blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2024-13362

MEDIUM 6.1 CVSS 3.1
Published
May 1, 2026
Last modified
October 27, 2026
NVD status
Deferred
Reported by
security@wordfence.com
Weakness
CWE-79
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

Affected WordPress components

  • Custom WooCommerce Checkout Fields Editor Plugin · add-fields-to-checkout-page-woocommerce
    Confirmed match Abandoned
    Up to and including 1.3.4
    View on WordPress.org
  • Ivory Search – WordPress Search Plugin Plugin · add-search-to-menu
    Confirmed match Active
    Up to and including 5.5.8
    View on WordPress.org
  • Advanced Classifieds & Directory Pro Plugin · advanced-classifieds-and-directory-pro
    Confirmed match Active
    Up to and including 3.2.4
    View on WordPress.org
  • alt-manager Plugin · alt-manager
    Confirmed match Homeless
    Up to and including 1.6.3
    View on WordPress.org
  • Automatic Internal Links for SEO by Pagup Plugin · automatic-internal-links-for-seo
    Confirmed match Active
    Up to and including 2.0.0
    View on WordPress.org
  • bBlocks – Essential Gutenberg Blocks & Patterns Collection Plugin · b-blocks
    Confirmed match Active
    Up to and including 1.9.8
    View on WordPress.org
  • Forumax – AI Powered Advanced Community Forum Plugin Plugin · bbp-core
    Confirmed match Active
    Up to and including 1.2.7
    View on WordPress.org
  • Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News Plugin · blog-designer-pack
    Confirmed match Active
    Up to and including 3.4.9
    View on WordPress.org
  • Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots Plugin · bp-better-messages
    Confirmed match Active
    Up to and including 2.6.7
    View on WordPress.org
  • Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO) Plugin · bulk-image-alt-text-with-yoast
    Confirmed match Active
    Up to and including 2.1.0
    View on WordPress.org
  • Announcement & Notification Banner – Bulletin Plugin · bulletin-announcements
    Confirmed match Active
    Up to and including 3.12.1
    View on WordPress.org
  • Message Filter for Contact Form 7 Plugin · cf7-message-filter
    Confirmed match Active
    Up to and including 1.6.3.2
    View on WordPress.org
  • WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms Plugin · cf7-styler
    Confirmed match Active
    Up to and including 1.7.0
    View on WordPress.org
  • Meta Field Block – Display Custom Fields for ACF, Meta Box and More Plugin · display-a-meta-field-as-block
    Confirmed match Active
    Up to and including 1.3.3
    View on WordPress.org
  • dracula-dark-mode Plugin · dracula-dark-mode
    Confirmed match Homeless
    Up to and including 1.2.7
    View on WordPress.org
  • Easy Social Feed – Social Photos Gallery and Post Feed for WordPress Plugin · easy-facebook-likebox
    Confirmed match Active
    Up to and including 6.6.5
    View on WordPress.org
  • EleSpare – News, Magazine and Blog Addons for Elementor Plugin · elespare
    Confirmed match Active
    Up to and including 3.3.2
    View on WordPress.org
  • Events Addon for Elementor Plugin · events-addon-for-elementor
    Confirmed match Abandoned
    Up to and including 2.2.2
    View on WordPress.org
  • Lightbox & Modal Popup WordPress Plugin – FooBox Plugin · foobox-image-lightbox
    Confirmed match Active
    Up to and including 2.7.33
    View on WordPress.org
  • Gallery : FooGallery Plugin · foogallery
    Confirmed match Active
    Up to and including 2.4.27
    View on WordPress.org
  • TrueAna – True Analytics Dashboard Plugin · ga-for-wp
    Confirmed match Active
    Up to and including 2.6.0
    View on WordPress.org
  • Geo Mashup Plugin · geo-mashup
    Confirmed match Active
    Up to and including 1.13.15
    View on WordPress.org
  • glossary Plugin · glossary
    Confirmed match Homeless
    Up to and including 2.2.38
