Freemius SDK <= 2.4.2 - Missing Authorization Checks

Description

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.

Scores

EPSS (exploitation in 30 days)

0.44% · top 61% of all CVEs (6 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.3.

Weakness

• CWE-862 Missing Authorization (opens in a new tab)All about CWE-862 and its CVEs

Affected products

• dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

  • affected < 2.0.2

• nicheaddons · Events Addon for Elementor

  • affected < 1.9.8

• dots · Fraud Prevention For WooCommerce and EDD

  • affected < 2.1.0

• wpengine · Gutenberg Blocks – ACF Blocks Suite

  • affected < 2.6.8

• bouncingsprout · Ultimeter

  • affected < 2.7.6

• toddhalfpenny · Past Events Extension

  • affected 0

• pootlepress · Pootle Pagebuilder – WordPress Page builder

  • affected < 5.7.1

• powerfulwp · Local Delivery Drivers for WooCommerce

  • affected < 1.8.5

• kkikuchi1220 · Ultimate Gutenberg – Custom Block Templates

  • affected 0

• josevega · WP Required Taxonomies – Categories and Tags Mandatory

  • affected < 1.1.8

• pmbaldha · Featured Products First for WooCommerce – A Extension of WooCommerce (WooCommerce Addon Plugin)

  • affected 0

• sslzen · SSL Zen — SSL Certificate Installer & HTTPS Redirects

  • affected ≤ 4.0.4

• wisersteps · Streak CRM For Gmail For Contact Form 7 – WordPress Plugin

  • affected < 1.0.9

• wpdevpowers · WordPress Dev Powers – ACF Color Coded Field Types Plugin

  • affected 0

• benmoreassynt · DancePress (TRWA)

  • affected ≤ 3.1.2

• dots · Product Size Charts Plugin for WooCommerce

  • affected < 2.2.3

• tribalnerd · Wp My Admin Bar

  • affected 0

• setka · A no-code page builder for beautiful performance-based content

  • affected < 2.1.17

• mikebels · LocalSEOMap

  • affected 0

• cromer12 · Easy Prayer

  • affected 0

• rafalosinski · AdFoxly – Ad Manager, AdSense Ads & Ads.txt

  • affected ≤ 1.8.4

• stevehenty · WP Get Personal

  • affected 0

• theafricanboss/ · Checkout with Cash App on EDD

  • affected 0

• usmanaliqureshi · Server Info

  • affected 0

• themelocation · Custom WooCommerce Checkout Fields Editor

  • affected ≤ 1.2.6

• krsp · KRSP Frontend File Uploader

  • affected 0

• bplugins · Panorama – 360 Virtual Tour, Panoramic image viewer and More

  • affected < 1.0.8

• janwyl · Bulk Attachment Download

  • affected < 1.3.5

• majick · AutoSave Net

  • affected 0

• premmerce · Premmerce Wholesale Pricing for WooCommerce

  • affected < 1.1.8

• jcodex · Any Popup – Popup Forms, Optins & Ads

  • affected 0

• theafricanboss/ · Checkout with Venmo on EDD

  • affected 0

• dreamfox · Payment Gateway Per Product for WooCommerce

  • affected < 3.1.6

• hqtheme · HQTheme Extra

  • affected 0

• vincoit · Vit Website Reviews

  • affected 0

• daigo75 · EU VAT Assistant for WooCommerce

  • affected < 2.0.28.220224

• eedee · WordPress Slider Block Gutenslider

  • affected < 5.7.0

• surbma · HuCommerce | Magyar kiegészítések WooCommerce webáruházakhoz

  • affected < 30.3.0

• lostboy7 · KVoucher

  • affected 0

• bplugins · YT Player – Embed and Customize Video Players

  • affected < 1.5.1

• whiteshadow · Error Log Monitor

  • affected < 1.7.1

• slidedeck · SlideDeck: Responsive WordPress Slider Plugin

  • affected 0

• premmerce · Premmerce Multi-currency for Woocommerce

  • affected < 2.3.2

• mvvapps/ · Booking Addon for WooCommerce

  • affected < 4.2.0

• wpeventpartners/ · WP Event Partners – WordPress Plugin for Event and Conference Management

  • affected ≤ 1.2.4

• saadiqbal · WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce

  • affected < 4.2.1

• passionatebrains · AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization

  • affected < 2.6

• majick · ForceField

  • affected 0

• richard-b · FIT: Featured Image Toolkit

  • affected 0

• themekraft · All in One Invite Codes

  • affected < 1.0.13

• dots · Dynamic Pricing and Discount Rules for WooCommerce

  • affected < 2.2.3

• wordplus · Better Messages – Live Chat, Chat Rooms, Real-Time Messaging & Private Messages

  • affected < 1.9.9.170

• wpt00ls · Grid & Styler For Contact Form 7 And Divi

  • affected < 1.4.1

• protectyouruploads · Protect Uploads with Login – Protect Your Uploads

  • affected 0

• sakurapixel · Atlas – Knowledge Base

  • affected 0

• dgwyer · Simple Sitemap – Create a Responsive HTML Sitemap

  • affected < 3.5.5

• bplugins · Super Video player – Fully Customizable Video Player with Playlist

  • affected < 1.6.11

• mhmrajib · WP Books Gallery – Build Stunning Book Showcases & Libraries in Minutes

  • affected < 3.6

• damian-gora · FiboSearch – Ajax Search for WooCommerce

  • affected < 1.17.0

• stevejburge · Tag Groups is the Advanced Way to Display Your Taxonomy Terms

  • affected < 1.43.10.1

• prasadkirpekar · WP Free SSL

  • affected < 1.2.7

• clickervolt · ClickerVolt – Affiliate Links & Click Tracking for Performance Marketers

  • affected 0

• proteusthemes · ConsultPress Lite

  • affected 0

• badhonrocks · Styler Mate for Contact Form 7

  • affected < 1.3.0

• streamweasels · StreamWeasels Twitch Integration

  • affected < 1.3.4

• pagup · MOBILOOK — Mobile View & Mobile‑Friendly Test

  • affected < 1.2.4

• paulio21 · Zip Code Redirect

  • affected ≤ 4.0.1

• vohotv/ · Guestofy – Restaurant Reservations Plugin, Room Planer, Reservation Form

