WordPress plugins with a known unpatched vulnerability
Each plugin below has at least one known vulnerability on record that affects its latest version, and the sources we check name no fixed version yet. Most-installed first.
“Unpatched” means the affected version range in the record includes the newest release on wordpress.org. It does not mean every site running the plugin has been attacked. Developers sometimes ship a fix before the records are updated, so check the plugin’s changelog before you remove it. Data as of 2026-11-04.
Signs of a break-in to look for if you ran one: admin accounts you did not create, PHP files inside wp-content/uploads, pages that redirect visitors elsewhere. Need the list offline? Download it.
311 plugins 378 unpatched records
WP Fastest Cache
Latest version 1.5.3 · 1+ million active installs · last updated 2026-10-10 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.5.3), with no fixed version listed:
-
medium 5.9 affects latest 1.5.3
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Redux Framework
Latest version 4.5.16 · 900,000+ active installs · last updated 2026-10-12 · checked 2026-11-04
Known vulnerability on record affecting the latest version (4.5.16), with no fixed version listed:
-
medium 6.5 affects latest 4.5.16
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Forminator Forms
Latest version 1.58.3 · 600,000+ active installs · last updated 2026-10-27 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (1.58.3), with no fixed version listed:
-
medium 4.3 affects latest 1.58.3
-
medium 5.3 affects latest 1.58.3
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Health Check & Troubleshooting
Latest version 1.7.1 · 200,000+ active installs · last updated 2024-07-25 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.7.1), with no fixed version listed:
-
medium 4.9 affects latest 1.7.1
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
DTX
Latest version 5.0.7 · 100,000+ active installs · last updated 2026-08-04 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (5.0.7), with no fixed version listed:
-
high 7.5 affects latest 5.0.7
-
medium 6.5 affects latest 5.0.7
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Shortcodes and extra features for Phlox theme
Latest version 2.17.24 · 80,000+ active installs · last updated 2026-10-07 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.17.24), with no fixed version listed:
-
medium 5.3 affects latest 2.17.24
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Social Feed Gallery
Latest version 5.0.13 · 80,000+ active installs · last updated 2026-10-21 · checked 2026-11-04
Known vulnerability on record affecting the latest version (5.0.13), with no fixed version listed:
-
medium 6.5 affects latest 5.0.13
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Master Slider
Latest version 3.11.5 · 60,000+ active installs · last updated 2026-10-08 · checked 2026-11-04
Known vulnerability on record affecting the latest version (3.11.5), with no fixed version listed:
-
high 7.1 affects latest 3.11.5
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Theme Editor
Latest version 3.2 · 50,000+ active installs · last updated 2026-03-19 · checked 2026-11-04
Known vulnerability on record affecting the latest version (3.2), with no fixed version listed:
-
critical 9.6 affects latest 3.2
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
MapGeo
Latest version 1.6.30 · 30,000+ active installs · last updated 2026-08-07 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.6.30), with no fixed version listed:
-
high 7.1 affects latest 1.6.30
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Scripts n Styles
Latest version 3.5.8 · 30,000+ active installs · last updated 2023-06-06 · checked 2026-11-04
Known vulnerability on record affecting the latest version (3.5.8), with no fixed version listed:
-
medium 5.3 affects latest 3.5.8
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Structured Content (JSON-LD) #wpsc
Latest version 1.7.0 · 30,000+ active installs · last updated 2025-07-26 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.7.0), with no fixed version listed:
-
medium 6.5 affects latest 1.7.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Accordions
Latest version 2.3.25 · 20,000+ active installs · last updated 2026-06-08 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.3.25), with no fixed version listed:
-
high 7.2 affects latest 2.3.25
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Forget About Shortcode Buttons
Latest version 2.1.3 · 20,000+ active installs · last updated 2024-11-04 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.1.3), with no fixed version listed:
-
medium 5.4 affects latest 2.1.3
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
ND Shortcodes
Latest version 7.8 · 20,000+ active installs · last updated 2025-03-18 · checked 2026-11-04
Known vulnerability on record affecting the latest version (7.8), with no fixed version listed:
-
medium 6.5 affects latest 7.8
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
WP Test Email
Latest version 1.1.7 · 20,000+ active installs · last updated 2024-07-31 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (1.1.7), with no fixed version listed:
-
high 7.1 affects latest 1.1.7
-
medium 6.1 affects latest 1.1.7
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Typing Effect
Latest version 1.3.7 · 10,000+ active installs · last updated 2023-10-26 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.3.7), with no fixed version listed:
-
medium 6.5 affects latest 1.3.7
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Custom CSS and JavaScript
Latest version 2.0.16 · 10,000+ active installs · last updated 2024-08-12 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.0.16), with no fixed version listed:
-
medium 5.3 affects latest 2.0.16
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
LA-Studio Element Kit for Elementor
Latest version 1.6.3 · 10,000+ active installs · last updated 2026-09-30 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.6.3), with no fixed version listed:
-
medium 6.5 affects latest 1.6.3
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Live Composer
Latest version 2.1.22 · 10,000+ active installs · last updated 2026-09-21 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (2.1.22), with no fixed version listed:
-
medium 6.5 affects latest 2.1.22
-
medium 4.8 affects latest 2.1.22
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Login With Ajax
Latest version 4.5.1 · 10,000+ active installs · last updated 2026-05-24 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (4.5.1), with no fixed version listed:
-
high 7.1 affects latest 4.5.1
-
medium 6.5 affects latest 4.5.1
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
SEO Friendly Images
Latest version 3.0.5 · 10,000+ active installs · last updated 2017-11-28 · checked 2026-11-04
Known vulnerability on record affecting the latest version (3.0.5), with no fixed version listed:
-
medium 6.5 affects latest 3.0.5
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Slider by 10Web
Latest version 1.2.63 · 10,000+ active installs · last updated 2026-10-06 · checked 2026-11-04
3 known vulnerabilities on record affecting the latest version (1.2.63), with no fixed version listed:
-
high 7.1 affects latest 1.2.63
-
high 7.6 affects latest 1.2.63
-
high 7.4 affects latest 1.2.63
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
10WebSocial
Latest version 1.4.35 · 10,000+ active installs · last updated 2023-02-09 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.4.35), with no fixed version listed:
-
medium 6.5 affects latest 1.4.35
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
NextMove Lite
Latest version 2.24.0 · 10,000+ active installs · last updated 2026-03-14 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.24.0), with no fixed version listed:
-
high 7.1 affects latest 2.24.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Woostify Sites Library
Latest version 1.6.2 · 10,000+ active installs · last updated 2026-03-13 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.6.2), with no fixed version listed:
-
medium 5.3 affects latest 1.6.2
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
WP Tab Widget
Latest version 1.2.11 · 10,000+ active installs · last updated 2022-01-26 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.2.11), with no fixed version listed:
-
medium 6.5 affects latest 1.2.11
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
SSL Zen
Latest version 4.7.43 · 9,000+ active installs · last updated 2026-09-18 · checked 2026-11-04
Known vulnerability on record affecting the latest version (4.7.43), with no fixed version listed:
-
high 7.1 affects latest 4.7.43
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Embeds for YouTube
Latest version 5.4 · 9,000+ active installs · last updated 2025-04-18 · checked 2026-11-04
Known vulnerability on record affecting the latest version (5.4), with no fixed version listed:
-
medium 6.5 affects latest 5.4
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
IMPress for IDX Broker
Latest version 3.3.1 · 7,000+ active installs · last updated 2026-09-10 · checked 2026-11-04
Known vulnerability on record affecting the latest version (3.3.1), with no fixed version listed:
-
medium 6.5 affects latest 3.3.1
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Qubely
Latest version 1.8.14 · 7,000+ active installs · last updated 2025-03-10 · checked 2026-11-04
4 known vulnerabilities on record affecting the latest version (1.8.14), with no fixed version listed:
-
medium 4.8 affects latest 1.8.14
-
medium 5.9 affects latest 1.8.14
-
medium 4.3 affects latest 1.8.14
-
medium 4.3 affects latest 1.8.14
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Theme Test Drive
Latest version 2.9.1 · 7,000+ active installs · last updated 2017-11-28 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.9.1), with no fixed version listed:
-
high 8.1 affects latest 2.9.1
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
WC Fields Factory
Latest version 4.1.12 · 7,000+ active installs · last updated 2026-09-17 · checked 2026-11-04
Known vulnerability on record affecting the latest version (4.1.12), with no fixed version listed:
-
medium 6.5 affects latest 4.1.12
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Extra Fees for WooCommerce
Latest version 4.4.0 · 7,000+ active installs · last updated 2026-10-29 · checked 2026-11-04
Known vulnerability on record affecting the latest version (4.4.0), with no fixed version listed:
-
high 8.8 affects latest 4.4.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
WP Subscribe
Latest version 1.2.16 · 7,000+ active installs · last updated 2022-05-10 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.2.16), with no fixed version listed:
-
medium 4.3 affects latest 1.2.16
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Zippy
Latest version 1.7.0 · 7,000+ active installs · last updated 2025-09-30 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (1.7.0), with no fixed version listed:
-
high 7.2 affects latest 1.7.0
-
critical 9.1 affects latest 1.7.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Popularis Extra
