The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00071.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
paretodigital YASR – Yet Another Star Rating Plugin for WordPress unaffected
Version Status Constraints
* affected < 2.0.2
nicheaddons Events Addon for Elementor unaffected
Version Status Constraints
* affected < 1.9.8
dots Fraud Prevention For WooCommerce and EDD unaffected
Version Status Constraints
* affected < 2.1.0
wpengine Gutenberg Blocks – ACF Blocks Suite unaffected
Version Status Constraints
* affected < 2.6.8
bouncingsprout Ultimeter unaffected
Version Status Constraints
* affected < 2.7.6
toddhalfpenny Past Events Extension unaffected
Version Status Constraints
* affected —
pootlepress Pootle Pagebuilder – WordPress Page builder unaffected
Version Status Constraints
* affected < 5.7.1
powerfulwp Local Delivery Drivers for WooCommerce unaffected
Version Status Constraints
* affected < 1.8.5
kkikuchi1220 Ultimate Gutenberg – Custom Block Templates unaffected
Version Status Constraints
* affected —
josevega WP Required Taxonomies – Categories and Tags Mandatory unaffected
Version Status Constraints
* affected < 1.1.8
pmbaldha Featured Products First for WooCommerce – A Extension of WooCommerce (WooCommerce Addon Plugin) unaffected
Version Status Constraints
* affected —
sslzen SSL Certificate – Free SSL, HTTPS by SSL Zen unaffected
Version Status Constraints
* affected ≤ 4.0.4
wisersteps Streak CRM For Gmail For Contact Form 7 – WordPress Plugin unaffected
Version Status Constraints
* affected < 1.0.9
wpdevpowers WordPress Dev Powers – ACF Color Coded Field Types Plugin unaffected
Version Status Constraints
* affected —
benmoreassynt DancePress (TRWA) unaffected
Version Status Constraints
* affected ≤ 3.1.2
dots Product Size Charts Plugin for WooCommerce unaffected
Version Status Constraints
* affected < 2.2.3
tribalnerd Wp My Admin Bar unaffected
Version Status Constraints
* affected —
setka A no-code page builder for beautiful performance-based content unaffected
Version Status Constraints
* affected < 2.1.17
mikebels LocalSEOMap unaffected
Version Status Constraints
* affected —
cromer12 Easy Prayer unaffected
Version Status Constraints
* affected —
rafalosinski AdFoxly – Ad Manager, AdSense Ads & Ads.txt unaffected
Version Status Constraints
* affected ≤ 1.8.4
stevehenty WP Get Personal unaffected
Version Status Constraints
* affected —
theafricanboss/ Checkout with Cash App on EDD unaffected
Version Status Constraints
* affected —
usmanaliqureshi Server Info unaffected
Version Status Constraints
* affected —
themelocation Custom WooCommerce Checkout Fields Editor unaffected
Version Status Constraints
* affected ≤ 1.2.6
krsp KRSP Frontend File Uploader unaffected
Version Status Constraints
* affected —
bplugins Panorama Viewer- Best Plugin to Display Panoramic Images/Videos unaffected
Version Status Constraints
* affected < 1.0.8
janwyl Bulk Attachment Download unaffected
Version Status Constraints
* affected < 1.3.5
majick AutoSave Net unaffected
Version Status Constraints
* affected —
premmerce Premmerce Wholesale Pricing for WooCommerce unaffected
Version Status Constraints
* affected < 1.1.8
jcodex Any Popup – Popup Forms, Optins & Ads unaffected
Version Status Constraints
* affected —
theafricanboss/ Checkout with Venmo on EDD unaffected
Version Status Constraints
* affected —
dreamfox Payment gateway per Product for WooCommerce unaffected
Version Status Constraints
* affected < 3.1.6
hqtheme HQTheme Extra unaffected
Version Status Constraints
* affected —
vincoit Vit Website Reviews unaffected
Version Status Constraints
* affected —
daigo75 WooCommerce EU VAT Assistant unaffected
Version Status Constraints
* affected < 2.0.28.220224
eedee WordPress Slider Block Gutenslider unaffected
Version Status Constraints
* affected < 5.7.0
surbma HuCommerce | Magyar WooCommerce kiegészítések unaffected
Version Status Constraints
* affected < 30.3.0
lostboy7 KVoucher unaffected
Version Status Constraints
* affected —
bplugins Video Player for YouTube unaffected
Version Status Constraints
* affected < 1.5.1
whiteshadow Error Log Monitor unaffected
Version Status Constraints
* affected < 1.7.1
slidedeck SlideDeck: Responsive WordPress Slider Plugin unaffected
Version Status Constraints
* affected —
premmerce Premmerce Multi-currency for Woocommerce unaffected
Version Status Constraints
* affected < 2.3.2
mvvapps/ Booking Addon for WooCommerce unaffected
Version Status Constraints
* affected < 4.2.0
wpeventpartners/ WP Event Partners – WordPress Plugin for Event and Conference Management unaffected
Version Status Constraints
* affected ≤ 1.2.4
wpexpertsio WC Shop Sync – Square Payment Gateway for WooCommerce, Inventory Sync Between Square and WooCommerce, Ultimate WooCommerce Square Plugin unaffected
Version Status Constraints
* affected < 4.2.1
passionatebrains Add Expires Headers & Optimized Minify unaffected
Version Status Constraints
* affected < 2.6
majick ForceField unaffected
Version Status Constraints
* affected —
richard-b FIT: Featured Image Toolkit unaffected
Version Status Constraints
* affected —
svenl77 All in One Invite Codes unaffected
Version Status Constraints
* affected < 1.0.13
dots Dynamic Pricing and Discount Rules for WooCommerce unaffected
Version Status Constraints
* affected < 2.2.3
wordplus Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss unaffected
Version Status Constraints
* affected < 1.9.9.170
wpt00ls Grid & Styler For Contact Form 7 And Divi unaffected
Version Status Constraints
* affected < 1.4.1
protectyouruploads Protect Uploads with Login – Protect Your Uploads unaffected
Version Status Constraints
* affected —
sakurapixel Atlas – Knowledge Base unaffected
Version Status Constraints
* affected —
dgwyer Simple Sitemap – Create a Responsive HTML Sitemap unaffected
Version Status Constraints
* affected < 3.5.5
bplugins Super Video Player- Best WordPress Video Display Plugin for mp4/OGG unaffected
Version Status Constraints
* affected < 1.6.11
mhmrajib WordPress Books Gallery unaffected
Version Status Constraints
* affected < 3.6
damian-gora FiboSearch – Ajax Search for WooCommerce unaffected
Version Status Constraints
* affected < 1.17.0
stevejburge Tag Groups is the Advanced Way to Display Your Taxonomy Terms unaffected
Version Status Constraints
* affected < 1.43.10.1
prasadkirpekar WP Free SSL – Free SSL Certificate for WordPress and force HTTPS unaffected
Version Status Constraints
* affected < 1.2.7
clickervolt ClickerVolt – Affiliate Links & Click Tracking for Performance Marketers unaffected
Version Status Constraints
* affected —
proteusthemes ConsultPress Lite unaffected
Version Status Constraints
* affected —
badhonrocks Divi Forms Styler – Gravity Forms, Fluent Forms & Contact Form 7 unaffected
Version Status Constraints
* affected < 1.3.0
streamweasels StreamWeasels Twitch Integration unaffected
Version Status Constraints
* affected < 1.3.4
pagup Mobile View for Responsive web design optimization (UX design) + Mobile Friendly Test unaffected
Version Status Constraints
* affected < 1.2.4
paulio21 Zip Code Redirect unaffected
Version Status Constraints
* affected ≤ 4.0.1
vohotv/ Guestofy – Restaurant Reservations Plugin, Room Planer, Reservation Form unaffected
Version Status Constraints
* affected —
ahmed17 CF7 Constant Contact Fields Mapping unaffected
Version Status Constraints
* affected —
jack-kitterhing Booking Calendar | Appointment Booking | Bookit unaffected
Version Status Constraints
* affected < 2.2.9
ethereumicoio EthereumICO unaffected
Version Status Constraints
* affected < 2.3.11
risetheme RT Easy Builder – Advanced addons for Elementor unaffected
Version Status Constraints
* affected ≤ 1.4
wpexpertsio WP Contact Slider unaffected
Version Status Constraints
* affected < 2.4.5
ivan_paulin Country Based Payments for WooCommerce unaffected
Version Status Constraints
* affected < 1.4.1
patrickposner Filr – Secure document library unaffected
Version Status Constraints
* affected < 1.2.1
nicheaddons Elasta unaffected
Version Status Constraints
* affected < 1.0.8
carlosmoreirapt MapGeo – Interactive Geo Maps unaffected
Version Status Constraints
* affected < 1.5.4
galoover WordPress Animation Plugin – Animated Everything unaffected
Version Status Constraints
* affected —
wpdever WP Notification Bell unaffected
Version Status Constraints
* affected < 1.3.13
melapress Activity Log For MainWP unaffected
Version Status Constraints
* affected < 1.7.1
oceas Connected Sermons unaffected
Version Status Constraints
* affected —
josevega Bulk Edit and Create User Profiles – WP Sheet Editor unaffected
Version Status Constraints
* affected < 1.5.13
milukove/ Кнопка ЮMoney unaffected
Version Status Constraints
* affected —
kartikparmar/ Bulk WooCommerce Category Creator unaffected
Version Status Constraints
* affected —
alphabposervice Easy Math Captcha for CF7 unaffected
Version Status Constraints
* affected —
litonice13 Master Accordion ( Former WP Awesome FAQ Plugin ) unaffected
Version Status Constraints
* affected < 4.1.8
kitforest Better Elementor Addons unaffected
Version Status Constraints
* affected < 1.3.1
livemesh Elementor Addons by Livemesh unaffected
Version Status Constraints
* affected < 7.1.4
nitin247 Place Order Without Payment for WooCommerce unaffected
Version Status Constraints
* affected < 2.2
