CVE-2022-4974
6.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Summary
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| dashlabsltd | YASR – Yet Another Star Rating Plugin for WordPress | 0 < 2.0.2 | affected |
| nicheaddons | Events Addon for Elementor | 0 < 1.9.8 | affected |
| dots | Fraud Prevention For WooCommerce and EDD | 0 < 2.1.0 | affected |
| wpengine | Gutenberg Blocks – ACF Blocks Suite | 0 < 2.6.8 | affected |
| bouncingsprout | Ultimeter | 0 < 2.7.6 | affected |
| toddhalfpenny | Past Events Extension | 0 | affected |
| pootlepress | Pootle Pagebuilder – WordPress Page builder | 0 < 5.7.1 | affected |
| powerfulwp | Local Delivery Drivers for WooCommerce | 0 < 1.8.5 | affected |
| kkikuchi1220 | Ultimate Gutenberg – Custom Block Templates | 0 | affected |
| josevega | WP Required Taxonomies – Categories and Tags Mandatory | 0 < 1.1.8 | affected |
| pmbaldha | Featured Products First for WooCommerce – A Extension of WooCommerce (WooCommerce Addon Plugin) | 0 | affected |
| sslzen | SSL Zen — SSL Certificate Installer & HTTPS Redirects | 0 <= 4.0.4 | affected |
| wisersteps | Streak CRM For Gmail For Contact Form 7 – WordPress Plugin | 0 < 1.0.9 | affected |
| wpdevpowers | WordPress Dev Powers – ACF Color Coded Field Types Plugin | 0 | affected |
| benmoreassynt | DancePress (TRWA) | 0 <= 3.1.2 | affected |
| dots | Product Size Charts Plugin for WooCommerce | 0 < 2.2.3 | affected |
| tribalnerd | Wp My Admin Bar | 0 | affected |
| setka | A no-code page builder for beautiful performance-based content | 0 < 2.1.17 | affected |
| mikebels | LocalSEOMap | 0 | affected |
| cromer12 | Easy Prayer | 0 | affected |
| rafalosinski | AdFoxly – Ad Manager, AdSense Ads & Ads.txt | 0 <= 1.8.4 | affected |
| stevehenty | WP Get Personal | 0 | affected |
| theafricanboss/ | Checkout with Cash App on EDD | 0 | affected |
| usmanaliqureshi | Server Info | 0 | affected |
| themelocation | Custom WooCommerce Checkout Fields Editor | 0 <= 1.2.6 | affected |
| krsp | KRSP Frontend File Uploader | 0 | affected |
| bplugins | Panorama – 360 Virtual Tour, Panoramic image viewer and More | 0 < 1.0.8 | affected |
| janwyl | Bulk Attachment Download | 0 < 1.3.5 | affected |
| majick | AutoSave Net | 0 | affected |
| premmerce | Premmerce Wholesale Pricing for WooCommerce | 0 < 1.1.8 | affected |
| jcodex | Any Popup – Popup Forms, Optins & Ads | 0 | affected |
| theafricanboss/ | Checkout with Venmo on EDD | 0 | affected |
| dreamfox | Payment Gateway Per Product for WooCommerce | 0 < 3.1.6 | affected |
| hqtheme | HQTheme Extra | 0 | affected |
| vincoit | Vit Website Reviews | 0 | affected |
| daigo75 | EU VAT Assistant for WooCommerce | 0 < 2.0.28.220224 | affected |
| eedee | WordPress Slider Block Gutenslider | 0 < 5.7.0 | affected |
| surbma | HuCommerce | Magyar kiegészítések WooCommerce webáruházakhoz | 0 < 30.3.0 |
| lostboy7 | KVoucher | 0 | affected |
| bplugins | YT Player – Embed and Customize Video Players | 0 < 1.5.1 | affected |
| whiteshadow | Error Log Monitor | 0 < 1.7.1 | affected |
| slidedeck | SlideDeck: Responsive WordPress Slider Plugin | 0 | affected |
| premmerce | Premmerce Multi-currency for Woocommerce | 0 < 2.3.2 | affected |
| mvvapps/ | Booking Addon for WooCommerce | 0 < 4.2.0 | affected |
| wpeventpartners/ | WP Event Partners – WordPress Plugin for Event and Conference Management | 0 <= 1.2.4 | affected |
| saadiqbal | WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce | 0 < 4.2.1 | affected |
| passionatebrains | AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization | 0 < 2.6 | affected |
| majick | ForceField | 0 | affected |
| richard-b | FIT: Featured Image Toolkit | 0 | affected |
| themekraft | All in One Invite Codes | 0 < 1.0.13 | affected |
| dots | Dynamic Pricing and Discount Rules for WooCommerce | 0 < 2.2.3 | affected |
| wordplus | Better Messages – Live Chat, Chat Rooms, Real-Time Messaging & Private Messages | 0 < 1.9.9.170 | affected |
| wpt00ls | Grid & Styler For Contact Form 7 And Divi | 0 < 1.4.1 | affected |
| protectyouruploads | Protect Uploads with Login – Protect Your Uploads | 0 | affected |
| sakurapixel | Atlas – Knowledge Base | 0 | affected |
| dgwyer | Simple Sitemap – Create a Responsive HTML Sitemap | 0 < 3.5.5 | affected |
| bplugins | Super Video player – Fully Customizable Video Player with Playlist | 0 < 1.6.11 | affected |
| mhmrajib | WP Books Gallery – Build Stunning Book Showcases & Libraries in Minutes | 0 < 3.6 | affected |
| damian-gora | FiboSearch – Ajax Search for WooCommerce | 0 < 1.17.0 | affected |
| stevejburge | Tag Groups is the Advanced Way to Display Your Taxonomy Terms | 0 < 1.43.10.1 | affected |
| prasadkirpekar | WP Free SSL | 0 < 1.2.7 | affected |
| clickervolt | ClickerVolt – Affiliate Links & Click Tracking for Performance Marketers | 0 | affected |
| proteusthemes | ConsultPress Lite | 0 | affected |
| badhonrocks | Styler Mate for Contact Form 7 | 0 < 1.3.0 | affected |
| streamweasels | StreamWeasels Twitch Integration | 0 < 1.3.4 | affected |
| pagup | MOBILOOK — Mobile View & Mobile‑Friendly Test | 0 < 1.2.4 | affected |
| paulio21 | Zip Code Redirect | 0 <= 4.0.1 | affected |
| vohotv/ | Guestofy – Restaurant Reservations Plugin, Room Planer, Reservation Form | 0 | affected |
| ahmed17 | CF7 Constant Contact Fields Mapping | 0 | affected |
| stellarwp | Bookit — Booking & Appointment Calendar | 0 < 2.2.9 | affected |
| ethereumicoio | EthereumICO | 0 < 2.3.11 | affected |
| risetheme | RT Easy Builder – Advanced addons for Elementor | 0 <= 1.4 | affected |
| saadiqbal | WP Contact Slider – Contact Form Slider Widget | 0 < 2.4.5 | affected |
| ivan_paulin | Country Based Payments for WooCommerce | 0 < 1.4.1 | affected |
| wpchill | Filr – Secure document library | 0 < 1.2.1 | affected |
| nicheaddons | Elasta | 0 < 1.0.8 | affected |
| interactivegeomaps | MapGeo – Interactive Geo Maps | 0 < 1.5.4 | affected |
