blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2022-4974

MEDIUM 6.3 CVSS 3.1
Published
October 16, 2024
Last modified
June 17, 2026
NVD status
Deferred
Reported by
security@wordfence.com
Weakness
CWE-862
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Description

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.

Affected WordPress components

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • dashlabsltd YASR – Yet Another Star Rating Plugin for WordPress — Before 2.0.2
  • nicheaddons Events Addon for Elementor — Before 1.9.8
  • dots Fraud Prevention For WooCommerce and EDD — Before 2.1.0
  • wpengine Gutenberg Blocks – ACF Blocks Suite — Before 2.6.8
  • bouncingsprout Ultimeter — Before 2.7.6
  • toddhalfpenny Past Events Extension — Versions not specified
  • pootlepress Pootle Pagebuilder – WordPress Page builder — Before 5.7.1
  • powerfulwp Local Delivery Drivers for WooCommerce — Before 1.8.5
  • kkikuchi1220 Ultimate Gutenberg – Custom Block Templates — Versions not specified
  • josevega WP Required Taxonomies – Categories and Tags Mandatory — Before 1.1.8
  • pmbaldha Featured Products First for WooCommerce – A Extension of WooCommerce (WooCommerce Addon Plugin) — Versions not specified
  • sslzen SSL Zen — SSL Certificate Installer & HTTPS Redirects — Up to and including 4.0.4
  • wisersteps Streak CRM For Gmail For Contact Form 7 – WordPress Plugin — Before 1.0.9
  • wpdevpowers WordPress Dev Powers – ACF Color Coded Field Types Plugin — Versions not specified
  • benmoreassynt DancePress (TRWA) — Up to and including 3.1.2
  • dots Product Size Charts Plugin for WooCommerce — Before 2.2.3
  • tribalnerd Wp My Admin Bar — Versions not specified
  • setka A no-code page builder for beautiful performance-based content — Before 2.1.17
  • mikebels LocalSEOMap — Versions not specified
  • cromer12 Easy Prayer — Versions not specified
  • rafalosinski AdFoxly – Ad Manager, AdSense Ads & Ads.txt — Up to and including 1.8.4
  • stevehenty WP Get Personal — Versions not specified
  • theafricanboss/ Checkout with Cash App on EDD — Versions not specified
  • usmanaliqureshi Server Info — Versions not specified
  • themelocation Custom WooCommerce Checkout Fields Editor — Up to and including 1.2.6
  • krsp KRSP Frontend File Uploader — Versions not specified
  • bplugins Panorama – 360 Virtual Tour, Panoramic image viewer and More — Before 1.0.8
  • janwyl Bulk Attachment Download — Before 1.3.5
  • majick AutoSave Net — Versions not specified
  • premmerce Premmerce Wholesale Pricing for WooCommerce — Before 1.1.8
  • jcodex Any Popup – Popup Forms, Optins & Ads — Versions not specified
  • theafricanboss/ Checkout with Venmo on EDD — Versions not specified
  • dreamfox Payment Gateway Per Product for WooCommerce — Before 3.1.6
  • hqtheme HQTheme Extra — Versions not specified
  • vincoit Vit Website Reviews — Versions not specified
  • daigo75 EU VAT Assistant for WooCommerce — Before 2.0.28.220224
  • eedee WordPress Slider Block Gutenslider — Before 5.7.0
  • surbma HuCommerce | Magyar kiegészítések WooCommerce webáruházakhoz — Before 30.3.0
  • lostboy7 KVoucher — Versions not specified
  • bplugins YT Player – Embed and Customize Video Players — Before 1.5.1
  • whiteshadow Error Log Monitor — Before 1.7.1
  • slidedeck SlideDeck: Responsive WordPress Slider Plugin — Versions not specified
  • premmerce Premmerce Multi-currency for Woocommerce — Before 2.3.2
  • mvvapps/ Booking Addon for WooCommerce — Before 4.2.0
  • wpeventpartners/ WP Event Partners – WordPress Plugin for Event and Conference Management — Up to and including 1.2.4
  • saadiqbal WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce — Before 4.2.1
  • passionatebrains AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization — Before 2.6
