Freemius SDK <= 2.4.2 - Missing Authorization Checks (CVE-2022-4974)

What is affected, what to do

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.

Update Dashlabsltd YASR to version 2.0.2, NicheAddons Events Addon for Elementor to version 1.9.8, Dots Fraud Prevention For WooCommerce and EDD to version 2.1.0.

Affected

• Dashlabsltd YASR lt *..2.0.2
• NicheAddons Events Addon for Elementor lt *..1.9.8
• Dots Fraud Prevention For WooCommerce and EDD lt *..2.1.0
• Wpengine Gutenberg Blocks lt *..2.6.8
• Bouncingsprout Ultimeter lt *..2.7.6
• Toddhalfpenny Past Events Extension eq 0..0
• Pootlepress Pootle Pagebuilder lt *..5.7.1
• Powerfulwp Local Delivery Drivers for WooCommerce lt *..1.8.5
• Kkikuchi1220 Ultimate Gutenberg eq 0..0
• Josevega WP Required Taxonomies lt *..1.1.8
• Pmbaldha Featured Products First for WooCommerce eq 0..0
• SSL Zen lte *..4.0.4
• Wisersteps Streak CRM For Gmail For Contact Form 7 lt *..1.0.9
• Wpdevpowers WordPress Dev Powers eq 0..0
• Benmoreassynt DancePress (TRWA) lte *..3.1.2
• Dots Product Size Charts Plugin for WooCommerce lt *..2.2.3
• Tribalnerd Wp My Admin Bar eq 0..0
• Setka A no-code page builder for beautiful performance-based content lt *..2.1.17
• Mikebels LocalSEOMap eq 0..0
• Cromer12 Easy Prayer eq 0..0
• Rafalosinski AdFoxly lte *..1.8.4
• Stevehenty WP Get Personal eq 0..0
• Theafricanboss/ Checkout with Cash App on EDD eq 0..0
• Usmanaliqureshi Server Info eq 0..0
• ThemeLocation Custom WooCommerce Checkout Fields Editor lte *..1.2.6
• KRSP Frontend File Uploader eq 0..0
• bPlugins Panorama lt *..1.0.8
• Janwyl Bulk Attachment Download lt *..1.3.5
• Majick AutoSave Net eq 0..0
• Premmerce Wholesale Pricing for WooCommerce lt *..1.1.8
• Jcodex Any Popup eq 0..0
• Theafricanboss/ Checkout with Venmo on EDD eq 0..0
• Dreamfox Payment Gateway Per Product for WooCommerce lt *..3.1.6
• HQTheme Extra eq 0..0
• Vincoit Vit Website Reviews eq 0..0
• Daigo75 EU VAT Assistant for WooCommerce lt *..2.0.28.220224
• Eedee WordPress Slider Block Gutenslider lt *..5.7.0
• Surbma HuCommerce | Magyar kiegészítések WooCommerce webáruházakhoz lt *..30.3.0
• Lostboy7 KVoucher eq 0..0
• bPlugins YT Player lt *..1.5.1
• Whiteshadow Error Log Monitor lt *..1.7.1
• SlideDeck eq 0..0
• Premmerce Multi-currency for Woocommerce lt *..2.3.2
• Mvvapps/ Booking Addon for WooCommerce lt *..4.2.0
• WP Event Partners lte *..1.2.4
• Saadiqbal WC Shop Sync lt *..4.2.1
• Passionatebrains AEH Speed Optimization lt *..2.6
• Majick ForceField eq 0..0
• Richard-b FIT eq 0..0
• ThemeKraft All in One Invite Codes lt *..1.0.13
• Dots Dynamic Pricing and Discount Rules for WooCommerce lt *..2.2.3
• WordPlus Better Messages lt *..1.9.9.170
• Wpt00ls Grid & Styler For Contact Form 7 And Divi lt *..1.4.1
• Protectyouruploads Protect Uploads with Login eq 0..0
• Sakurapixel Atlas eq 0..0
• Dgwyer Simple Sitemap lt *..3.5.5
• bPlugins Super Video player lt *..1.6.11
• Mhmrajib WP Books Gallery lt *..3.6
• Damian-gora FiboSearch lt *..1.17.0
• Stevejburge Tag Groups is the Advanced Way to Display Your Taxonomy Terms lt *..1.43.10.1
• Prasadkirpekar WP Free SSL lt *..1.2.7
• ClickerVolt eq 0..0
• ProteusThemes ConsultPress Lite eq 0..0
• Badhonrocks Styler Mate for Contact Form 7 lt *..1.3.0
• StreamWeasels Twitch Integration lt *..1.3.4
• Pagup MOBILOOK lt *..1.2.4
• Paulio21 Zip Code Redirect lte *..4.0.1
• Vohotv/ Guestofy eq 0..0
• Ahmed17 CF7 Constant Contact Fields Mapping eq 0..0
• StellarWP Bookit lt *..2.2.9
• EthereumICO lt *..2.3.11
• Risetheme RT Easy Builder lte *..1.4
• Saadiqbal WP Contact Slider lt *..2.4.5
• Ivan Paulin Country Based Payments for WooCommerce lt *..1.4.1
• WPChill Filr lt *..1.2.1
• NicheAddons Elasta lt *..1.0.8
• Interactivegeomaps MapGeo lt *..1.5.4
• Galoover WordPress Animation Plugin eq 0..0
• Wpdever WP Notification Bell lt *..1.3.13
• Melapress Activity Log For MainWP lt *..1.7.1
• Oceas Connected Sermons eq 0..0
• Josevega Bulk Edit and Create User Profiles lt *..1.5.13
• Milukove/ Кнопка ЮMoney eq 0..0
• Kartikparmar/ Bulk WooCommerce Category Creator eq 0..0
• Alphabposervice Easy Math Captcha for CF7 eq 0..0
• Litonice13 Master Accordion ( Former WP Awesome FAQ Plugin ) lt *..4.1.8
• Wpdive Better Addons for Elementor lt *..1.3.1
• Livemesh Addons by Elementor lt *..7.1.4
• Nitin247 Place Order Without Payment for WooCommerce lt *..2.2
• Boriscolombier/ STEWoo lt *..1.2.4
• Marcqueralt DeMomentSomTres Address eq 0..0
• Johnc1979 Out of stock display for woocommerce eq 0..0
• Ultimate Blocks lt *..2.4.13
• Pagup Bulk Auto Image Title Attribute (Image Title tag) optimizer (Image SEO) lt *..1.2.3
• Princeahmed WP Radio lt *..3.1.4
• Blackandwhitedigital BookPress lt *..1.2.3
• WPChill Qyrr lt *..0.8
• Wpeka-club WordPress Directory Plugin For Business Listings lt *..1.4.5
• Equalize Digital Accessibility Checker lt *..1.2.8
• Therealwebdisrupt Funnelmentals eq 0..0
• BlockSpare lt *..2.0.1
• Nasirahmed Forms to Zapier, Integromat, IFTTT, Workato, Automate.io, elastic.io, Built.io, APIANT, Webhook lt *..1.1.9
• MojofyWP Product Carousel For WooCommerce lt *..1.0.9
• Pagup Better Robots.txt lt *..1.4.4
• GFireM Fields eq 0..0
• Elliotvs Coupon Affiliates lt *..4.16.4
• Dipcode WP Post Block eq 0..0
• Attest LMS Plugin eq 0..0
• Shabti Frontend Admin by DynamiApps lt *..3.3.33
• Ibenic Simple Giveaways lt *..2.42.1
• Wpt00ls Masonry Gallery & Posts For Divi (WP Tools) lt *..3.1.2
• GFireM Action After eq 0..0
• Bandido Ukrposhta lt *..1.6.18
• Annastaa annasta Filters for WooCommerce lt *..1.5.0
• Tprintyedisonave WP Lead Stream eq 0..0
• StellarWP The Events Calendar lt *..5.14.0.4
• Johnc1979 Focus on Reviews for WooCommerce eq 0..0
• Pmbaldha Email Tracker lte *..5.3.8
• Wpt00ls Block Styler For Gravity Forms lte *..6.1.0
• Josevega WP Page Templates lt *..1.1.13
• Ggwicz Product Customer List for WooCommerce lt *..3.0.0
• WP Moose lt *..1.0.1
• Samdani Team Members lt *..1.1.0
• Jwebsol Floating Social Share Icons and Social Share buttons lt *..3.6.0
• Co2ok South Pole lt *..1.0.2.0
• Jwind LittleBot Invoices eq 0..0
• Akdevs Genealogical Tree lte *..2.1.5
• Plugins360 Automatic YouTube Gallery lt *..1.6.5
• Nitin247 Thank You Page for WooCommerce lt *..3.1
• 5starplugins Marijuana Age Verify lt *..1.3.1
• Skshaikat WooCommerce upcoming Products eq 0..0
• Shabti Frontend Admin lt *..3.3.33
• Matthias-reuter SV Tracking Manager lt *..1.8.02
• Saadiqbal WP Easy Pay lt *..4.0.2
• Flexithemes WordPress SEO Checklist eq 0..0
• wGauge eq 0..0
• BdThemes Prime Slider lt *..2.7.0
• ThemeKraft Post Form lt *..2.6.3
• Wpt00ls WP Tools Divi Product Carousel lt *..1.5.0
• Aharonyan Guest posting / Frontend Posting / Front Editor lt *..3.4.1
• Woodyhayday Social Gallery Lite eq 0..0
• Bfintal Stackable lt *..3.1.5
• Seezee Five-Star Ratings Shortcode lt *..1.2.39
• WPKube CAPTCHA 4WP lt *..7.0.5
• Premmerce Wishlist for WooCommerce lt *..1.1.8
• Wordpresschef Salon Booking System lt *..7.6.3
• Surbma | GDPR Proof Cookie Consent & Notice Bar lt *..17.5.3
• Dots Advanced Menu Manager Pro eq 0..0
• Princeahmed Live TV Player lt *..1.2.3
• Vanyukov Market Exporter lte *..2.0.13
• Litonice13 WP Adminify lt *..2.0.5
• ThemeKraft TK Google Fonts GDPR Compliant lt *..2.2.1
• Starfishwp Starfish Review Generation & Marketing for WordPress lt *..3.0.26
• Halmat WP Emaily eq 0..0
• NicheAddons Education Addon for Elementor lt *..1.2
• Matthias-reuter SV Proven Expert lt *..1.8.01
