Sign in
Deutsch English Español Polski
Medium

Freemius SDK <= 2.4.2 - Missing Authorization Checks

  • Disclosed: 04.03.2022
  • Updated: 11.10.2026 10:22

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.

Affected software

Click a technology to see all vulnerabilities affecting it.

PlatformPackageVulnerable versionsFixed in
WordPress plugin 3D Viewer – Turn Product Pages into Interactive 3D Experiences < 1.2.7 1.2.7
WordPress plugin Abeta PunchOut <= 0.4 1.0
WordPress plugin Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance < 1.2.8 1.2.8
WordPress plugin Gutenberg Blocks – ACF Blocks Suite < 2.6.8 2.6.8
WordPress plugin ACF for WooCommerce Product < 1.8 1.8
WordPress plugin Frontend Admin by DynamiApps < 3.3.33 3.3.33
WordPress plugin Advanced Custom Fields options import/export all versions no fix
WordPress plugin LittleBot ACH for Stripe + Plaid all versions no fix
WordPress plugin Activity Log For MainWP < 1.7.1 1.7.1
WordPress plugin WP Sessions Time Monitoring Full Automatic < 1.0.6 1.0.6
WordPress plugin AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization < 2.6 2.6
WordPress plugin Custom WooCommerce Checkout Fields Editor <= 1.2.6 1.2.7
WordPress plugin Addon Elements for Elementor (formerly Elementor Addon Elements) < 1.11.14 1.11.14
WordPress plugin Livemesh Addons for Beaver Builder < 2.8.4 2.8.4
WordPress plugin Divi Torque Lite < 3.5.0 3.5.0
WordPress plugin Livemesh Addons by Elementor < 7.1.4 7.1.4
WordPress plugin WPBakery Page Builder Addons by Livemesh < 2.9.2 2.9.2
WordPress plugin Add Pinterest conversion tags for Pinterest Ads + Site verification < 1.2.3 1.2.3
WordPress plugin Ivory Search – WordPress Search Plugin < 5.4.4 5.4.4
WordPress plugin Add Tiktok Pixel for Tiktok ads (+Woocommerce) < 1.2.2 1.2.2
WordPress plugin Add Twitter Pixel for Twitter ads < 1.0.4 1.0.4
WordPress plugin AdFoxly – Ad Manager, AdSense Ads & Ads.txt <= 1.8.4 1.8.5
WordPress plugin Adminify – White Label, Admin Menu Editor, Login Customizer < 2.0.5 2.0.5
WordPress plugin Ant Admin Notices for Team all versions no fix
WordPress plugin Advanced Classifieds & Directory Pro < 1.8.8 1.8.8
WordPress plugin Advanced Database Replacer all versions no fix
WordPress plugin Advanced Form Integration — Connect Forms to 300+ Apps < 1.49.0 1.49.0
WordPress plugin CAPTCHA 4WP – Antispam CAPTCHA solution for WordPress < 7.0.5 7.0.5
WordPress plugin Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress < 6.0.0 6.0.0
WordPress plugin Advanced Menu Manager Pro – Built for Content-heavy WordPress Sites to Add, Filter, Lock, and Edit Menus Easily all versions no fix
WordPress plugin AWCA – The Great Analytics Insights for Your eStore < 3.0.1 3.0.1
WordPress plugin Age Verification Screen for WooCommerce < 1.0.1 1.0.1
WordPress plugin Airpress all versions no fix
WordPress plugin FiboSearch – Ajax Search for WooCommerce < 1.17.0 1.17.0
WordPress plugin Alley Business Toolkit < 1.1.8 1.1.8
WordPress plugin All in One Invite Codes < 1.0.13 1.0.13
WordPress plugin All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos < 2.5.4 2.5.4
WordPress plugin Image Alt Text Manager – Bulk & Dynamic Alt Tags For image SEO Optimization + AI < 1.5.0 1.5.0
WordPress plugin Anfrageformular – Multi Step Drag & Drop Formular Builder – Leadgenerierung all versions no fix
WordPress plugin Fullscreen Menu <= 2.2.7 2.2.8
WordPress plugin WordPress Animation Plugin – Animated Everything all versions no fix
WordPress plugin annasta Filters for WooCommerce < 1.5.0 1.5.0
WordPress plugin Any Popup – Popup Forms, Optins & Ads all versions no fix
WordPress plugin Dynific Addons for Elementor (formerly Anywhere Elementor) < 1.2.5 1.2.5
WordPress plugin Ads.txt & App-ads.txt Manager for WordPress < 1.1.7.0 1.1.7.0
WordPress plugin APPExperts – Mobile App Builder for WordPress | WooCommerce to iOS and Android Apps < 1.2.2 1.2.2
WordPress plugin Atlas – Knowledge Base all versions no fix
WordPress plugin Multi Page Auto Advance for Gravity Forms < 4.3 4.3
WordPress plugin Automatic Internal Links for SEO by Pagup < 1.0.4 1.0.4
WordPress plugin Automatic YouTube Gallery – Embed Auto-Updating YouTube Video Galleries, Feeds, Playlists & Channels < 1.6.5 1.6.5
WordPress plugin Automizy Gravity Forms all versions no fix
WordPress plugin AutoSave Net all versions no fix
WordPress plugin Awesome SSL all versions no fix
WordPress plugin azw woocommerce file uploads all versions no fix
WordPress plugin Banner Management For WooCommerce < 2.2.3 2.2.3
WordPress plugin Knowledge Base documentation & wiki plugin – BasePress Docs < 2.15.14 2.15.14
WordPress plugin bbResolutions all versions no fix
WordPress plugin Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons < 2.7.0 2.7.0
WordPress plugin Before and After Product Images for WooCommerce all versions no fix
WordPress plugin Better Addons for Elementor < 1.3.1 1.3.1
WordPress plugin Better Messages – WCFM Integration all versions no fix
WordPress plugin Better Messages – Integration for WC Vendors Marketplace < 1.0.7 1.0.7
WordPress plugin Better Robots.txt – AI-Ready Crawl Control & Bot Governance < 1.4.4 1.4.4
WordPress plugin Better Sharing <= 1.7.1 1.7.2
WordPress plugin Blocked in China | Check if your site is available in the Chinese mainland < 1.0.3 1.0.3
WordPress plugin BlockMeister – Block Pattern Builder < 3.0.5 3.0.5
WordPress plugin Block Slider – Responsive Image Slider, Video Slider & Post Slider < 2.0.0 2.0.0
WordPress plugin BlockSpare – Gutenberg Blocks, AI Content Generator & Site Builder for news, magazine, blog and business sites < 2.0.1 2.0.1
WordPress plugin Block Styler For Gravity Forms <= 6.1.0 6.2.0
WordPress plugin Blocksy Companion < 1.8.20 1.8.20
WordPress plugin BlockyPage – Gutenberg Based Page Builder all versions no fix
WordPress plugin Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News < 2.3.1 2.3.1
WordPress plugin Blog Sidebar Widget all versions no fix
WordPress plugin Book BuyBack Prices all versions no fix
WordPress plugin Booking Addon for WooCommerce < 4.2.0 4.2.0
WordPress plugin Bookit — Booking & Appointment Calendar < 2.2.9 2.2.9
WordPress plugin BookPress – For Book Authors < 1.2.3 1.2.3
WordPress plugin Woocommerce Customer Reviews with Artificial Intelligence analyzis, with IBM Watson Tone Analyzer all versions no fix
WordPress plugin Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots < 1.9.9.170 1.9.9.170