  • majick ForceField — Versions not specified
  • richard-b FIT: Featured Image Toolkit — Versions not specified
  • themekraft All in One Invite Codes — Before 1.0.13
  • dots Dynamic Pricing and Discount Rules for WooCommerce — Before 2.2.3
  • wordplus Better Messages – Live Chat, Chat Rooms, Real-Time Messaging & Private Messages — Before 1.9.9.170
  • wpt00ls Grid & Styler For Contact Form 7 And Divi — Before 1.4.1
  • protectyouruploads Protect Uploads with Login – Protect Your Uploads — Versions not specified
  • sakurapixel Atlas – Knowledge Base — Versions not specified
  • dgwyer Simple Sitemap – Create a Responsive HTML Sitemap — Before 3.5.5
  • bplugins Super Video player – Fully Customizable Video Player with Playlist — Before 1.6.11
  • mhmrajib WP Books Gallery – Build Stunning Book Showcases & Libraries in Minutes — Before 3.6
  • damian-gora FiboSearch – Ajax Search for WooCommerce — Before 1.17.0
  • stevejburge Tag Groups is the Advanced Way to Display Your Taxonomy Terms — Before 1.43.10.1
  • prasadkirpekar WP Free SSL — Before 1.2.7
  • clickervolt ClickerVolt – Affiliate Links & Click Tracking for Performance Marketers — Versions not specified
  • proteusthemes ConsultPress Lite — Versions not specified
  • badhonrocks Styler Mate for Contact Form 7 — Before 1.3.0
  • streamweasels StreamWeasels Twitch Integration — Before 1.3.4
  • pagup MOBILOOK — Mobile View & Mobile‑Friendly Test — Before 1.2.4
  • paulio21 Zip Code Redirect — Up to and including 4.0.1
  • vohotv/ Guestofy – Restaurant Reservations Plugin, Room Planer, Reservation Form — Versions not specified
  • ahmed17 CF7 Constant Contact Fields Mapping — Versions not specified
  • stellarwp Bookit — Booking & Appointment Calendar — Before 2.2.9
  • ethereumicoio EthereumICO — Before 2.3.11
  • risetheme RT Easy Builder – Advanced addons for Elementor — Up to and including 1.4
  • saadiqbal WP Contact Slider – Contact Form Slider Widget — Before 2.4.5
  • ivan_paulin Country Based Payments for WooCommerce — Before 1.4.1
  • wpchill Filr – Secure document library — Before 1.2.1
  • nicheaddons Elasta — Before 1.0.8
  • interactivegeomaps MapGeo – Interactive Geo Maps — Before 1.5.4
  • galoover WordPress Animation Plugin – Animated Everything — Versions not specified
  • wpdever WP Notification Bell — Before 1.3.13
  • melapress Activity Log For MainWP — Before 1.7.1
  • oceas Connected Sermons — Versions not specified
  • josevega Bulk Edit and Create User Profiles – WP Sheet Editor — Before 1.5.13
  • milukove/ Кнопка ЮMoney — Versions not specified
  • kartikparmar/ Bulk WooCommerce Category Creator — Versions not specified
  • alphabposervice Easy Math Captcha for CF7 — Versions not specified
  • litonice13 Master Accordion ( Former WP Awesome FAQ Plugin ) — Before 4.1.8
  • wpdive Better Addons for Elementor — Before 1.3.1
  • livemesh Livemesh Addons by Elementor — Before 7.1.4
  • nitin247 Place Order Without Payment for WooCommerce — Before 2.2
  • boriscolombier/ STEWoo – Super Transactional Emails for WooCommerce — Before 1.2.4
  • marcqueralt DeMomentSomTres Address — Versions not specified
  • johnc1979 Out of stock display for woocommerce — Versions not specified
  • ultimateblocks Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor — Before 2.4.13
  • pagup Bulk Auto Image Title Attribute (Image Title tag) optimizer (Image SEO) — Before 1.2.3
  • princeahmed WP Radio – Worldwide Online Radio Stations Directory for WordPress — Before 3.1.4
  • blackandwhitedigital BookPress – For Book Authors — Before 1.2.3
  • wpchill Qyrr – simply and modern QR-Code creation — Before 0.8
  • wpeka-club WordPress Directory Plugin For Business Listings – WP Local Plus — Before 1.4.5
  • equalizedigital Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance — Before 1.2.8
