CWE-918Vulnerability type
WordPress SSRF vulnerabilities (page 6)
Features that fetch URLs on the server (previews, imports, webhooks) and can be pointed at internal services.
- Medium5.3Missing Authorization
WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory
≤2.10.4Update to 2.10.5
- Medium4.3Missing Authorization
FloristPress for Woo – Customize your eCommerce store for your Florist
≤7.8.5Update to 7.8.6
- Medium5.3Missing Authorization
Premium Blocks – Gutenberg Blocks, Patterns & Templates
≤2.3.18Update to 2.3.19
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
ShopEngine – All-in-One Elementor WooCommerce Builder with eCommerce Templates & Woo Widgets
≤4.9.8Update to 4.9.9
- Medium5.3Missing Authorization
CURCY – Multi Currency for WooCommerce
≤2.2.20Update to 2.2.21
- Medium5.3Missing Authorization
Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
≤4.0.2Update to 4.0.3
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI
≤3.6.3Update to 3.6.4
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Appointment Booking Plugin for WooCommerce | Online Booking Calendar & Service Manager
≤1.4.3Update to 1.4.4
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
JetEngine
≤3.9.0.2Update to 3.9.1
- High7.2Unauthenticated Stored Cross-Site Scripting
TranslatePress – Translate Multilingual sites with AI Translation
≤3.3.8Update to 3.3.9
- High7.5Unauthenticated Denial of Service
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more
≤3.13.6Update to 3.13.7
- High7.2Unauthenticated Stored Cross-Site Scripting
Iptanus File Upload
≤5.2.2Update to 5.2.3
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
Directorist: AI-Powered Business Directory, Listings & Classified Ads
≤8.10.7Update to 8.11
- Medium5.3Missing Authorization
Autopay dla WooCommerce
≤2.3.0Update to 2.3.1
- Medium5.3Missing Authorization
Formidable Forms Signature Online Contract Automation
≤2.0.5Update to 2.0.6
- Medium5.3Missing Authorization
Radius Booking – Appointment Booking Calendar & Scheduling for Services & Events
≤1.0.20Update to 1.0.21
- Medium4.3Missing Authorization
HivePress – Business Directory, Listings & Classified Ads Plugin
≤1.8.1Update to 1.8.2
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
Mang Board
≤2.4.7Update to 2.4.8
- Medium6.1Reflected Cross-Site Scripting
Mang Board
≤2.4.7Update to 2.4.8
- Medium5.3Missing Authorization
JS Help Desk – AI-Powered Support & Ticketing System
≤5.0.3Update to 5.0.4
- Medium4.3Missing Authorization
Motors – Car Dealership & Classified Listings Plugin
≤1.4.128Update to 1.4.129
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
WP Customer Area
≤8.4.3Update to 8.4.4
- High7.2Unauthenticated Stored Cross-Site Scripting
Featured Image from URL (FIFU)
≤6.1.4Update to 6.1.5
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
TI WooCommerce Wishlist
≤2.14.0Update to 2.14.1
- High7.2Unauthenticated Stored Cross-Site Scripting
RSVP and Event Management
≤2.7.17Update to 2.7.18
- Medium5.3Missing Authorization
MapSVG – Vector maps, Google Maps, Image maps – with AI assistant
≤8.16.3Update to 9.0.0
- Medium5.3Missing Authorization
2Way VideoCalls and Random Chat – HTML5 Webcam Videochat
≤6.1.9Update to 6.1.10
- Medium5.3Missing Authorization
The Innovative Form Builder – IvyForms
≤1.5.1Update to 1.5.2
- Medium4.3Missing Authorization
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI
≤3.6.3Update to 3.6.4
- Medium4.3Missing Authorization
Contextual Related Posts
≤4.5.3Update to 4.5.4