WordPress plugin Block, Suspend, Report for BuddyPress < 3.3.3 3.3.3
WordPress plugin BuddyForms < 2.6.3 2.6.3
WordPress plugin WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule < 2020.1.0 2020.1.0
WordPress plugin Bulk Attachment Download < 1.3.5 1.3.5
WordPress plugin Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor < 1.5.23 1.5.23
WordPress plugin Bulk Edit and Create User Profiles – WP Sheet Editor < 1.5.13 1.5.13
WordPress plugin Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO) < 1.4.5.0 1.4.5.0
WordPress plugin Bulk Auto Image Title Attribute (Image Title tag) optimizer (Image SEO) < 1.2.3 1.2.3
WordPress plugin Bulk WooCommerce Category Creator all versions no fix
WordPress plugin Announcement & Notification Banner – Bulletin < 3.1.0 3.1.0
WordPress plugin Buttonizer – Floating Menus, Sticky Buttons, & Popup Builder < 2.6.3 2.6.3
WordPress plugin Tarot Card Oracle < 1.0.6 1.0.6
WordPress plugin Cartoon Url all versions no fix
WordPress plugin CartPops – WooCommerce Side Cart, Cart Drawer & Cart Popup < 1.4.17 1.4.17
WordPress plugin Categorify – WordPress Media Library Category & File Manager < 1.0.5 1.0.5
WordPress plugin Caxton – Create Pro page layouts in Gutenberg < 1.30.0 1.30.0
WordPress plugin CF7 Constant Contact Fields Mapping all versions no fix
WordPress plugin Easy Math Captcha for CF7 all versions no fix
WordPress plugin Grid & Styler For Contact Form 7 And Divi < 1.4.1 1.4.1
WordPress plugin WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms < 1.4.2 1.4.2
WordPress plugin CF7 Mate – AI Form Builder, Styler & Multi-Step Forms for Contact Form 7 < 1.3.0 1.3.0
WordPress plugin Change Prices with Time for WooCommerce all versions no fix
WordPress plugin Change Price Title for WooCommerce <= 2.5 2.6
WordPress plugin Choice Payment Gateway for WooCommerce < 2.0.5 2.0.5
WordPress plugin Clean Social Icons all versions no fix
WordPress plugin ClickerVolt – Affiliate Links & Click Tracking for Performance Marketers all versions no fix
WordPress plugin ClimateClick: Climate Action for all <= 1.0.9.21 1.0.9.22
WordPress plugin Code Manager < 1.0.14 1.0.14
WordPress plugin Divi Collage all versions no fix
WordPress plugin Multicollab: Content Team Collaboration and Editorial Workflow < 2.0.4 2.0.4
WordPress plugin Comments Not Replied To < 1.5.3 1.5.3
WordPress plugin Coinbase Business Gateway for WooCommerce < 1.4.1 1.4.1
WordPress plugin ConeBlog – Elementor Blog Widgets < 1.4.6 1.4.6
WordPress plugin Connected Sermons all versions no fix
WordPress plugin Webheadcoder Multi-Step Forms for Contact Form 7 < 4.1.91 4.1.91
WordPress plugin Contact List – Online Staff Directory & Address Book < 2.9.50 2.9.50
WordPress plugin Contact Widgets For Elementor all the contact links you need in one place all versions no fix
WordPress plugin Content Aware Sidebars – Fastest Widget Area Plugin < 3.17.2 3.17.2
WordPress plugin Passster – Password Protect Pages and Content < 3.5.5.2 3.5.5.2
WordPress plugin Divi Content Restrictor <= 1.3.0 1.4.1
WordPress plugin Agy – Age verification for WooCommerce < 4.3.1 4.3.1
WordPress plugin Run Contests, Raffles, and Giveaways with ContestsWP < 1.9.0 1.9.0
WordPress plugin Conversion de moneda Woocommerce all versions no fix
WordPress plugin Court Reservation – Manage Your Court Bookings Online < 1.7.0 1.7.0
WordPress plugin CP Simple Newsletter all versions no fix
WordPress plugin Cryptocurrency Portfolio Tracker all versions no fix
WordPress plugin Cryptocurrency Product for WooCommerce < 3.14.6 3.14.6
WordPress plugin CodeKit – Custom Codes Editor < 2.3 2.3
WordPress plugin WP Page Templates < 1.1.13 1.1.13
WordPress plugin Custom Registration and Custom Login Forms with New Recaptcha all versions no fix
WordPress plugin DancePress (TRWA) <= 3.1.2 3.1.3
WordPress plugin Da Reactions < 3.20.2 3.20.2
WordPress plugin Dashy – Google Analytics advanced dashboard all versions no fix
WordPress plugin Availability Datepicker – Booking Calendar for Contact Form 7 – Input WP <= 2.1 2.2
WordPress plugin Deals of the Day WooCommerce all versions no fix
WordPress plugin WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments < 4.3 4.3
WordPress plugin Delete Duplicate Posts < 4.7.5 4.7.5
WordPress plugin Auto Post Cleaner < 2.1.2 2.1.2
WordPress plugin WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) < 1.3.5 1.3.5
WordPress plugin Delivery for WooCommerce all versions no fix
WordPress plugin DeMomentSomTres Address all versions no fix
WordPress plugin DeMomentSomTres Grid Archive all versions no fix
WordPress plugin DeMomentSomTres Media Tools Auto all versions no fix
WordPress plugin WP Frontend Admin – Display WP Admin Pages in the Frontend < 1.17.0.4 1.17.0.4
WordPress plugin Domain Mapping System | Create Microsites with Multiple Alias Domains (multisite optional) < 1.7 1.7
WordPress plugin Live Drag and Drop Builder for Contact Form 7 < 1.2.4 1.2.4
WordPress plugin Drip Feed Content Extended for Learndash all versions no fix
WordPress plugin Drop Shadow Boxes < 1.7.4 1.7.4
WordPress plugin Battle Suit for Divi all versions no fix
WordPress plugin Duplicate Variations for Woocommerce all versions no fix
WordPress plugin Easy Age Verify < 1.6.1 1.6.1
WordPress plugin Easy Code Snippets < 1.0.1 1.0.1
WordPress plugin Easy Social Feed – Social Wall, Photos Gallery and Post Feed for WordPress < 6.3.4 6.3.4
WordPress plugin Marijuana Age Verify < 1.3.1 1.3.1
WordPress plugin eaSYNC Booking – Hotels, Restaurants & Car Rentals < 1.1.10 1.1.10
WordPress plugin Easy Newsletter Signups < 1.0.4 1.0.4
WordPress plugin Easy Post Views Count < 1.0.5 1.0.5
WordPress plugin Easy Prayer all versions no fix
WordPress plugin Easy Settings for LearnDash all versions no fix
WordPress plugin Easy Smooth Scroll Links – Smooth Scrolling Anchor < 2.23.1 2.23.1
WordPress plugin Easy TikTok Feed – TikTok Video, Feed & Gallery Plugin < 1.1.1 1.1.1
WordPress plugin Under Construction < 4.0 4.0
WordPress plugin Easy Zillow Reviews < 1.4.1 1.4.1
WordPress plugin Checkout with Cash App on EDD all versions no fix
WordPress plugin Checkout with Venmo on EDD all versions no fix
WordPress plugin WordPress Gallery Plugin – Edge Photo Gallery all versions no fix
WordPress plugin Education Addon for Elementor < 1.2 1.2
WordPress plugin Elements for LifterLMS all versions no fix
WordPress plugin Email Header Footer all versions no fix
WordPress plugin Emails Blacklist for Everest Forms < 1.0.4 1.0.4