    View on WordPress.org
  • AI Puffer – Chat. Create. Automate. (formerly AI Power) Plugin · gpt3-ai-content-generator
    Confirmed match Active
    Up to and including 1.8.99
    View on WordPress.org
  • HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player Plugin · html5-audio-player
    Confirmed match Active
    Up to and including 2.2.27
    View on WordPress.org
  • Independent Analytics – WordPress Analytics Plugin Plugin · independent-analytics
    Confirmed match Active
    Up to and including 2.9.7
    View on WordPress.org
  • integrate-google-drive Plugin · integrate-google-drive
    Confirmed match Homeless
    Up to and including 1.4.9
    View on WordPress.org
  • Internal Link Juicer: SEO Auto Linker for WordPress Plugin · internal-links
    Confirmed match Active
    Up to and including 2.24.6
    View on WordPress.org
  • Mapster WP Maps Plugin · mapster-wp-maps
    Confirmed match Active
    Up to and including 1.9.0
    View on WordPress.org
  • Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits Plugin · master-addons
    Confirmed match Active
    Up to and including 2.0.7.2
    View on WordPress.org
  • WP Mobile Menu – The Mobile-Friendly Responsive Menu Plugin · mobile-menu
    Confirmed match Active
    Up to and including 2.8.6
    View on WordPress.org
  • Music Player for Elementor – Audio Player & Podcast Player Plugin · music-player-for-elementor
    Confirmed match Active
    Up to and including 2.4.1
    View on WordPress.org
  • Ocean Extra Plugin · ocean-extra
    Confirmed match Active
    Up to and including 2.4.2
    View on WordPress.org
  • Open User Map – Interactive Leaflet Maps Plugin · open-user-map
    Confirmed match Active
    Up to and including 1.4.0
    View on WordPress.org
  • PDF Poster – let visitors read PDFs without leaving the page Plugin · pdf-poster
    Confirmed match Active
    Up to and including 2.2.0
    View on WordPress.org
  • Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App Plugin · post-smtp
    Confirmed match Active
    Up to and including 3.0.0
    View on WordPress.org
  • Primary Addon for Elementor Plugin · primary-addon-for-elementor
    Confirmed match Abandoned
    Up to and including 1.6.0
    View on WordPress.org
  • radio-player Plugin · radio-player
    Confirmed match Homeless
    Up to and including 2.0.82
    View on WordPress.org
  • Restrict – membership, site, content and user access restrictions for WordPress Plugin · restricted-content
    Confirmed match Active
    Up to and including 2.3.0
    View on WordPress.org
  • Security Ninja – WordPress Security & Firewall Plugin · security-ninja
    Confirmed match Active
    Up to and including 5.222
    View on WordPress.org
  • Share This Image Plugin · share-this-image
    Confirmed match Active
    Up to and including 2.07
    View on WordPress.org
  • Shortcodes Ultimate – Content Elements Plugin · shortcodes-ultimate
    Confirmed match Active
    Up to and including 7.3.3
    View on WordPress.org
  • SimpLy Gallery Plugin · simply-gallery-block
    Confirmed match Active
    Up to and including 3.2.4.4
    View on WordPress.org
  • Carousel, Recent Post Slider and Banner Slider Plugin · spice-post-slider
    Confirmed match Active
    Up to and including 2.1
    View on WordPress.org
  • StreamWeasels Twitch Integration Plugin · streamweasels-twitch-integration
    Confirmed match Active
    Up to and including 1.9.2
    View on WordPress.org
  • TablePress – Tables in WordPress made easy Plugin · tablepress
    Confirmed match Active
    Up to and including 3.0.2
    View on WordPress.org
  • Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent Plugin · tablesome
    Confirmed match Active
    Up to and including 1.1.13
    View on WordPress.org
  • tripetto Plugin · tripetto
    Confirmed match Homeless
    Up to and including 8.0.7
    View on WordPress.org
