CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
79.4%
_** Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors?**Through October 14th, r__esearchers can earn up to $31,200, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we handle all the rest. _
Last week, there were 138 vulnerabilities disclosed in 116 WordPress Plugins and 6 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 48 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to make the internet more secure. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 18,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
The Wordfence Threat Intelligence Team reviews each vulnerability to determine impact and severity, along with assessing the likelihood of exploitation, to verify that the Wordfence Firewall provides sufficient protection.
The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our Premium, Care, and Response customers last week:
Wordfence Premium, Care, and Response customers received this protection immediately, while users still running the free version of Wordfence will receive this enhanced protection after a 30 day delay.
Patch Status | Number of Vulnerabilities |
---|---|
Patched | 103 |
Unpatched | 35 |
Severity Rating | Number of Vulnerabilities |
---|---|
Low Severity | 1 |
Medium Severity | 105 |
High Severity | 20 |
Critical Severity | 12 |
Vulnerability Type by CWE | Number of Vulnerabilities |
---|---|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 55 |
Missing Authorization | 28 |
Information Exposure | 11 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 10 |
Cross-Site Request Forgery (CSRF) | 9 |
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 8 |
Deserialization of Untrusted Data | 4 |
Unrestricted Upload of File with Dangerous Type | 3 |
Authentication Bypass Using an Alternate Path or Channel | 2 |
Improper Input Validation | 2 |
Authorization Bypass Through User-Controlled Key | 1 |
Improper Control of Generation of Code ('Code Injection') | 1 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 1 |
Improper Privilege Management | 1 |
Server-Side Request Forgery (SSRF) | 1 |
URL Redirection to Untrusted Site ('Open Redirect') | 1 |
Researcher Name | Number of Vulnerabilities |
---|
| 11
JoΓ£o Pedro Soares de AlcΓ’ntara
| 10
| 9
| 7
| 7
| 6
| 5
| 5
| 4
| 4
| 4
| 4
| 3
| 3
| 3
| 3
| 3
TrΖ°Ζ‘ng Hα»―u PhΓΊc (truonghuuphuc)
| 3
| 3
| 3
| 2
| 2
| 2
| 2
| 2
| 2
| 2
| 2
| 2
| 1
| 1
| 1
| 1
| 1
| 1
| 1
| 1
| 1
| 1
| 1
| 1
| 1
| 1
| 1
| 1
| 1
| 1
| 1
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
Software Name | Software Slug |
---|---|
140+ Widgets | Xpro Addons For Elementor β FREE |
3D FlipBook β PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery | interactive-3d-flipbook-powered-physics-engine |
Accept Stripe Payments | stripe-payments |
Advanced Cron Manager β debug & control | advanced-cron-manager |
affiliate-toolkit β WordPress Affiliate Plugin | affiliate-toolkit-starter |
AMP for WP β Accelerated Mobile Pages | accelerated-mobile-pages |
Appointment Booking Calendar Plugin and Scheduling Plugin β BookingPress | bookingpress-appointment-booking |
Aruba HiSpeed Cache | aruba-hispeed-cache |
BerqWP β Automated All-In-One PageSpeed Optimization Plugin for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript | searchpro |
BetterDocs β Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer for Elementor & Gutenberg | betterdocs |
Bitly's WordPress Plugin | wp-bitly |
Blockspare: Gutenberg Blocks & Patterns for Blogs, Magazines, Business Sites β Post Grids, Sliders, Carousels, Counters, Page Builder & Starter Site Imports, No Coding Needed | blockspare |
Blox Page Builder | blox-page-builder |
Booking for Appointments and Events Calendar β Amelia | ameliabooking |
Brizy β Page Builder | brizy |
BSK Forms Blacklist | bsk-gravityforms-blacklist |