Latest version 1.2.10 · 6,000+ active installs · last updated 2025-12-03 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.2.10), with no fixed version listed:
-
medium 5.4 affects latest 1.2.10
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Authors List
Latest version 2.0.6.2 · 5,000+ active installs · last updated 2025-11-24 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.0.6.2), with no fixed version listed:
-
medium 4.3 affects latest 2.0.6.2
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Custom links in Elementor Image Carousel
Latest version 1.1.1 · 5,000+ active installs · last updated 2022-11-09 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1.1), with no fixed version listed:
-
medium 5.9 affects latest 1.1.1
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Dynamic QR Code
Latest version 1.0.1 · 5,000+ active installs · last updated 2024-12-29 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.1), with no fixed version listed:
-
high 8.8 affects latest 1.0.1
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Midtrans-WooCommerce
Latest version 2.32.3 · 5,000+ active installs · last updated 2024-08-20 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.32.3), with no fixed version listed:
-
high 7.1 affects latest 2.32.3
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
PeproDev Ultimate Invoice
Latest version 2.2.6 · 5,000+ active installs · last updated 2026-03-08 · checked 2026-11-04
4 known vulnerabilities on record affecting the latest version (2.2.6), with no fixed version listed:
-
high 7.1 affects latest 2.2.6
-
high 7.2 affects latest 2.2.6
-
medium 6.5 affects latest 2.2.6
-
medium 6.5 affects latest 2.2.6
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Tooltips for WordPress
Latest version 10.9.3 · 5,000+ active installs · last updated 2026-01-09 · checked 2026-11-04
Known vulnerability on record affecting the latest version (10.9.3), with no fixed version listed:
-
medium 6.5 affects latest 10.9.3
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
WP Dummy Content Generator
Latest version 4.0.0 · 5,000+ active installs · last updated 2025-05-16 · checked 2026-11-04
Known vulnerability on record affecting the latest version (4.0.0), with no fixed version listed:
-
medium 4.3 affects latest 4.0.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
WP Google Analytics Events
Latest version 2.8.2 · 5,000+ active installs · last updated 2024-04-02 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.8.2), with no fixed version listed:
-
medium 5.3 affects latest 2.8.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Youzify
Latest version 1.3.7 · 5,000+ active installs · last updated 2026-03-15 · checked 2026-11-04
4 known vulnerabilities on record affecting the latest version (1.3.7), with no fixed version listed:
-
high 7.1 affects latest 1.3.7
-
medium 6.5 affects latest 1.3.7
-
critical 9.8 affects latest 1.3.7
-
medium 4.9 affects latest 1.3.7
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Edwiser Bridge
Latest version 4.3.4 · 4,000+ active installs · last updated 2026-05-14 · checked 2026-11-04
Known vulnerability on record affecting the latest version (4.3.4), with no fixed version listed:
-
high 7.2 affects latest 4.3.4
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Image Slider
Latest version 1.1.130 · 4,000+ active installs · last updated 2026-09-17 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1.130), with no fixed version listed:
-
medium 6.5 affects latest 1.1.130
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
myPOS Checkout
Latest version 1.4.5 · 4,000+ active installs · last updated 2026-07-07 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.4.5), with no fixed version listed:
-
high 7.2 affects latest 1.4.5
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Pix por Piggly (para Woocommerce)
Latest version 2.1.2 · 4,000+ active installs · last updated 2024-06-23 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.1.2), with no fixed version listed:
-
high 7.6 affects latest 2.1.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
WP QuickLaTeX
Latest version 3.8.8 · 4,000+ active installs · last updated 2024-06-26 · checked 2026-11-04
Known vulnerability on record affecting the latest version (3.8.8), with no fixed version listed:
-
high 7.1 affects latest 3.8.8
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Block Slider
Latest version 2.2.3 · 3,000+ active installs · last updated 2024-02-21 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.2.3), with no fixed version listed:
-
medium 6.5 affects latest 2.2.3
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
BuddyPress Xprofile Custom Field Types
Latest version 1.3.1 · 3,000+ active installs · last updated 2026-04-08 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.3.1), with no fixed version listed:
-
high 8.8 affects latest 1.3.1
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Extensions for Leaflet Map
Latest version 6.0 · 3,000+ active installs · last updated 2026-10-17 · checked 2026-11-04
Known vulnerability on record affecting the latest version (6.0), with no fixed version listed:
-
medium 6.5 affects latest 6.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Turn Yoast SEO FAQ Block to Accordion
Latest version 1.0.6 · 3,000+ active installs · last updated 2024-05-21 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.6), with no fixed version listed:
-
medium 6.5 affects latest 1.0.6
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Finale Lite
Latest version 2.21.0 · 3,000+ active installs · last updated 2026-08-21 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.21.0), with no fixed version listed:
-
high 7.2 affects latest 2.21.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Korea SNS
Latest version 1.7.0 · 3,000+ active installs · last updated 2024-05-15 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.7.0), with no fixed version listed:
-
medium 5.9 affects latest 1.7.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Lazy Load Optimizer
Latest version 1.4.7 · 3,000+ active installs · last updated 2021-01-16 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.4.7), with no fixed version listed:
-
high 7.5 affects latest 1.4.7
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
News Kit Addons For Elementor
Latest version 1.5.0 · 3,000+ active installs · last updated 2026-10-22 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.5.0), with no fixed version listed:
-
high 8.8 affects latest 1.5.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Simple Keyword to Link
Latest version 1.5 · 3,000+ active installs · last updated 2024-08-21 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (1.5), with no fixed version listed:
-
medium 5.4 affects latest 1.5
-
medium 4.3 affects latest 1.5
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Surbma
Latest version 1.2 · 3,000+ active installs · last updated 2026-03-27 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.2), with no fixed version listed:
-
medium 6.5 affects latest 1.2
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Sync Post With Other Site
Latest version 1.9.3 · 3,000+ active installs · last updated 2026-07-06 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.9.3), with no fixed version listed:
-
critical 9.9 affects latest 1.9.3
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Piraeus Bank WooCommerce Payment Gateway
Latest version 3.2.0 · 3,000+ active installs · last updated 2026-10-16 · checked 2026-11-04
Known vulnerability on record affecting the latest version (3.2.0), with no fixed version listed:
-
medium 6.5 affects latest 3.2.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
WP Emmet
Latest version 0.3.4 · 3,000+ active installs · last updated 2015-02-24 · checked 2026-11-04
Known vulnerability on record affecting the latest version (0.3.4), with no fixed version listed:
-
medium 5.9 affects latest 0.3.4
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
wpsection
Latest version 1.5.1 · 3,000+ active installs · last updated 2025-06-28 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.5.1), with no fixed version listed:
-
high 8.1 affects latest 1.5.1
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Add Polylang support for Customizer
Latest version 1.4.5 · 2,000+ active installs · last updated 2023-01-04 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.4.5), with no fixed version listed:
-
medium 4.3 affects latest 1.4.5
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Additional Order Filters for WooCommerce
Latest version 1.24 · 2,000+ active installs · last updated 2025-12-09 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.24), with no fixed version listed:
-
high 7.1 affects latest 1.24
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Addonify Floating Cart For WooCommerce
Latest version 1.2.17 · 2,000+ active installs · last updated 2025-12-27 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.2.17), with no fixed version listed:
-
medium 6.5 affects latest 1.2.17
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
aThemeArt Theme Helper
Latest version 1.0.8 · 2,000+ active installs · last updated 2026-08-28 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.8), with no fixed version listed:
-
high 8.8 affects latest 1.0.8
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Speed Kit
Latest version 2.0.2 · 2,000+ active installs · last updated 2024-05-02 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.0.2), with no fixed version listed:
-
medium 4.3 affects latest 2.0.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Bitcoin Payments
Latest version 3.11.0 · 2,000+ active installs · last updated 2026-09-09 · checked 2026-11-04
Known vulnerability on record affecting the latest version (3.11.0), with no fixed version listed:
-
high 7.1 affects latest 3.11.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Carousel Horizontal Posts Content Slider
Latest version 3.3.2 · 2,000+ active installs · last updated 2025-08-08 · checked 2026-11-04
Known vulnerability on record affecting the latest version (3.3.2), with no fixed version listed:
-
medium 6.5 affects latest 3.3.2
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Dashboard Welcome for Beaver Builder
Latest version 1.0.8 · 2,000+ active installs · last updated 2023-09-22 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.8), with no fixed version listed:
-
medium 5.3 affects latest 1.0.8
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Form to Chat App ⚡️
Latest version 1.2.5 · 2,000+ active installs · last updated 2025-11-28 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.2.5), with no fixed version listed:
-
medium 6.5 affects latest 1.2.5
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Getty Images
Latest version 4.1.0 · 2,000+ active installs · last updated 2023-05-03 · checked 2026-11-04
Known vulnerability on record affecting the latest version (4.1.0), with no fixed version listed:
-
medium 6.4 affects latest 4.1.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Newsletters
Latest version 4.18.2 · 2,000+ active installs · last updated 2026-10-20 · checked 2026-11-04
Known vulnerability on record affecting the latest version (4.18.2), with no fixed version listed:
-
critical 9.6 affects latest 4.18.2
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Responsive Slider