  • affected 0

• ahmed17 · CF7 Constant Contact Fields Mapping

  • affected 0

• stellarwp · Bookit — Booking & Appointment Calendar

  • affected < 2.2.9

• ethereumicoio · EthereumICO

  • affected < 2.3.11

• risetheme · RT Easy Builder – Advanced addons for Elementor

  • affected ≤ 1.4

• saadiqbal · WP Contact Slider – Contact Form Slider Widget

  • affected < 2.4.5

• ivan_paulin · Country Based Payments for WooCommerce

  • affected < 1.4.1

• wpchill · Filr – Secure document library

  • affected < 1.2.1

• nicheaddons · Elasta

  • affected < 1.0.8

• interactivegeomaps · MapGeo – Interactive Geo Maps

  • affected < 1.5.4

• galoover · WordPress Animation Plugin – Animated Everything

  • affected 0

• wpdever · WP Notification Bell

  • affected < 1.3.13

• melapress · Activity Log For MainWP

  • affected < 1.7.1

• oceas · Connected Sermons

  • affected 0

• josevega · Bulk Edit and Create User Profiles – WP Sheet Editor

  • affected < 1.5.13

• milukove/ · Кнопка ЮMoney

  • affected 0

• kartikparmar/ · Bulk WooCommerce Category Creator

  • affected 0

• alphabposervice · Easy Math Captcha for CF7

  • affected 0

• litonice13 · Master Accordion ( Former WP Awesome FAQ Plugin )

  • affected < 4.1.8

• wpdive · Better Addons for Elementor

  • affected < 1.3.1

• livemesh · Livemesh Addons by Elementor

  • affected < 7.1.4

• nitin247 · Place Order Without Payment for WooCommerce

  • affected < 2.2

• boriscolombier/ · STEWoo – Super Transactional Emails for WooCommerce

  • affected < 1.2.4

• marcqueralt · DeMomentSomTres Address

  • affected 0

• johnc1979 · Out of stock display for woocommerce

  • affected 0

• ultimateblocks · Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor

  • affected < 2.4.13

• pagup · Bulk Auto Image Title Attribute (Image Title tag) optimizer (Image SEO)

  • affected < 1.2.3

• princeahmed · WP Radio – Worldwide Online Radio Stations Directory for WordPress

  • affected < 3.1.4

• blackandwhitedigital · BookPress – For Book Authors

  • affected < 1.2.3

• wpchill · Qyrr – simply and modern QR-Code creation

  • affected < 0.8

• wpeka-club · WordPress Directory Plugin For Business Listings – WP Local Plus

  • affected < 1.4.5

• equalizedigital · Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance

  • affected < 1.2.8

• therealwebdisrupt · Funnelmentals

  • affected 0

• blockspare · BlockSpare — News, Magazine and Blog Addons for (Gutenberg) Block Editor

  • affected < 2.0.1

• nasirahmed · Forms to Zapier, Integromat, IFTTT, Workato, Automate.io, elastic.io, Built.io, APIANT, Webhook

  • affected < 1.1.9

• mojofywp · Product Carousel For WooCommerce – WoorouSell

  • affected < 1.0.9

• pagup · Better Robots.txt – AI-Ready Crawl Control & Bot Governance

  • affected < 1.4.4

• gfirem · GFireM Fields

  • affected 0

• elliotvs · Coupon Affiliates – Affiliate Plugin for WooCommerce

  • affected < 4.16.4

• dipcode · WP Post Block

  • affected 0

• attest · LMS Plugin – eLearning, Online Courses by Attest

  • affected 0

• shabti · Frontend Admin by DynamiApps

  • affected < 3.3.33

• ibenic · Simple Giveaways – Grow your business, email lists and traffic with contests

  • affected < 2.42.1

• wpt00ls · Masonry Gallery & Posts For Divi (WP Tools)

  • affected < 3.1.2

• gfirem · GFireM Action After

  • affected 0

• bandido · Ukrposhta

  • affected < 1.6.18

• annastaa · annasta Filters for WooCommerce

  • affected < 1.5.0

• tprintyedisonave · WP Lead Stream

  • affected 0

• stellarwp · The Events Calendar

  • affected < 5.14.0.4

• johnc1979 · Focus on Reviews for WooCommerce

  • affected 0

• pmbaldha · Email Tracker

  • affected ≤ 5.3.8

• wpt00ls · Block Styler For Gravity Forms

  • affected ≤ 6.1.0

• josevega · WP Page Templates

  • affected < 1.1.13

• ggwicz · Product Customer List for WooCommerce

  • affected < 3.0.0

• wpmoose · WP Moose

  • affected < 1.0.1

• samdani · Team Members – A WordPress Team Plugin with Gallery, Grid, Carousel, Slider, Table, List, and More

  • affected < 1.1.0

• jwebsol · Floating Social Share Icons and Social Share buttons – Next Previous Post Links – FL

  • affected < 3.6.0

• co2ok · South Pole: Climate action now

  • affected < 1.0.2.0

• jwind · LittleBot Invoices

  • affected 0

• akdevs · Genealogical Tree – Family Tree & Ancestry for WordPress

  • affected ≤ 2.1.5

• plugins360 · Automatic YouTube Gallery

  • affected < 1.6.5

• nitin247 · Thank You Page for WooCommerce

  • affected < 3.1

• 5starplugins · Marijuana Age Verify

  • affected < 1.3.1

• skshaikat · WooCommerce upcoming Products

  • affected 0

• shabti · Frontend Admin – Add and edit posts, pages, users and more all from the frontend

  • affected < 3.3.33

• matthias-reuter · SV Tracking Manager

  • affected < 1.8.02

• saadiqbal · WP Easy Pay – Payment and Donation form Builder for Square

  • affected < 4.0.2

• flexithemes · WordPress SEO Checklist

  • affected 0

• wgauge · wGauge – Free Version

  • affected 0

• bdthemes · Prime Slider – Addons for Elementor

  • affected < 2.7.0

• themekraft · Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)

  • affected < 2.6.3

• wpt00ls · WP Tools Divi Product Carousel

  • affected < 1.5.0

• aharonyan · Guest posting / Frontend Posting / Front Editor – WP Front User Submit

  • affected < 3.4.1

• woodyhayday · Social Gallery Lite

  • affected 0

• bfintal · Stackable – Page Builder Gutenberg Blocks

  • affected < 3.1.5

• seezee · Five-Star Ratings Shortcode

  • affected < 1.2.39

• wpkube · CAPTCHA 4WP – Antispam CAPTCHA solution for WordPress

  • affected < 7.0.5

• premmerce · Premmerce Wishlist for WooCommerce

  • affected < 1.1.8

• wordpresschef · Salon Booking System – Free Version

  • affected < 7.6.3

• surbma · Surbma | GDPR Proof Cookie Consent & Notice Bar

  • affected < 17.5.3

• dots · Advanced Menu Manager Pro – Built for Content-heavy WordPress Sites to Add, Filter, Lock, and Edit Menus Easily

  • affected 0

• princeahmed · Live TV Player – Worldwide Live TV Channels Player for WordPress

  • affected < 1.2.3

• vanyukov · Market Exporter

  • affected ≤ 2.0.13

• litonice13 · WP Adminify – White Label WordPress, Admin Menu Editor, Login Customizer

