Wordfence Intelligence Weekly WordPress Vulnerability Report (April 1, 2024 to April 7, 2024)
Did you know we’re running a Bug Bounty Extravaganza again?
Earn over 6x our usual bounty rates, up to $10,000, for all vulnerabilities submitted through May 27th, 2024 when you opt to have Wordfence handle responsible disclosure!
Last week, there were 173 vulnerabilities disclosed in 138 WordPress Plugins and 2 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 64 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to make the internet more secure. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 15,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
|---|---|
| Patched | 157 |
| Unpatched | 16 |
Total Vulnerabilities by CVSS Severity Last Week
| Severity Rating | Number of Vulnerabilities |
|---|---|
| Low Severity | 1 |
| Medium Severity | 141 |
| High Severity | 17 |
| Critical Severity | 14 |
Total Vulnerabilities by CWE Type Last Week
| Vulnerability Type by CWE | Number of Vulnerabilities |
|---|---|
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 53 |
| Missing Authorization | 33 |
| Cross-Site Request Forgery (CSRF) | 25 |
| Information Exposure | 12 |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 8 |
| Unrestricted Upload of File with Dangerous Type | 7 |
| Authorization Bypass Through User-Controlled Key | 4 |
| Deserialization of Untrusted Data | 4 |
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 4 |
| Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 4 |
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 2 |
| Incorrect Privilege Assignment | 2 |
| URL Redirection to Untrusted Site ('Open Redirect') | 2 |
| Absolute Path Traversal | 1 |
| Exposure of Private Information ('Privacy Violation') | 1 |
| External Control of Assumed-Immutable Web Parameter | 1 |
| Guessable CAPTCHA | 1 |
| Improper Access Control | 1 |
| Improper Authorization | 1 |
| Improper Control of Generation of Code ('Code Injection') | 1 |
| Improper Neutralization of Alternate XSS Syntax | 1 |
| Improper Neutralization of Formula Elements in a CSV File | 1 |
| Incorrect Authorization | 1 |
| Information Exposure Through Log Files | 1 |
| Path Traversal: '…/…//' | 1 |
| Server-Side Request Forgery (SSRF) | 1 |
Researchers That Contributed to WordPress Security Last Week
| Researcher Name | Number of Vulnerabilities |
|---|---|
| 14 | |
| 9 | |
| 9 | |
| 8 | |
| 8 | |
| 7 | |
| 7 | |
| 7 | |
| 6 | |
| 5 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Advanced Local Pickup for WooCommerce | advanced-local-pickup-for-woocommerce |
| Advanced Order Export For WooCommerce | woo-order-export-lite |
| All-in-One Video Gallery | all-in-one-video-gallery |
| Announce from the Dashboard | announce-from-the-dashboard |
| Announcer – Sticky Message Banner, Notification Bar – Add to Top, Bottom of your Website | announcer |
| App Builder – Create Native Android & iOS Apps On The Flight | app-builder |
| AppPresser – Mobile App Framework | apppresser |
| ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup | armember-membership |
| Auto Poster | auto-poster |
| Bannerlid | bannerlid |
| Beaver Builder – WordPress Page Builder | beaver-builder-lite-version |
| Beaver Themer | beaver-themer |
| Best WordPress Gallery Plugin – FooGallery | foogallery |
| Bold Page Builder | bold-page-builder |
| BoldGrid Easy SEO – Simple and Effective SEO | boldgrid-easy-seo |
| BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin | bookingpress-appointment-booking |
| Bricksforge | bricksforge |
| Captcha by BestWebSoft – Spam Protection, Security Plugin for WordPress Forms | captcha-bws |
| Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce | wp-carousel-free |
| CGC Maintenance Mode | cgc-maintenance-mode |
| Church Admin | church-admin |
| Classified Listing – Classified ads & Business Directory Plugin | classified-listing |
| CMB2 | cmb2 |
| Colibri Page Builder | colibri-page-builder |
| Contact Form Email | contact-form-to-email |
| Contact Form, Survey & Popup Form Plugin for WordPress – ARForms Form Builder | arforms-form-builder |
| ConvertKit – Email Newsletter, Email Marketing, Subscribers and Landing Pages | convertkit |
| Creative Addons for Elementor | creative-addons-for-elementor |
| Custom post types, Custom Fields & more | custom-post-types |
| Demo My WordPress | demo-my-wordpress |
| Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) | easy-digital-downloads |
| Easy Login Styler – White Label Admin Login Page for WordPress | easy-login-styler |
| Easy Social Share Buttons for WordPress | easy-social-share-buttons3 |
| Edwiser Bridge – WordPress Moodle LMS Integration | edwiser-bridge |
| Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) | bdthemes-element-pack-lite |
| Elementor Addons, Widgets and Enhancements – Stax | stax-addons-for-elementor |
| ElementsKit Elementor addons | elementskit-lite |
| ELEX WooCommerce Dynamic Pricing and Discounts | elex-woocommerce-dynamic-pricing-and-discounts |
| Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce | email-subscribers |
| EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor | embedpress |