Latest version 0.1.9 · 2,000+ active installs · last updated 2017-11-28 · checked 2026-11-04
Known vulnerability on record affecting the latest version (0.1.9), with no fixed version listed:
-
medium 6.5 affects latest 0.1.9
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Universal Google Adsense and Ads manager
Latest version 1.1.8 · 2,000+ active installs · last updated 2024-12-24 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1.8), with no fixed version listed:
-
medium 5.3 affects latest 1.1.8
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
WP Crowdfunding
Latest version 2.2.2 · 2,000+ active installs · last updated 2026-09-02 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (2.2.2), with no fixed version listed:
-
high 7.1 affects latest 2.2.2
-
high 7.5 affects latest 2.2.2
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
WPBITS Addons For Elementor Page Builder
Latest version 1.8.1 · 2,000+ active installs · last updated 2026-01-19 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.8.1), with no fixed version listed:
-
medium 6.5 affects latest 1.8.1
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Video Gallery
Latest version 4.1.0 · 2,000+ active installs · last updated 2026-09-13 · checked 2026-11-04
Known vulnerability on record affecting the latest version (4.1.0), with no fixed version listed:
-
high 7.1 affects latest 4.1.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Accordion Slider Gallery
Latest version 2.7 · 1,000+ active installs · last updated 2023-11-22 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.7), with no fixed version listed:
-
medium 4.3 affects latest 2.7
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
AdWords Conversion Tracking Code
Latest version 1.0 · 1,000+ active installs · last updated 2017-11-28 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0), with no fixed version listed:
-
medium 6.5 affects latest 1.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
AweBooking
Latest version 3.2.26 · 1,000+ active installs · last updated 2019-10-07 · checked 2026-11-04
Known vulnerability on record affecting the latest version (3.2.26), with no fixed version listed:
-
medium 6.5 affects latest 3.2.26
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Blog, Posts and Category Filter for Elementor
Latest version 2.1.0 · 1,000+ active installs · last updated 2025-04-26 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.1.0), with no fixed version listed:
-
high 7.1 affects latest 2.1.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Book Previewer for Woocommerce
Latest version 1.0.6 · 1,000+ active installs · last updated 2020-12-15 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.6), with no fixed version listed:
-
medium 5.3 affects latest 1.0.6
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Bootstrap Modals
Latest version 1.3.2 · 1,000+ active installs · last updated 2019-05-17 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.3.2), with no fixed version listed:
-
medium 6.5 affects latest 1.3.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
CF7 Views
Latest version 3.2.6 · 1,000+ active installs · last updated 2026-09-25 · checked 2026-11-04
Known vulnerability on record affecting the latest version (3.2.6), with no fixed version listed:
-
high 7.1 affects latest 3.2.6
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Co-marquage service-public.fr
Latest version 0.5.77 · 1,000+ active installs · last updated 2024-11-20 · checked 2026-11-04
Known vulnerability on record affecting the latest version (0.5.77), with no fixed version listed:
-
medium 4.3 affects latest 0.5.77
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Contact Form to DB by BestWebSoft
Latest version 1.7.6 · 1,000+ active installs · last updated 2026-07-27 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.7.6), with no fixed version listed:
-
high 7.1 affects latest 1.7.6
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Add Featured Image Custom Link
Latest version 2.0.0 · 1,000+ active installs · last updated 2024-05-14 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.0.0), with no fixed version listed:
-
medium 5.9 affects latest 2.0.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Download Media Library
Latest version 0.2.1 · 1,000+ active installs · last updated 2016-11-04 · checked 2026-11-04
Known vulnerability on record affecting the latest version (0.2.1), with no fixed version listed:
-
medium 5.3 affects latest 0.2.1
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Dynamic User Directory
Latest version 2.4 · 1,000+ active installs · last updated 2025-11-11 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (2.4), with no fixed version listed:
-
critical 9.8 affects latest 2.4
-
high 7.6 affects latest 2.4
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
EasyIndex
Latest version 1.1.1704 · 1,000+ active installs · last updated 2019-12-02 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1.1704), with no fixed version listed:
-
medium 5.4 affects latest 1.1.1704
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
EPROLO-Dropshipping
Latest version 2.4.2 · 1,000+ active installs · last updated 2025-12-11 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.4.2), with no fixed version listed:
-
high 7.1 affects latest 2.4.2
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Extra Shortcodes
Latest version 2.2 · 1,000+ active installs · last updated 2023-04-13 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.2), with no fixed version listed:
-
medium 6.5 affects latest 2.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Fast User Switching
Latest version 1.4.10 · 1,000+ active installs · last updated 2025-01-30 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.4.10), with no fixed version listed:
-
medium 4.3 affects latest 1.4.10
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Featured Image Generator
Latest version 1.3.4 · 1,000+ active installs · last updated 2026-03-09 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.3.4), with no fixed version listed:
-
medium 5.3 affects latest 1.3.4
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Formstack Online Forms
Latest version 2.0.2 · 1,000+ active installs · last updated 2019-04-12 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.0.2), with no fixed version listed:
-
medium 5.3 affects latest 2.0.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Freshchat
Latest version 2.3.4 · 1,000+ active installs · last updated 2021-12-27 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.3.4), with no fixed version listed:
-
medium 4.3 affects latest 2.3.4
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Portfolio Gallery
Latest version 1.4.8 · 1,000+ active installs · last updated 2023-12-09 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.4.8), with no fixed version listed:
-
medium 5.4 affects latest 1.4.8
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
GlobalPayments Gateway Provider for WooCommerce
Latest version 1.23.3 · 1,000+ active installs · last updated 2026-10-22 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.23.3), with no fixed version listed:
-
high 7.1 affects latest 1.23.3
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Solid Testimonials
Latest version 3.3.10 · 1,000+ active installs · last updated 2026-11-03 · checked 2026-11-04
Known vulnerability on record affecting the latest version (3.3.10), with no fixed version listed:
-
high 8.8 affects latest 3.3.10
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Hide Plugins
Latest version 1.0.4 · 1,000+ active installs · last updated 2016-04-22 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.4), with no fixed version listed:
-
medium 4.3 affects latest 1.0.4
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Image Cleanup
Latest version 1.9.2 · 1,000+ active installs · last updated 2017-11-28 · checked 2026-11-04
3 known vulnerabilities on record affecting the latest version (1.9.2), with no fixed version listed:
-
medium 4.3 affects latest 1.9.2
-
medium 5.3 affects latest 1.9.2
-
medium 4.3 affects latest 1.9.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Import external attachments
Latest version 1.5.12 · 1,000+ active installs · last updated 2017-02-24 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (1.5.12), with no fixed version listed:
-
medium 4.3 affects latest 1.5.12
-
medium 4.3 affects latest 1.5.12
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Just TinyMCE Custom Styles
Latest version 1.2.1 · 1,000+ active installs · last updated 2020-08-14 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.2.1), with no fixed version listed:
-
medium 4.3 affects latest 1.2.1
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
LeadSnap
Latest version 1.25 · 1,000+ active installs · last updated 2023-03-09 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.25), with no fixed version listed:
-
critical 9.8 affects latest 1.25
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Meks Quick Plugin Disabler
Latest version 1.0 · 1,000+ active installs · last updated 2024-07-29 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0), with no fixed version listed:
-
medium 5.4 affects latest 1.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Mooberry Book Manager
Latest version 4.16.2 · 1,000+ active installs · last updated 2026-10-12 · checked 2026-11-04
Known vulnerability on record affecting the latest version (4.16.2), with no fixed version listed:
-
high 7.1 affects latest 4.16.2
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Newsletter Subscription Form
Latest version 1.5.9 · 1,000+ active installs · last updated 2026-09-11 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.5.9), with no fixed version listed:
-
critical 9.3 affects latest 1.5.9
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Owl Carousel WP
Latest version 2.2.2 · 1,000+ active installs · last updated 2024-12-15 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.2.2), with no fixed version listed:
-
medium 5.9 affects latest 2.2.2
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Page Title Splitter
Latest version 2.5.9 · 1,000+ active installs · last updated 2024-06-08 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.5.9), with no fixed version listed:
-
medium 6.5 affects latest 2.5.9
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
PDF Smart Viewer for Elementor
Latest version 1.0.4 · 1,000+ active installs · last updated 2025-09-20 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (1.0.4), with no fixed version listed:
-
high 7.2 affects latest 1.0.4
-
high 7.2 affects latest 1.0.4
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Post Cloner
Latest version 1.0.0 · 1,000+ active installs · last updated 2023-12-13 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.0), with no fixed version listed:
-
medium 5.3 affects latest 1.0.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Real Time Validation for Gravity Forms
Latest version 1.7.0 · 1,000+ active installs · last updated 2018-10-02 · checked 2026-11-04
3 known vulnerabilities on record affecting the latest version (1.7.0), with no fixed version listed:
-
high 7.5 affects latest 1.7.0
-
