Freemius SDK <= 2.4.2 - Missing Authorization Checks
Published Oct 16, 2024 · Updated Apr 8, 2026
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.
CVSS severityUnavailable
UnscoredEPSS probability0.44%
Next 30 days · Sep 16, 2026Known exploitationUnconfirmed
Based on sourced intelligenceHinoki checkNot available
Coverage for this vulnerabilitySummary
What happened
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.
The record
- CVE
- CVE-2022-4974
- Published
- Oct 16, 2024
- Updated
- Apr 8, 2026
- Vendor
- theDotstore
- Product
- Advanced Menu Manager Pro for WordPress
- Classifications
- Unavailable
- Attack vector
- Unavailable
- Privileges
- Unavailable
Timeline
How it unfolded
- Oct 16, 2024CVE publishedPublication date reported by the CVE source.
- Apr 8, 2026Record updatedLatest update available in the CVE record.
Exploitability
Present is not the same as exploitable
Compare your product and version with the public record. A matching version still requires validation against your environment.
Is a vulnerable build present?
Compare these published version ranges with your installed build and any vendor patches.
- Affected versionversion=0
What conditions does exploitation require?
Attack vectorUnavailable in this record.
Required privilegesUnavailable in this record.
What is affected?
theDotstore · Advanced Menu Manager Pro for WordPressversion=0
Bouncingsprout Studio · Block, Suspend, Report for BuddyPressversion=0 <3.3.3
bPlugins · Super Video Playerversion=0 <1.6.11
cromer12 · Easy Prayerversion=0
Michael Nelson · Print My Blogversion=0 <3.11.4
Ivacy · Secure IP Loginsversion=0
GloriousThemes · GloriousThemes Starter Sitesversion=0
Premmerce · Premmerce Wishlist for WooCommerceversion=0 <1.1.8
Alpha BPO · Easy Math Captcha for CF7version=0
Pagup · Add Tiktok Pixel for Tiktok ads (+Woocommerce)version=0 <1.2.2
Ivan Chernyakov · LawPress – Law Firm Website Managementversion=0
WP Tools · Masonry Gallery & Posts For Divi (WP Tools)version=0 <3.1.2
matstars · Cryptocurrency Portfolio Trackerversion=0
Divi Sumo · Divi Sumo Liteversion=0
milukove · Pinblocksversion=0
ProfilePress Membership Team · kk Star Ratingsversion=0 <5.2.9
HelpieWP · Tablesome Tableversion=0 <0.6.7
Jewel Theme · Master Accordionversion=0 <4.1.8
MojofyWP · WP Affiliate Disclosureversion=0 <1.2.3
Saleswonder Team · WebinarIgnitionversion=0 <2.8.12
Alexandre Gaboriau · Generate Images (AI) – Magic Post Thumbnailversion=0 <3.3.11
Fullworks Plugins · B2B Request a Quoteversion=0 <1.4.9
Liquid Web · Event Ticketsversion=0 <5.3.0.1
Element Invader · Widget Detector for Elementorversion=0 <1.2.0
WP Moose · Villarversion=0 <1.0.8
Pagup · Auto SEO META keywords (META tags keywords) optimization + WooCommerceversion=0 <1.0.4
Prashant Baldha · Featured Products First for WooCommerceversion=0
Kartechify · Extend Filter Products By Price Widgetversion=0
wpmediadownload · Media Library File Downloadversion=0 <1.1
Nitin Prakash · Product Author for WooCommerceversion=0 <1.0.3
WPSAAD · Image Alt Text Managerversion=0 <1.5.0
Premmerce · Premmerce WooCommerce Customers Managerversion=0 <1.1.13
MapGeo · MapGeo – Interactive Geo Mapsversion=0 <1.5.4
Hossni Mubarak · HM Multiple Rolesversion=0 <1.6
Setka · Setka Editorversion=0 <2.1.17
Blue Origami Digital · WooCommerce Customer Reviews with Artificial Intelligence analyzis, with IBM Watson Tone Analyzerversion=0
Ingot LLC · Nugget by Ingotversion=0
Wadi Web · Wadi Surveyversion=0
Humble Themes · LearnMoreversion=0
Interfacelab · Media Cloudversion=0 <4.3.1
Mee Plugins · Clean Social Iconsversion=0
dam6pl · Advanced Database Replacerversion=0
Fullworks Plugins · myCredversion=0 <2.4.3.1
javmah · Woocommerce Customers Order Historyversion=0 <5.2.1
WP Moose · WP Mooseversion=0 <1.0.1
ShawonPro · SocialMark – Easy Watermark/Logo on Social Media Post Link Share Previewversion=0 <2.0.5
Tammersoft · Contact List – Online Staff Directory & Address Bookversion=0 <2.9.50
Inbound Brew · Inbound Brewversion=0
Fullworks Plugins · License Manager for WooCommerceversion=0 <2.2.6
Aelia · EU VAT Assistant for WooCommerceversion=0 <2.0.28.220224
ggedde · Modern Designs for Gravity Formsversion=0
Mohaiminul Islam · WooCommerce Upcoming Productsversion=0
theDotstore · Product Attachment for WooCommerceversion=0 <2.1.3
Penguin Initiatives · WP Author Bioversion=0
BdThemes · Ultimate Post Kitversion=0 <2.9.1
ThemeKraft · TK Google Fonts GDPR Compliantversion=0 <2.2.1
Rating-Widget, Inc. · Rating-Widget: Star Review Systemversion=0 <3.1.4
Sharaz Shahid · Focus on Reviews for WooCommerceversion=0
Rafa Carvalhido · RaCar Clear Cart for WooCommerceversion=0 <1.2.3
WPVibes · Dynific Addons for Elementorversion=0 <1.2.5
Jan Thielemann · Battle Suit for Diviversion=0
