WordPress plugin vulnerabilities with no official fix seen
Plugins that look unpatched. In each, at least one record lists the latest wordpress.org release as affected; updating does not close that vulnerability. With records, versions and wordpress.org status. Updated daily.
At least one record lists the component's latest wordpress.org release as affected: updating does not close that vulnerability.
| Component | Records | No login | Exploit code | Latest |
|---|---|---|---|---|
Google AdSense for Responsive Design – GARD1 unfixed google-adsense-for-responsive-design-gard · 100+ installs | 1 | — | — | Dec 2025 |
Google+ Comments1 unfixed google-plus-comments · 30+ installs | 1 | — | — | Sep 2025 |
GoPay for WooCommerce1 unfixed gopay-gateway · 1K+ installs | 1 | — | — | Sep 2026 |
Goracash1 unfixed goracash · 300+ installs | 1 | — | — | Sep 2025 |
GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership1 unfixed gourl-bitcoin-payment-gateway-paid-downloads-membership · 700+ installs | 1 | — | — | Sep 2025 |
Notification Bar, Sticky Notification Bar, Sticky Welcome Bar for any theme1 unfixed gp-notification-bar · 30+ installs | 1 | — | — | Mar 2025 |
GPP Slideshow1 unfixed gpp-slideshow · 200+ installs | 1 | — | — | Jun 2025 |
Gravitate Automated Tester1 unfixed gravitate-automated-tester · 30+ installs | 1 | — | — | Sep 2025 |
Greenhouse Job Board1 unfixed greenhouse-job-board · 200+ installs | 1 | — | — | Dec 2025 |
Gutenium Blocks1 unfixed gutenium | 1 | — | — | Nov 2024 |
Help Desk WP1 unfixed helpdeskwp | 1 | — | — | May 2023 |
Hide Admin Bar From Front End1 unfixed hide-admin-bar-from-front-end · 1K+ installs | 1 | 1 | — | Jun 2025 |
Hide Plugins1 unfixed hide-plugins · 1K+ installs | 1 | — | — | Dec 2025 |
Hide Text Shortcode1 unfixed hide-text-shortcode · 400+ installs | 1 | — | — | Aug 2025 |
Hide WP Toolbar1 unfixed hide-wp-toolbar · 900+ installs | 1 | — | — | Sep 2025 |
HMH Footer Builder For Elementor1 unfixed hmh-footer-builder-for-elementor · 10+ installs | 1 | — | — | Apr 2025 |
Video Gallery by Huzzaz1 unfixed huzzaz-video-gallery · 900+ installs | 1 | — | — | Oct 2025 |
Hypotext1 unfixed hypotext · 50+ installs | 1 | — | — | Apr 2025 |
idbbee1 unfixed idbbee · 20+ installs | 1 | — | — | Oct 2023 |
IDer Login for WordPress1 unfixed ider-login · 90+ installs | 1 | — | — | Dec 2024 |
IFrame Widget1 unfixed iframe-widget · 500+ installs | 1 | — | — | Jun 2025 |
Accessibility Press1 unfixed ilogic-accessibility · 100+ installs | 1 | — | — | Dec 2025 |
Inboxify Sign Up Form1 unfixed inboxify-sign-up-form · 100+ installs | 1 | — | — | Dec 2025 |
Infusionsoft Web Form JavaScript1 unfixed infusionsoft-web-form-javascript · 50+ installs | 1 | — | — | Mar 2025 |
Instant Locations1 unfixed instant-locations · 10+ installs | 1 | — | — | Sep 2025 |
Interactive Regional Map of Africa1 unfixed interactive-map-of-africa · 30+ installs | 1 | 1 | — | Jun 2025 |
Interactive Regional Map of Florida1 unfixed interactive-map-of-florida · 10+ installs | 1 | 1 | — | Jun 2025 |
Interactive UK Regional Map1 unfixed interactive-uk-regional-map · 30+ installs | 1 | 1 | — | Jun 2025 |
Interview1 unfixed interview · 10+ installs | 1 | — | — | May 2025 |
金数据1 unfixed jinshuju · 50+ installs | 1 | — | — | Sep 2025 |