medium 4.3 affects latest 1.7.0
-
high 7.1 affects latest 1.7.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Robots.txt rewrite
Latest version 1.6.1 · 1,000+ active installs · last updated 2017-11-28 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.6.1), with no fixed version listed:
-
medium 4.3 affects latest 1.6.1
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
RTL Tester
Latest version 1.2 · 1,000+ active installs · last updated 2020-08-11 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.2), with no fixed version listed:
-
medium 4.3 affects latest 1.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Series
Latest version 2.0.1 · 1,000+ active installs · last updated 2018-12-17 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.0.1), with no fixed version listed:
-
medium 6.5 affects latest 2.0.1
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Slider Templates
Latest version 1.0.3 · 1,000+ active installs · last updated 2023-01-14 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (1.0.3), with no fixed version listed:
-
medium 6.5 affects latest 1.0.3
-
medium 4.9 affects latest 1.0.3
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Logo Slider , Logo Carousel , Logo showcase ,…
Latest version 1.8.1 · 1,000+ active installs · last updated 2024-12-15 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.8.1), with no fixed version listed:
-
medium 5.9 affects latest 1.8.1
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Team Showcase
Latest version 1.22.28 · 1,000+ active installs · last updated 2026-06-08 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.22.28), with no fixed version listed:
-
medium 6.5 affects latest 1.22.28
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Terms descriptions
Latest version 3.4.10 · 1,000+ active installs · last updated 2026-01-25 · checked 2026-11-04
Known vulnerability on record affecting the latest version (3.4.10), with no fixed version listed:
-
medium 5.3 affects latest 3.4.10
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
The Moneytizer
Latest version 10.0.10 · 1,000+ active installs · last updated 2026-03-09 · checked 2026-11-04
Known vulnerability on record affecting the latest version (10.0.10), with no fixed version listed:
-
medium 5.3 affects latest 10.0.10
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
ThemeRain Core
Latest version 1.1.9 · 1,000+ active installs · last updated 2025-06-23 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1.9), with no fixed version listed:
-
medium 5.3 affects latest 1.1.9
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
OpenHook
Latest version 4.3.1 · 1,000+ active installs · last updated 2023-09-29 · checked 2026-11-04
Known vulnerability on record affecting the latest version (4.3.1), with no fixed version listed:
-
medium 5.4 affects latest 4.3.1
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
History Timeline for Biography, Company Histor…
Latest version 1.0.6 · 1,000+ active installs · last updated 2024-06-25 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.6), with no fixed version listed:
-
medium 4.3 affects latest 1.0.6
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
TotalPoll for Polls and Contests
Latest version 4.12.0 · 1,000+ active installs · last updated 2025-09-05 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (4.12.0), with no fixed version listed:
-
medium 6.5 affects latest 4.12.0
-
critical 9.9 affects latest 4.12.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Directory Listings WordPress plugin
Latest version 2.2.0 · 1,000+ active installs · last updated 2025-04-15 · checked 2026-11-04
10 known vulnerabilities on record affecting the latest version (2.2.0), with no fixed version listed:
-
critical 9.3 affects latest 2.2.0
-
high 7.6 affects latest 2.2.0
-
medium 5.4 affects latest 2.2.0
-
medium 4.3 affects latest 2.2.0
-
medium 4.9 affects latest 2.2.0
-
high 7.2 affects latest 2.2.0
-
high 8.8 affects latest 2.2.0
-
high 7.6 affects latest 2.2.0
-
high 8.8 affects latest 2.2.0
-
high 8.8 affects latest 2.2.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
User Spam Remover
Latest version 1.1 · 1,000+ active installs · last updated 2024-03-03 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1), with no fixed version listed:
-
medium 5.3 affects latest 1.1
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
User Specific Content
Latest version 1.0.6 · 1,000+ active installs · last updated 2017-11-28 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.6), with no fixed version listed:
-
medium 6.5 affects latest 1.0.6
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
UX Flat
Latest version 5.4.0 · 1,000+ active installs · last updated 2025-06-29 · checked 2026-11-04
Known vulnerability on record affecting the latest version (5.4.0), with no fixed version listed:
-
medium 6.5 affects latest 5.4.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Cincopa video and media plug-in
Latest version 1.165 · 1,000+ active installs · last updated 2026-07-28 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.165), with no fixed version listed:
-
high 7.1 affects latest 1.165
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Innovs WPBakery Visual Composer WHMCS Elements
Latest version 1.0.4.3 · 1,000+ active installs · last updated 2025-12-02 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (1.0.4.3), with no fixed version listed:
-
medium 5.9 affects latest 1.0.4.3
-
medium 6.5 affects latest 1.0.4.3
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Appointment Bookings for Zoom GoogleMeet and m…
Latest version 2.7.7 · 1,000+ active installs · last updated 2026-05-24 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.7.7), with no fixed version listed:
-
medium 6.5 affects latest 2.7.7
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
WCFM
Latest version 1.6.3 · 1,000+ active installs · last updated 2025-04-06 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.6.3), with no fixed version listed:
-
high 7.5 affects latest 1.6.3
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Payment Gateway bKash for WC
Latest version 3.1.0 · 1,000+ active installs · last updated 2026-07-16 · checked 2026-11-04
Known vulnerability on record affecting the latest version (3.1.0), with no fixed version listed:
-
medium 5.3 affects latest 3.1.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Fix Media Library
Latest version 2.0 · 1,000+ active installs · last updated 2018-12-18 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.0), with no fixed version listed:
-
medium 5.3 affects latest 2.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
WP-CORS
Latest version 0.2.2 · 1,000+ active installs · last updated 2023-07-28 · checked 2026-11-04
Known vulnerability on record affecting the latest version (0.2.2), with no fixed version listed:
-
medium 4.3 affects latest 0.2.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
WP Gmail SMTP
Latest version 1.0.7 · 1,000+ active installs · last updated 2018-08-21 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (1.0.7), with no fixed version listed:
-
medium 4.3 affects latest 1.0.7
-
medium 5.8 affects latest 1.0.7
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
JAMstack Deployments
Latest version 1.1.1 · 1,000+ active installs · last updated 2020-11-30 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1.1), with no fixed version listed:
-
medium 4.3 affects latest 1.1.1
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
WP Post Signature
Latest version 0.4.1 · 1,000+ active installs · last updated 2021-09-16 · checked 2026-11-04
Known vulnerability on record affecting the latest version (0.4.1), with no fixed version listed:
-
medium 5.9 affects latest 0.4.1
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
AJAX Hits Counter + Popular Posts Widget
Latest version 0.10.210305 · 900+ active installs · last updated 2021-03-05 · checked 2026-11-04
Known vulnerability on record affecting the latest version (0.10.210305), with no fixed version listed:
-
medium 5.4 affects latest 0.10.210305
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
پلاگین پرداخت دلخواه
Latest version 3.0.0 · 900+ active installs · last updated 2024-11-18 · checked 2026-11-04
Known vulnerability on record affecting the latest version (3.0.0), with no fixed version listed:
-
medium 4.3 affects latest 3.0.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Trash Duplicate and 301 Redirect
Latest version 1.9.1 · 900+ active installs · last updated 2025-08-12 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.9.1), with no fixed version listed:
-
medium 5.3 affects latest 1.9.1
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Delay Redirects
Latest version 1.0.0 · 800+ active installs · last updated 2020-01-14 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.0), with no fixed version listed:
-
medium 5.9 affects latest 1.0.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Realbig For WordPress
Latest version 1.1.3 · 800+ active installs · last updated 2025-01-03 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1.3), with no fixed version listed:
-
medium 5.3 affects latest 1.1.3
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
User Avatar
Latest version 1.2.2 · 800+ active installs · last updated 2023-09-14 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.2.2), with no fixed version listed:
-
medium 6.5 affects latest 1.2.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Web Accessibility with Max Access
Latest version 2.1.0 · 700+ active installs · last updated 2025-08-28 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.1.0), with no fixed version listed:
-
medium 5.9 affects latest 2.1.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Duitku Payment Gateway
Latest version 2.11.14 · 700+ active installs · last updated 2026-03-03 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.11.14), with no fixed version listed:
-
high 7.5 affects latest 2.11.14
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Omnipress
Latest version 1.6.7 · 700+ active installs · last updated 2026-01-08 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (1.6.7), with no fixed version listed:
-
medium 6.5 affects latest 1.6.7
-
high 7.5 affects latest 1.6.7
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Online Contact Widget-多合一在线客服插件
Latest version 1.3.0 · 700+ active installs · last updated 2025-10-15 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.3.0), with no fixed version listed:
-
high 7.5 affects latest 1.3.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Responsive Sidebar
Latest version 1.2.2 · 700+ active installs · last updated 2021-01-16 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.2.2), with no fixed version listed:
-
high 7.5 affects latest 1.2.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
WP Advanced PDF
Latest version 1.1.7 · 700+ active installs · last updated 2022-06-15 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (1.1.7), with no fixed version listed:
-
medium 5.3 affects latest 1.1.7
-
medium 5.9 affects latest 1.1.7
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
AI Content Writing Assistant
Latest version 1.1.7 · 600+ active installs · last updated 2024-10-11 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1.7), with no fixed version listed:
