Unpatched WordPress plugin vulnerabilities
Plugins where at least one record lists the latest wordpress.org release as affected: updating does not close that vulnerability. With records, versions and wordpress.org status. Updated daily.
At least one record lists the component's latest wordpress.org release as affected: updating does not close that vulnerability.
| Component | Records | No login | Exploit code | Latest |
|---|---|---|---|---|
The Moneytizer1 unfixed the-moneytizer · 1K+ installs | 5 | 2 | — | Apr 2026 |
Co-marquage service-public.fr1 unfixed co-marquage-service-public · 1K+ installs | 4 | 3 | — | Dec 2025 |
Hesabfa Accounting2 unfixed hesabfa-accounting · 500+ installs | 4 | 4 | — | Aug 2025 |
Dynamic Team Manager – Team Member Showcase with grid, slider, table Elementor widget & shortcode1 unfixed wp-team-manager · 900+ installs | 4 | 1 | — | Sep 2025 |
Travel & Tours Meta Search1 unfixed adiaha-hotel · 300+ installs | 3 | 2 | — | Apr 2026 |
CF7 Spreadsheets3 unfixed cf7-spreadsheets · 300+ installs | 3 | 1 | — | Aug 2025 |
Run Contests, Raffles, and Giveaways with ContestsWP1 unfixed contest-code-checker · 100+ installs | 3 | 3 | — | Feb 2026 |
Library Bookshelves1 unfixed library-bookshelves · 500+ installs | 3 | 2 | — | Sep 2025 |
PeproDev CF7 Database1 unfixed pepro-cf7-database · 100+ installs | 3 | 3 | — | Apr 2025 |
Simple Testimonials Showcase1 unfixed simple-testimonials-showcase · 500+ installs | 3 | 1 | — | Oct 2024 |
Site Offline Or Coming Soon Or Maintenance Mode1 unfixed site-offline · 20K+ installs | 3 | 1 | — | Aug 2025 |
Uptime Robot Plugin for WordPress3 unfixed uptime-robot-monitor · 600+ installs | 3 | 1 | — | Apr 2025 |
WP Social AutoConnect1 unfixed wp-fb-autoconnect · 400+ installs | 3 | 2 | — | Jun 2025 |
WP Test Email2 unfixed wp-test-email · 20K+ installs | 3 | 3 | — | Jan 2026 |
Absolute Addons For Elementor2 unfixed absolute-addons · 400+ installs | 2 | — | — | Jan 2026 |
AI Content Writing Assistant1 unfixed ai-content-writing-assistant · 600+ installs | 2 | 1 | — | Dec 2025 |
AnyTrack Affiliate Link Manager1 unfixed anytrack-affiliate-link-manager · 100+ installs | 2 | 2 | — | Apr 2026 |
Blockons – Gutenberg blocks for WordPress and WooCommerce websites2 unfixed blockons · 600+ installs | 2 | 1 | — | Jan 2026 |
Clinked Client Portal1 unfixed clinked-client-portal · 70+ installs | 2 | 1 | — | Apr 2025 |
connectDaily Events Calendar Plugin1 unfixed connect-daily-web-calendar · 100+ installs | 2 | 1 | — | Sep 2025 |
Content Manager Light2 unfixed content-manager-light · 80+ installs | 2 | 1 | — | Jul 2025 |
CookieHint WP2 unfixed cookiehint-wp · 50+ installs | 2 | 1 | — | Dec 2025 |
Cryptocurrency Donation Box – Bitcoin & Crypto Donations1 unfixed cryptocurrency-donation-box · 500+ installs | 2 | 1 | — | Apr 2026 |
Designer – Elementor Addons1 unfixed designer · 100+ installs | 2 | — | — | Jan 2025 |
Download Counter1 unfixed download-counter · 30+ installs | 2 | 1 | — | Nov 2025 |
Dynamic User Directory1 unfixed dynamic-user-directory · 1K+ installs | 2 | — | — | Oct 2026 |
Fyrebox Quizzes2 unfixed fyrebox-shortcode · 100+ installs | 2 | 1 | — | Jun 2025 |
Portfolio Gallery – Responsive Image Gallery1 unfixed gallery-portfolio · 1K+ installs | 2 | 1 | — | Dec 2025 |
