Freemius <= 2.10.1 — Reflected DOM-Based Cross-Site Scripting via url Parameter

Ivory Search – WordPress Search Plugin add-search-to-menu

1. Affected≤ 5.5.8
2. Patched in5.5.9

Update to 5.5.9 or newer.

You are affected if you run ≤ 5.5.8. Version 5.5.9 and later are not affected by this issue.

Unlimited Elements for Elementor unlimited-elements-for-elementor

1. Affected≤ 1.5.140
2. Patched in1.5.141

Update to 1.5.141 or newer.

You are affected if you run ≤ 1.5.140. Version 1.5.141 and later are not affected by this issue.

Ultimeter – the Ultimate Progress and Goals Meter ultimeter

1. Affected≤ 3.0.5
2. Patched in3.0.7

Update to 3.0.7 or newer.

You are affected if you run ≤ 3.0.5. Version 3.0.7 and later are not affected by this issue.

Shortcodes Ultimate – Content Elements shortcodes-ultimate

1. Affected≤ 7.3.3
2. Patched in7.3.4

Update to 7.3.4 or newer.

You are affected if you run ≤ 7.3.3. Version 7.3.4 and later are not affected by this issue.

WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars wp-post-author

1. Affected≤ 3.8.3
2. Patched in3.8.4

Update to 3.8.4 or newer.

You are affected if you run ≤ 3.8.3. Version 3.8.4 and later are not affected by this issue.

Geo Mashup geo-mashup

1. Affected≤ 1.13.15
2. Patched in1.13.16

Update to 1.13.16 or newer.

You are affected if you run ≤ 1.13.15. Version 1.13.16 and later are not affected by this issue.

Post SMTP – Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App post-smtp

1. Affected≤ 3.0.0
2. Patched in3.1.0

Update to 3.1.0 or newer.

You are affected if you run ≤ 3.0.0. Version 3.1.0 and later are not affected by this issue.

WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps wp-data-access

1. Affected≤ 5.5.31
2. Patched in5.5.32

Update to 5.5.32 or newer.

You are affected if you run ≤ 5.5.31. Version 5.5.32 and later are not affected by this issue.

WPBITS Addons For Elementor Page Builder wpbits-addons-for-elementor

1. Affected≤ 1.7
2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.7. No fixed version has been released.

Independent Analytics – WordPress Analytics Plugin independent-analytics

1. Affected≤ 2.9.7
2. Patched in2.10.0

Update to 2.10.0 or newer.

You are affected if you run ≤ 2.9.7. Version 2.10.0 and later are not affected by this issue.

Restaurant & Cafe Addon for Elementor restaurant-cafe-addon-for-elementor

1. Affected≤ 1.5.8
2. Patched in1.6.1

Update to 1.6.1 or newer.

You are affected if you run ≤ 1.5.8. Version 1.6.1 and later are not affected by this issue.

Mapster WP Maps mapster-wp-maps

1. Affected≤ 1.9.0
2. Patched in1.21.0

Update to 1.21.0 or newer.

You are affected if you run ≤ 1.9.0. Version 1.21.0 and later are not affected by this issue.

Message Filter for Contact Form 7 cf7-message-filter

1. Affected≤ 1.6.3.2
2. Patched in1.6.3.3

Update to 1.6.3.3 or newer.

You are affected if you run ≤ 1.6.3.2. Version 1.6.3.3 and later are not affected by this issue.

FooGallery Photo Gallery : Image, Video & Masonry Galleries foogallery

1. Affected≤ 2.4.27
2. Patched in2.4.29

Update to 2.4.29 or newer.

You are affected if you run ≤ 2.4.27. Version 2.4.29 and later are not affected by this issue.

Announcement Bar, Notification Bar & Banner – Bulletin bulletin-announcements

1. Affected≤ 3.12.1
2. Patched in3.13.1

Update to 3.13.1 or newer.

You are affected if you run ≤ 3.12.1. Version 3.13.1 and later are not affected by this issue.

Open User Map – Interactive Leaflet Maps open-user-map

1. Affected≤ 1.4.0
2. Patched in1.4.1

Update to 1.4.1 or newer.

You are affected if you run ≤ 1.4.0. Version 1.4.1 and later are not affected by this issue.

Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player radio-player

1. Affected≤ 2.0.82
2. Patched in2.0.83

Update to 2.0.83 or newer.