  • therealwebdisrupt Funnelmentals — Versions not specified
  • blockspare BlockSpare — News, Magazine and Blog Addons for (Gutenberg) Block Editor — Before 2.0.1
  • nasirahmed Forms to Zapier, Integromat, IFTTT, Workato, Automate.io, elastic.io, Built.io, APIANT, Webhook — Before 1.1.9
  • mojofywp Product Carousel For WooCommerce – WoorouSell — Before 1.0.9
  • pagup Better Robots.txt – AI-Ready Crawl Control & Bot Governance — Before 1.4.4
  • gfirem GFireM Fields — Versions not specified
  • elliotvs Coupon Affiliates – Affiliate Plugin for WooCommerce — Before 4.16.4
  • dipcode WP Post Block — Versions not specified
  • attest LMS Plugin – eLearning, Online Courses by Attest — Versions not specified
  • shabti Frontend Admin by DynamiApps — Before 3.3.33
  • ibenic Simple Giveaways – Grow your business, email lists and traffic with contests — Before 2.42.1
  • wpt00ls Masonry Gallery & Posts For Divi (WP Tools) — Before 3.1.2
  • gfirem GFireM Action After — Versions not specified
  • bandido Ukrposhta — Before 1.6.18
  • annastaa annasta Filters for WooCommerce — Before 1.5.0
  • tprintyedisonave WP Lead Stream — Versions not specified
  • stellarwp The Events Calendar — Before 5.14.0.4
  • johnc1979 Focus on Reviews for WooCommerce — Versions not specified
  • pmbaldha Email Tracker — Up to and including 5.3.8
  • wpt00ls Block Styler For Gravity Forms — Up to and including 6.1.0
  • josevega WP Page Templates — Before 1.1.13
  • ggwicz Product Customer List for WooCommerce — Before 3.0.0
  • wpmoose WP Moose — Before 1.0.1
  • samdani Team Members – A WordPress Team Plugin with Gallery, Grid, Carousel, Slider, Table, List, and More — Before 1.1.0
  • jwebsol Floating Social Share Icons and Social Share buttons – Next Previous Post Links – FL — Before 3.6.0
  • co2ok South Pole: Climate action now — Before 1.0.2.0
  • jwind LittleBot Invoices — Versions not specified
  • akdevs Genealogical Tree – Family Tree & Ancestry for WordPress — Up to and including 2.1.5
  • plugins360 Automatic YouTube Gallery — Before 1.6.5
  • nitin247 Thank You Page for WooCommerce — Before 3.1
  • 5starplugins Marijuana Age Verify — Before 1.3.1
  • skshaikat WooCommerce upcoming Products — Versions not specified
  • shabti Frontend Admin – Add and edit posts, pages, users and more all from the frontend — Before 3.3.33
  • matthias-reuter SV Tracking Manager — Before 1.8.02
  • saadiqbal WP Easy Pay – Payment and Donation form Builder for Square — Before 4.0.2
  • flexithemes WordPress SEO Checklist — Versions not specified
  • wgauge wGauge – Free Version — Versions not specified
  • bdthemes Prime Slider – Addons for Elementor — Before 2.7.0
  • themekraft Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) — Before 2.6.3
  • wpt00ls WP Tools Divi Product Carousel — Before 1.5.0
  • aharonyan Guest posting / Frontend Posting / Front Editor – WP Front User Submit — Before 3.4.1
  • woodyhayday Social Gallery Lite — Versions not specified
  • bfintal Stackable – Page Builder Gutenberg Blocks — Before 3.1.5
  • seezee Five-Star Ratings Shortcode — Before 1.2.39
  • wpkube CAPTCHA 4WP – Antispam CAPTCHA solution for WordPress — Before 7.0.5
  • premmerce Premmerce Wishlist for WooCommerce — Before 1.1.8
  • wordpresschef Salon Booking System – Free Version — Before 7.6.3
  • surbma Surbma | GDPR Proof Cookie Consent & Notice Bar — Before 17.5.3
  • dots Advanced Menu Manager Pro – Built for Content-heavy WordPress Sites to Add, Filter, Lock, and Edit Menus Easily — Versions not specified
  • princeahmed Live TV Player – Worldwide Live TV Channels Player for WordPress — Before 1.2.3
  • vanyukov Market Exporter — Up to and including 2.0.13
  • litonice13 WP Adminify – White Label WordPress, Admin Menu Editor, Login Customizer — Before 2.0.5