boriscolombier/ STEWoo – Super Transactional Emails for WooCommerce unaffected
Version Status Constraints
* affected < 1.2.4
marcqueralt DeMomentSomTres Address unaffected
Version Status Constraints
* affected —
johnc1979 Out of stock display for woocommerce unaffected
Version Status Constraints
* affected —
ultimateblocks Ultimate Blocks – WordPress Blocks Plugin unaffected
Version Status Constraints
* affected < 2.4.13
pagup Bulk Auto Image Title Attribute (Image Title tag) optimizer (Image SEO) unaffected
Version Status Constraints
* affected < 1.2.3
princeahmed WP Radio – Worldwide Online Radio Stations Directory for WordPress unaffected
Version Status Constraints
* affected < 3.1.4
blackandwhitedigital BookPress – For Book Authors unaffected
Version Status Constraints
* affected < 1.2.3
patrickposner Qyrr – simply and modern QR-Code creation unaffected
Version Status Constraints
* affected < 0.8
wpeka-club WordPress Directory Plugin For Business Listings – WP Local Plus unaffected
Version Status Constraints
* affected < 1.4.5
equalizedigital Equalize Digital Accessibility Checker – Audit Your Website for WCAG, ADA, and Section 508 Accessibility Errors unaffected
Version Status Constraints
* affected < 1.2.8
therealwebdisrupt Funnelmentals unaffected
Version Status Constraints
* affected —
blockspare Blockspare: Gutenberg Blocks & Patterns for Blogs, Magazines, Business Sites – Post Grids, Sliders, Carousels, Counters, Page Builder & Starter Site Imports, No Coding Needed unaffected
Version Status Constraints
* affected < 2.0.1
nasirahmed Forms to Zapier, Integromat, IFTTT, Workato, Automate.io, elastic.io, Built.io, APIANT, Webhook unaffected
Version Status Constraints
* affected < 1.1.9
mojofywp Product Carousel For WooCommerce – WoorouSell unaffected
Version Status Constraints
* affected < 1.0.9
pagup WordPress Robots.txt optimizer (+ XML Sitemap) – Boost SEO, Traffic & Rankings unaffected
Version Status Constraints
* affected < 1.4.4
gfirem GFireM Fields unaffected
Version Status Constraints
* affected —
elliotvs Coupon Affiliates – Affiliate Plugin for WooCommerce unaffected
Version Status Constraints
* affected < 4.16.4
dipcode WP Post Block unaffected
Version Status Constraints
* affected —
attest LMS Plugin – eLearning, Online Courses by Attest unaffected
Version Status Constraints
* affected —
shabti Frontend Admin by DynamiApps unaffected
Version Status Constraints
* affected < 3.3.33
ibenic Simple Giveaways – Grow your business, email lists and traffic with contests unaffected
Version Status Constraints
* affected < 2.42.1
wpt00ls WPTools Masonry Gallery & Posts For Divi unaffected
Version Status Constraints
* affected < 3.1.2
gfirem GFireM Action After unaffected
Version Status Constraints
* affected —
bandido Woo Ukrposhta unaffected
Version Status Constraints
* affected < 1.6.18
annastaa annasta Woocommerce Product Filters unaffected
Version Status Constraints
* affected < 1.5.0
tprintyedisonave WP Lead Stream unaffected
Version Status Constraints
* affected —
theeventscalendar The Events Calendar unaffected
Version Status Constraints
* affected < 5.14.0.4
johnc1979 Focus on Reviews for WooCommerce unaffected
Version Status Constraints
* affected —
pmbaldha Email Tracker – Email Tracking Plugin to track Emails for Open and Email Links Click (Compatible with WooCommerce) unaffected
Version Status Constraints
* affected —
wpt00ls Block Styler For Gravity Forms unaffected
Version Status Constraints
* affected ≤ 6.1.0
josevega WP Page Templates unaffected
Version Status Constraints
* affected < 1.1.13
kokomoweb Product Customer List for WooCommerce unaffected
Version Status Constraints
* affected < 3.0.0
wpmoose WP Moose unaffected
Version Status Constraints
* affected < 1.0.1
samdani Team Members – A WordPress Team Plugin with Gallery, Grid, Carousel, Slider, Table, List, and More unaffected
Version Status Constraints
* affected < 1.1.0
jwebsol Floating Social Share Icons and Social Share buttons – Next Previous Post Links – FL unaffected
Version Status Constraints
* affected < 3.6.0
co2ok South Pole: Climate action now unaffected
Version Status Constraints
* affected < 1.0.2.0
jwind LittleBot Invoices unaffected
Version Status Constraints
* affected —
akdevs Genealogical Tree – WordPress Family Tree unaffected
Version Status Constraints
* affected ≤ 2.1.5
plugins360 Automatic YouTube Gallery unaffected
Version Status Constraints
* affected < 1.6.5
nitin247 Thank You Page for WooCommerce unaffected
Version Status Constraints
* affected < 3.1
5starplugins Marijuana Age Verify unaffected
Version Status Constraints
* affected < 1.3.1
skshaikat WooCommerce upcoming Products unaffected
Version Status Constraints
* affected —
shabti Frontend Admin – Add and edit posts, pages, users and more all from the frontend unaffected
Version Status Constraints
* affected < 3.3.33
matthias-reuter SV Tracking Manager unaffected
Version Status Constraints
* affected < 1.8.02
wpexpertsio WP EasyPay – Square for WordPress unaffected
Version Status Constraints
* affected < 4.0.2
flexithemes WordPress SEO Checklist unaffected
Version Status Constraints
* affected —
wgauge wGauge – Free Version unaffected
Version Status Constraints
* affected —
bdthemes Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) unaffected
Version Status Constraints
* affected < 2.7.0
svenl77 Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) unaffected
Version Status Constraints
* affected < 2.6.3
wpt00ls WP Tools Divi Product Carousel unaffected
Version Status Constraints
* affected < 1.5.0
aharonyan Guest posting / Frontend Posting wordpress plugin – WP Front User Submit / Front Editor unaffected
Version Status Constraints
* affected < 3.4.1
woodyhayday Social Gallery Lite unaffected
Version Status Constraints
* affected —
bfintal Stackable – Page Builder Gutenberg Blocks unaffected
Version Status Constraints
* affected < 3.1.5
seezee Five-Star Ratings Shortcode unaffected
Version Status Constraints
* affected < 1.2.39
melapress CAPTCHA 4WP – Antispam CAPTCHA solution for WordPress unaffected
Version Status Constraints
* affected < 7.0.5
premmerce Premmerce Wishlist for WooCommerce unaffected
Version Status Constraints
* affected < 1.1.8
wordpresschef Salon Booking System unaffected
Version Status Constraints
* affected < 7.6.3
surbma Surbma | GDPR Proof Cookie Consent & Notice Bar unaffected
Version Status Constraints
* affected < 17.5.3
dots Advance Menu Manager unaffected
Version Status Constraints
* affected —
princeahmed Live TV Player – Worldwide Live TV Channels Player for WordPress unaffected
Version Status Constraints
* affected < 1.2.3
vanyukov Market Exporter unaffected
Version Status Constraints
* affected ≤ 2.0.13
litonice13 WP Adminify – Custom WordPress Dashboard, Login and Admin Customizer unaffected
Version Status Constraints
* affected < 2.0.5
svenl77 TK Google Fonts GDPR Compliant unaffected
Version Status Constraints
* affected < 2.2.1
starfishwp Starfish Review Generation & Marketing for WordPress unaffected
Version Status Constraints
* affected < 3.0.26
halmat WP Emaily unaffected
Version Status Constraints
* affected —
nicheaddons Education Addon for Elementor unaffected
Version Status Constraints
* affected < 1.2
matthias-reuter SV Proven Expert unaffected
Version Status Constraints
* affected < 1.8.01
wpeka-club SurveyFunnel – Survey Plugin for WordPress unaffected
Version Status Constraints
* affected < 1.1.3
pluginsware Advanced Classifieds & Directory Pro unaffected
Version Status Constraints
* affected < 1.8.8
smartwpress Music Player for Elementor – Audio Player & Podcast Player unaffected
Version Status Constraints
* affected < 1.5.5
ethereumicoio Cryptocurrency Product for WooCommerce unaffected
Version Status Constraints
* affected < 3.14.6
kenanfallon WooCommerce Next Order Coupon unaffected
Version Status Constraints
* affected —
themeythemes Overlay Image Divi Module unaffected
Version Status Constraints
* affected < 1.3.2
pmbaldha Email Header Footer unaffected
Version Status Constraints
* affected —
bplugins Document Viewer- Plugin to Display MS Office Docs unaffected
Version Status Constraints
* affected < 2.2.5
nplugins Price Bands for WooCommerce unaffected
Version Status Constraints
* affected —
webtechstreet Elementor Addon Elements unaffected
Version Status Constraints
* affected < 1.11.14
drosendo Smart Variations Images & Swatches for WooCommerce unaffected
Version Status Constraints
* affected < 5.1.10
5starplugins Featured Images in RSS for Mailchimp & More unaffected
Version Status Constraints
* affected < 1.5.9
ibenic Simple Sponsorships unaffected
Version Status Constraints
* affected —
unitecms Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unaffected
Version Status Constraints
* affected < 1.5.3
wpjoli Joli Table Of Contents unaffected
Version Status Constraints
* affected < 1.3.9
getsparrow Sparrow: Product Reviews and Ratings for WooCommerce unaffected
Version Status Constraints
* affected —
zerozendesign Multi Page Auto Advance for Gravity Forms unaffected
Version Status Constraints
* affected < 4.3
mcurly Generate Images – Magic Post Thumbnail unaffected
Version Status Constraints
* affected < 3.3.11
ibenic Live Scores for SportsPress unaffected
Version Status Constraints
* affected —
dots Hide Shipping Method For WooCommerce unaffected
Version Status Constraints
