Unpatched WordPress plugin vulnerabilities
Plugins where at least one record lists the latest wordpress.org release as affected: updating does not close that vulnerability. With records, versions and wordpress.org status. Updated daily.
At least one record lists the component's latest wordpress.org release as affected: updating does not close that vulnerability.
| Component | Records | No login | Exploit code | Latest |
|---|---|---|---|---|
Advanced Element Bucket Addons for Elementor1 unfixed cs-element-bucket | 1 | — | — | Dec 2024 |
CSV Importer Improved1 unfixed csv-importer-improved · 100+ installs | 1 | — | — | Jun 2025 |
Ultimate Custom Add To Cart Button (Ajax) For WooCommerce by Binary Carpenter1 unfixed custom-add-to-cart-button-for-woocommerce · 600+ installs | 1 | — | — | Jul 2024 |
Custom Content Scrollbar1 unfixed custom-content-scrollbar · 100+ installs | 1 | — | — | Mar 2025 |
Custom CSS1 unfixed custom-css-editor · 900+ installs | 1 | 1 | — | Oct 2025 |
Custom Database Applications by Caspio1 unfixed custom-database-applications-by-caspio · 400+ installs | 1 | — | — | Mar 2025 |
Custom Post Type Attachment1 unfixed custom-post-type-pdf-attachment · 700+ installs | 1 | — | — | Oct 2025 |
Custom Team Manager1 unfixed custom-team-manager · 100+ installs | 1 | — | — | Sep 2025 |
Add Featured Image Custom Link1 unfixed custom-url-to-featured-image · 1K+ installs | 1 | — | — | Dec 2025 |
Custom Comment1 unfixed customcomment · 40+ installs | 1 | — | — | Aug 2025 |
«Подсказки» от DaData.ru1 unfixed dadata-ru · 700+ installs | 1 | — | — | Jun 2025 |
Dashboard Notepad1 unfixed dashboard-notepad · 10K+ installs | 1 | 1 | — | Sep 2025 |
Dashboard Welcome for Beaver Builder1 unfixed dashboard-welcome-for-beaver-builder · 2K+ installs | 1 | 1 | — | Jan 2026 |
Dashboard Widget Sidebar1 unfixed dashboard-widget-sidebar · 400+ installs | 1 | — | — | Jun 2025 |
Date counter1 unfixed date-counter · 1K+ installs | 1 | — | — | Oct 2025 |
DB Backup1 unfixed db-backup · 70+ installs | 1 | — | — | Aug 2025 |
Delay Redirects1 unfixed delay-redirects · 800+ installs | 1 | — | — | Jan 2026 |
Di Themes Demo Site Importer1 unfixed di-themes-demo-site-importer · 1K+ installs | 1 | 1 | — | Sep 2025 |
Diet Calorie Calculator1 unfixed diet-calorie-calculator · 100+ installs | 1 | 1 | — | Apr 2026 |
Dima Take Action1 unfixed dima-take-action · 200+ installs | 1 | — | — | Apr 2025 |
Display post meta, term meta, comment meta, and user meta1 unfixed display-metadata · 80+ installs | 1 | — | — | May 2023 |
Simple Fixed Notice1 unfixed dn-cookie-notice · 30+ installs | 1 | 1 | — | Apr 2025 |
Footer Contacts D1 unfixed dn-footer-contacts · 200+ installs | 1 | 1 | — | Apr 2025 |
DigitalOcean Spaces Sync1 unfixed do-spaces-sync · 400+ installs | 1 | — | — | Aug 2025 |
DOAJ Export1 unfixed doaj-export · 40+ installs | 1 | — | — | Sep 2025 |
DobsonDev Shortcodes1 unfixed dobsondev-shortcodes · 100+ installs | 1 | — | — | Apr 2025 |
Docxpresso1 unfixed docxpresso · 2K+ installs | 1 | 1 | — | Apr 2025 |
Download Media Library1 unfixed download-media-library · 1K+ installs | 1 | 1 | — | Dec 2025 |
Draft Notify1 unfixed draft-notify · 90+ installs | 1 | — | — | Dec 2025 |
Multi Days Events and Multi Events in One Day Calendar1 unfixed dragon-calendar-free-version | 1 | 1 | — | Mar 2025 |