  • affected < 2.0.5

• themekraft · TK Google Fonts GDPR Compliant

  • affected < 2.2.1

• starfishwp · Starfish Review Generation & Marketing for WordPress

  • affected < 3.0.26

• halmat · WP Emaily

  • affected 0

• nicheaddons · Education Addon for Elementor

  • affected < 1.2

• matthias-reuter · SV Proven Expert

  • affected < 1.8.01

• wpeka-club · SurveyFunnel – Survey Plugin for WordPress

  • affected < 1.1.3

• pluginsware · Advanced Classifieds & Directory Pro

  • affected < 1.8.8

• smartwpress · Music Player for Elementor – Audio Player & Podcast Player

  • affected < 1.5.5

• ethereumicoio · Cryptocurrency Product for WooCommerce

  • affected < 3.14.6

• kenanfallon · WooCommerce Next Order Coupon

  • affected 0

• themeythemes · Overlay Image Divi Module

  • affected < 1.3.2

• pmbaldha · Email Header Footer

  • affected 0

• bplugins · Document Viewer – Embed Word, Excel, PowerPoint & PDFs Instantly

  • affected < 2.2.5

• nplugins · Price Bands for WooCommerce

  • affected 0

• wpvibes · Addon Elements for Elementor (formerly Elementor Addon Elements)

  • affected < 1.11.14

• drosendo · Smart Variations Images & Swatches for WooCommerce

  • affected < 5.1.10

• 5starplugins · Featured Images in RSS for Mailchimp & More

  • affected < 1.5.9

• ibenic · Simple Sponsorships

  • affected 0

• unitecms · Unlimited Elements For Elementor

  • affected < 1.5.3

• wpjoli · Joli Table Of Contents

  • affected < 1.3.9

• getsparrow · Sparrow: Product Reviews and Ratings for WooCommerce

  • affected 0

• zerozendesign · Multi Page Auto Advance for Gravity Forms

  • affected < 4.3

• mcurly · Generate Images (AI) – Magic Post Thumbnail

  • affected < 3.3.11

• ibenic · Live Scores for SportsPress

  • affected 0

• dots · Hide Shipping Method For WooCommerce

  • affected < 1.3.1

• wpt00ls · Ultimate Carousel For Divi

  • affected < 4.3.1

• prasadkirpekar · WP Meta and Date Remover

  • affected < 1.9.6

• wpt00ls · Image Carousel For Divi

  • affected < 1.5.0

• dudo · Comments Not Replied To

  • affected < 1.5.3

• wisersteps · Contact Form 7 – Capsule CRM – Integration

  • affected < 1.0.5

• alexmoss · Opensea

  • affected < 1.0.3

• tranzly · WordPress Translation plugin for Post, Pages & WooCommerce products. Tranzly IO AI DeepL automatic WordPress Translator.

  • affected < 1.1.1

• alekv · Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing

  • affected < 1.14.3

• gowebsmarty · Modern Addons for Elementor Page Builder

  • affected < 1.2.0

• themesei · Viralike

  • affected 0

• wpdevpowers · WordPress Dev Powers – Element Selector jQuery Powers Plugin

  • affected 0

• wpmunich · WP Munich Blocks – Gutenberg Blocks for WordPress

  • affected < 0.11.0

• inputwp · Availability Datepicker – Booking Calendar for Contact Form 7 – Input WP

  • affected ≤ 2.1

• diviframework · Footer Plugin for Divi

  • affected 0

• mhmrajib · AidWP – Donation & Payment Forms (Stripe Powered)

  • affected < 2.9

• saadiqbal · New User Approve

  • affected < 2.1

• gfirem · GFireM Advance Search

  • affected 0

• giladtakoni · WPMailer – The best mail builder, No More Core for your emails support Elementor, CF7 forms etc…

  • affected 0

• anssilaitila · Shared Files – Frontend File Upload Form & Secure File Sharing

  • affected < 1.6.72

• wpbits · WPBITS Addons For Elementor Page Builder

  • affected < 1.3.2

• prelc · Speculor

  • affected 0

• pagup · WP Google Street View (with 360° virtual tour) & Google maps + Local SEO

  • affected < 1.0.9

• deothemes · WordPress Everse Starter Sites – Elementor Templates

  • affected < 1.2.1

• litonice13 · Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits

  • affected < 1.8.5

• versacomp · Choice Payment Gateway for WooCommerce

  • affected < 2.0.5

• maartenbelmans · Domain Mapping System | Create Microsites with Multiple Alias Domains (multisite optional)

  • affected < 1.7

• stylingwebben · Order and Inventory Manager for WooCommerce

  • affected < 1.4.3

• ninjalibs · Ninja Libs Amazon SES

  • affected 0

• royalnavneet · WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments

  • affected < 4.3

• webheadllc · WP-Cron Status Checker

  • affected < 1.2.4

• bilaltas · CodeKit – Custom Codes Editor

  • affected < 2.3

• fooplugins · Gallery by FooGallery

  • affected < 2.1.34

• kartikparmar · Change Price Title for WooCommerce

  • affected ≤ 2.5

• edgegalleryplugin · WordPress Gallery Plugin – Edge Photo Gallery

  • affected 0

• gloriousthemes · Glorious Services & Support

  • affected 0

• alphabposervice · Easy Newsletter Signups

  • affected < 1.0.4

• mikewire_rocksolid · Announcement & Notification Banner – Bulletin

  • affected < 3.1.0

• dam6pl · Advanced Database Replacer

  • affected 0

• tribalnerd · Multisite Robots.txt Manager

  • affected 0

• irkanu · Simple Social Page Widget & Shortcode

  • affected 0

• josevega · Product Country Restrictions for WooCommerce – Country Catalogs

  • affected < 1.13.0

• shamim51 · Front End PM

  • affected < 11.3.4

• divisumo · Ultimate Divi Modules Suite – Divi Sumo Lite

  • affected 0

• xplodedthemes · XT Points & Rewards for WooCommerce

  • affected < 1.4.3

• themelocation · Widgets for WooCommerce Products on Elementor

  • affected < 1.0.9

• popeating · Delivery for WooCommerce

  • affected 0

• mohsinoffline · NotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce

  • affected < 1.3.7

• cleverplugins · Security Ninja – WordPress Security & Firewall

  • affected < 5.135

• xyulex · TinyMCE Annotate

  • affected 0

• damian-gora · Justified Gallery

  • affected < 1.5.1

• mberding · Book BuyBack Prices

  • affected 0

• daniyalahmedk · Fuse Social Floating Sidebar

  • affected < 5.4.3

• wphrmanager · WP-HR Manager: The Human Resources Plugin for WordPress

  • affected < 3.0.3

• coderpress · Emails Blacklist for Everest Forms

  • affected < 1.0.4

• plugins360 · All-in-One Video Gallery

  • affected < 2.5.4

• oloyede-jamiu · Woo Admin Product Notes

  • affected 0

• themelocation · Remove Add to Cart WooCommerce

  • affected < 1.4.3

• theafricanboss · Checkout with Zelle on Woocommerce

  • affected < 2.0

• wpt00ls · Divi Gravity Forms (WP Tools)