WordPress plugin Email Tracker <= 5.3.8 5.3.9
WordPress plugin Document Viewer – let visitors view files right in the browser < 2.2.5 2.2.5
WordPress plugin Error Log Monitor < 1.7.1 1.7.1
WordPress plugin Ether and ERC20 tokens WooCommerce Payment Gateway < 4.12.9 4.12.9
WordPress plugin EthereumICO < 2.3.11 2.3.11
WordPress plugin Ethereum Wallet < 4.0.9 4.0.9
WordPress plugin EthPress – Web3 Login < 1.5.1 1.5.1
WordPress plugin Events Addon for Elementor < 1.9.8 1.9.8
WordPress plugin Events Calendar Registration all versions no fix
WordPress plugin Event Tickets and Registration < 5.3.0.1 5.3.0.1
WordPress plugin Lightbox – EverlightBox Gallery < 1.1.18 1.1.18
WordPress plugin WordPress Everse Starter Sites – Elementor Templates < 1.2.1 1.2.1
WordPress plugin Expire tags all versions no fix
WordPress plugin Extend Filter Products By Price Widget all versions no fix
WordPress plugin FAQ Manager For Divi, Gutenberg Block & Shortcode < 5.4.1 5.4.1
WordPress plugin Fast Checkout for WooCommerce < 1.1.17 1.1.17
WordPress plugin Fast WordPress all versions no fix
WordPress plugin Featured Images in RSS for Mailchimp & More < 1.5.9 1.5.9
WordPress plugin FIT: Featured Image Toolkit all versions no fix
WordPress plugin Featured Products First for WooCommerce – A Extension of WooCommerce (WooCommerce Addon Plugin) all versions no fix
WordPress plugin FeedbackScout: The easiest way to collect, prioritise, manage and track customer feedback. all versions no fix
WordPress plugin Get feedback from visitors – WP Feedback Suite Plugin all versions no fix
WordPress plugin Feedpress Generator – External RSS Frontend Customizer < 1.2.0 1.2.0
WordPress plugin Filr – Secure document library < 1.2.1 1.2.1
WordPress plugin Image Photo Gallery Final Tiles Grid < 3.5.5 3.5.5
WordPress plugin Five-Star Ratings Shortcode < 1.2.39 1.2.39
WordPress plugin Floating Social Share Icons and Social Share buttons – Next Previous Post Links – FL < 3.6.0 3.6.0
WordPress plugin Focus on Reviews for WooCommerce all versions no fix
WordPress plugin Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar < 2.1.15 2.1.15
WordPress plugin Lightbox & Modal Popup WordPress Plugin – FooBox < 2.7.17 2.7.17
WordPress plugin Food Store – Online Food Delivery & Pickup < 1.4 1.4
WordPress plugin FooGallery Photo Gallery : Image, Video & Masonry Galleries < 2.1.34 2.1.34
WordPress plugin ForceField all versions no fix
WordPress plugin Forms to Zapier, Integromat, IFTTT, Workato, Automate.io, elastic.io, Built.io, APIANT, Webhook < 1.1.9 1.1.9
WordPress plugin Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database < 1.4.3 1.4.3
WordPress plugin Guest posting / Frontend Posting / Front Editor – WP Front User Submit < 3.4.1 3.4.1
WordPress plugin Frontend Admin – Add and edit posts, pages, users and more all from the frontend < 3.3.33 3.3.33
WordPress plugin Frontend group restriction for LearnDash all versions no fix
WordPress plugin Front End PM < 11.3.4 11.3.4
WordPress plugin Full Page Blog Designer all versions no fix
WordPress plugin Anti-Spam Protection – No API Key, GDPR Friendly < 1.3.2 1.3.2
WordPress plugin Fuse Social Icons < 5.4.3 5.4.3
WordPress plugin Impexium Single Sign On all versions no fix
WordPress plugin TrueAna – True Analytics Dashboard < 1.3 1.3
WordPress plugin WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode < 2.1.1 2.1.1
WordPress plugin Genealogical Tree – Family Tree & Ancestry for WordPress <= 2.1.5 2.1.6
WordPress plugin Geo Mashup < 1.13.6 1.13.6
WordPress plugin Get Directions Map < 2.15.8 no fix
WordPress plugin GFireM Action After all versions no fix
WordPress plugin GFireM Advance Search all versions no fix
WordPress plugin GFireM Fields all versions no fix
WordPress plugin Gift Message for WooCommerce < 1.6.0 1.6.0
WordPress plugin Simple Giveaways – Grow your business, email lists and traffic with contests < 2.42.1 2.42.1
WordPress plugin Giveaways for woocommerce all versions no fix
WordPress plugin Glorious Services & Support all versions no fix
WordPress plugin GloriousThemes Starter Sites all versions no fix
WordPress plugin Glossary < 2.1.8 2.1.8
WordPress plugin Go Fetch Jobs (for WP Job Manager) <= 1.7.3.2 1.7.3.2.4
WordPress plugin Go Viral – social share, social sharebar, social locker, social chat, open graph, reactions, share & view counters < 1.8.0 1.8.0
WordPress plugin Greenshift – animation and page builder blocks < 1.1.6 1.1.6
WordPress plugin Team Members – A WordPress Team Plugin with Gallery, Grid, Carousel, Slider, Table, List, and More < 1.1.0 1.1.0
WordPress plugin Guestofy – Restaurant Reservations Plugin, Room Planer, Reservation Form all versions no fix
WordPress plugin WordPress Slider Block Gutenslider < 5.7.0 5.7.0
WordPress plugin Helpie FAQ — Accordion, Docs & Knowledge Base < 1.7.7 1.7.7
WordPress plugin Hide Shipping Method For WooCommerce < 1.3.1 1.3.1
WordPress plugin HM Multiple Roles < 1.6 1.6
WordPress plugin Hooked Editable Content all versions no fix
WordPress plugin HQTheme Extra all versions no fix
WordPress plugin Iks Menu – WordPress Category Accordion Menu & FAQs < 1.9.2 1.9.2
WordPress plugin Media Cloud for Bunny CDN, Amazon S3, Cloudflare R2, Google Cloud Storage, DigitalOcean and more < 4.3.1 4.3.1
WordPress plugin Image Carousel For Divi < 1.5.0 1.5.0
WordPress plugin Inbound Brew all versions no fix
WordPress plugin Insert or Embed Articulate Content into WordPress < 4.3000000016 4.3000000016
WordPress plugin File Manager for Google Drive – Integrate Google Drive < 1.1.0 1.1.0
WordPress plugin Contact Form 7 – Capsule CRM – Integration < 1.0.5 1.0.5
WordPress plugin MapGeo – Interactive Geo Maps < 1.5.4 1.5.4
WordPress plugin Internal Link Juicer: SEO Auto Linker for WordPress < 1.3.0 1.3.0
WordPress plugin JDs Portfolio all versions no fix
WordPress plugin Joli FAQ SEO – WordPress FAQ Plugin < 1.0.4 1.0.4
WordPress plugin Joli Table Of Contents < 1.3.9 1.3.9
WordPress plugin Justified Gallery < 1.5.1 1.5.1
WordPress plugin Page Builder Gutenberg Blocks – Kioken Blocks all versions no fix
WordPress plugin kk Star Ratings – Rate Post & Collect User Feedbacks < 5.2.9 5.2.9
WordPress plugin KRSP Frontend File Uploader all versions no fix
WordPress plugin KVoucher all versions no fix
WordPress plugin LawPress – Law Firm Website Management all versions no fix
WordPress plugin License Manager for WooCommerce < 2.2.6 2.2.6