You are affected if you run ≤ 2.0.82. Version 2.0.83 and later are not affected by this issue.

Automatic YouTube Gallery – Embed Auto-Updating YouTube Video Galleries, Feeds, Playlists & Channels automatic-youtube-gallery

1. Affected≤ 2.5.5
2. Patched in2.5.6

Update to 2.5.6 or newer.

You are affected if you run ≤ 2.5.5. Version 2.5.6 and later are not affected by this issue.

Ocean Extra ocean-extra

1. Affected≤ 2.4.2
2. Patched in2.4.4

Update to 2.4.4 or newer.

You are affected if you run ≤ 2.4.2. Version 2.4.4 and later are not affected by this issue.

Coupon Affiliates – Affiliate Plugin for WooCommerce woo-coupon-usage

1. Affected≤ 5.17.2
2. Patched in5.19.0

Update to 5.19.0 or newer.

You are affected if you run ≤ 5.17.2. Version 5.19.0 and later are not affected by this issue.

WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto tripetto

1. Affected≤ 8.0.7
2. Patched in8.0.8

Update to 8.0.8 or newer.

You are affected if you run ≤ 8.0.7. Version 8.0.8 and later are not affected by this issue.

Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO) bulk-image-alt-text-with-yoast

1. Affected≤ 2.1.0
2. Patched in2.2.0

Update to 2.2.0 or newer.

You are affected if you run ≤ 2.1.0. Version 2.2.0 and later are not affected by this issue.

StreamWeasels Twitch Integration streamweasels-twitch-integration

1. Affected≤ 1.9.2
2. Patched in1.9.3

Update to 1.9.3 or newer.

You are affected if you run ≤ 1.9.2. Version 1.9.3 and later are not affected by this issue.

File Manager for Google Drive – Integrate Google Drive integrate-google-drive

1. Affected≤ 1.4.9
2. Patched in1.5.0

Update to 1.5.0 or newer.

You are affected if you run ≤ 1.4.9. Version 1.5.0 and later are not affected by this issue.

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits master-addons

1. Affected≤ 2.0.7.2
2. Patched in2.0.7.3

Update to 2.0.7.3 or newer.

You are affected if you run ≤ 2.0.7.2. Version 2.0.7.3 and later are not affected by this issue.

EazyDocs – AI Powered Knowledge Base, Wiki, Documentation & FAQ Builder eazydocs

1. Affected≤ 2.5.7
2. Patched in2.5.9

Update to 2.5.9 or newer.

You are affected if you run ≤ 2.5.7. Version 2.5.9 and later are not affected by this issue.

bBlocks – Essential Gutenberg Blocks & Patterns Collection b-blocks

1. Affected≤ 1.9.8
2. Patched in2.0.19

Update to 2.0.19 or newer.

You are affected if you run ≤ 1.9.8. Version 2.0.19 and later are not affected by this issue.

Easy Appointment Booking & Scheduling Plugin – Webba Booking Calendar webba-booking-lite

1. Affected≤ 5.0.57
2. Patched in5.1.8

Update to 5.1.8 or newer.

You are affected if you run ≤ 5.0.57. Version 5.1.8 and later are not affected by this issue.

BlockSpare – Gutenberg Blocks, AI Content Generator & Site Builder for news, magazine, blog and business sites blockspare

1. Affected≤ 3.2.6
2. Patched in3.2.8

Update to 3.2.8 or newer.

You are affected if you run ≤ 3.2.6. Version 3.2.8 and later are not affected by this issue.

Menu Image, Icons made easy menu-image

1. Affected≤ 3.12
2. Patched in3.13

Update to 3.13 or newer.

You are affected if you run ≤ 3.12. Version 3.13 and later are not affected by this issue.

TrueAna – True Analytics Dashboard ga-for-wp

1. Affected≤ 2.6.0
2. Patched in2.10.0

Update to 2.10.0 or newer.

You are affected if you run ≤ 2.6.0. Version 2.10.0 and later are not affected by this issue.

WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms cf7-styler

1. Affected≤ 1.7.0
2. Patched in1.7.1

Update to 1.7.1 or newer.

You are affected if you run ≤ 1.7.0. Version 1.7.1 and later are not affected by this issue.

WPIDE – File Manager & Code Editor wpide

1. Affected≤ 3.5.1
2. Patched in3.5.2

Update to 3.5.2 or newer.