Card Elements for Elementor | card-elements-for-elementor |
Chatbot Support AI: Free ChatGPT Chatbot, Woocommerce Chatbot | chatbot-support-ai |
Christmasify! | christmasify |
CM Tooltip Glossary | enhanced-tooltipglossary |
Cost Calculator Builder | cost-calculator-builder |
CRM Perks Forms β WordPress Form Builder | crm-perks-forms |
DL Robots.txt | dl-robotstxt |
DL Verification | dl-verification |
DL Yandex Metrika | dl-yandex-metrika |
Docket (WooCommerce Collections / Wishlist / Watchlist) | woocommerce-collections |
Easy Digital Downloads β eCommerce Payments and Subscriptions made easy | easy-digital-downloads |
Easy PayPal & Stripe Buy Now Button | wp-ecommerce-paypal |
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) | bdthemes-element-pack-lite |
Enter Addons β Ultimate Template Builder for Elementor | enteraddons |
Event Manager and Tickets Selling Plugin for WooCommerce β WpEvently β WordPress Plugin | mage-eventpress |
EventPrime β Events Calendar, Bookings and Tickets | eventprime-event-calendar-management |
Falang multilanguage for WordPress | falang |
Filr β Secure document library | filr-protection |
Folders β Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager | folders |
Football Pool | football-pool |
Form Maker by 10Web β Mobile-Friendly Drag & Drop Contact Form Builder | form-maker |
FormCraft β Form Builder | formcraft-form-builder |
Fuse Social Floating Sidebar | fuse-social-floating-sidebar |
GeoDirectory β WP Business Directory Plugin and Classified Listings Directory | geodirectory |
Graphina β Elementor Charts and Graphs | graphina-elementor-charts-and-graphs |
Horizontal scrolling announcements | horizontal-scrolling-announcements |
Hummingbird Performance β Cache & Page Speed Optimization for Core Web Vitals | Critical CSS |
HUSKY β Products Filter Professional for WooCommerce | woocommerce-products-filter |
Import and export users and customers | import-users-from-csv-with-meta |
JetGridBuilder β Grid Builder for Elementor and Gutenberg | jetgridbuilder |
Kodex Posts likes | kodex-posts-likes |
LA-Studio Element Kit for Elementor | lastudio-element-kit |
LearnPress β WordPress LMS Plugin | learnpress |
Lightbox & Modal Popup WordPress Plugin β FooBox | foobox-image-lightbox |
Linkify Text | linkify-text |
MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder | mailchimp-subscribe-sm |
MainWP Child Reports | mainwp-child-reports |
Masteriyo LMS β eLearning and Online Course Builder for WordPress | learning-management-system |
Mediavine Control Panel | mediavine-control-panel |
Meta Box β WordPress Custom Fields Framework | meta-box |
Modern Events Calendar | modern-events-calendar |
Modern Events Calendar Lite | modern-events-calendar-lite |
MultiVendorX β The Ultimate WooCommerce Multivendor Marketplace Solution | dc-woocommerce-multi-vendor |
My Custom CSS PHP & ADS | my-custom-css |
myCred β Loyalty Points and Rewards plugin for WordPress and WooCommerce β Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification | mycred |
No Update Nag | no-update-nag |
Obfuscate Email | obfuscate-email |
Opal Membership | opal-membership |
Opti Marketing | opti-marketing |
Organization chart | organization-chart |
Paid Memberships Pro - Membership Maps Add On | pmpro-membership-maps |
ParcelPanel (Free to install) β Shipment Tracking, Tracking, and Order Tracking for WooCommerce | parcelpanel |
Participants Database | participants-database |
PDF Builder for WPForms | pdf-builder-for-wpforms |
Post Grid and Gutenberg Blocks | post-grid |
Post Grid Master β Custom Post Types, Taxonomies & Ajax Filter Everything with Infinite Scroll, Load More, Pagination & Shortcode Builder | ajax-filter-posts |
Premium Addons for Elementor | premium-addons-for-elementor |
Products, Order & Customers Export for WooCommerce | export-woocommerce |
