Reported vulnerability
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
Published 30 Apr 2026
Updated 16 Oct 2026
CVE-2024-13362
Compare your installed software with the affected versions below. Follow the source’s remediation guidance and test an available update after taking a backup. A database entry describes a reported issue; it does not establish whether a particular website has been compromised.
Does this affect my version?
Check your installed version against this advisory. This compares the report’s version ranges and does not scan your website.
Wordfence advisory
medium · CVSS 6.1Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Severity vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
YASR – Yet Another Star Rating Plugin for WordPress
- Software
- plugin · yet-another-stars-rating
- Affected versions
- Start version unspecified, through 3.4.12
- Fix availability
- Fix available
- Fixed versions
- 3.4.15
Recommended action
Update to version 3.4.15, or a newer patched version
Events Addon for Elementor
- Software
- plugin · events-addon-for-elementor
- Affected versions
- Start version unspecified, through 2.2.2
- Fix availability
- Fix available
- Fixed versions
- 2.2.5
Recommended action
Update to version 2.2.5, or a newer patched version
Ultimeter – the Ultimate Progress and Goals Meter
- Software
- plugin · ultimeter
- Affected versions
- Start version unspecified, through 3.0.5
- Fix availability
- Fix available
- Fixed versions
- 3.0.7
Recommended action
Update to version 3.0.7, or a newer patched version
Custom PHP Settings
- Software
- plugin · custom-php-settings
- Affected versions
- Start version unspecified, through 2.3.1
- Fix availability
- Fix available
- Fixed versions
- 2.3.2
Recommended action
Update to version 2.3.2, or a newer patched version
Full Screen Background
- Software
- plugin · fullscreen-background
- Affected versions
- Start version unspecified, through 2.0.2
- Fix availability
- Fix available
- Fixed versions
- 2.0.3
Recommended action
Update to version 2.0.3, or a newer patched version
Custom WooCommerce Checkout Fields Editor
- Software
- plugin · add-fields-to-checkout-page-woocommerce
- Affected versions
- Start version unspecified, through 1.3.4
- Fix availability
- No fix reported
- Fixed versions
- No fixed version specified
Recommended action
No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Dracula Dark Mode – Accessibility, Reading Mode & Dark Mode for WordPress
- Software
- plugin · dracula-dark-mode
- Affected versions
- Start version unspecified, through 1.2.7
- Fix availability
- Fix available
- Fixed versions
- 1.2.8
Recommended action
Update to version 1.2.8, or a newer patched version
Product Layouts for WooCommerce
- Software
- plugin · product-layouts
- Affected versions
- Start version unspecified, through 1.3.1
- Fix availability
- Fix available
- Fixed versions
- 1.3.5
Recommended action
Update to version 1.3.5, or a newer patched version
AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization
- Software
- plugin · add-expires-headers
- Affected versions
- Start version unspecified, through 2.9.2
- Fix availability
- Fix available
- Fixed versions
- 2.10.0
Recommended action
Update to version 2.10.0, or a newer patched version
Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots
- Software
- plugin · bp-better-messages
- Affected versions
- Start version unspecified, through 2.6.7
- Fix availability
- Fix available
- Fixed versions
- 2.7.0
Recommended action
Update to version 2.7.0, or a newer patched version
Books Gallery – Book Showcase, Library & Affiliate Plugin
- Software
- plugin · wp-books-gallery
- Affected versions
- Start version unspecified, through 4.6.8
- Fix availability
- Fix available
- Fixed versions
- 4.7.6
Recommended action
Update to version 4.7.6, or a newer patched version
StreamWeasels Twitch Integration
- Software
- plugin · streamweasels-twitch-integration
- Affected versions
- Start version unspecified, through 1.9.2
- Fix availability
- Fix available
- Fixed versions
- 1.9.3
Recommended action
Update to version 1.9.3, or a newer patched version
MapGeo – Interactive Geo Maps
- Software
- plugin · interactive-geo-maps
- Affected versions
- Start version unspecified, through 1.6.22
- Fix availability
- Fix available
- Fixed versions
- 1.6.23
Recommended action
Update to version 1.6.23, or a newer patched version
WP Notification Bell
- Software
- plugin · wp-notification-bell
- Affected versions
- Start version unspecified, through 1.4.2
- Fix availability
- Fix available
- Fixed versions
- 1.4.3
Recommended action
Update to version 1.4.3, or a newer patched version
Carousel, Recent Post Slider and Banner Slider
- Software
- plugin · spice-post-slider
- Affected versions
- Start version unspecified, through 2.1
- Fix availability
- Fix available
- Fixed versions
- 2.2
Recommended action
Update to version 2.2, or a newer patched version
Place Order Without Payment for WooCommerce
- Software
- plugin · wc-place-order-without-payment
- Affected versions
- Start version unspecified, through 2.6.5
- Fix availability