  • affected < 6.6.3

• deothemes · Everse

  • affected < 1.8.6

• commercepundit · Run time Image resizing

  • affected 0

• wp-making · Rest Routes – Custom Endpoints for WordPress REST API

  • affected < 4.24.0

• olezhyk5 · Widget for Contact form 7

  • affected 0

• pagup · Add Pinterest conversion tags for Pinterest Ads + Site verification

  • affected < 1.2.3

• javmah · WPGSI: Spreadsheet Integration

  • affected < 3.6.1

• majick · WP BugBot

  • affected 0

• princeahmed · File Manager for Google Drive – Integrate Google Drive

  • affected < 1.1.0

• deothemes · Nokke

  • affected < 1.0.11

• josevega · Customers Table for WooCommerce: View, Search, Bulk Editor

  • affected < 1.0.8

• closemarketing/ · Sync eCommerce NEO

  • affected 0

• wpcohort · Preloader for Divi

  • affected 0

• tobias_conrad/ · Get Better Reviews for WooCommerce

  • affected ≤ 3.0.6

• codesavory · Knowledge Base documentation & wiki plugin – BasePress Docs

  • affected < 2.15.14

• webba-agency · Easy Appointment Booking & Scheduling System – Webba Booking Calendar

  • affected < 4.2.18

• salttechno · Shuban

  • affected 0

• pmbaldha/ · ACF for WooCommerce Product

  • affected < 1.8

• johnc1979 · Scheduled Notification Bar

  • affected 0

• bplugins · 3D Viewer – Display Interactive 3D Models

  • affected < 1.2.7

• samuelsilvapt · Fullscreen Menu

  • affected ≤ 2.2.7

• wpchill · Gallery PhotoBlocks

  • affected < 1.2.6

• themeisle · Redirection for Contact Form 7

  • affected < 2.5.0

• marcqueralt · DeMomentSomTres Grid Archive

  • affected 0

• seancarrico · Inbound Brew

  • affected 0

• muhammad-rehman · WP Photo Effects

  • affected < 1.2.1

• danish-ali · WPOptin – AI-Powered Top Bars, PopUps & Lead Generation

  • affected ≤ 1.2.3

• dots · Extra Fees for WooCommerce

  • affected < 3.8.2

• ldninjas/ · Reset Course Progress For LearnDash

  • affected 0

• princeahmed · Podcast Box – Best Podcasting Plugin for WordPress

  • affected < 1.0.2

• giladtakoni · The best plugin for restrict content, support all Custom Post Types and Elementor – Password Protected

  • affected 0

• toddhalfpenny · Turbo Widgets

  • affected 0

• wpchill · Passster – Password Protect Pages and Content

  • affected < 3.5.5.2

• powerfulwp · Gift Message for WooCommerce

  • affected < 1.6.0

• actuaryzask · azw woocommerce file uploads

  • affected 0

• infornweb · Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News

  • affected < 2.3.1

• jburleigh1 · Broadcast Lite

  • affected < 2.0.3

• fooplugins · Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar

  • affected < 2.1.15

• penguininitiatives · WP Author Bio

  • affected 0

• ahmed17 · RW Divi Unite Gallery

  • affected ≤ 1.0

• essekia · Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent

  • affected < 0.6.7

• wpwebinfotech · Product Image Watermark for Woo

  • affected < 1.0.4

• nasirahmed · AFI – The Easiest Integration Plugin

  • affected < 1.49.0

• janthielemann · Revolution for Elementor

  • affected 0

• wpconedev · ConeBlog – Elementor Blog Widgets

  • affected < 1.4.6

• linekal · Under Construction

  • affected < 4.0

• ekanath · WP Gratify

  • affected 0

• cmbibby/ · Automizy Gravity Forms

  • affected 0

• toddhalfpenny · Widgets on Pages

  • affected < 1.6.0

• ggriesser · Get feedback from visitors – WP Feedback Suite Plugin

  • affected 0

• dejanmarkovic · WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule

  • affected < 2020.1.0

• intoxstudio · Content Aware Sidebars – Fastest Widget Area Plugin

  • affected < 3.17.2

• salttechno · Bani

  • affected 0

• ggriesser · Fast WordPress

  • affected 0

• sonalsinha21 · SKT Templates – 100% Free Templates for Elementor & Gutenberg

  • affected < 4.3

• frenify · Categorify – WordPress Media Library Category & File Manager

  • affected < 1.0.5

• vinod-dalvi · Ivory Search – WordPress Search Plugin

  • affected < 5.4.4

• pagup · Add Twitter Pixel for Twitter ads

  • affected < 1.0.4

• xplodedthemes · XT Variation Swatches for WooCommerce

  • affected < 1.8.1

• kaizencoders · URL Shortify – Simple and Easy URL Shortener

  • affected < 1.5.11

• mohsinoffline · Pledged Plugins Secure Gateway for Authorize.net and WooCommerce

  • affected < 5.1.27

• themekraft · BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages

  • affected < 3.4.2

• cloudliving · Affiliate Link Builder Plugin for Amazon Associates – Review Engine

  • affected 0

• mte90 · Glossary

  • affected < 2.1.8

• bavokoservices · BAVOKO SEO Tools – All-in-One WordPress SEO

  • affected 0

• foxmoon · Cartoon Url

  • affected 0

• josevega · WP Frontend Admin – Display WP Admin Pages in the Frontend

  • affected < 1.17.0.4

• bouncingsprout · Block, Suspend, Report for BuddyPress

  • affected < 3.3.3

• takanakui · Menu Image, Icons made easy

  • affected < 3.0.6

• xplodedthemes · XT Ajax Add To Cart for WooCommerce

  • affected < 1.0.4

• bestpluginswordpress · One Click Login

  • affected 0

• ethereumicoio · Ether and ERC20 tokens WooCommerce Payment Gateway

  • affected < 4.12.9

• mvvapps/ · Chat Button- Leads and Order over Chat

  • affected < 1.6.1

• dreamfox · Shipping Gateway Per Product for WooCommerce

  • affected < 2.0.4

• deothemes · Purosa

  • affected < 1.1.0

• tauhidpro · NicheTable – Responsive Comparison Table Block

  • affected < 2.2.3

• ankitmaru · Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress

  • affected < 6.0.0

• themesty · WP Sierra

  • affected 0

• dots · Digital Goods (Checkout Field Editor) for WooCommerce Checkout

  • affected < 3.6.4

• cleverplugins · SEO Booster

  • affected < 3.8.5

• fullworks · Stop Contact Form 7 Spam & WPForms Spam – Free Protection

  • affected < 1.3.2

• khothemes · Ultimate Widgets Light

  • affected 0

• beeneeb · Insert or Embed Articulate Content into WordPress

  • affected < 4.3000000016

• saadiqbal · APPExperts – Mobile App Builder for WordPress | WooCommerce to iOS and Android Apps