WordPress plugin Limb Gallery | Create Beautiful Image & Video Galleries < 1.5.2 1.5.2
WordPress plugin ListPlus – Unlimited Listing Directory all versions no fix
WordPress plugin LittleBot Invoices all versions no fix
WordPress plugin Livemesh SiteOrigin Widgets < 2.8.3 2.8.3
WordPress plugin Live Scores for SportsPress all versions no fix
WordPress plugin Add LinkedIn Insight Tag for LinkedIn Ads < 1.2.4 1.2.4
WordPress plugin Local Delivery Drivers for WooCommerce < 1.8.5 1.8.5
WordPress plugin LocalSEOMap all versions no fix
WordPress plugin Custom Login Page Customizer < 2.1.8 2.1.8
WordPress plugin Logo Showcase – Responsive Logo Carousel, Logo Slider & Logo Grid < 2.0.3 2.0.3
WordPress plugin Generate Images (AI) – Magic Post Thumbnail < 3.3.11 3.3.11
WordPress plugin Kikote – Location Picker at Checkout & Google Address AutoFill Plugin for WooCommerce < 1.4.5 1.4.5
WordPress plugin Market Exporter <= 2.0.13 2.0.14
WordPress plugin Mass Pages/Posts Creator < 2.1.5 2.1.5
WordPress plugin Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits < 1.8.5 1.8.5
WordPress plugin Master Blocks – Gutenberg Site Builder all versions no fix
WordPress plugin Media Library File Download < 1.1 1.1
WordPress plugin Menu Image, Icons made easy < 3.0.6 3.0.6
WordPress plugin Menu Item Scheduler all versions no fix
WordPress plugin Auto SEO META keywords (META tags keywords) optimization + WooCommerce < 1.0.4 1.0.4
WordPress plugin WP Mobile Menu – The Mobile-Friendly Responsive Menu < 2.8.2.7 2.8.2.7
WordPress plugin MOBILOOK — Mobile View & Mobile‑Friendly Test < 1.2.4 1.2.4
WordPress plugin Modern Addons for Elementor Page Builder < 1.2.0 1.2.0
WordPress plugin Modern Designs for Gravity Forms all versions no fix
WordPress plugin Get Better Reviews for WooCommerce <= 3.0.6 3.0.7
WordPress plugin Footer Plugin for Divi all versions no fix
WordPress plugin Multipurpose Gutenberg Block <= 1.7.3 1.7.4
WordPress plugin Multisite Robots.txt Manager all versions no fix
WordPress plugin Music Player for Elementor – Audio Player & Podcast Player < 1.5.5 1.5.5
WordPress plugin Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred < 2.4.3.1 2.4.3.1
WordPress plugin New User Approve < 2.1 2.1
WordPress plugin WooCommerce Next Order Coupon all versions no fix
WordPress plugin NEXUS all versions no fix
WordPress plugin NicheTable – Responsive Comparison Table Block < 2.2.3 2.2.3
WordPress plugin Ninja Libs Amazon SES all versions no fix
WordPress plugin Nitek Carousel Slider Cool Transitions all versions no fix
WordPress plugin Nugget by Ingot: Easy, automated and native A/B testing for everyone all versions no fix
WordPress plugin Number Chat all versions no fix
WordPress plugin Ocean Extra < 1.9.4 1.9.4
WordPress plugin One Click Login all versions no fix
WordPress plugin Opensea < 1.0.3 1.0.3
WordPress plugin Order and Inventory Manager for WooCommerce < 1.4.3 1.4.3
WordPress plugin Chat Button- Leads and Order over Chat < 1.6.1 1.6.1
WordPress plugin Out of stock display for woocommerce all versions no fix
WordPress plugin Overlay Image Divi Module < 1.3.2 1.3.2
WordPress plugin Page Builder Sandwich – Front End WordPress Page Builder Plugin < 4.5.5 4.5.5
WordPress plugin Panorama – Turn Photos into Immersive Virtual Tours < 1.0.8 1.0.8
WordPress plugin Past Events Extension all versions no fix
WordPress plugin Payment Gateway for PayFabric all versions no fix
WordPress plugin Performance Kit all versions no fix
WordPress plugin Gallery PhotoBlocks < 1.2.6 1.2.6
WordPress plugin Pinblocks — Gutenberg blocks with Pinterest widgets all versions no fix
WordPress plugin Podcast Box – Best Podcasting Plugin for WordPress < 1.0.2 1.0.2
WordPress plugin Pootle Pagebuilder – WordPress Page builder < 5.7.1 5.7.1
WordPress plugin PopOverXYZ – Show Light Weight Beautiful Tool Tips On Any Text all versions no fix
WordPress plugin PowerFolio – Portfolio & Image Gallery for Elementor < 2.1.7 2.1.7
WordPress plugin Post Carousel Divi < 1.1.2 1.1.2
WordPress plugin Postcode Redirect <= 4.4.1 5.0.0
WordPress plugin Post List Designer – Category Post, Recent Post, Post List < 2.1.7 2.1.7
WordPress plugin Replyable – Subscribe to Comments and Reply by Email < 2.2.9 2.2.9
WordPress plugin Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider < 2.1.2 2.1.2
WordPress plugin Post Snippets – Custom WordPress Code Snippets Customizer < 3.1.7 3.1.7
WordPress plugin Post to Google My Business (Google Business Profile) < 3.0.10 3.0.10
WordPress plugin Power Ups for Elementor < 1.2.2 1.2.2
WordPress plugin Preloader for Divi all versions no fix
WordPress plugin Premmerce < 1.3.16 1.3.16
WordPress plugin Premmerce Redirect Manager < 1.0.7 1.0.7
WordPress plugin Premmerce Product Search for WooCommerce < 2.2.3 2.2.3
WordPress plugin Premmerce User Roles < 1.0.11 1.0.11
WordPress plugin Premmerce Brands for WooCommerce < 1.2.12 1.2.12
WordPress plugin Premmerce Multi-currency for Woocommerce < 2.3.2 2.3.2
WordPress plugin Premmerce Product Filter for WooCommerce < 3.6.2 3.6.2
WordPress plugin Premmerce Variation Swatches for WooCommerce < 1.2.1 1.2.1
WordPress plugin Premmerce Wholesale Pricing for WooCommerce < 1.1.8 1.1.8
WordPress plugin Premmerce Wishlist for WooCommerce < 1.1.8 1.1.8
WordPress plugin Price Bands for WooCommerce all versions no fix
WordPress plugin Primary Addon for Elementor < 1.5.2 1.5.2
WordPress plugin Prime Mover – Backup and Migration < 1.5.0 1.5.0
WordPress plugin Print My Blog – Print, PDF, & eBook Converter WordPress Plugin < 3.11.4 3.11.4
WordPress plugin Product Image Watermark for Woo < 1.0.4 1.0.4
WordPress plugin Pro Broken Links Maintainer all versions no fix
WordPress plugin The best plugin for restrict content, support all Custom Post Types and Elementor – Password Protected all versions no fix
WordPress plugin Protect Uploads with Login – Protect Your Uploads all versions no fix
WordPress plugin Quick Affiliate Store all versions no fix
WordPress plugin Quick Contact Form < 8.0.2 8.0.2
WordPress plugin Quick Event Manager < 9.2.17 9.2.17
WordPress plugin Quick Paypal Payments < 5.7.22 5.7.22
WordPress plugin Qyrr – simply and modern QR-Code creation < 0.8 0.8
WordPress plugin RaCar Clear Cart for WooCommerce < 1.2.3 1.2.3
WordPress plugin Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player < 1.0.8 1.0.8
WordPress plugin Radio Station by netmix® – Manage and play your Show Schedule in WordPress! < 2.4.0.6 2.4.0.6