• Wpeka-club SurveyFunnel lt *..1.1.3
• PluginsWare Advanced Classifieds & Directory Pro lt *..1.8.8
• Smartwpress Music Player for Elementor lt *..1.5.5
• Ethereumicoio Cryptocurrency Product for WooCommerce lt *..3.14.6
• Kenanfallon WooCommerce Next Order Coupon eq 0..0
• Themeythemes Overlay Image Divi Module lt *..1.3.2
• Pmbaldha Email Header Footer eq 0..0
• bPlugins Document Viewer lt *..2.2.5
• Nplugins Price Bands for WooCommerce eq 0..0
• WPVibes Addon Elements for Elementor (formerly Elementor Addon Elements) lt *..1.11.14
• Drosendo Smart Variations Images & Swatches for WooCommerce lt *..5.1.10
• 5starplugins Featured Images in RSS for Mailchimp & More lt *..1.5.9
• Ibenic Simple Sponsorships eq 0..0
• Unitecms Unlimited Elements For Elementor lt *..1.5.3
• WPJoli Joli Table Of Contents lt *..1.3.9
• Getsparrow Sparrow eq 0..0
• Zerozendesign Multi Page Auto Advance for Gravity Forms lt *..4.3
• Mcurly Generate Images (AI) lt *..3.3.11
• Ibenic Live Scores for SportsPress eq 0..0
• Dots Hide Shipping Method For WooCommerce lt *..1.3.1
• Wpt00ls Ultimate Carousel For Divi lt *..4.3.1
• Prasadkirpekar WP Meta and Date Remover lt *..1.9.6
• Wpt00ls Image Carousel For Divi lt *..1.5.0
• Dudo Comments Not Replied To lt *..1.5.3
• Wisersteps Contact Form 7 lt *..1.0.5
• Alexmoss Opensea lt *..1.0.3
• Tranzly WordPress Translation plugin for Post, Pages & WooCommerce products. Tranzly IO AI DeepL automatic WordPress Translator. lt *..1.1.1
• Alekv Pixel Manager for WooCommerce lt *..1.14.3
• Gowebsmarty Modern Addons for Elementor Page Builder lt *..1.2.0
• Themesei Viralike eq 0..0
• WP Munich Blocks lt *..0.11.0
• Inputwp Availability Datepicker lte *..2.1
• Diviframework Footer Plugin for Divi eq 0..0
• Mhmrajib AidWP lt *..2.9
• Saadiqbal New User Approve lt *..2.1
• GFireM Advance Search eq 0..0
• Giladtakoni WPMailer eq 0..0
• Anssilaitila Shared Files lt *..1.6.72
• WPBITS Addons For Elementor Page Builder lt *..1.3.2
• Prelc Speculor eq 0..0
• Pagup WP Google Street View (with 360° virtual tour) & Google maps + Local SEO lt *..1.0.9
• Deothemes WordPress Everse Starter Sites lt *..1.2.1
• Litonice13 Master Addons For Elementor lt *..1.8.5
• Versacomp Choice Payment Gateway for WooCommerce lt *..2.0.5
• Maartenbelmans Domain Mapping System | Create Microsites with Multiple Alias Domains (multisite optional) lt *..1.7
• Stylingwebben Order and Inventory Manager for WooCommerce lt *..1.4.3
• Ninja Libs Amazon SES eq 0..0
• Royalnavneet WP Comment Cleaner lt *..4.3
• Webheadllc WP-Cron Status Checker lt *..1.2.4
• Bilaltas CodeKit lt *..2.3
• FooPlugins Gallery by FooGallery lt *..2.1.34
• Kartikparmar Change Price Title for WooCommerce lte *..2.5
• Edgegalleryplugin WordPress Gallery Plugin eq 0..0
• Gloriousthemes Glorious Services & Support eq 0..0
• Alphabposervice Easy Newsletter Signups lt *..1.0.4
• Mikewire Rocksolid Announcement & Notification Banner lt *..3.1.0
• Dam6pl Advanced Database Replacer eq 0..0
• Tribalnerd Multisite Robots.txt Manager eq 0..0
• Irkanu Simple Social Page Widget & Shortcode eq 0..0
• Josevega Product Country Restrictions for WooCommerce lt *..1.13.0
• Shamim51 Front End PM lt *..11.3.4
• Divisumo Ultimate Divi Modules Suite eq 0..0
• XplodedThemes XT Points & Rewards for WooCommerce lt *..1.4.3
• ThemeLocation Widgets for WooCommerce Products on Elementor lt *..1.0.9
• Popeating Delivery for WooCommerce eq 0..0
• Mohsinoffline NotifSMS lt *..1.3.7
• Cleverplugins Security Ninja lt *..5.135
• Xyulex TinyMCE Annotate eq 0..0
• Damian-gora Justified Gallery lt *..1.5.1
• Mberding Book BuyBack Prices eq 0..0
• Daniyalahmedk Fuse Social Floating Sidebar lt *..5.4.3
• WP-HR Manager lt *..3.0.3
• CoderPress Emails Blacklist for Everest Forms lt *..1.0.4
• Plugins360 All-in-One Video Gallery lt *..2.5.4
• Oloyede-jamiu Woo Admin Product Notes eq 0..0
• ThemeLocation Remove Add to Cart WooCommerce lt *..1.4.3
• Theafricanboss Checkout with Zelle on Woocommerce lt *..2.0
• Wpt00ls Divi Gravity Forms (WP Tools) lt *..6.6.3
• Deothemes Everse lt *..1.8.6
• Commercepundit Run time Image resizing eq 0..0
• Wp-making Rest Routes lt *..4.24.0
• Olezhyk5 Widget for Contact form 7 eq 0..0
• Pagup Add Pinterest conversion tags for Pinterest Ads + Site verification lt *..1.2.3
• Javmah WPGSI lt *..3.6.1
• Majick WP BugBot eq 0..0
• Princeahmed File Manager for Google Drive lt *..1.1.0
• Deothemes Nokke lt *..1.0.11
• Josevega Customers Table for WooCommerce lt *..1.0.8
• Closemarketing/ Sync eCommerce NEO eq 0..0
• Wpcohort Preloader for Divi eq 0..0
• Tobias Conrad/ Get Better Reviews for WooCommerce lte *..3.0.6
• codeSavory Knowledge Base documentation & wiki plugin lt *..2.15.14
• Webba-agency Easy Appointment Booking & Scheduling System lt *..4.2.18
• Salttechno Shuban eq 0..0
• Pmbaldha/ ACF for WooCommerce Product lt *..1.8
• Johnc1979 Scheduled Notification Bar eq 0..0
• bPlugins 3D Viewer lt *..1.2.7
• Samuelsilvapt Fullscreen Menu lte *..2.2.7
• WPChill Gallery PhotoBlocks lt *..1.2.6
• Themeisle Redirection for Contact Form 7 lt *..2.5.0
• Marcqueralt DeMomentSomTres Grid Archive eq 0..0
• Seancarrico Inbound Brew eq 0..0
• Muhammad-rehman WP Photo Effects lt *..1.2.1
• Danish-ali WPOptin lte *..1.2.3
• Dots Extra Fees for WooCommerce lt *..3.8.2
• Ldninjas/ Reset Course Progress For LearnDash eq 0..0
• Princeahmed Podcast Box lt *..1.0.2
• Giladtakoni The best plugin for restrict content, support all Custom Post Types and Elementor eq 0..0
• Toddhalfpenny Turbo Widgets eq 0..0
• WPChill Passster lt *..3.5.5.2
• Powerfulwp Gift Message for WooCommerce lt *..1.6.0
• Actuaryzask azw woocommerce file uploads eq 0..0
• InfornWeb Blog Designer Pack lt *..2.3.1
• Jburleigh1 Broadcast Lite lt *..2.0.3
• FooPlugins Notification Bar, Announcement and Cookie Notice WordPress Plugin lt *..2.1.15
• Penguininitiatives WP Author Bio eq 0..0
• Ahmed17 RW Divi Unite Gallery lte *..1.0
• Essekia Tablesome Table lt *..0.6.7
• Wpwebinfotech Product Image Watermark for Woo lt *..1.0.4
• Nasirahmed AFI lt *..1.49.0
• Janthielemann Revolution for Elementor eq 0..0
• Wpconedev ConeBlog lt *..1.4.6
• Linekal Under Construction lt *..4.0
• Ekanath WP Gratify eq 0..0
• Cmbibby/ Automizy Gravity Forms eq 0..0
• Toddhalfpenny Widgets on Pages lt *..1.6.0
• Ggriesser Get feedback from visitors eq 0..0
• Dejanmarkovic WordPress Buffer lt *..2020.1.0
• Intoxstudio Content Aware Sidebars lt *..3.17.2
• Salttechno Bani eq 0..0
• Ggriesser Fast WordPress eq 0..0
• Sonalsinha21 SKT Templates lt *..4.3
• Frenify Categorify lt *..1.0.5
• Vinod-dalvi Ivory Search lt *..5.4.4
• Pagup Add Twitter Pixel for Twitter ads lt *..1.0.4
• XplodedThemes XT Variation Swatches for WooCommerce lt *..1.8.1
• KaizenCoders URL Shortify lt *..1.5.11
• Mohsinoffline Pledged Plugins Secure Gateway for Authorize.net and WooCommerce lt *..5.1.27
• ThemeKraft BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages lt *..3.4.2
• Cloudliving Affiliate Link Builder Plugin for Amazon Associates eq 0..0
• Mte90 Glossary lt *..2.1.8
• Bavokoservices BAVOKO SEO Tools eq 0..0
• Foxmoon Cartoon Url eq 0..0
• Josevega WP Frontend Admin lt *..1.17.0.4
• Bouncingsprout Block, Suspend, Report for BuddyPress lt *..3.3.3
• Takanakui Menu Image, Icons made easy lt *..3.0.6
• XplodedThemes XT Ajax Add To Cart for WooCommerce lt *..1.0.4
• Bestpluginswordpress One Click Login eq 0..0
• Ethereumicoio Ether and ERC20 tokens WooCommerce Payment Gateway lt *..4.12.9
