Reported vulnerability
Appsero <= 1.2.0 - Cross-Site Request Forgery
Published 14 Dec 2022
Updated 13 Nov 2024
CVE-2022-47150
Compare your installed software with the affected versions below. Follow the source’s remediation guidance and test an available update after taking a backup. A database entry describes a reported issue; it does not establish whether a particular website has been compromised.
Does this affect my version?
Check your installed version against this advisory. This compares the report’s version ranges and does not scan your website.
Wordfence advisory
medium · CVSS 4.3The Appsero analytics tool used in several plugins is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the uninstall_reason_submission function used for feedback submission in versions up to, and including, 1.2.0. This makes it possible for unauthenticated attackers to invoke this function intended for administrator use via forged request, granted they can trick a site administrator into performing an action such as clicking on a link.
Severity vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
PT Addons for Elementor Lite
- Software
- plugin · pt-elementor-addons-lite
- Affected versions
- Start version unspecified, through 2.2
- Fix availability
- No fix reported
- Fixed versions
- No fixed version specified
Recommended action
No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Subscribe2 – Form, Email Subscribers & Newsletters
- Software
- plugin · subscribe2
- Affected versions
- Start version unspecified, through 10.37
- Fix availability
- Fix available
- Fixed versions
- 10.38
Recommended action
Update to version 10.38, or a newer patched version
wePOS – Point Of Sale (POS) for WooCommerce & Dokan
- Software
- plugin · wepos
- Affected versions
- Start version unspecified, through 1.2.5
- Fix availability
- Fix available
- Fixed versions
- 1.2.6
Recommended action
Update to version 1.2.6, or a newer patched version
Easy Video Reviews – Testimonial Grid & Social Proof
- Software
- plugin · easy-video-reviews
- Affected versions
- Start version unspecified, through 1.4.2
- Fix availability
- Fix available
- Fixed versions
- 1.5.0
Recommended action
Update to version 1.5.0, or a newer patched version
Worth The Read
- Software
- plugin · worth-the-read
- Affected versions
- Start version unspecified, through 1.14
- Fix availability
- Fix available
- Fixed versions
- 1.14.1
Recommended action
Update to version 1.14.1, or a newer patched version
Woostify Sites Library
- Software
- plugin · woostify-sites-library
- Affected versions
- Start version unspecified, through 1.4.3
- Fix availability
- Fix available
- Fixed versions
- 1.4.4
Recommended action
Update to version 1.4.4, or a newer patched version
FlexTable – Data Table Sync with Google Sheets
- Software
- plugin · sheets-to-wp-table-live-sync
- Affected versions
- Start version unspecified, through 2.12.14
- Fix availability
- Fix available
- Fixed versions
- 2.12.15
Recommended action
Update to version 2.12.15, or a newer patched version
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget
- Software
- plugin · post-grid-carousel-ultimate
- Affected versions
- Start version unspecified, through 1.6.3
- Fix availability
- Fix available
- Fixed versions
- 1.6.4
Recommended action
Update to version 1.6.4, or a newer patched version
WPEPP – Essential Security, Password Protect & Login Page Customizer
- Software
- plugin · wp-edit-password-protected
- Affected versions
- Start version unspecified, through 1.2.3
- Fix availability
- Fix available
- Fixed versions
- 1.2.4
Recommended action
Update to version 1.2.4, or a newer patched version
Product Carousel Slider & Grid Ultimate for WooCommerce
- Software
- plugin · woo-product-carousel-slider-and-grid-ultimate
- Affected versions
- Start version unspecified, through 1.9.3
- Fix availability
- Fix available
- Fixed versions
- 1.9.4
Recommended action
Update to version 1.9.4, or a newer patched version
Product Gallery Slider, Additional Variation Images for WooCommerce
- Software
- plugin · woo-product-gallery-slider
- Affected versions
- Start version unspecified, through 2.2.6
- Fix availability
- Fix available
- Fixed versions
- 2.2.7
Recommended action
Update to version 2.2.7, or a newer patched version
Markdown Editor (Formerly Dark Mode)
- Software
- plugin · dark-mode
- Affected versions
- Start version unspecified, through 4.1.2
- Fix availability
- Fix available
- Fixed versions
- 4.1.3
Recommended action
Update to version 4.1.3, or a newer patched version
Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker
- Software
- plugin · wedevs-project-manager
- Affected versions
- Start version unspecified, through 2.6.12
- Fix availability
- Fix available
- Fixed versions
- 2.6.13
Recommended action