You are affected if you run ≤ 3.5.1. Version 3.5.2 and later are not affected by this issue.

AI Puffer – MCP Server for Claude & ChatGPT, with AI Chatbot gpt3-ai-content-generator

1. Affected≤ 1.8.99
2. Patched in2.3.17

Update to 2.3.17 or newer.

You are affected if you run ≤ 1.8.99. Version 2.3.17 and later are not affected by this issue.

Books Gallery – Book Showcase, Library & Affiliate Plugin wp-books-gallery

1. Affected≤ 4.6.8
2. Patched in4.7.6

Update to 4.7.6 or newer.

You are affected if you run ≤ 4.6.8. Version 4.7.6 and later are not affected by this issue.

Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots bp-better-messages

1. Affected≤ 2.6.7
2. Patched in2.7.0

Update to 2.7.0 or newer.

You are affected if you run ≤ 2.6.7. Version 2.7.0 and later are not affected by this issue.

URL Shortify – Simple and Easy URL Shortener url-shortify

1. Affected≤ 1.10.4
2. Patched in1.10.5.1

Update to 1.10.5.1 or newer.

You are affected if you run ≤ 1.10.4. Version 1.10.5.1 and later are not affected by this issue.

Music Player for Elementor – Audio Player & Podcast Player music-player-for-elementor

1. Affected≤ 2.4.1
2. Patched in2.4.4

Update to 2.4.4 or newer.

You are affected if you run ≤ 2.4.1. Version 2.4.4 and later are not affected by this issue.

Display Eventbrite Events widget-for-eventbrite-api

1. Affected≤ 6.1.10
2. Patched in6.1.11

Update to 6.1.11 or newer.

You are affected if you run ≤ 6.1.10. Version 6.1.11 and later are not affected by this issue.

MapGeo – Interactive Geo Maps interactive-geo-maps

1. Affected≤ 1.6.22
2. Patched in1.6.23

Update to 1.6.23 or newer.

You are affected if you run ≤ 1.6.22. Version 1.6.23 and later are not affected by this issue.

Primary Addon for Elementor primary-addon-for-elementor

1. Affected≤ 1.6.0
2. Patched in1.6.5

Update to 1.6.5 or newer.

You are affected if you run ≤ 1.6.0. Version 1.6.5 and later are not affected by this issue.

Share This Image share-this-image

1. Affected≤ 2.07
2. Patched in2.08

Update to 2.08 or newer.

You are affected if you run ≤ 2.07. Version 2.08 and later are not affected by this issue.

Events Addon for Elementor events-addon-for-elementor

1. Affected≤ 2.2.2
2. Patched in2.2.5

Update to 2.2.5 or newer.

You are affected if you run ≤ 2.2.2. Version 2.2.5 and later are not affected by this issue.

Spotlight Social Photo Feed spotlight-social-photo-feeds

1. Affected≤ 1.7.0
2. Patched in1.7.1

Update to 1.7.1 or newer.

You are affected if you run ≤ 1.7.0. Version 1.7.1 and later are not affected by this issue.

YASR – Yet Another Star Rating Plugin for WordPress yet-another-stars-rating

1. Affected≤ 3.4.12
2. Patched in3.4.15

Update to 3.4.15 or newer.

You are affected if you run ≤ 3.4.12. Version 3.4.15 and later are not affected by this issue.

Team Members Showcase wps-team

1. Affected≤ 3.3.0
2. Patched in3.3.2

Update to 3.3.2 or newer.

You are affected if you run ≤ 3.3.0. Version 3.3.2 and later are not affected by this issue.

SimpLy Gallery simply-gallery-block

1. Affected≤ 3.2.4.4
2. Patched in3.2.4.5

Update to 3.2.4.5 or newer.

You are affected if you run ≤ 3.2.4.4. Version 3.2.4.5 and later are not affected by this issue.

Meta Field Block – Display Custom Fields for ACF, Meta Box and More display-a-meta-field-as-block

1. Affected≤ 1.3.3
2. Patched in1.3.4

Update to 1.3.4 or newer.

You are affected if you run ≤ 1.3.3. Version 1.3.4 and later are not affected by this issue.

Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews gs-testimonial

1. Affected≤ 3.2.8
2. Patched in3.2.9

Update to 3.2.9 or newer.

You are affected if you run ≤ 3.2.8. Version 3.2.9 and later are not affected by this issue.