  • Ultimeter Plugin · ultimeter
    Confirmed match Active
    Up to and including 3.0.5
    View on WordPress.org
  • Unlimited Elements For Elementor Plugin · unlimited-elements-for-elementor
    Confirmed match Active
    Up to and including 1.5.140
    View on WordPress.org
  • URL Shortify – Simple and Easy URL Shortener Plugin · url-shortify
    Confirmed match Active
    Up to and including 1.10.4
    View on WordPress.org
  • Checkout with Cash App on WooCommerce Plugin · wc-cashapp
    Confirmed match Active
    Up to and including 6.0.2
    View on WordPress.org
  • Easy Appointment Booking & Scheduling System – Webba Booking Calendar Plugin · webba-booking-lite
    Confirmed match Active
    Up to and including 5.0.57
    View on WordPress.org
  • Coupon Affiliates – Affiliate Plugin for WooCommerce Plugin · woo-coupon-usage
    Confirmed match Active
    Up to and including 5.17.2
    View on WordPress.org
  • XT Floating Cart for WooCommerce Plugin · woo-floating-cart-lite
    Confirmed match Active
    Up to and including 2.8.4
    View on WordPress.org
  • RevivePress – Keep your Old Content Evergreen Plugin · wp-auto-republish
    Confirmed match Abandoned
    Up to and including 1.5.8
    View on WordPress.org
  • WPBITS Addons For Elementor Page Builder Plugin · wpbits-addons-for-elementor
    Confirmed match Active
    Up to and including 1.7
    View on WordPress.org
  • Books Gallery – Book Showcase, Library & Affiliate Plugin Plugin · wp-books-gallery
    Confirmed match Active
    Up to and including 4.6.8
    View on WordPress.org
  • WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards Plugin · wp-data-access
    Confirmed match Active
    Up to and including 5.5.31
    View on WordPress.org
  • WPIDE – File Manager & Code Editor Plugin · wpide
    Confirmed match Active
    Up to and including 3.5.1
    View on WordPress.org
  • WP Encryption – One Click SSL / HTTPS & Free SSL Certificate, HTTPS Redirect, Security Plugin · wp-letsencrypt-ssl
    Confirmed match Active
    Up to and including 7.7.0
    View on WordPress.org
  • WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars Plugin · wp-post-author
    Confirmed match Active
    Up to and including 3.8.3
    View on WordPress.org
  • Team Members Showcase Plugin · wps-team
    Confirmed match Active
    Up to and including 3.3.0
    View on WordPress.org
  • YASR – Yet Another Star Rating Plugin for WordPress Plugin · yet-another-stars-rating
    Confirmed match Abandoned
    Up to and including 3.4.12
    View on WordPress.org
  • AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o Plugin · aibuddy-openai-chatgpt
    Possible match Active
    Up to and including 1.7.2
    View on WordPress.org
  • BlockSpare – Gutenberg Blocks for News, Magazine, Blog & Business Websites Plugin · blockspare
    Possible match Active
    Up to and including 3.2.6
    View on WordPress.org
  • Code Manager Plugin · code-manager
    Possible match Active
    Up to and including 1.0.40
    View on WordPress.org
  • WP Page Templates Plugin · custom-page-templates-by-vegacorp
    Possible match Active
    Up to and including 1.1.16
    View on WordPress.org
  • Custom PHP Settings Plugin · custom-php-settings
    Possible match Active
    Up to and including 2.3.1
    View on WordPress.org
  • Dynamic Copyright Year Plugin · dynamic-copyright-year
    Possible match Active
    Up to and including 1.0.4
    View on WordPress.org
  • Easy Age Verify Plugin · easy-age-verify
    Possible match Active
    Up to and including 1.8.5
    View on WordPress.org
  • Marijuana Age Verify Plugin · easy-marijuana-age-verify
    Possible match Active
    Up to and including 1.5.5
    View on WordPress.org
  • Embedder for Google Reviews Plugin · embedder-for-google-reviews
    Possible match Active
    Up to and including 1.6.6
    View on WordPress.org