• Mvvapps/ Chat Button- Leads and Order over Chat lt *..1.6.1
• Dreamfox Shipping Gateway Per Product for WooCommerce lt *..2.0.4
• Deothemes Purosa lt *..1.1.0
• Tauhidpro NicheTable lt *..2.2.3
• Ankitmaru Advanced Page Visit Counter lt *..6.0.0
• Themesty WP Sierra eq 0..0
• Dots Digital Goods (Checkout Field Editor) for WooCommerce Checkout lt *..3.6.4
• Cleverplugins SEO Booster lt *..3.8.5
• Fullworks Stop Contact Form 7 Spam & WPForms Spam lt *..1.3.2
• Khothemes Ultimate Widgets Light eq 0..0
• Beeneeb Insert or Embed Articulate Content into WordPress lt *..4.3000000016
• Saadiqbal APPExperts lt *..1.2.2
• BdThemes Ultimate Post Kit Addons for Elementor lt *..2.9.1
• Pootlepress Caxton lt *..1.30.0
• Djenh Nitek Carousel Slider Cool Transitions eq 0..0
• Kartechify Extend Filter Products By Price Widget eq 0..0
• BlockMeister lt *..3.0.5
• MantraBrain Yatri Tools lt *..1.1.3
• Tickera Restrict lt *..2.1.9
• Ibenic Change Prices with Time for WooCommerce eq 0..0
• Dots Flat Rate Shipping Method for WooCommerce lt *..4.0.3
• Frostbourn Responsive Social Slider Widget eq 0..0
• Ahmed17 Menu Item Scheduler eq 0..0
• Avidthemes/ Blog Sidebar Widget eq 0..0
• Dots Multipurpose Gutenberg Block lte *..1.7.3
• Codeies Full Page Blog Designer eq 0..0
• Jcodex WooCommerce Variation Swatches for Products eq 0..0
• Melapress WP Activity Log lt *..4.4.0
• Patrickgarman Simple Feature Requests Free lt *..2.2.4
• Josevega Bulk Edit Categories and Tags lt *..1.5.23
• Saadiqbal License Manager for WooCommerce lt *..2.2.6
• Skyminds Sky Login Redirect lt *..3.6.0
• Passionatebrains GA4WP lt *..1.3
• Munirkamal Divi Collage eq 0..0
• Lukeseager Persistent Login lt *..2.0.0
• ThemeLocation Deals of the Day WooCommerce eq 0..0
• Pagup Add Linkedin insight tags for Linkedin ads lt *..1.2.4
• Maurolopes/ Easy Settings for LearnDash eq 0..0
• Mihail-barinov Share This Image lt *..1.67
• Sjaved Easy Social Feed lt *..6.3.4
• Jamesparkninja NEXUS eq 0..0
• Deothemes Meridia lt *..2.2.7
• Tobias Conrad WebinarIgnition lt *..2.8.12
• Wpmagics Delete Posts automatically lt *..2.1.2
• Maxsdesign Brand eq 0..0
• Livemesh WPBakery Page Builder Addons by Livemesh lt *..2.9.2
• Wptb WP Table Builder lt *..1.3.16
• Princeahmed Radio Player lt *..1.0.8
• Wpt00ls Divi Content Restrictor lte *..1.3.0
• InfornWeb Logo Showcase lt *..2.0.3
• Premmerce Variation Swatches for WooCommerce lt *..1.2.1
• Dotrex PowerFolio lt *..2.1.7
• SSL Atlas lt *..1.1.1
• GalleryCreator Mixed Media Gallery Blocks lt *..2.3.6
• Maltathemes Easy TikTok Feed lt *..1.1.1
• Webmuehle PopOverXYZ eq 0..0
• Pagup Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO) lt *..1.4.5.0
• Wpcohort/ Number Chat eq 0..0
• Svovaf Rating-Widget lt *..3.1.4
• RebelCode Spotlight Social Feeds lt *..0.10.2
• Xyulex Expire tags eq 0..0
• Gowebsmarty Go Viral lt *..1.8.0
• Tobias Conrad WOW Styler for CF7 lt *..1.4.2
• Tropicalista Dashy eq 0..0
• Premmerce User Roles lt *..1.0.11
• Tonyzeoli Radio Station by netmix® lt *..2.4.0.6
• Saadiqbal Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program lt *..2.4.3.1
• Greenjaymedia SEO Audit lt *..1.2.5
• Hiddenpearls WordPress Reviews by ReviewPress eq 0..0
• WP Travel Engine lt *..5.3.8
• Takanakui WP Mobile Menu lt *..2.8.2.7
• Sebet/ WP Smart Export (Free) eq 0..0
• Syntactics eaSYNC Booking lt *..1.1.10
• Theeventscalendar WP Conference Schedule lt *..1.1.0
• Mte90 Strumenti Partita IVA per Woocommerce lt *..1.3.23
• Anfrageformular eq 0..0
• Premmerce Brands for WooCommerce lt *..1.2.12
• Ethereumicoio Ethereum Wallet lt *..4.0.9
• Limbcode Limb Gallery | Create Beautiful Image & Video Galleries lt *..1.5.2
• Peterschulznl Code Manager lt *..1.0.14
• Cypressnorth Payment Gateway for PayFabric eq 0..0
• Commercepundit CP Simple Newsletter eq 0..0
• Jwind LittleBot ACH for Stripe + Plaid eq 0..0
• Dotrex Aquarella Lite eq 0..0
• CoderPress Coinbase Commerce lt *..1.4.1
• Wpmoose Villar lt *..1.0.8
• Uriahs-victor Kikote lt *..1.4.5
• Meowcrew Age Verification Screen for WooCommerce lt *..1.0.1
• Dots Enhanced Ecommerce Google Analytics for WooCommerce lt *..3.6.3
• WPJoli Joli FAQ SEO lt *..1.0.4
• Dots Mass Pages/Posts Creator lt *..2.1.5
• Sebet WP Relevant Ads eq 0..0
• GloriousThemes Starter Sites eq 0..0
• Oloyede-jamiu WP Group Promoter eq 0..0
• Chetmac Airpress eq 0..0
• Wpt00ls Schema Plugin For Divi, Gutenberg & Shortcodes lte *..4.0.1
• Sindyakinsergei Giveaways for woocommerce eq 0..0
• Hiddenpearls Custom Login Page Customizer lt *..2.1.8
• Humblethemes LearnMore eq 0..0
• Marcqueralt DeMomentSomTres Media Tools Auto eq 0..0
• OceanWP Ocean Extra lt *..1.9.4
• ProfilePress Membership Team kk Star Ratings lt *..5.2.9
• Stevehenty Drop Shadow Boxes lt *..1.7.4
• Wpt00ls FAQ Manager For Divi, Gutenberg Block & Shortcode lt *..5.4.1
• Pagup Ads.txt & App-ads.txt Manager for WordPress lt *..1.1.7.0
• Saadiqbal Quick Contact Form lt *..8.0.2
• Glowlogix WP Frontend Profile lt *..1.2.5
• Dgwyer SVG Flags lt *..0.9.6
• Ldninjas/ Drip Feed Content Extended for Learndash eq 0..0
• InfornWeb Post List Designer lt *..2.1.7
• Aguilerasoft Conversion de moneda Woocommerce eq 0..0
• Pagup VidSEO lt *..1.2.4
• Nplugins Before and After Product Images for WooCommerce eq 0..0
• Renaudbod Woocommerce Customer Reviews with Artificial Intelligence analyzis, with IBM Watson Tone Analyzer eq 0..0
• Ivanchernyakov LawPress eq 0..0
• Dots Shipping Method Display Style for WooCommerce lt *..3.7.5
• WProyal Royal Addons for Elementor lt *..1.3.33
• Modulemasters SQL Reporting Services eq 0..0
• Josevega Bulk Edit Posts and Products in Spreadsheet lt *..2.24.13
• Lkoudal Delete Duplicate Posts lt *..4.7.5
• Xjohnyk WS Bootstrap eq 0..0
• Meeplugins Clean Social Icons eq 0..0
• Andyabelow Media Library File Download lt *..1.1
• Cadudecastroalves WP Link Bio lt *..1.4.5
• Pagup Automatic Internal Links for SEO by Pagup lt *..1.0.4
• Cyberhobo Geo Mashup lt *..1.13.6
• Tobias Conrad Builder for WooCommerce product reviews shortcodes lt *..1.0.17
• Anssilaitila Contact List lt *..2.9.50
• Saadiqbal Post Snippets lt *..3.1.7
• Shawoninfo SocialMark lt *..2.0.5
• Mnelson4 Print My Blog lt *..3.11.4
• WP Delicious lt *..1.3.5
• Blackandwhitedigital TreePress lt *..2.0.21
• Paulio21 Postcode Redirect lte *..4.4.1
• Nitin247 Product Author for WooCommerce lt *..1.0.3
• Imtiazrayhan WP Coupons and Deals lt *..3.1.12
• Spartac Feedpress Generator lt *..1.2.0
• WPVibes Form Vibes lt *..1.4.3
• Majick/ WP AutoMedic eq 0..0
• Dots Banner Management, Product Slider, Product Carousel for WooCommerce lt *..2.2.3
• Smgteam Duplicate Variations for Woocommerce eq 0..0
• Thinleek Send Prebuilt Emails eq 0..0
• Essekia Helpie FAQ lt *..1.7.7
• Livemesh SiteOrigin Widgets lt *..2.8.3
• Livemesh Addons for Beaver Builder lt *..2.8.4
• 9brada6 Tabs with Recommended Posts (Widget) eq 0..0
• Closetechnology Connect WooCommerce Shop to ERP/CRM, Verifactu and EU/VAT Compliance lt *..2.1
• Infosatech RevivePress lt *..1.3.1
• Invisnet WP fail2ban lt *..4.4.0.2
• Ultradevs Ultra Elementor Addons eq 0..0
• Wpcohort/ RecurWP eq 0..0
• Buttonizer lt *..2.6.3
• Brightvesseldev Quick Event Manager lt *..9.2.17
• WPChill Image Photo Gallery Final Tiles Grid lt *..3.5.5
• FooPlugins Lightbox & Modal Popup WordPress Plugin lt *..2.7.17
• WP Dev Powers eq 0..0
• Johnc1979 Ultimate Bulk SEO Noindex Nofollow eq 0..0
• Peterschulznl WP Data Access lt *..5.1.4
• Kaira StoreCustomizer lt *..2.3.8