- Fix available
- Fixed versions
- 2.6.7
Recommended action
Update to version 2.6.7, or a newer patched version
HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player
- Software
- plugin · html5-audio-player
- Affected versions
- Start version unspecified, through 2.2.27
- Fix availability
- Fix available
- Fixed versions
- 2.5.1
Recommended action
Update to version 2.5.1, or a newer patched version
BlockSpare – Gutenberg Blocks, AI Content Generator & Site Builder for news, magazine, blog and business sites
- Software
- plugin · blockspare
- Affected versions
- Start version unspecified, through 3.2.6
- Fix availability
- Fix available
- Fixed versions
- 3.2.8
Recommended action
Update to version 3.2.8, or a newer patched version
Coupon Affiliates – Affiliate Plugin for WooCommerce
- Software
- plugin · woo-coupon-usage
- Affected versions
- Start version unspecified, through 5.17.2
- Fix availability
- Fix available
- Fixed versions
- 5.19.0
Recommended action
Update to version 5.19.0, or a newer patched version
WP Page Templates
- Software
- plugin · custom-page-templates-by-vegacorp
- Affected versions
- Start version unspecified, through 1.1.16
- Fix availability
- Fix available
- Fixed versions
- 1.1.17
Recommended action
Update to version 1.1.17, or a newer patched version
Team Members – A WordPress Team Plugin with Gallery, Grid, Carousel, Slider, Table, List, and More
- Software
- plugin · gs-team-members
- Affected versions
- Start version unspecified, through 2.5.8
- Fix availability
- Fix available
- Fixed versions
- 2.6.1
Recommended action
Update to version 2.6.1, or a newer patched version
Advanced Scrollbar – Give Your Site a Sleek Branded Scrolling Feel
- Software
- plugin · advanced-scrollbar
- Affected versions
- Start version unspecified, through 1.1.3
- Fix availability
- Fix available
- Fixed versions
- 1.1.10
Recommended action
Update to version 1.1.10, or a newer patched version
Automatic YouTube Gallery – Embed Auto-Updating YouTube Video Galleries, Feeds, Playlists & Channels
- Software
- plugin · automatic-youtube-gallery
- Affected versions
- Start version unspecified, through 2.5.5
- Fix availability
- Fix available
- Fixed versions
- 2.5.6
Recommended action
Update to version 2.5.6, or a newer patched version
Thank You Page for WooCommerce
- Software
- plugin · wc-thanks-redirect
- Affected versions
- Start version unspecified, through 4.2.0
- Fix availability
- Fix available
- Fixed versions
- 4.2.1
Recommended action
Update to version 4.2.1, or a newer patched version
TablePress – Tables in WordPress made easy
- Software
- plugin · tablepress
- Affected versions
- Start version unspecified, through 3.0.2
- Fix availability
- Fix available
- Fixed versions
- 3.0.3
Recommended action
Update to version 3.0.3, or a newer patched version
Marijuana Age Verify
- Software
- plugin · easy-marijuana-age-verify
- Affected versions
- Start version unspecified, through 1.5.5
- Fix availability
- Fix available
- Fixed versions
- 1.6
Recommended action
Update to version 1.6, or a newer patched version
Five-Star Ratings Shortcode
- Software
- plugin · five-star-ratings-shortcode
- Affected versions
- Start version unspecified, through 1.2.56
- Fix availability
- Fix available
- Fixed versions
- 1.2.57
Recommended action
Update to version 1.2.57, or a newer patched version
Advanced Classifieds & Directory Pro
- Software
- plugin · advanced-classifieds-and-directory-pro
- Affected versions
- Start version unspecified, through 3.2.4
- Fix availability
- Fix available
- Fixed versions
- 3.2.5
Recommended action
Update to version 3.2.5, or a newer patched version
Music Player for Elementor – Audio Player & Podcast Player
- Software
- plugin · music-player-for-elementor
- Affected versions
- Start version unspecified, through 2.4.1
- Fix availability
- Fix available
- Fixed versions
- 2.4.4
Recommended action
Update to version 2.4.4, or a newer patched version
Open User Map – Interactive Leaflet Maps
- Software
- plugin · open-user-map
- Affected versions
- Start version unspecified, through 1.4.0
- Fix availability
- Fix available
- Fixed versions
- 1.4.1
Recommended action
Update to version 1.4.1, or a newer patched version
Featured Images in RSS for Mailchimp & More
- Software
- plugin · featured-images-for-rss-feeds
- Affected versions
- Start version unspecified, through 1.6.3
- Fix availability
- Fix available
- Fixed versions
- 1.6.4
Recommended action
Update to version 1.6.4, or a newer patched version
Unlimited Elements for Elementor
- Software
- plugin · unlimited-elements-for-elementor
- Affected versions
- Start version unspecified, through 1.5.140
- Fix availability
- Fix available
- Fixed versions
- 1.5.141
Recommended action
Update to version 1.5.141, or a newer patched version
Joli Table Of Contents – Table of Contents with Gutenberg Block & Shortcode
- Software
- plugin · joli-table-of-contents
- Affected versions
- Start version unspecified, through 2.6.0
- Fix availability
- Fix available
- Fixed versions
- 2.6.1
Recommended action
Update to version 2.6.1, or a newer patched version