| EnvíaloSimple: Email Marketing y Newsletters | envialosimple-email-marketing-y-newsletters-gratis |
| Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates | essential-blocks |
| EventPrime – Events Calendar, Bookings and Tickets | eventprime-event-calendar-management |
| FancyBox for WordPress | fancybox-for-wordpress |
| FG Drupal to WordPress | fg-drupal-to-wp |
| File Manager | wp-file-manager |
| Flexible Checkout Fields for WooCommerce – WooCommerce Checkout Manager | flexible-checkout-fields |
Form to Chat App  |
form-to-chat |
| Formsite | Embed online forms to collect orders, registrations, leads, and surveys | formsite |
| Generate Child Theme | generate-child-theme |
| Genesis Blocks | genesis-blocks |
| Global Elementor Buttons | global-elementor-buttons |
| Gradient Text Widget for Elementor | gradient-text-widget-for-elementor |
| Gutenberg Blocks by Kadence Blocks – Page Builder Features | kadence-blocks |
| Happy Addons for Elementor | happy-elementor-addons |
| Image Watermark | image-watermark |
| Import XML and RSS Feeds | import-xml-feed |
| Jeg Elementor Kit | jeg-elementor-kit |
| JS Help Desk – Best Help Desk & Support Plugin | js-support-ticket |
| LayerSlider | LayerSlider |
| LearnPress Export Import – WordPress extension for LearnPress | learnpress-import-export |
| LearnPress – WordPress LMS Plugin | learnpress |
| Loan Repayment Calculator and Application Form | quick-interest-slider |
| MailMunch – Grow your Email List | mailmunch |
| Masteriyo LMS – eLearning and Online Course Builder for WordPress | learning-management-system |
| MasterStudy LMS WordPress Plugin – for Online Courses and Education | masterstudy-lms-learning-management-system |
| Media Library Folders | media-library-plus |
| MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor | metform |
| MM-email2image | mm-email2image |
| Modal Popup Box – Popup Builder, Show Offers And News in Popup | modal-popup-box |
| MP3 Audio Player for Music, Radio & Podcast by Sonaar | mp3-music-player-by-sonaar |
| Multiple Page Generator Plugin – MPG | multiple-pages-generator-by-porthas |
| MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution | dc-woocommerce-multi-vendor |
| Nudgify Social Proof, Sales Popup & FOMO – Best WordPress Social Proof Plugin | nudgify |
| Passster – Password Protect Pages and Content | content-protector |
| Photo Gallery by 10Web – Mobile-Friendly Image Gallery | photo-gallery |
| Post Grid Gutenberg Blocks and WordPress News Plugin – PostX | ultimate-post |
| Post Views Counter | post-views-counter |
| Powerkit – Supercharge your WordPress Site | powerkit |
| Premium Addons for Elementor | premium-addons-for-elementor |
| Product Designer | product-designer |
| Product Sort and Display for WooCommerce | woocommerce-product-sort-and-display |
| ProfileGrid – User Profiles, Memberships, Groups and Communities | profilegrid-user-profiles-groups-and-communities |
| RapidLoad 2.2 – Speed Monster in One Plugin | unusedcss |
| ReDi Restaurant Reservation | redi-restaurant-reservation |
| rehub-framework | rehub-framework |
| Relevanssi – A Better Search | relevanssi |
| Relevanssi – A Better Search (Pro) | relevanssi-premium |
| Responsive Lightbox & Gallery | responsive-lightbox |
| Royal Elementor Addons and Templates | royal-elementor-addons |
| RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator | feedzy-rss-feeds |
| s2Member – Best Membership Plugin for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions | s2member |
| SearchIQ – The Search Solution | searchiq |
| SecuPress Free — WordPress Security | secupress |
| Sharkdropship Dropshipping & Affiliate for for AliExpress | wooshark-aliexpress-importer |
| ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) | woolentor-addons |
| ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization | shortpixel-adaptive-images |
| Sign-up Sheets | sign-up-sheets |
| Slideshow Gallery LITE | slideshow-gallery |
| Smart Online Order for Clover | clover-online-orders |
| Spectra – WordPress Gutenberg Blocks | ultimate-addons-for-gutenberg |
| Squelch Tabs and Accordions Shortcodes | squelch-tabs-and-accordions-shortcodes |
| Subscribe To Comments Reloaded | subscribe-to-comments-reloaded |
| Sumo – Boost Conversion and Sales | sumome |
| Super Testimonials | super-testimonial |
| Sydney Toolbox | sydney-toolbox |
| Template Kit – Import | template-kit-import |
| Tracking Code Manager | tracking-code-manager |
| Transcoder | transcoder |
| Ultimate Bootstrap Elements for Elementor | ultimate-bootstrap-elements-for-elementor |
| Ultimate Maps by Supsystic | ultimate-maps-by-supsystic |
| User Activity Log | user-activity-log |
| User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor | profile-builder |
| User Spam Remover | user-spam-remover |
| Watu Quiz | watu |
| Wholesale For WooCommerce | woocommerce-wholesale-pricing |
| WooCommerce | woocommerce |
| WooCommerce Checkout Field Editor (Checkout Manager) | woo-checkout-regsiter-field-editor |
| WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels | print-invoices-packing-slip-labels-for-woocommerce |
| WordPress Backup & Migration | wp-migration-duplicator |
