CVE-2023-33999

1 click close store: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

2MB Autocode: Update to version 1.2.6, or a newer patched version

3D Viewer – Turn Product Pages into Interactive 3D Experiences: Update to version 1.3.4, or a newer patched version

404 to 301 – Redirect Manager, 404 Error Logs & Notifications: Update to version 3.0.6, or a newer patched version

Build 5 Star Reviews on Google Reviews, Yelp, Facebook… easily and risk-free | RRatingg: Update to version 1.2.63, or a newer patched version

a-staff – Team member showcase plugin for WordPress: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Gutenberg Blocks – ACF Blocks Suite: Update to version 2.6.10, or a newer patched version

ACF for WooCommerce Product: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Frontend Admin by DynamiApps: Update to version 3.8.0, or a newer patched version

ACF-VC Integrator: Update to version 1.3.1, or a newer patched version

Activity Log For MainWP: Update to version 2.0.0, or a newer patched version

Ad Blocker Notify Lite: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization: Update to version 2.8.0, or a newer patched version

Custom WooCommerce Checkout Fields Editor: Update to version 1.3.0, or a newer patched version

Ivory Search – WordPress Search Plugin: Update to version 5.5.2, or a newer patched version

Addon Elements for Elementor (formerly Elementor Addon Elements): Update to version 1.12, or a newer patched version

Livemesh Addons by Elementor: Update to version 7.9.1, or a newer patched version

WPBakery Page Builder Addons by Livemesh: Update to version 3.3, or a newer patched version

Adminify – White Label, Admin Menu Editor, Login Customizer: Update to version 3.1.5, or a newer patched version

Advanced Menu Manager Pro – Built for Content-heavy WordPress Sites to Add, Filter, Lock, and Edit Menus Easily: Update to version 3.0.6, or a newer patched version

Advanced Classifieds & Directory Pro: Update to version 2.1.2, or a newer patched version

Advanced Database Replacer: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Advanced Form Integration — Connect Forms to 300+ Apps: Update to version 1.69.1, or a newer patched version

CAPTCHA 4WP – Antispam CAPTCHA solution for WordPress: Update to version 7.0.6, or a newer patched version

Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress: Update to version 7.1.1, or a newer patched version

USPS Shipping for WooCommerce – Live Rates: Update to version 1.0.2, or a newer patched version

AVE – Elementor & Gutenberg Addons: Update to version 1.0.7, or a newer patched version

AffiEasy: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Affiliate Advantage – Sky Rocket Your Affiliate Marketing Business: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Age Verification Screen for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

AgendaPress – Easily Publish Meeting Agendas and Programs on WordPress: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

AI Image Generator – Easy image creation with AI: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Airpress: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

StickyWooCart – Ajax Add to Cart for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

FiboSearch – Ajax Search for WooCommerce: Update to version 1.25.0, or a newer patched version

All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos: Update to version 3.4.3, or a newer patched version

WordPress Animation Plugin – Animated Everything: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

ASVG – Lottie icon library for Elementor: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

annasta Filters for WooCommerce: Update to version 1.6.5, or a newer patched version

AnyComment: Update to version 0.0.99, or a newer patched version

APPExperts – Mobile App Builder for WordPress | WooCommerce to iOS and Android Apps: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

AI Tools – Chatbot, ChatGPT, Content Generator, Image Generator, Artificial Intelligence GPT: Update to version 3.0.0, or a newer patched version

Atlas – Knowledge Base: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Attribute Stock for WooCommerce – Shared Stock & Variable Quantities (Lite Version): Update to version 1.3.0, or a newer patched version

WP Sales Pitch: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Multi Page Auto Advance for Gravity Forms: Update to version 4.5.4, or a newer patched version

AADMY – Add Auto Date Month Year Into Posts: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Auto Featured Image (Auto Generated): Update to version 1.6.0, or a newer patched version

Fast Index: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

TermsFeed AutoTerms: Privacy Policy Generator, Cookie Consent, GDPR, CCPA, Terms & Conditions, Disclaimers, Cookies Policy, EULA: Update to version 2.0.0, or a newer patched version

Autocomplete Address and Location Picker for WooCommerce: Update to version 1.1.7, or a newer patched version

AutoMail – Event-driven Email Automation. Easy email Notification and Auto-reply.: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Automatic YouTube Gallery – Embed Auto-Updating YouTube Video Galleries, Feeds, Playlists & Channels: Update to version 2.3.3, or a newer patched version

Automizy Gravity Forms: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

AutoSave Net: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

netFORUM Single Sign On: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Awesome Social Icons: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

azw woocommerce file uploads: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Backup Bolt: Update to version 1.2.0, or a newer patched version

Prime Slider Addons for Elementor – Widgets, Templates & Elementor Addons: Update to version 3.8.3, or a newer patched version

Before and After Product Images for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

GravityCaptcha: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Gutenberg Block Editor Toolkit – EditorsKit: Update to version 1.17, or a newer patched version

Block Styler For Gravity Forms: Update to version 6.3.0, or a newer patched version

WordPress Gutenberg Blocks, Bootstrap Blocks, WPForms Styler – Blockington: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

BlockMeister – Block Pattern Builder: Update to version 3.1.10, or a newer patched version

Blockons – Gutenberg blocks for WordPress and WooCommerce websites: Update to version 1.0.8, or a newer patched version

Blocks Bakery – Gutenberg Blocks: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Blocks Product Editor for WooCommerce: Update to version 1.0.2, or a newer patched version

BlockSpare – Gutenberg Blocks for News, Magazine, Blog & Business Websites: Update to version 2.6.5, or a newer patched version

Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News: Update to version 3.4.1, or a newer patched version

Blog Sidebar Widget: Update to version 1.0.6, or a newer patched version

Customize WordPress Emails and Alerts – Better Notifications for WP: Update to version 1.7, or a newer patched version

BNG Gateway For WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Book BuyBack Prices: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

BookPress – For Book Authors: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Booking Addon for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Booking Weir: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Bookit — Booking & Appointment Calendar: Update to version 2.4.0, or a newer patched version

Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots: Update to version 2.1.18, or a newer patched version

Block, Suspend, Report for BuddyPress: Update to version 3.6.1, or a newer patched version

BuddyDrive: Update to version 2.1.2, or a newer patched version

Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC): Update to version 2.8.3, or a newer patched version

BuddyForms Advanced Custom Fields: Update to version 1.3.5, or a newer patched version

BuddyForms Anonymous Author: Update to version 1.1, or a newer patched version

BuddyForms Attach Post with Group: Update to version 1.2.3, or a newer patched version

BuddyForms EasyPin: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

BuddyForms Hierarchical Posts: Update to version 1.1.4, or a newer patched version