WP Meta and Date Remover
- Software
- plugin · wp-meta-and-date-remover
- Affected versions
- Start version unspecified, through 2.3.4
- Fix availability
- Fix available
- Fixed versions
- 2.3.5
Recommended action
Update to version 2.3.5, or a newer patched version
EazyDocs – AI Powered Knowledge Base, Wiki, Documentation & FAQ Builder
- Software
- plugin · eazydocs
- Affected versions
- Start version unspecified, through 2.5.7
- Fix availability
- Fix available
- Fixed versions
- 2.5.9
Recommended action
Update to version 2.5.9, or a newer patched version
AidWP – Donation & Payment Forms (Stripe Powered)
- Software
- plugin · wp-stripe-donation
- Affected versions
- Start version unspecified, through 3.2.6
- Fix availability
- Fix available
- Fixed versions
- 3.2.9
Recommended action
Update to version 3.2.9, or a newer patched version
WPBITS Addons For Elementor Page Builder
- Software
- plugin · wpbits-addons-for-elementor
- Affected versions
- Start version unspecified, through 1.7
- Fix availability
- No fix reported
- Fixed versions
- No fixed version specified
Recommended action
No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Smart phone field for Gravity Forms
- Software
- plugin · smart-phone-field-for-gravity-forms
- Affected versions
- Start version unspecified, through 2.1.6
- Fix availability
- Fix available
- Fixed versions
- 2.2.0
Recommended action
Update to version 2.2.0, or a newer patched version
Send Users Email – Email Subscribers, Email Marketing Newsletter
- Software
- plugin · send-users-email
- Affected versions
- Start version unspecified, through 1.5.10
- Fix availability
- Fix available
- Fixed versions
- 1.6.2
Recommended action
Update to version 1.6.2, or a newer patched version
Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits
- Software
- plugin · master-addons
- Affected versions
- Start version unspecified, through 2.0.7.2
- Fix availability
- Fix available
- Fixed versions
- 2.0.7.3
Recommended action
Update to version 2.0.7.3, or a newer patched version
FooGallery Photo Gallery : Image, Video & Masonry Galleries
- Software
- plugin · foogallery
- Affected versions
- Start version unspecified, through 2.4.27
- Fix availability
- Fix available
- Fixed versions
- 2.4.29
Recommended action
Update to version 2.4.29, or a newer patched version
Announcement & Notification Banner – Bulletin
- Software
- plugin · bulletin-announcements
- Affected versions
- Start version unspecified, through 3.12.1
- Fix availability
- Fix available
- Fixed versions
- 3.13.1
Recommended action
Update to version 3.13.1, or a newer patched version
Checkout with Cash App on WooCommerce
- Software
- plugin · wc-cashapp
- Affected versions
- Start version unspecified, through 6.0.2
- Fix availability
- No fix reported
- Fixed versions
- No fixed version specified
Recommended action
No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Security Ninja – WordPress Security & Firewall
- Software
- plugin · security-ninja
- Affected versions
- Start version unspecified, through 5.222
- Fix availability
- Fix available
- Fixed versions
- 5.225
Recommended action
Update to version 5.225, or a newer patched version
Goal Tracker – Custom Event Tracking for GA4
- Software
- plugin · goal-tracker-ga
- Affected versions
- Start version unspecified, through 1.1.5
- Fix availability
- Fix available
- Fixed versions
- 1.1.6
Recommended action
Update to version 1.1.6, or a newer patched version
Justified Gallery
- Software
- plugin · justified-gallery
- Affected versions
- Start version unspecified, through 1.9.0
- Fix availability
- Fix available
- Fixed versions
- 1.10.0
Recommended action
Update to version 1.10.0, or a newer patched version
Remove Add to Cart WooCommerce
- Software
- plugin · remove-add-to-cart-woocommerce
- Affected versions
- Start version unspecified, through 1.4.7
- Fix availability
- No fix reported
- Fixed versions
- No fixed version specified
Recommended action
No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
File Manager for Google Drive – Integrate Google Drive
- Software
- plugin · integrate-google-drive
- Affected versions
- Start version unspecified, through 1.4.9
- Fix availability
- Fix available
- Fixed versions
- 1.5.0
Recommended action
Update to version 1.5.0, or a newer patched version
WPIDE – File Manager & Code Editor
- Software
- plugin · wpide
- Affected versions
- Start version unspecified, through 3.5.1
- Fix availability
- Fix available
- Fixed versions
- 3.5.2
Recommended action
Update to version 3.5.2, or a newer patched version
Knowledge Base documentation & wiki plugin – BasePress Docs
- Software
- plugin · basepress
- Affected versions
- Start version unspecified, through 2.16.3.3
- Fix availability
- Fix available
- Fixed versions
- 2.16.3.6
Recommended action
Update to version 2.16.3.6, or a newer patched version
AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o
- Software
- plugin · aibuddy-openai-chatgpt
- Affected versions
- Start version unspecified, through 1.7.2
- Fix availability
- Fix available
- Fixed versions
- 1.8.5
Recommended action