  • Five-Star Ratings Shortcode Plugin · five-star-ratings-shortcode
    Possible match Active
    Up to and including 1.2.56
    View on WordPress.org
  • Full Screen Background Plugin · fullscreen-background
    Possible match Active
    Up to and including 2.0.2
    View on WordPress.org
  • Full screen background Plugin · full-screen-background-css-jquery
    Possible match Abandoned
    Up to and including 2.0.2
    View on WordPress.org
  • Anti-Spam Protection – No API Key, GDPR Friendly Plugin · fullworks-anti-spam
    Possible match Active
    Up to and including 2.3.7
    View on WordPress.org
  • Go Fetch Jobs (for WP Job Manager) Plugin · go-fetch-jobs-wp-job-manager
    Possible match Active
    Up to and including 1.8.4.8.1
    View on WordPress.org
  • Joli Table Of Contents Plugin · joli-table-of-contents
    Possible match Active
    Up to and including 2.6.0
    View on WordPress.org
  • Justified Gallery Plugin · justified-gallery
    Possible match Active
    Up to and including 1.9.0
    View on WordPress.org
  • Menu Image, Icons made easy Plugin · menu-image
    Possible match Abandoned
    Up to and including 3.12
    View on WordPress.org
  • Post to Google My Business (Google Business Profile) Plugin · post-to-google-my-business
    Possible match Active
    Up to and including 3.1.28
    View on WordPress.org
  • Premmerce Product Filter for WooCommerce Plugin · premmerce-woocommerce-product-filter
    Possible match Active
    Up to and including 3.7.3
    View on WordPress.org
  • Product Layouts for WooCommerce Plugin · product-layouts
    Possible match Active
    Up to and including 1.3.1
    View on WordPress.org
  • Radio Station by netmix® – Manage and play your Show Schedule in WordPress! Plugin · radio-station
    Possible match Active
    Up to and including 2.5.9
    View on WordPress.org
  • Remove Add to Cart WooCommerce Plugin · remove-add-to-cart-woocommerce
    Possible match Active
    Up to and including 1.4.7
    View on WordPress.org
  • Role Based Pricing for Woo by Meow Crew Plugin · role-and-customer-based-pricing-for-woocommerce
    Possible match Active
    Up to and including 1.6.0
    View on WordPress.org
  • Smart phone field for Gravity Forms Plugin · smart-phone-field-for-gravity-forms
    Possible match Active
    Up to and including 2.1.6
    View on WordPress.org
  • Text To Speech TTS Accessibility Plugin · text-to-audio
    Possible match Active
    Up to and including 1.7.34
    View on WordPress.org
  • Payment Gateway for ACBA BANK Plugin · wc-hkdigital-acba-gateway
    Possible match Abandoned
    Up to and including 1.2.6
    View on WordPress.org
  • Place Order Without Payment for WooCommerce Plugin · wc-place-order-without-payment
    Possible match Active
    Up to and including 2.6.5
    View on WordPress.org
  • Thank You Page for WooCommerce Plugin · wc-thanks-redirect
    Possible match Active
    Up to and including 4.2.0
    View on WordPress.org
  • Display Eventbrite Events Plugin · widget-for-eventbrite-api
    Possible match Active
    Up to and including 6.1.10
    View on WordPress.org
  • Widgets on Pages Plugin · widgets-on-pages
    Possible match Abandoned
    Up to and including 1.7
    View on WordPress.org
  • Secure Gateway for Authorize.net and WooCommerce by Pledged Plugins Plugin · woo-authorize-net-gateway-aim
    Possible match Active
    Up to and including 6.1.13
    View on WordPress.org
  • Pay For Post with WooCommerce Plugin · woocommerce-pay-per-post
    Possible match Active
    Up to and including 3.1.26
    View on WordPress.org
  • Disable Payment Methods based on cart conditions for WooCommerce Plugin · woo-conditional-payment-gateways
    Possible match Active
    Up to and including 1.16.3
    View on WordPress.org
  • Premmerce Permalink Manager for WooCommerce Plugin · woo-permalink-manager
    Possible match Active