Update to version 2.6.13, or a newer patched version
Dashboard Welcome for Elementor
- Software
- plugin · dashboard-welcome-for-elementor
- Affected versions
- Start version unspecified, through 1.0.6
- Fix availability
- Fix available
- Fixed versions
- 1.0.7
Recommended action
Update to version 1.0.7, or a newer patched version
Dark Mode – Improve Accessibility with AI Powered Dark Theme
- Software
- plugin · wp-dark-mode
- Affected versions
- Start version unspecified, through 3.0.4
- Fix availability
- Fix available
- Fixed versions
- 3.0.5
Recommended action
Update to version 3.0.5, or a newer patched version
Fuse Social Icons
- Software
- plugin · fuse-social-floating-sidebar
- Affected versions
- Start version unspecified, through 5.4.6
- Fix availability
- Fix available
- Fixed versions
- 5.4.7
Recommended action
Update to version 5.4.7, or a newer patched version
Stylish Cost Calculator – Quote Generator, Lead Gen & Price Estimator
- Software
- plugin · stylish-cost-calculator
- Affected versions
- Start version unspecified, through 7.3.6
- Fix availability
- Fix available
- Fixed versions
- 7.3.7
Recommended action
Update to version 7.3.7, or a newer patched version
Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider
- Software
- plugin · ml-slider
- Affected versions
- Start version unspecified, through 3.28.0
- Fix availability
- Fix available
- Fixed versions
- 3.28.1
Recommended action
Update to version 3.28.1, or a newer patched version
Product Category Slider for WooCommerce
- Software
- plugin · woo-category-slider-by-pluginever
- Affected versions
- Start version unspecified, through 4.1.5
- Fix availability
- Fix available
- Fixed versions
- 4.1.6
Recommended action
Update to version 4.1.6, or a newer patched version
FlexMeeting – Webinar & Meeting Plugin for Jitsi Meet
- Software
- plugin · webinar-and-video-conference-with-jitsi-meet
- Affected versions
- Start version unspecified, through 1.2.5
- Fix availability
- Fix available
- Fixed versions
- 2.0.0
Recommended action
Update to version 2.0.0, or a newer patched version
W4 Post List
- Software
- plugin · w4-post-list
- Affected versions
- Start version unspecified, through 2.4.2
- Fix availability
- Fix available
- Fixed versions
- 2.4.3
Recommended action
Update to version 2.4.3, or a newer patched version
weMail – Email Marketing, Newsletters Builder & Email Automations for WooCommerce
- Software
- plugin · wemail
- Affected versions
- Start version unspecified, through 1.14.1
- Fix availability
- Fix available
- Fixed versions
- 1.14.2
Recommended action
Update to version 1.14.2, or a newer patched version
BuddyPress Builder for Elementor – BuddyBuilder
- Software
- plugin · stax-buddy-builder
- Affected versions
- Start version unspecified, through 1.7.1
- Fix availability
- Fix available
- Fixed versions
- 1.7.2
Recommended action
Update to version 1.7.2, or a newer patched version
Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator
- Software
- plugin · legal-pages
- Affected versions
- Start version unspecified, through 1.4.1
- Fix availability
- Fix available
- Fixed versions
- 1.4.2
Recommended action
Update to version 1.4.2, or a newer patched version
HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates
- Software
- plugin · happy-elementor-addons
- Affected versions
- Start version unspecified, through 3.8.2
- Fix availability
- Fix available
- Fixed versions
- 3.8.3
Recommended action
Update to version 3.8.3, or a newer patched version
WPVR – 360 Panorama viewer and Virtual Tour Builder for WordPress
- Software
- plugin · wpvr
- Affected versions
- Start version unspecified, through 8.2.5
- Fix availability
- Fix available
- Fixed versions
- 8.2.6
Recommended action
Update to version 8.2.6, or a newer patched version
Conversion Tracking for WooCommerce
- Software
- plugin · woocommerce-conversion-tracking
- Affected versions
- Start version unspecified, through 2.0.10
- Fix availability
- Fix available
- Fixed versions
- 2.0.11
Recommended action
Update to version 2.0.11, or a newer patched version
Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews
- Software
- plugin · gs-testimonial
- Affected versions
- Start version unspecified, through 1.9.7
- Fix availability
- Fix available
- Fixed versions
- 1.9.8
Recommended action
Update to version 1.9.8, or a newer patched version
EasyMedia – Increase Media Upload File Size | Role-Based Upload Limit | Increase Execution Time
- Software
- plugin · wp-maximum-upload-file-size
- Affected versions
- Start version unspecified, through 1.0.9
- Fix availability
- Fix available
- Fixed versions
- 1.1.0
Recommended action
Update to version 1.1.0, or a newer patched version
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot
- Software