  • themekraft TK Google Fonts GDPR Compliant — Before 2.2.1
  • starfishwp Starfish Review Generation & Marketing for WordPress — Before 3.0.26
  • halmat WP Emaily — Versions not specified
  • nicheaddons Education Addon for Elementor — Before 1.2
  • matthias-reuter SV Proven Expert — Before 1.8.01
  • wpeka-club SurveyFunnel – Survey Plugin for WordPress — Before 1.1.3
  • pluginsware Advanced Classifieds & Directory Pro — Before 1.8.8
  • smartwpress Music Player for Elementor – Audio Player & Podcast Player — Before 1.5.5
  • ethereumicoio Cryptocurrency Product for WooCommerce — Before 3.14.6
  • kenanfallon WooCommerce Next Order Coupon — Versions not specified
  • themeythemes Overlay Image Divi Module — Before 1.3.2
  • pmbaldha Email Header Footer — Versions not specified
  • bplugins Document Viewer – Embed Word, Excel, PowerPoint & PDFs Instantly — Before 2.2.5
  • nplugins Price Bands for WooCommerce — Versions not specified
  • wpvibes Addon Elements for Elementor (formerly Elementor Addon Elements) — Before 1.11.14
  • drosendo Smart Variations Images & Swatches for WooCommerce — Before 5.1.10
  • 5starplugins Featured Images in RSS for Mailchimp & More — Before 1.5.9
  • ibenic Simple Sponsorships — Versions not specified
  • unitecms Unlimited Elements For Elementor — Before 1.5.3
  • wpjoli Joli Table Of Contents — Before 1.3.9
  • getsparrow Sparrow: Product Reviews and Ratings for WooCommerce — Versions not specified
  • zerozendesign Multi Page Auto Advance for Gravity Forms — Before 4.3
  • mcurly Generate Images (AI) – Magic Post Thumbnail — Before 3.3.11
  • ibenic Live Scores for SportsPress — Versions not specified
  • dots Hide Shipping Method For WooCommerce — Before 1.3.1
  • wpt00ls Ultimate Carousel For Divi — Before 4.3.1
  • prasadkirpekar WP Meta and Date Remover — Before 1.9.6
  • wpt00ls Image Carousel For Divi — Before 1.5.0
  • dudo Comments Not Replied To — Before 1.5.3
  • wisersteps Contact Form 7 – Capsule CRM – Integration — Before 1.0.5
  • alexmoss Opensea — Before 1.0.3
  • tranzly WordPress Translation plugin for Post, Pages & WooCommerce products. Tranzly IO AI DeepL automatic WordPress Translator. — Before 1.1.1
  • alekv Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing — Before 1.14.3
  • gowebsmarty Modern Addons for Elementor Page Builder — Before 1.2.0
  • themesei Viralike — Versions not specified
  • wpdevpowers WordPress Dev Powers – Element Selector jQuery Powers Plugin — Versions not specified
  • wpmunich WP Munich Blocks – Gutenberg Blocks for WordPress — Before 0.11.0
  • inputwp Availability Datepicker – Booking Calendar for Contact Form 7 – Input WP — Up to and including 2.1
  • diviframework Footer Plugin for Divi — Versions not specified
  • mhmrajib AidWP – Donation & Payment Forms (Stripe Powered) — Before 2.9
  • saadiqbal New User Approve — Before 2.1
  • gfirem GFireM Advance Search — Versions not specified
  • giladtakoni WPMailer – The best mail builder, No More Core for your emails support Elementor, CF7 forms etc… — Versions not specified
  • anssilaitila Shared Files – Frontend File Upload Form & Secure File Sharing — Before 1.6.72
  • wpbits WPBITS Addons For Elementor Page Builder — Before 1.3.2
  • prelc Speculor — Versions not specified
  • pagup WP Google Street View (with 360° virtual tour) & Google maps + Local SEO — Before 1.0.9
  • deothemes WordPress Everse Starter Sites – Elementor Templates — Before 1.2.1
  • litonice13 Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits — Before 1.8.5
  • versacomp Choice Payment Gateway for WooCommerce — Before 2.0.5
  • maartenbelmans Domain Mapping System | Create Microsites with Multiple Alias Domains (multisite optional) — Before 1.7