GB Gallery Slideshow2 unfixed gb-gallery-slideshow · 70+ installs | 2 | 1 | — | Apr 2025 |
Health Check & Troubleshooting1 unfixed health-check · 200K+ installs | 2 | 1 | — | Dec 2025 |
I Plant A Tree1 unfixed i-plant-a-tree · 10+ installs | 2 | 1 | — | Dec 2024 |
Korea SNS1 unfixed korea-sns · 4K+ installs | 2 | 1 | — | Apr 2026 |
MAS Videos1 unfixed masvideos · 1K+ installs | 2 | 1 | — | Mar 2026 |
Mega Addons For WPBakery Page Builder1 unfixed mega-addons-for-visual-composer · 20K+ installs | 2 | 1 | — | Dec 2022 |
Mergado Pack2 unfixed mergado-marketing-pack · 700+ installs | 2 | 2 | — | Dec 2025 |
Mooberry Book Manager1 unfixed mooberry-book-manager · 1K+ installs | 2 | 1 | — | Oct 2026 |
Page Manager for Elementor2 unfixed page-manager-for-elementor · 100+ installs | 2 | — | — | Sep 2025 |
Popping Sidebars and Widgets Light2 unfixed popping-sidebars-and-widgets-light · 90+ installs | 2 | 1 | — | Dec 2025 |
Post Connector1 unfixed post-connector · 90+ installs | 2 | 1 | — | Oct 2025 |
Post Carousel & Slider1 unfixed post-types-carousel-slider · 200+ installs | 2 | 1 | — | Jan 2025 |
Pretty Url1 unfixed pretty-url · 80+ installs | 2 | 2 | — | Jan 2025 |
Realbig For WordPress1 unfixed realbig-media · 800+ installs | 2 | 2 | — | Dec 2025 |
Rich Text Editor2 unfixed richtexteditor · 60+ installs | 2 | 2 | — | Apr 2025 |
Section Widget2 unfixed section-widget · 500+ installs | 2 | 2 | — | May 2025 |
Shiptimize for WooCommerce2 unfixed shiptimize-for-woocommerce · 100+ installs | 2 | 1 | — | Apr 2025 |
Simple Retail Menus1 unfixed simple-retail-menus · 90+ installs | 2 | 1 | — | Feb 2026 |
SMM API2 unfixed smm-api · 60+ installs | 2 | — | — | Aug 2025 |
Testimonial Slider – Free Testimonials Slider Plugin1 unfixed testimonial-add · 700+ installs | 2 | — | — | Sep 2025 |
OpenHook1 unfixed thesis-openhook · 1K+ installs | 2 | 1 | — | Dec 2025 |
Photo Contest | Competition | Video Contest1 unfixed totalcontest-lite · 200+ installs | 2 | 1 | — | Mar 2026 |
Tournamatch1 unfixed tournamatch · 100+ installs | 2 | 1 | — | May 2025 |
Trash Duplicate and 301 Redirect1 unfixed trash-duplicate-and-301-redirect · 1K+ installs | 2 | 2 | — | Dec 2025 |
User Spam Remover1 unfixed user-spam-remover · 1K+ installs | 2 | 2 | — | Dec 2025 |
UX Flat1 unfixed ux-flat · 2K+ installs | 2 | — | — | Jan 2026 |
WP Mail2 unfixed wp-mail · 700+ installs | 2 | 1 | — | Jan 2026 |
StoryMap Plugin2 unfixed wp-storymap · 50+ installs | 2 | 1 | — | Sep 2025 |
xili-language1 unfixed xili-language · 600+ installs | 2 | 1 | — | Sep 2025 |
Advanced Custom Fields : CPT Options Pages1 unfixed acf-cpt-options-pages · 2K+ installs | 1 | 1 | — | Oct 2025 |
ACF: Google Font Selector1 unfixed acf-google-font-selector-field · 3K+ installs | 1 | 1 | — | Apr 2025 |
ACH Invoicing Plugin1 unfixed ach-invoice-app · 10+ installs | 1 | 1 | — | Jan 2025 |
Add to Feedly1 unfixed add-to-feedly · 70+ installs | 1 | 1 | — | Sep 2025 |
Advanced Custom CSS1 unfixed advanced-custom-css · 50+ installs | 1 | 1 | — | Dec 2025 |
Aitasi Coming Soon1 unfixed aitasi-coming-soon · 1K+ installs | 1 | — | — | Sep 2025 |
WP Logo Changer1 unfixed am-login-logo · 100+ installs | 1 | 1 | — | Nov 2025 |
Amber1 unfixed amberlink · 50+ installs | 1 | 1 | — | Jan 2025 |
amr cron manager1 unfixed amr-cron-manager · 100+ installs | 1 | 1 | — | Feb 2026 |
