Unpatched WordPress plugin vulnerabilities
Plugins where at least one record lists the latest wordpress.org release as affected: updating does not close that vulnerability. With records, versions and wordpress.org status. Updated daily.
At least one record lists the component's latest wordpress.org release as affected: updating does not close that vulnerability.
| Component | Records | No login | Exploit code | Latest |
|---|---|---|---|---|
TOCHAT.BE1 unfixed tochat-be · 800+ installs | 2 | 2 | — | Sep 2025 |
Twitch Player1 unfixed ttv-easy-embed-player · 200+ installs | 2 | 1 | — | Dec 2025 |
TZ Plus Gallery2 unfixed tz-plus-gallery · 300+ installs | 2 | 1 | — | Sep 2025 |
VG WORT METIS1 unfixed vgw-metis · 1K+ installs | 2 | — | — | Jul 2025 |
Weaver Xtreme Theme Support1 unfixed weaverx-theme-support · 8K+ installs | 2 | — | — | Oct 2026 |
WP Advanced PDF2 unfixed wp-advanced-pdf · 700+ installs | 2 | 1 | — | Dec 2025 |
Category Dropdown by GCS Design1 unfixed wp-category-dropdown · 1K+ installs | 2 | — | — | Sep 2025 |
WP-CORS1 unfixed wp-cors · 1K+ installs | 2 | — | — | Feb 2026 |
WP DataTable1 unfixed wp-datatable · 600+ installs | 2 | — | — | Jun 2025 |
WP Delete User Accounts1 unfixed wp-delete-user-accounts · 700+ installs | 2 | — | — | Sep 2025 |
WP Gmail SMTP2 unfixed wp-gmail-smtp · 1K+ installs | 2 | 2 | — | Dec 2025 |
WP Google Analytics Events – No-Code Custom Event Tracking for Google Analytics1 unfixed wp-google-analytics-events · 5K+ installs | 2 | 2 | — | Dec 2025 |
WP Mailto Links – Protect Email Addresses1 unfixed wp-mailto-links · 7K+ installs | 2 | — | — | Sep 2025 |
WP SendFox1 unfixed wp-sendfox · 1K+ installs | 2 | 1 | — | Oct 2024 |
WP Subscribe1 unfixed wp-subscribe · 7K+ installs | 2 | — | — | Jan 2026 |
ShopWP1 unfixed wpshopify · 700+ installs | 2 | 2 | — | Apr 2026 |
Follow Us Badges1 unfixed wpsite-follow-us-badges · 1K+ installs | 2 | — | — | Apr 2025 |
ABG Rich Pins1 unfixed abg-rich-pins · 30+ installs | 1 | — | — | Jan 2026 |
Acclectic Media Organizer1 unfixed acclectic-media-organizer · 100+ installs | 1 | — | — | Sep 2025 |
Accordion Slider Gallery1 unfixed accordion-slider-gallery · 1K+ installs | 1 | — | — | Dec 2025 |
Gutenberg Blocks – ACF Blocks Suite1 unfixed acf-blocks · 400+ installs | 1 | — | — | Jun 2025 |
ACF Recent Posts Widget1 unfixed acf-recent-posts-widget · 500+ installs | 1 | — | — | Oct 2025 |
ACF: Yandex Maps Field1 unfixed acf-yandex-maps-field · 800+ installs | 1 | — | — | Jun 2025 |
ACME Divi Modules1 unfixed acme-divi-modules · 400+ installs | 1 | — | — | Mar 2025 |
Add Polylang support for Customizer1 unfixed add-polylang-support-for-customizer · 2K+ installs | 1 | 1 | — | Jan 2026 |
Add & Replace Affiliate Links for Amazon1 unfixed add-replace-affiliate-links-for-amazon · 500+ installs | 1 | — | — | Jun 2025 |
Addonify Floating Cart For WooCommerce1 unfixed addonify-floating-cart · 2K+ installs | 1 | 1 | — | Feb 2026 |
Admin Menu Groups1 unfixed admin-menu-groups · 700+ installs | 1 | — | — | Aug 2025 |
Advance Food Menu1 unfixed advance-food-menu | 1 | — | — | Aug 2025 |
Advanced Blog Post Block1 unfixed advanced-blog-post-block · 10+ installs | 1 | — | — | Dec 2024 |
Advanced Event Manager1 unfixed advanced-event-manager · 20+ installs | 1 | — | — | Dec 2024 |