WordPress plugin RankBear all versions no fix
WordPress plugin Rating-Widget: Star Review System < 3.1.4 3.1.4
WordPress plugin Really Simple Featured Video for Posts, Pages & WooCommerce Products <= 0.5.1 0.5.2
WordPress plugin RecurWP – WordPress Recurly Payment Gateway all versions no fix
WordPress plugin Remove Add to Cart WooCommerce < 1.4.3 1.4.3
WordPress plugin WP Required Taxonomies – Categories and Tags Mandatory < 1.1.8 1.1.8
WordPress plugin Reset Course Progress For LearnDash all versions no fix
WordPress plugin Responsive Social Slider Widget all versions no fix
WordPress plugin Restaurant & Cafe Addon for Elementor < 1.4.6 1.4.6
WordPress plugin Restrict – membership, site, content and user access restrictions for WordPress < 2.1.9 2.1.9
WordPress plugin Restrict User Access – Ultimate Membership & Content Protection < 2.2.2 2.2.2
WordPress plugin Rest Routes – Custom Endpoints for WordPress REST API < 4.24.0 4.24.0
WordPress plugin Affiliate Link Builder Plugin for Amazon Associates – Review Engine all versions no fix
WordPress plugin WordPress Reviews by ReviewPress all versions no fix
WordPress plugin Revolution for Elementor all versions no fix
WordPress plugin MailChimp Manager all versions no fix
WordPress plugin Rocket Maintenance Mode & Coming Soon Page < 4.3 4.3
WordPress plugin Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.3.33 1.3.33
WordPress plugin RT Easy Builder – Advanced addons for Elementor <= 1.4 1.5
WordPress plugin Run time Image resizing all versions no fix
WordPress plugin RW Divi Unite Gallery <= 1.0 no fix
WordPress plugin Salon Booking System – Appointment Booking for Salons, Barbershops & Spas < 7.6.3 7.6.3
WordPress plugin Scheduled Notification Bar all versions no fix
WordPress plugin Scrollsequence – Cinematic Scroll Image Animation Plugin < 1.2.4 1.2.4
WordPress plugin Secure IP Logins all versions no fix
WordPress plugin Security Ninja – WordPress Security & Firewall < 5.135 5.135
WordPress plugin Security Safe < 2.4.4 2.4.4
WordPress plugin Send Prebuilt Emails all versions no fix
WordPress plugin SEO Booster < 3.8.5 3.8.5
WordPress plugin WordPress SEO Checklist all versions no fix
WordPress plugin SEO Audit – WP Site Auditor < 1.2.5 1.2.5
WordPress plugin Server Info – System Health & Diagnostics Suite all versions no fix
WordPress plugin A no-code page builder for beautiful performance-based content < 2.1.17 2.1.17
WordPress plugin WP Author Bio all versions no fix
WordPress plugin Shared Files – File Upload & Download Manager < 1.6.72 1.6.72
WordPress plugin Share This Image < 1.67 1.67
WordPress plugin SheetPress – Manage WordPress Meta data with Google Sheets all versions no fix
WordPress plugin Simple Social Page Widget & Shortcode all versions no fix
WordPress plugin Simple Feature Requests Free – User Feedback Board < 2.2.4 2.2.4
WordPress plugin Simple Sitemap – Responsive HTML Sitemap for WordPress < 3.5.5 3.5.5
WordPress plugin Simple Sponsorships all versions no fix
WordPress plugin SimpLy Gallery < 2.3.6 2.3.6
WordPress plugin SKT Templates – 100% Free Templates for Elementor & Gutenberg < 4.3 4.3
WordPress plugin Sky Login Redirect < 3.6.0 3.6.0
WordPress plugin SlideDeck: Responsive WordPress Slider Plugin all versions no fix
WordPress plugin Smart Variations Images & Swatches for WooCommerce < 5.1.10 5.1.10
WordPress plugin SnazzyAdmin WP Admin Theme all versions no fix
WordPress plugin Social Gallery Lite all versions no fix
WordPress plugin Social Kit all versions no fix
WordPress plugin SocialMark – Easy Watermark/Logo on Social Media Post Link Share Preview < 2.0.5 2.0.5
WordPress plugin South Pole: Climate action now < 1.0.2.0 1.0.2.0
WordPress plugin Sparrow: Product Reviews and Ratings for WooCommerce all versions no fix
WordPress plugin Spotlight Social Feeds – Block, Shortcode, and Widget < 0.10.2 0.10.2
WordPress plugin SQL Reporting Services – SSRS Plugin for WordPress all versions no fix
WordPress plugin SSL Atlas – Free SSL Certificate & HTTPS Redirect for WordPress < 1.1.1 1.1.1
WordPress plugin SSL Zen — SSL Certificate Installer & HTTPS Redirects <= 4.0.4 4.0.5
WordPress plugin Stackable – Page Builder Gutenberg Blocks < 3.1.5 3.1.5
WordPress plugin Starfish Review Generation & Marketing for WordPress < 3.0.26 3.0.26
WordPress plugin Page Builder for Gutenberg – StarterBlocks all versions no fix
WordPress plugin Station Pro – Advanced Audio Streaming & Player for WordPress all versions no fix
WordPress plugin STAX Header Builder < 1.3.6 1.3.6
WordPress plugin Sticky add to cart for Woo all versions no fix
WordPress plugin Streak CRM For Gmail For Contact Form 7 – WordPress Plugin < 1.0.9 1.0.9
WordPress plugin StreamCast – bring live radio to your site with a sleek player < 2.1.4 2.1.4
WordPress plugin StreamWeasels Twitch Integration < 1.3.4 1.3.4
WordPress plugin Ultimate Divi Modules Suite – Divi Sumo Lite all versions no fix
WordPress plugin STEWoo – Super Transactional Emails for WooCommerce < 1.2.4 1.2.4
WordPress plugin Super Video player – Fully Customizable Video Player with Playlist < 1.6.11 1.6.11
WordPress plugin Surbma | GDPR Proof Cookie Consent & Notice Bar < 17.5.3 17.5.3
WordPress plugin HuCommerce | Magyar kiegészítések WooCommerce webáruházakhoz < 30.3.0 30.3.0
WordPress plugin SurveyFunnel – Survey Plugin for WordPress < 1.1.3 1.1.3
WordPress plugin SVG Flags – Country Flag Blocks and Galleries < 0.9.6 0.9.6
WordPress plugin SV Proven Expert < 1.8.01 1.8.01
WordPress plugin SV Tracking Manager < 1.8.02 1.8.02
WordPress plugin Sync eCommerce NEO all versions no fix
WordPress plugin Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent < 0.6.7 0.6.7
WordPress plugin Tabs with Recommended Posts (Widget) all versions no fix
WordPress plugin PublishPress Tag Groups is the Advanced Way to Display Your Taxonomy Terms < 1.43.10.1 1.43.10.1
WordPress plugin The Events Calendar < 5.14.0.4 5.14.0.4
WordPress plugin Tickera – Sell Tickets & Manage Events < 3.4.9.2 3.4.9.2
WordPress plugin Tiered Pricing Table for WooCommerce < 2.6.1 2.6.1
WordPress plugin TinyMCE Annotate all versions no fix
WordPress plugin TK Google Fonts < 2.2.1 2.2.1
WordPress plugin TK SmugMug Slideshow Shortcode all versions no fix
WordPress plugin Tranzly™ – AI Translation & Multilingual < 1.1.1 1.1.1
WordPress plugin TreePress – Easy Family Trees & Ancestor Profiles < 2.0.21 2.0.21