    Up to and including 2.3.11
    View on WordPress.org
  • WP Meta and Date Remover Plugin · wp-meta-and-date-remover
    Possible match Active
    Up to and including 2.3.4
    View on WordPress.org
  • WP Notification Bell Plugin · wp-notification-bell
    Possible match Active
    Up to and including 1.4.2
    View on WordPress.org
  • Bulk Edit Posts and Products in Spreadsheet Plugin · wp-sheet-editor-bulk-spreadsheet-editor-for-posts-and-pages
    Possible match Active
    Up to and including 2.25.16
    View on WordPress.org
  • XT Quick View for WooCommerce Plugin · xt-woo-quick-view-lite
    Possible match Active
    Up to and including 2.1.5
    View on WordPress.org
  • XT Variation Swatches for WooCommerce Plugin · xt-woo-variation-swatches
    Possible match Active
    Up to and including 1.9.4
    View on WordPress.org
  • blockspare Theme · blockspare
    Possible match Homeless
    Up to and including 3.2.6
    View on WordPress.org
  • Radio Station Theme · radio-station
    Possible match Active
    Up to and including 2.5.9
    View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • sebet Go Fetch Jobs (for WP Job Manager) — Up to and including 1.8.4.8.1
  • 5starplugins Dynamic Copyright Year — Up to and including 1.0.4
  • peterschulznl Code Manager — Up to and including 1.0.40
  • bplugins Advanced Scrollbar – Custom Scrollbar Styling and Behavior — Up to and including 1.1.3
  • yuvalo Goal Tracker – Custom Event Tracking for GA4 — Up to and including 1.1.5
  • essekia Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent — Up to and including 1.1.13
  • josevega WP Page Templates — Up to and including 1.1.16
  • hkdigitalagency Payment Gateway for ACBA BANK — Up to and including 1.2.6
  • princeahmed Dracula Dark Mode – Accessibility, Reading Mode & Dark Mode for WordPress — Up to and including 1.2.7
  • spiderdevs Forumax – AI Powered Advanced Community Forum Plugin — Up to and including 1.2.7
  • seezee Five-Star Ratings Shortcode — Up to and including 1.2.56
  • oxilab Product Layouts for WooCommerce — Up to and including 1.3.1
  • mr2p Meta Field Block – Display custom fields in the Block Editor without coding — Up to and including 1.3.3
  • themelocation Custom WooCommerce Checkout Fields Editor — Up to and including 1.3.4
  • 100plugins Open User Map — Up to and including 1.4.0
  • wpdever WP Notification Bell — Up to and including 1.4.2
  • themelocation Remove Add to Cart WooCommerce — Up to and including 1.4.7
  • princeahmed File Manager for Google Drive – Integrate Google Drive — Up to and including 1.4.9
  • 5starplugins Marijuana Age Verify — Up to and including 1.5.5
  • infosatech RevivePress – Keep your Old Content Evergreen — Up to and including 1.5.8
  • nicheaddons Restaurant & Cafe Addon for Elementor — Up to and including 1.5.8
  • paretodigital Send Users Email – Email Subscribers, Email Marketing Newsletter — Up to and including 1.5.10
  • unitecms Unlimited Elements For Elementor — Up to and including 1.5.140
  • meowcrew Role Based Pricing for Woo by Meow Crew — Up to and including 1.6.0
  • nicheaddons Primary Addon for Elementor — Up to and including 1.6.0
  • 5starplugins Featured Images in RSS for Mailchimp & More — Up to and including 1.6.3
  • wpsaad Image Alt Text Manager – Bulk & Dynamic Alt Tags For image SEO Optimization + AI — Up to and including 1.6.3
  • kofimokome Message Filter for Contact Form 7 — Up to and including 1.6.3.2
  • paretodigital Embedder for Google Reviews — Up to and including 1.6.6
  • interactivegeomaps MapGeo – Interactive Geo Maps — Up to and including 1.6.22
  • wpbits WPBITS Addons For Elementor Page Builder — Up to and including 1.7
  • toddhalfpenny Widgets on Pages — Up to and including 1.7
  • rebelcode Spotlight Social Feeds – Block, Shortcode, and Widget — Up to and including 1.7.0
  • tobias_conrad WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms — Up to and including 1.7.0