Quiz and Survey Master (QSM) β Easy Quiz and Survey Maker | quiz-master-next |
Registrations for the Events Calendar β Event Registration Plugin | registrations-for-the-events-calendar |
Reveal Template | reveal-template |
Robin image optimizer β save money on image compression | robin-image-optimizer |
Selection Lite | selection-lite |
Send Emails with Mandrill | send-emails-with-mandrill |
Sender β Newsletter, SMS and Email Marketing Automation for WooCommerce | sender-net-automated-emails |
Shared Files β Frontend File Upload Form & Secure File Sharing | shared-files |
Shield Security β Smart Bot Blocking & Intrusion Prevention Security | wp-simple-firewall |
Simple Local Avatars | simple-local-avatars |
Simple Share | dts-simple-share |
Slider & Popup Builder by Depicter β Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel | depicter |
Slider by 10Web β Responsive Image Slider | slider-wd |
Slider by Soliloquy β Responsive Image Slider for WordPress | soliloquy-lite |
Social Slider Feed | instagram-slider-widget |
Spectra β WordPress Gutenberg Blocks | ultimate-addons-for-gutenberg |
StreamCast β Radio Player for WordPress | streamcast |
Sunshine Photo Cart: Free Client Photo Galleries for Photographers | sunshine-photo-cart |
Themify Shortcodes | themify-shortcodes |
Timeline and History slider | timeline-and-history-slider |
TrueBooker β Appointment Booking and Scheduler Plugin. | truebooker-appointment-booking |
Tutor LMS β eLearning and online course solution | tutor |
TypeSquare Webfonts for γ¨γγ―γΉγ΅γΌγγΌ | xserver-typesquare-webfonts |
Ultimate Addons for Beaver Builder β Lite | ultimate-addons-for-beaver-builder-lite |
Ultimate Bootstrap Elements for Elementor | ultimate-bootstrap-elements-for-elementor |
Unite Gallery Lite | unite-gallery-lite |
Viral Signup β limited opt-in with viral refferal sharing | viral-signup |
Visual Website Collaboration, Feedback & Project Management β Atarim | atarim-visual-collaboration |
Waitlist Woocommerce ( Back in stock notifier ) | waitlist-woocommerce |
WappPress β Create Mobile App for any WordPress site with our Mobile App Builder in just 1 minute | wapppress-builds-android-app-for-website |
WooCommerce - Social Login | woo-social-login |
WooCommerce Product Table Lite | wc-product-table-lite |
WordPress Tour & Travel Booking Plugin for WooCommerce β WpTravelly | tour-booking-manager |
WP Dashboard Notes | wp-dashboard-notes |
WP MultiTasking β WP Utilities | wp-multitasking |
WP Search Analytics | search-analytics |
WP Table Builder β WordPress Table Plugin | wp-table-builder |
WPBakery Visual Composer | js_composer |
WPCafe β Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce | wp-cafe |
WPSection | wpsection |
YaMaps for WordPress Plugin | yamaps |
ΩΩΪ©Ψ§Ω Ψ±Ψ³ ΩΨ§Ψ±Ψ³Ϋ | persian-woocommerce |
Software Name | Software Slug |
---|---|
MDx | MDx |
MultiPurpose | multipurpose |
News Flash | news-flash |
Orchid Store | orchid-store |
The Next | the-next |
Woffice CRM | woffice |
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you shouldβve already been notified if your site was affected by any of these vulnerabilities. If you'd like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
10.0
CVSS Rating
Critical (10.0)
CVE-ID
CVE-2024-43144
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Cost Calculator Builder
Researcher
TrΖ°Ζ‘ng Hα»―u PhΓΊc (truonghuuphuc)
10.0
CVSS Rating
Critical (10.0)
CVE-ID
CVE-2024-43132
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Docket (WooCommerce Collections / Wishlist / Watchlist)
Researcher
10.0
CVSS Rating
Critical (10.0)
CVE-ID
CVE-2024-6928
Patch Status
Unpatched
Published
Aug 10, 2024
Affected Software
Opti Marketing
Researcher
10.0
CVSS Rating
Critical (10.0)
CVE-ID
CVE-2024-6924
Patch Status
Unpatched
Published
Aug 10, 2024
Affected Software
TrueBooker β Appointment Booking and Scheduler Plugin.