Update to version 1.8.5, or a newer patched version
Easy Appointment Booking & Scheduling Plugin – Webba Booking Calendar
- Software
- plugin · webba-booking-lite
- Affected versions
- Start version unspecified, through 5.0.57
- Fix availability
- Fix available
- Fixed versions
- 5.1.8
Recommended action
Update to version 5.1.8, or a newer patched version
AI Puffer – MCP, AI Chatbot & Content Automation
- Software
- plugin · gpt3-ai-content-generator
- Affected versions
- Start version unspecified, through 1.8.99
- Fix availability
- Fix available
- Fixed versions
- 2.3.17
Recommended action
Update to version 2.3.17, or a newer patched version
Post SMTP – Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
- Software
- plugin · post-smtp
- Affected versions
- Start version unspecified, through 3.0.0
- Fix availability
- Fix available
- Fixed versions
- 3.1.0
Recommended action
Update to version 3.1.0, or a newer patched version
Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News
- Software
- plugin · blog-designer-pack
- Affected versions
- Start version unspecified, through 3.4.9
- Fix availability
- Fix available
- Fixed versions
- 3.4.11
Recommended action
Update to version 3.4.11, or a newer patched version
Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar
- Software
- plugin · foobar-notifications-lite
- Affected versions
- Start version unspecified, through 2.1.34
- Fix availability
- Fix available
- Fixed versions
- 2.1.35
Recommended action
Update to version 2.1.35, or a newer patched version
Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent
- Software
- plugin · tablesome
- Affected versions
- Start version unspecified, through 1.1.13
- Fix availability
- Fix available
- Fixed versions
- 1.1.17
Recommended action
Update to version 1.1.17, or a newer patched version
Widgets on Pages
- Software
- plugin · widgets-on-pages
- Affected versions
- Start version unspecified, through 1.7
- Fix availability
- No fix reported
- Fixed versions
- No fixed version specified
Recommended action
No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Ivory Search – WordPress Search Plugin
- Software
- plugin · add-search-to-menu
- Affected versions
- Start version unspecified, through 5.5.8
- Fix availability
- Fix available
- Fixed versions
- 5.5.9
Recommended action
Update to version 5.5.9, or a newer patched version
XT Variation Swatches for WooCommerce
- Software
- plugin · xt-woo-variation-swatches
- Affected versions
- Start version unspecified, through 1.9.4
- Fix availability
- Fix available
- Fixed versions
- 1.9.7
Recommended action
Update to version 1.9.7, or a newer patched version
URL Shortify – Simple and Easy URL Shortener
- Software
- plugin · url-shortify
- Affected versions
- Start version unspecified, through 1.10.4
- Fix availability
- Fix available
- Fixed versions
- 1.10.5.1
Recommended action
Update to version 1.10.5.1, or a newer patched version
Secure Gateway for Authorize.net and WooCommerce by Pledged Plugins
- Software
- plugin · woo-authorize-net-gateway-aim
- Affected versions
- Start version unspecified, through 6.1.13
- Fix availability
- Fix available
- Fixed versions
- 6.1.14
Recommended action
Update to version 6.1.14, or a newer patched version
Independent Analytics – WordPress Analytics Plugin
- Software
- plugin · independent-analytics
- Affected versions
- Start version unspecified, through 2.9.7
- Fix availability
- Fix available
- Fixed versions
- 2.10.0
Recommended action
Update to version 2.10.0, or a newer patched version
Glossary
- Software
- plugin · glossary-by-codeat
- Affected versions
- Start version unspecified, through 2.2.38
- Fix availability
- Fix available
- Fixed versions
- 2.2.39
Recommended action
Update to version 2.2.39, or a newer patched version
Menu Image, Icons made easy
- Software
- plugin · menu-image
- Affected versions
- Start version unspecified, through 3.12
- Fix availability
- Fix available
- Fixed versions
- 3.13
Recommended action
Update to version 3.13, or a newer patched version
PDF Poster – Let visitors read PDF's without leaving the page
- Software
- plugin · pdf-poster
- Affected versions
- Start version unspecified, through 2.2.0
- Fix availability
- Fix available
- Fixed versions
- 2.3.1
Recommended action
Update to version 2.3.1, or a newer patched version
Anti-Spam Protection – No API Key, GDPR Friendly
- Software
- plugin · fullworks-anti-spam
- Affected versions
- Start version unspecified, through 2.3.7
- Fix availability
- Fix available
- Fixed versions
- 2.3.12
Recommended action
Update to version 2.3.12, or a newer patched version
Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews
- Software
- plugin · gs-testimonial
- Affected versions
- Start version unspecified, through 3.2.8
- Fix availability
- Fix available
- Fixed versions
- 3.2.9
Recommended action
Update to version 3.2.9, or a newer patched version
Post Slider and Carousel Pro
- Software
- plugin · post-slider-and-carousel-pro
- Affected versions
- Start version unspecified, through 2.1.2
- Fix availability
- Fix available
- Fixed versions
- 2.1.3
Recommended action