  • affected < 1.2.2

• bdthemes · Ultimate Post Kit Addons for Elementor

  • affected < 2.9.1

• pootlepress · Caxton – Create Pro page layouts in Gutenberg

  • affected < 1.30.0

• djenh · Nitek Carousel Slider Cool Transitions

  • affected 0

• kartechify · Extend Filter Products By Price Widget

  • affected 0

• blockmeister · BlockMeister – Block Pattern Builder

  • affected < 3.0.5

• mantrabrain · Yatri Tools

  • affected < 1.1.3

• tickera · Restrict – membership, site, content and user access restrictions for WordPress

  • affected < 2.1.9

• ibenic · Change Prices with Time for WooCommerce

  • affected 0

• dots · Flat Rate Shipping Method for WooCommerce

  • affected < 4.0.3

• frostbourn · Responsive Social Slider Widget

  • affected 0

• ahmed17 · Menu Item Scheduler

  • affected 0

• avidthemes/ · Blog Sidebar Widget

  • affected 0

• dots · Multipurpose Gutenberg Block

  • affected ≤ 1.7.3

• codeies · Full Page Blog Designer

  • affected 0

• jcodex · WooCommerce Variation Swatches for Products

  • affected 0

• melapress · WP Activity Log

  • affected < 4.4.0

• patrickgarman · Simple Feature Requests Free – User Feedback Board

  • affected < 2.2.4

• josevega · Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor

  • affected < 1.5.23

• saadiqbal · License Manager for WooCommerce

  • affected < 2.2.6

• skyminds · Sky Login Redirect

  • affected < 3.6.0

• passionatebrains · GA4WP – Analytics Dashboard for the Website

  • affected < 1.3

• munirkamal · Divi Collage

  • affected 0

• lukeseager · Persistent Login

  • affected < 2.0.0

• themelocation · Deals of the Day WooCommerce

  • affected 0

• pagup · Add Linkedin insight tags for Linkedin ads

  • affected < 1.2.4

• maurolopes/ · Easy Settings for LearnDash

  • affected 0

• mihail-barinov · Share This Image

  • affected < 1.67

• sjaved · Easy Social Feed – Social Photos Gallery and Post Feed for WordPress

  • affected < 6.3.4

• jamesparkninja · NEXUS

  • affected 0

• deothemes · Meridia

  • affected < 2.2.7

• tobias_conrad · WebinarIgnition – Live, Automated & Evergreen Webinars for WooCommerce

  • affected < 2.8.12

• wpmagics · Delete Posts automatically

  • affected < 2.1.2

• maxsdesign · Brand

  • affected 0

• livemesh · WPBakery Page Builder Addons by Livemesh

  • affected < 2.9.2

• wptb · WP Table Builder – Drag & Drop Table Builder

  • affected < 1.3.16

• princeahmed · Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player

  • affected < 1.0.8

• wpt00ls · Divi Content Restrictor

  • affected ≤ 1.3.0

• infornweb · Logo Showcase – Responsive Logo Carousel, Logo Slider & Logo Grid

  • affected < 2.0.3

• premmerce · Premmerce Variation Swatches for WooCommerce

  • affected < 1.2.1

• dotrex · PowerFolio – Portfolio & Image Gallery for Elementor

  • affected < 2.1.7

• sslatlas · SSL Atlas – Free SSL Certificate & HTTPS Redirect for WordPress

  • affected < 1.1.1

• gallerycreator · Mixed Media Gallery Blocks

  • affected < 2.3.6

• maltathemes · Easy TikTok Feed – TikTok Video, Feed & Gallery Plugin

  • affected < 1.1.1

• webmuehle · PopOverXYZ – Show Light Weight Beautiful Tool Tips On Any Text

  • affected 0

• pagup · Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO)

  • affected < 1.4.5.0

• wpcohort/ · Number Chat

  • affected 0

• svovaf · Rating-Widget: Star Review System

  • affected < 3.1.4

• rebelcode · Spotlight Social Feeds – Block, Shortcode, and Widget

  • affected < 0.10.2

• xyulex · Expire tags

  • affected 0

• gowebsmarty · Go Viral – social share, social sharebar, social locker, social chat, open graph, reactions, share & view counters

  • affected < 1.8.0

• tobias_conrad · WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms

  • affected < 1.4.2

• tropicalista · Dashy – Google Analytics advanced dashboard

  • affected 0

• premmerce · Premmerce User Roles

  • affected < 1.0.11

• tonyzeoli · Radio Station by netmix® – Manage and play your Show Schedule in WordPress!

  • affected < 2.4.0.6

• saadiqbal · Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred

  • affected < 2.4.3.1

• greenjaymedia · SEO Audit – WP Site Auditor

  • affected < 1.2.5

• hiddenpearls · WordPress Reviews by ReviewPress

  • affected 0

• wptravelengine · WP Travel Engine – Tour Booking Plugin – Tour Operator Software

  • affected < 5.3.8

• takanakui · WP Mobile Menu – The Mobile-Friendly Responsive Menu

  • affected < 2.8.2.7

• sebet/ · WP Smart Export (Free)

  • affected 0

• syntactics · eaSYNC Booking – Hotels, Restaurants & Car Rentals

  • affected < 1.1.10

• theeventscalendar · WP Conference Schedule

  • affected < 1.1.0

• mte90 · Strumenti Partita IVA per Woocommerce

  • affected < 1.3.23

• anfrageformular · Anfrageformular – Multi Step Drag & Drop Formular Builder – Leadgenerierung

  • affected 0

• premmerce · Premmerce Brands for WooCommerce

  • affected < 1.2.12

• ethereumicoio · Ethereum Wallet

  • affected < 4.0.9

• limbcode · Limb Gallery | Create Beautiful Image & Video Galleries

  • affected < 1.5.2

• peterschulznl · Code Manager

  • affected < 1.0.14

• cypressnorth · Payment Gateway for PayFabric

  • affected 0

• commercepundit · CP Simple Newsletter

  • affected 0

• jwind · LittleBot ACH for Stripe + Plaid

  • affected 0

• dotrex · Aquarella Lite

  • affected 0

• coderpress · Coinbase Commerce – Crypto Gateway for WooCommerce

  • affected < 1.4.1

• wpmoose · Villar

  • affected < 1.0.8

• uriahs-victor · Kikote – Location Picker at Checkout & Google Address AutoFill Plugin for WooCommerce