• Mhmrajib TopNewsWp lt *..2.0
• Danieliser User Menus lt *..1.2.9
• Webheadllc Contact Form 7 Multi-Step Forms lt *..4.1.91
• 5starplugins Easy Age Verify lt *..1.6.1
• Brandonfire Blocked in China | Check if your site is available in the Chinese mainland lt *..1.0.3
• Josevega Disable Payment Methods based on cart conditions for WooCommerce lt *..1.13.1.1
• Ejslondon/ Awesome SSL eq 0..0
• Iksstudio Iks Menu lt *..1.9.2
• Prelc Purus eq 0..0
• Janwyl Hooked Editable Content eq 0..0
• Mdedev Run Contests, Raffles, and Giveaways with ContestsWP lt *..1.9.0
• Themeythemes Post Carousel Divi lt *..1.1.2
• Anasbinmukim MailChimp Manager eq 0..0
• Premmerce Permalink Manager for WooCommerce lt *..2.3.5
• Ivacy Secure IP Logins eq 0..0
• Kylegilman Videopack lt *..4.7.4
• Premmerce WooCommerce Customers Manager lt *..1.1.13
• WPVibes Dynific Addons for Elementor (formerly AnyWhere Elementor) lt *..1.2.5
• Badhonrocks Divi Torque Lite lt *..3.5.0
• Elbisnero Events Calendar Registration eq 0..0
• Saadiqbal Rocket Maintenance Mode & Coming Soon Page lt *..4.3
• H3technologies WordPress WooCommerce Sync for Google Sheet eq 0..0
• Pootlepress Easy Smooth Scroll Links lt *..2.23.1
• Sj O Page Builder Gutenberg Blocks eq 0..0
• Matstars Cryptocurrency Portfolio Tracker eq 0..0
• Sebet Go Fetch Jobs (for WP Job Manager) lte *..1.7.3.2
• Sangaran Quick Affiliate Store eq 0..0
• Wpt00ls WP Tools Divi Blog Carousel lt *..1.3.0
• Koen12344 Post to Google My Business (Google Business Profile) lt *..3.0.10
• NicheAddons NicheBase lt *..1.2.2
• Webmuehle WPVisitorInfo eq 0..0
• Premmerce lt *..1.3.16
• Woopops CartPops lt *..1.4.17
• Scrollsequence lt *..1.2.4
• Kaira Elation eq 0..0
• Thecodechime Cuisine Palace eq 0..0
• Dots Product Attachment for WooCommerce lt *..2.1.3
• Master Blocks eq 0..0
• Moomooagency Product Options and Price Calculation Formulas for WooCommerce lt *..4.9.14
• Kitthemes WordPress Coupon Plugin for Bloggers and Marketers lt *..1.1.4
• Tripetto WordPress form builder plugin for contact forms, surveys and quizzes lt *..5.3.1
• Mumarym1985 Widgets on Pages and Posts eq 0..0
• WordPlus Better Messages eq 0..0
• Wpgeniuz SheetPress eq 0..0
• Olezhyk5 Advanced Custom Fields options import/export eq 0..0
• Fullworks Quick Paypal Payments lt *..5.7.22
• Chillichalli Tarot Card Oracle lt *..1.0.6
• Cloudsponge Better Sharing lte *..1.7.1
• Intoxstudio Restrict User Access lt *..2.2.2
• WUPO Group Attributes for WooCommerce lte *..2.0.0
• Shelob9 Nugget by Ingot eq 0..0
• Fsruslan FeedbackScout eq 0..0
• Deothemes Arendelle lt *..1.1.3
• Boltonstudios Easy Zillow Reviews lt *..1.4.1
• Janthielemann Battle Suit for Divi eq 0..0
• Jkohlbach Store Toolkit lt *..2.3.4
• Weconnectcode WCC SEO Keyword Research eq 0..0
• Zeetheme Elements for LifterLMS eq 0..0
• Commercepundit Custom Registration and Custom Login Forms with New Recaptcha eq 0..0
• Saadiqbal B2B Request a Quote lt *..1.4.9
• Mohammedrezq Wadi Survey eq 0..0
• Atakanoz Performance Kit eq 0..0
• Dovyp Page Builder for Gutenberg eq 0..0
• Gkher/ Impexium Single Sign On eq 0..0
• XplodedThemes XT Quick View for WooCommerce lt *..1.9.6
• Josevega Live Drag and Drop Builder for Contact Form 7 lt *..1.2.4
• NicheAddons Primary Addon for Elementor lt *..1.5.2
• Jaydeep-nimavat JDs Portfolio eq 0..0
• Mbrown24 TwentyFourth WP Scraper eq 0..0
• Creativethemeshq Blocksy Companion lt *..1.8.20
• Kartikparmar/ WordPress Google Translate lt *..1.2
• Darell Hasium lt *..1.6.5
• Marviorocha Station Pro eq 0..0
• StellarWP Event Tickets and Registration lt *..5.3.0.1
• Kaggdesign Gateway for PayLate on WooCommerce lte *..1.4
• Pagup Auto SEO META keywords (META tags keywords) optimization + WooCommerce lt *..1.0.4
• Co2ok ClimateClick lte *..1.0.9.21
• Premmerce SEO for WooCommerce lt *..2.1.5
• Saadiqbal Wholesale for WooCommerce lt *..1.6.1
• Ldninjas/ Frontend group restriction for LearnDash eq 0..0
• Jetixwp Really Simple Featured Video lte *..0.5.1
• Fullworks Display Eventbrite Events lt *..4.4.8
• XplodedThemes XT Floating Cart for WooCommerce lt *..2.6.3
• Wplegalpages Cookie Banner for GDPR / CCPA lt *..2.1.1
• Milmor WP SPID Italia lt *..2.3.5
• Bycrik Tiered Pricing Table for WooCommerce lt *..2.6.1
• Codexonics Prime Mover lt *..1.5.0
• Vernal Replyable lt *..2.2.9
• Webmuehle Court Reservation lt *..1.7.0
• Jurski VO Store Locator eq 0..0
• Fullworks Get Directions Map lt *..2.15.8
• Premmerce Redirect Manager lt *..1.0.7
• Snazzythemes SnazzyAdmin WP Admin Theme eq 0..0
• Deothemes Amela lt *..1.0.5
• Javmah Woocommerce Customers Order History lt *..5.2.1
• Lynn999 EthPress lt *..1.5.1
• Dangub86 Ant Admin Notices for Team eq 0..0
• Josevega Bulk Edit Coupons for WooCommerce lt *..1.3.28
• Mattpramschufer Pay For Post with WooCommerce lt *..3.0.9
• Alex-ye bbResolutions eq 0..0
• Passionatebrains AWCA lt *..3.0.1
• Cliffpaulick TK SmugMug Slideshow Shortcode eq 0..0
• WPChill Lightbox lt *..1.1.18
• Cebbi Unakit lt *..1.2.4.2
• MojofyWP WP Affiliate Disclosure lt *..1.2.3
• Interfacelab Media Cloud for Bunny CDN, Amazon S3, Cloudflare R2, Google Cloud Storage, DigitalOcean and more lt *..4.3.1
• Rafacarvalhido RaCar Clear Cart for WooCommerce lt *..1.2.3
• Litonice13 WP Disable Sitemap lt *..1.0.4
• Davidanderson Internal Link Juicer lt *..1.3.0
• Munirkamal Block Slider lt *..2.0.0
• Milukove Pinblocks eq 0..0
• Ronena100 Contact Widgets For Elementor all the contact links you need in one place eq 0..0
• Tickera lt *..3.4.9.2
• bPlugins StreamCast lt *..2.1.4
• Johnc1979 Sticky add to cart for Woo eq 0..0
• BlockyPage eq 0..0
• Maciejbak85 Pro Broken Links Maintainer eq 0..0
• Sorsawo WP School Calendar lt *..3.6
• ListPlus eq 0..0
• WalkerWP Walker Core lt *..1.1.8
• Patrickposner Agy lt *..4.3.1
• Ggedde Modern Designs for Gravity Forms eq 0..0
• RankBear eq 0..0
• StaxWP STAX Header Builder lt *..1.3.6
• Fastaf/ Fast Checkout for WooCommerce lt *..1.1.17
• Boriscolombier/ WooCommerce PayPlug eq 0..0
• Alphabposervice Easy Code Snippets lt *..1.0.1
• W3SCloud Contact Form 7 to Zoho CRM lt *..2.1.0
• ElementInvader Widget Detector for Elementor lt *..1.2.0
• Pagup Add Tiktok Pixel for Tiktok ads (+Woocommerce) lt *..1.2.2
• Gowebsmarty WP Encryption lt *..5.7.10
• WordPlus Better Messages lt *..1.0.7
• Alleythemes Alley Business Toolkit lt *..1.1.8
• Premmerce Product Filter for WooCommerce lt *..3.6.2
• Pippozanardo WP Search Filter eq 0..0
• Alphabposervice Easy Post Views Count lt *..1.0.5
• Dotrex Power Ups for Elementor lt *..1.2.2
• Dvizhenia Social Kit eq 0..0
• Pluginandplay Post Slider and Post Carousel with Post Vertical Scrolling Widget lt *..2.1.2
• Mhmrajib HM Multiple Roles lt *..1.6
• Multicollab Team Collaboration & Content Workflow Plugin for WordPress Editorial Teams lt *..2.0.4
• WPSAAD Image Alt Text Manager lt *..1.5.0
• Premmerce Product Search for WooCommerce lt *..2.2.3
• Sovstack Security Safe lt *..2.4.4
• Josevega Bulk Edit Products for WooCommerce lt *..1.7.13
• Danielealessandra Da Reactions lt *..3.20.2
• Wpscripts Food Store lt *..1.4
• Thijzie Abeta Link PunchOut lte *..0.4
• jav's – WooCommerce and Trello integration WooTrello lt *..2.3.1
• Page Builder Sandwich lt *..4.5.5
• Switcorp WP Sessions Time Monitoring Full Automatic lt *..1.0.6
• Pasyuk WoowGallery lt *..1.1.9
• Upfiv WordPress Auto SEO Plugin eq 0..0
• Wpsoul Greenshift lt *..1.1.6
• NicheAddons Restaurant & Cafe Addon for Elementor lt *..1.4.6