Update to version 2.1.3, or a newer patched version
Restrict – membership, site, content and user access restrictions for WordPress
- Software
- plugin · restricted-content
- Affected versions
- Start version unspecified, through 2.3.0
- Fix availability
- Fix available
- Fixed versions
- 2.3.1
Recommended action
Update to version 2.3.1, or a newer patched version
TrueAna – True Analytics Dashboard
- Software
- plugin · ga-for-wp
- Affected versions
- Start version unspecified, through 2.6.0
- Fix availability
- Fix available
- Fixed versions
- 2.10.0
Recommended action
Update to version 2.10.0, or a newer patched version
Share This Image
- Software
- plugin · share-this-image
- Affected versions
- Start version unspecified, through 2.07
- Fix availability
- Fix available
- Fixed versions
- 2.08
Recommended action
Update to version 2.08, or a newer patched version
Easy Social Feed – All In One Social Feed Plugin for WordPress
- Software
- plugin · easy-facebook-likebox
- Affected versions
- Start version unspecified, through 6.6.5
- Fix availability
- Fix available
- Fixed versions
- 6.6.6
Recommended action
Update to version 6.6.6, or a newer patched version
Auto Post Cleaner
- Software
- plugin · delete-old-posts-programmatically
- Affected versions
- Start version unspecified, through 3.9.6
- Fix availability
- Fix available
- Fixed versions
- 3.9.7
Recommended action
Update to version 3.9.7, or a newer patched version
Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player
- Software
- plugin · radio-player
- Affected versions
- Start version unspecified, through 2.0.82
- Fix availability
- Fix available
- Fixed versions
- 2.0.83
Recommended action
Update to version 2.0.83, or a newer patched version
EleSpare – News, Magazine and Blog Addons for Elementor
- Software
- plugin · elespare
- Affected versions
- Start version unspecified, through 3.3.2
- Fix availability
- Fix available
- Fixed versions
- 3.3.4
Recommended action
Update to version 3.3.4, or a newer patched version
Logo Showcase – Responsive Logo Carousel, Logo Slider & Logo Grid
- Software
- plugin · logo-showcase-with-slick-slider
- Affected versions
- Start version unspecified, through 3.2.7
- Fix availability
- Fix available
- Fixed versions
- 3.2.9
Recommended action
Update to version 3.2.9, or a newer patched version
SimpLy Gallery
- Software
- plugin · simply-gallery-block
- Affected versions
- Start version unspecified, through 3.2.4.4
- Fix availability
- Fix available
- Fixed versions
- 3.2.4.5
Recommended action
Update to version 3.2.4.5, or a newer patched version
Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO)
- Software
- plugin · bulk-image-alt-text-with-yoast
- Affected versions
- Start version unspecified, through 2.1.0
- Fix availability
- Fix available
- Fixed versions
- 2.2.0
Recommended action
Update to version 2.2.0, or a newer patched version
Spotlight Social Feeds – Block, Shortcode, and Widget
- Software
- plugin · spotlight-social-photo-feeds
- Affected versions
- Start version unspecified, through 1.7.0
- Fix availability
- Fix available
- Fixed versions
- 1.7.1
Recommended action
Update to version 1.7.1, or a newer patched version
WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms
- Software
- plugin · cf7-styler
- Affected versions
- Start version unspecified, through 1.7.0
- Fix availability
- Fix available
- Fixed versions
- 1.7.1
Recommended action
Update to version 1.7.1, or a newer patched version
Radio Station by netmix® – Manage and play your Show Schedule in WordPress!
- Software
- plugin · radio-station
- Affected versions
- Start version unspecified, through 2.5.9
- Fix availability
- Fix available
- Fixed versions
- 2.5.17
Recommended action
Update to version 2.5.17, or a newer patched version
WP Mobile Menu – The Mobile-Friendly Responsive Menu
- Software
- plugin · mobile-menu
- Affected versions
- Start version unspecified, through 2.8.6
- Fix availability
- Fix available
- Fixed versions
- 2.8.7
Recommended action
Update to version 2.8.7, or a newer patched version
Message Filter for Contact Form 7
- Software
- plugin · cf7-message-filter
- Affected versions
- Start version unspecified, through 1.6.3.2
- Fix availability
- Fix available
- Fixed versions
- 1.6.3.3
Recommended action
Update to version 1.6.3.3, or a newer patched version
Shortcodes Ultimate – Content Elements
- Software
- plugin · shortcodes-ultimate
- Affected versions
- Start version unspecified, through 7.3.3
- Fix availability
- Fix available
- Fixed versions
- 7.3.4
Recommended action
Update to version 7.3.4, or a newer patched version
Code Manager
- Software
- plugin · code-manager
- Affected versions
- Start version unspecified, through 1.0.40
- Fix availability
- Fix available
- Fixed versions
- 1.0.41
Recommended action
Update to version 1.0.41, or a newer patched version
Kikote – Location Picker at Checkout & Google Address AutoFill Plugin for WooCommerce
- Software
- plugin · map-location-picker-at-checkout-for-woocommerce
- Affected versions
- Start version unspecified, through 1.10.6
- Fix availability
- Fix available
- Fixed versions