BuddyPress & BuddyBoss Member Profile Forms: Update to version 1.4.12, or a newer patched version

BuddyForms Remote: Update to version 1.0.5, or a newer patched version

BuddyForms Ultimate Member: Update to version 1.3.8, or a newer patched version

WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Bulk Attachment Download: Update to version 1.3.7, or a newer patched version

Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor: Update to version 1.7.5, or a newer patched version

Bulk Edit Events – Create Events in a Bulk Editor: Update to version 1.1.21, or a newer patched version

Bulk Edit and Create User Profiles – WP Sheet Editor: Update to version 1.5.25, or a newer patched version

Bulk WooCommerce Category Creator: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Announcement & Notification Banner – Bulletin: Update to version 3.8.0, or a newer patched version

Business Profile Reviews: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Divi Carousel Lite – Responsive Carousel & Slider Modules for Divi Builder: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Cart Weight for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Caxton – Create Pro page layouts in Gutenberg: Update to version 1.30.1, or a newer patched version

CF7 Constant Contact Fields Mapping: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WordPress Form Customizer | CF7 Customizer: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Grid & Styler For Contact Form 7 And Divi: Update to version 1.5.2, or a newer patched version

Message Filter for Contact Form 7: Update to version 1.4.3, or a newer patched version

WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms: Update to version 1.5.4, or a newer patched version

CF7 Mate – AI Form Builder, Styler & Multi-Step Forms for Contact Form 7: Update to version 1.3.3, or a newer patched version

Change Prices with Time for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Change Price Title for WooCommerce: Update to version 2.6, or a newer patched version

ChatPressAI – AI Supported Blogging and Reasearch: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Check Zipcode: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

morkva Checkbox Integration: Update to version 0.8.5, or a newer patched version

WordPress Image Compression and Optimizer Plugin – CheetahO: Update to version 1.4.3.1, or a newer patched version

Child Support Calculator: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Choice Payment Gateway for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Cleanup Action Scheduler: Update to version 1.2.0, or a newer patched version

Code Manager: Update to version 1.0.26, or a newer patched version

CodePile: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Coinbase Business for Contact Form 7: Update to version 1.1.2, or a newer patched version

Divi Collage: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Comments Not Replied To: Update to version 1.5.8, or a newer patched version

Coinbase Business Gateway for WooCommerce: Update to version 1.5.0, or a newer patched version

Compare Affiliated Products: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Conditional Logic for Woo Product Add-ons: Update to version 1.2.1, or a newer patched version

Conditional Payment Methods for WooCommerce: Update to version 1.1.3, or a newer patched version

ConeBlog – Elementor Blog Widgets: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Connected Sermons: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Contact Form 7 Designer: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

CF7 Skins for Contact Form 7: Update to version 2.1.1, or a newer patched version

Contact Form DB Divi: Update to version 1.2, or a newer patched version

Contact List – Online Staff Directory & Address Book: Update to version 2.9.72, or a newer patched version

Content Aware Sidebars – Fastest Widget Area Plugin: Update to version 3.19.1, or a newer patched version

Content Hubs: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Passster – Password Protect Pages and Content: Update to version 4.2.2, or a newer patched version

Divi Content Restrictor: Update to version 1.4.3, or a newer patched version

Convert Classic Editor to Gutenberg Blocks: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Convoworks WP: Update to version 0.22.15, or a newer patched version

Cooked – Recipe Management: Update to version 1.1.13, or a newer patched version

Copy Anything to Clipboard for WordPress – Copy Button, Copy Text & Copy Code: Update to version 2.6.4, or a newer patched version

Cost Calculator Builder: Update to version 2.3.3, or a newer patched version

Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates: Update to version 1.2.4, or a newer patched version

CPA OFFERWALL: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Cryptocurrency Product for WooCommerce: Update to version 3.16.10, or a newer patched version

Duplicate Page, Hide Title, Custom CSS & JS, Exclude Search, Template Info – Pagely: Update to version 1.1.10, or a newer patched version

WP Page Templates: Update to version 1.1.14, or a newer patched version

Custom Product Builder for WooCommerce – Design Your Own Products, Product Designer, Personalizer & Customizer: Update to version 1.0.5, or a newer patched version

Custom Product Type for WooCommerce – Add-Ons, Data, Options, Layouts, Booking & Appointments: Update to version 1.2.3, or a newer patched version

Custom User Guide: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Custom Welcome Guide: Update to version 1.0.9, or a newer patched version

Customer Chat Facebook: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Customizer custom controls with Drag and Drop builder – Customizely: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

DancePress (TRWA): Update to version 2.4.6.2, or a newer patched version

Dashy – Google Analytics advanced dashboard: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Availability Datepicker – Booking Calendar for Contact Form 7 – Input WP: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Delete Duplicate Posts: Update to version 4.8.9, or a newer patched version

Auto Post Cleaner: Update to version 3.4.3, or a newer patched version

WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes): Update to version 1.5.3, or a newer patched version

Chwazi – Delivery & Pickup Scheduling for WooCommerce: Update to version 1.0.12, or a newer patched version

Delivery Drivers for Vendors: Update to version 1.1.1, or a newer patched version

Delivery Drivers Manager: Update to version 1.1.9, or a newer patched version

Delivery for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

DeMomentSomTres Categories: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

MailChimp Immediate Send: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

DeMomentSomTres Subscribe: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

DeMomentSomTres WordPress Export Posts With Images: Update to version 20200610, or a newer patched version

Device Wrapper: Update to version 1.1.2, or a newer patched version

Device Frame: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Different Home for Logged IN & Logged OUT: Update to version 1.3.4, or a newer patched version

Disable Bloat for WordPress & WooCommerce: Update to version 3.2.9, or a newer patched version

WP Frontend Admin – Display WP Admin Pages in the Frontend: Update to version 1.21.1, or a newer patched version

Doko Bundle Builder : The Ultimate dynamic bundle builder for WooCommerce: Update to version 1.0.1, or a newer patched version

Domain Mapping System | Create Microsites with Multiple Alias Domains (multisite optional): Update to version 1.9.3, or a newer patched version

Download Magnet: Update to version 1.2.2, or a newer patched version

Dracula Dark Mode – Accessibility, Reading Mode & Dark Mode for WordPress: Update to version 1.0.1, or a newer patched version

Drop Shadow Boxes: Update to version 1.7.12, or a newer patched version

WordPress Easy Call Now Button by elixirs.io: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Easy Social Feed – Social Photos Gallery and Post Feed for WordPress: Update to version 6.5.0, or a newer patched version