| galoover | WordPress Animation Plugin – Animated Everything | 0 | affected |
| wpdever | WP Notification Bell | 0 < 1.3.13 | affected |
| melapress | Activity Log For MainWP | 0 < 1.7.1 | affected |
| oceas | Connected Sermons | 0 | affected |
| josevega | Bulk Edit and Create User Profiles – WP Sheet Editor | 0 < 1.5.13 | affected |
| milukove/ | Кнопка ЮMoney | 0 | affected |
| kartikparmar/ | Bulk WooCommerce Category Creator | 0 | affected |
| alphabposervice | Easy Math Captcha for CF7 | 0 | affected |
| litonice13 | Master Accordion ( Former WP Awesome FAQ Plugin ) | 0 < 4.1.8 | affected |
| wpdive | Better Addons for Elementor | 0 < 1.3.1 | affected |
| livemesh | Livemesh Addons by Elementor | 0 < 7.1.4 | affected |
| nitin247 | Place Order Without Payment for WooCommerce | 0 < 2.2 | affected |
| boriscolombier/ | STEWoo – Super Transactional Emails for WooCommerce | 0 < 1.2.4 | affected |
| marcqueralt | DeMomentSomTres Address | 0 | affected |
| johnc1979 | Out of stock display for woocommerce | 0 | affected |
| ultimateblocks | Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor | 0 < 2.4.13 | affected |
| pagup | Bulk Auto Image Title Attribute (Image Title tag) optimizer (Image SEO) | 0 < 1.2.3 | affected |
| princeahmed | WP Radio – Worldwide Online Radio Stations Directory for WordPress | 0 < 3.1.4 | affected |
| blackandwhitedigital | BookPress – For Book Authors | 0 < 1.2.3 | affected |
| wpchill | Qyrr – simply and modern QR-Code creation | 0 < 0.8 | affected |
| wpeka-club | WordPress Directory Plugin For Business Listings – WP Local Plus | 0 < 1.4.5 | affected |
| equalizedigital | Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance | 0 < 1.2.8 | affected |
| therealwebdisrupt | Funnelmentals | 0 | affected |
| blockspare | BlockSpare — News, Magazine and Blog Addons for (Gutenberg) Block Editor | 0 < 2.0.1 | affected |
| nasirahmed | Forms to Zapier, Integromat, IFTTT, Workato, Automate.io, elastic.io, Built.io, APIANT, Webhook | 0 < 1.1.9 | affected |
| mojofywp | Product Carousel For WooCommerce – WoorouSell | 0 < 1.0.9 | affected |
| pagup | Better Robots.txt – AI-Ready Crawl Control & Bot Governance | 0 < 1.4.4 | affected |
| gfirem | GFireM Fields | 0 | affected |
| elliotvs | Coupon Affiliates – Affiliate Plugin for WooCommerce | 0 < 4.16.4 | affected |
| dipcode | WP Post Block | 0 | affected |
| attest | LMS Plugin – eLearning, Online Courses by Attest | 0 | affected |
| shabti | Frontend Admin by DynamiApps | 0 < 3.3.33 | affected |
| ibenic | Simple Giveaways – Grow your business, email lists and traffic with contests | 0 < 2.42.1 | affected |
| wpt00ls | Masonry Gallery & Posts For Divi (WP Tools) | 0 < 3.1.2 | affected |
| gfirem | GFireM Action After | 0 | affected |
| bandido | Ukrposhta | 0 < 1.6.18 | affected |
| annastaa | annasta Filters for WooCommerce | 0 < 1.5.0 | affected |
| tprintyedisonave | WP Lead Stream | 0 | affected |
| stellarwp | The Events Calendar | 0 < 5.14.0.4 | affected |
| johnc1979 | Focus on Reviews for WooCommerce | 0 | affected |
| pmbaldha | Email Tracker | 0 <= 5.3.8 | affected |
| wpt00ls | Block Styler For Gravity Forms | 0 <= 6.1.0 | affected |
| josevega | WP Page Templates | 0 < 1.1.13 | affected |
| ggwicz | Product Customer List for WooCommerce | 0 < 3.0.0 | affected |
| wpmoose | WP Moose | 0 < 1.0.1 | affected |
| samdani | Team Members – A WordPress Team Plugin with Gallery, Grid, Carousel, Slider, Table, List, and More | 0 < 1.1.0 | affected |
| jwebsol | Floating Social Share Icons and Social Share buttons – Next Previous Post Links – FL | 0 < 3.6.0 | affected |
| co2ok | South Pole: Climate action now | 0 < 1.0.2.0 | affected |
| jwind | LittleBot Invoices | 0 | affected |
| akdevs | Genealogical Tree – Family Tree & Ancestry for WordPress | 0 <= 2.1.5 | affected |
| plugins360 | Automatic YouTube Gallery | 0 < 1.6.5 | affected |
| nitin247 | Thank You Page for WooCommerce | 0 < 3.1 | affected |
| 5starplugins | Marijuana Age Verify | 0 < 1.3.1 | affected |
| skshaikat | WooCommerce upcoming Products | 0 | affected |
| shabti | Frontend Admin – Add and edit posts, pages, users and more all from the frontend | 0 < 3.3.33 | affected |
| matthias-reuter | SV Tracking Manager | 0 < 1.8.02 | affected |
| saadiqbal | WP Easy Pay – Payment and Donation form Builder for Square | 0 < 4.0.2 | affected |
| flexithemes | WordPress SEO Checklist | 0 | affected |
| wgauge | wGauge – Free Version | 0 | affected |
| bdthemes | Prime Slider – Addons for Elementor | 0 < 2.7.0 | affected |
| themekraft | Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) | 0 < 2.6.3 | affected |
| wpt00ls | WP Tools Divi Product Carousel | 0 < 1.5.0 | affected |
| aharonyan | Guest posting / Frontend Posting / Front Editor – WP Front User Submit | 0 < 3.4.1 | affected |
| woodyhayday | Social Gallery Lite | 0 | affected |
| bfintal | Stackable – Page Builder Gutenberg Blocks | 0 < 3.1.5 | affected |
| seezee | Five-Star Ratings Shortcode | 0 < 1.2.39 | affected |
| wpkube | CAPTCHA 4WP – Antispam CAPTCHA solution for WordPress | 0 < 7.0.5 | affected |
| premmerce | Premmerce Wishlist for WooCommerce | 0 < 1.1.8 | affected |
| wordpresschef | Salon Booking System – Free Version | 0 < 7.6.3 | affected |
| surbma | Surbma | GDPR Proof Cookie Consent & Notice Bar | 0 < 17.5.3 |
| dots | Advanced Menu Manager Pro – Built for Content-heavy WordPress Sites to Add, Filter, Lock, and Edit Menus Easily | 0 | affected |
| princeahmed | Live TV Player – Worldwide Live TV Channels Player for WordPress | 0 < 1.2.3 | affected |
| vanyukov | Market Exporter | 0 <= 2.0.13 | affected |
| litonice13 | WP Adminify – White Label WordPress, Admin Menu Editor, Login Customizer | 0 < 2.0.5 | affected |
| themekraft | TK Google Fonts GDPR Compliant | 0 < 2.2.1 | affected |
| starfishwp | Starfish Review Generation & Marketing for WordPress | 0 < 3.0.26 | affected |
| halmat | WP Emaily | 0 | affected |