| WordPress Classifieds Plugin – Ad Directory & Listings by AWP Classifieds | another-wordpress-classifieds-plugin |
| WordPress Comments Import & Export | comments-import-export-woocommerce |
| WordPress Gallery Exporter – Export your NextGen, Envira and FooGallery galleries to your computer | wp-gallery-exporter |
| WordPress Gallery Plugin – NextGEN Gallery | nextgen-gallery |
| WordPress Tag and Category Manager – AI Autotagger | simple-tags |
| WordPress Tooltips | wordpress-tooltips |
| WordPress Webinar Plugin – WebinarPress | wp-webinarsystem |
| WP Directory Kit | wpdirectorykit |
| WP Import Export Lite | wp-import-export-lite |
| WP OAuth Server (OAuth Authentication) | oauth2-provider |
| WP Photo Album Plus | wp-photo-album-plus |
| WP Poll Maker – Best WordPress Poll Plugin for Voting Contest | epoll-wp-voting |
| WP Server Health Stats | wp-server-stats |
| WP Sort Order | wp-sort-order |
| WP-Members Membership Plugin | wp-members |
| WP-Stateless – Google Cloud Storage | wp-stateless |
| WPFront User Role Editor | wpfront-user-role-editor |
| WPvivid Backup for MainWP | wpvivid-backup-mainwp |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
|---|---|
| Hello Elementor | hello-elementor |
| rehub-theme | rehub-theme |
Vulnerability Details
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you should’ve already been notified if your site was affected by any of these vulnerabilities. If you’d like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
CVE-ID
CVE-2024-31355
CVE-2024-31355
Patch Status
Unpatched
Unpatched
Published
Apr 7, 2024
Apr 7, 2024
Affected Software
Slideshow Gallery LITE
Slideshow Gallery LITE
Researcher
CVE-ID
CVE-2024-31286
CVE-2024-31286
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
WP Photo Album Plus
WP Photo Album Plus
Researcher
CVE-ID
CVE-2024-31290
CVE-2024-31290
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Demo My WordPress
Demo My WordPress
Researcher
CVE-ID
CVE-2024-2879
CVE-2024-2879
Patch Status
Patched
Patched
Published
Apr 2, 2024
Apr 2, 2024
Affected Software
LayerSlider
LayerSlider
Researcher
CVE-ID
CVE-2024-24882
CVE-2024-24882
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Masteriyo LMS – eLearning and Online Course Builder for WordPress
Masteriyo LMS – eLearning and Online Course Builder for WordPress
Researcher
CVE-ID
CVE-2024-3136
CVE-2024-3136
Patch Status
Patched
Patched
Published
Apr 4, 2024
Apr 4, 2024
Affected Software
MasterStudy LMS WordPress Plugin – for Online Courses and Education
MasterStudy LMS WordPress Plugin – for Online Courses and Education
Researcher
CVE-ID
CVE-2024-31277
CVE-2024-31277
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Product Designer
Product Designer
Researcher
CVE-ID
CVE-2024-31231
CVE-2024-31231
Patch Status
Patched
Patched
Published
Apr 3, 2024
Apr 3, 2024
Affected Software
rehub-theme
rehub-theme
Researcher
Advanced Order Export For WooCommerce <= 3.4.4 – Authenticated (Shop Manager+) Remote Code Execution
9.1
CVE-ID
CVE-2024-31266
CVE-2024-31266
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Advanced Order Export For WooCommerce
Advanced Order Export For WooCommerce
Researcher
CVE-ID
CVE-2024-31345
CVE-2024-31345
Patch Status
Unpatched
Unpatched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Auto Poster
Auto Poster
Researchers
CVE-ID
CVE-2024-31260
CVE-2024-31260
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Edwiser Bridge – WordPress Moodle LMS Integration
Edwiser Bridge – WordPress Moodle LMS Integration
Researcher
CVE-ID
CVE-2024-31292
CVE-2024-31292
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Import XML and RSS Feeds
Import XML and RSS Feeds
Researcher
CVE-ID
CVE-2024-31241
CVE-2024-31241
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
LearnPress Export Import – WordPress extension for LearnPress
LearnPress Export Import – WordPress extension for LearnPress
Researcher
CVE-ID
CVE-2024-31356
CVE-2024-31356
Patch Status
Unpatched
Unpatched
Published
Apr 7, 2024
Apr 7, 2024
Affected Software
User Activity Log
User Activity Log
Researcher
CVE-ID
CVE-2024-31280
CVE-2024-31280
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Church Admin
Church Admin
Researcher
CVE-ID
CVE-2024-1315
CVE-2024-1315
Patch Status
Patched
Patched
Published
Apr 4, 2024
Apr 4, 2024
Affected Software
Classified Listing – Classified ads & Business Directory Plugin
Classified Listing – Classified ads & Business Directory Plugin
Researcher
CVE-ID
CVE-2024-31300
CVE-2024-31300
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Easy Social Share Buttons for WordPress
Easy Social Share Buttons for WordPress
Researcher
CVE-ID
CVE-2024-2125
CVE-2024-2125
Patch Status
Unpatched
Unpatched
Published
Apr 1, 2024
Apr 1, 2024
Affected Software
EnvíaloSimple: Email Marketing y Newsletters
EnvíaloSimple: Email Marketing y Newsletters
Researcher
CVE-ID
CVE-2024-2115
CVE-2024-2115
Patch Status
Patched
Patched
Published
Apr 4, 2024
Apr 4, 2024
Affected Software
LearnPress – WordPress LMS Plugin
LearnPress – WordPress LMS Plugin
Researcher
CVE-ID
CVE-2024-2008
CVE-2024-2008
Patch Status
Patched
Patched
Published
Apr 3, 2024
Apr 3, 2024
Affected Software
Modal Popup Box – Popup Builder, Show Offers And News in Popup