  • affected < 1.4.5

• meowcrew · Age Verification Screen for WooCommerce

  • affected < 1.0.1

• dots · Enhanced Ecommerce Google Analytics for WooCommerce

  • affected < 3.6.3

• wpjoli · Joli FAQ SEO – WordPress FAQ Plugin

  • affected < 1.0.4

• dots · Mass Pages/Posts Creator

  • affected < 2.1.5

• sebet · WP Relevant Ads

  • affected 0

• gloriousthemes · GloriousThemes Starter Sites

  • affected 0

• oloyede-jamiu · WP Group Promoter

  • affected 0

• chetmac · Airpress

  • affected 0

• wpt00ls · Schema Plugin For Divi, Gutenberg & Shortcodes

  • affected ≤ 4.0.1

• sindyakinsergei · Giveaways for woocommerce

  • affected 0

• hiddenpearls · Custom Login Page Customizer

  • affected < 2.1.8

• humblethemes · LearnMore

  • affected 0

• marcqueralt · DeMomentSomTres Media Tools Auto

  • affected 0

• oceanwp · Ocean Extra

  • affected < 1.9.4

• properfraction · kk Star Ratings – Rate Post & Collect User Feedbacks

  • affected < 5.2.9

• stevehenty · Drop Shadow Boxes

  • affected < 1.7.4

• wpt00ls · FAQ Manager For Divi, Gutenberg Block & Shortcode

  • affected < 5.4.1

• pagup · Ads.txt & App-ads.txt Manager for WordPress

  • affected < 1.1.7.0

• saadiqbal · Quick Contact Form

  • affected < 8.0.2

• glowlogix · WP Frontend Profile

  • affected < 1.2.5

• dgwyer · SVG Flags – Beautiful Scalable Flags For All Countries!

  • affected < 0.9.6

• ldninjas/ · Drip Feed Content Extended for Learndash

  • affected 0

• infornweb · Post List Designer – Category Post, Recent Post, Post List

  • affected < 2.1.7

• aguilerasoft · Conversion de moneda Woocommerce

  • affected 0

• pagup · VidSEO – Video transcript embedding for WordPress & LLM

  • affected < 1.2.4

• nplugins · Before and After Product Images for WooCommerce

  • affected 0

• renaudbod · Woocommerce Customer Reviews with Artificial Intelligence analyzis, with IBM Watson Tone Analyzer

  • affected 0

• ivanchernyakov · LawPress – Law Firm Website Management

  • affected 0

• dots · Shipping Method Display Style for WooCommerce

  • affected < 3.7.5

• wproyal · Royal Addons for Elementor – Addons and Templates Kit for Elementor

  • affected < 1.3.33

• modulemasters · SQL Reporting Services – SSRS Plugin for WordPress

  • affected 0

• josevega · Bulk Edit Posts and Products in Spreadsheet

  • affected < 2.24.13

• lkoudal · Delete Duplicate Posts

  • affected < 4.7.5

• xjohnyk · WS Bootstrap

  • affected 0

• meeplugins · Clean Social Icons

  • affected 0

• andyabelow · Media Library File Download

  • affected < 1.1

• cadudecastroalves · WP Link Bio

  • affected < 1.4.5

• pagup · Automatic Internal Links for SEO by Pagup

  • affected < 1.0.4

• cyberhobo · Geo Mashup

  • affected < 1.13.6

• tobias_conrad · Builder for WooCommerce product reviews shortcodes – ReviewShort

  • affected < 1.0.17

• anssilaitila · Contact List – Online Staff Directory & Address Book

  • affected < 2.9.50

• saadiqbal · Post Snippets – Custom WordPress Code Snippets Customizer

  • affected < 3.1.7

• shawoninfo · SocialMark – Easy Watermark/Logo on Social Media Post Link Share Preview

  • affected < 2.0.5

• mnelson4 · Print My Blog – Print, PDF, & eBook Converter WordPress Plugin

  • affected < 3.11.4

• wpdelicious · WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes)

  • affected < 1.3.5

• blackandwhitedigital · TreePress – Easy Family Trees & Ancestor Profiles

  • affected < 2.0.21

• paulio21 · Postcode Redirect

  • affected ≤ 4.4.1

• nitin247 · Product Author for WooCommerce

  • affected < 1.0.3

• imtiazrayhan · WP Coupons and Deals – Coupon Plugin For Affiliate Marketers

  • affected < 3.1.12

• spartac · Feedpress Generator – External RSS Frontend Customizer

  • affected < 1.2.0

• wpvibes · Form Vibes – Database Manager for Forms

  • affected < 1.4.3

• majick/ · WP AutoMedic

  • affected 0

• dots · Banner Management, Product Slider, Product Carousel for WooCommerce

  • affected < 2.2.3

• smgteam · Duplicate Variations for Woocommerce

  • affected 0

• thinleek · Send Prebuilt Emails

  • affected 0

• essekia · Helpie FAQ — Accordion, Docs & Knowledge Base

  • affected < 1.7.7

• livemesh · Livemesh SiteOrigin Widgets

  • affected < 2.8.3

• livemesh · Livemesh Addons for Beaver Builder

  • affected < 2.8.4

• 9brada6 · Tabs with Recommended Posts (Widget)

  • affected 0

• closetechnology · Connect WooCommerce Shop to ERP/CRM, Verifactu and EU/VAT Compliance

  • affected < 2.1

• infosatech · RevivePress – Keep your Old Content Evergreen

  • affected < 1.3.1

• invisnet · WP fail2ban – Advanced Security

  • affected < 4.4.0.2

• ultradevs · Ultra Elementor Addons

  • affected 0

• wpcohort/ · RecurWP – WordPress Recurly Payment Gateway

  • affected 0

• buttonizer · Buttonizer – Floating Menus, Sticky Buttons, & Popup Builder

  • affected < 2.6.3

• brightvesseldev · Quick Event Manager

  • affected < 9.2.17

• wpchill · Image Photo Gallery Final Tiles Grid

  • affected < 3.5.5

• fooplugins · Lightbox & Modal Popup WordPress Plugin – FooBox

  • affected < 2.7.17

• wpdevpowers · WP Dev Powers – Display Screen Dimensions to Admin Plugin

  • affected 0

• johnc1979 · Ultimate Bulk SEO Noindex Nofollow – Speed up Penalty Recovery Ultimate SEO Booster

  • affected 0

• peterschulznl · WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards

  • affected < 5.1.4

• kaira · StoreCustomizer – A plugin to Customize all WooCommerce Pages

  • affected < 2.3.8

• mhmrajib · TopNewsWp – Display Tikcer News, RSS Feed Widget and Many More

  • affected < 2.0

• danieliser · User Menus – Nav Menu Visibility

  • affected < 1.2.9

• webheadllc · Contact Form 7 Multi-Step Forms

  • affected < 4.1.91

• 5starplugins · Easy Age Verify

  • affected < 1.6.1

• brandonfire · Blocked in China | Check if your site is available in the Chinese mainland