-
medium 4.3 affects latest 1.1.7
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
DirectoryPress
Latest version 3.6.27 · 600+ active installs · last updated 2026-03-04 · checked 2026-11-04
Known vulnerability on record affecting the latest version (3.6.27), with no fixed version listed:
-
critical 9.8 affects latest 3.6.27
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Varnish/Nginx Proxy Caching
Latest version 1.8.3 · 600+ active installs · last updated 2019-10-21 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (1.8.3), with no fixed version listed:
-
medium 5.3 affects latest 1.8.3
-
medium 5.9 affects latest 1.8.3
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
WP Mail
Latest version 1.3 · 600+ active installs · last updated 2016-10-06 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (1.3), with no fixed version listed:
-
high 7.1 affects latest 1.3
-
medium 6.5 affects latest 1.3
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
ShopWP
Latest version 5.2.4 · 600+ active installs · last updated 2024-04-02 · checked 2026-11-04
Known vulnerability on record affecting the latest version (5.2.4), with no fixed version listed:
-
medium 5.3 affects latest 5.2.4
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Affiliate Link Tracker
Latest version 0.2 · 500+ active installs · last updated 2020-09-16 · checked 2026-11-04
Known vulnerability on record affecting the latest version (0.2), with no fixed version listed:
-
medium 5.9 affects latest 0.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Dashboard Notes
Latest version 1.0.3 · 500+ active installs · last updated 2026-03-10 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.3), with no fixed version listed:
-
high 7.1 affects latest 1.0.3
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Quick Restaurant Reservations
Latest version 1.6.7 · 500+ active installs · last updated 2023-04-02 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.6.7), with no fixed version listed:
-
medium 5.3 affects latest 1.6.7
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
eMagicOne Store Manager for WooCommerce
Latest version 1.3.2 · 500+ active installs · last updated 2025-12-09 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.3.2), with no fixed version listed:
-
critical 9.3 affects latest 1.3.2
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Booking Ultra Pro Appointments Booking Calenda…
Latest version 1.1.23 · 400+ active installs · last updated 2025-09-30 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1.23), with no fixed version listed:
-
medium 6.5 affects latest 1.1.23
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Яндекс Доставка (Boxberry)
Latest version 2.34 · 400+ active installs · last updated 2026-01-22 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.34), with no fixed version listed:
-
medium 5.4 affects latest 2.34
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
My Post Order
Latest version 1.2.1.1 · 400+ active installs · last updated 2013-01-11 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.2.1.1), with no fixed version listed:
-
high 7.1 affects latest 1.2.1.1
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
News Element Elementor Blog Magazine
Latest version 1.0.9 · 400+ active installs · last updated 2026-08-13 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.9), with no fixed version listed:
-
medium 6.5 affects latest 1.0.9
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Planyo online reservation system
Latest version 3.1 · 400+ active installs · last updated 2026-03-23 · checked 2026-11-04
Known vulnerability on record affecting the latest version (3.1), with no fixed version listed:
-
medium 6.5 affects latest 3.1
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Restrict Elementor Widgets, Columns and Sections
Latest version 1.12 · 400+ active installs · last updated 2025-06-03 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.12), with no fixed version listed:
-
medium 4.3 affects latest 1.12
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
WP Export Categories & Taxonomies
Latest version 1.0.3 · 400+ active installs · last updated 2014-06-25 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.3), with no fixed version listed:
-
medium 5.3 affects latest 1.0.3
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Absolute Addons For Elementor
Latest version 1.0.14 · 300+ active installs · last updated 2022-07-13 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (1.0.14), with no fixed version listed:
-
medium 4.3 affects latest 1.0.14
-
high 7.5 affects latest 1.0.14
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Content Fetcher
Latest version 1.1 · 300+ active installs · last updated 2025-10-11 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1), with no fixed version listed:
-
medium 6.5 affects latest 1.1
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Product Rearrange for WooCommerce
Latest version 1.2.2 · 300+ active installs · last updated 2024-05-25 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (1.2.2), with no fixed version listed:
-
critical 9.3 affects latest 1.2.2
-
high 8.2 affects latest 1.2.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Table of Contents Creator
Latest version 1.6.4.1 · 300+ active installs · last updated 2010-06-13 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.6.4.1), with no fixed version listed:
-
high 7.1 affects latest 1.6.4.1
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Duplicate Content Cure
Latest version 1.0 · 200+ active installs · last updated 2015-06-02 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0), with no fixed version listed:
-
medium 4.3 affects latest 1.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Greenhouse Job Board
Latest version 2.7.3 · 200+ active installs · last updated 2018-04-03 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.7.3), with no fixed version listed:
-
medium 5.9 affects latest 2.7.3
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
iCARRY
Latest version 2.9 · 200+ active installs · last updated 2026-08-11 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.9), with no fixed version listed:
-
high 7.5 affects latest 2.9
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
iRobots.txt SEO
Latest version 1.1.2 · 200+ active installs · last updated 2010-06-13 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1.2), with no fixed version listed:
-
high 7.1 affects latest 1.1.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
WP Duplicate
Latest version 1.1.11 · 200+ active installs · last updated 2026-06-16 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1.11), with no fixed version listed:
-
critical 9.9 affects latest 1.1.11
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Quote Master
Latest version 7.1.1 · 200+ active installs · last updated 2018-05-17 · checked 2026-11-04
Known vulnerability on record affecting the latest version (7.1.1), with no fixed version listed:
-
high 7.1 affects latest 7.1.1
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Shown Connector
Latest version 1.2.10 · 200+ active installs · last updated 2025-10-01 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.2.10), with no fixed version listed:
-
medium 6.5 affects latest 1.2.10
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Photo Contest
Latest version 2.9.1 · 200+ active installs · last updated 2025-09-05 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.9.1), with no fixed version listed:
-
medium 6.3 affects latest 2.9.1
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Upcasted S3 Offload
Latest version 3.1.0 · 200+ active installs · last updated 2025-12-15 · checked 2026-11-04
Known vulnerability on record affecting the latest version (3.1.0), with no fixed version listed:
-
medium 6.3 affects latest 3.1.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
WP-CalDav2ICS
Latest version 1.3.4 · 200+ active installs · last updated 2023-07-20 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.3.4), with no fixed version listed:
-
high 7.1 affects latest 1.3.4
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
WP Social Avatar
Latest version 1.5 · 200+ active installs · last updated 2016-06-21 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.5), with no fixed version listed:
-
medium 6.5 affects latest 1.5
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
WP Logo Changer
Latest version 1.2 · 100+ active installs · last updated 2017-01-26 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.2), with no fixed version listed:
-
high 7.1 affects latest 1.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
amr cron manager
Latest version 2.3 · 100+ active installs · last updated 2020-08-17 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.3), with no fixed version listed:
-
high 7.1 affects latest 2.3
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Anchor smooth scroll
Latest version 1.0.2 · 100+ active installs · last updated 2019-05-31 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.2), with no fixed version listed:
-
high 8.1 affects latest 1.0.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Apimo Connector
Latest version 2.6.5.2 · 100+ active installs · last updated 2026-04-14 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.6.5.2), with no fixed version listed:
-
medium 5.3 affects latest 2.6.5.2
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Asynchronous Javascript
Latest version 1.3.5 · 100+ active installs · last updated 2013-11-02 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.3.5), with no fixed version listed:
-
high 7.1 affects latest 1.3.5
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Audiomack
Latest version 1.4.8 · 100+ active installs · last updated 2021-07-13 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.4.8), with no fixed version listed:
-
medium 6.5 affects latest 1.4.8
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Backup and Move Plugin
Latest version 0.1 · 100+ active installs · last updated 2011-08-21 · checked 2026-11-04
Known vulnerability on record affecting the latest version (0.1), with no fixed version listed:
-
medium 6.5 affects latest 0.1
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Diet Calorie Calculator
Latest version 1.1.1 · 100+ active installs · last updated 2025-03-06 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1.1), with no fixed version listed:
-
medium 5.3 affects latest 1.1.1
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
eShipper Commerce
Latest version 2.16.13 · 100+ active installs · last updated 2026-05-06 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.16.13), with no fixed version listed:
-
high 8.5 affects latest 2.16.13
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
FeedWordPress Advanced Filters
Latest version 0.6.2 · 100+ active installs · last updated 2014-12-16 · checked 2026-11-04
Known vulnerability on record affecting the latest version (0.6.2), with no fixed version listed:
-
high 7.1 affects latest 0.6.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Guest posting / Frontend Posting / Front Editor