Marijuana Age Verify: Update to version 1.5.2, or a newer patched version

Easy Order View: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Easy Prayer: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Easy Schema – Structured Data & Rich Snippets: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Easy Settings for LearnDash: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Easy TikTok Feed – TikTok Video, Feed & Gallery Plugin: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Under Construction: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

eaSYNC Booking – Hotels, Restaurants & Car Rentals: Update to version 1.3.7, or a newer patched version

EazyDocs – AI Powered Knowledge Base, Wiki, Documentation & FAQ Builder: Update to version 2.2.1, or a newer patched version

eCommerce Addon: Update to version 1.4, or a newer patched version

EDD Tab Manager: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WordPress Gallery Plugin – Edge Photo Gallery: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Education Addon for Elementor: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Email Header Footer: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Email Tracker: Update to version 5.3.9, or a newer patched version

Emails Blacklist for Everest Forms: Update to version 1.0.3, or a newer patched version

Embed Docs – Elementor Files Addon,Elementor Docs Addon,Embed PDF, Word, PowerPoint and Excel Files in Gutenberg & Elementor: Update to version 3.0.1, or a newer patched version

Document Viewer – Embed and Display Office and PDF Files: Update to version 2.2.7, or a newer patched version

Embed Video Thumbnail: Update to version 1.3.1, or a newer patched version

EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents: Update to version 2.0.3, or a newer patched version

enhanced-catalog-images-for-woocommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Enjoy Social Feed plugin for WordPress website: Update to version 6.2.1, or a newer patched version

eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams: Update to version 1.3.4, or a newer patched version

Error Log Monitor: Update to version 1.7.7, or a newer patched version

Ether and ERC20 tokens WooCommerce Payment Gateway: Update to version 4.12.13, or a newer patched version

Ethereum Wallet: Update to version 4.10.6, or a newer patched version

EthereumICO: Update to version 2.4.4, or a newer patched version

Show Eventbrite Events – Event Feed for Eventbrite: Update to version 1.1.2, or a newer patched version

Events Addon for Elementor: Update to version 2.0.3, or a newer patched version

WordPress Everse Starter Sites – Elementor Templates: Update to version 1.2.2, or a newer patched version

Expandable Paywall: Update to version 2.0.17, or a newer patched version

Etsy Integration For WooCommerce: Update to version 5.2.0, or a newer patched version

External Media Upload: Update to version 0.4, or a newer patched version

F4 Post Tree: Update to version 1.1.15, or a newer patched version

Happy FAQs – WordPress FAQ and Product FAQ: Update to version 1.4.0, or a newer patched version

FAQ Manager For Divi, Gutenberg Block & Shortcode: Update to version 5.4.4, or a newer patched version

Fast Index: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Fast WordPress: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Passwordless Login with OTP / SMS & Email – Facebook Account Kit: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

FIT: Featured Image Toolkit: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Featured Images in RSS for Mailchimp & More: Update to version 1.6.2, or a newer patched version

Featured Products First for WooCommerce – A Extension of WooCommerce (WooCommerce Addon Plugin): Update to version 1.9.6, or a newer patched version

Get feedback from visitors – WP Feedback Suite Plugin: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Feedpress Generator – External RSS Frontend Customizer: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Files Download Delay: Update to version 1.0.6, or a newer patched version

Filr – Secure document library: Update to version 1.2.3, or a newer patched version

Five-Star Ratings Shortcode: Update to version 1.2.48, or a newer patched version

Flexible FAQs – WordPress FAQ Plugin: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Flight Search Widget and Blocks: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Floating Social Share Icons and Social Share buttons – Next Previous Post Links – FL: Update to version 3.6.1, or a newer patched version

Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar: Update to version 2.1.32, or a newer patched version

Food Recipes: Update to version 2.6.1, or a newer patched version

Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel: Update to version 2.2.44, or a newer patched version

ForceField: Update to version 1.0.7, or a newer patched version

Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database: Update to version 1.4.9, or a newer patched version

Divi Form Builder With Material Design: Update to version 8.1.3, or a newer patched version

Gutenberg Forms – WordPress Form Builder Plugin: Update to version 1.4.0, or a newer patched version

Forms to Zapier, Integromat, IFTTT, Workato, Automate.io, elastic.io, Built.io, APIANT, Webhook: Update to version 1.1.12, or a newer patched version

Free Product Samples for WooCommerce – Try Before You Buy, Request Samples by Mail: Update to version 1.2.1, or a newer patched version

Free Shipping Label and Progress Bar for WooCommerce: Update to version 2.6.11, or a newer patched version

Freshing: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Guest posting / Frontend Posting / Front Editor – WP Front User Submit: Update to version 4.0.4, or a newer patched version

Front End PM: Update to version 11.3.8, or a newer patched version

Frontend Admin – Add and edit posts, pages, users and more all from the frontend: Update to version 3.8.0, or a newer patched version

Anti-Spam Protection – No API Key, GDPR Friendly: Update to version 1.3.10, or a newer patched version

Fullworks Directory: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Fullworks Firewall: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

ICEcoder integration: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Easy Responsive Pricing Tables: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Fullworks Slack: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free: Update to version 3.3.8.5, or a newer patched version

Fuse Social Floating Sidebar: Update to version 5.4.9, or a newer patched version

TrueAna – True Analytics Dashboard: Update to version 2.2.0, or a newer patched version

Gallery Bank – WordPress Photo Gallery Plugin: Update to version 4.0.19, or a newer patched version

Genealogical Tree – Family Tree & Ancestry for WordPress: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Geo Mashup: Update to version 1.13.12, or a newer patched version

GDPR & DSGVO Compliant Maps | GeoUNIT Maps: Update to version 0.0.8, or a newer patched version

GFireM Advance Search: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

GFireM Fields: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Gift Message for WooCommerce: Update to version 1.7.5, or a newer patched version

Simple Giveaways – Grow your business, email lists and traffic with contests: Update to version 2.46.1, or a newer patched version

Glorious Services & Support: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

GloriousThemes Starter Sites: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Glossary: Update to version 2.2.3, or a newer patched version

Go Viral – social share, social sharebar, social locker, social chat, open graph, reactions, share & view counters: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Goal Tracker – Custom Event Tracking for GA4: Update to version 1.0.11, or a newer patched version

AI Puffer – Chat. Create. Automate. (formerly AI Power): Update to version 1.7.38, or a newer patched version

Comments – GraphComment | AI-Moderated Comment System: Update to version 2.3.5, or a newer patched version

GS Behance Portfolio – Display Projects, Gallery & Slider: Update to version 3.0.2, or a newer patched version

Team Members – A WordPress Team Plugin with Gallery, Grid, Carousel, Slider, Table, List, and More: Update to version 2.2.2, or a newer patched version

