Known security holes with no patch in sight
The plugin has security holes flagged by Wordfence that remain unpatched, and site owners cannot tell whether it is still maintained.
Tier II · Emerging Problems that are still building up.
3 public reports · first reported 16 June 2022 · last reported 8 January 2026
What's going wrong
Site owners running this plugin report that Wordfence and similar scanners flag cross-site scripting and cross-site request forgery weaknesses in it.
AI-assisted: written with the help of AI from the reports. The idea report has the full summary.
In the idea report
- The full summary.
- The products the 3 reports are about, and how many came each month.
- Related problems.
No business has been found with this problem yet, so the report has no contacts. All sales are final — no refunds. Pricing.