N Plugins · Price Bands for WooCommerceversion=0
Code Atlantic · User Menus – Nav Menu Visibilityversion=0 <1.2.9
Sharaz Shahid · Out of Stock Display for WooCommerceversion=0
Tropicalista · Dashy – Google Analytics advanced dashboardversion=0
NicheAddons · Primary Addon for Elementorversion=0 <1.5.2
drosendo · Smart Variations Images & Swatches for WooCommerceversion=0 <5.1.10
InfornWeb · News & Blog Designer Packversion=0 <2.3.1
Query Solutions Ltd. · Redirection for Contact Form 7version=0 <2.5.0
Premmerce · Premmerceversion=0 <1.3.16
Premmerce · Premmerce Brands for WooCommerceversion=0 <1.2.12
WP Tools · Divi Gravity Forms (WP Tools)version=0 <6.6.3
JWebSol · Floating Social Share Icons and Social Share buttons – Next Previous Post Links – FLversion=0 <3.6.0
djenh · Nitek Carousel Slider Cool Transitionsversion=0
ggwicz · Product Customer List for WooCommerceversion=0 <3.0.0
VincoIT · VIT Website Reviewsversion=0
NicheAddons · Elastaversion=0 <1.0.8
Chris Bibby · Automizy Gravity Formsversion=0
Badhonrocks · CF7 Mateversion=0 <1.3.0
WPCohort · Number Chatversion=0
Maarten Belmans · Domain Mapping Systemversion=0 <1.7
Fullworks Digital Ltd. · Quick PayPal Paymentsversion=0 <5.7.22
GS Plugins · GS Team Membersversion=0 <1.1.0
SkyMinds · Sky Login Redirectversion=0 <3.6.0
pluginandplay · Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Sliderversion=0 <2.1.2
theDotstore · Mass Pages/Posts Creatorversion=0 <2.1.5
Liquid Web · The Events Calendarversion=0 <5.14.0.4
Page Visit Counter · Advanced Page Visit Counterversion=0 <6.0.0
mumarym1985 · Widgets on Pages and Postsversion=0
WooPops · CartPopsversion=0 <1.4.17
Pagup · VidSEO – Video transcript embedding for WordPress & LLMversion=0 <1.2.4
Passionate Brains · AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimizationversion=0 <2.6
Premmerce · Premmerce Product Filter for WooCommerceversion=0 <3.6.2
WPChill · Qyrrversion=0 <0.8
WPChill · Lightbox – EverlightBox Galleryversion=0 <1.1.18
DeoThemes · Amelaversion=0 <1.0.5
Justin W Hall · LittleBot ACH for Stripe + Plaidversion=0
Sharaz Shahid · Simple Sticky Add To Cart For WooCommerceversion=0
Premmerce · Premmerce Variation Swatches for WooCommerceversion=0 <1.2.1
theDotstore · WooCommerce Banner Managementversion=0 <2.2.3
DiviFramework · Footer Plugin for Diviversion=0
Daniyal Ahmed · Fuse Social Floating Sidebarversion=0 <5.4.3
Georg Griesser · Fast WordPressversion=0
Creative Themes · Blocksy Companionversion=0 <1.8.20
Kartik Parmar · Bulk WooCommerce Category Creatorversion=0
Kyle Gilman · Videopackversion=0 <4.7.4
WP Sheet Editor · WP Required Taxonomies – Categories and Tags Mandatoryversion=0 <1.1.8
Close·technology · Connect WooCommerce Shop to ERP/CRM, Verifactu and EU/VAT Complianceversion=0 <2.1
Pagup · Ads.txt & App-ads.txt Manager for WordPressversion=0 <1.1.7.0
SnazzyThemes · SnazzyAdmin WP Admin Themeversion=0
ethereumico.io · Cryptocurrency Product for WooCommerceversion=0 <3.14.6
MojofyWP · Product Carousel For WooCommerce – WoorouSellversion=0 <1.0.9
Foxmoon · Cartoon Urlversion=0
Fullworks Plugins · WP Contact Slider – Contact Form Slider Widgetversion=0 <2.4.5
Dvizhenia · Social Kitversion=0
WPeka Club · WP Local Plusversion=0 <1.4.5
WP Legal Pages · WPLP Cookie Consentversion=0 <2.1.1
SlideDeck · SlideDeckversion=0
Kartik Parmar · WordPress Google Translateversion=0 <1.2
Damian Góra · Justified Galleryversion=0 <1.5.1
Fullworks Plugins · Rocket Maintenance Mode & Coming Soon Pageversion=0 <4.3
Hossni Mubarak · TopNewsWp – Display Tikcer News, RSS Feed Widget and Many Moreversion=0 <2.0
WP-Making · Rest Routesversion=0 <4.24.0
WP Munich · WP Munich Blocks – Gutenberg Blocks for WordPressversion=0 <0.11.0
Pagup · Bulk Auto Image Title Attributeversion=0 <1.2.3
Pagup · Add Pinterest conversion tags for Pinterest Ads + Site verificationversion=0 <1.2.3
ethereumico.io · Ether and ERC20 tokens WooCommerce Payment Gatewayversion=0 <4.12.9
WPJoli · Joli FAQ SEOversion=0 <1.0.4
Freshlight Lab · WP Mobile Menuversion=0 <2.8.2.7
InfornWeb · Post List Designer – Category Post, Recent Post, Post Listversion=0 <2.1.7
SSL Zen · SSL Zen — SSL Certificate Installer & HTTPS Redirectsversion=0 <=4.0.4
GloriousThemes · Glorious Services & Supportversion=0
Rock Solid Plugins · Announcement & Notification Banner – Bulletinversion=0 <3.1.0
ClickerVolt · ClickerVolt – Affiliate Links & Click Tracking for Performance Marketersversion=0
NicheAddons · Restaurant & Cafe Addon for Elementorversion=0 <1.4.6
MooMoo Agency · Product Options and Price Calculation Formulas for WooCommerce – Uni CPOversion=0 <4.9.14
FooPlugins · FooGalleryversion=0 <2.1.34
themeythemes · Overlay Image Divi Moduleversion=0 <1.3.2
Codeat · Glossary by Codeatversion=0 <2.1.8