Fixed in

• Dashlabsltd YASR 2.0.2
• NicheAddons Events Addon for Elementor 1.9.8
• Dots Fraud Prevention For WooCommerce and EDD 2.1.0
• Wpengine Gutenberg Blocks 2.6.8
• Bouncingsprout Ultimeter 2.7.6
• Pootlepress Pootle Pagebuilder 5.7.1
• Powerfulwp Local Delivery Drivers for WooCommerce 1.8.5
• Josevega WP Required Taxonomies 1.1.8
• Wisersteps Streak CRM For Gmail For Contact Form 7 1.0.9
• Dots Product Size Charts Plugin for WooCommerce 2.2.3
• Setka A no-code page builder for beautiful performance-based content 2.1.17
• bPlugins Panorama 1.0.8
• Janwyl Bulk Attachment Download 1.3.5
• Premmerce Wholesale Pricing for WooCommerce 1.1.8
• Dreamfox Payment Gateway Per Product for WooCommerce 3.1.6
• Daigo75 EU VAT Assistant for WooCommerce 2.0.28.220224
• Eedee WordPress Slider Block Gutenslider 5.7.0
• Surbma HuCommerce | Magyar kiegészítések WooCommerce webáruházakhoz 30.3.0
• bPlugins YT Player 1.5.1
• Whiteshadow Error Log Monitor 1.7.1
• Premmerce Multi-currency for Woocommerce 2.3.2
• Mvvapps/ Booking Addon for WooCommerce 4.2.0
• Saadiqbal WC Shop Sync 4.2.1
• Passionatebrains AEH Speed Optimization 2.6
• ThemeKraft All in One Invite Codes 1.0.13
• Dots Dynamic Pricing and Discount Rules for WooCommerce 2.2.3
• WordPlus Better Messages 1.9.9.170
• Wpt00ls Grid & Styler For Contact Form 7 And Divi 1.4.1
• Dgwyer Simple Sitemap 3.5.5
• bPlugins Super Video player 1.6.11
• Mhmrajib WP Books Gallery 3.6
• Damian-gora FiboSearch 1.17.0
• Stevejburge Tag Groups is the Advanced Way to Display Your Taxonomy Terms 1.43.10.1
• Prasadkirpekar WP Free SSL 1.2.7
• Badhonrocks Styler Mate for Contact Form 7 1.3.0
• StreamWeasels Twitch Integration 1.3.4
• Pagup MOBILOOK 1.2.4
• StellarWP Bookit 2.2.9
• EthereumICO 2.3.11
• Saadiqbal WP Contact Slider 2.4.5
• Ivan Paulin Country Based Payments for WooCommerce 1.4.1
• WPChill Filr 1.2.1
• NicheAddons Elasta 1.0.8
• Interactivegeomaps MapGeo 1.5.4
• Wpdever WP Notification Bell 1.3.13
• Melapress Activity Log For MainWP 1.7.1
• Josevega Bulk Edit and Create User Profiles 1.5.13
• Litonice13 Master Accordion ( Former WP Awesome FAQ Plugin ) 4.1.8
• Wpdive Better Addons for Elementor 1.3.1
• Livemesh Addons by Elementor 7.1.4
• Nitin247 Place Order Without Payment for WooCommerce 2.2
• Boriscolombier/ STEWoo 1.2.4
• Ultimate Blocks 2.4.13
• Pagup Bulk Auto Image Title Attribute (Image Title tag) optimizer (Image SEO) 1.2.3
• Princeahmed WP Radio 3.1.4
• Blackandwhitedigital BookPress 1.2.3
• WPChill Qyrr 0.8
• Wpeka-club WordPress Directory Plugin For Business Listings 1.4.5
• Equalize Digital Accessibility Checker 1.2.8
• BlockSpare 2.0.1
• Nasirahmed Forms to Zapier, Integromat, IFTTT, Workato, Automate.io, elastic.io, Built.io, APIANT, Webhook 1.1.9
• MojofyWP Product Carousel For WooCommerce 1.0.9
• Pagup Better Robots.txt 1.4.4
• Elliotvs Coupon Affiliates 4.16.4
• Shabti Frontend Admin by DynamiApps 3.3.33
• Ibenic Simple Giveaways 2.42.1
• Wpt00ls Masonry Gallery & Posts For Divi (WP Tools) 3.1.2
• Bandido Ukrposhta 1.6.18
• Annastaa annasta Filters for WooCommerce 1.5.0
• StellarWP The Events Calendar 5.14.0.4
• Josevega WP Page Templates 1.1.13
• Ggwicz Product Customer List for WooCommerce 3.0.0
• WP Moose 1.0.1
• Samdani Team Members 1.1.0
• Jwebsol Floating Social Share Icons and Social Share buttons 3.6.0
• Co2ok South Pole 1.0.2.0
• Plugins360 Automatic YouTube Gallery 1.6.5
• Nitin247 Thank You Page for WooCommerce 3.1
• 5starplugins Marijuana Age Verify 1.3.1
• Shabti Frontend Admin 3.3.33
• Matthias-reuter SV Tracking Manager 1.8.02
• Saadiqbal WP Easy Pay 4.0.2
• BdThemes Prime Slider 2.7.0
• ThemeKraft Post Form 2.6.3
• Wpt00ls WP Tools Divi Product Carousel 1.5.0
• Aharonyan Guest posting / Frontend Posting / Front Editor 3.4.1
• Bfintal Stackable 3.1.5
• Seezee Five-Star Ratings Shortcode 1.2.39
• WPKube CAPTCHA 4WP 7.0.5
• Premmerce Wishlist for WooCommerce 1.1.8
• Wordpresschef Salon Booking System 7.6.3
• Surbma | GDPR Proof Cookie Consent & Notice Bar 17.5.3
• Princeahmed Live TV Player 1.2.3
• Litonice13 WP Adminify 2.0.5
• ThemeKraft TK Google Fonts GDPR Compliant 2.2.1
• Starfishwp Starfish Review Generation & Marketing for WordPress 3.0.26
• NicheAddons Education Addon for Elementor 1.2
• Matthias-reuter SV Proven Expert 1.8.01
• Wpeka-club SurveyFunnel 1.1.3
• PluginsWare Advanced Classifieds & Directory Pro 1.8.8
• Smartwpress Music Player for Elementor 1.5.5
• Ethereumicoio Cryptocurrency Product for WooCommerce 3.14.6
• Themeythemes Overlay Image Divi Module 1.3.2
• bPlugins Document Viewer 2.2.5
• WPVibes Addon Elements for Elementor (formerly Elementor Addon Elements) 1.11.14
• Drosendo Smart Variations Images & Swatches for WooCommerce 5.1.10
• 5starplugins Featured Images in RSS for Mailchimp & More 1.5.9
• Unitecms Unlimited Elements For Elementor 1.5.3
• WPJoli Joli Table Of Contents 1.3.9
• Zerozendesign Multi Page Auto Advance for Gravity Forms 4.3
• Mcurly Generate Images (AI) 3.3.11
• Dots Hide Shipping Method For WooCommerce 1.3.1
• Wpt00ls Ultimate Carousel For Divi 4.3.1
• Prasadkirpekar WP Meta and Date Remover 1.9.6
• Wpt00ls Image Carousel For Divi 1.5.0
• Dudo Comments Not Replied To 1.5.3
• Wisersteps Contact Form 7 1.0.5
• Alexmoss Opensea 1.0.3
• Tranzly WordPress Translation plugin for Post, Pages & WooCommerce products. Tranzly IO AI DeepL automatic WordPress Translator. 1.1.1
• Alekv Pixel Manager for WooCommerce 1.14.3
• Gowebsmarty Modern Addons for Elementor Page Builder 1.2.0
• WP Munich Blocks 0.11.0
• Mhmrajib AidWP 2.9
• Saadiqbal New User Approve 2.1
• Anssilaitila Shared Files 1.6.72
• WPBITS Addons For Elementor Page Builder 1.3.2
• Pagup WP Google Street View (with 360° virtual tour) & Google maps + Local SEO 1.0.9
• Deothemes WordPress Everse Starter Sites 1.2.1
• Litonice13 Master Addons For Elementor 1.8.5
• Versacomp Choice Payment Gateway for WooCommerce 2.0.5
