Wordfence Intelligence Weekly WordPress Vulnerability Report (December 16, 2024 to January 5, 2025)

🗓️ 09 Jan 2025 14:35:47Reported by Chloe ChamberlandType

wordfence🔗 www.wordfence.com👁 184 Views

Wordfence reports 348 vulnerabilities in WordPress plugins and themes. Join Bug Bounty Program for rewards.

Reporter	Title	Published	Views	Family All 4132
zdt	WordPress Partners 0.2.0 PHP Object Injection Vulnerability	15 Jan 202500:00	–	zdt
zdt	WordPress VRPConnector 2.0.1 PHP Object Injection Vulnerability	15 Jan 202500:00	–	zdt
zdt	WordPress ARPrice 4.0.3 PHP Object Injection Vulnerability	15 Jan 202500:00	–	zdt
zdt	WordPress SuperBackup 2.3.3 Missing Authorization Vulnerability	15 Jan 202500:00	–	zdt
zdt	WordPress SuperBackup 2.3.3 Shell Upload Vulnerability	15 Jan 202500:00	–	zdt
zdt	WordPress Fancy Product Designer 6.4.3 SQL Injection Vulnerability	15 Jan 202500:00	–	zdt
Vulnrichment	CVE-2024-56248 WordPress WPMasterToolKit plugin <= 1.13.1 - Arbitrary File Download vulnerability	2 Jan 202512:01	–	vulnrichment
Vulnrichment	CVE-2024-56249 WordPress WPMasterToolKit plugin <= 1.13.1 - Arbitrary File Upload vulnerability	2 Jan 202512:01	–	vulnrichment
Vulnrichment	CVE-2024-56250 WordPress Just Writing Statistics plugin <= 4.7 - SQL Injection vulnerability	2 Jan 202512:01	–	vulnrichment
Vulnrichment	CVE-2024-56251 WordPress Event Espresso plugin <= 5.0.28.decaf - Cross Site Request Forgery (CSRF) vulnerability	2 Jan 202512:01	–	vulnrichment

09 Jan 2025 14:35Current

10Critical risk

Vulners AI Score10

CVSS 3.110

EPSS0.30783

SSVC

wordfence intelligence bug bounty program vulnerability report wordpress vulnerabilities security database vulnerability scanner