Starfish Reviews LLC · Starfish Review Generation & Marketing for WordPressversion=0 <3.0.26
StaxWP · STAX Header Builderversion=0 <1.3.6
NicheAddons · Events Addon for Elementorversion=0 <1.9.8
CO2ok · South Pole: Climate action nowversion=0 <1.0.2.0
Shamim Hasan · Front End PMversion=0 <11.3.4
WiserSteps · Contact Form 7 – Capsule CRM – Integrationversion=0 <1.0.5
WP White Security · CAPTCHA 4WPversion=0 <7.0.5
The African Boss · Checkout with Cash App on EDDversion=0
bPlugins · Panoramaversion=0 <1.0.8
KaizenCoders · URL Shortifyversion=0 <1.5.11
TemplateSpare · BlockSpareversion=0 <2.0.1
Pagup · Add Twitter Pixel for Twitter adsversion=0 <1.0.4
dotrex · PowerFolio – Portfolio & Image Gallery for Elementorversion=0 <2.1.7
DEV Institute · Content Aware Sidebarsversion=0 <3.17.2
Surbma · Surbma | GDPR Proof Cookie Consent & Notice Barversion=0 <17.5.3
Fullworks Plugins · APPExperts – Mobile App Builder for WordPressversion=0 <1.2.2
Galoover · WordPress Animation Plugin – Animated Everythingversion=0
ListPlus · ListPlus – Unlimited Listing Directoryversion=0
Sajid Javed · Easy Social Feed – Social Photos Gallery and Post Feed for WordPressversion=0 <6.3.4
Avid Themes · Blog Sidebar Widgetversion=0
RebelCode · Spotlight Social Feedsversion=0 <0.10.2
Themesty · WP Sierraversion=0
Steven Henty · WP Get Personalversion=0
Muhammad Rehman · WP Photo Effectsversion=0 <1.2.1
XplodedThemes · XT Ajax Add To Cart for WooCommerceversion=0 <1.0.4
ThemeKraft · All in One Invite Codesversion=0 <1.0.13
theDotstore · Flat Rate Shipping Method for WooCommerceversion=0 <4.0.3
WP-HR Manager · WP-HR Managerversion=0 <3.0.3
BlockMeister · BlockMeister – Block Pattern Builderversion=0 <3.0.5
StreamWeasels · Broadcast Liteversion=0 <2.0.3
Serhii Pasyuk · WoowGalleryversion=0 <1.1.9
LDNinjas · Front-End Group Restriction for LearnDashversion=0
Clever Plugins · Delete Duplicate Postsversion=0 <4.7.5
Commerce Pundit · Run time Image resizingversion=0
Alpha BPO · Easy Newsletter Signupsversion=0 <1.0.4
ThemeKraft · BuddyFormsversion=0 <2.6.3
LDNinjas · Drip-Feed Content Extended for LearnDashversion=0
Fullworks Digital Ltd. · Anti-Spam Protection – No API Key, GDPR Friendlyversion=0 <1.3.2
FAST · Fast Checkout for WooCommerceversion=0 <1.1.17
InputWP · Availability Datepickerversion=0 <=2.1
ThemeLocation · Deals of the Day WooCommerceversion=0
The African Boss · Checkout with Venmo on EDDversion=0
Uriahs Victor · Kikote – Location Picker at Checkout & Google Address AutoFill Plugin for WooCommerceversion=0 <1.4.5
XplodedThemes · XT Variation Swatches for WooCommerceversion=0 <1.8.1
ahmed17 · Menu Item Schedulerversion=0
Webmühle e.U. · PopOverXYZ – Show Light Weight Beautiful Tool Tips On Any Textversion=0
CoderPress · Coinbase Commerce – Crypto Gateway for WooCommerceversion=0 <1.4.1
Salt Technologies · Shubanversion=0
The Events Calendar · WP Conference Scheduleversion=0 <1.1.0
edgegalleryplugin · WordPress Gallery Plugin – Edge Photo Galleryversion=0
WP Event Partners · WP Event Partnersversion=0 <=1.2.4
WordPress Dev Powers · WP Dev Powers – Display Screen Dimensions to Admin Pluginversion=0
Webheadcoder · WP-Cron Status Checkerversion=0 <1.2.4
DeoThemes · Nokkeversion=0 <1.0.11
Tauhidpro · NicheTableversion=0 <2.2.3
WP Cone · ConeBlog – Elementor Blog Widgetsversion=0 <1.4.6
DeoThemes · Purosaversion=0 <1.1.0
irkanu · Simple Social Page Widget & Shortcodeversion=0
Pagup · Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO)version=0 <1.4.5.0
MaltaThemes · Easy TikTok Feedversion=0 <1.1.1
Black and White Digital · BookPress – For Book Authorsversion=0 <1.2.3
Upfiv · WordPress Auto SEO Plugin – Upfiv SEO Wizardversion=0
Cadu de Castro Alves · WP Link Bioversion=0 <1.4.5
W3S Cloud Technology · W3SCloud Contact Form 7 to Zoho CRMversion=0 <2.1.0
WP Table Builder · WP Coupons and Dealsversion=0 <3.1.12
Hossni Mubarak · Books Gallery – Book Showcase, Library & Affiliate Pluginversion=0 <3.6
Livemesh Themes · Livemesh Addons for Beaver Builderversion=0 <2.8.4
KoboldSoft · KVoucherversion=0
Patrick Posner · Agy – Age verification for WooCommerceversion=0 <4.3.1
WPeka Club · SurveyFunnelversion=0 <1.1.3
Buttonizer · Buttonizer – Floating Menus, Sticky Buttons, & Popup Builderversion=0 <2.6.3
WPWeb Infotech · Product Image Watermark for Wooversion=0 <1.0.4
Dudo · Comments Not Replied Toversion=0 <1.5.3
infosatech · RevivePress – Keep your Old Content Evergreenversion=0 <1.3.1
actuaryzask · azw woocommerce file uploadsversion=0
wewp.dev · WPMailerversion=0
Darell · Hasiumversion=0 <1.6.5
WeConnectCode · WCC SEO Keyword Researchversion=0
WP Sheet Editor · WP Frontend Admin – Display WP Admin Pages in the Frontendversion=0 <1.17.0.4
WalkerWP · Walker Coreversion=0 <1.1.8
eedee · Gutensliderversion=0 <5.7.0