| nicheaddons | Education Addon for Elementor | 0 < 1.2 | affected |
| matthias-reuter | SV Proven Expert | 0 < 1.8.01 | affected |
| wpeka-club | SurveyFunnel – Survey Plugin for WordPress | 0 < 1.1.3 | affected |
| pluginsware | Advanced Classifieds & Directory Pro | 0 < 1.8.8 | affected |
| smartwpress | Music Player for Elementor – Audio Player & Podcast Player | 0 < 1.5.5 | affected |
| ethereumicoio | Cryptocurrency Product for WooCommerce | 0 < 3.14.6 | affected |
| kenanfallon | WooCommerce Next Order Coupon | 0 | affected |
| themeythemes | Overlay Image Divi Module | 0 < 1.3.2 | affected |
| pmbaldha | Email Header Footer | 0 | affected |
| bplugins | Document Viewer – Embed Word, Excel, PowerPoint & PDFs Instantly | 0 < 2.2.5 | affected |
| nplugins | Price Bands for WooCommerce | 0 | affected |
| wpvibes | Addon Elements for Elementor (formerly Elementor Addon Elements) | 0 < 1.11.14 | affected |
| drosendo | Smart Variations Images & Swatches for WooCommerce | 0 < 5.1.10 | affected |
| 5starplugins | Featured Images in RSS for Mailchimp & More | 0 < 1.5.9 | affected |
| ibenic | Simple Sponsorships | 0 | affected |
| unitecms | Unlimited Elements For Elementor | 0 < 1.5.3 | affected |
| wpjoli | Joli Table Of Contents | 0 < 1.3.9 | affected |
| getsparrow | Sparrow: Product Reviews and Ratings for WooCommerce | 0 | affected |
| zerozendesign | Multi Page Auto Advance for Gravity Forms | 0 < 4.3 | affected |
| mcurly | Generate Images (AI) – Magic Post Thumbnail | 0 < 3.3.11 | affected |
| ibenic | Live Scores for SportsPress | 0 | affected |
| dots | Hide Shipping Method For WooCommerce | 0 < 1.3.1 | affected |
| wpt00ls | Ultimate Carousel For Divi | 0 < 4.3.1 | affected |
| prasadkirpekar | WP Meta and Date Remover | 0 < 1.9.6 | affected |
| wpt00ls | Image Carousel For Divi | 0 < 1.5.0 | affected |
| dudo | Comments Not Replied To | 0 < 1.5.3 | affected |
| wisersteps | Contact Form 7 – Capsule CRM – Integration | 0 < 1.0.5 | affected |
| alexmoss | Opensea | 0 < 1.0.3 | affected |
| tranzly | WordPress Translation plugin for Post, Pages & WooCommerce products. Tranzly IO AI DeepL automatic WordPress Translator. | 0 < 1.1.1 | affected |
| alekv | Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing | 0 < 1.14.3 | affected |
| gowebsmarty | Modern Addons for Elementor Page Builder | 0 < 1.2.0 | affected |
| themesei | Viralike | 0 | affected |
| wpdevpowers | WordPress Dev Powers – Element Selector jQuery Powers Plugin | 0 | affected |
| wpmunich | WP Munich Blocks – Gutenberg Blocks for WordPress | 0 < 0.11.0 | affected |
| inputwp | Availability Datepicker – Booking Calendar for Contact Form 7 – Input WP | 0 <= 2.1 | affected |
| diviframework | Footer Plugin for Divi | 0 | affected |
| mhmrajib | AidWP – Donation & Payment Forms (Stripe Powered) | 0 < 2.9 | affected |
| saadiqbal | New User Approve | 0 < 2.1 | affected |
| gfirem | GFireM Advance Search | 0 | affected |
| giladtakoni | WPMailer – The best mail builder, No More Core for your emails support Elementor, CF7 forms etc… | 0 | affected |
| anssilaitila | Shared Files – Frontend File Upload Form & Secure File Sharing | 0 < 1.6.72 | affected |
| wpbits | WPBITS Addons For Elementor Page Builder | 0 < 1.3.2 | affected |
| prelc | Speculor | 0 | affected |
| pagup | WP Google Street View (with 360° virtual tour) & Google maps + Local SEO | 0 < 1.0.9 | affected |
| deothemes | WordPress Everse Starter Sites – Elementor Templates | 0 < 1.2.1 | affected |
| litonice13 | Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits | 0 < 1.8.5 | affected |
| versacomp | Choice Payment Gateway for WooCommerce | 0 < 2.0.5 | affected |
| maartenbelmans | Domain Mapping System | Create Microsites with Multiple Alias Domains (multisite optional) | 0 < 1.7 |
| stylingwebben | Order and Inventory Manager for WooCommerce | 0 < 1.4.3 | affected |
| ninjalibs | Ninja Libs Amazon SES | 0 | affected |
| royalnavneet | WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments | 0 < 4.3 | affected |
| webheadllc | WP-Cron Status Checker | 0 < 1.2.4 | affected |
| bilaltas | CodeKit – Custom Codes Editor | 0 < 2.3 | affected |
| fooplugins | Gallery by FooGallery | 0 < 2.1.34 | affected |
| kartikparmar | Change Price Title for WooCommerce | 0 <= 2.5 | affected |
| edgegalleryplugin | WordPress Gallery Plugin – Edge Photo Gallery | 0 | affected |
| gloriousthemes | Glorious Services & Support | 0 | affected |
| alphabposervice | Easy Newsletter Signups | 0 < 1.0.4 | affected |
| mikewire_rocksolid | Announcement & Notification Banner – Bulletin | 0 < 3.1.0 | affected |
| dam6pl | Advanced Database Replacer | 0 | affected |
| tribalnerd | Multisite Robots.txt Manager | 0 | affected |
| irkanu | Simple Social Page Widget & Shortcode | 0 | affected |
| josevega | Product Country Restrictions for WooCommerce – Country Catalogs | 0 < 1.13.0 | affected |
| shamim51 | Front End PM | 0 < 11.3.4 | affected |
| divisumo | Ultimate Divi Modules Suite – Divi Sumo Lite | 0 | affected |
| xplodedthemes | XT Points & Rewards for WooCommerce | 0 < 1.4.3 | affected |
| themelocation | Widgets for WooCommerce Products on Elementor | 0 < 1.0.9 | affected |
| popeating | Delivery for WooCommerce | 0 | affected |
| mohsinoffline | NotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce | 0 < 1.3.7 | affected |
| cleverplugins | Security Ninja – WordPress Security & Firewall | 0 < 5.135 | affected |
| xyulex | TinyMCE Annotate | 0 | affected |
| damian-gora | Justified Gallery | 0 < 1.5.1 | affected |
| mberding | Book BuyBack Prices | 0 | affected |
| daniyalahmedk | Fuse Social Floating Sidebar | 0 < 5.4.3 | affected |
| wphrmanager | WP-HR Manager: The Human Resources Plugin for WordPress | 0 < 3.0.3 | affected |
| coderpress | Emails Blacklist for Everest Forms | 0 < 1.0.4 | affected |
| plugins360 | All-in-One Video Gallery | 0 < 2.5.4 | affected |
| oloyede-jamiu | Woo Admin Product Notes | 0 | affected |