  • webfactory AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o — Up to and including 1.7.2
  • hasanazizul Text To Speech TTS Accessibility — Up to and including 1.7.34
  • 5starplugins Easy Age Verify — Up to and including 1.8.5
  • senols AI Puffer – Chat. Create. Automate. (formerly AI Power) — Up to and including 1.8.99
  • damian-gora Justified Gallery — Up to and including 1.9.0
  • mapster Mapster WP Maps — Up to and including 1.9.0
  • streamweasels StreamWeasels Twitch Integration — Up to and including 1.9.2
  • xplodedthemes XT Variation Swatches for WooCommerce — Up to and including 1.9.4
  • bplugins bBlocks – Essential Gutenberg Blocks & Patterns Collection — Up to and including 1.9.8
  • kaizencoders URL Shortify – Simple and Easy URL Shortener — Up to and including 1.10.4
  • uriahs-victor Kikote – Location Picker at Checkout & Google Address AutoFill Plugin for WooCommerce — Up to and including 1.10.6
  • cyberhobo Geo Mashup — Up to and including 1.13.15
  • josevega Disable Payment Methods based on cart conditions for WooCommerce — Up to and including 1.16.3
  • pagup Automatic Internal Links for SEO by Pagup — Up to and including 2.0.0
  • enweby Full Screen Background — Up to and including 2.0.2
  • litonice13 Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits — Up to and including 2.0.7.2
  • princeahmed Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player — Up to and including 2.0.82
  • spicethemes Carousel, Recent Post Slider and Banner Slider — Up to and including 2.1
  • pagup Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO) — Up to and including 2.1.0
  • xplodedthemes XT Quick View for WooCommerce — Up to and including 2.1.5
  • pluginscafe Smart phone field for Gravity Forms — Up to and including 2.1.6
  • fooplugins Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar — Up to and including 2.1.34
  • bplugins PDF Poster – Display PDF Files with Custom Viewer — Up to and including 2.2.0
  • nicheaddons Events Addon for Elementor — Up to and including 2.2.2
  • bplugins HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player — Up to and including 2.2.27
  • mte90 Glossary — Up to and including 2.2.38
  • tickera Restrict – membership, site, content and user access restrictions for WordPress — Up to and including 2.3.0
  • cyclonecode Custom PHP Settings — Up to and including 2.3.1
  • prasadkirpekar WP Meta and Date Remover — Up to and including 2.3.4
  • fullworks Anti-Spam Protection – No API Key, GDPR Friendly — Up to and including 2.3.7
  • premmerce Premmerce Permalink Manager for WooCommerce — Up to and including 2.3.11
  • smartwpress Music Player for Elementor – Audio Player & Podcast Player — Up to and including 2.4.1
  • mhmrajib TopNewsWp – Display Tikcer News, RSS Feed Widget and Many More — Up to and including 2.4.1
  • oceanwp Ocean Extra — Up to and including 2.4.2
  • fooplugins Gallery by FooGallery — Up to and including 2.4.27
  • plugins360 Automatic YouTube Gallery — Up to and including 2.5.5
  • spiderdevs EazyDocs – AI Powered Knowledge Base, Wiki, Documentation & FAQ Builder — Up to and including 2.5.7
  • samdani Team Members – A WordPress Team Plugin with Gallery, Grid, Carousel, Slider, Table, List, and More — Up to and including 2.5.8
  • tonyzeoli Radio Station by netmix® – Manage and play your Show Schedule in WordPress! — Up to and including 2.5.9
  • kaira StoreCustomizer – A plugin to Customize all WooCommerce Pages — Up to and including 2.5.9
  • wpjoli Joli Table Of Contents — Up to and including 2.6.0
  • passionatebrains GA4WP – Analytics Dashboard for the Website — Up to and including 2.6.0
  • nitin247 Place Order Without Payment for WooCommerce — Up to and including 2.6.5
  • wordplus Better Messages – Live Chat, Chat Rooms, Real-Time Messaging & Private Messages — Up to and including 2.6.7