* affected < 1.3.1
wpt00ls Ultimate Carousel For Divi unaffected
Version Status Constraints
* affected < 4.3.1
prasadkirpekar WP Meta and Date Remover unaffected
Version Status Constraints
* affected < 1.9.6
wpt00ls Image Carousel For Divi unaffected
Version Status Constraints
* affected < 1.5.0
dudo Comments Not Replied To unaffected
Version Status Constraints
* affected < 1.5.3
wisersteps Contact Form 7 – Capsule CRM – Integration unaffected
Version Status Constraints
* affected < 1.0.5
alexmoss Opensea unaffected
Version Status Constraints
* affected < 1.0.3
tranzly WordPress Translation plugin for Post, Pages & WooCommerce products. Tranzly IO AI DeepL automatic WordPress Translator. unaffected
Version Status Constraints
* affected < 1.1.1
alekv Pixel Manager for WooCommerce – Track Google Analytics, Google Ads, TikTok and more unaffected
Version Status Constraints
* affected < 1.14.3
gowebsmarty Modern Addons for Elementor Page Builder unaffected
Version Status Constraints
* affected < 1.2.0
themesei Viralike unaffected
Version Status Constraints
* affected —
wpdevpowers WordPress Dev Powers – Element Selector jQuery Powers Plugin unaffected
Version Status Constraints
* affected —
wpmunich WP Munich Blocks – Gutenberg Blocks for WordPress unaffected
Version Status Constraints
* affected < 0.11.0
inputwp Availability datepicker – Integrate with Contact Form 7 and Divi unaffected
Version Status Constraints
* affected ≤ 2.1
diviframework Footer Plugin for Divi unaffected
Version Status Constraints
* affected —
mhmrajib Accept Stripe Donation and Payments – AidWP unaffected
Version Status Constraints
* affected < 2.9
wpexpertsio New User Approve unaffected
Version Status Constraints
* affected < 2.1
gfirem GFireM Advance Search unaffected
Version Status Constraints
* affected —
giladtakoni WPMailer – The best mail builder, No More Core for your emails support Elementor, CF7 forms etc… unaffected
Version Status Constraints
* affected —
anssilaitila Shared Files – Frontend File Upload Form & Secure File Sharing unaffected
Version Status Constraints
* affected < 1.6.72
wpbits WPBITS Addons For Elementor Page Builder unaffected
Version Status Constraints
* affected < 1.3.2
prelc Speculor unaffected
Version Status Constraints
* affected —
pagup WP Google Street View (with 360° virtual tour) & Google maps + Local SEO unaffected
Version Status Constraints
* affected < 1.0.9
deothemes WordPress Everse Starter Sites – Elementor Templates unaffected
Version Status Constraints
* affected < 1.2.1
litonice13 Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations unaffected
Version Status Constraints
* affected < 1.8.5
versacomp Choice Payment Gateway for WooCommerce unaffected
Version Status Constraints
* affected < 2.0.5
brandonfire Domain Mapping System | Create Microsites with Multiple Alias Domains (multisite optional) unaffected
Version Status Constraints
* affected < 1.7
stylingwebben Order and Inventory Manager for WooCommerce unaffected
Version Status Constraints
* affected < 1.4.3
ninjalibs Ninja Libs Amazon SES unaffected
Version Status Constraints
* affected —
royalnavneet Delete All Comments of wordpress unaffected
Version Status Constraints
* affected < 4.3
webheadllc WP-Cron Status Checker unaffected
Version Status Constraints
* affected < 1.2.4
bilaltas CodeKit – Custom Codes Editor unaffected
Version Status Constraints
* affected < 2.3
bradvin FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel unaffected
Version Status Constraints
* affected < 2.1.34
kartikparmar Change Price Title for WooCommerce unaffected
Version Status Constraints
* affected —
edgegalleryplugin WordPress Gallery Plugin – Edge Photo Gallery unaffected
Version Status Constraints
* affected —
gloriousthemes Glorious Services & Support unaffected
Version Status Constraints
* affected —
alphabposervice Easy Newsletter Signups unaffected
Version Status Constraints
* affected < 1.0.4
mikewire_rocksolid Announcement & Notification Banner – Bulletin unaffected
Version Status Constraints
* affected < 3.1.0
dam6pl Advanced Database Replacer unaffected
Version Status Constraints
* affected —
tribalnerd Multisite Robots.txt Manager unaffected
Version Status Constraints
* affected —
irkanu Simple Social Page Widget & Shortcode unaffected
Version Status Constraints
* affected —
josevega WooCommerce Country Catalogs – Product Country Restrictions unaffected
Version Status Constraints
* affected < 1.13.0
shamim51 Front End PM unaffected
Version Status Constraints
* affected < 11.3.4
divisumo Ultimate Divi Modules Suite – Divi Sumo Lite unaffected
Version Status Constraints
* affected —
xplodedthemes XT Points & Rewards for WooCommerce unaffected
Version Status Constraints
* affected < 1.4.3
themelocation Widgets for WooCommerce Products on Elementor unaffected
Version Status Constraints
* affected < 1.0.9
popeating Delivery for WooCommerce unaffected
Version Status Constraints
* affected —
mohsinoffline WP SMS Plugin – WordPress SMS Two Factor Authentication – 2FA, Two Factor, OTP SMS and Email unaffected
Version Status Constraints
* affected < 1.3.7
cleverplugins Security Ninja – Secure Firewall & Secure Malware Scanner unaffected
Version Status Constraints
* affected < 5.135
xyulex TinyMCE Annotate unaffected
Version Status Constraints
* affected —
damian-gora Justified Gallery unaffected
Version Status Constraints
* affected < 1.5.1
mberding Book BuyBack Prices unaffected
Version Status Constraints
* affected —
daniyalahmedk Fuse Social Floating Sidebar unaffected
Version Status Constraints
* affected < 5.4.3
wphrmanager WP-HR Manager: The Human Resources Plugin for WordPress unaffected
Version Status Constraints
* affected < 3.0.3
smusman98 Emails Blacklist for Everest Forms unaffected
Version Status Constraints
* affected < 1.0.4
plugins360 All-in-One Video Gallery unaffected
Version Status Constraints
* affected < 2.5.4
oloyede-jamiu Woo Admin Product Notes unaffected
Version Status Constraints
* affected —
themelocation Remove Add to Cart WooCommerce unaffected
Version Status Constraints
* affected < 1.4.3
theafricanboss Checkout with Zelle on Woocommerce unaffected
Version Status Constraints
* affected < 2.0
wpt00ls WP Tools Gravity Forms Divi Module unaffected
Version Status Constraints
* affected < 6.6.3
deothemes Everse unaffected
Version Status Constraints
* affected < 1.8.6
commercepundit Run time Image resizing unaffected
Version Status Constraints
* affected —
wp-making Rest Routes – Custom Endpoints for WordPress REST API unaffected
Version Status Constraints
* affected < 4.24.0
olezhyk5 Widget for Contact form 7 unaffected
Version Status Constraints
* affected —
pagup Add Pinterest conversion tags for Pinterest Ads + Site verification unaffected
Version Status Constraints
* affected < 1.2.3
javmah Spreadsheet Integration – Automate Google Sheets With WordPress, WooCommerce & Most Popular Form Plugins. Also, Display Google sheet as a Table. unaffected
Version Status Constraints
* affected < 3.6.1
majick WP BugBot unaffected
Version Status Constraints
* affected —
princeahmed Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files into Your WordPress Site unaffected
Version Status Constraints
* affected < 1.1.0
deothemes Nokke unaffected
Version Status Constraints
* affected < 1.0.11
josevega WooCommerce Customers Table: View, Search, Bulk Editor unaffected
Version Status Constraints
* affected < 1.0.8
closemarketing/ Sync eCommerce NEO unaffected
Version Status Constraints
* affected —
wpcohort Preloader for Divi unaffected
Version Status Constraints
* affected —
tobias_conrad/ Get Better Reviews for WooCommerce unaffected
Version Status Constraints
* affected ≤ 3.0.6
codesavory Knowledge Base documentation & wiki plugin – BasePress Docs unaffected
Version Status Constraints
* affected < 2.15.14
webba-agency Appointment & Event Booking Calendar Plugin – Webba Booking unaffected
Version Status Constraints
* affected < 4.2.18
salttechno Shuban unaffected
Version Status Constraints
* affected —
pmbaldha/ ACF for WooCommerce Product unaffected
Version Status Constraints
* affected < 1.8
johnc1979 Scheduled Notification Bar unaffected
Version Status Constraints
* affected —
bplugins 3D Viewer – 3D Model Viewer Plugin unaffected
Version Status Constraints
* affected < 1.2.7
samuelsilvapt Fullscreen Menu unaffected
Version Status Constraints
* affected ≤ 2.2.7
wpchill Gallery PhotoBlocks unaffected
Version Status Constraints
* affected < 1.2.6
themeisle Redirection for Contact Form 7 unaffected
Version Status Constraints
* affected < 2.5.0
marcqueralt DeMomentSomTres Grid Archive unaffected
Version Status Constraints
* affected —
seancarrico Inbound Brew unaffected
Version Status Constraints
* affected —
muhammad-rehman WP Photo Effects unaffected
Version Status Constraints
* affected < 1.2.1
danish-ali Top Bar – PopUps – by WPOptin unaffected
Version Status Constraints
* affected ≤ 1.2.3
dots Extra Fees Plugin for WooCommerce unaffected
Version Status Constraints
* affected < 3.8.2
ldninjas/ Reset Course Progress For LearnDash unaffected
Version Status Constraints
* affected —
princeahmed Podcast Box – Best Podcasting Plugin for WordPress unaffected
Version Status Constraints
* affected < 1.0.2
giladtakoni The best plugin for restrict content, support all Custom Post Types and Elementor – Password Protected unaffected
