Wordfence Intelligence Weekly WordPress Vulnerability Report (January 1, 2024 to January 7, 2024)

🗓️ 11 Jan 2024 16:24:15Reported by Chloe ChamberlandType

Wordfence weekly WordPress vulnerability report for January 1, 2024 to January 7, 2024. 85 vulnerabilities in 74 plugins and 2 themes added. 39 vulnerability researchers contributed. Free access to vulnerability API, webhook integration, and CLI scanner. Enhanced protection deployed via firewall rules

Reporter	Title	Published	Views	Family All 1072
WPVulnDB	RSS Aggregator by Feedzy < 4.3.3 - Author+ Stored Cross-Site Scripting	12 Jan 202400:00	–	wpvulndb
WPVulnDB	WP-Members Membership Plugin < 3.4.9 - Contributor+ Sensitive Information Exposure	3 Jan 202400:00	–	wpvulndb
WPVulnDB	Google Analytics by Monster Insights < 8.22.0 - Missing Authorization	12 Jan 202400:00	–	wpvulndb
WPVulnDB	HTML5 SoundCloud Player <= 2.8.0 - Authenticated (Author+) PHP Object Injection	12 Jan 202400:00	–	wpvulndb
WPVulnDB	Easy SVG Allow <= 1.0 - Author+ Stored XSS via SVG	3 Jan 202400:00	–	wpvulndb
WPVulnDB	WooCommerce Tranzila Gateway <= 1.0.8 - Unauthenticated PHP Object Injection	12 Jan 202400:00	–	wpvulndb
WPVulnDB	Autotitle for WordPress <= 1.0.3 - Settings Update to Stored XSS via CSRF	2 Jan 202400:00	–	wpvulndb
WPVulnDB	JS & CSS Script Optimizer <= 0.3.3 - Cross-Site Request Forgery	12 Jan 202400:00	–	wpvulndb
WPVulnDB	Infogram <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting	12 Jan 202400:00	–	wpvulndb
WPVulnDB	Easy Social Feed < 6.5.3 - Subscriber+ Settings Update	3 Jan 202400:00	–	wpvulndb

11 Jan 2024 16:24Current

10High risk

Vulners AI Score10

EPSS0.51394