched versions: 5.2.1

EthPress – Web3 Login

Affected versions: [*, 1.5.1)

Patched versions: 1.5.1

Ant Admin Notices for Team

Affected versions: *

Patched versions: Not supplied

Bulk Edit Coupons for WooCommerce – WP Sheet Editor

Affected versions: [*, 1.3.28)

Patched versions: 1.3.28

Pay For Post with WooCommerce

Affected versions: [*, 3.0.9)

Patched versions: 3.0.9

bbResolutions

Affected versions: *

Patched versions: Not supplied

AWCA – The Great Analytics Insights for Your eStore

Affected versions: [*, 3.0.1)

Patched versions: 3.0.1

TK SmugMug Slideshow Shortcode

Affected versions: *

Patched versions: Not supplied

Lightbox – EverlightBox Gallery

Affected versions: [*, 1.1.18)

Patched versions: 1.1.18

Unakit

Affected versions: [*, 1.2.4.2)

Patched versions: 1.2.4.2

WP Affiliate Disclosure

Affected versions: [*, 1.2.3)

Patched versions: 1.2.3

Media Cloud for Bunny CDN, Amazon S3, Cloudflare R2, Google Cloud Storage, DigitalOcean and more

Affected versions: [*, 4.3.1)

Patched versions: 4.3.1

RaCar Clear Cart for WooCommerce

Affected versions: [*, 1.2.3)

Patched versions: 1.2.3

WP Disable Sitemap

Affected versions: [*, 1.0.4)

Patched versions: 1.0.4

Internal Link Juicer: SEO Auto Linker for WordPress

Affected versions: [*, 1.3.0)

Patched versions: 1.3.0

Block Slider – Responsive Image Slider, Video Slider & Post Slider

Affected versions: [*, 2.0.0)

Patched versions: 2.0.0

Pinblocks — Gutenberg blocks with Pinterest widgets

Affected versions: *

Patched versions: Not supplied

Contact Widgets For Elementor all the contact links you need in one place

Affected versions: *

Patched versions: Not supplied

Tickera – Sell Tickets & Manage Events

Affected versions: [*, 3.4.9.2)

Patched versions: 3.4.9.2

StreamCast – bring live radio to your site with a sleek player

Affected versions: [*, 2.1.4)

Patched versions: 2.1.4

Sticky add to cart for Woo

Affected versions: *

Patched versions: Not supplied

BlockyPage – Gutenberg Based Page Builder

Affected versions: *

Patched versions: Not supplied

Pro Broken Links Maintainer

Affected versions: *

Patched versions: Not supplied

WP School Calendar

Affected versions: [*, 3.6)

Patched versions: 3.6

ListPlus – Unlimited Listing Directory

Affected versions: *

Patched versions: Not supplied

Walker Core

Affected versions: [*, 1.1.8)

Patched versions: 1.1.8

Agy – Age verification for WooCommerce

Affected versions: [*, 4.3.1)

Patched versions: 4.3.1

Modern Designs for Gravity Forms

Affected versions: *

Patched versions: Not supplied

RankBear

Affected versions: *

Patched versions: Not supplied

STAX Header Builder

Affected versions: [*, 1.3.6)

Patched versions: 1.3.6

Fast Checkout for WooCommerce

Affected versions: [*, 1.1.17)

Patched versions: 1.1.17

WooCommerce PayPlug

Affected versions: *

Patched versions: Not supplied

Easy Code Snippets

Affected versions: [*, 1.0.1)

Patched versions: 1.0.1

W3SCloud Contact Form 7 to Zoho CRM

Affected versions: [*, 2.1.0)

Patched versions: 2.1.0

Widget Detector for Elementor

Affected versions: [*, 1.2.0)

Patched versions: 1.2.0

Add Tiktok Pixel for Tiktok ads (+Woocommerce)

Affected versions: [*, 1.2.2)

Patched versions: 1.2.2

WP Encryption – Lifetime Free SSL Cert & HTTPS, Force SSL / HTTPS Redirect, SSL Security

Affected versions: [*, 5.7.10)

Patched versions: 5.7.10

Better Messages – Integration for WC Vendors Marketplace

Affected versions: [*, 1.0.7)

Patched versions: 1.0.7

Alley Business Toolkit

Affected versions: [*, 1.1.8)

Patched versions: 1.1.8

Premmerce Product Filter for WooCommerce

Affected versions: [*, 3.6.2)

Patched versions: 3.6.2

WP Search Filter

Affected versions: *

Patched versions: Not supplied

Easy Post Views Count

Affected versions: [*, 1.0.5)

Patched versions: 1.0.5

Power Ups for Elementor

Affected versions: [*, 1.2.2)

Patched versions: 1.2.2

Social Kit

Affected versions: *

Patched versions: Not supplied

Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider

Affected versions: [*, 2.1.2)

Patched versions: 2.1.2

HM Multiple Roles

Affected versions: [*, 1.6)

Patched versions: 1.6

Multicollab: Content Team Collaboration and Editorial Workflow

Affected versions: [*, 2.0.4)

Patched versions: 2.0.4

Image Alt Text Manager – Bulk & Dynamic Alt Tags For image SEO Optimization + AI

Affected versions: [*, 1.5.0)

Patched versions: 1.5.0

Premmerce Product Search for WooCommerce

Affected versions: [*, 2.2.3)

Patched versions: 2.2.3

Security Safe

Affected versions: [*, 2.4.4)

Patched versions: 2.4.4

Bulk Edit Products for WooCommerce – WP Sheet Editor

Affected versions: [*, 1.7.13)

Patched versions: 1.7.13

Da Reactions

Affected versions: [*, 3.20.2)

Patched versions: 3.20.2

Food Store – Online Food Delivery & Pickup

Affected versions: [*, 1.4)

Patched versions: 1.4

Abeta Link PunchOut

Affected versions: *-0.4

Patched versions: 1.0

jav's – WooCommerce and Trello integration WooTrello

Affected versions: [*, 2.3.1)

Patched versions: 2.3.1

Page Builder Sandwich – Front End WordPress Page Builder Plugin

Affected versions: [*, 4.5.5)

Patched versions: 4.5.5

WP Sessions Time Monitoring Full Automatic

Affected versions: [*, 1.0.6)

Patched versions: 1.0.6

WoowGallery

Affected versions: [*, 1.1.9)

Patched versions: 1.1.9

WordPress Auto SEO Plugin – Upfiv SEO Wizard

Affected versions: *

Patched versions: Not supplied

Greenshift – animation and page builder blocks

Affected versions: [*, 1.1.6)

Patched versions: 1.1.6

Restaurant & Cafe Addon for Elementor

Affected versions: [*, 1.4.6)

Patched versions: 1.4.6

Applicable copyright and licence notices

This record contains material that is subject to copyright

Copyright 2012-2026 Defiant Inc.

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

Copyright 1999-2026 The MITRE Corporation

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record
Published
March 4, 2022
CVSS
6.3

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

Production Feed records are aggregated without claiming discovery, exploitation or infection. Applicable source notices remain attached to individual records. Read the methodology.