Modal Popup Box – Popup Builder, Show Offers And News in Popup
Researcher
CVE-ID
CVE-2024-31233
CVE-2024-31233
Patch Status
Patched
Patched
Published
Apr 3, 2024
Apr 3, 2024
Affected Software
rehub-theme
rehub-theme
Researcher
CVE-ID
CVE-2024-31234
CVE-2024-31234
Patch Status
Patched
Patched
Published
Apr 3, 2024
Apr 3, 2024
Affected Software
rehub-framework
rehub-framework
Researcher
CVE-ID
CVE-2024-3217
CVE-2024-3217
Patch Status
Patched
Patched
Published
Apr 4, 2024
Apr 4, 2024
Affected Software
WP Directory Kit
WP Directory Kit
Researcher
CVE-ID
CVE-2024-31240
CVE-2024-31240
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
WP Poll Maker – Best WordPress Poll Plugin for Voting Contest
WP Poll Maker – Best WordPress Poll Plugin for Voting Contest
Researcher
CVE-ID
CVE-2024-1792
CVE-2024-1792
Patch Status
Patched
Patched
Published
Apr 3, 2024
Apr 3, 2024
Affected Software
CMB2
CMB2
Researcher
CVE-ID
CVE-2024-3022
CVE-2024-3022
Patch Status
Patched
Patched
Published
Apr 3, 2024
Apr 3, 2024
Researcher
CVE-ID
CVE-2024-31288
CVE-2024-31288
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
RapidLoad 2.2 – Speed Monster in One Plugin
RapidLoad 2.2 – Speed Monster in One Plugin
Researcher
CVE-ID
CVE-2024-31232
CVE-2024-31232
Patch Status
Patched
Patched
Published
Apr 3, 2024
Apr 3, 2024
Affected Software
rehub-theme
rehub-theme
Researcher
CVE-ID
CVE-2024-31308
CVE-2024-31308
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
WP Import Export Lite
WP Import Export Lite
Researcher
CVE-ID
CVE-2024-1852
CVE-2024-1852
Patch Status
Patched
Patched
Published
Apr 1, 2024
Apr 1, 2024
Affected Software
WP-Members Membership Plugin
WP-Members Membership Plugin
Researcher
CVE-ID
CVE-2024-1385
CVE-2024-1385
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
WP-Stateless – Google Cloud Storage
WP-Stateless – Google Cloud Storage
Researcher
CVE-ID
CVE-2024-2654
CVE-2024-2654
Patch Status
Patched
Patched
Published
Apr 3, 2024
Apr 3, 2024
Affected Software
File Manager
File Manager
Researcher
CVE-ID
CVE-2024-31283
CVE-2024-31283
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Advanced Local Pickup for WooCommerce
Advanced Local Pickup for WooCommerce
Researcher
Beaver Themer <= 1.4.9 – Authenticated (Contributor+) Sensitive Information Exposure via shortcode
6.5
CVE-ID
CVE-2023-6695
CVE-2023-6695
Patch Status
Patched
Patched
Published
Apr 3, 2024
Apr 3, 2024
Affected Software
Beaver Themer
Beaver Themer
Researcher
Classified Listing – Classified ads & Business Directory Plugin <= 3.0.4 – Missing Authorization
6.5
CVE-ID
CVE-2024-1352
CVE-2024-1352
Patch Status
Patched
Patched
Published
Apr 4, 2024
Apr 4, 2024
Affected Software
Classified Listing – Classified ads & Business Directory Plugin
Classified Listing – Classified ads & Business Directory Plugin
Researcher
CVE-ID
CVE-2024-1289
CVE-2024-1289
Patch Status
Patched
Patched
Published
Apr 4, 2024
Apr 4, 2024
Affected Software
LearnPress – WordPress LMS Plugin
LearnPress – WordPress LMS Plugin
Researcher
CVE-ID
CVE-2024-1807
CVE-2024-1807
Patch Status
Patched
Patched
Published
Apr 1, 2024
Apr 1, 2024
Affected Software
Product Sort and Display for WooCommerce
Product Sort and Display for WooCommerce
Researcher
CVE-ID
CVE-2024-31237
CVE-2024-31237
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
CVE-ID
CVE-2024-2925
CVE-2024-2925
Patch Status
Patched
Patched
Published
Apr 1, 2024
Apr 1, 2024
Affected Software
Beaver Builder – WordPress Page Builder
Beaver Builder – WordPress Page Builder
Researcher
CVE-ID
CVE-2023-6694
CVE-2023-6694
Patch Status
Patched
Patched
Published
Apr 6, 2024
Apr 6, 2024
Affected Software
Beaver Themer
Beaver Themer
Researcher
CVE-ID
CVE-2024-3267
CVE-2024-3267
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Bold Page Builder
Bold Page Builder
Researcher
CVE-ID
CVE-2024-3266
CVE-2024-3266
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Bold Page Builder
Bold Page Builder
Researcher
CVE-ID
CVE-2024-2949
CVE-2024-2949
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
CVE-ID
CVE-2024-2839
CVE-2024-2839
Patch Status
Patched
Patched
Published
Apr 1, 2024
Apr 1, 2024
Affected Software
Colibri Page Builder
Colibri Page Builder
Researchers
Creative Addons for Elementor <= 1.5.12 – Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-ID
CVE-2024-2924
CVE-2024-2924
Patch Status
Patched
Patched
Published
Apr 1, 2024
Apr 1, 2024
Affected Software
Creative Addons for Elementor
Creative Addons for Elementor
Researcher
CVE-ID
CVE-2023-6993
CVE-2023-6993
Patch Status
Patched
Patched
Published
Apr 4, 2024
Apr 4, 2024
Affected Software
Custom post types, Custom Fields & more
Custom post types, Custom Fields & more
Researcher
CVE-ID
CVE-2024-0837
CVE-2024-0837
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows)
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows)
Researcher
CVE-ID
CVE-2024-1428
CVE-2024-1428
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows)
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows)
Researcher
CVE-ID
CVE-2024-3064
CVE-2024-3064
Patch Status
Unpatched
Unpatched
Published
Apr 4, 2024
Apr 4, 2024
Affected Software
Elementor Addons, Widgets and Enhancements – Stax
Elementor Addons, Widgets and Enhancements – Stax