Easy Social Feed – All In One Social Feed Plugin for WordPress easy-facebook-likebox

1. Affected≤ 6.6.5
2. Patched in6.6.6

Update to 6.6.6 or newer.

You are affected if you run ≤ 6.6.5. Version 6.6.6 and later are not affected by this issue.

TablePress – Tables in WordPress made easy tablepress

1. Affected≤ 3.0.2
2. Patched in3.0.3

Update to 3.0.3 or newer.

You are affected if you run ≤ 3.0.2. Version 3.0.3 and later are not affected by this issue.

AidWP – Donation & Payment Forms (Stripe Powered) wp-stripe-donation

1. Affected≤ 3.2.6
2. Patched in3.2.9

Update to 3.2.9 or newer.

You are affected if you run ≤ 3.2.6. Version 3.2.9 and later are not affected by this issue.

Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent tablesome

1. Affected≤ 1.1.13
2. Patched in1.1.17

Update to 1.1.17 or newer.

You are affected if you run ≤ 1.1.13. Version 1.1.17 and later are not affected by this issue.

StoreCustomizer – A plugin to Customize all WooCommerce Pages woocustomizer

1. Affected≤ 2.5.9
2. Patched in2.6.0

Update to 2.6.0 or newer.

You are affected if you run ≤ 2.5.9. Version 2.6.0 and later are not affected by this issue.

WP Encryption: One Click SSL / HTTPS & Free SSL certificate, HTTPS redirect wp-letsencrypt-ssl

1. Affected≤ 7.7.0
2. Patched in7.7.3

Update to 7.7.3 or newer.

You are affected if you run ≤ 7.7.0. Version 7.7.3 and later are not affected by this issue.

Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News blog-designer-pack

1. Affected≤ 3.4.9
2. Patched in3.4.11

Update to 3.4.11 or newer.

You are affected if you run ≤ 3.4.9. Version 3.4.11 and later are not affected by this issue.

PDF Poster – Let visitors read PDF’s without leaving the page pdf-poster

1. Affected≤ 2.2.0
2. Patched in2.3.1

Update to 2.3.1 or newer.

You are affected if you run ≤ 2.2.0. Version 2.3.1 and later are not affected by this issue.

Automatic Internal Links for SEO by Pagup automatic-internal-links-for-seo

1. Affected≤ 2.0.0
2. Patched in2.0.1

Update to 2.0.1 or newer.

You are affected if you run ≤ 2.0.0. Version 2.0.1 and later are not affected by this issue.

Radio Station by netmix® – Manage and play your Show Schedule in WordPress! radio-station

1. Affected≤ 2.5.9
2. Patched in2.5.17

Update to 2.5.17 or newer.

You are affected if you run ≤ 2.5.9. Version 2.5.17 and later are not affected by this issue.

Easy Age Verify easy-age-verify

1. Affected≤ 1.8.5
2. Patched in1.9

Update to 1.9 or newer.

You are affected if you run ≤ 1.8.5. Version 1.9 and later are not affected by this issue.

Custom WooCommerce Checkout Fields Editor add-fields-to-checkout-page-woocommerce

1. Affected≤ 1.3.4
2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.3.4. No fixed version has been released.

AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization add-expires-headers

1. Affected≤ 2.9.2
2. Patched in2.10.0

Update to 2.10.0 or newer.

You are affected if you run ≤ 2.9.2. Version 2.10.0 and later are not affected by this issue.

WP Notification Bell wp-notification-bell

1. Affected≤ 1.4.2
2. Patched in1.4.3

Update to 1.4.3 or newer.

You are affected if you run ≤ 1.4.2. Version 1.4.3 and later are not affected by this issue.

Place Order Without Payment for WooCommerce wc-place-order-without-payment

1. Affected≤ 2.6.5
2. Patched in2.6.7

Update to 2.6.7 or newer.

You are affected if you run ≤ 2.6.5. Version 2.6.7 and later are not affected by this issue.

WP Page Templates custom-page-templates-by-vegacorp

1. Affected≤ 1.1.16
2. Patched in1.1.17

Update to 1.1.17 or newer.

You are affected if you run ≤ 1.1.16. Version 1.1.17 and later are not affected by this issue.

Team Members – Team Showcase, Team Slider, Grid, Table & Staff Directory gs-team-members

1. Affected≤ 2.5.8
2. Patched in2.6.1

Update to 2.6.1 or newer.

