Known plugin vulnerabilities left unpatched
Known security vulnerabilities stay unpatched for months while site owners wait for an update.
Tier I · Proven The best-established problems.
11 public reports · first reported 29 April 2024 · last reported 14 October 2026
What's going wrong
Owners of sites using this WordPress plugin report that known security flaws, including cross-site scripting and arbitrary file access, stayed open for months while they waited for a patch.
AI-assisted: written with the help of AI from the reports. The idea report has the full summary.
In the idea report
- The full summary.
- The products the 11 reports are about, and how many came each month.
- Related problems.
No business has been found with this problem yet, so the report has no contacts. All sales are final — no refunds. Pricing.