- 1.10.8
Recommended action
Update to version 1.10.8, or a newer patched version
Ocean Extra
- Software
- plugin · ocean-extra
- Affected versions
- Start version unspecified, through 2.4.2
- Fix availability
- Fix available
- Fixed versions
- 2.4.4
Recommended action
Update to version 2.4.4, or a newer patched version
Team Members Showcase
- Software
- plugin · wps-team
- Affected versions
- Start version unspecified, through 3.3.0
- Fix availability
- Fix available
- Fixed versions
- 3.3.2
Recommended action
Update to version 3.3.2, or a newer patched version
Post List Designer – Category Post, Recent Post, Post List
- Software
- plugin · post-list-designer
- Affected versions
- Start version unspecified, through 3.3.7
- Fix availability
- Fix available
- Fixed versions
- 3.3.8
Recommended action
Update to version 3.3.8, or a newer patched version
Bulk Edit Posts and Products in Spreadsheet
- Software
- plugin · wp-sheet-editor-bulk-spreadsheet-editor-for-posts-and-pages
- Affected versions
- Start version unspecified, through 2.25.16
- Fix availability
- Fix available
- Fixed versions
- 2.25.19
Recommended action
Update to version 2.25.19, or a newer patched version
Automatic Internal Links for SEO by Pagup
- Software
- plugin · automatic-internal-links-for-seo
- Affected versions
- Start version unspecified, through 2.0.0
- Fix availability
- Fix available
- Fixed versions
- 2.0.1
Recommended action
Update to version 2.0.1, or a newer patched version
Geo Mashup
- Software
- plugin · geo-mashup
- Affected versions
- Start version unspecified, through 1.13.15
- Fix availability
- Fix available
- Fixed versions
- 1.13.16
Recommended action
Update to version 1.13.16, or a newer patched version
Role Based Pricing for Woo by Meow Crew
- Software
- plugin · role-and-customer-based-pricing-for-woocommerce
- Affected versions
- Start version unspecified, through 1.6.0
- Fix availability
- Fix available
- Fixed versions
- 1.6.1
Recommended action
Update to version 1.6.1, or a newer patched version
TreePress – Easy Family Trees & Ancestor Profiles
- Software
- plugin · treepress
- Affected versions
- Start version unspecified, through 3.0.6
- Fix availability
- Fix available
- Fixed versions
- 3.0.7
Recommended action
Update to version 3.0.7, or a newer patched version
WP Coupons and Deals – WordPress Coupon Plugin
- Software
- plugin · wp-coupons-and-deals
- Affected versions
- Start version unspecified, through 3.2.2
- Fix availability
- Fix available
- Fixed versions
- 3.2.3
Recommended action
Update to version 3.2.3, or a newer patched version
RevivePress – Keep your Old Content Evergreen
- Software
- plugin · wp-auto-republish
- Affected versions
- Start version unspecified, through 1.5.8
- Fix availability
- No fix reported
- Fixed versions
- No fixed version specified
Recommended action
No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
WP fail2ban – Advanced Security
- Software
- plugin · wp-fail2ban
- Affected versions
- Start version unspecified, through 5.3.4
- Fix availability
- Fix available
- Fixed versions
- 5.4.0
Recommended action
Update to version 5.4.0, or a newer patched version
WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars
- Software
- plugin · wp-post-author
- Affected versions
- Start version unspecified, through 3.8.3
- Fix availability
- Fix available
- Fixed versions
- 3.8.4
Recommended action
Update to version 3.8.4, or a newer patched version
Forumax – AI Powered Advanced Community Forum Plugin
- Software
- plugin · bbp-core
- Affected versions
- Start version unspecified, through 1.2.7
- Fix availability
- Fix available
- Fixed versions
- 1.2.9
Recommended action
Update to version 1.2.9, or a newer patched version
Lightbox & Modal Popup WordPress Plugin – FooBox
- Software
- plugin · foobox-image-lightbox
- Affected versions
- Start version unspecified, through 2.7.33
- Fix availability
- Fix available
- Fixed versions
- 2.7.34
Recommended action
Update to version 2.7.34, or a newer patched version
WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps
- Software
- plugin · wp-data-access
- Affected versions
- Start version unspecified, through 5.5.31
- Fix availability
- Fix available
- Fixed versions
- 5.5.32
Recommended action
Update to version 5.5.32, or a newer patched version
StoreCustomizer – A plugin to Customize all WooCommerce Pages
- Software
- plugin · woocustomizer
- Affected versions
- Start version unspecified, through 2.5.9
- Fix availability
- Fix available
- Fixed versions
- 2.6.0
Recommended action
Update to version 2.6.0, or a newer patched version
TopNewsWp – Display Tikcer News, RSS Feed Widget and Many More
- Software
- plugin · wp-top-news
- Affected versions
- Start version unspecified, through 2.4.1
- Fix availability
- Fix available
- Fixed versions
- 2.4.3
Recommended action
Update to version 2.4.3, or a newer patched version
Webheadcoder Multi-Step Forms for Contact Form 7
- Software
- plugin · contact-form-7-multi-step-module
- Affected versions
- Start version unspecified, through 4.4.1
- Fix availability
- Fix available
- Fixed versions
- 4.4.2