You are affected if you run ≤ 2.5.8. Version 2.6.1 and later are not affected by this issue.

Thank You Page for WooCommerce wc-thanks-redirect

1. Affected≤ 4.2.0
2. Patched in4.2.1

Update to 4.2.1 or newer.

You are affected if you run ≤ 4.2.0. Version 4.2.1 and later are not affected by this issue.

Marijuana Age Verify easy-marijuana-age-verify

1. Affected≤ 1.5.5
2. Patched in1.6

Update to 1.6 or newer.

You are affected if you run ≤ 1.5.5. Version 1.6 and later are not affected by this issue.

Five-Star Ratings Shortcode five-star-ratings-shortcode

1. Affected≤ 1.2.56
2. Patched in1.2.57

Update to 1.2.57 or newer.

You are affected if you run ≤ 1.2.56. Version 1.2.57 and later are not affected by this issue.

Advanced Classifieds & Directory Pro advanced-classifieds-and-directory-pro

1. Affected≤ 3.2.4
2. Patched in3.2.5

Update to 3.2.5 or newer.

You are affected if you run ≤ 3.2.4. Version 3.2.5 and later are not affected by this issue.

Featured Images in RSS for Mailchimp & More featured-images-for-rss-feeds

1. Affected≤ 1.6.3
2. Patched in1.6.4

Update to 1.6.4 or newer.

You are affected if you run ≤ 1.6.3. Version 1.6.4 and later are not affected by this issue.

Joli Table Of Contents – Table of Contents with Gutenberg Block & Shortcode joli-table-of-contents

1. Affected≤ 2.6.0
2. Patched in2.6.1

Update to 2.6.1 or newer.

You are affected if you run ≤ 2.6.0. Version 2.6.1 and later are not affected by this issue.

WP Meta and Date Remover wp-meta-and-date-remover

1. Affected≤ 2.3.4
2. Patched in2.3.5

Update to 2.3.5 or newer.

You are affected if you run ≤ 2.3.4. Version 2.3.5 and later are not affected by this issue.

Security Ninja – WordPress Security & Firewall security-ninja

1. Affected≤ 5.222
2. Patched in5.225

Update to 5.225 or newer.

You are affected if you run ≤ 5.222. Version 5.225 and later are not affected by this issue.

Justified Gallery justified-gallery

1. Affected≤ 1.9.0
2. Patched in1.10.0

Update to 1.10.0 or newer.

You are affected if you run ≤ 1.9.0. Version 1.10.0 and later are not affected by this issue.

Remove Add to Cart WooCommerce remove-add-to-cart-woocommerce

1. Affected≤ 1.4.7
2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.4.7. No fixed version has been released.

Knowledge Base documentation & wiki plugin – BasePress Docs basepress

1. Affected≤ 2.16.3.3
2. Patched in2.16.3.6

Update to 2.16.3.6 or newer.

You are affected if you run ≤ 2.16.3.3. Version 2.16.3.6 and later are not affected by this issue.

Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar foobar-notifications-lite

1. Affected≤ 2.1.34
2. Patched in2.1.35

Update to 2.1.35 or newer.

You are affected if you run ≤ 2.1.34. Version 2.1.35 and later are not affected by this issue.

Widgets on Pages widgets-on-pages

1. Affected≤ 1.7
2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.7. No fixed version has been released.

XT Variation Swatches for WooCommerce xt-woo-variation-swatches

1. Affected≤ 1.9.4
2. Patched in1.9.7

Update to 1.9.7 or newer.

You are affected if you run ≤ 1.9.4. Version 1.9.7 and later are not affected by this issue.

Secure Gateway for Authorize.net and WooCommerce by Pledged Plugins woo-authorize-net-gateway-aim

1. Affected≤ 6.1.13
2. Patched in6.1.14

Update to 6.1.14 or newer.

You are affected if you run ≤ 6.1.13. Version 6.1.14 and later are not affected by this issue.

Glossary glossary-by-codeat

1. Affected≤ 2.2.38
2. Patched in2.2.39

Update to 2.2.39 or newer.

You are affected if you run ≤ 2.2.38. Version 2.2.39 and later are not affected by this issue.

Anti-Spam Protection – No API Key, GDPR Friendly fullworks-anti-spam

1. Affected≤ 2.3.7
2. Patched in2.3.12

Update to 2.3.12 or newer.

