Wordfence Intelligence Weekly WordPress Vulnerability Report (February 3, 2025 to February 9, 2025)

🗓️ 13 Feb 2025 15:34:03Reported by Chloe ChamberlandType

wordfence

wordfence🔗 www.wordfence.com👁 50 Views

141 vulnerabilities in 132 plugins and 3 themes reported. Free Wordfence tools ensure site security.

Reporter	Title	Published	Views	Family All 1538
Patchstack	WordPress CM Header & Footer Script Loader plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability	3 Feb 202516:18	–	patchstack
Patchstack	WordPress Admin and Site Enhancements (ASE) Pro Plugin <= 7.6.2.1 - Privilege Escalation vulnerability	3 Feb 202508:58	–	patchstack
Patchstack	WordPress WP System Log plugin <= 1.2.4 - Cross-Site Request Forgery vulnerability	24 Feb 202523:20	–	patchstack
Patchstack	WordPress WP Social Stream plugin <= 1.1 - CSRF to Stored XSS vulnerability	3 Feb 202516:12	–	patchstack
Patchstack	WordPress Paytm Payment Donation Plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability	3 Feb 202520:17	–	patchstack
Patchstack	WordPress aThemes Addons for Elementor plugin <= 1.0.8 - Stored Cross Site Scripting (XSS) vulnerability	3 Feb 202519:50	–	patchstack
Patchstack	WordPress Blog, Posts and Category Filter for Elementor plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability	3 Feb 202519:46	–	patchstack
Patchstack	WordPress WPMovieLibrary plugin <= 2.1.4.8 - Reflected Cross-Site Scripting vulnerability	12 Feb 202522:08	–	patchstack
Patchstack	WordPress CURCY – Multi Currency for WooCommerce plugin <= 2.2.5 - Unauthenticated Arbitrary Shortcode Execution via get_products_price Function vulnerability	5 Feb 202521:59	–	patchstack
Patchstack	WordPress Image Rotator plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability	3 Feb 202516:12	–	patchstack

13 Feb 2025 15:34Current

9.8High risk

Vulners AI Score9.8

CVSS 3.19.8

EPSS0.00775

SSVC

wordpress vulnerabilities plugin security theme security bug bounty program vulnerability database