Duplicate Content Cure1 unfixed duplicate-content-cure · 200+ installs | 1 | 1 | — | Dec 2025 |
Dynamic Text Field For Contact Form 71 unfixed dynamic-text-field-for-contact-form-7 · 1K+ installs | 1 | — | — | Sep 2025 |
WeShareAI – AI-Powered Share Buttons (formerly E-MAILiT)1 unfixed e-mailit · 700+ installs | 1 | — | — | Oct 2025 |
E-namad & Shamed Logo Manager1 unfixed e-namad-shamed-logo-manager · 2K+ installs | 1 | — | — | Sep 2025 |
Easy Download Media Counter1 unfixed easy-download-media-counter · 60+ installs | 1 | — | — | Sep 2025 |
Easy Elements Hider1 unfixed easy-elements-hider · 100+ installs | 1 | — | — | Jul 2025 |
Easy Flash Embed1 unfixed easy-flash-embed · 800+ installs | 1 | — | — | Sep 2025 |
Easy Replace1 unfixed easy-replace · 10+ installs | 1 | — | — | Dec 2024 |
EasyIndex1 unfixed easyindex · 1K+ installs | 1 | 1 | — | Dec 2025 |
EC Stars Rating1 unfixed ec-stars-rating · 300+ installs | 1 | — | — | Jun 2025 |
Echoza1 unfixed echoza | 1 | — | — | Dec 2024 |
Product Carousel Slider for Elementor1 unfixed ecommerce-product-carousel-slider-for-elementor · 1K+ installs | 1 | — | — | Sep 2025 |
EInvoice App Malaysia1 unfixed einvoiceapp-malaysia | 1 | 1 | — | Dec 2025 |
Elastic Email Subscribe Form1 unfixed elastic-email-subscribe-form · 100+ installs | 1 | — | — | Jun 2025 |
Email Notification on Login1 unfixed email-notification-on-login · 1K+ installs | 1 | — | — | May 2025 |
Embed Extended – Embed Maps, Videos, Websites, Source Codes, and more1 unfixed embed-extended · 400+ installs | 1 | 1 | — | Apr 2025 |
EMI Calculator1 unfixed emi-calculator · 400+ installs | 1 | 1 | — | Jan 2025 |
Enhanced Blocks – Page Builder Blocks for Gutenberg1 unfixed enhanced-blocks · 100+ installs | 1 | — | — | Jun 2025 |
Ethiopian Calendar1 unfixed ethiopian-calendar · 10+ installs | 1 | — | — | Mar 2025 |
Eventbee RSVP Widget1 unfixed eventbee-rsvp-widget · 10+ installs | 1 | — | — | Apr 2025 |
Events Maker by dFactory1 unfixed events-maker · 1K+ installs | 1 | — | — | Oct 2025 |
Design Blocks – Gutenberg Blocks collection1 unfixed exclusive-blocks · 10+ installs | 1 | — | — | Apr 2025 |
Exit Popup Free1 unfixed exit-popup-free | 1 | — | — | Mar 2025 |
Export All Post Meta1 unfixed export-all-post-meta · 100+ installs | 1 | — | — | Apr 2025 |
Export Categories1 unfixed export-categories · 1K+ installs | 1 | 1 | — | Oct 2025 |
Extra Shortcodes1 unfixed extra-shortcodes · 1K+ installs | 1 | — | — | Dec 2025 |
Turn Yoast SEO FAQ Block to Accordion1 unfixed faq-schema-block-to-accordion · 3K+ installs | 1 | — | — | Jan 2026 |
Fast User Switching1 unfixed fast-user-switching · 1K+ installs | 1 | 1 | — | Dec 2025 |
Button Plus for Elementor1 unfixed fd-elementor-button-plus · 1K+ installs | 1 | — | — | Dec 2024 |
Subscription Form for Feedblitz1 unfixed feedblitz-email-subscription · 60+ installs | 1 | — | — | Apr 2025 |
Filterable Portfolio Gallery Plugin1 unfixed fg-gallery · 10+ installs | 1 | — | — | May 2026 |
Filestack1 unfixed filepicker-media-uploader · 10+ installs | 1 | — | — | Feb 2026 |
Flaming Password Reset1 unfixed flaming-password-reset · 50+ installs | 1 | — | — | Jan 2026 |
Flexible FAQ1 unfixed flexible-faq · 1K+ installs | 1 | 1 | — | Sep 2025 |