You are affected if you run ≤ 2.3.7. Version 2.3.12 and later are not affected by this issue.

Restrict – membership, site, content and user access restrictions for WordPress restricted-content

1. Affected≤ 2.3.0
2. Patched in2.3.1

Update to 2.3.1 or newer.

You are affected if you run ≤ 2.3.0. Version 2.3.1 and later are not affected by this issue.

Auto Post Cleaner delete-old-posts-programmatically

1. Affected≤ 3.9.6
2. Patched in3.9.7

Update to 3.9.7 or newer.

You are affected if you run ≤ 3.9.6. Version 3.9.7 and later are not affected by this issue.

Logo Showcase – Responsive Logo Carousel, Logo Slider & Logo Grid logo-showcase-with-slick-slider

1. Affected≤ 3.2.7
2. Patched in3.2.9

Update to 3.2.9 or newer.

You are affected if you run ≤ 3.2.7. Version 3.2.9 and later are not affected by this issue.

WP Mobile Menu – The Mobile-Friendly Responsive Menu mobile-menu

1. Affected≤ 2.8.6
2. Patched in2.8.7

Update to 2.8.7 or newer.

You are affected if you run ≤ 2.8.6. Version 2.8.7 and later are not affected by this issue.

Code Manager code-manager

1. Affected≤ 1.0.40
2. Patched in1.0.41

Update to 1.0.41 or newer.

You are affected if you run ≤ 1.0.40. Version 1.0.41 and later are not affected by this issue.

Kikote – Location Picker at Checkout & Google Address AutoFill Plugin for WooCommerce map-location-picker-at-checkout-for-woocommerce

1. Affected≤ 1.10.6
2. Patched in1.10.8

Update to 1.10.8 or newer.

You are affected if you run ≤ 1.10.6. Version 1.10.8 and later are not affected by this issue.

Post List Designer – Category Post, Recent Post, Post List post-list-designer

1. Affected≤ 3.3.7
2. Patched in3.3.8

Update to 3.3.8 or newer.

You are affected if you run ≤ 3.3.7. Version 3.3.8 and later are not affected by this issue.

Bulk Edit Posts and Products in Spreadsheet wp-sheet-editor-bulk-spreadsheet-editor-for-posts-and-pages

1. Affected≤ 2.25.16
2. Patched in2.25.19

Update to 2.25.19 or newer.

You are affected if you run ≤ 2.25.16. Version 2.25.19 and later are not affected by this issue.

TreePress – Easy Family Trees & Ancestor Profiles treepress

1. Affected≤ 3.0.6
2. Patched in3.0.7

Update to 3.0.7 or newer.

You are affected if you run ≤ 3.0.6. Version 3.0.7 and later are not affected by this issue.

WP Coupons and Deals – WordPress Coupon Plugin wp-coupons-and-deals

1. Affected≤ 3.2.2
2. Patched in3.2.3

Update to 3.2.3 or newer.

You are affected if you run ≤ 3.2.2. Version 3.2.3 and later are not affected by this issue.

RevivePress – Keep your Old Content Evergreen wp-auto-republish

1. Affected≤ 1.5.8
2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.5.8. No fixed version has been released.

WP fail2ban – Advanced Security wp-fail2ban

1. Affected≤ 5.3.4
2. Patched in5.4.0

Update to 5.4.0 or newer.

You are affected if you run ≤ 5.3.4. Version 5.4.0 and later are not affected by this issue.

Lightbox & Modal Popup WordPress Plugin – FooBox foobox-image-lightbox

1. Affected≤ 2.7.33
2. Patched in2.7.34

Update to 2.7.34 or newer.

You are affected if you run ≤ 2.7.33. Version 2.7.34 and later are not affected by this issue.

WP Top News — Build a Complete News Portal in WordPress wp-top-news

1. Affected≤ 2.4.1
2. Patched in2.4.3

Update to 2.4.3 or newer.

You are affected if you run ≤ 2.4.1. Version 2.4.3 and later are not affected by this issue.

Webheadcoder Multi-Step Forms for Contact Form 7 contact-form-7-multi-step-module

1. Affected≤ 4.4.1
2. Patched in4.4.2

Update to 4.4.2 or newer.

You are affected if you run ≤ 4.4.1. Version 4.4.2 and later are not affected by this issue.

Disable Payment Methods based on cart conditions for WooCommerce woo-conditional-payment-gateways

1. Affected≤ 1.16.3
2. Patched in1.16.4

Update to 1.16.4 or newer.