Just TinyMCE Custom Styles1 unfixed just-tinymce-styles · 1K+ installs | 1 | 1 | — | Dec 2025 |
Kanpress1 unfixed kanpress · 10+ installs | 1 | — | — | Aug 2025 |
Labinator Content Types Duplicator1 unfixed labinator-content-types-duplicator · 200+ installs | 1 | 1 | — | Apr 2025 |
Flag Icons1 unfixed language-icons-flags-switcher · 3K+ installs | 1 | — | — | Mar 2025 |
Last Updated Shortcode1 unfixed last-updated-shortcode · 800+ installs | 1 | — | — | Sep 2025 |
leadlovers forms1 unfixed leadlovers-forms · 100+ installs | 1 | 1 | — | Apr 2026 |
LeadQuizzes1 unfixed leadquizzes · 50+ installs | 1 | — | — | Apr 2025 |
Leadrebel1 unfixed leadrebel · 50+ installs | 1 | 1 | — | Apr 2026 |
Leartes TRY Exchange Rates1 unfixed leartes-try-exchange-rates · 500+ installs | 1 | — | — | Apr 2025 |
Links shortcode1 unfixed links-shortcode · 800+ installs | 1 | — | — | Oct 2025 |
List Related Attachments1 unfixed list-related-attachments-widget · 90+ installs | 1 | — | — | Feb 2025 |
Social Intents – Live Chat1 unfixed live-chat-support-by-social-intents · 400+ installs | 1 | — | — | Apr 2025 |
Live Sports Streamthunder1 unfixed live-sports-streamthunder · 10+ installs | 1 | 1 | — | Jun 2025 |
LiveJournal Shortcode1 unfixed livejournal-shortcode · 10+ installs | 1 | — | — | Sep 2026 |
LMSACE Connect – WooCommerce Moodle™ LMS Integration1 unfixed lmsace-connect · 200+ installs | 1 | — | — | Jul 2025 |
Login-Logout1 unfixed login-logout · 3K+ installs | 1 | — | — | Sep 2025 |
Logo Carousel Slider1 unfixed logo-carousel-slider · 6K+ installs | 1 | — | — | Apr 2025 |
Magento 2 WP Integration1 unfixed m2wp · 90+ installs | 1 | — | — | Sep 2025 |
Map Categories to Pages1 unfixed map-categories-to-pages · 700+ installs | 1 | — | — | Sep 2025 |
Marketer Addons1 unfixed marketer-addons · 50+ installs | 1 | — | — | Apr 2025 |
Master Paper Collapse Toggle1 unfixed master-paper-collapse-toggle · 50+ installs | 1 | — | — | Sep 2025 |
Media Author1 unfixed media-author · 100+ installs | 1 | — | — | Sep 2025 |
Meks Quick Plugin Disabler1 unfixed meks-quick-plugin-disabler · 1K+ installs | 1 | 1 | — | Dec 2025 |
Melipayamak1 unfixed melipayamak · 300+ installs | 1 | — | — | Jun 2025 |
Mesa Mesa Reservation Widget1 unfixed mesa-mesa-reservation-widget | 1 | — | — | Aug 2025 |
MSN Partner Hub1 unfixed microsoft-start · 1K+ installs | 1 | — | — | Oct 2025 |
SWM – Shopify to WooCommerce Migration1 unfixed migrate-shopify-to-woocommerce · 20+ installs | 1 | 1 | — | Apr 2025 |
Minimalistic Event Manager1 unfixed minimalistic-event-manager · 60+ installs | 1 | — | — | Apr 2025 |
Mobi2Go1 unfixed mobi2go · 70+ installs | 1 | — | — | Sep 2025 |
My Contador lesr1 unfixed my-contador-wp · 90+ installs | 1 | 1 | — | Nov 2024 |
My Resume Builder1 unfixed my-resume-builder · 30+ installs | 1 | — | — | Jun 2025 |
Navigation Du Lapin Blanc1 unfixed navigation-du-lapin-blanc · 30+ installs | 1 | — | — | Jan 2025 |
Netease Music1 unfixed netease-music · 100+ installs | 1 | — | — | Aug 2025 |
News, Magazine and Blog Elements1 unfixed news-magazine-and-blog-elements · 50+ installs | 1 | — | — | Apr 2025 |
Next Page, Not Next Post1 unfixed next-page-not-next-post · 1K+ installs | 1 | — | — | Oct 2025 |
XML Travel Portal Widget1 unfixed oganro-reservation-widget · 40+ installs | 1 | 1 | — | Jun 2025 |