Melapress · Activity Log for MainWPversion=0 <1.7.1
ethereumico.io · EthereumICOversion=0 <2.3.11
mikebels · LocalSEOMapversion=0
WPVibes · Addon Elements for Elementorversion=0 <1.11.14
Close Marketing · Sync eCommerce NEOversion=0
WPChill · Image Photo Gallery Final Tiles Gridversion=0 <3.5.5
WiserSteps · Streak CRM For Gmail For Contact Form 7version=0 <1.0.9
Munir Kamal · Divi Collageversion=0
WP Tools · Divi Content Restrictorversion=0 <=1.3.0
Premmerce · Premmerce SEO for WooCommerceversion=0 <2.1.5
theDotstore · Enhanced Ecommerce Google Analytics for WooCommerceversion=0 <3.6.3
Themesei · Viralikeversion=0
Fullworks Digital Ltd. · Display Eventbrite Eventsversion=0 <4.4.8
Fullworks Plugins · Post Snippetsversion=0 <3.1.7
Danish Ali Malik · WPOptinversion=0 <=1.2.3
WP Attest · Attest LMSversion=0
Tony Hayes · AutoSave Netversion=0
WPChill · Gallery PhotoBlocksversion=0 <1.2.6
Jurski · VO Store Locator – WP Store Locator Pluginversion=0
Todd Halfpenny · Widgets on Pagesversion=0 <1.6.0
Matt Pramschufer · Pay For Post with WooCommerceversion=0 <3.0.9
mohsin.id · Secure Gateway for Authorize.net and WooCommerce by Pledged Pluginsversion=0 <5.1.27
straightvisions GmbH · SV Tracking Managerversion=0 <1.8.02
ahmed17 · CF7 Constant Contact Fields Mappingversion=0
theDotstore · WooCommerce Checkout for Digital Goodsversion=0 <3.6.4
CoderPress · Emails Blacklist for Everest Formsversion=0 <1.0.4
Tobias Conrad · Get Better Reviews for WooCommerceversion=0 <=3.0.6
Janis Elsts · Error Log Monitorversion=0 <1.7.1
DeMomentSomTres · DeMomentSomTres Grid Archiveversion=0
WP Military · Radio Player – Live Shoutcast, Icecast and Any Audio Stream Playerversion=0 <1.0.8
RiseThemes · RT Easy Builder – Advanced addons for Elementorversion=0 <=1.4
WordPlus · Better Messages – WCFM Integrationversion=0
NicheAddons · Education Addon for Elementorversion=0 <1.2
lynn999 · EthPress – Web3 Loginversion=0 <1.5.1
WordPress Dev Powers · WordPress Dev Powers – Element Selector jQuery Powers Pluginversion=0
Simple Sponsorships · Change Prices with Time for WooCommerceversion=0
JamesPark.ninja · NEXUSversion=0
WP Sheet Editor · Disable Payment Methods based on cart conditions for WooCommerceversion=0 <1.13.1.1
JetixWP Plugins · Really Simple Featured Videoversion=0 <=0.5.1
mbrown24 · TwentyFourth WP Scraperversion=0
fsruslan · FeedbackScoutversion=0
Damian Góra · FiboSearch – Ajax Search for WooCommerceversion=0 <1.17.0
David Gwyer · Simple Sitemap – Create a Responsive HTML Sitemapversion=0 <3.5.5
Gambit Technologies Inc. · Stackableversion=0 <3.1.5
Ninja Libs · Ninja Libs Amazon SESversion=0
ThemeKraft · BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pagesversion=0 <3.4.2
Ivan Paulin · Country Based Payments for WooCommerceversion=0 <1.4.1
WP Tools · Ultimate Carousel For Diviversion=0 <4.3.1
KitThemes · WordPress Coupon Plugin for Bloggers and Marketers – WP Offersversion=0 <1.1.4
gfirem · GFireM Advance Searchversion=0
WP Sheet Editor · Bulk Edit and Create User Profiles – WP Sheet Editorversion=0 <1.5.13
Digital Thrive Labs Inc. · WP Travel Engineversion=0 <5.3.8
Spartac · Feedpress Generator – External RSS Frontend Customizerversion=0 <1.2.0
DEV Institute · Restrict User Accessversion=0 <2.2.2
Netmix · Radio Stationversion=0 <2.4.0.6
DeoThemes · Everseversion=0 <1.8.6
straightvisions GmbH · SV Proven Expertversion=0 <1.8.01
WP Military · Podcast Box – Best Podcasting Plugin for WordPressversion=0 <1.0.2
WP Tools · WP Tools Divi Product Carouselversion=0 <1.5.0
Majick · WP AutoMedicversion=0
Ivory Search · Ivory Searchversion=0 <5.4.4
CleverPlugins · SEO Boosterversion=0 <3.8.5
Best Plugins WordPress · One Click Loginversion=0
Premmerce · Premmerce Redirect Managerversion=0 <1.0.7
Premmerce · Premmerce User Rolesversion=0 <1.0.11
re:Members · Impexium Single Sign Onversion=0
Tony Hayes · WP BugBotversion=0
WP Sheet Editor · Customers Table for WooCommerce: View, Search, Bulk Editorversion=0 <1.0.8
prelc · Speculorversion=0
PowerfulWP · Local Delivery Drivers for WooCommerceversion=0 <1.8.5
Dylan Kuhn · Geo Mashupversion=0 <1.13.6
dangub86 · Ant Admin Notices for Teamversion=0
Frostbourn · Responsive Social Slider Widgetversion=0
PootlePress · Easy Smooth Scroll Links – Smooth Scrolling Anchorversion=0 <2.23.1
WPCohort · Preloader for Diviversion=0
FooPlugins · FooBarversion=0 <2.1.15
Jan Thielemann · Revolution for Elementorversion=0
Nasir Ahmed · Forms to Zapier, Integromat, IFTTT, Workato, Automate.io, elastic.io, Built.io, APIANT, Webhookversion=0 <1.1.9
SebeT · WP Relevant Adsversion=0
DynamiApps · Frontend Adminversion=0 <3.3.33
Bilal TAS · CodeKit – Custom Codes Editorversion=0 <2.3
BAVOKO Tools · BAVOKO SEO Tools – All-in-One WordPress SEOversion=0
WP Tools · FAQ Manager For Divi, Gutenberg Block & Shortcodeversion=0 <5.4.1
