WordPress plugin
Chartify – WordPress Chart Plugin security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 8 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High0
- Medium7
- Low0
All Chartify – WordPress Chart Plugin vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Cross-Site Request Forgery ≤3.6.3Update to 3.6.4 | CVE-2025-66529 | |
| Medium5.3 | Missing Authentication for Administrative Function ≤3.5.9Update to 3.6.0 | CVE-2025-11171 | |
| Medium4.3 | Cross-Site Request Forgery ≤3.5.3Update to 3.5.4 | CVE-2025-54673 | |
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting ≤3.1.7Update to 3.1.9 | CVE-2025-30904 | |
| Critical9.8 | Unauthenticated Local File Inclusion via source ≤2.9.5Update to 2.9.6 | CVE-2024-10571 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤2.7.6Update to 2.7.7 | CVE-2024-47347 | |
| Medium4.4 | Authenticated(Administrator+) Stored Cross-Site Scripting ≤2.0.6Update to 2.0.7 | CVE-2023-47526 | |
| Medium4.4 | Authenticated (Admin+) Stored Cross-Site Scripting ≤1.9.6Update to 1.9.7 | — |
- Medium4.3Cross-Site Request Forgery
≤3.6.3Update to 3.6.4
- Medium5.3Missing Authentication for Administrative Function
≤3.5.9Update to 3.6.0
- Medium4.3Cross-Site Request Forgery
≤3.5.3Update to 3.5.4
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤3.1.7Update to 3.1.9
- Critical9.8Unauthenticated Local File Inclusion via source
≤2.9.5Update to 2.9.6
- Medium6.1Reflected Cross-Site Scripting
≤2.7.6Update to 2.7.7
- Medium4.4Authenticated(Administrator+) Stored Cross-Site Scripting
≤2.0.6Update to 2.0.7
- Medium4.4Authenticated (Admin+) Stored Cross-Site Scripting
≤1.9.6Update to 1.9.7
Chartify – WordPress Chart Plugin: common questions
Does Chartify – WordPress Chart Plugin have known vulnerabilities?
Yes. VulnCrest Radar lists 8 known vulnerabilities in Chartify – WordPress Chart Plugin: 1 critical, 7 medium. None are known to affect version null.
How do I check which version of Chartify – WordPress Chart Plugin I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Chartify – WordPress Chart Plugin vulnerability?
CVE-2025-66529, published Dec 3, 2025: Chartify <= 3.6.3 - Cross-Site Request Forgery. Severity: Medium (CVSS 4.3).
Is any Chartify – WordPress Chart Plugin vulnerability listed in CISA KEV?
No. None of the known Chartify – WordPress Chart Plugin vulnerabilities is currently listed in the CISA KEV catalog.