Latest version 5.0.6 · 100+ active installs · last updated 2026-02-16 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (5.0.6), with no fixed version listed:
-
high 7.1 affects latest 5.0.6
-
medium 5.9 affects latest 5.0.6
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Google AdSense for Responsive Design
Latest version 2.23 · 100+ active installs · last updated 2016-04-25 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.23), with no fixed version listed:
-
medium 5.9 affects latest 2.23
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
MK Google Directions
Latest version 3.1.1 · 100+ active installs · last updated 2025-02-25 · checked 2026-11-04
Known vulnerability on record affecting the latest version (3.1.1), with no fixed version listed:
-
medium 6.5 affects latest 3.1.1
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
ID Arrays
Latest version 2.1.2 · 100+ active installs · last updated 2016-08-20 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.1.2), with no fixed version listed:
-
high 7.1 affects latest 2.1.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Accessibility Press
Latest version 1.0.2 · 100+ active installs · last updated 2022-05-20 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.2), with no fixed version listed:
-
medium 5.9 affects latest 1.0.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Inboxify Sign Up Form
Latest version 1.0.4 · 100+ active installs · last updated 2018-10-16 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.4), with no fixed version listed:
-
medium 5.9 affects latest 1.0.4
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
leadlovers forms
Latest version 1.0.2 · 100+ active installs · last updated 2022-05-26 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.2), with no fixed version listed:
-
medium 5.3 affects latest 1.0.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Mopinion Feedback Form
Latest version 1.1.1 · 100+ active installs · last updated 2020-12-14 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1.1), with no fixed version listed:
-
high 7.1 affects latest 1.1.1
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Product Price by Formula for WooCommerce
Latest version 2.5.6 · 100+ active installs · last updated 2025-12-19 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.5.6), with no fixed version listed:
-
medium 5.3 affects latest 2.5.6
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Smart One Click Setup
Latest version 1.4.3 · 100+ active installs · last updated 2025-12-30 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.4.3), with no fixed version listed:
-
medium 5.3 affects latest 1.4.3
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
StaffList
Latest version 3.2.7 · 100+ active installs · last updated 2025-11-25 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (3.2.7), with no fixed version listed:
-
medium 5.3 affects latest 3.2.7
-
medium 4.3 affects latest 3.2.7
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Super Custom Login
Latest version 1.1 · 100+ active installs · last updated 2023-04-02 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1), with no fixed version listed:
-
medium 5.3 affects latest 1.1
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
The Publisher Desk ads.txt
Latest version 1.5.0 · 100+ active installs · last updated 2022-08-18 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.5.0), with no fixed version listed:
-
medium 5.3 affects latest 1.5.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Twitch Player
Latest version 2.1.3 · 100+ active installs · last updated 2023-06-14 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.1.3), with no fixed version listed:
-
medium 5.3 affects latest 2.1.3
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Universal Clocks
Latest version 1.2.0 · 100+ active installs · last updated 2023-11-10 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.2.0), with no fixed version listed:
-
medium 5.3 affects latest 1.2.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
User Registration Aide
Latest version 1.5.3.8 · 100+ active installs · last updated 2017-05-01 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.5.3.8), with no fixed version listed:
-
high 7.1 affects latest 1.5.3.8
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Visitor Maps Extended Referer Field
Latest version 1.2.6 · 100+ active installs · last updated 2014-03-02 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.2.6), with no fixed version listed:
-
high 7.1 affects latest 1.2.6
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
WP BASE Booking of Appointments, Services and…
Latest version 6.5.2 · 100+ active installs · last updated 2026-10-12 · checked 2026-11-04
Known vulnerability on record affecting the latest version (6.5.2), with no fixed version listed:
-
high 8.8 affects latest 6.5.2
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
WP Frontend Profile
Latest version 1.3.9 · 100+ active installs · last updated 2026-02-21 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.3.9), with no fixed version listed:
-
medium 5.3 affects latest 1.3.9
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
wpCAS
Latest version 1.07 · 100+ active installs · last updated 2010-03-25 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.07), with no fixed version listed:
-
high 7.1 affects latest 1.07
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Bux Woocommerce
Latest version 1.2.3 · 90+ active installs · last updated 2022-03-17 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.2.3), with no fixed version listed:
-
medium 6.5 affects latest 1.2.3
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Draft Notify
Latest version 1.5 · 90+ active installs · last updated 2018-04-05 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.5), with no fixed version listed:
-
medium 5.9 affects latest 1.5
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
JobBoard Job listing plugin
Latest version 1.2.8 · 90+ active installs · last updated 2025-05-24 · checked 2026-11-04
3 known vulnerabilities on record affecting the latest version (1.2.8), with no fixed version listed:
-
medium 5.9 affects latest 1.2.8
-
medium 4.9 affects latest 1.2.8
-
medium 5.3 affects latest 1.2.8
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Pay with Contact Form 7
Latest version 1.0.4 · 90+ active installs · last updated 2023-03-24 · checked 2026-11-04
4 known vulnerabilities on record affecting the latest version (1.0.4), with no fixed version listed:
-
high 7.5 affects latest 1.0.4
-
high 7.1 affects latest 1.0.4
-
medium 5.4 affects latest 1.0.4
-
high 7.6 affects latest 1.0.4
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Popping Sidebars and Widgets Light
Latest version 1.27 · 90+ active installs · last updated 2022-04-01 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (1.27), with no fixed version listed:
-
medium 5.9 affects latest 1.27
-
high 7.1 affects latest 1.27
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Review Disclaimer
Latest version 2.0.3 · 90+ active installs · last updated 2023-05-03 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.0.3), with no fixed version listed:
-
medium 5.9 affects latest 2.0.3
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Simple XML Sitemap
Latest version 1.3 · 90+ active installs · last updated 2010-04-09 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.3), with no fixed version listed:
-
high 7.1 affects latest 1.3
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
AM Events
Latest version 1.13.1 · 80+ active installs · last updated 2017-11-14 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.13.1), with no fixed version listed:
-
medium 5.9 affects latest 1.13.1
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Effect Maker
Latest version 1.2.1 · 80+ active installs · last updated 2015-11-13 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (1.2.1), with no fixed version listed:
-
medium 6.5 affects latest 1.2.1
-
medium 6.5 affects latest 1.2.1
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Gift Hunt
Latest version 2.0.2 · 80+ active installs · last updated 2022-11-14 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.0.2), with no fixed version listed:
-
medium 5.9 affects latest 2.0.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Outranking Plugin Options
Latest version 1.1.3 · 80+ active installs · last updated 2023-10-25 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1.3), with no fixed version listed:
-
high 7.5 affects latest 1.1.3
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Airano MCP Bridge
Latest version 2.11.0 · 70+ active installs · last updated 2026-06-04 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.11.0), with no fixed version listed:
-
medium 6.5 affects latest 2.11.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Block Country
Latest version 1.0 · 70+ active installs · last updated 2013-12-10 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0), with no fixed version listed:
-
high 7.1 affects latest 1.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Plugin Optimizer
Latest version 1.3.7 · 70+ active installs · last updated 2023-02-24 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.3.7), with no fixed version listed:
-
high 7.1 affects latest 1.3.7
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
RVCFDI para Woocommerce
Latest version 8.1.8 · 70+ active installs · last updated 2025-12-18 · checked 2026-11-04
Known vulnerability on record affecting the latest version (8.1.8), with no fixed version listed:
-
high 7.1 affects latest 8.1.8
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Syntax Highlighter Compress
Latest version 3.0.83.3 · 70+ active installs · last updated 2011-11-28 · checked 2026-11-04
Known vulnerability on record affecting the latest version (3.0.83.3), with no fixed version listed:
-
high 7.1 affects latest 3.0.83.3
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Business Template Blocks for WPBakery (Visual…
Latest version 1.3.2 · 70+ active installs · last updated 2021-03-20 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.3.2), with no fixed version listed:
-
high 7.1 affects latest 1.3.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Wp Text Slider Widget
Latest version 1.0 · 70+ active installs · last updated 2016-09-21 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0), with no fixed version listed:
-
medium 6.5 affects latest 1.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Create Posts & Terms
Latest version 1.3.1 · 60+ active installs · last updated 2012-03-15 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.3.1), with no fixed version listed:
-
high 7.1 affects latest 1.3.1
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
iContact for Gravity Forms
Latest version 1.3.2 · 60+ active installs · last updated 2015-06-09 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.3.2), with no fixed version listed:
-
high 7.1 affects latest 1.3.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Noindex by Path
Latest version 1.0 · 60+ active installs · last updated 2017-05-31 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0), with no fixed version listed:
-
high 7.1 affects latest 1.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Optimize More!