GSheetConnector – Ninja Forms Google Sheets Connector, Export Form Submissions Instant Sync to Sheets: Update to version 1.2.8, or a newer patched version

Guest Author Affiliate: Update to version 1.1.6, or a newer patched version

Guestofy – Restaurant Reservations Plugin, Room Planer, Reservation Form: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WordPress Slider Block Gutenslider: Update to version 5.10.2, or a newer patched version

Gyta Buyback | WooCommerce Product Trade-In and Buy Back System: Update to version 1.2.9, or a newer patched version

Hide Shipping Method For WooCommerce: Update to version 1.3.3, or a newer patched version

Hire Me Widget: Update to version 1.0.5, or a newer patched version

Cool Author Box – For Widget and Post Content: Update to version 2.9.5, or a newer patched version

HM Testimonial: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WP How to – WordPress Tutorial Videos: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

HQTheme Extra: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Image Carousel For Divi: Update to version 1.6.1, or a newer patched version

Import Social Statistics: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Inbound Brew: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Independent Analytics – WordPress Analytics Plugin: Update to version 1.25.1, or a newer patched version

Information for help: Update to version 0.0.3, or a newer patched version

Insert or Embed Articulate Content into WordPress: Update to version 4.3000000021, or a newer patched version

integrate automate: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

File Manager for Google Drive – Integrate Google Drive: Update to version 1.2.2, or a newer patched version

Contact Form 7 – Capsule CRM – Integration: Update to version 1.0.5, or a newer patched version

MapGeo – Interactive Geo Maps: Update to version 1.6.1, or a newer patched version

Internal Link Flow & Topical Authority & Topical Map: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

InternalLink Audit: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Issues Tracker: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

JobWP – Job Board Plugin for WordPress | Job Listings, Career Page & Applications: Update to version 2.0, or a newer patched version

Joli CLEAR Lightbox: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Joli FAQ SEO – WordPress FAQ Plugin: Update to version 1.3.1, or a newer patched version

Joli Table Of Contents: Update to version 2.0.10, or a newer patched version

Justified Gallery: Update to version 1.8.1, or a newer patched version

Kanzu Support Desk – WordPress Helpdesk Plugin: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Kenta Blocks – Responsive Blocks and block templates library: Update to version 1.3.4, or a newer patched version

Kenta Companion: Update to version 1.1.9, or a newer patched version

kk Star Ratings – Rate Post & Collect User Feedbacks: Update to version 5.4.5, or a newer patched version

KVoucher: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

LawPress – Law Firm Website Management: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WPGutenBlog Demo Import: Update to version 1.0.3, or a newer patched version

License Manager for WooCommerce: Update to version 2.3-beta.1, or a newer patched version

Limb Gallery | Create Beautiful Image & Video Galleries: Update to version 1.5.6, or a newer patched version

Linked Orders for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

LittleBot Invoices: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Live Scores for SportsPress: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Table Rate Shipping for WooCommerce: Update to version 1.2, or a newer patched version

Weight Based Shipping For WooCommerce: Update to version 1.4, or a newer patched version

Local Delivery Drivers for WooCommerce: Update to version 1.9.0, or a newer patched version

Locations and Areas – Leaflet Map with Region Tabs: Update to version 1.7.2, or a newer patched version

Custom Login Page Customizer: Update to version 2.2.3, or a newer patched version

Custom Login Page Customizer – Login Designer: Update to version 1.6.2, or a newer patched version

Logo Showcase – Responsive Logo Carousel, Logo Slider & Logo Grid: Update to version 3.2.1, or a newer patched version

Bulk Page Generator – LPagery: Update to version 1.2.6, or a newer patched version

Generate Images (AI) – Magic Post Thumbnail: Update to version 4.1.13, or a newer patched version

Mail Control – Email Customizer, SMTP Deliverability, logging, open and click Tracking: Update to version 0.3.2, or a newer patched version

Kikote – Location Picker at Checkout & Google Address AutoFill Plugin for WooCommerce: Update to version 1.8.5, or a newer patched version

Market Exporter: Update to version 2.0.19, or a newer patched version

Mass Pages/Posts Creator: Update to version 2.1.7, or a newer patched version

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits: Update to version 2.0.3, or a newer patched version

MasterStudy LMS WordPress Plugin – for Online Courses and Education: Update to version 2.8.0, or a newer patched version

Media Library File Download: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Mega Forms – Drag & Drop Form Builder with Multi-Step & Conditional Logic: Update to version 1.1.3, or a newer patched version

Menu Image, Icons made easy: Update to version 3.10, or a newer patched version

Menukaart – Restaurant Menu & Online Ordering with WooCommerce: Update to version 1.4, or a newer patched version

Meta Tag Manager: Update to version 2.1, or a newer patched version

Minimum and Maximum Quantity for WooCommerce: Update to version 1.1.1, or a newer patched version

Missing Widgets for Elementor: Update to version 1.3.5, or a newer patched version

Eventbrite EventON: Update to version 1.1.2, or a newer patched version

Mobile App Editor – WordPress to Android App Builder: Update to version 1.2.0, or a newer patched version

Mobile Booster: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WP Mobile Menu – The Mobile-Friendly Responsive Menu: Update to version 2.8.4, or a newer patched version

Mobile Blocks: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

MoceanAPI Abandoned Carts for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

MoceanAPI SendSMS: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

MoceanAPI Order SMS Notification for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Modern Addons for Elementor Page Builder: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Receive customer payments on Woocommerce: Update to version 4.2, or a newer patched version

Moose Elementor Kit: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Get Better Reviews for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Footer Plugin for Divi: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Multilevel Referral Plugin for WooCommerce: Update to version 2.23, or a newer patched version

MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO: Update to version 3.0.0, or a newer patched version

Multipurpose Gutenberg Block: Update to version 1.7.6, or a newer patched version

Multisite Robots.txt Manager: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Music Player for Elementor – Audio Player & Podcast Player: Update to version 1.5.9.9, or a newer patched version

Easy Social Photos Gallery – MIF: Update to version 3.1.2, or a newer patched version

Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred: Update to version 2.5.3, or a newer patched version

Netforum Member Directory: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

New Order Notification: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

New User Approve: Update to version 2.5.1, or a newer patched version

WooCommerce Next Order Coupon: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

NEXUS: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

NicheTable – Responsive Comparison Table Block: Update to version 2.8.0, or a newer patched version

Nitek Carousel Slider Cool Transitions: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

NoFollow jQuery Links: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Noted PRO: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Notification – Custom Notifications and Alerts for WordPress: Update to version 6.0.5, or a newer patched version

Shipping for Nova Poshta: Update to version 1.7.47, or a newer patched version

NOWPayments for WooCommerce – Crypto Payment Gateway: Update to version 1.0.5, or a newer patched version

