WordPress plugin
Clever Fox security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium2
- Low0
All Clever Fox vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤25.2.0Update to 25.2.1 | CVE-2024-1768 | |
| Medium5.4 | Missing Authorization to arbitrary theme activation via clever-fox-activate-theme ≤25.2.0Update to 25.2.1 | CVE-2023-6876 |
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤25.2.0Update to 25.2.1
- Medium5.4Missing Authorization to arbitrary theme activation via clever-fox-activate-theme
≤25.2.0Update to 25.2.1
Clever Fox: common questions
Does Clever Fox have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Clever Fox: 2 medium. None are known to affect version null.
How do I check which version of Clever Fox I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Clever Fox vulnerability?
CVE-2024-1768, published Jun 6, 2024: Clever Fox <= 25.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any Clever Fox vulnerability listed in CISA KEV?
No. None of the known Clever Fox vulnerabilities is currently listed in the CISA KEV catalog.