Munir Kamal · Block Sliderversion=0 <2.0.0
Passionate Programmer Peter · WP Data Accessversion=0 <5.1.4
WP Encryption HTTPS · Modern Addons for Elementorversion=0 <1.2.0
Oloyede Jamiu · WP Group Promoterversion=0
Green Jay Media · SEO Audit – WP Site Auditorversion=0 <1.2.5
Aleksan Aharonyan · WP Front User Submit / Front Editorversion=0 <3.4.1
ThemeLocation · Widgets for WooCommerce Products on Elementorversion=0 <1.0.9
Black and White Digital · TreePress – Easy Family Trees & Ancestor Profilesversion=0 <2.0.21
Josh Kohlbach · Store Toolkit for WooCommerceversion=0 <2.3.4
Diginomy · Guestofyversion=0
Alpha BPO · Easy Code Snippetsversion=0 <1.0.1
Patrick Garman · Simple Feature Requests Free – User Feedback Boardversion=0 <2.2.4
WUPO · WUPO Group Attributes for WooCommerceversion=0 <=2.0.0
ZeeTheme · Elements for LifterLMSversion=0
xyulex · Expire tagsversion=0
wGauge · wGauge – Free Versionversion=0
TribalNerd · Multisite Robots.txt Managerversion=0
FlexiThemes · WordPress SEO Checklistversion=0
Woody Hayday · Social Gallery Liteversion=0
Anton Vanyukov · Market Exporterversion=0 <=2.0.13
Sparrow · Sparrow: Product Reviews and Ratings for WooCommerceversion=0
WP Table Builder · WP Table Builderversion=0 <1.3.16
Webba Agency · Webba Bookingversion=0 <4.2.18
WPJoli · Joli Table Of Contentsversion=0 <1.3.9
David Gwyer · SVG Flags – Beautiful Scalable Flags For All Countries!version=0 <0.9.6
SebeT · Go Fetch Jobs (for WP Job Manager)version=0 <=1.7.3.2
WP Tools · WordPress Schema Plugin For Divi, Gutenberg & Shortcodesversion=0 <=4.0.1
WP Sheet Editor · Bulk Edit Categories and Tags – Create Thousands Quickly on the Editorversion=0 <1.5.23
Daniele Alessandra · Da Reactionsversion=0 <3.20.2
dovyp · Page Builder for Gutenberg – StarterBlocksversion=0
Commerce Pundit · CP Simple Newsletterversion=0
ethereumico.io · Ethereum Walletversion=0 <4.0.9
Paul Glover · Postcode Redirectversion=0 <=4.4.1
Vernal · Replyableversion=0 <2.2.9
theDotstore · Fraud Prevention For WooCommerce and EDDversion=0 <2.1.0
WPChill · Filrversion=0 <1.2.1
MantraBrain · Yatri Toolsversion=0 <1.1.3
DeoThemes · Meridiaversion=0 <2.2.7
WP Sheet Editor · WP Page Templatesversion=0 <1.1.13
Sangaran · Quick Affiliate Storeversion=0
Halmat Ferello · WP Emailyversion=0
xyulex · TinyMCE Annotateversion=0
activity-log.com · WP Sessions Time Monitoring Full Automaticversion=0 <1.0.6
Usman Ali Qureshi · Server Info – System Health & Diagnostics Suiteversion=0
Pagup · Automatic Internal Links for SEO by Pagupversion=0 <1.0.4
popeating · Delivery for WooCommerceversion=0
Simple Sponsorships · Simple Sponsorshipsversion=0
Web Disrupt · Funnelmentalsversion=0
SmartWPress · Music Player for Elementorversion=0 <1.5.5
Commerce Pundit · Custom Registration and Custom Login Forms with New Recaptchaversion=0
Tony Hayes · ForceFieldversion=0
elbisnero · WordPress Events Calendar Registration & Ticketsversion=0
NicheAddons · NicheBaseversion=0 <1.2.2
Prashant Baldha · Email Header Footerversion=0
Oloyede Jamiu · Woo Admin Product Notesversion=0
Codeat · Strumenti Partita IVA per Woocommerceversion=0 <1.3.23
WP Tools · Image Carousel For Diviversion=0 <1.5.0
Marco Milesi · WP SPID Italiaversion=0 <2.3.5
WP Sheet Editor · Bulk Edit Coupons for WooCommerce – WP Sheet Editorversion=0 <1.3.28
PootlePress · Caxtonversion=0 <1.30.0
Anfrageformular · Anfrageformular – Multi Step Drag & Drop Formular Builder – Leadgenerierungversion=0
StreamWeasels · StreamWeasels Twitch Integrationversion=0 <1.3.4
Hossni Mubarak · AidWP – Donation & Payment Forms (Stripe Powered)version=0 <2.9
Syntactics, Inc. · eaSYNC Booking – Hotels, Restaurants & Car Rentalsversion=0 <1.1.10
mvvapps · Booking Addon for WooCommerceversion=0 <4.2.0
Bradatan Dorin · Tabs with Recommended Posts (Widget)version=0
Nashwan Doaqan · bbResolutionsversion=0
mohsin.id · NotifSMS – Notifications, OTP & 2FA for WordPressversion=0 <1.3.7
cebbi · Unakitversion=0 <1.2.4.2
XplodedThemes · XT Quick View for WooCommerceversion=0 <1.9.6
Tranzly · Tranzlyversion=0 <1.1.1
WP Encryption HTTPS · WP Encryptionversion=0 <5.7.10
Filippo Zanardo · WP Search Filterversion=0
Unlimited Elements · Unlimited Elements For Elementorversion=0 <1.5.3
Limbcode · Limb Galleryversion=0 <1.5.2
Kioken Theme · Kioken Blocksversion=0
Alex Moss · Openseaversion=0 <1.0.3
ThemeLocation · Remove Add to Cart WooCommerceversion=0 <1.4.3
WP Delicious · WP Deliciousversion=0 <1.3.5
Todd Halfpenny · Turbo Widgetsversion=0
Surbma · HuCommerce | Magyar kiegészítések WooCommerce webáruházakhozversion=0 <30.3.0
Oleh Odeshchak · Widget for Contact form 7version=0
Saleswonder Team · WOW Styler for CF7version=0 <1.4.2
Fullworks Digital Ltd. · Get Directions Mapversion=0 <2.15.8