Latest version 1.1.3 · 60+ active installs · last updated 2023-05-21 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1.3), with no fixed version listed:
-
medium 6.5 affects latest 1.1.3
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Selling Commander for WooCommerce
Latest version 1.2.46 · 60+ active installs · last updated 2024-10-16 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.2.46), with no fixed version listed:
-
critical 9.8 affects latest 1.2.46
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Sertifier Certificate & Badge Maker for WordPr…
Latest version 1.21 · 60+ active installs · last updated 2025-09-11 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.21), with no fixed version listed:
-
medium 6.5 affects latest 1.21
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Advanced Custom CSS
Latest version 1.1.0 · 50+ active installs · last updated 2020-06-06 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1.0), with no fixed version listed:
-
high 7.1 affects latest 1.1.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
[凹凸曼] 一键采集微信文章
Latest version 2.0.1 · 50+ active installs · last updated 2026-03-18 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.0.1), with no fixed version listed:
-
medium 6.0 affects latest 2.0.1
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
CedCommerce Integration for Good Market
Latest version 1.0.6 · 50+ active installs · last updated 2023-04-15 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.6), with no fixed version listed:
-
high 7.5 affects latest 1.0.6
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
CookieHint WP
Latest version 1.0.0 · 50+ active installs · last updated 2021-07-27 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (1.0.0), with no fixed version listed:
-
high 7.5 affects latest 1.0.0
-
medium 6.5 affects latest 1.0.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Dooodl
Latest version 2.3.0 · 50+ active installs · last updated 2024-07-18 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.3.0), with no fixed version listed:
-
high 7.1 affects latest 2.3.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
e-shopsカート2
Latest version 1.0.4 · 50+ active installs · last updated 2025-07-02 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.4), with no fixed version listed:
-
high 7.1 affects latest 1.0.4
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Flaming Password Reset
Latest version 1.0.3 · 50+ active installs · last updated 2017-08-15 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.3), with no fixed version listed:
-
medium 6.5 affects latest 1.0.3
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Leadrebel
Latest version 1.0.2 · 50+ active installs · last updated 2023-08-03 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.2), with no fixed version listed:
-
medium 5.3 affects latest 1.0.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Site Suggest
Latest version 1.3.9 · 50+ active installs · last updated 2025-12-12 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.3.9), with no fixed version listed:
-
medium 6.5 affects latest 1.3.9
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Visitor Stats Widget
Latest version 1.5.0 · 50+ active installs · last updated 2012-02-07 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.5.0), with no fixed version listed:
-
high 7.1 affects latest 1.5.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Content Grid Slider
Latest version 1.5 · 40+ active installs · last updated 2014-09-12 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.5), with no fixed version listed:
-
high 7.1 affects latest 1.5
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
CoSchool LMS
Latest version 1.4.3 · 40+ active installs · last updated 2025-06-03 · checked 2026-11-04
3 known vulnerabilities on record affecting the latest version (1.4.3), with no fixed version listed:
-
high 8.5 affects latest 1.4.3
-
critical 9.8 affects latest 1.4.3
-
critical 9.8 affects latest 1.4.3
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Invelity SPS connect
Latest version 1.0.8 · 40+ active installs · last updated 2020-07-02 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.8), with no fixed version listed:
-
high 7.1 affects latest 1.0.8
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
PRIMER by chloédigital
Latest version 1.0.25 · 40+ active installs · last updated 2020-08-18 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.25), with no fixed version listed:
-
high 7.1 affects latest 1.0.25
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Recent Posts From Each Category
Latest version 1.4 · 40+ active installs · last updated 2014-09-13 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.4), with no fixed version listed:
-
high 7.1 affects latest 1.4
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
replyMail
Latest version 1.2.0 · 40+ active installs · last updated 2010-05-10 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.2.0), with no fixed version listed:
-
high 7.1 affects latest 1.2.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Scalenut
Latest version 1.1.5 · 40+ active installs · last updated 2026-02-16 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1.5), with no fixed version listed:
-
high 7.5 affects latest 1.1.5
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Scroll rss excerpt
Latest version 5.0 · 40+ active installs · last updated 2022-12-01 · checked 2026-11-04
Known vulnerability on record affecting the latest version (5.0), with no fixed version listed:
-
high 7.1 affects latest 5.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
SensitiveTagCloud
Latest version 1.4.1 · 40+ active installs · last updated 2009-06-25 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.4.1), with no fixed version listed:
-
high 7.1 affects latest 1.4.1
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Simple Archive Generator
Latest version 5.2 · 40+ active installs · last updated 2009-06-15 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (5.2), with no fixed version listed:
-
high 7.1 affects latest 5.2
-
high 7.1 affects latest 5.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
WP-EasyArchives
Latest version 3.1.2 · 40+ active installs · last updated 2012-11-11 · checked 2026-11-04
Known vulnerability on record affecting the latest version (3.1.2), with no fixed version listed:
-
high 7.1 affects latest 3.1.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
WP sIFR
Latest version 0.6.8.1 · 40+ active installs · last updated 2009-03-23 · checked 2026-11-04
Known vulnerability on record affecting the latest version (0.6.8.1), with no fixed version listed:
-
high 7.1 affects latest 0.6.8.1
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
wpNamedUsers
Latest version 0.5 · 40+ active installs · last updated 2011-03-03 · checked 2026-11-04
Known vulnerability on record affecting the latest version (0.5), with no fixed version listed:
-
high 7.1 affects latest 0.5
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
ABG Rich Pins
Latest version 1.1 · 30+ active installs · last updated 2013-08-21 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1), with no fixed version listed:
-
medium 6.5 affects latest 1.1
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
bidorbuy Store Integrator
Latest version 2.12.0 · 30+ active installs · last updated 2021-05-09 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (2.12.0), with no fixed version listed:
-
high 7.1 affects latest 2.12.0
-
critical 9.1 affects latest 2.12.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Custom Post Status
Latest version 1.1.0 · 30+ active installs · last updated 2016-04-29 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1.0), with no fixed version listed:
-
high 7.1 affects latest 1.1.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Custom Style
Latest version 1.0 · 30+ active installs · last updated 2010-02-25 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0), with no fixed version listed:
-
high 7.1 affects latest 1.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Download Counter
Latest version 1.4 · 30+ active installs · last updated 2025-08-04 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.4), with no fixed version listed:
-
high 7.5 affects latest 1.4
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Evergreen Post Tweeter
Latest version 1.8.9 · 30+ active installs · last updated 2014-10-01 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.8.9), with no fixed version listed:
-
high 7.1 affects latest 1.8.9
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
PDF Creator Lite
Latest version 1.2 · 30+ active installs · last updated 2015-09-18 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.2), with no fixed version listed:
-
high 7.1 affects latest 1.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Hype
Latest version 1.0.5 · 30+ active installs · last updated 2023-04-05 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.5), with no fixed version listed:
-
medium 5.3 affects latest 1.0.5
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Pinpoll
Latest version 4.0.0 · 30+ active installs · last updated 2020-10-08 · checked 2026-11-04
Known vulnerability on record affecting the latest version (4.0.0), with no fixed version listed:
-
high 7.1 affects latest 4.0.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Shirt Product Designer for WooCommerce
Latest version 1.0.4 · 30+ active installs · last updated 2020-10-10 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.4), with no fixed version listed:
-
high 7.5 affects latest 1.0.4
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
WP Simple Redirect
Latest version 1.1 · 30+ active installs · last updated 2016-08-15 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1), with no fixed version listed:
-
high 7.1 affects latest 1.1
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
WPshop 2
Latest version 2.6.1 · 30+ active installs · last updated 2025-05-16 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (2.6.1), with no fixed version listed:
-
high 7.5 affects latest 2.6.1
-
critical 9.6 affects latest 2.6.1
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Hostel
Latest version 1.1.8 · 20+ active installs · last updated 2026-03-12 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1.8), with no fixed version listed:
-
medium 4.4 affects latest 1.1.8