WordPress plugin WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto < 5.3.1 5.3.1
WordPress plugin Turbo Widgets all versions no fix
WordPress plugin TwentyFourth WP Scraper all versions no fix
WordPress plugin Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor < 2.4.13 2.4.13
WordPress plugin Ultimate Bulk SEO Noindex Nofollow – Speed up Penalty Recovery Ultimate SEO Booster all versions no fix
WordPress plugin Ultimate Carousel For Divi < 4.3.1 4.3.1
WordPress plugin Ultimate Gutenberg – Custom Block Templates all versions no fix
WordPress plugin Ultimate Post Kit – Elementor Post Grid, Post Carousel, Post Slider & Blog Layout Widgets < 2.9.1 2.9.1
WordPress plugin Ultimate Widgets Light all versions no fix
WordPress plugin Ultimeter – the Ultimate Progress and Goals Meter < 2.7.6 2.7.6
WordPress plugin Ultra Elementor Addons all versions no fix
WordPress plugin Product Options and Price Calculation Formulas for WooCommerce – Uni CPO < 4.9.14 4.9.14
WordPress plugin Unlimited Elements for Elementor < 1.5.3 1.5.3
WordPress plugin WordPress Auto SEO Plugin – Upfiv SEO Wizard all versions no fix
WordPress plugin URL Shortify – Simple and Easy URL Shortener < 1.5.11 1.5.11
WordPress plugin User Menus – Nav Menu Visibility < 1.2.9 1.2.9
WordPress plugin Videopack < 4.7.4 4.7.4
WordPress plugin VidSEO – Video transcript embedding for WordPress & LLM < 1.2.4 1.2.4
WordPress plugin WPVisitorInfo – Show Visitor Information & Conditional Data Based On That Information all versions no fix
WordPress plugin Vit Website Reviews all versions no fix
WordPress plugin VO Store Locator – WP Store Locator Plugin all versions no fix
WordPress plugin W3SCloud Contact Form 7 to Zoho CRM < 2.1.0 2.1.0
WordPress plugin Wadi Survey all versions no fix
WordPress plugin Walker Core < 1.1.8 1.1.8
WordPress plugin BuddyPress Integration for WooCommerce < 3.4.2 3.4.2
WordPress plugin WCC SEO Keyword Research all versions no fix
WordPress plugin Place Order Without Payment for WooCommerce < 2.2 2.2
WordPress plugin Product Author for WooCommerce < 1.0.3 1.0.3
WordPress plugin Product Customer List for WooCommerce < 3.0.0 3.0.0
WordPress plugin Thank You Page for WooCommerce < 3.1 3.1
WordPress plugin Checkout with Zelle on Woocommerce < 2.0 2.0
WordPress plugin Appointment Booking Plugin & Scheduling System – Webba Booking Calendar < 4.2.18 4.2.18
WordPress plugin Funnelmentals all versions no fix
WordPress plugin WebinarIgnition – AI & MCP Webinar Builder: Live, Automated & Evergreen Webinars also for WooCommerce < 2.8.12 2.8.12
WordPress plugin wGauge – Free Version all versions no fix
WordPress plugin Widget Detector for Elementor < 1.2.0 1.2.0
WordPress plugin Widget for Contact form 7 all versions no fix
WordPress plugin Display Eventbrite Events < 4.4.8 4.4.8
WordPress plugin Widgets on Pages < 1.6.0 1.6.0
WordPress plugin Widgets on Pages and Posts all versions no fix
WordPress plugin B2B Request a Quote < 1.4.9 1.4.9
WordPress plugin Woo Admin Product Notes all versions no fix
WordPress plugin Product Size Charts Plugin for WooCommerce < 2.2.3 2.2.3
WordPress plugin Secure Gateway for Authorize.net and WooCommerce by Pledged Plugins < 5.1.27 5.1.27
WordPress plugin Fraud Prevention For WooCommerce and EDD < 2.1.0 2.1.0
WordPress plugin Bulk Edit Products for WooCommerce – WP Sheet Editor < 1.7.13 1.7.13
WordPress plugin Digital Goods for WooCommerce Checkout < 3.6.4 3.6.4
WordPress plugin Country Based Payments for WooCommerce < 1.4.1 1.4.1
WordPress plugin Connect WooCommerce Shop to ERP/CRM, Verifactu and EU/VAT Compliance < 2.1 2.1
WordPress plugin EU VAT Assistant for WooCommerce < 2.0.28.220224 2.0.28.220224
WordPress plugin Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing < 1.14.3 1.14.3
WordPress plugin Pay For Post with WooCommerce < 3.0.9 3.0.9
WordPress plugin WooCommerce PayPlug all versions no fix
WordPress plugin Dreamfox Payment Gateway per Product for WooCommerce < 3.1.6 3.1.6
WordPress plugin Dreamfox Shipping Methods per Product for WooCommerce < 2.0.4 2.0.4
WordPress plugin Store Toolkit – WooCommerce Extensions, Quick Enhancements & Handy Tools < 2.3.4 2.3.4
WordPress plugin WooCommerce upcoming Products all versions no fix
WordPress plugin Dynamic Pricing and Discount Rules for WooCommerce < 2.2.3 2.2.3
WordPress plugin Disable Payment Methods based on cart conditions for WooCommerce < 1.13.1.1 1.13.1.1
WordPress plugin Extra Fees for WooCommerce < 3.8.2 3.8.2
WordPress plugin Product Country Restrictions for WooCommerce – Country Catalogs < 1.13.0 1.13.0
WordPress plugin Bulk Edit Coupons for WooCommerce – WP Sheet Editor < 1.3.28 1.3.28
WordPress plugin Coupon Affiliates – Affiliate Plugin for WooCommerce < 4.16.4 4.16.4
WordPress plugin Premmerce WooCommerce Customers Manager < 1.1.13 1.1.13
WordPress plugin Woocommerce Customers Order History < 5.2.1 5.2.1
WordPress plugin Customers Table for WooCommerce: View, Search, Bulk Editor < 1.0.8 1.0.8
WordPress plugin StoreCustomizer – A plugin to Customize all WooCommerce Pages < 2.3.8 2.3.8
WordPress plugin Enhanced Ecommerce Google Analytics for WooCommerce < 3.6.3 3.6.3
WordPress plugin Flat Rate Shipping Method for WooCommerce < 4.0.3 4.0.3
WordPress plugin Strumenti Partita IVA per Woocommerce < 1.3.23 1.3.23
WordPress plugin XT Floating Cart for WooCommerce < 2.6.3 2.6.3
WordPress plugin Gateway for PayLate on WooCommerce <= 1.4 1.5.2
WordPress plugin Premmerce Permalink Manager for WooCommerce < 2.3.5 2.3.5
WordPress plugin Product Attachment for WooCommerce < 2.1.3 2.1.3
WordPress plugin Builder for WooCommerce product reviews shortcodes – ReviewShort < 1.0.17 1.0.17
WordPress plugin Widgets for WooCommerce Products on Elementor < 1.0.9 1.0.9
WordPress plugin Product Carousel For WooCommerce – WoorouSell < 1.0.9 1.0.9
WordPress plugin Premmerce SEO for WooCommerce < 2.1.5 2.1.5
WordPress plugin Shipping Method Display Style for WooCommerce < 3.7.5 3.7.5
WordPress plugin WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce < 4.2.1 4.2.1
WordPress plugin WooCommerce Variation Swatches for Products all versions no fix
WordPress plugin jav's – WooCommerce and Trello integration WooTrello < 2.3.1 2.3.1
WordPress plugin Ukrposhta < 1.6.18 1.6.18
WordPress plugin WoowGallery < 1.1.9 1.1.9
WordPress plugin Wholesale for WooCommerce – Ultimate AI-Powered B2B Ecommerce Solution – Bulk Order Form, Quotes, & More < 1.6.1 1.6.1
WordPress plugin WP Affiliate Disclosure < 1.2.3 1.2.3