  • affected < 1.0.3

• josevega · Disable Payment Methods based on cart conditions for WooCommerce

  • affected < 1.13.1.1

• ejslondon/ · Awesome SSL

  • affected 0

• iksstudio · Iks Menu – WordPress Category Accordion Menu & FAQs

  • affected < 1.9.2

• prelc · Purus

  • affected 0

• janwyl · Hooked Editable Content

  • affected 0

• mdedev · Run Contests, Raffles, and Giveaways with ContestsWP

  • affected < 1.9.0

• themeythemes · Post Carousel Divi

  • affected < 1.1.2

• anasbinmukim · MailChimp Manager

  • affected 0

• premmerce · Premmerce Permalink Manager for WooCommerce

  • affected < 2.3.5

• ivacy · Secure IP Logins

  • affected 0

• kylegilman · Videopack

  • affected < 4.7.4

• premmerce · Premmerce WooCommerce Customers Manager

  • affected < 1.1.13

• wpvibes · Dynific Addons for Elementor (formerly AnyWhere Elementor)

  • affected < 1.2.5

• badhonrocks · Divi Torque Lite – Divi Theme, Divi Builder & Extra Theme

  • affected < 3.5.0

• elbisnero · Events Calendar Registration

  • affected 0

• saadiqbal · Rocket Maintenance Mode & Coming Soon Page

  • affected < 4.3

• h3technologies · WordPress WooCommerce Sync for Google Sheet

  • affected 0

• pootlepress/ · Easy Smooth Scroll Links – Smooth Scrolling Anchor

  • affected < 2.23.1

• sj_o · Page Builder Gutenberg Blocks – Kioken Blocks

  • affected 0

• matstars · Cryptocurrency Portfolio Tracker

  • affected 0

• sebet · Go Fetch Jobs (for WP Job Manager)

  • affected ≤ 1.7.3.2

• sangaran · Quick Affiliate Store

  • affected 0

• wpt00ls · WP Tools Divi Blog Carousel

  • affected < 1.3.0

• koen12344 · Post to Google My Business (Google Business Profile)

  • affected < 3.0.10

• nicheaddons · NicheBase

  • affected < 1.2.2

• webmuehle · WPVisitorInfo – Show Visitor Information & Conditional Data Based On That Information

  • affected 0

• premmerce · Premmerce

  • affected < 1.3.16

• woopops · CartPops – High Converting Add To Cart Popup For WooCommerce

  • affected < 1.4.17

• scrollsequence · Scrollsequence – Cinematic Scroll Image Animation Plugin

  • affected < 1.2.4

• kaira · Elation

  • affected 0

• thecodechime · Cuisine Palace

  • affected 0

• dots · Product Attachment for WooCommerce

  • affected < 2.1.3

• masterblocks · Master Blocks – Gutenberg Site Builder

  • affected 0

• moomooagency · Product Options and Price Calculation Formulas for WooCommerce – Uni CPO

  • affected < 4.9.14

• kitthemes · WordPress Coupon Plugin for Bloggers and Marketers – WP Offers

  • affected < 1.1.4

• tripetto · WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto

  • affected < 5.3.1

• mumarym1985 · Widgets on Pages and Posts

  • affected 0

• wordplus · Better Messages – WCFM Integration

  • affected 0

• wpgeniuz · SheetPress – Manage WordPress Meta data with Google Sheets

  • affected 0

• olezhyk5 · Advanced Custom Fields options import/export

  • affected 0

• fullworks · Quick Paypal Payments

  • affected < 5.7.22

• chillichalli · Tarot Card Oracle

  • affected < 1.0.6

• cloudsponge · Better Sharing

  • affected ≤ 1.7.1

• intoxstudio · Restrict User Access – Ultimate Membership & Content Protection

  • affected < 2.2.2

• wupo · WUPO Group Attributes for WooCommerce

  • affected ≤ 2.0.0

• shelob9 · Nugget by Ingot: Easy, automated and native A/B testing for everyone

  • affected 0

• fsruslan · FeedbackScout: The easiest way to collect, prioritise, manage and track customer feedback.

  • affected 0

• deothemes · Arendelle

  • affected < 1.1.3

• boltonstudios · Easy Zillow Reviews

  • affected < 1.4.1

• janthielemann · Battle Suit for Divi

  • affected 0

• jkohlbach · Store Toolkit – WooCommerce Extensions, Quick Enhancements & Handy Tools

  • affected < 2.3.4

• weconnectcode · WCC SEO Keyword Research

  • affected 0

• zeetheme · Elements for LifterLMS

  • affected 0

• commercepundit · Custom Registration and Custom Login Forms with New Recaptcha

  • affected 0

• saadiqbal · B2B Request a Quote

  • affected < 1.4.9

• mohammedrezq · Wadi Survey

  • affected 0

• atakanoz · Performance Kit

  • affected 0

• dovyp · Page Builder for Gutenberg – StarterBlocks

  • affected 0

• gkher/ · Impexium Single Sign On

  • affected 0

• xplodedthemes · XT Quick View for WooCommerce

  • affected < 1.9.6

• josevega · Live Drag and Drop Builder for Contact Form 7

  • affected < 1.2.4

• nicheaddons · Primary Addon for Elementor

  • affected < 1.5.2

• jaydeep-nimavat · JDs Portfolio

  • affected 0

• mbrown24 · TwentyFourth WP Scraper

  • affected 0

• creativethemeshq · Blocksy Companion

  • affected < 1.8.20

• kartikparmar/ · WordPress Google Translate

  • affected < 1.2

• darell · Hasium

  • affected < 1.6.5

• marviorocha · Station Pro – Advanced Audio Streaming & Player for WordPress

  • affected 0

• stellarwp · Event Tickets and Registration

  • affected < 5.3.0.1

• kaggdesign · Gateway for PayLate on WooCommerce

  • affected ≤ 1.4

• pagup · Auto SEO META keywords (META tags keywords) optimization + WooCommerce

  • affected < 1.0.4

• co2ok · ClimateClick: Climate Action for all

  • affected ≤ 1.0.9.21

• premmerce · Premmerce SEO for WooCommerce

  • affected < 2.1.5

• saadiqbal · Wholesale for WooCommerce

  • affected < 1.6.1

• ldninjas/ · Frontend group restriction for LearnDash

  • affected 0

• jetixwp · Really Simple Featured Video – Featured Video Support for Posts, Pages & WooCommerce Products