  • mihail-barinov Share This Image — Up to and including 2.07
  • inavii Inavii Social Feed — Up to and including 2.7.0
  • fooplugins Lightbox & Modal Popup WordPress Plugin – FooBox — Up to and including 2.7.33
  • xplodedthemes XT Floating Cart for WooCommerce — Up to and including 2.8.4
  • takanakui WP Mobile Menu – The Mobile-Friendly Responsive Menu — Up to and including 2.8.6
  • passionatebrains AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization — Up to and including 2.9.2
  • bensibley Independent Analytics — Up to and including 2.9.7
  • codesavory Knowledge Base documentation & wiki plugin – BasePress Docs — Up to and including 2.16.3.3
  • davidanderson Internal Link Juicer: SEO Auto Linker for WordPress — Up to and including 2.24.6
  • josevega Bulk Edit Posts and Products in Spreadsheet — Up to and including 2.25.16
  • saadiqbal Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App — Up to and including 3.0.0
  • tobiasbg TablePress – Tables in WordPress made easy — Up to and including 3.0.2
  • bouncingsprout Ultimeter — Up to and including 3.0.5
  • blackandwhitedigital TreePress – Easy Family Trees & Ancestor Profiles — Up to and including 3.0.6
  • mattpramschufer Pay For Post with WooCommerce — Up to and including 3.1.26
  • koen12344 Post to Google My Business (Google Business Profile) — Up to and including 3.1.28
  • imtiazrayhan WP Coupons and Deals – Coupon Plugin For Affiliate Marketers — Up to and including 3.2.2
  • pluginsware Advanced Classifieds & Directory Pro — Up to and including 3.2.4
  • gallerycreator Mixed Media Gallery Blocks — Up to and including 3.2.4.4
  • blockspare BlockSpare — News, Magazine and Blog Addons for (Gutenberg) Block Editor — Up to and including 3.2.6
  • mhmrajib AidWP – Donation & Payment Forms (Stripe Powered) — Up to and including 3.2.6
  • infornweb Logo Showcase – Responsive Logo Carousel, Logo Slider & Logo Grid — Up to and including 3.2.7
  • pluginandplay Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider — Up to and including 3.2.7
  • samdani Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews — Up to and including 3.2.8
  • wpspeedo Team Members Showcase — Up to and including 3.3.0
  • elespare EleSpare – News, Magazine and Blog Addons for Elementor — Up to and including 3.3.2
  • infornweb Post List Designer – Category Post, Recent Post, Post List — Up to and including 3.3.7
  • infornweb Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News — Up to and including 3.4.9
  • dashlabsltd YASR – Yet Another Star Rating Plugin for WordPress — Up to and including 3.4.12
  • xplodedthemes WPIDE – File Manager & Code Editor — Up to and including 3.5.1
  • premmerce Premmerce Product Filter for WooCommerce — Up to and including 3.7.3
  • afthemes WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars — Up to and including 3.8.3
  • wpmagics Delete Posts automatically — Up to and including 3.9.6
  • takanakui Menu Image, Icons made easy — Up to and including 3.12
  • passionatebrains AWCA – The Great Analytics Insights for Your eStore — Up to and including 3.12.0
  • mikewire_rocksolid Announcement & Notification Banner – Bulletin — Up to and including 3.12.1
  • nitin247 Thank You Page for WooCommerce — Up to and including 4.2.0
  • webheadllc Contact Form 7 Multi-Step Forms — Up to and including 4.4.1
  • speedify Auto-Install Free SSL – Generate & Install Free SSL Certificates — Up to and including 4.5.0
  • mhmrajib WP Books Gallery – Build Stunning Book Showcases & Libraries in Minutes — Up to and including 4.6.8
  • webba-agency Easy Appointment Booking & Scheduling System – Webba Booking Calendar — Up to and including 5.0.57
  • invisnet WP fail2ban – Advanced Security — Up to and including 5.3.4
  • vinod-dalvi Ivory Search – WordPress Search Plugin — Up to and including 5.5.8