Number Chat: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Ocean Extra: Update to version 2.1.8, or a newer patched version

OliveWP Companion: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

One Page Blocks: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Open User Map – Interactive Leaflet Maps: Update to version 1.3.15, or a newer patched version

Opensea: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Order and Inventory Manager for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Chat Button- Leads and Order over Chat: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Order Picking For WooCommerce: Update to version 1.0.2, or a newer patched version

SMS OTP Easy Login with Mocean: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Overlay Image Divi Module: Update to version 1.5, or a newer patched version

Page Visit Counter: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

PageManager: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Panorama – turn photos into immersive virtual tours: Update to version 1.0.9, or a newer patched version

Past Events Extension: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Payment Plugins for Stripe Elementor – by Pay Addons: Update to version 1.2.1, or a newer patched version

Payment Gateway Groups for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Payment Gateway for PayFabric: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Perelandra Sermons: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Pets: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Gallery PhotoBlocks: Update to version 1.3.0, or a newer patched version

Easy Photography Portfolio: Update to version 1.4.9, or a newer patched version

Phraseanet WordPress Client: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Pickup & Delivery from Customer Locations for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Podcast Box – Best Podcasting Plugin for WordPress: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Pootle Pagebuilder – WordPress Page builder: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

PopOverXYZ – Show Light Weight Beautiful Tool Tips On Any Text: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Post List Designer – Category Post, Recent Post, Post List: Update to version 3.3.1, or a newer patched version

Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App: Update to version 2.5.9-beta.1, or a newer patched version

Post Snippets – Custom WordPress Code Snippets Customizer: Update to version 4.0.4, or a newer patched version

Postcode Redirect: Update to version 5.0.0, or a newer patched version

PowerPack Lite for Beaver Builder: Update to version 1.2.9.1, or a newer patched version

ActiveCampaign Email Preference Center: Update to version 2.0.12, or a newer patched version

Preloader for Divi: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Preloader Plus – WordPress Loading Screen Plugin: Update to version 2.1, or a newer patched version

PremiumBlogAddons – Premium Blog Addons – Amazing Blog Layouts: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Premmerce User Roles: Update to version 1.0.12, or a newer patched version

Premmerce Brands for WooCommerce: Update to version 1.2.13, or a newer patched version

Premmerce Multi-currency for Woocommerce: Update to version 2.3.5, or a newer patched version

Premmerce Pinterest for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Premmerce Frequently Bought Together for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Premmerce WooCommerce Toolkit: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Premmerce Variation Swatches for WooCommerce: Update to version 1.2.2, or a newer patched version

Premmerce Wholesale Pricing for WooCommerce: Update to version 1.1.10, or a newer patched version

Premmerce Wishlist for WooCommerce: Update to version 1.1.10, or a newer patched version

Process Dezrezone XML for upload: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Press Elements – Widgets for Elementor: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Pretty Simple Popup Builder: Update to version 1.0.7, or a newer patched version

Price Bands for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Prime Affiliate Links – Super-Powered Affiliate Links Manager: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Print My Blog – Print, PDF, & eBook Converter WordPress Plugin: Update to version 3.25.3, or a newer patched version

Printus – Automatic Cloud Order Printing for WooCommerce: Update to version 1.1.3, or a newer patched version

Product Delivery Date: Update to version 1.1.5, or a newer patched version

Product Filter Widget for Elementor: Update to version 1.0.2, or a newer patched version

Product Layouts for WooCommerce: Update to version 1.1.4, or a newer patched version

Product Table for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Projectopia – Project Management Tool: Update to version 5.1.5, or a newer patched version

Protect Uploads with Login – Protect Your Uploads: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

The best plugin for restrict content, support all Custom Post Types and Elementor – Password Protected: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

PublishPress Planner – Editorial Calendar, Marketing Content, Kanban Board: Update to version 1.9.5, or a newer patched version

PureDevs Customer History for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Product Feed on WooCommerce for Google, Awin, Shareasale, Bing, and More: Update to version 3.2.3.5, or a newer patched version

Quick Contact Form: Update to version 8.0.6.8, or a newer patched version

QuotePress – Quote Estimate: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Quote Requests for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Qyrr – simply and modern QR-Code creation: Update to version 1.4, or a newer patched version

Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player: Update to version 2.0.5, or a newer patched version

Radio Station by netmix® – Manage and play your Show Schedule in WordPress!: Update to version 2.5.0, or a newer patched version

Raise Prices with Sales for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Random Sorting Order for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Rating-Widget: Star Review System: Update to version 3.2.0, or a newer patched version

Contact Form for WordPress- Cybrosys: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Reader Mode – Distraction-Free Content Reader: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Recurring Bookings for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Redirect 404 Error Page to Homepage or Custom Page with Logs: Update to version 1.8.1, or a newer patched version

Remove Add to Cart Button for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Remove Duplicate Posts: Update to version 1.3, or a newer patched version

Remove WP Update Nags: Update to version 1.5.0, or a newer patched version

WP Required Taxonomies – Categories and Tags Mandatory: Update to version 1.1.8, or a newer patched version

Online Booking for Barbershops and Salons: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Reset Course Progress For LearnDash: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Responsive Accordion Tabs: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Rest Routes – Custom Endpoints for WordPress REST API: Update to version 5.5.4, or a newer patched version

Affiliate Link Builder Plugin for Amazon Associates – Review Engine: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WordPress Reviews by ReviewPress: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Role Based Pricing for Woo by Meow Crew: Update to version 1.4.1, or a newer patched version

Role Based Bulk Quantity Pricing: Update to version 1.1.7, or a newer patched version

Royal Addons for Elementor – Addons and Templates Kit for Elementor: Update to version 1.3.71, or a newer patched version

RSS Chimp – Add Featured Images to WP RSS Feeds (Mailchimp, Google News, Feedly): Update to version 1.2.5, or a newer patched version

RSS Control: Update to version 3.0.8, or a newer patched version

RT Easy Builder – Advanced addons for Elementor: Update to version 1.9, or a newer patched version

RW Divi Unite Gallery: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Sales Page Addon – Elementor & Beaver Builder: Update to version 1.4.1, or a newer patched version

Salon Booking System – Appointment Booking for Salons, Barbershops & Spas: Update to version 8.4.9, or a newer patched version

Salt Shaker: Update to version 1.4.2, or a newer patched version

Scrollbar Customizer: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Search Console: Update to version 2.1.2, or a newer patched version

Search Field for Gravity Forms: Update to version 0.6, or a newer patched version

Content Slider for WP Posts (Section Slider): No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Security Ninja – WordPress Security & Firewall: Update to version 5.159, or a newer patched version