Oganro Travel Portal Search Widget for HotelBeds APITUDE API1 unfixed oganro-travel-portal-search-widget-for-hotelbeds-apitude-api · 10+ installs | 1 | 1 | — | Jun 2025 |
ONet Regenerate Thumbnails1 unfixed onet-regenerate-thumbnails · 1K+ installs | 1 | 1 | — | Jun 2025 |
Plugin Ongkos Kirim JNE Tiki Sicepat Wahana J&T POS for Woocommerce1 unfixed ongkoskirim-id · 2K+ installs | 1 | — | — | Sep 2025 |
eZee Online Hotel Booking Engine1 unfixed online-booking-engine · 100+ installs | 1 | — | — | Sep 2025 |
Opal Portfolio1 unfixed opal-portfolios · 100+ installs | 1 | — | — | Apr 2025 |
Opal Service1 unfixed opal-service · 800+ installs | 1 | — | — | Oct 2025 |
OpenAI Tools for WordPress & WooCommerce1 unfixed openai-tools-for-wp-wc · 100+ installs | 1 | — | — | Apr 2025 |
Optimize More! – Images1 unfixed optimize-more-images · 60+ installs | 1 | 1 | — | Feb 2026 |
OTA Sync Booking Engine Widget1 unfixed ota-sync-booking-engine-widget · 70+ installs | 1 | 1 | — | Aug 2024 |
Owl Carousel WP1 unfixed owl-carousel-wp · 1K+ installs | 1 | — | — | Jan 2026 |
Page Title Splitter1 unfixed page-title-splitter · 1K+ installs | 1 | — | — | Dec 2025 |
Page Transition1 unfixed page-transition · 700+ installs | 1 | — | — | Aug 2025 |
Payday1 unfixed payday · 200+ installs | 1 | 1 | — | Apr 2025 |
pCloud Backup1 unfixed pcloud-backup · 50+ installs | 1 | — | — | Apr 2025 |
PDPA Consent for Thailand1 unfixed pdpa-consent · 300+ installs | 1 | — | — | Jun 2025 |
PE Easy Slider1 unfixed pe-easy-slider · 800+ installs | 1 | — | — | Sep 2025 |
Hype1 unfixed pico · 30+ installs | 1 | 1 | — | Dec 2025 |
Pinterest Pinboard Widget1 unfixed pinterest-pinboard-widget · 500+ installs | 1 | — | — | Sep 2025 |
Pinterest Verify Meta Tag1 unfixed pinterest-verify-meta-tag · 600+ installs | 1 | — | — | Jun 2025 |
PixelBeds Channel Manager and Hotel Booking Engine1 unfixed pixelbeds-channel-manager-booking-engine · 10+ installs | 1 | 1 | — | Jun 2025 |
Plugin Security Scanner1 unfixed plugin-security-scanner · 700+ installs | 1 | — | — | Sep 2025 |
Podigee WordPress Quick Publish – now with Gutenberg support!1 unfixed podigee · 700+ installs | 1 | 1 | — | Apr 2026 |
Poll, Poll Forms – WordPress Poll plugin by Poll Builder1 unfixed poll-builder · 10+ installs | 1 | — | — | Dec 2024 |
Pondol BBS1 unfixed pondol-bbs · 10+ installs | 1 | — | — | Jan 2026 |
Popular Posts by Webline1 unfixed popular-posts-by-webline · 1K+ installs | 1 | — | — | Oct 2025 |
Porn Videos Embed1 unfixed porn-videos-embed · 1K+ installs | 1 | — | — | Aug 2025 |
Portfolio by BestWebSoft – Work and Projects Presentation Plugin for WordPress1 unfixed portfolio · 600+ installs | 1 | — | — | Sep 2025 |
Post Cloner1 unfixed post-cloner · 1K+ installs | 1 | 1 | — | Dec 2025 |
Post Featured Video1 unfixed post-featured-video · 900+ installs | 1 | 1 | — | Sep 2025 |
Post List Featured Image1 unfixed post-list-featured-image · 900+ installs | 1 | — | — | Oct 2025 |
Post Type Converter1 unfixed post-type-converter · 1K+ installs | 1 | 1 | — | Aug 2025 |
Posts By Tag1 unfixed posts-by-tag · 1K+ installs | 1 | — | — | Oct 2025 |
Posts Slider Shortcode1 unfixed posts-slider-shortcode · 30+ installs | 1 | — | — | Jul 2025 |
Pre-Publish Post Checklist1 unfixed pre-publish-post-checklist · 100+ installs | 1 | — | — | Jun 2025 |