WordPress plugin LMS Plugin – eLearning, Online Courses by Attest all versions no fix
WordPress plugin WP AutoMedic all versions no fix
WordPress plugin RevivePress – Keep your Old Content Evergreen < 1.3.1 1.3.1
WordPress plugin Master Accordion ( Former WP Awesome FAQ Plugin ) < 4.1.8 4.1.8
WordPress plugin WPBITS Addons For Elementor Page Builder < 1.3.2 1.3.2
WordPress plugin Books Gallery – Book Showcase, Library & Affiliate Plugin < 3.6 3.6
WordPress plugin WP BugBot all versions no fix
WordPress plugin Redirection for Contact Form 7 < 2.5.0 2.5.0
WordPress plugin WP Conference Schedule < 1.1.0 1.1.0
WordPress plugin WP Contact Slider – Contact Form Slider Widget < 2.4.5 2.4.5
WordPress plugin WP Coupons and Deals – WordPress Coupon Plugin < 3.1.12 3.1.12
WordPress plugin WP-Cron Status Checker < 1.2.4 1.2.4
WordPress plugin WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps < 5.1.4 5.1.4
WordPress plugin WordPress Dev Powers – ACF Color Coded Field Types Plugin all versions no fix
WordPress plugin WP Dev Powers – Display Screen Dimensions to Admin Plugin all versions no fix
WordPress plugin WordPress Dev Powers – Element Selector jQuery Powers Plugin all versions no fix
WordPress plugin WP Disable Sitemap < 1.0.4 1.0.4
WordPress plugin WP Easy Pay – Payment and Donation Form Builder for Square < 4.0.2 4.0.2
WordPress plugin WP Emaily all versions no fix
WordPress plugin WP Event Partners – WordPress Plugin for Event and Conference Management <= 1.2.4 1.2.5
WordPress plugin WP Group Promoter all versions no fix
WordPress plugin WP fail2ban – Advanced Security < 4.4.0.2 4.4.0.2
WordPress plugin WP Free SSL < 1.2.7 1.2.7
WordPress plugin WP Frontend Profile < 1.2.5 1.2.5
WordPress plugin WP Get Personal all versions no fix
WordPress plugin WP Google Street View (with 360° virtual tour) & Google maps + Local SEO < 1.0.9 1.0.9
WordPress plugin WP Gratify all versions no fix
WordPress plugin WPGSI: Spreadsheet Integration < 3.6.1 3.6.1
WordPress plugin WordPress Google Translate < 1.2 1.2
WordPress plugin WP-HR Manager: The Human Resources Plugin for WordPress < 3.0.3 3.0.3
WordPress plugin WP Lead Stream all versions no fix
WordPress plugin WP Encryption – One Click SSL / HTTPS & Free SSL Certificate, HTTPS Redirect, Security < 5.7.10 5.7.10
WordPress plugin WP Link Bio < 1.4.5 1.4.5
WordPress plugin Live TV Player – Worldwide Live TV Channels Player for WordPress < 1.2.3 1.2.3
WordPress plugin WordPress Directory Plugin For Business Listings – WP Local Plus < 1.4.5 1.4.5
WordPress plugin WPMailer – The best mail builder, No More Core for your emails support Elementor, CF7 forms etc… all versions no fix
WordPress plugin WP Meta and Date Remover < 1.9.6 1.9.6
WordPress plugin WP Munich Blocks – Gutenberg Blocks for WordPress < 0.11.0 0.11.0
WordPress plugin Wp My Admin Bar all versions no fix
WordPress plugin WP Notification Bell < 1.3.13 1.3.13
WordPress plugin WordPress Coupon Plugin for Bloggers and Marketers – WP Offers < 1.1.4 1.1.4
WordPress plugin WPOptin – AI-Powered Top Bars, PopUps & Lead Generation <= 1.2.3 1.2.4
WordPress plugin Persistent Login < 2.0.0 2.0.0
WordPress plugin WP Photo Effects < 1.2.1 1.2.1
WordPress plugin WP Post Block all versions no fix
WordPress plugin WP Radio – Worldwide Online Radio Stations Directory for WordPress < 3.1.4 3.1.4
WordPress plugin WP Relevant Ads all versions no fix
WordPress plugin WP School Calendar < 3.6 3.6
WordPress plugin WP Search Filter all versions no fix
WordPress plugin WP Activity Log < 4.4.0 4.4.0
WordPress plugin BAVOKO SEO Tools – All-in-One WordPress SEO all versions no fix
WordPress plugin Bulk Edit Posts and Products in Spreadsheet < 2.24.13 2.24.13
WordPress plugin WP Smart Export (Free) all versions no fix
WordPress plugin WP SPID Italia < 2.3.5 2.3.5
WordPress plugin AidWP – Donation & Payment Forms (Stripe Powered) < 2.9 2.9
WordPress plugin Schema Plugin For Divi, Gutenberg & Shortcodes <= 4.0.1 4.0.2
WordPress plugin WP Table Builder – Drag & Drop Table Builder < 1.3.16 1.3.16
WordPress plugin Divi Blog Carousel < 1.3.0 1.3.0
WordPress plugin Divi Product Carousel < 1.5.0 1.5.0
WordPress plugin Divi Gravity Forms (WP Tools) < 6.6.3 6.6.3
WordPress plugin Masonry Gallery & Posts For Divi (WP Tools) < 3.1.2 3.1.2
WordPress plugin TopNewsWp – Display Tikcer News, RSS Feed Widget and Many More < 2.0 2.0
WordPress plugin WP Travel Engine – Tour Booking Plugin – Tour Operator Software < 5.3.8 5.3.8
WordPress plugin NotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce < 1.3.7 1.3.7
WordPress plugin WordPress WooCommerce Sync for Google Sheet all versions no fix
WordPress plugin WS Bootstrap all versions no fix
WordPress plugin WUPO Group Attributes for WooCommerce <= 2.0.0 2.0.1
WordPress plugin XT Ajax Add To Cart for WooCommerce < 1.0.4 1.0.4
WordPress plugin XT Points & Rewards for WooCommerce < 1.4.3 1.4.3
WordPress plugin XT Quick View for WooCommerce < 1.9.6 1.9.6
WordPress plugin XT Variation Swatches for WooCommerce < 1.8.1 1.8.1
WordPress plugin Кнопка ЮMoney all versions no fix
WordPress plugin Yatri Tools < 1.1.3 1.1.3
WordPress plugin YASR – Yet Another Star Rating Plugin for WordPress < 2.0.2 2.0.2
WordPress plugin Video Player for YouTube – Embed Videos Your Visitors Will Love to Watch < 1.5.1 1.5.1
WordPress plugin Zip Code Redirect <= 4.0.1 4.1.1
WordPress theme Amela < 1.0.5 1.0.5
WordPress theme Aquarella Lite all versions no fix
WordPress theme Arendelle < 1.1.3 1.1.3
WordPress theme Bani all versions no fix
WordPress theme Brand all versions no fix
WordPress theme Broadcast Lite < 2.0.3 2.0.3
WordPress theme ConsultPress Lite all versions no fix
WordPress theme Cuisine Palace all versions no fix
WordPress theme Elasta < 1.0.8 1.0.8
WordPress theme Elation all versions no fix
WordPress theme Everse < 1.8.6 1.8.6
WordPress theme Hasium < 1.6.5 1.6.5
WordPress theme LearnMore all versions no fix
WordPress theme Meridia < 2.2.7 2.2.7
WordPress theme NicheBase < 1.2.2 1.2.2
WordPress theme Nokke < 1.0.11 1.0.11
WordPress theme Purosa < 1.1.0 1.1.0
WordPress theme Purus all versions no fix
WordPress theme Shuban all versions no fix
WordPress theme Speculor all versions no fix
WordPress theme Unakit < 1.2.4.2 1.2.4.2
WordPress theme Villar < 1.0.8 1.0.8
WordPress theme Viralike all versions no fix
WordPress theme WP Moose < 1.0.1 1.0.1
WordPress theme WP Sierra all versions no fix