• Maartenbelmans Domain Mapping System | Create Microsites with Multiple Alias Domains (multisite optional) 1.7
• Stylingwebben Order and Inventory Manager for WooCommerce 1.4.3
• Royalnavneet WP Comment Cleaner 4.3
• Webheadllc WP-Cron Status Checker 1.2.4
• Bilaltas CodeKit 2.3
• FooPlugins Gallery by FooGallery 2.1.34
• Alphabposervice Easy Newsletter Signups 1.0.4
• Mikewire Rocksolid Announcement & Notification Banner 3.1.0
• Josevega Product Country Restrictions for WooCommerce 1.13.0
• Shamim51 Front End PM 11.3.4
• XplodedThemes XT Points & Rewards for WooCommerce 1.4.3
• ThemeLocation Widgets for WooCommerce Products on Elementor 1.0.9
• Mohsinoffline NotifSMS 1.3.7
• Cleverplugins Security Ninja 5.135
• Damian-gora Justified Gallery 1.5.1
• Daniyalahmedk Fuse Social Floating Sidebar 5.4.3
• WP-HR Manager 3.0.3
• CoderPress Emails Blacklist for Everest Forms 1.0.4
• Plugins360 All-in-One Video Gallery 2.5.4
• ThemeLocation Remove Add to Cart WooCommerce 1.4.3
• Theafricanboss Checkout with Zelle on Woocommerce 2.0
• Wpt00ls Divi Gravity Forms (WP Tools) 6.6.3
• Deothemes Everse 1.8.6
• Wp-making Rest Routes 4.24.0
• Pagup Add Pinterest conversion tags for Pinterest Ads + Site verification 1.2.3
• Javmah WPGSI 3.6.1
• Princeahmed File Manager for Google Drive 1.1.0
• Deothemes Nokke 1.0.11
• Josevega Customers Table for WooCommerce 1.0.8
• codeSavory Knowledge Base documentation & wiki plugin 2.15.14
• Webba-agency Easy Appointment Booking & Scheduling System 4.2.18
• Pmbaldha/ ACF for WooCommerce Product 1.8
• bPlugins 3D Viewer 1.2.7
• WPChill Gallery PhotoBlocks 1.2.6
• Themeisle Redirection for Contact Form 7 2.5.0
• Muhammad-rehman WP Photo Effects 1.2.1
• Dots Extra Fees for WooCommerce 3.8.2
• Princeahmed Podcast Box 1.0.2
• WPChill Passster 3.5.5.2
• Powerfulwp Gift Message for WooCommerce 1.6.0
• InfornWeb Blog Designer Pack 2.3.1
• Jburleigh1 Broadcast Lite 2.0.3
• FooPlugins Notification Bar, Announcement and Cookie Notice WordPress Plugin 2.1.15
• Essekia Tablesome Table 0.6.7
• Wpwebinfotech Product Image Watermark for Woo 1.0.4
• Nasirahmed AFI 1.49.0
• Wpconedev ConeBlog 1.4.6
• Linekal Under Construction 4.0
• Toddhalfpenny Widgets on Pages 1.6.0
• Dejanmarkovic WordPress Buffer 2020.1.0
• Intoxstudio Content Aware Sidebars 3.17.2
• Sonalsinha21 SKT Templates 4.3
• Frenify Categorify 1.0.5
• Vinod-dalvi Ivory Search 5.4.4
• Pagup Add Twitter Pixel for Twitter ads 1.0.4
• XplodedThemes XT Variation Swatches for WooCommerce 1.8.1
• KaizenCoders URL Shortify 1.5.11
• Mohsinoffline Pledged Plugins Secure Gateway for Authorize.net and WooCommerce 5.1.27
• ThemeKraft BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages 3.4.2
• Mte90 Glossary 2.1.8
• Josevega WP Frontend Admin 1.17.0.4
• Bouncingsprout Block, Suspend, Report for BuddyPress 3.3.3
• Takanakui Menu Image, Icons made easy 3.0.6
• XplodedThemes XT Ajax Add To Cart for WooCommerce 1.0.4
• Ethereumicoio Ether and ERC20 tokens WooCommerce Payment Gateway 4.12.9
• Mvvapps/ Chat Button- Leads and Order over Chat 1.6.1
• Dreamfox Shipping Gateway Per Product for WooCommerce 2.0.4
• Deothemes Purosa 1.1.0
• Tauhidpro NicheTable 2.2.3
• Ankitmaru Advanced Page Visit Counter 6.0.0
• Dots Digital Goods (Checkout Field Editor) for WooCommerce Checkout 3.6.4
• Cleverplugins SEO Booster 3.8.5
• Fullworks Stop Contact Form 7 Spam & WPForms Spam 1.3.2
• Beeneeb Insert or Embed Articulate Content into WordPress 4.3000000016
• Saadiqbal APPExperts 1.2.2
• BdThemes Ultimate Post Kit Addons for Elementor 2.9.1
• Pootlepress Caxton 1.30.0
• BlockMeister 3.0.5
• MantraBrain Yatri Tools 1.1.3
• Tickera Restrict 2.1.9
• Dots Flat Rate Shipping Method for WooCommerce 4.0.3
• Melapress WP Activity Log 4.4.0
• Patrickgarman Simple Feature Requests Free 2.2.4
• Josevega Bulk Edit Categories and Tags 1.5.23
• Saadiqbal License Manager for WooCommerce 2.2.6
• Skyminds Sky Login Redirect 3.6.0
• Passionatebrains GA4WP 1.3
• Lukeseager Persistent Login 2.0.0
• Pagup Add Linkedin insight tags for Linkedin ads 1.2.4
• Mihail-barinov Share This Image 1.67
• Sjaved Easy Social Feed 6.3.4
• Deothemes Meridia 2.2.7
• Tobias Conrad WebinarIgnition 2.8.12
• Wpmagics Delete Posts automatically 2.1.2
• Livemesh WPBakery Page Builder Addons by Livemesh 2.9.2
• Wptb WP Table Builder 1.3.16
• Princeahmed Radio Player 1.0.8
• InfornWeb Logo Showcase 2.0.3
• Premmerce Variation Swatches for WooCommerce 1.2.1
• Dotrex PowerFolio 2.1.7
• SSL Atlas 1.1.1
• GalleryCreator Mixed Media Gallery Blocks 2.3.6
• Maltathemes Easy TikTok Feed 1.1.1
• Pagup Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO) 1.4.5.0
• Svovaf Rating-Widget 3.1.4
• RebelCode Spotlight Social Feeds 0.10.2
• Gowebsmarty Go Viral 1.8.0
• Tobias Conrad WOW Styler for CF7 1.4.2
• Premmerce User Roles 1.0.11
• Tonyzeoli Radio Station by netmix® 2.4.0.6
• Saadiqbal Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program 2.4.3.1
• Greenjaymedia SEO Audit 1.2.5
• WP Travel Engine 5.3.8
• Takanakui WP Mobile Menu 2.8.2.7
• Syntactics eaSYNC Booking 1.1.10
• Theeventscalendar WP Conference Schedule 1.1.0
• Mte90 Strumenti Partita IVA per Woocommerce 1.3.23
• Premmerce Brands for WooCommerce 1.2.12
• Ethereumicoio Ethereum Wallet 4.0.9
• Limbcode Limb Gallery | Create Beautiful Image & Video Galleries 1.5.2
• Peterschulznl Code Manager 1.0.14
• CoderPress Coinbase Commerce 1.4.1
• Wpmoose Villar 1.0.8
• Uriahs-victor Kikote 1.4.5
• Meowcrew Age Verification Screen for WooCommerce 1.0.1
• Dots Enhanced Ecommerce Google Analytics for WooCommerce 3.6.3
• WPJoli Joli FAQ SEO 1.0.4
• Dots Mass Pages/Posts Creator 2.1.5
• Hiddenpearls Custom Login Page Customizer 2.1.8
• OceanWP Ocean Extra 1.9.4
• ProfilePress Membership Team kk Star Ratings 5.2.9
• Stevehenty Drop Shadow Boxes 1.7.4
• Wpt00ls FAQ Manager For Divi, Gutenberg Block & Shortcode 5.4.1
• Pagup Ads.txt & App-ads.txt Manager for WordPress 1.1.7.0
• Saadiqbal Quick Contact Form 8.0.2
• Glowlogix WP Frontend Profile 1.2.5