- plugin · wedocs
- Affected versions
- From 1.6, through 1.7.5
- Fix availability
- Fix available
- Fixed versions
- 1.7.6
Recommended action
Update to version 1.7.6, or a newer patched version
Bangladeshi Payment Gateways – Make Payment Using QR Code
- Software
- plugin · bangladeshi-payment-gateways
- Affected versions
- Start version unspecified, through 2.0.6
- Fix availability
- Fix available
- Fixed versions
- 2.0.7
Recommended action
Update to version 2.0.7, or a newer patched version
Texty – SMS Notification for WordPress, WooCommerce, Dokan and more
- Software
- plugin · texty
- Affected versions
- Start version unspecified, through 1.1.1
- Fix availability
- Fix available
- Fixed versions
- 1.1.2
Recommended action
Update to version 1.1.2, or a newer patched version
Visibility Logic for Elementor
- Software
- plugin · visibility-logic-elementor
- Affected versions
- Start version unspecified, through 2.3.3
- Fix availability
- Fix available
- Fixed versions
- 2.3.4
Recommended action
Update to version 2.3.4, or a newer patched version
PDF Invoices & Packing Slips for WooCommerce – Challan
- Software
- plugin · webappick-pdf-invoice-for-woocommerce
- Affected versions
- Start version unspecified, through 3.4.8
- Fix availability
- Fix available
- Fixed versions
- 3.4.9
Recommended action
Update to version 3.4.9, or a newer patched version
Darklup – Enhanced WordPress Dark Mode, Dark Theme, Night Mode & Accessibility Plugin
- Software
- plugin · darklup-lite-wp-dark-mode
- Affected versions
- Start version unspecified, through 2.1.1
- Fix availability
- Fix available
- Fixed versions
- 2.1.2
Recommended action
Update to version 2.1.2, or a newer patched version
Exclusive Team for Elementor
- Software
- plugin · exclusive-team-for-elementor
- Affected versions
- Start version unspecified, through 1.2.4
- Fix availability
- No fix reported
- Fixed versions
- No fixed version specified
Recommended action
No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Click to top
- Software
- plugin · click-to-top
- Affected versions
- Start version unspecified, through 1.2.19
- Fix availability
- Fix available
- Fixed versions
- 1.2.20
Recommended action
Update to version 1.2.20, or a newer patched version
Update Image Tag Alt Attribute
- Software
- plugin · update-alt-attribute
- Affected versions
- Start version unspecified, through 2.4.3
- Fix availability
- No fix reported
- Fixed versions
- No fixed version specified
Recommended action
No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Magical Posts Display – Elementor Advanced Posts widgets
- Software
- plugin · magical-posts-display
- Affected versions
- Start version unspecified, through 1.2.15
- Fix availability
- Fix available
- Fixed versions
- 1.2.16
Recommended action
Update to version 1.2.16, or a newer patched version
GS Pinterest Portfolio – Pins Grid, Masonry, User Profile, Popup & Board Widgets
- Software
- plugin · gs-pinterest-portfolio
- Affected versions
- Start version unspecified, through 1.6.2
- Fix availability
- Fix available
- Fixed versions
- 1.6.3
Recommended action
Update to version 1.6.3, or a newer patched version
WP Mail Logging
- Software
- plugin · wp-mail-logging
- Affected versions
- Start version unspecified, through 1.10.5
- Fix availability
- Fix available
- Fixed versions
- 1.11.0
Recommended action
Update to version 1.11.0, or a newer patched version
Directorist: AI-Powered Business Directory, Listings & Classified Ads
- Software
- plugin · directorist
- Affected versions
- Start version unspecified, through 7.7.1
- Fix availability
- Fix available
- Fixed versions
- 7.7.2
Recommended action
Update to version 7.7.2, or a newer patched version
User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission
- Software
- plugin · wp-user-frontend
- Affected versions
- Start version unspecified, through 3.6.0
- Fix availability
- Fix available
- Fixed versions
- 3.6.1
Recommended action
Update to version 3.6.1, or a newer patched version
Zero BS Accounting
- Software
- plugin · zero-bs-accounting
- Affected versions
- Start version unspecified, through 1.0.6
- Fix availability
- Fix available
- Fixed versions
- 2.0.0
Recommended action
Update to version 2.0.0, or a newer patched version
Exclusive Addons for Elementor
- Software
- plugin · exclusive-addons-for-elementor
- Affected versions
- Start version unspecified, through 2.6.1
- Fix availability
- Fix available
- Fixed versions
- 2.6.2
Recommended action
Update to version 2.6.2, or a newer patched version
Boostify Header Footer Builder for Elementor
- Software
- plugin · boostify-header-footer-builder
- Affected versions
- Start version unspecified, through 1.2.8
- Fix availability
- Fix available
- Fixed versions
- 1.2.9
Recommended action