References

CVSS score 6.3/10
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weakness (CWE)
CWE-862
Platform
WordPress
Package
3D Viewer – Turn Product Pages into Interactive 3D Experiences, Abeta PunchOut, Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance
Disclosed
04.03.2022
Updated
11.10.2026 10:22

Sources and licenses

Wordfence Intelligence - 39fb0499-9ab4-4a2f-b0db-ece86bcf4d42 - Wordfence Intelligence

Copyright 1999-2026 The MITRE Corporation

Copyright 2012-2026 Defiant Inc.

This record contains material that is subject to copyright

Copyright 1999-2026 The MITRE Corporation

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

https://www.cve.org/Legal/TermsOfUse
Copyright 2012-2026 Defiant Inc.

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

https://www.wordfence.com/wordfence-intelligence-terms-and-conditions/
Wordfence Intelligence
Wordfence Intelligence - Defiant, Inc.
Copyright Defiant, Inc. All rights reserved except as granted below.
License grant, section 3.1 of the Wordfence Intelligence Terms and Conditions (January 26, 2026):

Subject to this Agreement, Company hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute the Service. Any copy you make for such purposes is authorized provided that you reproduce Company’s copyright designation, this license, and the license of any disclosed Company licensor in any such copy.

Full applicable Agreement: https://www.wordfence.com/wordfence-intelligence-terms-and-conditions/

Vulnerability history: Gutenberg Blocks – ACF Blocks Suite

All published vulnerabilities of this package (WordPress plugin), newest first. Shows whether this is a one-off slip or a package that needs watching.

Total entries
3
First → latest
03.2022 06.2025
Without a fix
1
Exploited in attacks
0

Severity breakdown

  • Medium 3

Disclosures per year

  1. Gutenberg Blocks – ACF Blocks Suite <= 2.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
    Medium · 6.4 CVE-2025-50041 <= 2.6.11 no fix
  2. Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
    Medium · 6.1 CVE-2023-33999 >= 1.0.0, <= 2.6.9 2.6.10
  3. Freemius SDK <= 2.4.2 - Missing Authorization Checks this entry
    Medium · 6.3 CVE-2022-4974 < 2.6.8 2.6.8

Know which vulnerabilities affect your application

With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.

Connect your application
DockRay newsletter

Application security in your inbox

Important vulnerabilities, actionable guidance and practical advice for your applications. Choose your technologies and follow what matters to your project.

  • A daily digest of new vulnerabilities, critical ones included.
  • Notifications about important updates.
  • Practical advice on application security and monitoring.

Leave empty to receive updates for every technology.

Privacy policy

Free to subscribe. Unsubscribe with one click in any email.