  • peterschulznl WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards — Up to and including 5.5.31
  • elliotvs Coupon Affiliates – Affiliate Plugin for WooCommerce — Up to and including 5.17.2
  • cleverplugins Security Ninja – WordPress Security & Firewall — Up to and including 5.222
  • theafricanboss Checkout with Cash App on WooCommerce — Up to and including 6.0.2
  • fullworks Display Eventbrite Events — Up to and including 6.1.10
  • mohsinoffline Secure Gateway for Authorize.net and WooCommerce by Pledged Plugins — Up to and including 6.1.13
  • sjaved Easy Social Feed – Social Photos Gallery and Post Feed for WordPress — Up to and including 6.6.5
  • gn_themes WP Shortcodes Plugin — Shortcodes Ultimate — Up to and including 7.3.3
  • gowebsmarty WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan — Up to and including 7.7.0
  • tripetto WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto — Up to and including 8.0.7

References

  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/add-search-to-menu/trunk/includes/freemius/assets/js/pricing/freemius-pricing.js
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/featured-images-for-rss-feeds/trunk/includes/freemius/assets/js/pricing/freemius-pricing.js
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/foobox-image-lightbox/tags/2.7.33/freemius/assets/js/pricing/freemius-pricing.js
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/foogallery/tags/2.4.27/freemius/assets/js/pricing/freemius-pricing.js
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/independent-analytics/trunk/freemius/assets/js/pricing/freemius-pricing.js
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/interactive-geo-maps/tags/1.6.21/vendor/freemius/wordpress-sdk/assets/js/pricing/freemius-pricing.js
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/internal-links/trunk/vendor/freemius/wordpress-sdk/assets/js/pricing/freemius-pricing.js
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/master-addons/trunk/lib/freemius/assets/js/pricing/freemius-pricing.js
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/menu-image/trunk/freemius/assets/js/pricing/freemius-pricing.js
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/ocean-extra/trunk/includes/freemius/assets/js/pricing/freemius-pricing.js
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/pdf-poster/trunk/freemius/assets/js/pricing/freemius-pricing.js
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/shortcodes-ultimate/trunk/freemius/assets/js/pricing/freemius-pricing.js
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/simply-gallery-block/trunk/freemius/assets/js/pricing/freemius-pricing.js
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/spotlight-social-photo-feeds/trunk/ui/freemius-pricing/freemius-pricing.js
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/tablepress/trunk/libraries/freemius/assets/js/pricing/freemius-pricing.js
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/unlimited-elements-for-elementor/trunk/provider/freemius/assets/js/pricing/freemius-pricing.js
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/widgets-on-pages/trunk/freemius/assets/js/pricing/freemius-pricing.js
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/woo-permalink-manager/tags/2.3.11/assets/admin/js/pricing-page/freemius-pricing.js
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/wp-meta-and-date-remover/tags/2.3.4/freemius/assets/js/pricing/freemius-pricing.js
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/wpide/tags/3.5.0/dist/pricing/freemius-pricing.js
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset/3229060/
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset/3235286/
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset/3249130/
  • www.wordfence.com https://www.wordfence.com/threat-intel/vulnerabilities/id/d694491c-c0f5-4418-805a-db792ea4f712?source=cve
  • nvd.nist.gov Official NVD record