amr shortcodes1 unfixed amr-shortcodes · 100+ installs | 1 | 1 | — | Dec 2024 |
Anchor smooth scroll1 unfixed anchor-smooth-scroll · 100+ installs | 1 | 1 | — | Dec 2025 |
Anything Popup1 unfixed anything-popup · 2K+ installs | 1 | 1 | — | Apr 2025 |
AP HoneyPot WordPress Plugin1 unfixed ap-honeypot · 90+ installs | 1 | 1 | — | Sep 2025 |
Appointment Buddy Widget By Accrete1 unfixed appointment-buddy-online-appointment-booking-by-accrete · 10+ installs | 1 | 1 | — | Mar 2025 |
Image Rotator1 unfixed appten-image-rotator · 60+ installs | 1 | 1 | — | Mar 2025 |
Asynchronous Javascript1 unfixed asynchronous-javascript · 100+ installs | 1 | 1 | — | Feb 2026 |
AT Internet SmartTag1 unfixed at-internet · 10+ installs | 1 | 1 | — | Apr 2025 |
AtaraPay WooCommerce Payment Gateway1 unfixed atarapay-woocommerce · 10+ installs | 1 | 1 | — | Dec 2024 |
ATT YouTube Widget1 unfixed att-youtube · 70+ installs | 1 | 1 | — | Aug 2025 |
Auction Feed1 unfixed auction-feed · 80+ installs | 1 | 1 | — | Sep 2025 |
Authentication and xmlrpc log writer1 unfixed authentication-and-xmlrpc-log-writer · 60+ installs | 1 | 1 | — | Aug 2025 |
Auto Last Youtube Video1 unfixed auto-last-youtube-video · 100+ installs | 1 | 1 | — | Sep 2025 |
Auto Login After Registration1 unfixed auto-login-after-registration · 50+ installs | 1 | 1 | — | Oct 2025 |
Auto scroll for reading1 unfixed auto-scroll-for-reading · 90+ installs | 1 | 1 | — | Apr 2025 |
Automatic Ban IP1 unfixed automatic-ban-ip · 20+ installs | 1 | 1 | — | Apr 2025 |
Aviation Weather from NOAA1 unfixed aviation-weather-from-noaa · 100+ installs | 1 | — | — | Jul 2025 |
Awesome Studio1 unfixed awesome-studio · 10+ installs | 1 | 1 | — | Dec 2024 |
Awesome Testimonials1 unfixed awesome-testimonials · 40+ installs | 1 | 1 | — | Oct 2025 |
AWSA Shipping – Advanced Shipping for Woocommerce and Dokan1 unfixed awsa-shipping · 60+ installs | 1 | 1 | — | Apr 2025 |
百度分享按钮1 unfixed baidushare-wp · 60+ installs | 1 | 1 | — | Aug 2025 |
Thanh Toán Quét Mã QR Code Tự Động – MoMo, ViettelPay, VNPay và 40 ngân hàng Việt Nam1 unfixed bck-tu-dong-xac-nhan-thanh-toan-chuyen-khoan-ngan-hang · 600+ installs | 1 | 1 | — | Sep 2024 |
Blaze Online eParcel for WooCommerce1 unfixed blaze-online-eparcel-for-woocommerce · 10+ installs | 1 | 1 | — | Dec 2024 |
Block Controller1 unfixed block-controller | 1 | 1 | — | Dec 2024 |
Block Country1 unfixed block-country · 60+ installs | 1 | 1 | — | Nov 2025 |
Board Document Manager from CHUHPL1 unfixed board-document-manager-from-chuhpl · 10+ installs | 1 | 1 | — | Dec 2024 |
Boldermail – Email Marketing and Newsletters for WordPress1 unfixed boldermail · 10+ installs | 1 | — | — | Oct 2025 |
BruteGuard – Brute Force Login Protection1 unfixed bruteguard · 100+ installs | 1 | 1 | — | Apr 2025 |
Bulk Watermark1 unfixed bulk-watermark · 100+ installs | 1 | 1 | — | Sep 2025 |
WP Calais Auto Tagger1 unfixed calais-auto-tagger · 40+ installs | 1 | 1 | — | Apr 2025 |
Calendar Plus1 unfixed calendar-plus · 90+ installs | 1 | 1 | — | Oct 2025 |
Canonical Attachments1 unfixed canonical-attachments · 300+ installs | 1 | 1 | — | Apr 2025 |
CaptionPix1 unfixed captionpix · 100+ installs | 1 | 1 | — | Aug 2025 |
CedCommerce Integration for Good Market1 unfixed ced-good-market-integration · 50+ installs | 1 | 1 | — | Dec 2025 |