Recommended action
Update to version 4.4.2, or a newer patched version
Easy Age Verify
- Software
- plugin · easy-age-verify
- Affected versions
- Start version unspecified, through 1.8.5
- Fix availability
- Fix available
- Fixed versions
- 1.9
Recommended action
Update to version 1.9, or a newer patched version
Disable Payment Methods based on cart conditions for WooCommerce
- Software
- plugin · woo-conditional-payment-gateways
- Affected versions
- Start version unspecified, through 1.16.3
- Fix availability
- Fix available
- Fixed versions
- 1.16.4
Recommended action
Update to version 1.16.4, or a newer patched version
Meta Field Block – Display Custom Fields for ACF, Meta Box and More
- Software
- plugin · display-a-meta-field-as-block
- Affected versions
- Start version unspecified, through 1.3.3
- Fix availability
- Fix available
- Fixed versions
- 1.3.4
Recommended action
Update to version 1.3.4, or a newer patched version
Premmerce Permalink Manager for WooCommerce
- Software
- plugin · woo-permalink-manager
- Affected versions
- Start version unspecified, through 2.3.11
- Fix availability
- Fix available
- Fixed versions
- 2.3.12
Recommended action
Update to version 2.3.12, or a newer patched version
Go Fetch Jobs (for WP Job Manager)
- Software
- plugin · go-fetch-jobs-wp-job-manager
- Affected versions
- Start version unspecified, through 1.8.4.8.1
- Fix availability
- Fix available
- Fixed versions
- 1.8.4.9.1
Recommended action
Update to version 1.8.4.9.1, or a newer patched version
Post to Google My Business (Google Business Profile)
- Software
- plugin · post-to-google-my-business
- Affected versions
- Start version unspecified, through 3.1.28
- Fix availability
- Fix available
- Fixed versions
- 3.2.2
Recommended action
Update to version 3.2.2, or a newer patched version
WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto
- Software
- plugin · tripetto
- Affected versions
- Start version unspecified, through 8.0.7
- Fix availability
- Fix available
- Fixed versions
- 8.0.8
Recommended action
Update to version 8.0.8, or a newer patched version
XT Quick View for WooCommerce
- Software
- plugin · xt-woo-quick-view-lite
- Affected versions
- Start version unspecified, through 2.1.5
- Fix availability
- No fix reported
- Fixed versions
- No fixed version specified
Recommended action
No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Primary Addon for Elementor
- Software
- plugin · primary-addon-for-elementor
- Affected versions
- Start version unspecified, through 1.6.0
- Fix availability
- Fix available
- Fixed versions
- 1.6.5
Recommended action
Update to version 1.6.5, or a newer patched version
bBlocks – Essential Gutenberg Blocks & Patterns Collection
- Software
- plugin · b-blocks
- Affected versions
- Start version unspecified, through 1.9.8
- Fix availability
- Fix available
- Fixed versions
- 2.0.19
Recommended action
Update to version 2.0.19, or a newer patched version
Payment Gateway for ACBA BANK
- Software
- plugin · wc-hkdigital-acba-gateway
- Affected versions
- Start version unspecified, through 1.2.6
- Fix availability
- No fix reported
- Fixed versions
- No fixed version specified
Recommended action
No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Auto-Install Free SSL – Generate & Install Free SSL Certificates
- Software
- plugin · auto-install-free-ssl
- Affected versions
- Start version unspecified, through 4.5.0
- Fix availability
- Fix available
- Fixed versions
- 4.5.1
Recommended action
Update to version 4.5.1, or a newer patched version
Dynamic Copyright Year
- Software
- plugin · dynamic-copyright-year
- Affected versions
- Start version unspecified, through 1.0.4
- Fix availability
- Fix available
- Fixed versions
- 1.1
Recommended action
Update to version 1.1, or a newer patched version
Text To Speech TTS Accessibility
- Software
- plugin · text-to-audio
- Affected versions
- Start version unspecified, through 1.7.34
- Fix availability
- Fix available
- Fixed versions
- 1.8.12
Recommended action
Update to version 1.8.12, or a newer patched version
Display Eventbrite Events
- Software
- plugin · widget-for-eventbrite-api
- Affected versions
- Start version unspecified, through 6.1.10
- Fix availability
- Fix available
- Fixed versions
- 6.1.11
Recommended action
Update to version 6.1.11, or a newer patched version
XT Floating Cart for WooCommerce
- Software
- plugin · woo-floating-cart-lite
- Affected versions
- Start version unspecified, through 2.8.4
- Fix availability
- No fix reported
- Fixed versions
- No fixed version specified
Recommended action
No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Pay For Post with WooCommerce
- Software
- plugin · woocommerce-pay-per-post
- Affected versions
- Start version unspecified, through 3.1.26
- Fix availability
- Fix available
- Fixed versions
- 3.1.28
Recommended action
Update to version 3.1.28, or a newer patched version
AWCA – The Great Analytics Insights for Your eStore
- Software
- plugin · advance-wc-analytics
- Affected versions
- Start version unspecified, through 3.12.0
- Fix availability
- Fix available