| themelocation | Remove Add to Cart WooCommerce | 0 < 1.4.3 | affected |
| theafricanboss | Checkout with Zelle on Woocommerce | 0 < 2.0 | affected |
| wpt00ls | Divi Gravity Forms (WP Tools) | 0 < 6.6.3 | affected |
| deothemes | Everse | 0 < 1.8.6 | affected |
| commercepundit | Run time Image resizing | 0 | affected |
| wp-making | Rest Routes – Custom Endpoints for WordPress REST API | 0 < 4.24.0 | affected |
| olezhyk5 | Widget for Contact form 7 | 0 | affected |
| pagup | Add Pinterest conversion tags for Pinterest Ads + Site verification | 0 < 1.2.3 | affected |
| javmah | WPGSI: Spreadsheet Integration | 0 < 3.6.1 | affected |
| majick | WP BugBot | 0 | affected |
| princeahmed | File Manager for Google Drive – Integrate Google Drive | 0 < 1.1.0 | affected |
| deothemes | Nokke | 0 < 1.0.11 | affected |
| josevega | Customers Table for WooCommerce: View, Search, Bulk Editor | 0 < 1.0.8 | affected |
| closemarketing/ | Sync eCommerce NEO | 0 | affected |
| wpcohort | Preloader for Divi | 0 | affected |
| tobias_conrad/ | Get Better Reviews for WooCommerce | 0 <= 3.0.6 | affected |
| codesavory | Knowledge Base documentation & wiki plugin – BasePress Docs | 0 < 2.15.14 | affected |
| webba-agency | Easy Appointment Booking & Scheduling System – Webba Booking Calendar | 0 < 4.2.18 | affected |
| salttechno | Shuban | 0 | affected |
| pmbaldha/ | ACF for WooCommerce Product | 0 < 1.8 | affected |
| johnc1979 | Scheduled Notification Bar | 0 | affected |
| bplugins | 3D Viewer – Display Interactive 3D Models | 0 < 1.2.7 | affected |
| samuelsilvapt | Fullscreen Menu | 0 <= 2.2.7 | affected |
| wpchill | Gallery PhotoBlocks | 0 < 1.2.6 | affected |
| themeisle | Redirection for Contact Form 7 | 0 < 2.5.0 | affected |
| marcqueralt | DeMomentSomTres Grid Archive | 0 | affected |
| seancarrico | Inbound Brew | 0 | affected |
| muhammad-rehman | WP Photo Effects | 0 < 1.2.1 | affected |
| danish-ali | WPOptin – AI-Powered Top Bars, PopUps & Lead Generation | 0 <= 1.2.3 | affected |
| dots | Extra Fees for WooCommerce | 0 < 3.8.2 | affected |
| ldninjas/ | Reset Course Progress For LearnDash | 0 | affected |
| princeahmed | Podcast Box – Best Podcasting Plugin for WordPress | 0 < 1.0.2 | affected |
| giladtakoni | The best plugin for restrict content, support all Custom Post Types and Elementor – Password Protected | 0 | affected |
| toddhalfpenny | Turbo Widgets | 0 | affected |
| wpchill | Passster – Password Protect Pages and Content | 0 < 3.5.5.2 | affected |
| powerfulwp | Gift Message for WooCommerce | 0 < 1.6.0 | affected |
| actuaryzask | azw woocommerce file uploads | 0 | affected |
| infornweb | Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News | 0 < 2.3.1 | affected |
| jburleigh1 | Broadcast Lite | 0 < 2.0.3 | affected |
| fooplugins | Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar | 0 < 2.1.15 | affected |
| penguininitiatives | WP Author Bio | 0 | affected |
| ahmed17 | RW Divi Unite Gallery | 0 <= 1.0 | affected |
| essekia | Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent | 0 < 0.6.7 | affected |
| wpwebinfotech | Product Image Watermark for Woo | 0 < 1.0.4 | affected |
| nasirahmed | AFI – The Easiest Integration Plugin | 0 < 1.49.0 | affected |
| janthielemann | Revolution for Elementor | 0 | affected |
| wpconedev | ConeBlog – Elementor Blog Widgets | 0 < 1.4.6 | affected |
| linekal | Under Construction | 0 < 4.0 | affected |
| ekanath | WP Gratify | 0 | affected |
| cmbibby/ | Automizy Gravity Forms | 0 | affected |
| toddhalfpenny | Widgets on Pages | 0 < 1.6.0 | affected |
| ggriesser | Get feedback from visitors – WP Feedback Suite Plugin | 0 | affected |
| dejanmarkovic | WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule | 0 < 2020.1.0 | affected |
| intoxstudio | Content Aware Sidebars – Fastest Widget Area Plugin | 0 < 3.17.2 | affected |
| salttechno | Bani | 0 | affected |
| ggriesser | Fast WordPress | 0 | affected |
| sonalsinha21 | SKT Templates – 100% Free Templates for Elementor & Gutenberg | 0 < 4.3 | affected |
| frenify | Categorify – WordPress Media Library Category & File Manager | 0 < 1.0.5 | affected |
| vinod-dalvi | Ivory Search – WordPress Search Plugin | 0 < 5.4.4 | affected |
| pagup | Add Twitter Pixel for Twitter ads | 0 < 1.0.4 | affected |
| xplodedthemes | XT Variation Swatches for WooCommerce | 0 < 1.8.1 | affected |
| kaizencoders | URL Shortify – Simple and Easy URL Shortener | 0 < 1.5.11 | affected |
| mohsinoffline | Pledged Plugins Secure Gateway for Authorize.net and WooCommerce | 0 < 5.1.27 | affected |
| themekraft | BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages | 0 < 3.4.2 | affected |
| cloudliving | Affiliate Link Builder Plugin for Amazon Associates – Review Engine | 0 | affected |
| mte90 | Glossary | 0 < 2.1.8 | affected |
| bavokoservices | BAVOKO SEO Tools – All-in-One WordPress SEO | 0 | affected |
| foxmoon | Cartoon Url | 0 | affected |
| josevega | WP Frontend Admin – Display WP Admin Pages in the Frontend | 0 < 1.17.0.4 | affected |
| bouncingsprout | Block, Suspend, Report for BuddyPress | 0 < 3.3.3 | affected |
| takanakui | Menu Image, Icons made easy | 0 < 3.0.6 | affected |
| xplodedthemes | XT Ajax Add To Cart for WooCommerce | 0 < 1.0.4 | affected |
| bestpluginswordpress | One Click Login | 0 | affected |
| ethereumicoio | Ether and ERC20 tokens WooCommerce Payment Gateway | 0 < 4.12.9 | affected |
| mvvapps/ | Chat Button- Leads and Order over Chat | 0 < 1.6.1 | affected |
| dreamfox | Shipping Gateway Per Product for WooCommerce | 0 < 2.0.4 | affected |
| deothemes | Purosa | 0 < 1.1.0 | affected |
| tauhidpro | NicheTable – Responsive Comparison Table Block | 0 < 2.2.3 | affected |
| ankitmaru | Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress | 0 < 6.0.0 | affected |
| themesty | WP Sierra | 0 | affected |
| dots | Digital Goods (Checkout Field Editor) for WooCommerce Checkout | 0 < 3.6.4 | affected |
| cleverplugins | SEO Booster | 0 < 3.8.5 | affected |