You are affected if you run ≤ 1.16.3. Version 1.16.4 and later are not affected by this issue.

Premmerce Permalink Manager for WooCommerce woo-permalink-manager

1. Affected≤ 2.3.11
2. Patched in2.3.12

Update to 2.3.12 or newer.

You are affected if you run ≤ 2.3.11. Version 2.3.12 and later are not affected by this issue.

Go Fetch Jobs (for WP Job Manager) go-fetch-jobs-wp-job-manager

1. Affected≤ 1.8.4.8.1
2. Patched in1.8.4.9.1

Update to 1.8.4.9.1 or newer.

You are affected if you run ≤ 1.8.4.8.1. Version 1.8.4.9.1 and later are not affected by this issue.

Post to Google My Business (Google Business Profile) post-to-google-my-business

1. Affected≤ 3.1.28
2. Patched in3.2.2

Update to 3.2.2 or newer.

You are affected if you run ≤ 3.1.28. Version 3.2.2 and later are not affected by this issue.

XT Quick View for WooCommerce xt-woo-quick-view-lite

1. Affected≤ 2.1.5
2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 2.1.5. No fixed version has been released.

XT Floating Cart for WooCommerce woo-floating-cart-lite

1. Affected≤ 2.8.4
2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 2.8.4. No fixed version has been released.

Pay For Post with WooCommerce woocommerce-pay-per-post

1. Affected≤ 3.1.26
2. Patched in3.1.28

Update to 3.1.28 or newer.

You are affected if you run ≤ 3.1.26. Version 3.1.28 and later are not affected by this issue.

AWCA – The Great Analytics Insights for Your eStore advance-wc-analytics

1. Affected≤ 3.12.0
2. Patched in3.16.0

Update to 3.16.0 or newer.

You are affected if you run ≤ 3.12.0. Version 3.16.0 and later are not affected by this issue.

Internal Link Juicer: SEO Auto Linker for WordPress internal-links

1. Affected≤ 2.24.6
2. Patched in2.25.2

Update to 2.25.2 or newer.

You are affected if you run ≤ 2.24.6. Version 2.25.2 and later are not affected by this issue.

Premmerce Product Filter for WooCommerce premmerce-woocommerce-product-filter

1. Affected≤ 3.7.3
2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 3.7.3. No fixed version has been released.

Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider post-slider-and-carousel

1. Affected≤ 3.2.8
2. Patched in3.2.9

Update to 3.2.9 or newer.

You are affected if you run ≤ 3.2.8. Version 3.2.9 and later are not affected by this issue.

Image Alt Text Manager – Bulk & Dynamic Alt Tags For image SEO Optimization + AI alt-manager

1. Affected≤ 1.6.3
2. Patched in1.6.6

Update to 1.6.6 or newer.

You are affected if you run ≤ 1.6.3. Version 1.6.6 and later are not affected by this issue.

Embedder for Google Reviews embedder-for-google-reviews

1. Affected≤ 1.6.6
2. Patched in1.7.5

Update to 1.7.5 or newer.

You are affected if you run ≤ 1.6.6. Version 1.7.5 and later are not affected by this issue.

Send Users Email – Email Subscribers, Email Marketing Newsletter send-users-email

1. Affected≤ 1.5.10
2. Patched in1.6.2

Update to 1.6.2 or newer.

You are affected if you run ≤ 1.5.10. Version 1.6.2 and later are not affected by this issue.

Dracula Dark Mode – Accessibility, Reading Mode & Dark Mode for WordPress dracula-dark-mode

1. Affected≤ 1.2.7
2. Patched in1.2.8

Update to 1.2.8 or newer.

You are affected if you run ≤ 1.2.7. Version 1.2.8 and later are not affected by this issue.

Product Layouts for WooCommerce product-layouts

1. Affected≤ 1.3.1
2. Patched in1.3.5

Update to 1.3.5 or newer.

You are affected if you run ≤ 1.3.1. Version 1.3.5 and later are not affected by this issue.

Carousel, Recent Post Slider and Banner Slider spice-post-slider

1. Affected≤ 2.1
2. Patched in2.2

Update to 2.2 or newer.

You are affected if you run ≤ 2.1. Version 2.2 and later are not affected by this issue.