Researcher
10.0
CVSS Rating
Critical (10.0)
CVE-ID
CVE-2024-6926
Patch Status
Unpatched
Published
Aug 7, 2024
Affected Software
Viral Signup β limited opt-in with viral refferal sharing
Researcher
9.9
CVSS Rating
Critical (9.9)
CVE-ID
CVE-2024-43138
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Event Manager and Tickets Selling Plugin for WooCommerce β WpEvently β WordPress Plugin
Researcher
9.9
CVSS Rating
Critical (9.9)
CVE-ID
CVE-2024-43145
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
GeoDirectory β WP Business Directory Plugin and Classified Listings Directory
Researcher
TrΖ°Ζ‘ng Hα»―u PhΓΊc (truonghuuphuc)
9.9
CVSS Rating
Critical (9.9)
CVE-ID
CVE-2024-43207
Patch Status
Unpatched
Published
Aug 9, 2024
Affected Software
Unite Gallery Lite
Researcher
JoΓ£o Pedro Soares de AlcΓ’ntara
9.8
CVSS Rating
Critical (9.8)
CVE-ID
CVE-2024-7350
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Appointment Booking Calendar Plugin and Scheduling Plugin β BookingPress
Researcher
9.8
CVSS Rating
Critical (9.8)
CVE-ID
CVE-2024-43160
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
BerqWP β Automated All-In-One PageSpeed Optimization Plugin for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript
Researcher
9.8
CVSS Rating
Critical (9.8)
CVE-ID
CVE-2024-43153
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Woffice CRM
Researcher
9.8
CVSS Rating
Critical (9.8)
CVE-ID
CVE-2024-7503
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
WooCommerce - Social Login
Researcher
8.8
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-43129
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
BetterDocs β Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer for Elementor & Gutenberg
Researcher
JoΓ£o Pedro Soares de AlcΓ’ntara
8.8
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-6315
Patch Status
Unpatched
Published
Aug 5, 2024
Affected Software
Blox Page Builder
Researcher
8.8
CVSS Rating
High (8.8)
CVE-ID
CVE-2023-5000
Patch Status
Patched
Published
Aug 5, 2024
Affected Software
Horizontal scrolling announcements
Researcher
8.8
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-43221
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
JetGridBuilder β Grid Builder for Elementor and Gutenberg
Researcher
JoΓ£o Pedro Soares de AlcΓ’ntara
8.8
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-7548
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
LearnPress β WordPress LMS Plugin
Researcher
8.8
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-7492
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
MainWP Child Reports
Researcher
8.8
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-7486
Patch Status
Unpatched
Published
Aug 7, 2024
Affected Software
MultiPurpose
Researcher
8.8
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-7150
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Slider by 10Web β Responsive Image Slider
Researcher
8.8
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-7561
Patch Status
Unpatched
Published
Aug 7, 2024
Affected Software
The Next
Researcher
8.8
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-43232
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
Timeline and History slider
Researcher
JoΓ£o Pedro Soares de AlcΓ’ntara
8.8
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-43140
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Ultimate Bootstrap Elements for Elementor
Researcher
8.8
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-5709
Patch Status
Patched
Published
Aug 5, 2024
Affected Software
WPBakery Visual Composer
Researcher
JoΓ£o Pedro Soares de AlcΓ’ntara
8.8
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-43135
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
WPCafe β Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce
Researcher
JoΓ£o Pedro Soares de AlcΓ’ntara
8.8
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-43165
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
WPSection
Researcher
JoΓ£o Pedro Soares de AlcΓ’ntara
8.5
CVSS Rating
High (8.5)
CVE-ID
CVE-2024-6522
Patch Status
Patched
Published
Aug 6, 2024
Affected Software
Modern Events Calendar
Modern Events Calendar Lite
Researcher
8.1
CVSS Rating
High (8.1)
CVE-ID
CVE-2024-43141
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Participants Database
Researcher
7.2
CVSS Rating
High (7.2)
CVE-ID
CVE-2024-7484
Patch Status
Patched
Published
Aug 5, 2024
Affected Software
CRM Perks Forms β WordPress Form Builder
Researcher
7.2
CVSS Rating
High (7.2)
CVE-ID
CVE-2024-43236
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
Easy PayPal & Stripe Buy Now Button
Researcher
7.2
CVSS Rating
High (7.2)
CVE-ID
CVE-2024-43121
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
HUSKY β Products Filter Professional for WooCommerce