| fullworks | Stop Contact Form 7 Spam & WPForms Spam – Free Protection | 0 < 1.3.2 | affected |
| khothemes | Ultimate Widgets Light | 0 | affected |
| beeneeb | Insert or Embed Articulate Content into WordPress | 0 < 4.3000000016 | affected |
| saadiqbal | APPExperts – Mobile App Builder for WordPress | WooCommerce to iOS and Android Apps | 0 < 1.2.2 |
| bdthemes | Ultimate Post Kit Addons for Elementor | 0 < 2.9.1 | affected |
| pootlepress | Caxton – Create Pro page layouts in Gutenberg | 0 < 1.30.0 | affected |
| djenh | Nitek Carousel Slider Cool Transitions | 0 | affected |
| kartechify | Extend Filter Products By Price Widget | 0 | affected |
| blockmeister | BlockMeister – Block Pattern Builder | 0 < 3.0.5 | affected |
| mantrabrain | Yatri Tools | 0 < 1.1.3 | affected |
| tickera | Restrict – membership, site, content and user access restrictions for WordPress | 0 < 2.1.9 | affected |
| ibenic | Change Prices with Time for WooCommerce | 0 | affected |
| dots | Flat Rate Shipping Method for WooCommerce | 0 < 4.0.3 | affected |
| frostbourn | Responsive Social Slider Widget | 0 | affected |
| ahmed17 | Menu Item Scheduler | 0 | affected |
| avidthemes/ | Blog Sidebar Widget | 0 | affected |
| dots | Multipurpose Gutenberg Block | 0 <= 1.7.3 | affected |
| codeies | Full Page Blog Designer | 0 | affected |
| jcodex | WooCommerce Variation Swatches for Products | 0 | affected |
| melapress | WP Activity Log | 0 < 4.4.0 | affected |
| patrickgarman | Simple Feature Requests Free – User Feedback Board | 0 < 2.2.4 | affected |
| josevega | Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor | 0 < 1.5.23 | affected |
| saadiqbal | License Manager for WooCommerce | 0 < 2.2.6 | affected |
| skyminds | Sky Login Redirect | 0 < 3.6.0 | affected |
| passionatebrains | GA4WP – Analytics Dashboard for the Website | 0 < 1.3 | affected |
| munirkamal | Divi Collage | 0 | affected |
| lukeseager | Persistent Login | 0 < 2.0.0 | affected |
| themelocation | Deals of the Day WooCommerce | 0 | affected |
| pagup | Add Linkedin insight tags for Linkedin ads | 0 < 1.2.4 | affected |
| maurolopes/ | Easy Settings for LearnDash | 0 | affected |
| mihail-barinov | Share This Image | 0 < 1.67 | affected |
| sjaved | Easy Social Feed – Social Photos Gallery and Post Feed for WordPress | 0 < 6.3.4 | affected |
| jamesparkninja | NEXUS | 0 | affected |
| deothemes | Meridia | 0 < 2.2.7 | affected |
| tobias_conrad | WebinarIgnition – Live, Automated & Evergreen Webinars for WooCommerce | 0 < 2.8.12 | affected |
| wpmagics | Delete Posts automatically | 0 < 2.1.2 | affected |
| maxsdesign | Brand | 0 | affected |
| livemesh | WPBakery Page Builder Addons by Livemesh | 0 < 2.9.2 | affected |
| wptb | WP Table Builder – Drag & Drop Table Builder | 0 < 1.3.16 | affected |
| princeahmed | Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player | 0 < 1.0.8 | affected |
| wpt00ls | Divi Content Restrictor | 0 <= 1.3.0 | affected |
| infornweb | Logo Showcase – Responsive Logo Carousel, Logo Slider & Logo Grid | 0 < 2.0.3 | affected |
| premmerce | Premmerce Variation Swatches for WooCommerce | 0 < 1.2.1 | affected |
| dotrex | PowerFolio – Portfolio & Image Gallery for Elementor | 0 < 2.1.7 | affected |
| sslatlas | SSL Atlas – Free SSL Certificate & HTTPS Redirect for WordPress | 0 < 1.1.1 | affected |
| gallerycreator | Mixed Media Gallery Blocks | 0 < 2.3.6 | affected |
| maltathemes | Easy TikTok Feed – TikTok Video, Feed & Gallery Plugin | 0 < 1.1.1 | affected |
| webmuehle | PopOverXYZ – Show Light Weight Beautiful Tool Tips On Any Text | 0 | affected |
| pagup | Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO) | 0 < 1.4.5.0 | affected |
| wpcohort/ | Number Chat | 0 | affected |
| svovaf | Rating-Widget: Star Review System | 0 < 3.1.4 | affected |
| rebelcode | Spotlight Social Feeds – Block, Shortcode, and Widget | 0 < 0.10.2 | affected |
| xyulex | Expire tags | 0 | affected |
| gowebsmarty | Go Viral – social share, social sharebar, social locker, social chat, open graph, reactions, share & view counters | 0 < 1.8.0 | affected |
| tobias_conrad | WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms | 0 < 1.4.2 | affected |
| tropicalista | Dashy – Google Analytics advanced dashboard | 0 | affected |
| premmerce | Premmerce User Roles | 0 < 1.0.11 | affected |
| tonyzeoli | Radio Station by netmix® – Manage and play your Show Schedule in WordPress! | 0 < 2.4.0.6 | affected |
| saadiqbal | Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred | 0 < 2.4.3.1 | affected |
| greenjaymedia | SEO Audit – WP Site Auditor | 0 < 1.2.5 | affected |
| hiddenpearls | WordPress Reviews by ReviewPress | 0 | affected |
| wptravelengine | WP Travel Engine – Tour Booking Plugin – Tour Operator Software | 0 < 5.3.8 | affected |
| takanakui | WP Mobile Menu – The Mobile-Friendly Responsive Menu | 0 < 2.8.2.7 | affected |
| sebet/ | WP Smart Export (Free) | 0 | affected |
| syntactics | eaSYNC Booking – Hotels, Restaurants & Car Rentals | 0 < 1.1.10 | affected |
| theeventscalendar | WP Conference Schedule | 0 < 1.1.0 | affected |
| mte90 | Strumenti Partita IVA per Woocommerce | 0 < 1.3.23 | affected |
| anfrageformular | Anfrageformular – Multi Step Drag & Drop Formular Builder – Leadgenerierung | 0 | affected |
| premmerce | Premmerce Brands for WooCommerce | 0 < 1.2.12 | affected |
| ethereumicoio | Ethereum Wallet | 0 < 4.0.9 | affected |
| limbcode | Limb Gallery | Create Beautiful Image & Video Galleries | 0 < 1.5.2 |
| peterschulznl | Code Manager | 0 < 1.0.14 | affected |
| cypressnorth | Payment Gateway for PayFabric | 0 | affected |
| commercepundit | CP Simple Newsletter | 0 | affected |
| jwind | LittleBot ACH for Stripe + Plaid | 0 | affected |
| dotrex | Aquarella Lite | 0 | affected |
| coderpress | Coinbase Commerce – Crypto Gateway for WooCommerce | 0 < 1.4.1 | affected |
| wpmoose | Villar | 0 < 1.0.8 | affected |