Researcher
CVE-ID
CVE-2024-2803
CVE-2024-2803
Patch Status
Patched
Patched
Published
Apr 3, 2024
Apr 3, 2024
Affected Software
ElementsKit Elementor addons
ElementsKit Elementor addons
Researcher
CVE-ID
CVE-2024-3244
CVE-2024-3244
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
CVE-ID
CVE-2024-3245
CVE-2024-3245
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Essential Blocks for Gutenberg <= 4.5.3 – Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-ID
CVE-2024-31306
CVE-2024-31306
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates
Researcher
CVE-ID
CVE-2024-2081
CVE-2024-2081
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Best WordPress Gallery Plugin – FooGallery
Best WordPress Gallery Plugin – FooGallery
Researcher
CVE-ID
CVE-2024-2471
CVE-2024-2471
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Best WordPress Gallery Plugin – FooGallery
Best WordPress Gallery Plugin – FooGallery
Researcher
CVE-ID
CVE-2024-31258
CVE-2024-31258
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Form to Chat App
Form to Chat App
Researcher
CVE-ID
CVE-2024-31257
CVE-2024-31257
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Formsite | Embed online forms to collect orders, registrations, leads, and surveys
Formsite | Embed online forms to collect orders, registrations, leads, and surveys
Researcher
Genesis Blocks <= 3.1.2 – Authenticated (Contributor+) Stored Cross-Site Scripting via Block Content
6.4
CVE-ID
CVE-2024-1946
CVE-2024-1946
Patch Status
Patched
Patched
Published
Apr 1, 2024
Apr 1, 2024
Affected Software
Genesis Blocks
Genesis Blocks
Researcher
CVE-ID
CVE-2024-2327
CVE-2024-2327
Patch Status
Unpatched
Unpatched
Published
Apr 4, 2024
Apr 4, 2024
Affected Software
Global Elementor Buttons
Global Elementor Buttons
Researcher
CVE-ID
CVE-2024-31346
CVE-2024-31346
Patch Status
Unpatched
Unpatched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Gradient Text Widget for Elementor
Gradient Text Widget for Elementor
Researcher
CVE-ID
CVE-2024-2919
CVE-2024-2919
Patch Status
Patched
Patched
Published
Apr 3, 2024
Apr 3, 2024
Affected Software
Gutenberg Blocks by Kadence Blocks – Page Builder Features
Gutenberg Blocks by Kadence Blocks – Page Builder Features
Researcher
CVE-ID
CVE-2024-1498
CVE-2024-1498
Patch Status
Patched
Patched
Published
Apr 4, 2024
Apr 4, 2024
Affected Software
Happy Addons for Elementor
Happy Addons for Elementor
Researcher
CVE-ID
CVE-2024-2789
CVE-2024-2789
Patch Status
Patched
Patched
Published
Apr 4, 2024
Apr 4, 2024
Affected Software
Happy Addons for Elementor
Happy Addons for Elementor
Researcher
CVE-ID
CVE-2024-2787
CVE-2024-2787
Patch Status
Patched
Patched
Published
Apr 4, 2024
Apr 4, 2024
Affected Software
Happy Addons for Elementor
Happy Addons for Elementor
Researcher
CVE-ID
CVE-2024-2788
CVE-2024-2788
Patch Status
Patched
Patched
Published
Apr 4, 2024
Apr 4, 2024
Affected Software
Happy Addons for Elementor
Happy Addons for Elementor
Researcher
Jeg Elementor Kit <= 2.6.3 – Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box
6.4
CVE-ID
CVE-2024-1327
CVE-2024-1327
Patch Status
Patched
Patched
Published
Apr 2, 2024
Apr 2, 2024
Affected Software
Jeg Elementor Kit
Jeg Elementor Kit
Researcher
CVE-ID
CVE-2024-3162
CVE-2024-3162
Patch Status
Patched
Patched
Published
Apr 2, 2024
Apr 2, 2024
Affected Software
Jeg Elementor Kit
Jeg Elementor Kit
Researcher
MailMunch – Grow your Email List <= 3.1.6 – Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-ID
CVE-2024-31349
CVE-2024-31349
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
MailMunch – Grow your Email List
MailMunch – Grow your Email List
Researcher
CVE-ID
CVE-2024-2791
CVE-2024-2791
Patch Status
Patched
Patched
Published
Apr 1, 2024
Apr 1, 2024
Researcher
MM-email2image <= 0.2.5 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-ID
CVE-2024-3075
CVE-2024-3075
Patch Status
Unpatched
Unpatched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
MM-email2image
MM-email2image
Researcher
CVE-ID
CVE-2024-2026
CVE-2024-2026
Patch Status
Unpatched
Unpatched
Published
Apr 4, 2024
Apr 4, 2024
Affected Software
Passster – Password Protect Pages and Content
Passster – Password Protect Pages and Content
Researcher
CVE-ID
CVE-2024-2458
CVE-2024-2458
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Powerkit – Supercharge your WordPress Site
Powerkit – Supercharge your WordPress Site
Researcher
CVE-ID
CVE-2024-31236
CVE-2024-31236
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Royal Elementor Addons and Templates
Royal Elementor Addons and Templates
Researcher
CVE-ID
CVE-2023-6877
CVE-2023-6877
Patch Status
Patched
Patched
Published
Apr 6, 2024
Apr 6, 2024
Affected Software
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator
Researcher
CVE-ID
CVE-2024-2868
CVE-2024-2868
Patch Status
Patched
Patched
Published
Apr 3, 2024
Apr 3, 2024
CVE-ID
CVE-2024-2946
CVE-2024-2946
Patch Status
Patched
Patched
Published
Apr 4, 2024
Apr 4, 2024
CVE-ID
CVE-2023-6486
CVE-2023-6486
Patch Status
Patched
Patched
Published
Apr 3, 2024
Apr 3, 2024
Affected Software
Spectra – WordPress Gutenberg Blocks
Spectra – WordPress Gutenberg Blocks
Researcher
CVE-ID
CVE-2024-2499
CVE-2024-2499
Patch Status
Patched