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
ShoutOut
Latest version 4.0.2 · 20+ active installs · last updated 2021-07-03 · checked 2026-11-04
Known vulnerability on record affecting the latest version (4.0.2), with no fixed version listed:
-
high 7.1 affects latest 4.0.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Simple Contact Forms
Latest version 1.6.4 · 20+ active installs · last updated 2016-10-03 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (1.6.4), with no fixed version listed:
-
high 8.1 affects latest 1.6.4
-
high 7.1 affects latest 1.6.4
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
WDS MCP Content Manager
Latest version 3.10.4 · 20+ active installs · last updated 2026-07-02 · checked 2026-11-04
Known vulnerability on record affecting the latest version (3.10.4), with no fixed version listed:
-
medium 4.3 affects latest 3.10.4
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Account Manager for WooCommerce
Latest version 2.1.2 · 10+ active installs · last updated 2025-10-14 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.1.2), with no fixed version listed:
-
medium 4.3 affects latest 2.1.2
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
CodeBard Help Desk
Latest version 1.1.2 · 10+ active installs · last updated 2024-11-29 · checked 2026-11-04
3 known vulnerabilities on record affecting the latest version (1.1.2), with no fixed version listed:
-
critical 9.9 affects latest 1.1.2
-
medium 5.4 affects latest 1.1.2
-
medium 6.1 affects latest 1.1.2
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Elizaibots
Latest version v1.0.2 · 10+ active installs · last updated 2016-02-01 · checked 2026-11-04
Known vulnerability on record affecting the latest version (v1.0.2), with no fixed version listed:
-
medium 6.5 affects latest v1.0.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Filestack
Latest version 2.0.8 · 10+ active installs · last updated 2016-11-21 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.0.8), with no fixed version listed:
-
medium 6.4 affects latest 2.0.8
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
flexoslider
Latest version 1.0004 · 10+ active installs · last updated 2011-11-15 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0004), with no fixed version listed:
-
high 7.1 affects latest 1.0004
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Flowbox
Latest version 1.1.6 · 10+ active installs · last updated 2026-03-30 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1.6), with no fixed version listed:
-
medium 5.3 affects latest 1.1.6
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
fresh Podcaster
Latest version 1.0.7 · 10+ active installs · last updated 2021-05-06 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.7), with no fixed version listed:
-
medium 6.4 affects latest 1.0.7
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
FireStorm Professional Real Estate Plugin
Latest version 2.7.11 · 10+ active installs · last updated 2014-01-09 · checked 2026-11-04
Known vulnerability on record affecting the latest version (2.7.11), with no fixed version listed:
-
high 7.6 affects latest 2.7.11
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
IF AS Shortcode
Latest version 1.2 · 10+ active installs · last updated 2024-08-09 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.2), with no fixed version listed:
-
critical 9.9 affects latest 1.2
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Immocaster WordPress Plugin
Latest version 1.3.6 · 10+ active installs · last updated 2015-09-30 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.3.6), with no fixed version listed:
-
high 8.1 affects latest 1.3.6
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Pondol BBS
Latest version 1.1.8.4 · 10+ active installs · last updated 2014-12-29 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1.8.4), with no fixed version listed:
-
medium 5.9 affects latest 1.1.8.4
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Secudeal Payments for Ecommerce
Latest version 1.1 · 10+ active installs · last updated 2023-05-31 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1), with no fixed version listed:
-
high 8.8 affects latest 1.1
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Make My Trivia
Latest version 1.1.0 · 10+ active installs · last updated 2026-01-10 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.1.0), with no fixed version listed:
-
medium 5.3 affects latest 1.1.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
WebSamurai
Latest version 1.0.7 · 10+ active installs · last updated 2026-06-29 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.7), with no fixed version listed:
-
medium 6.5 affects latest 1.0.7
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Dashboard Beacon
Latest version 1.2.0 · 10+ active installs · last updated 2016-05-14 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.2.0), with no fixed version listed:
-
medium 5.9 affects latest 1.2.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Alpha Blocks
Latest version 1.5.0 · fewer than 10 active installs · last updated 2026-05-24 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.5.0), with no fixed version listed:
-
medium 6.4 affects latest 1.5.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Awesome Hotel Booking
Latest version 1.0.3 · fewer than 10 active installs · last updated 2026-01-10 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.3), with no fixed version listed:
-
medium 5.3 affects latest 1.0.3
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Country Blocker for AdSense
Latest version 1.0 · fewer than 10 active installs · last updated 2023-04-27 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0), with no fixed version listed:
-
medium 4.3 affects latest 1.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
EInvoice App Malaysia
Latest version 1.3.0 · fewer than 10 active installs · last updated 2026-01-05 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.3.0), with no fixed version listed:
-
medium 5.3 affects latest 1.3.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Magic Import Document Extractor
Latest version 1.0.6 · fewer than 10 active installs · last updated 2026-02-03 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.6), with no fixed version listed:
-
medium 5.3 affects latest 1.0.6
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Neoforum
Latest version 1.0 · fewer than 10 active installs · last updated 2026-08-06 · checked 2026-11-04
2 known vulnerabilities on record affecting the latest version (1.0), with no fixed version listed:
-
high 7.1 affects latest 1.0
-
high 7.6 affects latest 1.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Sitemovr
Latest version 1.0.1 · fewer than 10 active installs · last updated 2026-06-30 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.1), with no fixed version listed:
-
high 7.5 affects latest 1.0.1
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Suggestion Toolkit
Latest version 5.0 · fewer than 10 active installs · last updated 2022-08-27 · checked 2026-11-04
Known vulnerability on record affecting the latest version (5.0), with no fixed version listed:
-
medium 5.4 affects latest 5.0
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.
Swish Migrate and Backup
Latest version 1.4.0 · fewer than 10 active installs · last updated 2026-08-03 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.4.0), with no fixed version listed:
-
medium 5.9 affects latest 1.4.0
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Synergy Project Manager
Latest version 1.5 · fewer than 10 active installs · last updated 2025-04-02 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.5), with no fixed version listed:
-
medium 5.8 affects latest 1.5
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
WDV One Page Docs
Latest version 1.2.4 · fewer than 10 active installs · last updated 2025-01-04 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.2.4), with no fixed version listed:
-
medium 6.5 affects latest 1.2.4
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
WXD Backup Lite
Latest version 1.0.2 · fewer than 10 active installs · last updated 2026-06-03 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0.2), with no fixed version listed:
-
high 7.5 affects latest 1.0.2
Disable until fixed. No fixed version listed yet. If you can live without it, deactivate and delete it until a fix ships. If you must keep it, remove unused accounts and put a firewall in front of the site.
Download the unpatched plugin list
The full list as a spreadsheet (CSV) or a printable page: plugin, latest version, installs, CVE, type, severity and the recommended action. Handy for checking client sites. Enter your email and the download starts right away.
We keep your email on file and do not share it. The list is a snapshot from 2026-11-04.
Running one of these? Check your site for signs of a hack
The free scan reads the public side of your site and looks for spam pages, hidden redirects, injected scripts and blacklist entries. No login, no install, about a minute.
Already hacked? Flat $499 cleanup with a 30-day reinfection guarantee.
Browse vulnerabilities
Common types: Cross-site scripting (XSS) · Missing authorization · Cross-site request forgery (CSRF) · SQL injection · Sensitive data exposure · PHP object injection · Privilege escalation · Remote code execution
Where this data comes from
- Vulnerabilities: NIST National Vulnerability Database (NVD), checked 2026-11-04. This product uses data from the NVD API but is not endorsed or certified by the NVD.
- Plugin versions, update dates and install counts: the wordpress.org Plugins API.
- These lists cover the 3,948 plugins in our catalogue, not every plugin on wordpress.org. We only list a CVE for a plugin when its references or its advisory name that exact plugin, so a few real issues may be missing. Spot an error? Email Daniel.
Social Profilr
Latest version 1.0 · 40+ active installs · last updated 2009-02-06 · checked 2026-11-04
Known vulnerability on record affecting the latest version (1.0), with no fixed version listed:
high 7.1 affects latest 1.0
Cross-site request forgery (CSRF)
CVE-2025-49343 · affected 1.0 and older · no fix listed yet · published 2025-12-31
Replace or remove. No release in over two years, so a fix may not come. If you use it, look for a maintained alternative; if you do not, deactivate and delete it.