WordPress plugin
Disable Auto Updates security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All Disable Auto Updates vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Cross-Site Request Forgery to Auto-update Disable ≤1.4No patch available | CVE-2024-13336 |
- Medium4.3Cross-Site Request Forgery to Auto-update Disable
≤1.4No patch available
Disable Auto Updates: common questions
Does Disable Auto Updates have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Disable Auto Updates: 1 medium. At least one is not fixed in the latest version.
How do I check which version of Disable Auto Updates I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Disable Auto Updates vulnerability?
CVE-2024-13336, published Feb 18, 2025: Disable Auto Updates <= 1.4 - Cross-Site Request Forgery to Auto-update Disable. Severity: Medium (CVSS 4.3).
Is any Disable Auto Updates vulnerability listed in CISA KEV?
No. None of the known Disable Auto Updates vulnerabilities is currently listed in the CISA KEV catalog.