WPVibes · Form Vibesversion=0 <1.4.3
WP Military · Live TV Player – Worldwide Live TV Channels Player for WordPressversion=0 <1.2.3
Simple Sponsorships · Live Scores for SportsPressversion=0
Module Masters · SQL Reporting Services – SSRS Plugin for WordPressversion=0
WP Engine · Gutenberg Blocks – ACF Blocks Suiteversion=0 <2.6.8
Rafał Osiński · AdFoxly – Ad Manager, AdSense Ads & Ads.txtversion=0 <=1.8.4
Dipcode · WP Post Blockversion=0
AguileraSoft · Conversion de moneda WooCommerceversion=0
wewp.dev · Password Protectedversion=0
Kaira · StoreCustomizerversion=0 <2.3.8
chillichalli · Tarot Card Oracleversion=0 <1.0.6
The African Boss · Checkout with Zelle on Woocommerceversion=0 <2.0
seezee · Five-Star Ratings Shortcodeversion=0 <1.2.39
VersaComp · Choice Payment Gateway for WooCommerceversion=0 <2.0.5
Brian Batt – elearningfreak.com · Insert or Embed Articulate Content into WordPressversion=0 <4.3000000016
WordPlus · Better Messages – Integration for WC Vendors Marketplaceversion=0 <1.0.7
WP Royal · Royal Addons for Elementor – Addons and Templates Kit for Elementorversion=0 <1.3.33
WP Military · WP Radio – Worldwide Online Radio Stations Directory for WordPressversion=0 <3.1.4
Justin W Hall · LittleBot Invoicesversion=0
TribalNerd · Wp My Admin Barversion=0
Multidots · Multicollabversion=0 <2.0.4
Paul Glover · Zip Code Redirectversion=0 <=4.0.1
Prasad Kirpekar · WP Free SSLversion=0 <1.2.7
Kaira · Elationversion=0
Steven Henty · Drop Shadow Boxesversion=0 <1.7.4
codeSavory · BasePress Docsversion=0 <2.15.14
Freshlight Lab · Menu Image, Icons made easyversion=0 <3.0.6
KhoThemes · Ultimate Widgets Lightversion=0
Webmühle e.U. · Court Reservation – Manage Your Court Bookings Onlineversion=0 <1.7.0
Bouncingsprout Studio · Ultimeterversion=0 <2.7.6
Church Agency · Connected Sermonsversion=0
GalleryCreator · SimpLy Galleryversion=0 <2.3.6
HelpieWP · Helpie FAQversion=0 <1.7.7
dotrex · Aquarella Liteversion=0
PowerfulWP · Gift Message for WooCommerceversion=0 <1.6.0
Tripetto · Tripetto WordPress pluginversion=0 <5.3.1
richard-b · FIT: Featured Image Toolkitversion=0
annastaa · annasta Filters for WooCommerceversion=0 <1.5.0
Nitin Prakash · Place Order Without Payment for WooCommerceversion=0 <2.2
Brandon Ernst · Blocked in Chinaversion=0 <1.0.3
Fullworks Plugins · New User Approveversion=0 <2.1
CloudLiving · Review Engineversion=0
BlockyPage Team · BlockyPage – Gutenberg Based Page Builderversion=0
SweetCode · Pixel Manager for WooCommerceversion=0 <1.14.3
Iks Studio · Iks Menu – WordPress Category Accordion Menu & FAQsversion=0 <1.9.2
U2Code · Tiered Pricing Table for WooCommerceversion=0 <2.6.1
SebeT · WP Smart Export (Free)version=0
Nitin Prakash · Thank You Page for WooCommerceversion=0 <3.1
Dash Labs · YASR – Yet Another Star Rating Plugin for WordPressversion=0 <2.0.2
Sovereign Stack, LLC · Security Safeversion=0 <2.4.4
Passionate Brains · GA4WP – Analytics Dashboard for the Websiteversion=0 <1.3
SakuraPixel · Atlas – Knowledge Baseversion=0
WP Sheet Editor · Bulk Edit Posts and Products in Spreadsheetversion=0 <2.24.13
TourKick LLC · TK SmugMug Slideshow Shortcodeversion=0
Jon Anwyl · Hooked Editable Contentversion=0
WordPlus · Better Messagesversion=0 <1.9.9.170
Cypress North · Payment Gateway for PayFabricversion=0
DeMomentSomTres · DeMomentSomTres Media Tools Autoversion=0
Premmerce · Premmerce Product Search for WooCommerceversion=0 <2.2.3
wpdever · WP Notification Bellversion=0 <1.3.13
Sorsawo Digital · WP School Calendarversion=0 <3.6
WPSoul · Greenshift – animation and page builder blocksversion=0 <1.1.6
Jon Anwyl · Bulk Attachment Downloadversion=0 <1.3.5
Alley Themes · Alley Business Toolkitversion=0 <1.1.8
RankBear · RankBearversion=0
Gambit Technologies Inc. · Page Builder Sandwichversion=0 <4.5.5
ThemeLocation · Custom WooCommerce Checkout Fields Editorversion=0 <=1.2.6
Tammersoft · Shared Filesversion=0 <1.6.72
Jewel Theme · Adminifyversion=0 <2.0.5
CO2ok · ClimateClick: Climate Action for allversion=0 <=1.0.9.21
Saleswonder Team · ReviewShortversion=0 <1.0.17
bPlugins · Document Viewerversion=0 <2.2.5
Jcodex · Any Popup – Popup Forms, Optins & Adsversion=0
wpgeniuz · SheetPress – Manage WordPress Meta data with Google Sheetsversion=0
Passionate Programmer Peter · Code Managerversion=0 <1.0.14
WPChill · Passsterversion=0 <3.5.5.2
anasbinmukim · MailChimp Managerversion=0
WPCohort · RecurWPversion=0
Frog Eat Fly Software · Multi Page Auto Advance for Gravity Formsversion=0 <4.3
Fullworks Plugins · WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerceversion=0 <4.2.1
Badhonrocks · Divi Torque Liteversion=0 <3.5.0
AKDevs · Genealogical Tree – Family Tree & Ancestry for WordPressversion=0 <=2.1.5
Chetmac · Airpressversion=0
themeythemes · Post Carousel Diviversion=0 <1.1.2