Send Users Email – Email Subscribers, Email Marketing Newsletter: Update to version 1.4.1, or a newer patched version

SEO Booster: Update to version 3.8.9, or a newer patched version

WordPress SEO Checklist: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Local SEO For Divi & Gutenberg Blocks: Update to version 9.2.1, or a newer patched version

Seo Optimized Images: Update to version 2.1, or a newer patched version

SEO Audit – WP Site Auditor: Update to version 1.2.9, or a newer patched version

Server Info – System Health & Diagnostics Suite: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Auto Set Admin Colour on Staging and Dev: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

A no-code page builder for beautiful performance-based content: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Share This Image: Update to version 1.81, or a newer patched version

Shared Files – File Upload & Download Manager: Update to version 1.7.3, or a newer patched version

Shipping Manager For WooCommerce: Update to version 1.4.0, or a newer patched version

ShortcodeHub – MultiPurpose Shortcode Builder: Update to version 1.4.0, or a newer patched version

Shortcodes Ultimate – Content Elements: Update to version 5.13.1, or a newer patched version

Simple Author Box: Update to version 2.4, or a newer patched version

Simple blueprint installer: Update to version 1.0.2, or a newer patched version

Simple Cart: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Simple Social Page Widget & Shortcode: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Simple Feature Requests Free – User Feedback Board: Update to version 2.2.5.1, or a newer patched version

Simple Sitemap – Responsive HTML Sitemap for WordPress: Update to version 3.5.10, or a newer patched version

Simple Sponsorships: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Simple Tour Guide: Update to version 1.0.6, or a newer patched version

SimpLy Gallery: Update to version 3.1.5, or a newer patched version

Sites Monitor: Update to version 0.0.9, or a newer patched version

Sky Login Redirect: Update to version 3.7.3, or a newer patched version

Store Locator Plus® | Extended Data Manager: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Store Locator Plus® | Extenders: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Store Locator Plus® | Gravity Forms Locations: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Smart phone field for Gravity Forms: Update to version 2.1, or a newer patched version

Smart Protect: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Constellation: Smart Tools for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Smart Variations Images & Swatches for WooCommerce: Update to version 5.2.8, or a newer patched version

SocialMark – Easy Watermark/Logo on Social Media Post Link Share Preview: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

SonaWP – Stripe Payment – PayPal Payment (Blocks + Shortcode) – Donations Block – Sell Digital Work: Update to version 1.0.1, or a newer patched version

South Pole: Climate action now: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WP News and Scrolling Widgets: Update to version 4.0.1, or a newer patched version

Sparrow: Product Reviews and Ratings for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Spice Blocks: Update to version 1.3, or a newer patched version

Carousel, Recent Post Slider and Banner Slider: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Spice Starter Sites: Update to version 1.1, or a newer patched version

SpiceBox: Update to version 2.2, or a newer patched version

Spotlight Social Feeds – Block, Shortcode, and Widget: Update to version 1.6.1, or a newer patched version

Sprout Clients – CRM and Lead Management: Update to version 3.2, or a newer patched version

SQL Reporting Services – SSRS Plugin for WordPress: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

SSL Zen — SSL Certificate Installer & HTTPS Redirects: Update to version 4.5.3, or a newer patched version

Stackable – Page Builder Gutenberg Blocks: Update to version 3.9.1, or a newer patched version

STAGGS – Product Configurator Toolkit: Update to version 1.4.2, or a newer patched version

Starfish Review Generation & Marketing for WordPress: Update to version 3.1.0, or a newer patched version

STARTEND Subscription Add-On for GravityForms: Update to version 4.0.6, or a newer patched version

WP2Static: Update to version 6, or a newer patched version

Stop User Enumeration: Update to version 1.4.2, or a newer patched version

Stop WP Emails Going to Spam: Update to version 2.0.3, or a newer patched version

Streak CRM For Gmail For Contact Form 7 – WordPress Plugin: Update to version 1.0.9, or a newer patched version

WordPress eCommerce Plugin – Studiocart: Update to version 2.5.20, or a newer patched version

Ultimate Divi Modules Suite – Divi Sumo Lite: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Super Social Content Locker Lite: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

STEWoo – Super Transactional Emails for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Super Video player – play your videos with playlists and subtitles: Update to version 2.6.13, or a newer patched version

Surbma | GDPR Proof Cookie Consent & Notice Bar: Update to version 17.8.2, or a newer patched version

HuCommerce | Magyar kiegészítések WooCommerce webáruházakhoz: Update to version 2022.0.3, or a newer patched version

SV Columns Manager: Update to version 2.0.00, or a newer patched version

SV Forms: Update to version 2.0.00, or a newer patched version

SV Media Library: Update to version 2.0.00, or a newer patched version

SV Posts: Update to version 2.0.00, or a newer patched version

SV Proven Expert: Update to version 2.2.11, or a newer patched version

SV Tracking Manager: Update to version 2.0.00, or a newer patched version

SV100 Companion: Update to version 2.0.00, or a newer patched version

SVG Flags – Country Flag Blocks and Galleries: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Sync eCommerce NEO: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WordPress Table Builder – TableGenie: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

TablePress – Tables in WordPress made easy: Update to version 2.1.5, or a newer patched version

Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent: Update to version 1.0.15, or a newer patched version

Tag Groups is the Advanced Way to Display Your Taxonomy Terms: Update to version 2.0.0, or a newer patched version

Subscriber Addons for The Events Calendar: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Slider Addons for The Events Calendar: Update to version 2.0.0, or a newer patched version

Ted – WordPress Classic Block Editor Plugin: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Temp Mail: Update to version 1.0.1, or a newer patched version

Terms & Conditions Per Product: Update to version 1.2.6, or a newer patched version

The Events Calendar: Update to version 5.16.4.1, or a newer patched version

Themereps Helper: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

TI WooCommerce Wishlist: Update to version 1.7.0, or a newer patched version

TinyBar – Display notification bar, banner, announcement at the top or bottom of your website: Update to version 2.1, or a newer patched version

TK Event Weather: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

TK Google Fonts GDPR Compliant: Update to version 2.2.11, or a newer patched version

Tori Ajax: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WordPress Translation plugin for Post, Pages & WooCommerce products. Tranzly IO AI DeepL automatic WordPress Translator.: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

TreePress – Easy Family Trees & Ancestor Profiles: Update to version 3.0.1, or a newer patched version

Turbo Widgets: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Ua Marketplace: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor: Update to version 2.5.2, or a newer patched version

Ultimate Carousel For Divi: Update to version 4.5.1, or a newer patched version

Ultimate Custom ScrollBar: Update to version 1.2, or a newer patched version

Ultimate Gutenberg – Custom Block Templates: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Ultimate Post Kit Addons for Elementor: Update to version 3.6.4, or a newer patched version