Flipdish Ordering System1 unfixed flipdish-ordering-system · 400+ installs | 1 | 1 | — | Mar 2025 |
Flowbox1 unfixed flowbox · 10+ installs | 1 | 1 | — | Dec 2025 |
Footnotes for WordPress1 unfixed footnotes-for-wordpress · 100+ installs | 1 | — | — | Apr 2025 |
Form Generator for WordPress1 unfixed form-generator-powered-by-jotform · 200+ installs | 1 | — | — | Sep 2025 |
Formstack Online Forms1 unfixed formstack · 1K+ installs | 1 | 1 | — | Dec 2025 |
Foundation Columns1 unfixed foundation-columns · 40+ installs | 1 | — | — | Jan 2025 |
fresh Podcaster1 unfixed fresh-podcaster · 10+ installs | 1 | — | — | Jul 2026 |
Freshchat1 unfixed freshchat · 1K+ installs | 1 | 1 | — | Dec 2025 |
StylePress for Elementor1 unfixed full-site-builder-for-elementor · 600+ installs | 1 | — | — | Sep 2025 |
FW Anker1 unfixed fw-anker · 100+ installs | 1 | — | — | Sep 2025 |
G Meta Keywords1 unfixed g-meta-keywords · 10K+ installs | 1 | — | — | Oct 2024 |
Gallery and Lightbox1 unfixed gallery-and-lightbox · 40+ installs | 1 | — | — | Jan 2025 |
GDPR Cookie Notice1 unfixed gdpr-cookie-notice · 100+ installs | 1 | 1 | — | Apr 2025 |
Genesis Club Lite1 unfixed genesis-club-lite · 900+ installs | 1 | — | — | Sep 2025 |
Getty Images1 unfixed getty-images · 2K+ installs | 1 | — | — | Apr 2026 |
Gift Hunt1 unfixed gift-hunt · 80+ installs | 1 | — | — | Dec 2025 |
Goal Tracker for Patreon1 unfixed goal-tracker-for-patreon · 10+ installs | 1 | — | — | Aug 2025 |
Google AdSense for Responsive Design – GARD1 unfixed google-adsense-for-responsive-design-gard · 100+ installs | 1 | — | — | Dec 2025 |
Google+ Comments1 unfixed google-plus-comments · 30+ installs | 1 | — | — | Sep 2025 |
GoPay for WooCommerce1 unfixed gopay-gateway · 1K+ installs | 1 | — | — | Sep 2026 |
Goracash1 unfixed goracash · 300+ installs | 1 | — | — | Sep 2025 |
GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership1 unfixed gourl-bitcoin-payment-gateway-paid-downloads-membership · 700+ installs | 1 | — | — | Sep 2025 |
Notification Bar, Sticky Notification Bar, Sticky Welcome Bar for any theme1 unfixed gp-notification-bar · 30+ installs | 1 | — | — | Mar 2025 |
GPP Slideshow1 unfixed gpp-slideshow · 200+ installs | 1 | — | — | Jun 2025 |
Gravitate Automated Tester1 unfixed gravitate-automated-tester · 30+ installs | 1 | — | — | Sep 2025 |
Greenhouse Job Board1 unfixed greenhouse-job-board · 200+ installs | 1 | — | — | Dec 2025 |
Gutenium Blocks1 unfixed gutenium | 1 | — | — | Nov 2024 |
Hide Admin Bar From Front End1 unfixed hide-admin-bar-from-front-end · 1K+ installs | 1 | 1 | — | Jun 2025 |
Hide Plugins1 unfixed hide-plugins · 1K+ installs | 1 | — | — | Dec 2025 |
Hide Text Shortcode1 unfixed hide-text-shortcode · 400+ installs | 1 | — | — | Aug 2025 |
Hide WP Toolbar1 unfixed hide-wp-toolbar · 900+ installs | 1 | — | — | Sep 2025 |
HMH Footer Builder For Elementor1 unfixed hmh-footer-builder-for-elementor · 10+ installs | 1 | — | — | Apr 2025 |
Video Gallery by Huzzaz1 unfixed huzzaz-video-gallery · 900+ installs | 1 | — | — | Oct 2025 |
Hypotext1 unfixed hypotext · 50+ installs | 1 | — | — | Apr 2025 |
idbbee1 unfixed idbbee · 20+ installs | 1 | — | — | Oct 2023 |
IDer Login for WordPress1 unfixed ider-login · 90+ installs | 1 | — | — | Dec 2024 |