  • stylingwebben Order and Inventory Manager for WooCommerce — Before 1.4.3
  • ninjalibs Ninja Libs Amazon SES — Versions not specified
  • royalnavneet WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments — Before 4.3
  • webheadllc WP-Cron Status Checker — Before 1.2.4
  • bilaltas CodeKit – Custom Codes Editor — Before 2.3
  • fooplugins Gallery by FooGallery — Before 2.1.34
  • kartikparmar Change Price Title for WooCommerce — Up to and including 2.5
  • edgegalleryplugin WordPress Gallery Plugin – Edge Photo Gallery — Versions not specified
  • gloriousthemes Glorious Services & Support — Versions not specified
  • alphabposervice Easy Newsletter Signups — Before 1.0.4
  • mikewire_rocksolid Announcement & Notification Banner – Bulletin — Before 3.1.0
  • dam6pl Advanced Database Replacer — Versions not specified
  • tribalnerd Multisite Robots.txt Manager — Versions not specified
  • irkanu Simple Social Page Widget & Shortcode — Versions not specified
  • josevega Product Country Restrictions for WooCommerce – Country Catalogs — Before 1.13.0
  • shamim51 Front End PM — Before 11.3.4
  • divisumo Ultimate Divi Modules Suite – Divi Sumo Lite — Versions not specified
  • xplodedthemes XT Points & Rewards for WooCommerce — Before 1.4.3
  • themelocation Widgets for WooCommerce Products on Elementor — Before 1.0.9
  • popeating Delivery for WooCommerce — Versions not specified
  • mohsinoffline NotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce — Before 1.3.7
  • cleverplugins Security Ninja – WordPress Security & Firewall — Before 5.135
  • xyulex TinyMCE Annotate — Versions not specified
  • damian-gora Justified Gallery — Before 1.5.1
  • mberding Book BuyBack Prices — Versions not specified
  • daniyalahmedk Fuse Social Floating Sidebar — Before 5.4.3
  • wphrmanager WP-HR Manager: The Human Resources Plugin for WordPress — Before 3.0.3
  • coderpress Emails Blacklist for Everest Forms — Before 1.0.4
  • plugins360 All-in-One Video Gallery — Before 2.5.4
  • oloyede-jamiu Woo Admin Product Notes — Versions not specified
  • themelocation Remove Add to Cart WooCommerce — Before 1.4.3
  • theafricanboss Checkout with Zelle on Woocommerce — Before 2.0
  • wpt00ls Divi Gravity Forms (WP Tools) — Before 6.6.3
  • deothemes Everse — Before 1.8.6
  • commercepundit Run time Image resizing — Versions not specified
  • wp-making Rest Routes – Custom Endpoints for WordPress REST API — Before 4.24.0
  • olezhyk5 Widget for Contact form 7 — Versions not specified
  • pagup Add Pinterest conversion tags for Pinterest Ads + Site verification — Before 1.2.3
  • javmah WPGSI: Spreadsheet Integration — Before 3.6.1
  • majick WP BugBot — Versions not specified
  • princeahmed File Manager for Google Drive – Integrate Google Drive — Before 1.1.0
  • deothemes Nokke — Before 1.0.11
  • josevega Customers Table for WooCommerce: View, Search, Bulk Editor — Before 1.0.8
  • closemarketing/ Sync eCommerce NEO — Versions not specified
  • wpcohort Preloader for Divi — Versions not specified
  • tobias_conrad/ Get Better Reviews for WooCommerce — Up to and including 3.0.6
  • codesavory Knowledge Base documentation & wiki plugin – BasePress Docs — Before 2.15.14
  • webba-agency Easy Appointment Booking & Scheduling System – Webba Booking Calendar — Before 4.2.18
  • salttechno Shuban — Versions not specified
  • pmbaldha/ ACF for WooCommerce Product — Before 1.8
  • johnc1979 Scheduled Notification Bar — Versions not specified
  • bplugins 3D Viewer – Display Interactive 3D Models — Before 1.2.7
  • samuelsilvapt Fullscreen Menu — Up to and including 2.2.7
  • wpchill Gallery PhotoBlocks — Before 1.2.6
  • themeisle Redirection for Contact Form 7 — Before 2.5.0
  • marcqueralt DeMomentSomTres Grid Archive — Versions not specified