| uriahs-victor | Kikote – Location Picker at Checkout & Google Address AutoFill Plugin for WooCommerce | 0 < 1.4.5 | affected |
| meowcrew | Age Verification Screen for WooCommerce | 0 < 1.0.1 | affected |
| dots | Enhanced Ecommerce Google Analytics for WooCommerce | 0 < 3.6.3 | affected |
| wpjoli | Joli FAQ SEO – WordPress FAQ Plugin | 0 < 1.0.4 | affected |
| dots | Mass Pages/Posts Creator | 0 < 2.1.5 | affected |
| sebet | WP Relevant Ads | 0 | affected |
| gloriousthemes | GloriousThemes Starter Sites | 0 | affected |
| oloyede-jamiu | WP Group Promoter | 0 | affected |
| chetmac | Airpress | 0 | affected |
| wpt00ls | Schema Plugin For Divi, Gutenberg & Shortcodes | 0 <= 4.0.1 | affected |
| sindyakinsergei | Giveaways for woocommerce | 0 | affected |
| hiddenpearls | Custom Login Page Customizer | 0 < 2.1.8 | affected |
| humblethemes | LearnMore | 0 | affected |
| marcqueralt | DeMomentSomTres Media Tools Auto | 0 | affected |
| oceanwp | Ocean Extra | 0 < 1.9.4 | affected |
| properfraction | kk Star Ratings – Rate Post & Collect User Feedbacks | 0 < 5.2.9 | affected |
| stevehenty | Drop Shadow Boxes | 0 < 1.7.4 | affected |
| wpt00ls | FAQ Manager For Divi, Gutenberg Block & Shortcode | 0 < 5.4.1 | affected |
| pagup | Ads.txt & App-ads.txt Manager for WordPress | 0 < 1.1.7.0 | affected |
| saadiqbal | Quick Contact Form | 0 < 8.0.2 | affected |
| glowlogix | WP Frontend Profile | 0 < 1.2.5 | affected |
| dgwyer | SVG Flags – Beautiful Scalable Flags For All Countries! | 0 < 0.9.6 | affected |
| ldninjas/ | Drip Feed Content Extended for Learndash | 0 | affected |
| infornweb | Post List Designer – Category Post, Recent Post, Post List | 0 < 2.1.7 | affected |
| aguilerasoft | Conversion de moneda Woocommerce | 0 | affected |
| pagup | VidSEO – Video transcript embedding for WordPress & LLM | 0 < 1.2.4 | affected |
| nplugins | Before and After Product Images for WooCommerce | 0 | affected |
| renaudbod | Woocommerce Customer Reviews with Artificial Intelligence analyzis, with IBM Watson Tone Analyzer | 0 | affected |
| ivanchernyakov | LawPress – Law Firm Website Management | 0 | affected |
| dots | Shipping Method Display Style for WooCommerce | 0 < 3.7.5 | affected |
| wproyal | Royal Addons for Elementor – Addons and Templates Kit for Elementor | 0 < 1.3.33 | affected |
| modulemasters | SQL Reporting Services – SSRS Plugin for WordPress | 0 | affected |
| josevega | Bulk Edit Posts and Products in Spreadsheet | 0 < 2.24.13 | affected |
| lkoudal | Delete Duplicate Posts | 0 < 4.7.5 | affected |
| xjohnyk | WS Bootstrap | 0 | affected |
| meeplugins | Clean Social Icons | 0 | affected |
| andyabelow | Media Library File Download | 0 < 1.1 | affected |
| cadudecastroalves | WP Link Bio | 0 < 1.4.5 | affected |
| pagup | Automatic Internal Links for SEO by Pagup | 0 < 1.0.4 | affected |
| cyberhobo | Geo Mashup | 0 < 1.13.6 | affected |
| tobias_conrad | Builder for WooCommerce product reviews shortcodes – ReviewShort | 0 < 1.0.17 | affected |
| anssilaitila | Contact List – Online Staff Directory & Address Book | 0 < 2.9.50 | affected |
| saadiqbal | Post Snippets – Custom WordPress Code Snippets Customizer | 0 < 3.1.7 | affected |
| shawoninfo | SocialMark – Easy Watermark/Logo on Social Media Post Link Share Preview | 0 < 2.0.5 | affected |
| mnelson4 | Print My Blog – Print, PDF, & eBook Converter WordPress Plugin | 0 < 3.11.4 | affected |
| wpdelicious | WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) | 0 < 1.3.5 | affected |
| blackandwhitedigital | TreePress – Easy Family Trees & Ancestor Profiles | 0 < 2.0.21 | affected |
| paulio21 | Postcode Redirect | 0 <= 4.4.1 | affected |
| nitin247 | Product Author for WooCommerce | 0 < 1.0.3 | affected |
| imtiazrayhan | WP Coupons and Deals – Coupon Plugin For Affiliate Marketers | 0 < 3.1.12 | affected |
| spartac | Feedpress Generator – External RSS Frontend Customizer | 0 < 1.2.0 | affected |
| wpvibes | Form Vibes – Database Manager for Forms | 0 < 1.4.3 | affected |
| majick/ | WP AutoMedic | 0 | affected |
| dots | Banner Management, Product Slider, Product Carousel for WooCommerce | 0 < 2.2.3 | affected |
| smgteam | Duplicate Variations for Woocommerce | 0 | affected |
| thinleek | Send Prebuilt Emails | 0 | affected |
| essekia | Helpie FAQ — Accordion, Docs & Knowledge Base | 0 < 1.7.7 | affected |
| livemesh | Livemesh SiteOrigin Widgets | 0 < 2.8.3 | affected |
| livemesh | Livemesh Addons for Beaver Builder | 0 < 2.8.4 | affected |
| 9brada6 | Tabs with Recommended Posts (Widget) | 0 | affected |
| closetechnology | Connect WooCommerce Shop to ERP/CRM, Verifactu and EU/VAT Compliance | 0 < 2.1 | affected |
| infosatech | RevivePress – Keep your Old Content Evergreen | 0 < 1.3.1 | affected |
| invisnet | WP fail2ban – Advanced Security | 0 < 4.4.0.2 | affected |
| ultradevs | Ultra Elementor Addons | 0 | affected |
| wpcohort/ | RecurWP – WordPress Recurly Payment Gateway | 0 | affected |
| buttonizer | Buttonizer – Floating Menus, Sticky Buttons, & Popup Builder | 0 < 2.6.3 | affected |
| brightvesseldev | Quick Event Manager | 0 < 9.2.17 | affected |
| wpchill | Image Photo Gallery Final Tiles Grid | 0 < 3.5.5 | affected |
| fooplugins | Lightbox & Modal Popup WordPress Plugin – FooBox | 0 < 2.7.17 | affected |
| wpdevpowers | WP Dev Powers – Display Screen Dimensions to Admin Plugin | 0 | affected |
| johnc1979 | Ultimate Bulk SEO Noindex Nofollow – Speed up Penalty Recovery Ultimate SEO Booster | 0 | affected |
| peterschulznl | WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards | 0 < 5.1.4 | affected |
| kaira | StoreCustomizer – A plugin to Customize all WooCommerce Pages | 0 < 2.3.8 | affected |
| mhmrajib | TopNewsWp – Display Tikcer News, RSS Feed Widget and Many More | 0 < 2.0 | affected |
| danieliser | User Menus – Nav Menu Visibility | 0 < 1.2.9 | affected |
| webheadllc | Contact Form 7 Multi-Step Forms | 0 < 4.1.91 | affected |