Patched
Published
Apr 4, 2024
Apr 4, 2024
Affected Software
Squelch Tabs and Accordions Shortcodes
Squelch Tabs and Accordions Shortcodes
Researcher
CVE-ID
CVE-2024-3208
CVE-2024-3208
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Sydney Toolbox
Sydney Toolbox
Researcher
CVE-ID
CVE-2024-2334
CVE-2024-2334
Patch Status
Patched
Patched
Published
Apr 1, 2024
Apr 1, 2024
Affected Software
Template Kit – Import
Template Kit – Import
Researcher
CVE-ID
CVE-2024-31348
CVE-2024-31348
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Super Testimonials
Super Testimonials
Researcher
CVE-ID
CVE-2024-2132
CVE-2024-2132
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Ultimate Bootstrap Elements for Elementor
Ultimate Bootstrap Elements for Elementor
Researcher
CVE-ID
CVE-2024-2830
CVE-2024-2830
Patch Status
Patched
Patched
Published
Apr 3, 2024
Apr 3, 2024
Affected Software
WordPress Tag and Category Manager – AI Autotagger
WordPress Tag and Category Manager – AI Autotagger
Researcher
CVE-ID
CVE-2024-3048
CVE-2024-3048
Patch Status
Unpatched
Unpatched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Bannerlid
Bannerlid
Researcher
CVE-ID
CVE-2024-31255
CVE-2024-31255
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
ELEX WooCommerce Dynamic Pricing and Discounts
ELEX WooCommerce Dynamic Pricing and Discounts
Researcher
CVE-ID
CVE-2024-3076
CVE-2024-3076
Patch Status
Unpatched
Unpatched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
MM-email2image
MM-email2image
Researcher
CVE-ID
CVE-2024-31256
CVE-2024-31256
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
WordPress Webinar Plugin – WebinarPress
WordPress Webinar Plugin – WebinarPress
Researcher
CVE-ID
CVE-2024-3214
CVE-2024-3214
Patch Status
Patched
Patched
Published
Apr 4, 2024
Apr 4, 2024
Researcher
CVE-ID
CVE-2024-31297
CVE-2024-31297
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Wholesale For WooCommerce
Wholesale For WooCommerce
Researcher
CVE-ID
CVE-2024-2296
CVE-2024-2296
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
Researcher
CVE-ID
CVE-2024-31282
CVE-2024-31282
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
App Builder – Create Native Android & iOS Apps On The Flight
App Builder – Create Native Android & iOS Apps On The Flight
Researcher
CVE-ID
CVE-2024-2786
CVE-2024-2786
Patch Status
Patched
Patched
Published
Apr 4, 2024
Apr 4, 2024
Affected Software
Happy Addons for Elementor
Happy Addons for Elementor
Researcher
CVE-ID
CVE-2024-31253
CVE-2024-31253
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
WP OAuth Server (OAuth Authentication)
WP OAuth Server (OAuth Authentication)
Researcher
CVE-ID
Unknown
Unknown
Patch Status
Patched
Patched
Published
Apr 4, 2024
Apr 4, 2024
Affected Software
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
Researcher
CVE-ID
CVE-2024-2950
CVE-2024-2950
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
BoldGrid Easy SEO – Simple and Effective SEO
BoldGrid Easy SEO – Simple and Effective SEO
Researcher
CVE-ID
CVE-2024-31242
CVE-2024-31242
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Bricksforge
Bricksforge
Researcher
CVE-ID
CVE-2024-31243
CVE-2024-31243
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Bricksforge
Bricksforge
Researcher
CVE-ID
CVE-2024-31244
CVE-2024-31244
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Bricksforge
Bricksforge
Researcher
CVE-ID
CVE-2024-31295
CVE-2024-31295
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Researcher
CVE-ID
CVE-2024-1418
CVE-2024-1418
Patch Status
Unpatched
Unpatched
Published
Apr 3, 2024
Apr 3, 2024
Affected Software
CGC Maintenance Mode
CGC Maintenance Mode
Researcher
CVE-ID
CVE-2024-31302
CVE-2024-31302
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Contact Form Email
Contact Form Email
Researcher
CVE-ID
CVE-2024-31245
CVE-2024-31245
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Researcher
CVE-ID
CVE-2024-2302
CVE-2024-2302
Patch Status
Patched
Patched
Published
Apr 3, 2024
Apr 3, 2024
Affected Software
Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy)
Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy)
Researcher
CVE-ID
CVE-2024-31352
CVE-2024-31352
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce
Researcher
CVE-ID
CVE-2024-31274
CVE-2024-31274
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
CVE-ID
CVE-2024-31284
CVE-2024-31284
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
CVE-ID
CVE-2024-31275
CVE-2024-31275
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
EventPrime – Events Calendar, Bookings and Tickets
EventPrime – Events Calendar, Bookings and Tickets
Researcher
CVE-ID
CVE-2024-31247
CVE-2024-31247
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
FG Drupal to WordPress
FG Drupal to WordPress
Researcher
CVE-ID
CVE-2024-31273
CVE-2024-31273
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
JS Help Desk – Best Help Desk & Support Plugin
JS Help Desk – Best Help Desk & Support Plugin
Researcher
CVE-ID
CVE-2024-31343
CVE-2024-31343
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
MP3 Audio Player for Music, Radio & Podcast by Sonaar
MP3 Audio Player for Music, Radio & Podcast by Sonaar
Researcher
CVE-ID
CVE-2024-31278
CVE-2024-31278