Ultimate SMS Notifications for WooCommerce: Update to version 1.9.9.6, or a newer patched version

Social Share Icons & Social Share Buttons: Update to version 3.2.8, or a newer patched version

Ultimate Widgets Light: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Ultimeter: Update to version 2.8.3, or a newer patched version

UltraAddons for Elementor: Update to version 1.1.0, or a newer patched version

Universal email preference center: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Unlimited Elements For Elementor: Update to version 1.5.75, or a newer patched version

Unlimited Theme Addon For Elementor: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Upcasted S3 Offload – AWS S3, DigitalOcean Spaces, Backblaze, MinIO Storage Integration: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Search & Replace Everything – Quick and Easy Way to Find and Replace Text, Links: Update to version 1.2.2, or a newer patched version

URL Shortify – Simple and Easy URL Shortener: Update to version 1.7.3, or a newer patched version

Variable Inspector: Update to version 2.4.0, or a newer patched version

Video Analytics for Cloudflare Stream: Update to version 1.2, or a newer patched version

Wadi Addons for Elementor: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Checkout with Cash App on WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

GSheetConnector – WooCommerce Google Sheets Connector, Export Orders & Products to Google Sheets in Real-Time: Update to version 1.3.5, or a newer patched version

Place Order Without Payment for WooCommerce: Update to version 2.5, or a newer patched version

Product Author for WooCommerce: Update to version 1.0.4, or a newer patched version

Product Customer List for WooCommerce: Update to version 3.1.5, or a newer patched version

WC REST Payment: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

SMS for WooCommerce: Update to version 2.7, or a newer patched version

Thank You Page for WooCommerce: Update to version 4.0.0, or a newer patched version

Checkout with Zelle on Woocommerce: Update to version 3.1.1, or a newer patched version

BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages: Update to version 3.4.16, or a newer patched version

Funnelmentals: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Web3 Coin Gate: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Web3 Token Gate: Update to version 1.0.5, or a newer patched version

Easy Appointment Booking & Scheduling System – Webba Booking Calendar: Update to version 4.5.32, or a newer patched version

WebinarIgnition – Live, Automated & Evergreen Webinar System also for WooCommerce: Update to version 3.01.3, or a newer patched version

Divi Testimonial Plus: Update to version 6.1.1, or a newer patched version

WPEventPartners Demo Import: Update to version 1.0.4, or a newer patched version

WZ Followed Posts – Display what visitors are reading: Update to version 2.1.0, or a newer patched version

Widgets for SiteOrigin: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Widgets on Pages: Update to version 1.8, or a newer patched version

Woo Admin Product Notes: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WooCommerce Extra Fees Lite – Use for Extra charge + Conditional Fee + Extra Cost for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Product Size Charts Plugin for WooCommerce: Update to version 2.4.3.1, or a newer patched version

Secure Gateway for Authorize.net and WooCommerce by Pledged Plugins: Update to version 6.0.4, or a newer patched version

Fraud Prevention For WooCommerce and EDD: Update to version 2.1.4.1, or a newer patched version

Digital Goods (Checkout Field Editor) for WooCommerce Checkout: Update to version 3.7.1, or a newer patched version

Dynamic Pricing and Discount Rules for WooCommerce: Update to version 2.3.3.1, or a newer patched version

Extra Fees for WooCommerce: Update to version 3.9.3.2, or a newer patched version

Product Country Restrictions for WooCommerce – Country Catalogs: Update to version 1.14.3, or a newer patched version

Coupon Affiliates – Affiliate Plugin for WooCommerce: Update to version 5.5.1.3, or a newer patched version

Customers Table for WooCommerce: View, Search, Bulk Editor: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Enhanced Ecommerce Google Analytics for WooCommerce: Update to version 3.7.1, or a newer patched version

Flat Rate Shipping Method for WooCommerce: Update to version 4.2.0, or a newer patched version

Strumenti Partita IVA per Woocommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Product Recommendation Quiz For WooCommerce: Update to version 1.4.2, or a newer patched version

Builder for WooCommerce product reviews shortcodes – ReviewShort: Update to version 1.0.21, or a newer patched version

Widgets for WooCommerce Products on Elementor: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Quick Bulk Variations Checkout for WooCommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Quick Reports for Woocommerce: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

remove-cart-and-query-button: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Shipping Method Display Style for WooCommerce: Update to version 3.7.7, or a newer patched version

Ukrposhta: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Country Based Payments for WooCommerce: Update to version 1.4.4, or a newer patched version

EU VAT Assistant for WooCommerce: Update to version 2.1.2.230718, or a newer patched version

Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing: Update to version 1.32.3, or a newer patched version

Dreamfox Payment Gateway per Product for WooCommerce: Update to version 3.2.7, or a newer patched version

Dreamfox Shipping Methods per Product for WooCommerce: Update to version 2.3.3, or a newer patched version

WooCommerce upcoming Products: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce: Update to version 4.2.9, or a newer patched version

WordApp Mobile App Plugin – Convert your WordPress Site to a Mobile App: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Divi Carousel – Image, Logo & Video Carousel for Divi Theme: Update to version 1.2.12, or a newer patched version

WP Advanced Comment: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Asset CleanUp: Page Speed Booster: Update to version 1.3.5.5, or a newer patched version

LMS Plugin – eLearning, Online Courses by Attest: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WP AutoMedic: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Master Accordion ( Former WP Awesome FAQ Plugin ): No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Books Gallery – Book Showcase, Library & Affiliate Plugin: Update to version 4.5.4, or a newer patched version

WP BugBot: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WP Cloud Server: Update to version 2.0.0, or a newer patched version

Restrict Posts based on Conditions – Conditional Post Restrictions: Update to version 1.2.2, or a newer patched version

WP Contact Slider – Contact Form Slider Widget: Update to version 2.4.9, or a newer patched version

WP Coupons and Deals – WordPress Coupon Plugin: Update to version 3.1.19, or a newer patched version

WP-Cron Status Checker: Update to version 1.2.5, or a newer patched version

WP Custom field for Gutenberg Editor: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WP Easy Pay – Payment and Donation Form Builder for Square: Update to version 4.2, or a newer patched version

WP Event Partners – WordPress Plugin for Event and Conference Management: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WP Group Promoter: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WP Review Slider: Update to version 3.6, or a newer patched version

WP Frontend Profile: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WP Google Review Slider: Update to version 12.6, or a newer patched version

WP-HR GDPR: GDPR Tools for Human Resources on WordPress: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WP-HR Manager: The Human Resources Plugin for WordPress: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WP Lead Stream: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WP Link Bio: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Live TV Player – Worldwide Live TV Channels Player for WordPress: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WP Mail Log: Update to version 1.1, or a newer patched version