| 5starplugins | Easy Age Verify | 0 < 1.6.1 | affected |
| brandonfire | Blocked in China | Check if your site is available in the Chinese mainland | 0 < 1.0.3 |
| josevega | Disable Payment Methods based on cart conditions for WooCommerce | 0 < 1.13.1.1 | affected |
| ejslondon/ | Awesome SSL | 0 | affected |
| iksstudio | Iks Menu – WordPress Category Accordion Menu & FAQs | 0 < 1.9.2 | affected |
| prelc | Purus | 0 | affected |
| janwyl | Hooked Editable Content | 0 | affected |
| mdedev | Run Contests, Raffles, and Giveaways with ContestsWP | 0 < 1.9.0 | affected |
| themeythemes | Post Carousel Divi | 0 < 1.1.2 | affected |
| anasbinmukim | MailChimp Manager | 0 | affected |
| premmerce | Premmerce Permalink Manager for WooCommerce | 0 < 2.3.5 | affected |
| ivacy | Secure IP Logins | 0 | affected |
| kylegilman | Videopack | 0 < 4.7.4 | affected |
| premmerce | Premmerce WooCommerce Customers Manager | 0 < 1.1.13 | affected |
| wpvibes | Dynific Addons for Elementor (formerly AnyWhere Elementor) | 0 < 1.2.5 | affected |
| badhonrocks | Divi Torque Lite – Divi Theme, Divi Builder & Extra Theme | 0 < 3.5.0 | affected |
| elbisnero | Events Calendar Registration | 0 | affected |
| saadiqbal | Rocket Maintenance Mode & Coming Soon Page | 0 < 4.3 | affected |
| h3technologies | WordPress WooCommerce Sync for Google Sheet | 0 | affected |
| pootlepress/ | Easy Smooth Scroll Links – Smooth Scrolling Anchor | 0 < 2.23.1 | affected |
| sj_o | Page Builder Gutenberg Blocks – Kioken Blocks | 0 | affected |
| matstars | Cryptocurrency Portfolio Tracker | 0 | affected |
| sebet | Go Fetch Jobs (for WP Job Manager) | 0 <= 1.7.3.2 | affected |
| sangaran | Quick Affiliate Store | 0 | affected |
| wpt00ls | WP Tools Divi Blog Carousel | 0 < 1.3.0 | affected |
| koen12344 | Post to Google My Business (Google Business Profile) | 0 < 3.0.10 | affected |
| nicheaddons | NicheBase | 0 < 1.2.2 | affected |
| webmuehle | WPVisitorInfo – Show Visitor Information & Conditional Data Based On That Information | 0 | affected |
| premmerce | Premmerce | 0 < 1.3.16 | affected |
| woopops | CartPops – High Converting Add To Cart Popup For WooCommerce | 0 < 1.4.17 | affected |
| scrollsequence | Scrollsequence – Cinematic Scroll Image Animation Plugin | 0 < 1.2.4 | affected |
| kaira | Elation | 0 | affected |
| thecodechime | Cuisine Palace | 0 | affected |
| dots | Product Attachment for WooCommerce | 0 < 2.1.3 | affected |
| masterblocks | Master Blocks – Gutenberg Site Builder | 0 | affected |
| moomooagency | Product Options and Price Calculation Formulas for WooCommerce – Uni CPO | 0 < 4.9.14 | affected |
| kitthemes | WordPress Coupon Plugin for Bloggers and Marketers – WP Offers | 0 < 1.1.4 | affected |
| tripetto | WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto | 0 < 5.3.1 | affected |
| mumarym1985 | Widgets on Pages and Posts | 0 | affected |
| wordplus | Better Messages – WCFM Integration | 0 | affected |
| wpgeniuz | SheetPress – Manage WordPress Meta data with Google Sheets | 0 | affected |
| olezhyk5 | Advanced Custom Fields options import/export | 0 | affected |
| fullworks | Quick Paypal Payments | 0 < 5.7.22 | affected |
| chillichalli | Tarot Card Oracle | 0 < 1.0.6 | affected |
| cloudsponge | Better Sharing | 0 <= 1.7.1 | affected |
| intoxstudio | Restrict User Access – Ultimate Membership & Content Protection | 0 < 2.2.2 | affected |
| wupo | WUPO Group Attributes for WooCommerce | 0 <= 2.0.0 | affected |
| shelob9 | Nugget by Ingot: Easy, automated and native A/B testing for everyone | 0 | affected |
| fsruslan | FeedbackScout: The easiest way to collect, prioritise, manage and track customer feedback. | 0 | affected |
| deothemes | Arendelle | 0 < 1.1.3 | affected |
| boltonstudios | Easy Zillow Reviews | 0 < 1.4.1 | affected |
| janthielemann | Battle Suit for Divi | 0 | affected |
| jkohlbach | Store Toolkit – WooCommerce Extensions, Quick Enhancements & Handy Tools | 0 < 2.3.4 | affected |
| weconnectcode | WCC SEO Keyword Research | 0 | affected |
| zeetheme | Elements for LifterLMS | 0 | affected |
| commercepundit | Custom Registration and Custom Login Forms with New Recaptcha | 0 | affected |
| saadiqbal | B2B Request a Quote | 0 < 1.4.9 | affected |
| mohammedrezq | Wadi Survey | 0 | affected |
| atakanoz | Performance Kit | 0 | affected |
| dovyp | Page Builder for Gutenberg – StarterBlocks | 0 | affected |
| gkher/ | Impexium Single Sign On | 0 | affected |
| xplodedthemes | XT Quick View for WooCommerce | 0 < 1.9.6 | affected |
| josevega | Live Drag and Drop Builder for Contact Form 7 | 0 < 1.2.4 | affected |
| nicheaddons | Primary Addon for Elementor | 0 < 1.5.2 | affected |
| jaydeep-nimavat | JDs Portfolio | 0 | affected |
| mbrown24 | TwentyFourth WP Scraper | 0 | affected |
| creativethemeshq | Blocksy Companion | 0 < 1.8.20 | affected |
| kartikparmar/ | WordPress Google Translate | 0 < 1.2 | affected |
| darell | Hasium | 0 < 1.6.5 | affected |
| marviorocha | Station Pro – Advanced Audio Streaming & Player for WordPress | 0 | affected |
| stellarwp | Event Tickets and Registration | 0 < 5.3.0.1 | affected |
| kaggdesign | Gateway for PayLate on WooCommerce | 0 <= 1.4 | affected |
| pagup | Auto SEO META keywords (META tags keywords) optimization + WooCommerce | 0 < 1.0.4 | affected |
| co2ok | ClimateClick: Climate Action for all | 0 <= 1.0.9.21 | affected |
| premmerce | Premmerce SEO for WooCommerce | 0 < 2.1.5 | affected |
| saadiqbal | Wholesale for WooCommerce | 0 < 1.6.1 | affected |
| ldninjas/ | Frontend group restriction for LearnDash | 0 | affected |
| jetixwp | Really Simple Featured Video – Featured Video Support for Posts, Pages & WooCommerce Products | 0 <= 0.5.1 | affected |
| fullworks | Display Eventbrite Events | 0 < 4.4.8 | affected |
| xplodedthemes | XT Floating Cart for WooCommerce | 0 < 2.6.3 | affected |
| wplegalpages | Cookie Banner for GDPR / CCPA – WPLP Cookie Consent | 0 < 2.1.1 | affected |
