WordPress plugin
WP Discord Invite security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium4
- Low0
All WP Discord Invite vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting ≤2.5.3Update to 2.6.0 | CVE-2025-47638 | |
| Medium5.4 | Cross-Site Request Forgery to Settings Update <2.5.1Update to 2.5.1 | CVE-2023-5006 | |
| Medium4.4 | Authenticated (Admin+) Stored Cross-Site Scripting ≤2.5.1Update to 2.5.2 | CVE-2023-5181 | |
| Medium6.1 | Reflected Cross-Site Scripting via webhook ≤2.4.1Update to 2.5.1 | — |
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤2.5.3Update to 2.6.0
- Medium5.4Cross-Site Request Forgery to Settings Update
<2.5.1Update to 2.5.1
- Medium4.4Authenticated (Admin+) Stored Cross-Site Scripting
≤2.5.1Update to 2.5.2
- Medium6.1Reflected Cross-Site Scripting via webhook
≤2.4.1Update to 2.5.1
WP Discord Invite: common questions
Does WP Discord Invite have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in WP Discord Invite: 4 medium. None are known to affect version null.
How do I check which version of WP Discord Invite I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP Discord Invite vulnerability?
CVE-2025-47638, published May 7, 2025: WP Discord Invite <= 2.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting. Severity: Medium (CVSS 4.4).
Is any WP Discord Invite vulnerability listed in CISA KEV?
No. None of the known WP Discord Invite vulnerabilities is currently listed in the CISA KEV catalog.