Version Status Constraints
* affected —
toddhalfpenny Turbo Widgets unaffected
Version Status Constraints
* affected —
patrickposner Passster – Password Protect Pages and Content unaffected
Version Status Constraints
* affected < 3.5.5.2
powerfulwp Gift Message for WooCommerce unaffected
Version Status Constraints
* affected < 1.6.0
actuaryzask azw woocommerce file uploads unaffected
Version Status Constraints
* affected —
infornweb Blog Grid & Post Grid – Blog Post Slider, Blog Post Carousel, Blog Post Ticker, Blog Post Masonry, Category Post Grid By News & Blog Designer Pack unaffected
Version Status Constraints
* affected < 2.3.1
jburleigh1 Broadcast Lite unaffected
Version Status Constraints
* affected < 2.0.3
bradvin Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar unaffected
Version Status Constraints
* affected < 2.1.15
penguininitiatives WP Author Bio unaffected
Version Status Constraints
* affected —
ahmed17 RW Divi Unite Gallery unaffected
Version Status Constraints
* affected ≤ 1.0
essekia Tablesome – Form DB & Automation – WPForms, Contact Form 7, Elementor, Forminator, Fluent, Gravity unaffected
Version Status Constraints
* affected < 0.6.7
wppluginexperts Product Image Watermark for Woo unaffected
Version Status Constraints
* affected < 1.0.4
nasirahmed AFI – The Easiest Integration Plugin unaffected
Version Status Constraints
* affected < 1.49.0
janthielemann Revolution for Elementor unaffected
Version Status Constraints
* affected —
wpconedev ConeBlog – Elementor Blog Widgets unaffected
Version Status Constraints
* affected < 1.4.6
linekal Under Construction unaffected
Version Status Constraints
* affected < 4.0
ekanath WP Gratify unaffected
Version Status Constraints
* affected —
cmbibby/ Automizy Gravity Forms unaffected
Version Status Constraints
* affected —
toddhalfpenny Widgets on Pages unaffected
Version Status Constraints
* affected < 1.6.0
ggriesser Get feedback from visitors – WP Feedback Suite Plugin unaffected
Version Status Constraints
* affected —
dejanmarkovic WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule unaffected
Version Status Constraints
* affected < 2020.1.0
intoxstudio Content Aware Sidebars – Fastest Widget Area Plugin unaffected
Version Status Constraints
* affected < 3.17.2
salttechno Bani unaffected
Version Status Constraints
* affected —
ggriesser Fast WordPress unaffected
Version Status Constraints
* affected —
sonalsinha21 SKT Templates – 100% free Elementor & Gutenberg templates unaffected
Version Status Constraints
* affected < 4.3
frenify Categorify – WordPress Media Library Category & File Manager unaffected
Version Status Constraints
* affected < 1.0.5
vinod-dalvi Ivory Search – WordPress Search Plugin unaffected
Version Status Constraints
* affected < 5.4.4
pagup Add Twitter Pixel for Twitter ads unaffected
Version Status Constraints
* affected < 1.0.4
xplodedthemes XT Variation Swatches for WooCommerce unaffected
Version Status Constraints
* affected < 1.8.1
kaizencoders URL Shortify – Simple, Powerful and Easy URL Shortener Plugin For WordPress unaffected
Version Status Constraints
* affected < 1.5.11
mohsinoffline Authorize.Net Payment Gateway For WooCommerce unaffected
Version Status Constraints
* affected < 5.1.27
svenl77 BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages unaffected
Version Status Constraints
* affected < 3.4.2
cloudliving Affiliate Link Builder Plugin for Amazon Associates – Review Engine unaffected
Version Status Constraints
* affected —
mte90 Glossary unaffected
Version Status Constraints
* affected < 2.1.8
bavokoservices BAVOKO SEO Tools – All-in-One WordPress SEO unaffected
Version Status Constraints
* affected —
foxmoon Cartoon Url unaffected
Version Status Constraints
* affected —
josevega WP Frontend Admin – Display WP Admin Pages in the Frontend unaffected
Version Status Constraints
* affected < 1.17.0.4
bouncingsprout Block, Suspend, Report for BuddyPress unaffected
Version Status Constraints
* affected < 3.3.3
takanakui Menu Image, Icons made easy unaffected
Version Status Constraints
* affected < 3.0.6
xplodedthemes XT Ajax Add To Cart for WooCommerce unaffected
Version Status Constraints
* affected < 1.0.4
bestpluginswordpress One Click Login unaffected
Version Status Constraints
* affected —
ethereumicoio Ether and ERC20 tokens WooCommerce Payment Gateway unaffected
Version Status Constraints
* affected < 4.12.9
mvvapps/ Chat Button- Leads and Order over Chat unaffected
Version Status Constraints
* affected < 1.6.1
dreamfox WooCommerce Shipping gateway per Product unaffected
Version Status Constraints
* affected < 2.0.4
deothemes Purosa unaffected
Version Status Constraints
* affected < 1.1.0
tauhidpro Best Responsive Comparison Table for Gutenberg Editor – NicheTable unaffected
Version Status Constraints
* affected < 2.2.3
ankitmaru Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress unaffected
Version Status Constraints
* affected < 6.0.0
themesty WP Sierra unaffected
Version Status Constraints
* affected —
dots Digital Goods for WooCommerce Checkout unaffected
Version Status Constraints
* affected < 3.6.4
cleverplugins SEO Booster unaffected
Version Status Constraints
* affected < 3.8.5
fullworks Anti-Spam by Fullworks : GDPR Compliant Spam Protection unaffected
Version Status Constraints
* affected < 1.3.2
khothemes Ultimate Widgets Light unaffected
Version Status Constraints
* affected —
beeneeb Insert or Embed Articulate Content into WordPress unaffected
Version Status Constraints
* affected < 4.3000000016
appexpertsio APPExperts – Mobile App Builder for WordPress | WooCommerce to iOS and Android Apps unaffected
Version Status Constraints
* affected < 1.2.2
bdthemes Ultimate Post Kit Addons For Elementor – (Post Grid, Post Carousel, Post Slider, Category List, Post Tabs, Timeline, Post Ticker, Tag Cloud) unaffected
Version Status Constraints
* affected < 2.9.1
pootlepress Caxton – Create Pro page layouts in Gutenberg unaffected
Version Status Constraints
* affected < 1.30.0
djenh Nitek Carousel Slider Cool Transitions unaffected
Version Status Constraints
* affected —
kartechify Extend Filter Products By Price Widget unaffected
Version Status Constraints
* affected —
blockmeister BlockMeister – Block Pattern Builder unaffected
Version Status Constraints
* affected < 3.0.5
mantrabrain Yatri Tools unaffected
Version Status Constraints
* affected < 1.1.3
tickera Restrict – membership, site, content and user access restrictions for WordPress unaffected
Version Status Constraints
* affected < 2.1.9
ibenic Change Prices with Time for WooCommerce unaffected
Version Status Constraints
* affected —
dots Flat Rate Shipping Plugin For WooCommerce unaffected
Version Status Constraints
* affected < 4.0.3
frostbourn Responsive Social Slider Widget unaffected
Version Status Constraints
* affected —
ahmed17 Menu Item Scheduler unaffected
Version Status Constraints
* affected —
avidthemes/ Blog Sidebar Widget unaffected
Version Status Constraints
* affected —
dots Multipurpose Gutenberg Block unaffected
Version Status Constraints
* affected ≤ 1.7.3
codeies Full Page Blog Designer unaffected
Version Status Constraints
* affected —
jcodex WooCommerce Variation Swatches for Products unaffected
Version Status Constraints
* affected —
melapress WP Activity Log unaffected
Version Status Constraints
* affected < 4.4.0
patrickgarman Simple Feature Requests Free – User Feedback Board unaffected
Version Status Constraints
* affected < 2.2.4
josevega Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor unaffected
Version Status Constraints
* affected < 1.5.23
wpexpertsio License Manager for WooCommerce unaffected
Version Status Constraints
* affected < 2.2.6
skyminds Sky Login Redirect unaffected
Version Status Constraints
* affected < 3.6.0
passionatebrains Google Analytics plugin for WordPress by GA4WP unaffected
Version Status Constraints
* affected < 1.3
munirkamal Divi Collage unaffected
Version Status Constraints
* affected —
lukeseager WordPress Persistent Login unaffected
Version Status Constraints
* affected < 2.0.0
themelocation Deals of the Day WooCommerce unaffected
Version Status Constraints
* affected —
pagup Add Linkedin insight tags for Linkedin ads unaffected
Version Status Constraints
* affected < 1.2.4
maurolopes/ Easy Settings for LearnDash unaffected
Version Status Constraints
* affected —
mihail-barinov Share This Image unaffected
Version Status Constraints
* affected < 1.67
sjaved Easy Social Feed – Social Photos Gallery – Post Feed – Like Box unaffected
Version Status Constraints
* affected < 6.3.4
jamesparkninja NEXUS unaffected
Version Status Constraints
* affected —
deothemes Meridia unaffected
Version Status Constraints
* affected < 2.2.7
tobias_conrad Webinar Solution: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition unaffected
Version Status Constraints
* affected < 2.8.12
wpmagics Delete old Posts automatically unaffected
Version Status Constraints
* affected < 2.1.2
maxsdesign Brand unaffected
Version Status Constraints
* affected —
livemesh WPBakery Page Builder Addons by Livemesh unaffected
Version Status Constraints
* affected < 2.9.2
wptb WP Table Builder – WordPress Table Plugin unaffected
Version Status Constraints
* affected < 1.3.16
princeahmed Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress unaffected
Version Status Constraints
* affected < 1.0.8