  • affected ≤ 0.5.1

• fullworks · Display Eventbrite Events

  • affected < 4.4.8

• xplodedthemes · XT Floating Cart for WooCommerce

  • affected < 2.6.3

• wplegalpages · Cookie Banner for GDPR / CCPA – WPLP Cookie Consent

  • affected < 2.1.1

• milmor · WP SPID Italia

  • affected < 2.3.5

• bycrik · Tiered Pricing Table for WooCommerce

  • affected < 2.6.1

• codexonics · Prime Mover – Migrate WordPress Website & Backups

  • affected < 1.5.0

• vernal · Replyable – Subscribe to Comments and Reply by Email

  • affected < 2.2.9

• webmuehle · Court Reservation – Manage Your Court Bookings Online

  • affected < 1.7.0

• jurski · VO Store Locator – WP Store Locator Plugin

  • affected 0

• fullworks · Get Directions Map

  • affected < 2.15.8

• premmerce · Premmerce Redirect Manager

  • affected < 1.0.7

• snazzythemes · SnazzyAdmin WP Admin Theme

  • affected 0

• deothemes · Amela

  • affected < 1.0.5

• javmah · Woocommerce Customers Order History

  • affected < 5.2.1

• lynn999 · EthPress – Web3 Login

  • affected < 1.5.1

• dangub86 · Ant Admin Notices for Team

  • affected 0

• josevega · Bulk Edit Coupons for WooCommerce – WP Sheet Editor

  • affected < 1.3.28

• mattpramschufer · Pay For Post with WooCommerce

  • affected < 3.0.9

• alex-ye · bbResolutions

  • affected 0

• passionatebrains · AWCA – The Great Analytics Insights for Your eStore

  • affected < 3.0.1

• cliffpaulick · TK SmugMug Slideshow Shortcode

  • affected 0

• wpchill · Lightbox – EverlightBox Gallery

  • affected < 1.1.18

• cebbi · Unakit

  • affected < 1.2.4.2

• mojofywp · WP Affiliate Disclosure

  • affected < 1.2.3

• interfacelab · Media Cloud for Bunny CDN, Amazon S3, Cloudflare R2, Google Cloud Storage, DigitalOcean and more

  • affected < 4.3.1

• rafacarvalhido · RaCar Clear Cart for WooCommerce

  • affected < 1.2.3

• litonice13 · WP Disable Sitemap

  • affected < 1.0.4

• davidanderson · Internal Link Juicer: SEO Auto Linker for WordPress

  • affected < 1.3.0

• munirkamal · Block Slider – Responsive Image Slider, Video Slider & Post Slider

  • affected < 2.0.0

• milukove · Pinblocks — Gutenberg blocks with Pinterest widgets

  • affected 0

• ronena100 · Contact Widgets For Elementor all the contact links you need in one place

  • affected 0

• tickera · Tickera – Sell Tickets & Manage Events

  • affected < 3.4.9.2

• bplugins · StreamCast – Live Radio Streaming Player

  • affected < 2.1.4

• johnc1979 · Sticky add to cart for Woo

  • affected 0

• blockypage · BlockyPage – Gutenberg Based Page Builder

  • affected 0

• maciejbak85 · Pro Broken Links Maintainer

  • affected 0

• sorsawo · WP School Calendar

  • affected < 3.6

• listplus · ListPlus – Unlimited Listing Directory

  • affected 0

• walkerwp · Walker Core

  • affected < 1.1.8

• patrickposner · Agy – Age verification for WooCommerce

  • affected < 4.3.1

• ggedde · Modern Designs for Gravity Forms

  • affected 0

• rankbear · RankBear

  • affected 0

• staxwp · STAX Header Builder

  • affected < 1.3.6

• fastaf/ · Fast Checkout for WooCommerce

  • affected < 1.1.17

• boriscolombier/ · WooCommerce PayPlug

  • affected 0

• alphabposervice · Easy Code Snippets

  • affected < 1.0.1

• w3scloud · W3SCloud Contact Form 7 to Zoho CRM

  • affected < 2.1.0

• elementinvader · Widget Detector for Elementor

  • affected < 1.2.0

• pagup · Add Tiktok Pixel for Tiktok ads (+Woocommerce)

  • affected < 1.2.2

• gowebsmarty · WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan

  • affected < 5.7.10

• wordplus · Better Messages – Integration for WC Vendors Marketplace

  • affected < 1.0.7

• alleythemes · Alley Business Toolkit

  • affected < 1.1.8

• premmerce · Premmerce Product Filter for WooCommerce

  • affected < 3.6.2

• pippozanardo · WP Search Filter

  • affected 0

• alphabposervice · Easy Post Views Count

  • affected < 1.0.5

• dotrex · Power Ups for Elementor

  • affected < 1.2.2

• dvizhenia · Social Kit

  • affected 0

• pluginandplay · Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider

  • affected < 2.1.2

• mhmrajib · HM Multiple Roles

  • affected < 1.6

• multicollab · Team Collaboration & Content Workflow Plugin for WordPress Editorial Teams – Multicollab

  • affected < 2.0.4

• wpsaad · Image Alt Text Manager – Bulk & Dynamic Alt Tags For image SEO Optimization + AI

  • affected < 1.5.0

• premmerce · Premmerce Product Search for WooCommerce

  • affected < 2.2.3

• sovstack · Security Safe

  • affected < 2.4.4

• josevega · Bulk Edit Products for WooCommerce – WP Sheet Editor

  • affected < 1.7.13

• danielealessandra · Da Reactions

  • affected < 3.20.2

• wpscripts · Food Store – Online Food Delivery & Pickup

  • affected < 1.4

• thijzie · Abeta Link PunchOut

  • affected ≤ 0.4

• javmah · jav's – WooCommerce and Trello integration WooTrello

  • affected < 2.3.1

• pagebuildersandwich · Page Builder Sandwich – Front End WordPress Page Builder Plugin

  • affected < 4.5.5

• switcorp · WP Sessions Time Monitoring Full Automatic

  • affected < 1.0.6

• pasyuk · WoowGallery

  • affected < 1.1.9

• upfiv · WordPress Auto SEO Plugin – Upfiv SEO Wizard

  • affected 0

• wpsoul · Greenshift – animation and page builder blocks

  • affected < 1.1.6

• nicheaddons · Restaurant & Cafe Addon for Elementor

  • affected < 1.4.6

References (6)

• https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=cve (opens in a new tab)
• https://wpscan.com/vulnerability/6dae6dca-7474-4008-9fe5-4c62b9f12d0a (opens in a new tab)
• https://freemius.com/blog/managing-security-issues-open-source-freemius-sdk-security-disclosure/ (opens in a new tab)
• https://wpdirectory.net/search/01FWPVWA7BC5DYGZHNSZQ9QMN5 (opens in a new tab)
• https://wpdirectory.net/search/01G02RSGMFS1TPT63FS16RWEYR (opens in a new tab)
• https://web.archive.org/web/20220225174410/https%3A//www.pluginvulnerabilities.com/2022/02/25/our-security-review-of-wordpress-plugin-found-freemius-library-still-contained-vulnerabilities-3-years-after-major-security-incident/ (opens in a new tab)

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2022-4974](https://trackcve.app/badge/CVE-2022-4974.svg)](https://trackcve.app/cve/CVE-2022-4974)

Record last updated 8 Apr 2026, 16:46 UTC.