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Premium Addons for Elementor
Premium Addons for Elementor
Researcher
CVE-ID
CVE-2024-31341
CVE-2024-31341
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
Researcher
CVE-ID
CVE-2024-3213
CVE-2024-3213
Patch Status
Patched
Patched
Published
Apr 4, 2024
Apr 4, 2024
Researcher
CVE-ID
CVE-2024-31259
CVE-2024-31259
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
SearchIQ – The Search Solution
SearchIQ – The Search Solution
Researcher
CVE-ID
CVE-2024-1732
CVE-2024-1732
Patch Status
Patched
Patched
Published
Apr 1, 2024
Apr 1, 2024
Affected Software
Sharkdropship Dropshipping & Affiliate for for AliExpress
Sharkdropship Dropshipping & Affiliate for for AliExpress
Researcher
CVE-ID
CVE-2024-31230
CVE-2024-31230
Patch Status
Patched
Patched
Published
Apr 2, 2024
Apr 2, 2024
Affected Software
ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization
ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization
Researcher
CVE-ID
CVE-2024-31353
CVE-2024-31353
Patch Status
Unpatched
Unpatched
Published
Apr 7, 2024
Apr 7, 2024
Affected Software
Slideshow Gallery LITE
Slideshow Gallery LITE
Researcher
CVE-ID
CVE-2024-31249
CVE-2024-31249
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Subscribe To Comments Reloaded
Subscribe To Comments Reloaded
Researcher
CVE-ID
CVE-2024-31298
CVE-2024-31298
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
User Spam Remover
User Spam Remover
Researcher
CVE-ID
CVE-2024-3216
CVE-2024-3216
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Researcher
CVE-ID
CVE-2024-31254
CVE-2024-31254
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
WordPress Backup & Migration
WordPress Backup & Migration
Researcher
CVE-ID
CVE-2023-5692
CVE-2023-5692
Patch Status
Patched
Patched
Published
Apr 4, 2024
Apr 4, 2024
Affected Software
WordPress
WordPress
Researcher
CVE-ID
CVE-2024-3097
CVE-2024-3097
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
WordPress Gallery Plugin – NextGEN Gallery
WordPress Gallery Plugin – NextGEN Gallery
Researcher
CVE-ID
CVE-2024-3030
CVE-2024-3030
Patch Status
Patched
Patched
Published
Apr 3, 2024
Apr 3, 2024
Affected Software
Announce from the Dashboard
Announce from the Dashboard
Researcher
CVE-ID
CVE-2024-31344
CVE-2024-31344
Patch Status
Unpatched
Unpatched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Easy Login Styler – White Label Admin Login Page for WordPress
Easy Login Styler – White Label Admin Login Page for WordPress
Researcher
CVE-ID
CVE-2024-0662
CVE-2024-0662
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
FancyBox for WordPress
FancyBox for WordPress
Researcher
CVE-ID
CVE-2024-0598
CVE-2024-0598
Patch Status
Patched
Patched
Published
Apr 2, 2024
Apr 2, 2024
Affected Software
Gutenberg Blocks by Kadence Blocks – Page Builder Features
Gutenberg Blocks by Kadence Blocks – Page Builder Features
Researcher
CVE-ID
CVE-2024-2656
CVE-2024-2656
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce
Researcher
CVE-ID
CVE-2024-1463
CVE-2024-1463
Patch Status
Patched
Patched
Published
Apr 4, 2024
Apr 4, 2024
Affected Software
LearnPress – WordPress LMS Plugin
LearnPress – WordPress LMS Plugin
Researcher
CVE-ID
Unknown
Unknown
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
WPvivid Backup for MainWP
WPvivid Backup for MainWP
Researcher
CVE-ID
CVE-2024-31248
CVE-2024-31248
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
All-in-One Video Gallery
All-in-One Video Gallery
Researcher
CVE-ID
CVE-2024-31261
CVE-2024-31261
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Announcer – Sticky Message Banner, Notification Bar – Add to Top, Bottom of your Website
Announcer – Sticky Message Banner, Notification Bar – Add to Top, Bottom of your Website
Researcher
CVE-ID
CVE-2024-31268
CVE-2024-31268
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
AppPresser – Mobile App Framework
AppPresser – Mobile App Framework
Researcher
CVE-ID
CVE-2024-31272
CVE-2024-31272
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Researcher
CVE-ID
CVE-2024-31270
CVE-2024-31270
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Researcher
CVE-ID
CVE-2024-31350
CVE-2024-31350
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Researcher
CVE-ID
CVE-2024-31296
CVE-2024-31296
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Researcher
CVE-ID
CVE-2024-31281
CVE-2024-31281
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Church Admin
Church Admin
Researcher
CVE-ID
CVE-2024-31293
CVE-2024-31293
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy)
Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy)
Researcher
CVE-ID
CVE-2024-31307
CVE-2024-31307
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Easy Social Share Buttons for WordPress
Easy Social Share Buttons for WordPress
Researcher
CVE-ID
CVE-2024-31267
CVE-2024-31267
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Flexible Checkout Fields for WooCommerce – WooCommerce Checkout Manager
Flexible Checkout Fields for WooCommerce – WooCommerce Checkout Manager
Researcher
CVE-ID
CVE-2024-31279
CVE-2024-31279
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Generate Child Theme
Generate Child Theme
Researcher