wpt00ls Divi Content Restrictor unaffected
Version Status Constraints
* affected ≤ 1.3.0
infornweb Logo Showcase – Responsive Logo Carousel, Logo Slider & Logo Grid unaffected
Version Status Constraints
* affected < 2.0.3
premmerce Premmerce Variation Swatches for WooCommerce unaffected
Version Status Constraints
* affected < 1.2.1
dotrex Portfolio for Elementor & Image Gallery | PowerFolio unaffected
Version Status Constraints
* affected < 2.1.7
sslatlas SSL Atlas – Free SSL Certificate & HTTPS Redirect for WordPress unaffected
Version Status Constraints
* affected < 1.1.1
gallerycreator Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery unaffected
Version Status Constraints
* affected < 2.3.6
maltathemes Easy Tiktok Feed unaffected
Version Status Constraints
* affected < 1.1.1
webmuehle PopOverXYZ – Show Light Weight Beautiful Tool Tips On Any Text unaffected
Version Status Constraints
* affected —
pagup Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO) unaffected
Version Status Constraints
* affected < 1.4.5.0
wpcohort/ Number Chat unaffected
Version Status Constraints
* affected —
svovaf Rating-Widget: Star Review System unaffected
Version Status Constraints
* affected < 3.1.4
rebelcode Spotlight Social Feeds – Block, Shortcode, and Widget unaffected
Version Status Constraints
* affected < 0.10.2
xyulex Expire tags unaffected
Version Status Constraints
* affected —
gowebsmarty Go Viral – social share, social sharebar, social locker, social chat, open graph, reactions, share & view counters unaffected
Version Status Constraints
* affected < 1.8.0
tobias_conrad Design for Contact Form 7 Style WordPress Plugin – CF7 WOW Styler unaffected
Version Status Constraints
* affected < 1.4.2
tropicalista Dashy – Google Analytics advanced dashboard unaffected
Version Status Constraints
* affected —
premmerce Premmerce User Roles unaffected
Version Status Constraints
* affected < 1.0.11
tonyzeoli Radio Station by netmix® – Manage and play your Show Schedule in WordPress! unaffected
Version Status Constraints
* affected < 2.4.0.6
wpexpertsio myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification unaffected
Version Status Constraints
* affected < 2.4.3.1
greenjaymedia WordPress SEO Audit Plugin – WP Site Auditor unaffected
Version Status Constraints
* affected < 1.2.5
hiddenpearls WordPress Reviews by ReviewPress unaffected
Version Status Constraints
* affected —
wptravelengine WP Travel Engine – Tour Booking Plugin – Tour Operator Software unaffected
Version Status Constraints
* affected < 5.3.8
takanakui WP Mobile Menu – The Mobile-Friendly Responsive Menu unaffected
Version Status Constraints
* affected < 2.8.2.7
sebet/ WP Smart Export (Free) unaffected
Version Status Constraints
* affected —
syntactics Free Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking unaffected
Version Status Constraints
* affected < 1.1.10
theeventscalendar WP Conference Schedule unaffected
Version Status Constraints
* affected < 1.1.0
mte90 Strumenti Partita IVA per Woocommerce unaffected
Version Status Constraints
* affected < 1.3.23
anfrageformular Anfrageformular – Multi Step Drag & Drop Formular Builder – Leadgenerierung unaffected
Version Status Constraints
* affected —
premmerce Premmerce Brands for WooCommerce unaffected
Version Status Constraints
* affected < 1.2.12
ethereumicoio Ethereum Wallet unaffected
Version Status Constraints
* affected < 4.0.9
limbcode Limb Gallery | Create Beautiful Image & Video Galleries unaffected
Version Status Constraints
* affected < 1.5.2
peterschulznl Code Manager unaffected
Version Status Constraints
* affected < 1.0.14
cypressnorth Payment Gateway for PayFabric unaffected
Version Status Constraints
* affected —
commercepundit CP Simple Newsletter unaffected
Version Status Constraints
* affected —
jwind LittleBot ACH for Stripe + Plaid unaffected
Version Status Constraints
* affected —
dotrex Aquarella Lite unaffected
Version Status Constraints
* affected —
smusman98 Coinbase Commerce – Crypto Gateway for WooCommerce unaffected
Version Status Constraints
* affected < 1.4.1
wpmoose Villar unaffected
Version Status Constraints
* affected < 1.0.8
uriahs-victor Kikote – Location Picker at Checkout & Google Address AutoFill Plugin for WooCommerce unaffected
Version Status Constraints
* affected < 1.4.5
meowcrew Age Verification Screen for WooCommerce unaffected
Version Status Constraints
* affected < 1.0.1
dots Enhanced Ecommerce Google Analytics for WooCommerce unaffected
Version Status Constraints
* affected < 3.6.3
wpjoli Joli FAQ SEO – WordPress FAQ Plugin unaffected
Version Status Constraints
* affected < 1.0.4
dots Mass Pages/Posts Creator unaffected
Version Status Constraints
* affected < 2.1.5
sebet WP Relevant Ads unaffected
Version Status Constraints
* affected —
gloriousthemes GloriousThemes Starter Sites unaffected
Version Status Constraints
* affected —
oloyede-jamiu WP Group Promoter unaffected
Version Status Constraints
* affected —
chetmac Airpress unaffected
Version Status Constraints
* affected —
wpt00ls Schema Plugin For Divi, Gutenberg & Shortcodes unaffected
Version Status Constraints
* affected ≤ 4.0.1
sindyakinsergei Giveaways for woocommerce unaffected
Version Status Constraints
* affected —
hiddenpearls Custom Login Page Customizer unaffected
Version Status Constraints
* affected < 2.1.8
humblethemes LearnMore unaffected
Version Status Constraints
* affected —
marcqueralt DeMomentSomTres Media Tools Auto unaffected
Version Status Constraints
* affected —
oceanwp Ocean Extra unaffected
Version Status Constraints
* affected < 1.9.4
collizo4sky kk Star Ratings – Rate Post & Collect User Feedbacks unaffected
Version Status Constraints
* affected < 5.2.9
stevehenty Drop Shadow Boxes unaffected
Version Status Constraints
* affected < 1.7.4
wpt00ls FAQ Manager For Divi, Gutenberg Block & Shortcode unaffected
Version Status Constraints
* affected < 5.4.1
pagup Ads.txt & App-ads.txt Manager for WordPress unaffected
Version Status Constraints
* affected < 1.1.7.0
fullworks Quick Contact Form unaffected
Version Status Constraints
* affected < 8.0.2
glowlogix WP Frontend Profile unaffected
Version Status Constraints
* affected < 1.2.5
dgwyer SVG Flags – Beautiful Scalable Flags For All Countries! unaffected
Version Status Constraints
* affected < 0.9.6
ldninjas/ Drip Feed Content Extended for Learndash unaffected
Version Status Constraints
* affected —
infornweb Posts List Designer by Category – List Category Posts Or Recent Posts unaffected
Version Status Constraints
* affected < 2.1.7
aguilerasoft Conversion de moneda Woocommerce unaffected
Version Status Constraints
* affected —
pagup VidSEO | WordPress Video SEO embedder with transcripts (Youtube & Vimeo) unaffected
Version Status Constraints
* affected < 1.2.4
nplugins Before and After Product Images for WooCommerce unaffected
Version Status Constraints
* affected —
renaudbod Woocommerce Customer Reviews with Artificial Intelligence analyzis, with IBM Watson Tone Analyzer unaffected
Version Status Constraints
* affected —
ivanchernyakov LawPress – Law Firm Website Management unaffected
Version Status Constraints
* affected —
dots Shipping Method Display Style for WooCommerce unaffected
Version Status Constraints
* affected < 3.7.5
wproyal Royal Elementor Addons and Templates unaffected
Version Status Constraints
* affected < 1.3.33
modulemasters SQL Reporting Services – SSRS Plugin for WordPress unaffected
Version Status Constraints
* affected —
josevega Bulk Edit Posts and Products in Spreadsheet unaffected
Version Status Constraints
* affected < 2.24.13
lkoudal Delete Duplicate Posts unaffected
Version Status Constraints
* affected < 4.7.5
xjohnyk WS Bootstrap unaffected
Version Status Constraints
* affected —
meeplugins Clean Social Icons unaffected
Version Status Constraints
* affected —
andyabelow Media Library File Download unaffected
Version Status Constraints
* affected < 1.1
cadudecastroalves WP Link Bio unaffected
Version Status Constraints
* affected < 1.4.5
pagup Internal Linking for SEO traffic & Ranking – Auto internal links (100% automatic) unaffected
Version Status Constraints
* affected < 1.0.4
cyberhobo Geo Mashup unaffected
Version Status Constraints
* affected < 1.13.6
tobias_conrad Builder for WooCommerce product reviews shortcodes – ReviewShort unaffected
Version Status Constraints
* affected < 1.0.17
anssilaitila Contact List – Premium Staff Listing, Business Directory Plugin & Address Book unaffected
Version Status Constraints
* affected < 2.9.50
wpexpertsio Post Snippets – Custom WordPress Code Snippets Customizer unaffected
Version Status Constraints
* affected < 3.1.7
shawoninfo SocialMark – Easy Watermark/Logo on Social Media Post Link Share Preview unaffected
Version Status Constraints
* affected < 2.0.5
mnelson4 Print My Blog – Print, PDF, & eBook Converter WordPress Plugin unaffected
Version Status Constraints
* affected < 3.11.4
wpdelicious WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) unaffected
Version Status Constraints
* affected < 1.3.5
blackandwhitedigital TreePress – Easy Family Trees & Ancestor Profiles unaffected
Version Status Constraints
* affected < 2.0.21
paulio21 Postcode Redirect unaffected
Version Status Constraints
* affected ≤ 4.4.1
nitin247 Product Author for WooCommerce unaffected
Version Status Constraints
* affected < 1.0.3