Advanced Speed Increaser1 unfixed advanced-speed-increaser · 300+ installs | 1 | 1 | — | Apr 2025 |
Advanced Typekit1 unfixed advanced-typekit · 60+ installs | 1 | — | — | Apr 2025 |
AdWords Conversion Tracking Code1 unfixed adwords-conversion-tracking-code · 1K+ installs | 1 | — | — | Dec 2025 |
Affiliate Link Tracker1 unfixed affiliate-link-tracker · 400+ installs | 1 | — | — | Jan 2026 |
AgreeMe Checkboxes For WooCommerce1 unfixed agreeme-checkboxes-for-woocommerce · 500+ installs | 1 | 1 | — | Sep 2025 |
Airano MCP Bridge1 unfixed airano-mcp-bridge · 70+ installs | 1 | — | — | Oct 2026 |
WP Airdrop Manager1 unfixed airdrop · 10+ installs | 1 | — | — | Aug 2025 |
AJAX Hits Counter + Popular Posts Widget1 unfixed ajax-hits-counter · 900+ installs | 1 | — | — | Jan 2026 |
Alpha Blocks1 unfixed alpha-blocks | 1 | — | — | Jan 2026 |
AM Events1 unfixed am-events · 80+ installs | 1 | — | — | Dec 2025 |
Amazon Product in a Post Plugin1 unfixed amazon-product-in-a-post-plugin · 800+ installs | 1 | — | — | May 2025 |
Aparat Video Shortcode1 unfixed aparat-shortcode · 40+ installs | 1 | — | — | Sep 2025 |
Append Content1 unfixed append-content · 40+ installs | 1 | 1 | — | Apr 2025 |
Append extensions on Pages1 unfixed append-extensions-on-pages · 700+ installs | 1 | — | — | Sep 2025 |
Append Link on Copy1 unfixed append-link-on-copy · 700+ installs | 1 | — | — | Sep 2025 |
Aptivada for WP1 unfixed aptivada-for-wp · 80+ installs | 1 | — | — | May 2025 |
AI Tools – Chatbot, ChatGPT, Content Generator, Image Generator, Artificial Intelligence GPT1 unfixed artificial-intelligence-auto-content-generator · 20+ installs | 1 | — | — | Aug 2025 |
Open Currency Converter1 unfixed artiss-currency-converter · 900+ installs | 1 | — | — | Oct 2025 |
Atelier Create CV1 unfixed atelier-create-cv | 1 | 1 | — | Jun 2025 |
ATP Call Now1 unfixed atp-call-now · 800+ installs | 1 | — | — | Jun 2025 |
Audiomack1 unfixed audiomack · 100+ installs | 1 | — | — | Dec 2025 |
Author Bio Shortcode1 unfixed author-bio-shortcode · 90+ installs | 1 | — | — | Apr 2025 |
Auto Post After Image Upload1 unfixed auto-post-after-image-upload · 100+ installs | 1 | — | — | Mar 2025 |
AweBooking – Hotel Booking System1 unfixed awebooking · 1K+ installs | 1 | — | — | Jan 2026 |
Awesome Hotel Booking1 unfixed awesome-hotel-booking | 1 | 1 | — | Jan 2026 |
Backup and Move Plugin1 unfixed backup-and-move · 100+ installs | 1 | — | — | Nov 2025 |
Bacon Ipsum1 unfixed bacon-ipsum · 80+ installs | 1 | — | — | Jun 2025 |
Speed Kit1 unfixed baqend · 2K+ installs | 1 | — | — | Jan 2026 |
bbP topic count1 unfixed bbp-topic-count · 300+ installs | 1 | — | — | Sep 2025 |
BCM Duplicate Menu1 unfixed bcm-duplicate-menu · 4K+ installs | 1 | 1 | — | Sep 2025 |
Better Random Redirect1 unfixed better-random-redirect · 600+ installs | 1 | — | — | Jun 2025 |
Bg Church Memos1 unfixed bg-church-memos · 30+ installs | 1 | — | — | Sep 2025 |
Block Slider – Responsive Image Slider, Video Slider & Post Slider1 unfixed block-slider · 3K+ installs | 1 | — | — | Jan 2026 |
Blog Designer1 unfixed blog-designer · 10K+ installs | 1 | — | — | Sep 2025 |
BNS Twitter Follow Button1 unfixed bns-twitter-follow-button · 10+ installs | 1 | — | — | May 2025 |