WP Munich Blocks – Gutenberg Blocks for WordPress: Update to version 0.11.0, or a newer patched version

Wp My Admin Bar: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WP Native Articles – Facebook Instant Articles Plugin for WordPress: Update to version 1.2.0, or a newer patched version

OpenAgenda for WordPress: Update to version 1.9.0, or a newer patched version

Persistent Login: Update to version 2.0.15, or a newer patched version

WP Phone Message: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WP Photo Effects: Update to version 1.2.3, or a newer patched version

WP Private Media: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WP Radio – Worldwide Online Radio Stations Directory for WordPress: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WP Relevant Ads: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WP REST Filter: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WP Scrive by Webbstart: Update to version 1.2.4, or a newer patched version

WP Activity Log: Update to version 4.4.3, or a newer patched version

BAVOKO SEO Tools – All-in-One WordPress SEO: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Bulk Edit Posts and Products in Spreadsheet: Update to version 2.25.3, or a newer patched version

Bulk Edit Easy Digital Downloads – Fast Bulk Creator: Update to version 1.0.61, or a newer patched version

WP Signals: Update to version 2.0.0, or a newer patched version

WP Smart Export (Free): No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WP Store Locator – Extenders: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

AidWP – Donation & Payment Forms (Stripe Powered): Update to version 3.2.1, or a newer patched version

Schema Plugin For Divi, Gutenberg & Shortcodes: Update to version 4.0.3, or a newer patched version

WP Table Builder – Drag & Drop Table Builder: Update to version 1.4.10, or a newer patched version

Divi Product Carousel: Update to version 1.5.1, or a newer patched version

Divi Gravity Forms (WP Tools): Update to version 7.1.0, or a newer patched version

GeoTargeting WP: Update to version 1.1.0, or a newer patched version

WP Travel Engine – Tour Booking Plugin – Tour Operator Software: Update to version 5.7.5, or a newer patched version

WP TripAdvisor Review Slider: Update to version 11.3, or a newer patched version

NotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce: Update to version 1.5.1, or a newer patched version

WPCasa Mail Alert: Update to version 3.3.0, or a newer patched version

Redirection for Contact Form 7: Update to version 2.9.0, or a newer patched version

Database Table Overview and Logs: Update to version 1.1.0, or a newer patched version

WP Genealogy – Your Family History Website: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WPGSI: Spreadsheet Integration: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WPIDE – File Manager & Code Editor: Update to version 3.4.7, or a newer patched version

Memory Meter: Update to version 1.3.1, or a newer patched version

WPOptin – AI-Powered Top Bars, PopUps & Lead Generation: Update to version 1.2.7, or a newer patched version

Team Members Showcase: Update to version 2.8.0, or a newer patched version

Masonry Gallery & Posts For Divi (WP Tools): Update to version 3.5.1, or a newer patched version

WP VR – 360 Panorama and Virtual Tour Builder: Update to version 1.0.2, or a newer patched version

WritersBlok AI Content Generator for WordPress: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

XT Ajax Add To Cart for WooCommerce: Update to version 1.0.7, or a newer patched version

XT Points & Rewards for WooCommerce: Update to version 1.6.6, or a newer patched version

XT Variation Swatches for WooCommerce: Update to version 1.8.8, or a newer patched version

Кнопка ЮMoney: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Yatri Tools: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

YASR – Yet Another Star Rating Plugin for WordPress: Update to version 3.4.2, or a newer patched version

YouTube Embed – YouTube Gallery, Vimeo Gallery – WordPress Plugin: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Video Player for YouTube – embed videos your visitors will love to watch: Update to version 1.5.2, or a newer patched version

Yummy Recipes: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Zip Code Redirect: Update to version 5.1.2, or a newer patched version

Agncy: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Aquarella Lite: Update to version 1.1, or a newer patched version

Bani: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

BingoPress: Update to version 1.2.15, or a newer patched version

Bootstrap Coach: Update to version 1.1.2, or a newer patched version

Bootstrap Fitness: Update to version 1.0.6, or a newer patched version

Bootstrap Photography: Update to version 1.0.6, or a newer patched version

Brand: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Brasserie: Update to version 2.1, or a newer patched version

Broadcast Lite: Update to version 2.0.7, or a newer patched version

Chained: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Chic Lifestyle: Update to version 10.0.8, or a newer patched version

ConsultPress Lite: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Corporate Event: Update to version 1.0.1, or a newer patched version

Cyclone Blog: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

EduPress: Update to version 1.3.3, or a newer patched version

Eighteen tags: Update to version 3.1.1, or a newer patched version

Elasta: Update to version 1.0.9, or a newer patched version

Everse: Update to version 1.8.10, or a newer patched version

Fire Blog: Update to version 2.2, or a newer patched version

Fortune: Update to version 2.0.1, or a newer patched version

Gema Lite: Update to version 1.1.0, or a newer patched version

GutenBook: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Gym Express: Update to version 1.0.3, or a newer patched version

Hive Lite: Update to version 1.1.0, or a newer patched version

Hotelica: Update to version 2.6, or a newer patched version

Julia Lite: Update to version 1.1.0, or a newer patched version

Krste: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

LearnMore: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Lifestyle Magazine: Update to version 10.2.1, or a newer patched version

MedicPress Lite: Update to version 0.9.0, or a newer patched version

Meridia: Update to version 2.2.8, or a newer patched version

Nokke: Update to version 1.2.3, or a newer patched version

Ona: Update to version 1.18.3, or a newer patched version

One Page Conference: Update to version 1.1.0, or a newer patched version

Patch Lite: Update to version 1.0.8, or a newer patched version

PixiGo: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Purosa: Update to version 1.1.3, or a newer patched version

Rovenstart: Update to version 1.2.2, or a newer patched version

SalesZone: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Shuban: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Simplifii: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Speculor: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

start: Update to version 1.0.15, or a newer patched version

Startup Blog: Update to version 1.14, or a newer patched version

Suffice: Update to version 1.1.6, or a newer patched version

Temp Mail X: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

The Authority: Update to version 1.0.2, or a newer patched version

Topcat Lite: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

TotalPress: Update to version 6.5.3.1, or a newer patched version

Travel Agency Booking: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Travel Tour: Update to version 1.2.0, or a newer patched version

Videoblog: Update to version 1.3.3, or a newer patched version

Villar: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Viralike: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Wellness: Update to version 1.1.8, or a newer patched version

WP-Forge: Update to version 6.5.3.1, or a newer patched version

WP Moose: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WP Sierra: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

WPCake: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

Yuki: Update to version 1.3.8, or a newer patched version