imtiazrayhan WP Coupons and Deals – WordPress Coupon Plugin unaffected
Version Status Constraints
* affected < 3.1.12
spartac Feedpress Generator – External RSS Frontend Customizer unaffected
Version Status Constraints
* affected < 1.2.0
wpvibes Form Vibes – Database Manager for Forms unaffected
Version Status Constraints
* affected < 1.4.3
majick/ WP AutoMedic unaffected
Version Status Constraints
* affected —
dots Banner Management For WooCommerce unaffected
Version Status Constraints
* affected < 2.2.3
smgteam Duplicate Variations for Woocommerce unaffected
Version Status Constraints
* affected —
thinleek Send Prebuilt Emails unaffected
Version Status Constraints
* affected —
essekia FAQ / Accordion / Docs – Helpie WordPress FAQ Accordion plugin unaffected
Version Status Constraints
* affected < 1.7.7
livemesh Livemesh SiteOrigin Widgets unaffected
Version Status Constraints
* affected < 2.8.3
livemesh Livemesh Addons for Beaver Builder unaffected
Version Status Constraints
* affected < 2.8.4
9brada6 Tabs with Recommended Posts (Widget) unaffected
Version Status Constraints
* affected —
closemarketing Spanish Market Enhancements for WooCommerce unaffected
Version Status Constraints
* affected < 2.1
infosatech RevivePress – Keep your Old Content Evergreen unaffected
Version Status Constraints
* affected < 1.3.1
invisnet WP fail2ban – Advanced Security Plugin unaffected
Version Status Constraints
* affected < 4.4.0.2
ultradevs Ultra Elementor Addons unaffected
Version Status Constraints
* affected —
wpcohort/ RecurWP – WordPress Recurly Payment Gateway unaffected
Version Status Constraints
* affected —
buttonizer Smart Floating / Sticky Buttons – Call, Sharing, Chat Widgets & More – Buttonizer unaffected
Version Status Constraints
* affected < 2.6.3
alanfuller Quick Event Manager unaffected
Version Status Constraints
* affected < 9.2.17
wpchill Image Photo Gallery Final Tiles Grid unaffected
Version Status Constraints
* affected < 3.5.5
bradvin Lightbox & Modal Popup WordPress Plugin – FooBox unaffected
Version Status Constraints
* affected < 2.7.17
wpdevpowers WP Dev Powers – Display Screen Dimensions to Admin Plugin unaffected
Version Status Constraints
* affected —
johnc1979 Ultimate Bulk SEO Noindex Nofollow – Speed up Penalty Recovery Ultimate SEO Booster unaffected
Version Status Constraints
* affected —
peterschulznl WP Data Access – WordPress App, Table and Form Builder plugin unaffected
Version Status Constraints
* affected < 5.1.4
kaira StoreCustomizer – A plugin to Customize all WooCommerce Pages unaffected
Version Status Constraints
* affected < 2.3.8
mhmrajib WordPress News Plugin – TopNewsWp unaffected
Version Status Constraints
* affected < 2.0
codeatlantic User Menus – Nav Menu Visibility unaffected
Version Status Constraints
* affected < 1.2.9
webheadllc Contact Form 7 Multi-Step Forms unaffected
Version Status Constraints
* affected < 4.1.91
5starplugins Easy Age Verify unaffected
Version Status Constraints
* affected < 1.6.1
brandonfire Blocked in China | Check if your site is available in the Chinese mainland unaffected
Version Status Constraints
* affected < 1.0.3
josevega WooCommerce Disable Payment Methods based on cart conditions unaffected
Version Status Constraints
* affected < 1.13.1.1
ejslondon/ Awesome SSL unaffected
Version Status Constraints
* affected —
iksstudio Iks Menu – WordPress Category Accordion Menu & FAQs unaffected
Version Status Constraints
* affected < 1.9.2
prelc Purus unaffected
Version Status Constraints
* affected —
janwyl Hooked Editable Content unaffected
Version Status Constraints
* affected —
mdedev Run Contests, Raffles, and Giveaways with ContestsWP unaffected
Version Status Constraints
* affected < 1.9.0
themeythemes Post Carousel Divi unaffected
Version Status Constraints
* affected < 1.1.2
anasbinmukim MailChimp Manager unaffected
Version Status Constraints
* affected —
premmerce Premmerce Permalink Manager for WooCommerce unaffected
Version Status Constraints
* affected < 2.3.5
ivacy Secure IP Logins unaffected
Version Status Constraints
* affected —
kylegilman Videopack unaffected
Version Status Constraints
* affected < 4.7.4
premmerce Premmerce WooCommerce Customers Manager unaffected
Version Status Constraints
* affected < 1.1.13
wpvibes AnyWhere Elementor unaffected
Version Status Constraints
* affected < 1.2.5
badhonrocks Divi Torque Lite – Divi Theme and Extra Theme unaffected
Version Status Constraints
* affected < 3.5.0
elbisnero Events Calendar Registration unaffected
Version Status Constraints
* affected —
wpexpertsio Rocket Maintenance Mode & Coming Soon Page unaffected
Version Status Constraints
* affected < 4.3
h3technologies WordPress WooCommerce Sync for Google Sheet unaffected
Version Status Constraints
* affected —
pootlepress/ Easy Smooth Scroll Links – Smooth Scrolling Anchor unaffected
Version Status Constraints
* affected < 2.23.1
sj_o Page Builder Gutenberg Blocks – Kioken Blocks unaffected
Version Status Constraints
* affected —
matstars Cryptocurrency Portfolio Tracker unaffected
Version Status Constraints
* affected —
sebet Go Fetch Jobs (for WP Job Manager) unaffected
Version Status Constraints
* affected ≤ 1.7.3.2
sangaran Quick Affiliate Store unaffected
Version Status Constraints
* affected —
wpt00ls WP Tools Divi Blog Carousel unaffected
Version Status Constraints
* affected < 1.3.0
tycoon12344 Post to Google My Business (Google Business Profile) unaffected
Version Status Constraints
* affected < 3.0.10
nicheaddons NicheBase unaffected
Version Status Constraints
* affected < 1.2.2
webmuehle WPVisitorInfo – Show Visitor Information & Conditional Data Based On That Information unaffected
Version Status Constraints
* affected —
premmerce Premmerce unaffected
Version Status Constraints
* affected < 1.3.16
woopops CartPops – High Converting Add To Cart Popup For WooCommerce unaffected
Version Status Constraints
* affected < 1.4.17
scrollsequence Scrollsequence – Cinematic Scroll Image Animation Plugin unaffected
Version Status Constraints
* affected < 1.2.4
kaira Elation unaffected
Version Status Constraints
* affected —
thecodechime Cuisine Palace unaffected
Version Status Constraints
* affected —
dots Product Attachment for WooCommerce unaffected
Version Status Constraints
* affected < 2.1.3
masterblocks Master Blocks – Gutenberg Site Builder unaffected
Version Status Constraints
* affected —
moomooagency Product Options and Price Calculation Formulas for WooCommerce – Uni CPO unaffected
Version Status Constraints
* affected < 4.9.14
kitthemes WordPress Coupon Plugin for Bloggers and Marketers – WP Offers unaffected
Version Status Constraints
* affected < 1.1.4
tripetto WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto unaffected
Version Status Constraints
* affected < 5.3.1
mumarym1985 Widgets on Pages and Posts unaffected
Version Status Constraints
* affected —
wordplus Better Messages – WCFM Integration unaffected
Version Status Constraints
* affected —
wpgeniuz SheetPress – Manage WordPress Meta data with Google Sheets unaffected
Version Status Constraints
* affected —
olezhyk5 Advanced Custom Fields options import/export unaffected
Version Status Constraints
* affected —
fullworks Quick Paypal Payments unaffected
Version Status Constraints
* affected < 5.7.22
chillichalli Tarot Card Oracle unaffected
Version Status Constraints
* affected < 1.0.6
cloudsponge Better Sharing unaffected
Version Status Constraints
* affected ≤ 1.7.1
intoxstudio Restrict User Access – Ultimate Membership & Content Protection unaffected
Version Status Constraints
* affected < 2.2.2
wupo WUPO Group Attributes for WooCommerce unaffected
Version Status Constraints
* affected ≤ 2.0.0
shelob9 Nugget by Ingot: Easy, automated and native A/B testing for everyone unaffected
Version Status Constraints
* affected —
fsruslan FeedbackScout: The easiest way to collect, prioritise, manage and track customer feedback. unaffected
Version Status Constraints
* affected —
deothemes Arendelle unaffected
Version Status Constraints
* affected < 1.1.3
boltonstudios Easy Zillow Reviews unaffected
Version Status Constraints
* affected < 1.4.1
janthielemann Battle Suit for Divi unaffected
Version Status Constraints
* affected —
jkohlbach Store Toolkit – WooCommerce Extensions, Quick Enhancements & Handy Tools unaffected
Version Status Constraints
* affected < 2.3.4
weconnectcode WCC SEO Keyword Research unaffected
Version Status Constraints
* affected —
zeetheme Elements for LifterLMS unaffected
Version Status Constraints
* affected —
commercepundit Custom Registration and Custom Login Forms with New Recaptcha unaffected
Version Status Constraints
* affected —
wpexpertsio Quote for WooCommerce Lite – Add to Quote Plugin Lets Customers Request Custom Quotes for Products using the Request a Quote Plugin for WooCommerce unaffected
Version Status Constraints
* affected < 1.4.9
mohammedrezq Wadi Survey unaffected
Version Status Constraints
* affected —
atakanoz Performance Kit unaffected
Version Status Constraints
* affected —
dovyp Page Builder for Gutenberg – StarterBlocks unaffected
Version Status Constraints
* affected —
gkher/ Impexium Single Sign On unaffected
Version Status Constraints
* affected —
xplodedthemes XT Quick View for WooCommerce unaffected
Version Status Constraints
* affected < 1.9.6
josevega Live Drag and Drop Builder for Contact Form 7 unaffected