• Dgwyer SVG Flags 0.9.6
• InfornWeb Post List Designer 2.1.7
• Pagup VidSEO 1.2.4
• Dots Shipping Method Display Style for WooCommerce 3.7.5
• WProyal Royal Addons for Elementor 1.3.33
• Josevega Bulk Edit Posts and Products in Spreadsheet 2.24.13
• Lkoudal Delete Duplicate Posts 4.7.5
• Andyabelow Media Library File Download 1.1
• Cadudecastroalves WP Link Bio 1.4.5
• Pagup Automatic Internal Links for SEO by Pagup 1.0.4
• Cyberhobo Geo Mashup 1.13.6
• Tobias Conrad Builder for WooCommerce product reviews shortcodes 1.0.17
• Anssilaitila Contact List 2.9.50
• Saadiqbal Post Snippets 3.1.7
• Shawoninfo SocialMark 2.0.5
• Mnelson4 Print My Blog 3.11.4
• WP Delicious 1.3.5
• Blackandwhitedigital TreePress 2.0.21
• Nitin247 Product Author for WooCommerce 1.0.3
• Imtiazrayhan WP Coupons and Deals 3.1.12
• Spartac Feedpress Generator 1.2.0
• WPVibes Form Vibes 1.4.3
• Dots Banner Management, Product Slider, Product Carousel for WooCommerce 2.2.3
• Essekia Helpie FAQ 1.7.7
• Livemesh SiteOrigin Widgets 2.8.3
• Livemesh Addons for Beaver Builder 2.8.4
• Closetechnology Connect WooCommerce Shop to ERP/CRM, Verifactu and EU/VAT Compliance 2.1
• Infosatech RevivePress 1.3.1
• Invisnet WP fail2ban 4.4.0.2
• Buttonizer 2.6.3
• Brightvesseldev Quick Event Manager 9.2.17
• WPChill Image Photo Gallery Final Tiles Grid 3.5.5
• FooPlugins Lightbox & Modal Popup WordPress Plugin 2.7.17
• Peterschulznl WP Data Access 5.1.4
• Kaira StoreCustomizer 2.3.8
• Mhmrajib TopNewsWp 2.0
• Danieliser User Menus 1.2.9
• Webheadllc Contact Form 7 Multi-Step Forms 4.1.91
• 5starplugins Easy Age Verify 1.6.1
• Brandonfire Blocked in China | Check if your site is available in the Chinese mainland 1.0.3
• Josevega Disable Payment Methods based on cart conditions for WooCommerce 1.13.1.1
• Iksstudio Iks Menu 1.9.2
• Mdedev Run Contests, Raffles, and Giveaways with ContestsWP 1.9.0
• Themeythemes Post Carousel Divi 1.1.2
• Premmerce Permalink Manager for WooCommerce 2.3.5
• Kylegilman Videopack 4.7.4
• Premmerce WooCommerce Customers Manager 1.1.13
• WPVibes Dynific Addons for Elementor (formerly AnyWhere Elementor) 1.2.5
• Badhonrocks Divi Torque Lite 3.5.0
• Saadiqbal Rocket Maintenance Mode & Coming Soon Page 4.3
• Pootlepress Easy Smooth Scroll Links 2.23.1
• Wpt00ls WP Tools Divi Blog Carousel 1.3.0
• Koen12344 Post to Google My Business (Google Business Profile) 3.0.10
• NicheAddons NicheBase 1.2.2
• Premmerce 1.3.16
• Woopops CartPops 1.4.17
• Scrollsequence 1.2.4
• Dots Product Attachment for WooCommerce 2.1.3
• Moomooagency Product Options and Price Calculation Formulas for WooCommerce 4.9.14
• Kitthemes WordPress Coupon Plugin for Bloggers and Marketers 1.1.4
• Tripetto WordPress form builder plugin for contact forms, surveys and quizzes 5.3.1
• Fullworks Quick Paypal Payments 5.7.22
• Chillichalli Tarot Card Oracle 1.0.6
• Intoxstudio Restrict User Access 2.2.2
• Deothemes Arendelle 1.1.3
• Boltonstudios Easy Zillow Reviews 1.4.1
• Jkohlbach Store Toolkit 2.3.4
• Saadiqbal B2B Request a Quote 1.4.9
• XplodedThemes XT Quick View for WooCommerce 1.9.6
• Josevega Live Drag and Drop Builder for Contact Form 7 1.2.4
• NicheAddons Primary Addon for Elementor 1.5.2
• Creativethemeshq Blocksy Companion 1.8.20
• Kartikparmar/ WordPress Google Translate 1.2
• Darell Hasium 1.6.5
• StellarWP Event Tickets and Registration 5.3.0.1
• Pagup Auto SEO META keywords (META tags keywords) optimization + WooCommerce 1.0.4
• Premmerce SEO for WooCommerce 2.1.5
• Saadiqbal Wholesale for WooCommerce 1.6.1
• Fullworks Display Eventbrite Events 4.4.8
• XplodedThemes XT Floating Cart for WooCommerce 2.6.3
• Wplegalpages Cookie Banner for GDPR / CCPA 2.1.1
• Milmor WP SPID Italia 2.3.5
• Bycrik Tiered Pricing Table for WooCommerce 2.6.1
• Codexonics Prime Mover 1.5.0
• Vernal Replyable 2.2.9
• Webmuehle Court Reservation 1.7.0
• Fullworks Get Directions Map 2.15.8
• Premmerce Redirect Manager 1.0.7
• Deothemes Amela 1.0.5
• Javmah Woocommerce Customers Order History 5.2.1
• Lynn999 EthPress 1.5.1
• Josevega Bulk Edit Coupons for WooCommerce 1.3.28
• Mattpramschufer Pay For Post with WooCommerce 3.0.9
• Passionatebrains AWCA 3.0.1
• WPChill Lightbox 1.1.18
• Cebbi Unakit 1.2.4.2
• MojofyWP WP Affiliate Disclosure 1.2.3
• Interfacelab Media Cloud for Bunny CDN, Amazon S3, Cloudflare R2, Google Cloud Storage, DigitalOcean and more 4.3.1
• Rafacarvalhido RaCar Clear Cart for WooCommerce 1.2.3
• Litonice13 WP Disable Sitemap 1.0.4
• Davidanderson Internal Link Juicer 1.3.0
• Munirkamal Block Slider 2.0.0
• Tickera 3.4.9.2
• bPlugins StreamCast 2.1.4
• Sorsawo WP School Calendar 3.6
• WalkerWP Walker Core 1.1.8
• Patrickposner Agy 4.3.1
• StaxWP STAX Header Builder 1.3.6
• Fastaf/ Fast Checkout for WooCommerce 1.1.17
• Alphabposervice Easy Code Snippets 1.0.1
• W3SCloud Contact Form 7 to Zoho CRM 2.1.0
• ElementInvader Widget Detector for Elementor 1.2.0
• Pagup Add Tiktok Pixel for Tiktok ads (+Woocommerce) 1.2.2
• Gowebsmarty WP Encryption 5.7.10
• WordPlus Better Messages 1.0.7
• Alleythemes Alley Business Toolkit 1.1.8
• Premmerce Product Filter for WooCommerce 3.6.2
• Alphabposervice Easy Post Views Count 1.0.5
• Dotrex Power Ups for Elementor 1.2.2
• Pluginandplay Post Slider and Post Carousel with Post Vertical Scrolling Widget 2.1.2
• Mhmrajib HM Multiple Roles 1.6
• Multicollab Team Collaboration & Content Workflow Plugin for WordPress Editorial Teams 2.0.4
• WPSAAD Image Alt Text Manager 1.5.0
• Premmerce Product Search for WooCommerce 2.2.3
• Sovstack Security Safe 2.4.4
• Josevega Bulk Edit Products for WooCommerce 1.7.13
• Danielealessandra Da Reactions 3.20.2
• Wpscripts Food Store 1.4
• jav's – WooCommerce and Trello integration WooTrello 2.3.1
• Page Builder Sandwich 4.5.5
• Switcorp WP Sessions Time Monitoring Full Automatic 1.0.6
• Pasyuk WoowGallery 1.1.9
• Wpsoul Greenshift 1.1.6
• NicheAddons Restaurant & Cafe Addon for Elementor 1.4.6