Nasir Ahmed · Advanced Form Integrationversion=0 <1.49.0
WP Military · File Manager for Google Drive – Integrate Google Driveversion=0 <1.1.0
bPlugins · YT Playerversion=0 <1.5.1
linekal · Under Constructionversion=0 <4.0
Codeies · Full Page Blog Designerversion=0
Webmühle e.U. · WPVisitorInfo – Show Visitor Information & Conditional Data Based On That Informationversion=0
TannerRitchie Web Applications · DancePress (TRWA)version=0 <=3.1.2
Koen Reus · Post to Google My Business (Google Business Profile)version=0 <3.0.10
5 Star Plugins · Easy Age Verifyversion=0 <1.6.1
Ronen Abutbul WPexpress · Contact Widgets For Elementorversion=0
Swim or Die Software · ContestsWPversion=0 <1.9.0
Steve Burge · Tag Groupsversion=0 <1.43.10.1
Scrollsequence · Scrollsequenceversion=0 <1.2.4
ultraDevs · Ultra Elementor Addonsversion=0
HQTheme · HQTheme Extraversion=0
Pagup · Add LinkedIn Insight Tag for LinkedIn Adsversion=0 <1.2.4
theDotstore · Dynamic Pricing and Discount Rules for WooCommerceversion=0 <2.2.3
PootlePress · Pootle Pagebuilderversion=0 <5.7.1
WP Scripts · Food Storeversion=0 <1.4
SKT Themes · SKT Templatesversion=0 <4.3
Jewel Theme · WP Disable Sitemapversion=0 <1.0.4
Tickera · Tickera – Sell Tickets & Manage Eventsversion=0 <3.4.9.2
Todd Halfpenny · Past Events Extensionversion=0
WP Tools · Grid & Styler For Contact Form 7 And Diviversion=0 <1.4.1
marviorocha · Station Proversion=0
Livemesh Themes · Livemesh Addons by Elementorversion=0 <7.1.4
Jewel Theme · Master Addons for Elementorversion=0 <1.8.5
WP Tools · WP Tools Divi Blog Carouselversion=0 <1.3.0
CloudSponge · Better Sharingversion=0 <=1.7.1
Alpha BPO · Easy Post Views Countversion=0 <1.0.5
milukove · Кнопка ЮMoneyversion=0
BdThemes · Prime Sliderversion=0 <2.7.0
WP Table Builder · Ultimate Blocksversion=0 <2.4.13
javmah · jav's – WooCommerce and Trello integration WooTrelloversion=0 <2.3.1
Kartik Parmar · Change Price Title for WooCommerceversion=0 <=2.5
Samuel Silva · Fullscreen Menuversion=0 <=2.2.7
Luke Seager · Persistent Loginversion=0 <2.0.0
Michael Berding · Book BuyBack Pricesversion=0
XplodedThemes · XT Points & Rewards for WooCommerceversion=0 <1.4.3
Premmerce · Premmerce Multi-Currency for WooCommerceversion=0 <2.3.2
RelyWP · Coupon Affiliatesversion=0 <4.16.4
gfirem · GFireM Fieldsversion=0
KRSP Digital Agency · KRSP Frontend File Uploaderversion=0
ILLID · Share This Imageversion=0 <1.67
DeoThemes · Arendelleversion=0 <1.1.3
bPlugins · StreamCastversion=0 <2.1.4
FooPlugins · FooBoxversion=0 <2.7.17
Liton Arefin · Master Blocks – Ultimate Gutenberg Blocks for Marketersversion=0
bPlugins · 3D Viewerversion=0 <1.2.7
theDotstore · Extra Fees for WooCommerceversion=0 <3.8.2
Kenan Fallon · WooCommerce Next Order Couponversion=0
5 Star Plugins · Marijuana Age Verifyversion=0 <1.3.1
xjohnyk · WS Bootstrapversion=0
Boris Colombier · STEWoo – Super Transactional Emails for WooCommerceversion=0 <1.2.4
Simple Sponsorships · Simple Giveawaysversion=0 <2.42.1
Prashant Baldha · ACF for WooCommerce Productversion=0 <1.8
Sharaz Shahid · Ultimate Bulk SEO Noindex Nofollow – Speed up Penalty Recovery Ultimate SEO Boosterversion=0
Livemesh Themes · WPBakery Page Builder Addons by Livemeshversion=0 <2.9.2
OceanWP · Ocean Extraversion=0 <1.9.4
Oleh Odeshchak · Advanced Custom Fields options import/exportversion=0
Prasad Kirpekar · WP Meta and Date Removerversion=0 <1.9.6
Fullworks Digital Ltd. · Quick Event Managerversion=0 <9.2.17
Passionate Brains · AWCA – The Great Analytics Insights for Your eStoreversion=0 <3.0.1
Equalize Digital · Accessibility Checkerversion=0 <1.2.8
Dreamfox Media · Dreamfox Shipping Methods per Product for WooCommerceversion=0 <2.0.4
Sharaz Shahid · Scheduled Notification Barversion=0
prelc · Purusversion=0
Webheadcoder · Webheadcoder Multi-Step Forms for Contact Form 7version=0 <4.1.91
MeowCrew · Age Verification Screen for WooCommerceversion=0 <1.0.1
Prashant Baldha · Email Trackerversion=0 <=5.3.8
DeMomentSomTres · DeMomentSomTres Addressversion=0
Georg Griesser · Get feedback from visitors – WP Feedback Suite Pluginversion=0
WP Sheet Editor · Bulk Edit Products for WooCommerce – WP Sheet Editorversion=0 <1.7.13
LDNinjas · Reset Course Progress for LearnDashversion=0
ProteusThemes · ConsultPress Liteversion=0
gfirem · GFireM Action Afterversion=0
Fullworks Plugins · WP Easy Payversion=0 <4.0.2
Protect Your Uploads · Protect Uploads with Login – Protect Your Uploadsversion=0
Tickera · Restrict – membership, site, content and user access restrictions for WordPressversion=0 <2.1.9
Plugins360 Labs · Automatic YouTube Galleryversion=0 <1.6.5
DeoThemes · Everse Starter Sitesversion=0 <1.2.1
invis.net · WP fail2banversion=0 <4.4.0.2
WP Sheet Editor · Live Drag and Drop Builder for Contact Form 7version=0 <1.2.4