Version Status Constraints
* affected < 1.2.4
nicheaddons Primary Addon for Elementor unaffected
Version Status Constraints
* affected < 1.5.2
jaydeep-nimavat JDs Portfolio unaffected
Version Status Constraints
* affected —
mbrown24 TwentyFourth WP Scraper unaffected
Version Status Constraints
* affected —
creativethemeshq Blocksy Companion unaffected
Version Status Constraints
* affected < 1.8.20
kartikparmar/ WordPress Google Translate unaffected
Version Status Constraints
* affected < 1.2
darell Hasium unaffected
Version Status Constraints
* affected < 1.6.5
marviorocha Station Pro unaffected
Version Status Constraints
* affected —
theeventscalendar Event Tickets and Registration unaffected
Version Status Constraints
* affected < 5.3.0.1
kaggdesign Gateway for PayLate on WooCommerce unaffected
Version Status Constraints
* affected ≤ 1.4
pagup Auto SEO META keywords (META tags keywords) optimization + WooCommerce unaffected
Version Status Constraints
* affected < 1.0.4
co2ok ClimateClick: Climate Action for all unaffected
Version Status Constraints
* affected ≤ 1.0.9.21
premmerce Premmerce SEO for WooCommerce unaffected
Version Status Constraints
* affected < 2.1.5
wpexpertsio Wholesale for WooCommerce — This Wholesale Plugin Helps B2B and B2C Businesses Streamline Wholesale Products, Pricing, and User Roles, Automating their WooCommerce Wholesale Stores unaffected
Version Status Constraints
* affected < 1.6.1
ldninjas/ Frontend group restriction for LearnDash unaffected
Version Status Constraints
* affected —
jetixwp Really Simple Featured Video – Featured video support for Posts, Pages & WooCommerce Products unaffected
Version Status Constraints
* affected ≤ 0.5.1
fullworks Display Eventbrite Events unaffected
Version Status Constraints
* affected < 4.4.8
xplodedthemes XT Floating Cart for WooCommerce unaffected
Version Status Constraints
* affected < 2.6.3
wpeka-club Cookie Consent for WP – Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) unaffected
Version Status Constraints
* affected < 2.1.1
milmor WP SPID Italia unaffected
Version Status Constraints
* affected < 2.3.5
bycrik Tiered Pricing Table for WooCommerce unaffected
Version Status Constraints
* affected < 2.6.1
codexonics Migrate WordPress Website & Backups – Prime Mover unaffected
Version Status Constraints
* affected < 1.5.0
vernal Replyable – Subscribe to Comments and Reply by Email unaffected
Version Status Constraints
* affected < 2.2.9
webmuehle Court Reservation – Manage Your Court Bookings Online unaffected
Version Status Constraints
* affected < 1.7.0
jurski VO Store Locator – WP Store Locator Plugin unaffected
Version Status Constraints
* affected —
fullworks Get Directions Map unaffected
Version Status Constraints
* affected < 2.15.8
premmerce Premmerce Redirect Manager unaffected
Version Status Constraints
* affected < 1.0.7
snazzythemes SnazzyAdmin WP Admin Theme unaffected
Version Status Constraints
* affected —
deothemes Amela unaffected
Version Status Constraints
* affected < 1.0.5
javmah Woocommerce Customers Order History unaffected
Version Status Constraints
* affected < 5.2.1
lynn999 EthPress – Web3 Login unaffected
Version Status Constraints
* affected < 1.5.1
dangub86 Ant Admin Notices for Team unaffected
Version Status Constraints
* affected —
josevega WooCommerce Bulk Edit Coupons – WP Sheet Editor unaffected
Version Status Constraints
* affected < 1.3.28
mattpramschufer Pay For Post with WooCommerce unaffected
Version Status Constraints
* affected < 3.0.9
alex-ye bbResolutions unaffected
Version Status Constraints
* affected —
passionatebrains WooCommerce Google Analytics Integration By Advanced WC Analytics unaffected
Version Status Constraints
* affected < 3.0.1
cliffpaulick TK SmugMug Slideshow Shortcode unaffected
Version Status Constraints
* affected —
wpchill Lightbox – EverlightBox Gallery unaffected
Version Status Constraints
* affected < 1.1.18
cebbi Unakit unaffected
Version Status Constraints
* affected < 1.2.4.2
mojofywp WP Affiliate Disclosure unaffected
Version Status Constraints
* affected < 1.2.3
interfacelab Media Cloud for Bunny CDN, Amazon S3, Cloudflare R2, Google Cloud Storage, DigitalOcean and more unaffected
Version Status Constraints
* affected < 4.3.1
rafacarvalhido RaCar Clear Cart for WooCommerce unaffected
Version Status Constraints
* affected < 1.2.3
litonice13 WP Disable Sitemap unaffected
Version Status Constraints
* affected < 1.0.4
davidanderson Internal Link Juicer: SEO Auto Linker for WordPress unaffected
Version Status Constraints
* affected < 1.3.0
munirkamal Block Slider – Responsive Image Slider, Video Slider & Post Slider unaffected
Version Status Constraints
* affected < 2.0.0
milukove Pinblocks — Gutenberg blocks with Pinterest widgets unaffected
Version Status Constraints
* affected —
ronena100 Contact Widgets For Elementor all the contact links you need in one place unaffected
Version Status Constraints
* affected —
tickera Tickera – WordPress Event Ticketing unaffected
Version Status Constraints
* affected < 3.4.9.2
bplugins StreamCast – Radio Player for WordPress unaffected
Version Status Constraints
* affected < 2.1.4
johnc1979 Sticky add to cart for Woo unaffected
Version Status Constraints
* affected —
blockypage BlockyPage – Gutenberg Based Page Builder unaffected
Version Status Constraints
* affected —
maciejbak85 Pro Broken Links Maintainer unaffected
Version Status Constraints
* affected —
wpschoolcalendar WP School Calendar unaffected
Version Status Constraints
* affected < 3.6
listplus ListPlus – Unlimited Listing Directory unaffected
Version Status Constraints
* affected —
walkerwp Walker Core unaffected
Version Status Constraints
* affected < 1.1.8
patrickposner Agy – Age verification for WooCommerce unaffected
Version Status Constraints
* affected < 4.3.1
ggedde Modern Designs for Gravity Forms unaffected
Version Status Constraints
* affected —
rankbear RankBear unaffected
Version Status Constraints
* affected —
staxwp STAX Header Builder unaffected
Version Status Constraints
* affected < 1.3.6
fastaf/ Fast Checkout for WooCommerce unaffected
Version Status Constraints
* affected < 1.1.17
boriscolombier/ WooCommerce PayPlug unaffected
Version Status Constraints
* affected —
alphabposervice Easy Code Snippets unaffected
Version Status Constraints
* affected < 1.0.1
w3scloud W3SCloud Contact Form 7 to Zoho CRM unaffected
Version Status Constraints
* affected < 2.1.0
elementinvader Widget Detector for Elementor unaffected
Version Status Constraints
* affected < 1.2.0
pagup Add Tiktok Pixel for Tiktok ads (+Woocommerce) unaffected
Version Status Constraints
* affected < 1.2.2
gowebsmarty WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect to Force HTTPS, Security+ unaffected
Version Status Constraints
* affected < 5.7.10
wordplus Better Messages – Integration for WC Vendors Marketplace unaffected
Version Status Constraints
* affected < 1.0.7
alleythemes Alley Business Toolkit unaffected
Version Status Constraints
* affected < 1.1.8
premmerce Premmerce Product Filter for WooCommerce unaffected
Version Status Constraints
* affected < 3.6.2
pippozanardo WP Search Filter unaffected
Version Status Constraints
* affected —
alphabposervice Easy Post Views Count unaffected
Version Status Constraints
* affected < 1.0.5
dotrex Power Ups for Elementor unaffected
Version Status Constraints
* affected < 1.2.2
dvizhenia Social Kit unaffected
Version Status Constraints
* affected —
pluginandplay Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider unaffected
Version Status Constraints
* affected < 2.1.2
mhmrajib HM Multiple Roles unaffected
Version Status Constraints
* affected < 1.6
multicollab Team Collaboration Plugin for WordPress Editorial teams- Multicollab unaffected
Version Status Constraints
* affected < 2.0.4
arabianmido Alt Manager unaffected
Version Status Constraints
* affected < 1.5.0
premmerce Premmerce Product Search for WooCommerce unaffected
Version Status Constraints
* affected < 2.2.3
sovstack WP Security Safe unaffected
Version Status Constraints
* affected < 2.4.4
josevega WooCommerce Bulk Edit Products – WP Sheet Editor unaffected
Version Status Constraints
* affected < 1.7.13
danielealessandra Da Reactions unaffected
Version Status Constraints
* affected < 3.20.2
wpscripts Food Store – Online Food Delivery & Pickup unaffected
Version Status Constraints
* affected < 1.4
thijzie Abeta Link PunchOut unaffected
Version Status Constraints
* affected —
javmah jav&#039;s – WooCommerce and Trello integration WooTrello unaffected
Version Status Constraints
* affected < 2.3.1
pagebuildersandwich Page Builder Sandwich – Front End WordPress Page Builder Plugin unaffected
Version Status Constraints
* affected < 4.5.5
switcorp WP Sessions Time Monitoring Full Automatic unaffected
Version Status Constraints
* affected < 1.0.6
pasyuk WoowGallery – image gallery / content gallery / ecommerce gallery / social gallery / video gallery / album photo gallery unaffected
Version Status Constraints
* affected < 1.1.9
upfiv WordPress Auto SEO Plugin – Upfiv SEO Wizard unaffected
Version Status Constraints
* affected —
wpsoul Greenshift – animation and page builder blocks unaffected
Version Status Constraints
* affected < 1.1.6
nicheaddons Restaurant & Cafe Addon for Elementor unaffected
Version Status Constraints
* affected < 1.4.6