Researcher
7.2
CVSS Rating
High (7.2)
CVE-ID
CVE-2024-7560
Patch Status
Unpatched
Published
Aug 7, 2024
Affected Software
News Flash
Researcher
6.5
CVSS Rating
Medium (6.5)
CVE-ID
CVE-2024-43131
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Docket (WooCommerce Collections / Wishlist / Watchlist)
Researcher
6.5
CVSS Rating
Medium (6.5)
CVE-ID
CVE-2024-4359
Patch Status
Patched
Published
Aug 8, 2024
Affected Software
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows)
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43227
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
BetterDocs β Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer for Elementor & Gutenberg
Researcher
JoΓ£o Pedro Soares de AlcΓ’ntara
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43164
Patch Status
Patched
Published
Aug 7, 2024
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43123
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Card Elements for Elementor
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43149
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
CM Tooltip Glossary
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43155
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Post Grid and Gutenberg Blocks
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-4360
Patch Status
Patched
Published
Aug 8, 2024
Affected Software
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows)
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43225
Patch Status
Unpatched
Published
Aug 9, 2024
Affected Software
Enter Addons β Ultimate Template Builder for Elementor
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-7317
Patch Status
Patched
Published
Aug 5, 2024
Affected Software
Folders β Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43139
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Football Pool
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-5226
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Fuse Social Floating Sidebar
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43124
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Graphina β Elementor Charts and Graphs
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43210
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
LA-Studio Element Kit for Elementor
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-5668
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Lightbox & Modal Popup WordPress Plugin β FooBox
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-6639
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
MDx
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43218
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
Mediavine Control Panel
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-6879
Patch Status
Patched
Published
Aug 5, 2024
Affected Software
Quiz and Survey Master (QSM) β Easy Quiz and Survey Maker
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43147
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Selection Lite
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-35775
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Slider by Soliloquy β Responsive Image Slider for WordPress
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-7590
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Spectra β WordPress Gutenberg Blocks
Researcher
JoΓ£o Pedro Soares de AlcΓ’ntara
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43133
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Themify Shortcodes
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43151
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Ultimate Addons for Beaver Builder β Lite
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43226
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
WP Dashboard Notes
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43125
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
WP Table Builder β WordPress Table Plugin
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-5708
Patch Status
Patched
Published
Aug 5, 2024
Affected Software
WPBakery Visual Composer
Researcher
JoΓ£o Pedro Soares de AlcΓ’ntara
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43150
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
140+ Widgets | Xpro Addons For Elementor β FREE
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-43224
Patch Status
Unpatched
Published
Aug 9, 2024
Affected Software
YaMaps for WordPress Plugin
Researcher
6.1
CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-43233
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
BSK Forms Blacklist
Researcher
6.1
CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-7574
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
Christmasify!
