WordPress plugin vulnerabilities with no official fix seen
Plugins that look unpatched. In each, at least one record lists the latest wordpress.org release as affected; updating does not close that vulnerability. With records, versions and wordpress.org status. Updated daily.
At least one record lists the component's latest wordpress.org release as affected: updating does not close that vulnerability.
| Component | Records | No login | Exploit code | Latest |
|---|---|---|---|---|
User Roles and Capabilities1 unfixed user-roles-and-capabilities · 7K+ installs | 1 | — | — | Jun 2025 |
User Specific Content1 unfixed user-specific-content · 1K+ installs | 1 | — | — | Dec 2025 |
USERCENTRICS CMP1 unfixed usercentrics-consent-management-platform · 900+ installs | 1 | — | — | Oct 2025 |
Vertical Carousel1 unfixed vertical-carousel-slider · 80+ installs | 1 | — | — | Nov 2024 |
Video Expander1 unfixed video-expander · 10+ installs | 1 | — | — | Aug 2025 |
vipdrv1 unfixed vipdrv-vip-test-drive | 1 | — | — | Sep 2025 |
VoucherPress1 unfixed voucherpress · 200+ installs | 1 | — | — | Sep 2025 |
Payment Gateway PayPay for WooCommerce1 unfixed wc-paypay-gateway · 100+ installs | 1 | 1 | — | Sep 2026 |
Sales Count Manager for WooCommerce1 unfixed wc-sales-count-manager · 300+ installs | 1 | — | — | Sep 2025 |
WDV One Page Docs – Documentation Plugin for WordPress1 unfixed wdv-one-page-docs | 1 | 1 | — | Jan 2026 |
WebSamurai1 unfixed websamurai · 10+ installs | 1 | — | — | Oct 2026 |
Draft – Tailwind CSS for WordPress.1 unfixed website-builder · 600+ installs | 1 | — | — | Sep 2025 |
Welcome Popup1 unfixed welcome-popup · 100+ installs | 1 | — | — | Mar 2025 |
WH Testimonials1 unfixed wh-testimonials · 30+ installs | 1 | 1 | — | Mar 2023 |
Wide Banner1 unfixed wide-banner · 40+ installs | 1 | 1 | — | Sep 2025 |
Widget Manager Light1 unfixed widget-manager-light · 600+ installs | 1 | 1 | — | Apr 2025 |
Dynamic Pricing & Discounts Lite1 unfixed woo-dynamic-pricing-discounts-lite · 300+ installs | 1 | 1 | — | May 2025 |
Gift Cards for WooCommerce1 unfixed woo-giftcards · 100+ installs | 1 | — | — | Apr 2025 |
Payment Gateway bKash for WC1 unfixed woo-payment-bkash · 1K+ installs | 1 | 1 | — | Jan 2026 |
WooTumblog1 unfixed woo-tumblog · 80+ installs | 1 | 1 | — | Apr 2025 |
Faktur Pro for WooCommerce1 unfixed woorechnung · 900+ installs | 1 | — | — | Oct 2026 |
Fix Media Library1 unfixed wow-media-library-fix · 1K+ installs | 1 | 1 | — | Dec 2025 |
WP Chrono1 unfixed wp-chrono · 40+ installs | 1 | — | — | Apr 2025 |
WP Compiler1 unfixed wp-compiler · 900+ installs | 1 | 1 | — | Sep 2025 |
Dashboard Beacon1 unfixed wp-dashboard-beacon · 10+ installs | 1 | — | — | Dec 2025 |
WP-Database-Optimizer-Tools1 unfixed wp-database-optimizer-tools · 100+ installs | 1 | 1 | — | Aug 2025 |
WP Edit1 unfixed wp-edit · 40K+ installs | 1 | — | — | Jun 2025 |
WP Export Categories & Taxonomies1 unfixed wp-export-categories-taxonomies · 400+ installs | 1 | 1 | — | Dec 2025 |
WP Geo1 unfixed wp-geo · 800+ installs | 1 | — | — | Oct 2025 |
