Wordfence Intelligence Weekly WordPress Vulnerability Report (September 8, 2025 to September 14, 2025)

🗓️ 18 Sep 2025 14:42:05Reported by Chloe ChamberlandType

wordfence🔗 www.wordfence.com👁 135 Views

Wordfence Intelligence weekly report (Sept 8–14, 2025) on WordPress plugin and theme vulnerabilities.

Reporter	Title	Published	Views	Family All 1055
Vulnrichment	CVE-2025-8479 Zoho Flow <= 2.14.1 - Cross-Site Request Forgery	11 Sep 202506:43	–	vulnrichment
Vulnrichment	CVE-2025-8481 Blog Designer For Elementor – Post Slider, Post Carousel, Post Grid <= 1.1.7 - Cross-Site Request Forgery	11 Sep 202507:24	–	vulnrichment
Vulnrichment	CVE-2025-8492 Salon Booking System <= 10.20 - Missing Authorization to Unauthenticated AJAX Actions Execution	11 Sep 202507:24	–	vulnrichment
Vulnrichment	CVE-2025-8570 BeyondCart Connector <= 2.1.0 - Missing Configuration of JWT Secret to Unauthenticated Privilege Escalation via determine_current_user Filter	11 Sep 202507:24	–	vulnrichment
Vulnrichment	CVE-2025-8575 LWS Cleaner <= 2.4.1.3 - Authenticated (Administrator+) Arbitrary File Deletion via 'lws_cl_delete_file'	12 Sep 202505:24	–	vulnrichment
Vulnrichment	CVE-2025-8686 WP Easy FAQs <= 1.0.5 - Authenticated (Author+) Stored Cross-Site Scripting via WP_EASY_FAQ Shortcode	11 Sep 202507:24	–	vulnrichment
Vulnrichment	CVE-2025-8689 Elements Plus! <= 2.16.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets	11 Sep 202507:24	–	vulnrichment
Vulnrichment	CVE-2025-8691 WP Scriptcase <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter	11 Sep 202507:25	–	vulnrichment
Vulnrichment	CVE-2025-8692 Coupon API <= 6.2.12 - Authenticated (Administrator+) SQL Injection via 'log_duration'	11 Sep 202507:24	–	vulnrichment
Vulnrichment	CVE-2025-8721 Workable API <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via workable_jobs Shortcode	11 Sep 202507:24	–	vulnrichment

18 Sep 2025 14:42Current

8.8High risk

Vulners AI Score8.8

CVSS 3.19.8

EPSS0.008

SSVC

Wordfence Intelligence WordPress plugins WordPress themes vulnerability report vulnerability database vulnerability researchers