Researcher
6.1
CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-43220
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
Form Maker by 10Web β Mobile-Friendly Drag & Drop Contact Form Builder
Researcher
6.1
CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-43217
Patch Status
Unpatched
Published
Aug 9, 2024
Affected Software
Kodex Posts likes
Researcher
6.1
CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-7649
Patch Status
Unpatched
Published
Aug 9, 2024
Affected Software
Opal Membership
Researcher
6.1
CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-43163
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
ParcelPanel (Free to install) β Shipment Tracking, Tracking, and Order Tracking for WooCommerce
Researcher
6.1
CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-43156
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Post Grid Master β Custom Post Types, Taxonomies & Ajax Filter Everything with Infinite Scroll, Load More, Pagination & Shortcode Builder
Researcher
6.1
CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-43127
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Products, Order & Customers Export for WooCommerce
Researcher
6.1
CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-43126
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Sender β Newsletter, SMS and Email Marketing Automation for WooCommerce
Researcher
6.1
CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-7313
Patch Status
Patched
Published
Aug 5, 2024
Affected Software
Shield Security β Smart Bot Blocking & Intrusion Prevention Security
Researcher
6.1
CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-43213
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
MultiVendorX β The Ultimate WooCommerce Multivendor Marketplace Solution
Researcher
6.1
CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-6859
Patch Status
Unpatched
Published
Aug 10, 2024
Affected Software
WP MultiTasking β WP Utilities
Researcher
5.5
CVSS Rating
Medium (5.5)
CVE-ID
CVE-2024-43231
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
Tutor LMS β eLearning and online course solution
Researcher
5.4
CVSS Rating
Medium (5.4)
CVE-ID
CVE-2024-7353
Patch Status
Patched
Published
Aug 6, 2024
Affected Software
Accept Stripe Payments
Researcher
5.4
CVSS Rating
Medium (5.4)
CVE-ID
CVE-2024-6869
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Falang multilanguage for WordPress
Researcher
5.4
CVSS Rating
Medium (5.4)
CVE-ID
CVE-2024-7621
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
Visual Website Collaboration, Feedback & Project Management β Atarim
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-6562
Patch Status
Unpatched
Published
Aug 8, 2024
Affected Software
affiliate-toolkit β WordPress Affiliate Plugin
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-43209
Patch Status
Unpatched
Published
Aug 9, 2024
Affected Software
Bitly's WordPress Plugin
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-6552
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Booking for Appointments and Events Calendar β Amelia
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-43223
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
EventPrime β Events Calendar, Bookings and Tickets
Researcher
TrΖ°Ζ‘ng Hα»―u PhΓΊc (truonghuuphuc)
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-38787
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Import and export users and customers
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-7382
Patch Status
Unpatched
Published
Aug 8, 2024
Affected Software
Linkify Text
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-43158
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Masteriyo LMS β eLearning and Online Course Builder for WordPress
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-43159
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Masteriyo LMS β eLearning and Online Course Builder for WordPress
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-7410
Patch Status
Unpatched
Published
Aug 8, 2024
Affected Software
My Custom CSS PHP & ADS
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-43214
Patch Status
Patched
Published
Aug 9, 2024
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-7412
Patch Status
Unpatched
Published
Aug 8, 2024
Affected Software
No Update Nag
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-7413
Patch Status
Unpatched
Published
Aug 8, 2024
Affected Software
Obfuscate Email
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-7414
Patch Status
Patched
Published
Aug 8, 2024
Affected Software
PDF Builder for WPForms
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-43219
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
ΩΩΪ©Ψ§Ω
Ψ±Ψ³ ΩΨ§Ψ±Ψ³Ϋ
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-7416
Patch Status
Unpatched
Published
Aug 8, 2024
Affected Software
Reveal Template
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-43230
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
Shared Files β Frontend File Upload Form & Secure File Sharing
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-43142
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Tutor LMS β eLearning and online course solution
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-43120
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
TypeSquare Webfonts for γ¨γγ―γΉγ΅γΌγγΌ
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-43212
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
WordPress Tour & Travel Booking Plugin for WooCommerce β WpTravelly
Researcher
4.9
CVSS Rating
Medium (4.9)
CVE-ID
CVE-2024-7355
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Organization chart
Researcher
4.8
CVSS Rating
Medium (4.8)
CVE-ID
CVE-2024-43128
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
WooCommerce Product Table Lite
Researcher
4.4
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-43152
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
3D FlipBook β PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery
Researcher
4.4
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-6722
Patch Status
Unpatched
Published
Aug 6, 2024
Affected Software
Chatbot Support AI: Free ChatGPT Chatbot, Woocommerce Chatbot
Researcher
4.4
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-43161
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Slider & Popup Builder by Depicter β Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel
Researcher
4.4
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-6797
Patch Status
Unpatched
Published
Aug 10, 2024
Affected Software
DL Robots.txt
Researcher
4.4
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-6798
Patch Status
Unpatched
Published
Aug 10, 2024
Affected Software
DL Verification
Researcher
4.4
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-6462
Patch Status
Unpatched
Published
Aug 6, 2024
Affected Software
DL Yandex Metrika
Researcher
4.4
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-6691
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
Easy Digital Downloads β eCommerce Payments and Subscriptions made easy
Researcher
4.4
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-43216
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
Filr β Secure document library
Researcher
4.4
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-43130
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Football Pool
Researcher
4.4
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-43211
Patch Status
Unpatched
Published
Aug 9, 2024
Affected Software
MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder
Researcher
4.4
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-43148
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
StreamCast β Radio Player for WordPress
Researcher
4.4
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-6927
Patch Status
Unpatched
Published
Aug 7, 2024
Affected Software
Viral Signup β limited opt-in with viral refferal sharing
Researcher
4.4
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-43137
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
WappPress β Create Mobile App for any WordPress site with our Mobile App Builder in just 1 minute
Researcher
4.4
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-7556
Patch Status
Unpatched
Published
Aug 10, 2024
Affected Software
Simple Share
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43154
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Advanced Cron Manager β debug & control
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43146
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
AMP for WP β Accelerated Mobile Pages
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43119
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Aruba HiSpeed Cache
Researcher(s): Unknown
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-6254
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Brizy β Page Builder
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43162
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Easy Digital Downloads β eCommerce Payments and Subscriptions made easy
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43157
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
FormCraft β Form Builder
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43117
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Hummingbird Performance β Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43118
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Hummingbird Performance β Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43235
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
Meta Box β WordPress Custom Fields Framework
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-7648
Patch Status
Unpatched
Published
Aug 9, 2024
Affected Software
Opal Membership
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-6987
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Orchid Store
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-1286
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
Paid Memberships Pro - Membership Maps Add On
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-6824
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Premium Addons for Elementor
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43143
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Registrations for the Events Calendar β Event Registration Plugin
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43122
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Robin image optimizer β save money on image compression
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43208
Patch Status
Unpatched
Published
Aug 9, 2024
Affected Software
Send Emails with Mandrill
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43116
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Simple Local Avatars
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43215
Patch Status
Unpatched
Published
Aug 9, 2024
Affected Software
Social Slider Feed
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43136
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Sunshine Photo Cart: Free Client Photo Galleries for Photographers
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-6925
Patch Status
Unpatched
Published
Aug 10, 2024
Affected Software
TrueBooker β Appointment Booking and Scheduler Plugin.
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43134
Patch Status
Patched
Published
Aug 7, 2024
Affected Software
Waitlist Woocommerce ( Back in stock notifier )
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-6855
Patch Status
Unpatched
Published
Aug 10, 2024
Affected Software
WP MultiTasking β WP Utilities
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-6852
Patch Status
Unpatched
Published
Aug 10, 2024
Affected Software
WP MultiTasking β WP Utilities
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-6856
Patch Status
Unpatched
Published
Aug 10, 2024
Affected Software
WP MultiTasking β WP Utilities
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-6853
Patch Status
Unpatched
Published
Aug 10, 2024
Affected Software
WP MultiTasking β WP Utilities
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-43229
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
WP Search Analytics
Researcher
3.3
CVSS Rating
Low (3.3)
CVE-ID
CVE-2024-6692
Patch Status
Patched
Published
Aug 9, 2024
Affected Software
Easy Digital Downloads β eCommerce Payments and Subscriptions made easy
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfenceβs highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
The post Wordfence Intelligence Weekly WordPress Vulnerability Report (August 5, 2024 to August 11, 2024) appeared first on Wordfence.
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
79.4%