Not sure whether and how you are affected? Ask a question about this vulnerability

Metrics

Detection rules

No NEOSEC detection rule is available for this vulnerability yet.

Classification under NIS2 and CRA

Rule-based classification from exploitation status and severity. It does not replace a case-by-case assessment.

NIS2

NIS2 is EU Directive (EU) 2022/2555 to raise the level of cybersecurity across the Union. It substantially broadens obligations compared with the first NIS directive: more sectors, mandatory risk management, staged reporting duties and personal accountability of senior management.

Read in glossary

Handle the vulnerability in regular vulnerability handling under Art. 21(2)(e) NIS2.

CRA

The CRA is EU Regulation (EU) 2024/2847 setting horizontal cybersecurity requirements for „products with digital elements“ — from industrial controllers and software to connected consumer devices. For the first time manufacturers must ensure security across the entire product lifecycle, handle vulnerabilities and provide security updates.

Read in glossary

From 11.12.2027, Annex I Part II CRA requires manufacturers of affected products with digital elements to handle vulnerabilities without delay and provide security updates.

ISO/IEC 27001

ISO/IEC 27001 is the internationally leading standard for an information security management system (ISMS). It describes a risk-based, process-oriented framework to systematically plan, implement, review and improve information security.

Read in glossary

Control A.8.8, management of technical vulnerabilities: assess relevance to your systems, plan remediation and keep evidence.

Description

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.

Source: cvelistv5, NVD (NIST)

Vendors and products

• 5 Star Plugins Easy Age Verify
• Aharonyan Guest Posting / Frontend Posting / Front Editor – Wp Front User Submit
• Alekv Pixel Manager For Woocommerce – Conversion Tracking, Google Ads, Ga4, Tiktok, Dynamic Remarketing
• Anssilaitila Shared Files – Frontend File Upload Form & Secure File Sharing
• Badhonrocks Divi Torque Lite – Divi Theme, Divi Builder & Extra Theme
• Bandido
• BdThemes Prime Slider – Addons For Elementor
• Bfintal Stackable – Page Builder Gutenberg Blocks
• Black and White
• Blockspare Blockspare — News, Magazine And Blog Addons For (gutenberg) Block Editor
• bPlugins
• Brightvesseldev Quick Event Manager

Weakness classes (CWE)

• CWE-862Missing Authorization

  Class

  The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

  Entry at MITRE CWE-862

References & sources

• wordfence.comthreat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bc…
• wpscan.comvulnerability/6dae6dca-7474-4008-9fe5-4c62b9f12d0a
• freemius.comblog/managing-security-issues-open-source-freemius-sdk-security…
• wpdirectory.netsearch/01FWPVWA7BC5DYGZHNSZQ9QMN5
• wpdirectory.netsearch/01G02RSGMFS1TPT63FS16RWEYR
• web.archive.orgweb/20220225174410/https://www.pluginvulnerabilities.com/2022/0…