- Fixed versions
- 3.16.0
Recommended action
Update to version 3.16.0, or a newer patched version
Internal Link Juicer: SEO Auto Linker for WordPress
- Software
- plugin · internal-links
- Affected versions
- Start version unspecified, through 2.24.6
- Fix availability
- Fix available
- Fixed versions
- 2.25.2
Recommended action
Update to version 2.25.2, or a newer patched version
WP Encryption: SSL, HTTPS & Free SSL
- Software
- plugin · wp-letsencrypt-ssl
- Affected versions
- Start version unspecified, through 7.7.0
- Fix availability
- Fix available
- Fixed versions
- 7.7.3
Recommended action
Update to version 7.7.3, or a newer patched version
Inavii Social Feed – Live Social Proof Gallery
- Software
- plugin · inavii-social-feed-for-elementor
- Affected versions
- Start version unspecified, through 2.7.0
- Fix availability
- Fix available
- Fixed versions
- 2.7.7
Recommended action
Update to version 2.7.7, or a newer patched version
Premmerce Product Filter for WooCommerce
- Software
- plugin · premmerce-woocommerce-product-filter
- Affected versions
- Start version unspecified, through 3.7.3
- Fix availability
- No fix reported
- Fixed versions
- No fixed version specified
Recommended action
No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider
- Software
- plugin · post-slider-and-carousel
- Affected versions
- Start version unspecified, through 3.2.8
- Fix availability
- Fix available
- Fixed versions
- 3.2.9
Recommended action
Update to version 3.2.9, or a newer patched version
Image Alt Text Manager – Bulk & Dynamic Alt Tags For image SEO Optimization + AI
- Software
- plugin · alt-manager
- Affected versions
- Start version unspecified, through 1.6.3
- Fix availability
- Fix available
- Fixed versions
- 1.6.6
Recommended action
Update to version 1.6.6, or a newer patched version
Mapster WP Maps
- Software
- plugin · mapster-wp-maps
- Affected versions
- Start version unspecified, through 1.9.0
- Fix availability
- Fix available
- Fixed versions
- 1.21.0
Recommended action
Update to version 1.21.0, or a newer patched version
Embedder for Google Reviews
- Software
- plugin · embedder-for-google-reviews
- Affected versions
- Start version unspecified, through 1.6.6
- Fix availability
- Fix available
- Fixed versions
- 1.7.5
Recommended action
Update to version 1.7.5, or a newer patched version
Restaurant & Cafe Addon for Elementor
- Software
- plugin · restaurant-cafe-addon-for-elementor
- Affected versions
- Start version unspecified, through 1.5.8
- Fix availability
- Fix available
- Fixed versions
- 1.6.1
Recommended action
Update to version 1.6.1, or a newer patched version
Further references (1)
Data sources and licences
Copyright 2012-2026 Defiant Inc.
Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.
Read licence termsCopyright 1999-2026 The MITRE Corporation
CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.
Read licence termsSource: Wordfence
Need help fixing this issue?
Get help checking your site, applying an available update and resolving any problems after updating.
Get help with this issueQuestions about this vulnerability
How do I check which product and version this report affects?
This report covers more than one product. Choose your plugin, theme or WordPress core in the version checker, then enter its installed version. Each product has its own affected ranges and fix details in the report above.
Which update should I install?
Find your exact product in the report and read its fixed versions and recommended action. Fix details for one product do not apply to every product covered by this advisory. Follow the linked source when no fixed version is specified.
Does an affected version mean my website has been hacked?
An affected version means the installed release matches a vulnerability described in this report. It does not show whether anyone has exploited it on your website. The checker compares version numbers with stored reports; it does not inspect your website.
Does a version outside these ranges mean my website is secure?
A version outside the reported ranges is not listed as affected by this particular issue. Other vulnerabilities, missing information or a previous compromise still need separate checks. Review other reports for your product and keep your website maintained.
Other reports for the same product
These reports cover at least one of the same plugins, themes or WordPress core. Check each report’s affected versions separately.
- Ocean Extra <= 2.6.0 - Unauthenticated Arbitrary Shortcode Execution via 'oceanwp_library' Shortcode TemplateUpdated 15 Oct 2026
- WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps < 5.5.84 - Unauthenticated Information ExposureUpdated 14 Oct 2026
- WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps < 5.5.77 - Missing AuthorizationUpdated 14 Oct 2026
- WP Encryption – One Click SSL / HTTPS & Free SSL Certificate, HTTPS Redirect, Security < 7.8.8.2 - Missing AuthorizationUpdated 14 Oct 2026
- Books Gallery – Book Showcase, Library & Affiliate Plugin <= 4.8.4 - Authenticated (Contributor+) Stored Cross-Site ScriptingUpdated 14 Oct 2026