Update to version 1.2.9, or a newer patched version
Stax Addons for Elementor
- Software
- plugin · stax-addons-for-elementor
- Affected versions
- Start version unspecified, through 1.4.3
- Fix availability
- Fix available
- Fixed versions
- 1.4.4
Recommended action
Update to version 1.4.4, or a newer patched version
WP CTA – Call Now Button, Sticky Button & Call to Action Builder
- Software
- plugin · easy-sticky-sidebar
- Affected versions
- Start version unspecified, through 1.5.8
- Fix availability
- Fix available
- Fixed versions
- 1.5.9
Recommended action
Update to version 1.5.9, or a newer patched version
Gallery Box
- Software
- plugin · gallery-box
- Affected versions
- Start version unspecified, through 1.7.30
- Fix availability
- Fix available
- Fixed versions
- 1.7.31
Recommended action
Update to version 1.7.31, or a newer patched version
Prime Elementor Addons – Lightweight Elementor Widgets for Faster Pages
- Software
- plugin · unlimited-elementor-inner-sections-by-boomdevs
- Affected versions
- Start version unspecified, through 1.0.1
- Fix availability
- Fix available
- Fixed versions
- 1.0.2
Recommended action
Update to version 1.0.2, or a newer patched version
Wiremo – Product Reviews for WooCommerce
- Software
- plugin · woo-reviews-by-wiremo
- Affected versions
- Start version unspecified, through 1.4.96
- Fix availability
- Fix available
- Fixed versions
- 1.4.97
Recommended action
Update to version 1.4.97, or a newer patched version
Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD
- Software
- plugin · cart-lift
- Affected versions
- Start version unspecified, through 3.1.3
- Fix availability
- Fix available
- Fixed versions
- 3.1.4
Recommended action
Update to version 3.1.4, or a newer patched version
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell
- Software
- plugin · wpfunnels
- Affected versions
- From 2.6.4, through 2.6.4
- Fix availability
- Fix available
- Fixed versions
- 2.6.5
Recommended action
Update to version 2.6.5, or a newer patched version
Product Category Showcase for WooCommerce
- Software
- plugin · wc-category-showcase
- Affected versions
- Start version unspecified, through 1.1.9
- Fix availability
- Fix available
- Fixed versions
- 2.0.0
Recommended action
Update to version 2.0.0, or a newer patched version
Further references (1)
Data sources and licences
Copyright 2012-2026 Defiant Inc.
Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.
Read licence termsCopyright 1999-2026 The MITRE Corporation
CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.
Read licence termsSource: Wordfence
Need help fixing this issue?
Get help checking your site, applying an available update and resolving any problems after updating.
Get help with this issueQuestions about this vulnerability
How do I check which product and version this report affects?
This report covers more than one product. Choose your plugin, theme or WordPress core in the version checker, then enter its installed version. Each product has its own affected ranges and fix details in the report above.
Which update should I install?
Find your exact product in the report and read its fixed versions and recommended action. Fix details for one product do not apply to every product covered by this advisory. Follow the linked source when no fixed version is specified.
Does an affected version mean my website has been hacked?
An affected version means the installed release matches a vulnerability described in this report. It does not show whether anyone has exploited it on your website. The checker compares version numbers with stored reports; it does not inspect your website.
Does a version outside these ranges mean my website is secure?
A version outside the reported ranges is not listed as affected by this particular issue. Other vulnerabilities, missing information or a previous compromise still need separate checks. Review other reports for your product and keep your website maintained.
Other reports for the same product
These reports cover at least one of the same plugins, themes or WordPress core. Check each report’s affected versions separately.
- WP Mail Logging <= 1.17.0 - Authenticated (Administrator+) Sensitive Information Exposure in LIKE Wildcard in Personal Data Export EmailUpdated 15 Oct 2026
- WP Dark Mode – Improve Accessibility with AI Powered Dark Theme <= 5.3.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon_light' Shortcode AttributeUpdated 15 Oct 2026
- Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'phone' Listing FieldUpdated 14 Oct 2026
- Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Listing Deletion via 'listing_id' ParameterUpdated 14 Oct 2026
- User Frontend <= 4.3.12 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpuf_payment_method' ParameterUpdated 10 Oct 2026