CVE-ID
CVE-2024-1387
CVE-2024-1387
Patch Status
Patched
Patched
Published
Apr 4, 2024
Apr 4, 2024
Affected Software
Happy Addons for Elementor
Happy Addons for Elementor
Researcher
CVE-ID
CVE-2024-31289
CVE-2024-31289
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Hello Elementor
Hello Elementor
Researcher
CVE-ID
CVE-2024-1994
CVE-2024-1994
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Image Watermark
Image Watermark
Researcher
CVE-ID
CVE-2024-31263
CVE-2024-31263
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Loan Repayment Calculator and Application Form
Loan Repayment Calculator and Application Form
Researcher
CVE-ID
CVE-2024-31287
CVE-2024-31287
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Media Library Folders
Media Library Folders
Researcher
CVE-ID
CVE-2024-31301
CVE-2024-31301
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Multiple Page Generator Plugin – MPG
Multiple Page Generator Plugin – MPG
Researcher
CVE-ID
CVE-2024-31239
CVE-2024-31239
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Researcher
CVE-ID
CVE-2024-31264
CVE-2024-31264
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Post Views Counter
Post Views Counter
Researcher
CVE-ID
CVE-2024-31246
CVE-2024-31246
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Post Grid Gutenberg Blocks and WordPress News Plugin – PostX
Post Grid Gutenberg Blocks and WordPress News Plugin – PostX
Researcher
CVE-ID
CVE-2024-31291
CVE-2024-31291
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
ProfileGrid – User Profiles, Memberships, Groups and Communities
ProfileGrid – User Profiles, Memberships, Groups and Communities
Researcher
CVE-ID
CVE-2024-31299
CVE-2024-31299
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
ReDi Restaurant Reservation
ReDi Restaurant Reservation
Researcher
CVE-ID
CVE-2024-31252
CVE-2024-31252
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Responsive Lightbox & Gallery
Responsive Lightbox & Gallery
Researcher
SecuPress Free — WordPress Security <= 2.2.5.1 – Cross-Site Request Forgery to Banned IP Address
4.3
CVE-ID
CVE-2024-1504
CVE-2024-1504
Patch Status
Patched
Patched
Published
Apr 1, 2024
Apr 1, 2024
Affected Software
SecuPress Free — WordPress Security
SecuPress Free — WordPress Security
Researcher
CVE-ID
CVE-2024-31303
CVE-2024-31303
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Sign-up Sheets
Sign-up Sheets
Researcher
CVE-ID
CVE-2024-31354
CVE-2024-31354
Patch Status
Unpatched
Unpatched
Published
Apr 7, 2024
Apr 7, 2024
Affected Software
Slideshow Gallery LITE
Slideshow Gallery LITE
Researcher
CVE-ID
CVE-2024-31238
CVE-2024-31238
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Smart Online Order for Clover
Smart Online Order for Clover
Researcher
CVE-ID
CVE-2024-31265
CVE-2024-31265
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Sumo – Boost Conversion and Sales
Sumo – Boost Conversion and Sales
Researcher
CVE-ID
CVE-2024-31347
CVE-2024-31347
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Tracking Code Manager
Tracking Code Manager
Researcher
CVE-ID
CVE-2024-31305
CVE-2024-31305
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Transcoder
Transcoder
Researcher
CVE-ID
CVE-2024-31271
CVE-2024-31271
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
Ultimate Maps by Supsystic
Ultimate Maps by Supsystic
Researcher
CVE-ID
CVE-2024-31304
CVE-2024-31304
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution
MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution
Researcher
CVE-ID
CVE-2024-22155
CVE-2024-22155
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
WooCommerce
WooCommerce
Researcher
CVE-ID
CVE-2024-31262
CVE-2024-31262
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
WooCommerce Checkout Field Editor (Checkout Manager)
WooCommerce Checkout Field Editor (Checkout Manager)
Researcher
CVE-ID
CVE-2024-31235
CVE-2024-31235
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
WordPress Comments Import & Export
WordPress Comments Import & Export
Researcher
CVE-ID
CVE-2024-31285
CVE-2024-31285
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
WordPress Tooltips
WordPress Tooltips
Researcher
CVE-ID
CVE-2024-31250
CVE-2024-31250
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
WP Server Health Stats
WP Server Health Stats
Researcher
CVE-ID
CVE-2024-31294
CVE-2024-31294
Patch Status
Patched
Patched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
WP Sort Order
WP Sort Order
Researcher
CVE-ID
CVE-2024-2931
CVE-2024-2931
Patch Status
Patched
Patched
Published
Apr 1, 2024
Apr 1, 2024
Affected Software
WPFront User Role Editor
WPFront User Role Editor
Researcher
CVE-ID
CVE-2024-31342
CVE-2024-31342
Patch Status
Unpatched
Unpatched
Published
Apr 5, 2024
Apr 5, 2024
Affected Software
WordPress Gallery Exporter – Export your NextGen, Envira and FooGallery galleries to your computer
WordPress Gallery Exporter – Export your NextGen, Envira and FooGallery galleries to your computer
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfence’s highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
The post Wordfence Intelligence Weekly WordPress Vulnerability Report (April 1, 2024 to April 7, 2024) appeared first on Wordfence.