Livemesh Themes · Livemesh SiteOrigin Widgetsversion=0 <2.8.3
CleverPlugins · Security Ninjaversion=0 <5.135
XplodedThemes · XT Floating Cart for WooCommerceversion=0 <2.6.3
Bolton Studios LLC · Easy Zillow Reviewsversion=0 <1.4.1
Dreamfox Media · Dreamfox Payment Gateway per Product for WooCommerceversion=0 <3.1.6
WPDive · Better Addons for Elementorversion=0 <1.3.1
dotrex · Power Ups for Elementorversion=0 <1.2.2
Premmerce · Premmerce Wholesale Pricing for WooCommerceversion=0 <1.1.8
stylingwebben · Order and Inventory Manager for WooCommerceversion=0 <1.4.3
WPBits · WPBits Addons for Elementorversion=0 <1.3.2
WordPress Dev Powers · WordPress Dev Powers – ACF Color Coded Field Types Pluginversion=0
Plugins360 · All-in-One Video Galleryversion=0 <2.5.4
Fullworks Plugins · Quick Contact Formversion=0 <8.0.2
EJS London · Awesome SSLversion=0
Pagup · Better Robots.txt – AI-Ready Crawl Control & Bot Governanceversion=0 <1.4.4
Maciej Bąk · Pro Broken Links Maintainerversion=0
Melapress · WP Activity Logversion=0 <4.4.0
theDotstore · Hide Shipping Method for WooCommerceversion=0 <1.3.1
ahmed17 · RW Divi Unite Galleryversion=0 <=1.0
Premmerce · Premmerce Permalink Manager for WooCommerceversion=0 <2.3.5
WPMagic · Delete Posts automaticallyversion=0 <2.1.2
WP Sheet Editor · Product Country Restrictions for WooCommerce – Country Catalogsversion=0 <1.13.0
Mauro Lopes · Easy Settings for LearnDashversion=0
N Plugins · Before and After Product Images for WooCommerceversion=0
LoginPress · WordPress Reviews by ReviewPressversion=0
PluginsWare · Advanced Classifieds & Directory Proversion=0 <1.8.8
theDotstore · Shipping Method Display Style for WooCommerceversion=0 <3.7.5
Glowlogix · WP Frontend Profileversion=0 <1.2.5
Fullworks Plugins · Wholesale for WooCommerceversion=0 <1.6.1
Thinleek Plugins · Send Prebuilt Emailsversion=0
Codexonics · Prime Moverversion=0 <1.5.0
mvvapps · Chat Button- Leads and Order over Chatversion=0 <1.6.1
Edison Avenue Consulting LLC · WP Lead Streamversion=0
royalnavneet · WP Comment Cleanerversion=0 <4.3
Kazuki Kikuchi · Ultimate Gutenberg – Custom Block Templatesversion=0
theDotstore · Product Size Charts Plugin for WooCommerceversion=0 <2.2.3
KAGG Design · Gateway for PayLate on WooCommerceversion=0 <=1.4
Salonbookingsystem OÜ · Salon Booking System - Free Versionversion=0 <7.6.3
WP Encryption HTTPS · Go Viralversion=0 <1.8.0
Sindykin Sergei · Giveaways for WooCommerceversion=0
5 Star Plugins · Featured Images in RSS for Mailchimp & Moreversion=0 <1.5.9
Liquid Web · BookItversion=0 <2.2.9
LoginPress · Custom Login Page Customizerversion=0 <2.1.8
H3 Technologies (Pvt.) Limited · WordPress WooCommerce Sync for Google Sheetversion=0
javmah · WPGSI: Spreadsheet Integrationversion=0 <3.6.1
InfornWeb · Logo Showcaseversion=0 <2.0.3
Internal Link Juicer · Internal Link Juicerversion=0 <1.3.0
JayDeep Nimavat · JDs Portfolioversion=0
Pagup · WP Google Street Viewversion=0 <1.0.9
Frenify · Categorifyversion=0 <1.0.5
Pagup · MOBILOOK — Mobile View & Mobile‑Friendly Testversion=0 <1.2.4
theDotstore · Multipurpose Gutenberg Blockversion=0 <=1.7.3
Boris Colombier · WooCommerce PayPlugversion=0
Midnay · WP Gratifyversion=0
WP Tools · Block Styler For Gravity Formsversion=0 <=6.1.0
Dejan Markovic · WordPress Buffer – HYPESocialversion=0 <2020.1.0
Abeta · Abeta Link PunchOutversion=0 <=0.4
thecodechime · Cuisine Palaceversion=0
Jcodex · WooCommerce Variation Swatches for Productsversion=0
SSL Atlas · SSL Atlas – Free SSL Certificate & HTTPS Redirect for WordPressversion=0 <1.1.1
Published CVSS scores
No CVSS assessment is available in this record.
CVSS describes severity. EPSS estimates exploitation probability.
Attacks
What attackers are doing with it
Daily unique IPs observed by Shadowserver honeypots for known exploited vulnerabilities (KEVs). Missing observations do not establish an absence of attacks.
Daily unique IPsNo honeypot observations are available for this CVE in the selected window.
Sep 10, 2026Sep 16, 2026
Latest reporting daySep 16, 2026
Latest daily unique IPsUnavailable
Prior 30-day averageUnavailable
SourceShadowserver honeypots (KEV)
VectorUnavailable
PrivilegesUnavailable
Known exploitationUnconfirmed
Public exploitUnconfirmed
Weakness, pattern, technique
No sourced classifications are available.
Public exploit references
No public exploit references are available in this record.
Labels summarize the accepted research assessment. They do not indicate a test against your environment.
Technologies
Your stack
See the directory against your own environment.
Your stack
Check the software in your environment
Book a demo to see how Hinoki identifies affected software and validates exploitability in your environment.
Book a demo