Boo Recipes1 unfixed boo-recipes · 30+ installs | 1 | — | — | Apr 2025 |
Book Previewer for Woocommerce1 unfixed book-previewer-for-woocommerce · 1K+ installs | 1 | 1 | — | Apr 2026 |
Bootstrap Modals1 unfixed bootstrap-modals · 1K+ installs | 1 | — | — | Dec 2025 |
Bot Block – Stop Spam Referrals in Google Analytics1 unfixed bot-block-stop-spam-google-analytics-referrals · 500+ installs | 1 | — | — | Sep 2025 |
Яндекс Доставка (Boxberry)1 unfixed boxberry · 500+ installs | 1 | — | — | Dec 2025 |
Boxed Content1 unfixed boxed-content · 80+ installs | 1 | — | — | Sep 2025 |
BP Disable Activation Reloaded1 unfixed bp-disable-activation-reloaded · 800+ installs | 1 | 1 | — | Sep 2025 |
Breeze Checkout1 unfixed breeze-checkout · 100+ installs | 1 | 1 | — | Oct 2025 |
Broadly for WordPress1 unfixed broadly · 500+ installs | 1 | — | — | Jun 2025 |
Buckets1 unfixed buckets · 400+ installs | 1 | — | — | Sep 2025 |
BuddyPress Notification Widget1 unfixed buddypress-notifications-widget · 600+ installs | 1 | — | — | Sep 2025 |
Bulk Term Editor1 unfixed bulk-term-editor · 400+ installs | 1 | 1 | — | Apr 2025 |
Bulk Fields Editor1 unfixed bulk-user-editor · 30+ installs | 1 | — | — | Apr 2025 |
Bux Woocommerce1 unfixed bux-woocommerce · 100+ installs | 1 | 1 | — | Nov 2025 |
bxSlider integration for WordPress1 unfixed bxslider-integration · 500+ installs | 1 | — | — | Aug 2025 |
byBrick Accordion1 unfixed bybrick-accordion · 50+ installs | 1 | — | — | Mar 2025 |
Capitalize My Title WordPress Plugin1 unfixed capitalize-my-title · 90+ installs | 1 | — | — | Nov 2024 |
Card flip image slideshow1 unfixed card-flip-image-slideshow · 10+ installs | 1 | — | — | Jul 2025 |
Carousel Horizontal Posts Content Slider1 unfixed carousel-horizontal-posts-content-slider · 2K+ installs | 1 | — | — | Jan 2026 |
Category Featured Images1 unfixed category-featured-images · 600+ installs | 1 | — | — | Sep 2025 |
Category Featured Images Extended1 unfixed category-featured-images-extended · 400+ installs | 1 | — | — | Sep 2025 |
Century ToolKit1 unfixed century-toolkit · 700+ installs | 1 | 1 | — | Aug 2025 |
Chartbeat1 unfixed chartbeat · 900+ installs | 1 | — | — | Aug 2025 |
Classic Widgets with Block-based Widgets1 unfixed classic-widgets-with-block-based-widgets · 1K+ installs | 1 | 1 | — | Sep 2025 |
SMS Contact Form 7 Notifications by ClickSend1 unfixed clicksend-contactform7 · 100+ installs | 1 | — | — | Oct 2025 |
Client Showcase1 unfixed client-showcase · 30+ installs | 1 | — | — | Apr 2025 |
ClipLink1 unfixed cliplink | 1 | 1 | — | Jun 2025 |
CLP – Custom Login Page by NiteoThemes1 unfixed clp-custom-login-page · 700+ installs | 1 | 1 | — | Apr 2025 |
CodeablePress: Simple Frontend Profile Picture Upload1 unfixed codeablepress-simple-frontend-profile-picture-upload · 60+ installs | 1 | — | — | Aug 2025 |
Color Your Bar1 unfixed color-your-bar · 400+ installs | 1 | — | — | May 2025 |
Comment Form WP – Customize Default Comment Form1 unfixed comment-form-wp · 600+ installs | 1 | — | — | Sep 2025 |
Compact Admin1 unfixed compact-admin · 80+ installs | 1 | 1 | — | Sep 2025 |
ContentBot AI Writer (AI Content)1 unfixed content-bot · 400+ installs | 1 | — | — | Apr 2025 |
Content Fetcher1 unfixed content-fetcher · 200+ installs | 1 | — | — | Dec 2025 |