| milmor | WP SPID Italia | 0 < 2.3.5 | affected |
| bycrik | Tiered Pricing Table for WooCommerce | 0 < 2.6.1 | affected |
| codexonics | Prime Mover – Migrate WordPress Website & Backups | 0 < 1.5.0 | affected |
| vernal | Replyable – Subscribe to Comments and Reply by Email | 0 < 2.2.9 | affected |
| webmuehle | Court Reservation – Manage Your Court Bookings Online | 0 < 1.7.0 | affected |
| jurski | VO Store Locator – WP Store Locator Plugin | 0 | affected |
| fullworks | Get Directions Map | 0 < 2.15.8 | affected |
| premmerce | Premmerce Redirect Manager | 0 < 1.0.7 | affected |
| snazzythemes | SnazzyAdmin WP Admin Theme | 0 | affected |
| deothemes | Amela | 0 < 1.0.5 | affected |
| javmah | Woocommerce Customers Order History | 0 < 5.2.1 | affected |
| lynn999 | EthPress – Web3 Login | 0 < 1.5.1 | affected |
| dangub86 | Ant Admin Notices for Team | 0 | affected |
| josevega | Bulk Edit Coupons for WooCommerce – WP Sheet Editor | 0 < 1.3.28 | affected |
| mattpramschufer | Pay For Post with WooCommerce | 0 < 3.0.9 | affected |
| alex-ye | bbResolutions | 0 | affected |
| passionatebrains | AWCA – The Great Analytics Insights for Your eStore | 0 < 3.0.1 | affected |
| cliffpaulick | TK SmugMug Slideshow Shortcode | 0 | affected |
| wpchill | Lightbox – EverlightBox Gallery | 0 < 1.1.18 | affected |
| cebbi | Unakit | 0 < 1.2.4.2 | affected |
| mojofywp | WP Affiliate Disclosure | 0 < 1.2.3 | affected |
| interfacelab | Media Cloud for Bunny CDN, Amazon S3, Cloudflare R2, Google Cloud Storage, DigitalOcean and more | 0 < 4.3.1 | affected |
| rafacarvalhido | RaCar Clear Cart for WooCommerce | 0 < 1.2.3 | affected |
| litonice13 | WP Disable Sitemap | 0 < 1.0.4 | affected |
| davidanderson | Internal Link Juicer: SEO Auto Linker for WordPress | 0 < 1.3.0 | affected |
| munirkamal | Block Slider – Responsive Image Slider, Video Slider & Post Slider | 0 < 2.0.0 | affected |
| milukove | Pinblocks — Gutenberg blocks with Pinterest widgets | 0 | affected |
| ronena100 | Contact Widgets For Elementor all the contact links you need in one place | 0 | affected |
| tickera | Tickera – Sell Tickets & Manage Events | 0 < 3.4.9.2 | affected |
| bplugins | StreamCast – Live Radio Streaming Player | 0 < 2.1.4 | affected |
| johnc1979 | Sticky add to cart for Woo | 0 | affected |
| blockypage | BlockyPage – Gutenberg Based Page Builder | 0 | affected |
| maciejbak85 | Pro Broken Links Maintainer | 0 | affected |
| sorsawo | WP School Calendar | 0 < 3.6 | affected |
| listplus | ListPlus – Unlimited Listing Directory | 0 | affected |
| walkerwp | Walker Core | 0 < 1.1.8 | affected |
| patrickposner | Agy – Age verification for WooCommerce | 0 < 4.3.1 | affected |
| ggedde | Modern Designs for Gravity Forms | 0 | affected |
| rankbear | RankBear | 0 | affected |
| staxwp | STAX Header Builder | 0 < 1.3.6 | affected |
| fastaf/ | Fast Checkout for WooCommerce | 0 < 1.1.17 | affected |
| boriscolombier/ | WooCommerce PayPlug | 0 | affected |
| alphabposervice | Easy Code Snippets | 0 < 1.0.1 | affected |
| w3scloud | W3SCloud Contact Form 7 to Zoho CRM | 0 < 2.1.0 | affected |
| elementinvader | Widget Detector for Elementor | 0 < 1.2.0 | affected |
| pagup | Add Tiktok Pixel for Tiktok ads (+Woocommerce) | 0 < 1.2.2 | affected |
| gowebsmarty | WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan | 0 < 5.7.10 | affected |
| wordplus | Better Messages – Integration for WC Vendors Marketplace | 0 < 1.0.7 | affected |
| alleythemes | Alley Business Toolkit | 0 < 1.1.8 | affected |
| premmerce | Premmerce Product Filter for WooCommerce | 0 < 3.6.2 | affected |
| pippozanardo | WP Search Filter | 0 | affected |
| alphabposervice | Easy Post Views Count | 0 < 1.0.5 | affected |
| dotrex | Power Ups for Elementor | 0 < 1.2.2 | affected |
| dvizhenia | Social Kit | 0 | affected |
| pluginandplay | Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider | 0 < 2.1.2 | affected |
| mhmrajib | HM Multiple Roles | 0 < 1.6 | affected |
| multicollab | Team Collaboration & Content Workflow Plugin for WordPress Editorial Teams – Multicollab | 0 < 2.0.4 | affected |
| wpsaad | Image Alt Text Manager – Bulk & Dynamic Alt Tags For image SEO Optimization + AI | 0 < 1.5.0 | affected |
| premmerce | Premmerce Product Search for WooCommerce | 0 < 2.2.3 | affected |
| sovstack | Security Safe | 0 < 2.4.4 | affected |
| josevega | Bulk Edit Products for WooCommerce – WP Sheet Editor | 0 < 1.7.13 | affected |
| danielealessandra | Da Reactions | 0 < 3.20.2 | affected |
| wpscripts | Food Store – Online Food Delivery & Pickup | 0 < 1.4 | affected |
| thijzie | Abeta Link PunchOut | 0 <= 0.4 | affected |
| javmah | jav’s – WooCommerce and Trello integration WooTrello | 0 < 2.3.1 | affected |
| pagebuildersandwich | Page Builder Sandwich – Front End WordPress Page Builder Plugin | 0 < 4.5.5 | affected |
| switcorp | WP Sessions Time Monitoring Full Automatic | 0 < 1.0.6 | affected |
| pasyuk | WoowGallery | 0 < 1.1.9 | affected |
| upfiv | WordPress Auto SEO Plugin – Upfiv SEO Wizard | 0 | affected |
| wpsoul | Greenshift – animation and page builder blocks | 0 < 1.1.6 | affected |
| nicheaddons | Restaurant & Cafe Addon for Elementor | 0 < 1.4.6 | affected |
Weaknesses
- CWE-862: CWE-862 Missing Authorization
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
- https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=cve
- https://wpscan.com/vulnerability/6dae6dca-7474-4008-9fe5-4c62b9f12d0a
- https://freemius.com/blog/managing-security-issues-open-source-freemius-sdk-security-disclosure/
- https://wpdirectory.net/search/01FWPVWA7BC5DYGZHNSZQ9QMN5
- https://wpdirectory.net/search/01G02RSGMFS1TPT63FS16RWEYR
- https://web.archive.org/web/20220225174410/https%3A//www.pluginvulnerabilities.com/2022/02/25/our-security-review-of-wordpress-plugin-found-freemius-library-still-contained-vulnerabilities-3-years-after-major-security-incident/
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.