  • seancarrico Inbound Brew — Versions not specified
  • muhammad-rehman WP Photo Effects — Before 1.2.1
  • danish-ali WPOptin – AI-Powered Top Bars, PopUps & Lead Generation — Up to and including 1.2.3
  • dots Extra Fees for WooCommerce — Before 3.8.2
  • ldninjas/ Reset Course Progress For LearnDash — Versions not specified
  • princeahmed Podcast Box – Best Podcasting Plugin for WordPress — Before 1.0.2
  • giladtakoni The best plugin for restrict content, support all Custom Post Types and Elementor – Password Protected — Versions not specified
  • toddhalfpenny Turbo Widgets — Versions not specified
  • wpchill Passster – Password Protect Pages and Content — Before 3.5.5.2
  • powerfulwp Gift Message for WooCommerce — Before 1.6.0
  • actuaryzask azw woocommerce file uploads — Versions not specified
  • infornweb Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News — Before 2.3.1
  • jburleigh1 Broadcast Lite — Before 2.0.3
  • fooplugins Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar — Before 2.1.15
  • penguininitiatives WP Author Bio — Versions not specified
  • ahmed17 RW Divi Unite Gallery — Up to and including 1.0
  • essekia Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent — Before 0.6.7
  • wpwebinfotech Product Image Watermark for Woo — Before 1.0.4
  • nasirahmed AFI – The Easiest Integration Plugin — Before 1.49.0
  • janthielemann Revolution for Elementor — Versions not specified
  • wpconedev ConeBlog – Elementor Blog Widgets — Before 1.4.6
  • linekal Under Construction — Before 4.0
  • ekanath WP Gratify — Versions not specified
  • cmbibby/ Automizy Gravity Forms — Versions not specified
  • toddhalfpenny Widgets on Pages — Before 1.6.0
  • ggriesser Get feedback from visitors – WP Feedback Suite Plugin — Versions not specified
  • dejanmarkovic WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule — Before 2020.1.0
  • intoxstudio Content Aware Sidebars – Fastest Widget Area Plugin — Before 3.17.2
  • salttechno Bani — Versions not specified
  • ggriesser Fast WordPress — Versions not specified
  • sonalsinha21 SKT Templates – 100% Free Templates for Elementor & Gutenberg — Before 4.3
  • frenify Categorify – WordPress Media Library Category & File Manager — Before 1.0.5
  • vinod-dalvi Ivory Search – WordPress Search Plugin — Before 5.4.4
  • pagup Add Twitter Pixel for Twitter ads — Before 1.0.4
  • xplodedthemes XT Variation Swatches for WooCommerce — Before 1.8.1
  • kaizencoders URL Shortify – Simple and Easy URL Shortener — Before 1.5.11
  • mohsinoffline Pledged Plugins Secure Gateway for Authorize.net and WooCommerce — Before 5.1.27
  • themekraft BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages — Before 3.4.2
  • cloudliving Affiliate Link Builder Plugin for Amazon Associates – Review Engine — Versions not specified
  • mte90 Glossary — Before 2.1.8
  • bavokoservices BAVOKO SEO Tools – All-in-One WordPress SEO — Versions not specified
  • foxmoon Cartoon Url — Versions not specified

Showing the first 300 of 620 affected-product records. See NVD for the complete list.

References

  • freemius.com https://freemius.com/blog/managing-security-issues-open-source-freemius-sdk-security-disclosure/
  • web.archive.org https://web.archive.org/web/20220225174410/https%3A//www.pluginvulnerabilities.com/2022/02/25/our-security-review-of-wordpress-plugin-found-freemius-library-still-contained-vulnerabilities-3-years-after-major-security-incident/
  • wpdirectory.net https://wpdirectory.net/search/01FWPVWA7BC5DYGZHNSZQ9QMN5
  • wpdirectory.net https://wpdirectory.net/search/01G02RSGMFS1TPT63FS16RWEYR
  • wpscan.com https://wpscan.com/vulnerability/6dae6dca-7474-4008-9fe5-4c62b9f12d0a
  • www.wordfence.com https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=cve
  • nvd.nist.gov Official NVD record