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Wordpress Subscribe
Wordpress Subscribe

Project Subscriptions

Vendors Products
Wordpress Subscribe
Wordpress Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2022-53926 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://freemius.com/blog/managing-security-issues-open-source-freemius-sdk-security-disclosure/ cve-icon cve-icon
https://web.archive.org/web/20220225174410/https%3A//www.pluginvulnerabilities.com/2022/02/25/our-security-review-of-wordpress-plugin-found-freemius-library-still-contained-vulnerabilities-3-years-after-major-security-incident/ cve-icon cve-icon
https://wpdirectory.net/search/01FWPVWA7BC5DYGZHNSZQ9QMN5 cve-icon cve-icon
https://wpdirectory.net/search/01G02RSGMFS1TPT63FS16RWEYR cve-icon cve-icon
https://wpscan.com/vulnerability/6dae6dca-7474-4008-9fe5-4c62b9f12d0a cve-icon cve-icon
https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=cve cve-icon cve-icon
History

Sat, 12 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00054}

 epss

{'score': 0.00056}

Wed, 16 Oct 2024 18:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 16 Oct 2024 07:00:00 +0000

Type Values Removed Values Added
Description The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.
Title Freemius SDK <= 2.4.2 - Missing Authorization Checks
Weaknesses CWE-862
References
Metrics cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Wordfence

Published:

Updated: 2024-10-16T18:06:13.377Z

Reserved: 2024-10-15T18:12:02.205Z

Link: CVE-2022-4974

cve-icon Vulnrichment

Updated: 2024-10-16T15:31:17.138Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-10-16T07:15:12.760

Modified: 2024-10-16T16:38:14.557

Link: CVE-2022-4974

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2025-07-12T22:31:16Z

Weaknesses