Smart phone field for Gravity Forms smart-phone-field-for-gravity-forms

1. Affected≤ 2.1.6
2. Patched in2.2.0

Update to 2.2.0 or newer.

You are affected if you run ≤ 2.1.6. Version 2.2.0 and later are not affected by this issue.

Checkout with Cash App on WooCommerce wc-cashapp

1. Affected≤ 6.0.2
2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 6.0.2. No fixed version has been released.

Goal Tracker – Custom Event Tracking for GA4 goal-tracker-ga

1. Affected≤ 1.1.5
2. Patched in1.1.6

Update to 1.1.6 or newer.

You are affected if you run ≤ 1.1.5. Version 1.1.6 and later are not affected by this issue.

Role Based Pricing for Woo by Meow Crew role-and-customer-based-pricing-for-woocommerce

1. Affected≤ 1.6.0
2. Patched in1.6.1

Update to 1.6.1 or newer.

You are affected if you run ≤ 1.6.0. Version 1.6.1 and later are not affected by this issue.

EleSpare – Elementor News, Magazine & Blog Addons with Post Grid elespare

1. Affected≤ 3.3.2
2. Patched in3.3.4

Update to 3.3.4 or newer.

You are affected if you run ≤ 3.3.2. Version 3.3.4 and later are not affected by this issue.

HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player html5-audio-player

1. Affected≤ 2.2.27
2. Patched in2.5.1

Update to 2.5.1 or newer.

You are affected if you run ≤ 2.2.27. Version 2.5.1 and later are not affected by this issue.

AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o aibuddy-openai-chatgpt

1. Affected≤ 1.7.2
2. Patched in1.8.5

Update to 1.8.5 or newer.

You are affected if you run ≤ 1.7.2. Version 1.8.5 and later are not affected by this issue.

Forumax – AI Powered Advanced Community Forum Plugin bbp-core

1. Affected≤ 1.2.7
2. Patched in1.2.9

Update to 1.2.9 or newer.

You are affected if you run ≤ 1.2.7. Version 1.2.9 and later are not affected by this issue.

Custom PHP Settings custom-php-settings

1. Affected≤ 2.3.1
2. Patched in2.3.2

Update to 2.3.2 or newer.

You are affected if you run ≤ 2.3.1. Version 2.3.2 and later are not affected by this issue.

Full Screen Background fullscreen-background

1. Affected≤ 2.0.2
2. Patched in2.0.3

Update to 2.0.3 or newer.

You are affected if you run ≤ 2.0.2. Version 2.0.3 and later are not affected by this issue.

Advanced Scrollbar – Give Your Site a Sleek Branded Scrolling Feel advanced-scrollbar

1. Affected≤ 1.1.3
2. Patched in1.1.10

Update to 1.1.10 or newer.

You are affected if you run ≤ 1.1.3. Version 1.1.10 and later are not affected by this issue.

Post Slider and Carousel Pro post-slider-and-carousel-pro

1. Affected≤ 2.1.2
2. Patched in2.1.3

Update to 2.1.3 or newer.

You are affected if you run ≤ 2.1.2. Version 2.1.3 and later are not affected by this issue.

Payment Gateway for ACBA BANK wc-hkdigital-acba-gateway

1. Affected≤ 1.2.6
2. PatchedNo fix yet

No patched version available.

You are affected if you run ≤ 1.2.6. No fixed version has been released.

Auto-Install Free SSL – Generate & Install Free SSL Certificates auto-install-free-ssl

1. Affected≤ 4.5.0
2. Patched in4.5.1

Update to 4.5.1 or newer.

You are affected if you run ≤ 4.5.0. Version 4.5.1 and later are not affected by this issue.

Dynamic Copyright Year dynamic-copyright-year

1. Affected≤ 1.0.4
2. Patched in1.1

Update to 1.1 or newer.

You are affected if you run ≤ 1.0.4. Version 1.1 and later are not affected by this issue.

Text To Speech TTS Accessibility text-to-audio

1. Affected≤ 1.7.34
2. Patched in1.8.12

Update to 1.8.12 or newer.

You are affected if you run ≤ 1.7.34. Version 1.8.12 and later are not affected by this issue.

Inavii Social Feed – Live Social Proof Gallery inavii-social-feed-for-elementor

1. Affected≤ 2.7.0
2. Patched in2.7.7

Update to 2.7.7 or newer.

You are affected if you run ≤ 2.7.0. Version 2.7.7 and later are not affected by this issue.