WP Github Gist1 unfixed wp-github-gist · 40+ installs | 1 | — | — | Sep 2025 |
WP-GraphViz1 unfixed wp-graphviz · 40+ installs | 1 | — | — | Sep 2025 |
JAMstack Deployments1 unfixed wp-jamstack-deployments · 1K+ installs | 1 | — | — | Feb 2026 |
WP Link Preview1 unfixed wp-link-preview · 500+ installs | 1 | — | — | Mar 2025 |
WP Mailgun SMTP1 unfixed wp-mailgun-smtp · 900+ installs | 1 | 1 | — | Aug 2025 |
WP Mapbox GL JS Maps1 unfixed wp-mapbox-gl-js · 1K+ installs | 1 | — | — | Oct 2025 |
WP Notes Widget1 unfixed wp-notes-widget · 700+ installs | 1 | — | — | May 2025 |
WP Post Signature1 unfixed wp-post-signature · 1K+ installs | 1 | — | — | Dec 2025 |
WP Publication Archive1 unfixed wp-publication-archive · 400+ installs | 1 | — | — | Sep 2025 |
WP Revisions Manager1 unfixed wp-revisions-manager · 600+ installs | 1 | 1 | — | Dec 2024 |
WP Security Master1 unfixed wp-security-master | 1 | 1 | — | Jun 2025 |
short.io1 unfixed wp-shortcm · 200+ installs | 1 | — | — | Sep 2025 |
WP Show Stats1 unfixed wp-show-stats · 400+ installs | 1 | 1 | — | Apr 2025 |
WP Snow Effect1 unfixed wp-snow-effect · 1K+ installs | 1 | 1 | — | Nov 2025 |
Subresource Integrity (SRI) Manager1 unfixed wp-sri · 900+ installs | 1 | — | — | Sep 2025 |
WP Stacker1 unfixed wp-stacker · 10+ installs | 1 | 1 | — | Jun 2024 |
WP-SVG1 unfixed wp-svg · 10+ installs | 1 | — | — | Dec 2024 |
WP System Information1 unfixed wp-system-info · 700+ installs | 1 | — | — | Sep 2025 |
WP Tesseract1 unfixed wp-tesseract · 40+ installs | 1 | — | — | Oct 2025 |
Wp Text Slider Widget1 unfixed wp-text-slider-widget · 70+ installs | 1 | — | — | Dec 2025 |
WPThumb1 unfixed wp-thumb · 800+ installs | 1 | — | — | Jun 2025 |
WP Video Playlist1 unfixed wp-video-playlist · 100+ installs | 1 | 1 | — | Apr 2025 |
WordPress Widgets Shortcode1 unfixed wp-widgets-shortcode · 500+ installs | 1 | — | — | Sep 2025 |
SEO Auto Linker1 unfixed wpa-seo-auto-linker · 3K+ installs | 1 | — | — | Sep 2025 |
WPAvatar1 unfixed wpavatar · 600+ installs | 1 | — | — | Aug 2025 |
WPB Image Widget1 unfixed wpb-image-widget · 100+ installs | 1 | — | — | Sep 2025 |
mb.YTPlayer for background videos1 unfixed wpmbytplayer · 1K+ installs | 1 | — | — | Apr 2025 |
WPoperation Elementor Addons1 unfixed wpop-elementor-addons · 900+ installs | 1 | — | — | Apr 2025 |
WPSHARE247 Elementor Addons1 unfixed wpshare247-elementor-addons · 50+ installs | 1 | — | — | Apr 2025 |
WP Sitemap1 unfixed wpsitemap · 100+ installs | 1 | — | — | Apr 2025 |
Яндекс.ПДС Пингер / Yandex Site search pinger1 unfixed yandex-pinger · 700+ installs | 1 | — | — | Aug 2025 |
Yext Plugin1 unfixed yext · 700+ installs | 1 | 1 | — | Sep 2025 |
Zara 4 Image Compression1 unfixed zara-4 · 80+ installs | 1 | — | — | Jun 2025 |
HireHive Job Plugin1 unfixed zartis-job-plugin · 50+ installs | 1 | — | — | Jan 2025 |
Znajdź Pracę z Praca.pl1 unfixed znajdz-prace-z-pracapl · 20+ installs | 1 | — | — | Nov 2024 |
Zoomify embed for WP1 unfixed zoom-image-shortcode · 80+ installs | 1 | — | — | Sep 2025 |