Plugin vulnerabilities unpatched and unacknowledged
Known security vulnerabilities in the plugin remain unpatched and unannounced, leaving site owners exposed and asking when a fix will ship.
Tier I · Proven The best-established problems.
5 public reports · first reported 12 December 2023 · last reported 9 March 2026
What's going wrong
Site owners using the Campaign Monitor for WordPress plugin report that security scanners such as Patchstack, WPScan, Wordfence and Jetpack flag it with access control or cross-site scripting issues.
AI-assisted: written with the help of AI from the reports. The idea report has the full summary.
In the idea report
- The full summary.
- The products the 5 reports are about, and how many came each month.
- Related problems.
No business has been found with this problem yet, so the report has no contacts. All sales are final — no refunds. Pricing.