Skip to content

Product added

What a record said when it was published, what it says now, and the commit that changed it.

225 changes refused · newest first · grouped by dayCSVJSONRSS

SinceClear all
ChangedSourceRows

These rows are not counted anywhere on this site. Checked and refused means we compared this change and then rejected it: the false positive filter for this kind of change judged it to be a false positive rather than a real change. The row is shown so you can check the filter and disagree with us, and it is counted in no figure on this site. No advisory change is here: the advisory engine counts the 2,291 version pairs its filters refused by class rather than writing them out one by one, so this view holds CVE and KEV changes only.

Rows we checked and refused, counted nowhere of "Product added" published by Wordfence, newest first, one line per change to a CVE record, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.Record, Which record was edited, by its CVE id, or how many records one collapsed line stands on.Vendor · product, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry.What changedDays to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Tue 25 Aug 2026· 2 changes
2026-08-25CVE-2024-5647Wordfencenot named as affected at publication, now names divi torque liteNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed badhonrocks/divi torque – plugin for divi theme and builder; a new product identity is not establishedTime to revision 418 days
2026-08-25CVE-2024-5647Wordfencenot named as affected at publication, now names shortcodes ultimate – content elementsNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed gn_themes/wp shortcodes plugin — shortcodes ultimate; a new product identity is not establishedTime to revision 418 days
Fri 14 Aug 2026· 1 change
2026-08-14CVE-2026-3885Wordfencenot named as affected at publication, now names shortcodes ultimate – content elementsNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed gn_themes/wp shortcodes plugin — shortcodes ultimate; a new product identity is not establishedTime to revision 121 days
Sat 16 May 2026· 1 change
2026-05-16CVE-2026-0974Wordfencenot named as affected at publication, now names orderable – restaurant & food ordering systemNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed orderable/orderable – wordpress restaurant online ordering system and food ordering plugin; a new product identity is not establishedTime to revision 86 days
Wed 8 Apr 2026· 169 changes
2026-04-08CVE-2023-0292Wordfencenot named as affected at publication, now names quiz and survey master (qsm) – easy quiz and survey makerNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed expresstech/quiz and survey master – best quiz, exam and survey plugin for wordpress; a new product identity is not establishedTime to revision 1,035 days
2026-04-08CVE-2023-0895Wordfencenot named as affected at publication, now names wp coder – insert & manage code snippetsNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpcalc/wp coder – add custom html, css and js code; a new product identity is not establishedTime to revision 1,146 days
2026-04-08CVE-2023-1807Wordfencenot named as affected at publication, now names stax addons for elementorNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed staxwp/elementor addons, widgets and enhancements – stax; a new product identity is not establishedTime to revision 1,035 days
2026-04-08Wordfencenot named as affected at publication, now names directorist: ai-powered business directory, listings & classified adsnot counted: Product identity rewritten with unchanged scopeTime to revision 778 to 1,035 days
2026-04-08CVE-2023-1889same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpwax/directorist – wordpress business directory plugin with classified ads listings; a new product identity is not establishedTime to revision 1,035 days
2026-04-08CVE-2024-1322same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpwax/directorist – wordpress business directory plugin with classified ads listings; a new product identity is not establishedTime to revision 778 days
2026-04-08Wordfencenot named as affected at publication, now names gutenberg essential blocks – page builder for gutenberg blocks & patternsnot counted: Product identity rewritten with unchanged scopeTime to revision 407 to 1,035 days
2026-04-08CVE-2023-2083same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpdevteam/essential blocks – page builder gutenberg blocks, patterns & templates; a new product identity is not establishedTime to revision 1,035 days
2026-04-08CVE-2023-2085same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpdevteam/essential blocks – page builder gutenberg blocks, patterns & templates; a new product identity is not establishedTime to revision 1,035 days
2026-04-08CVE-2023-2087same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpdevteam/essential blocks – page builder gutenberg blocks, patterns & templates; a new product identity is not establishedTime to revision 1,035 days
2026-04-08CVE-2023-4386same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpdevteam/essential blocks – page builder gutenberg blocks, patterns & templates; a new product identity is not establishedTime to revision 901 days
2026-04-08CVE-2023-7071same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpdevteam/essential blocks – page builder gutenberg blocks, patterns & templates; a new product identity is not establishedTime to revision 818 days
2026-04-08CVE-2024-12045same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpdevteam/essential blocks – page builder gutenberg blocks, patterns & templates; a new product identity is not establishedTime to revision 456 days
2026-04-08CVE-2024-13803same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpdevteam/essential blocks – page builder gutenberg blocks, patterns & templates; a new product identity is not establishedTime to revision 407 days
2026-04-08CVE-2024-4891same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpdevteam/essential blocks – page builder gutenberg blocks, patterns & templates; a new product identity is not establishedTime to revision 691 days
2026-04-08CVE-2023-2170Wordfencenot named as affected at publication, now names tag, category, and taxonomy manager – ai autotagger with openaiNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed stevejburge/taxopress is the wordpress tag, category, and taxonomy manager; a new product identity is not establishedTime to revision 1,085 days
2026-04-08CVE-2023-2275Wordfencenot named as affected at publication, now names wcfm – multivendor marketplace rest api for woocommerceNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wclovers/woocommerce multivendor marketplace – rest api; a new product identity is not establishedTime to revision 1,035 days
2026-04-08Wordfencenot named as affected at publication, now names iptanus file uploadnot counted: Product identity rewritten with unchanged scopeTime to revision 456 to 1,035 days
2026-04-08CVE-2023-2688same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed nickboss/wordpress file upload; a new product identity is not establishedTime to revision 1,035 days
2026-04-08CVE-2024-11635same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed nickboss/wordpress file upload; a new product identity is not establishedTime to revision 456 days
2026-04-08CVE-2023-2706Wordfencenot named as affected at publication, now names otp login & register woocommerceNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed xootix/otp login woocommerce & gravity forms; a new product identity is not establishedTime to revision 1,058 days
2026-04-08CVE-2023-2717Wordfencenot named as affected at publication, now names groundhogg — crm, newsletters, and marketing automationNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed trainingbusinesspros/wordpress crm, email & marketing automation for wordpress | award winner — groundhogg; a new product identity is not establishedTime to revision 1,055 days
2026-04-08CVE-2023-3087Wordfencenot named as affected at publication, now names fluentsmtp – wp smtp plugin with amazon ses, sendgrid, mailgun, postmark, google and any smtp providerNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed techjewel/fluentsmtp – wp mail smtp, amazon ses, sendgrid, mailgun and any smtp connector plugin; a new product identity is not establishedTime to revision 1,002 days
2026-04-08Wordfencenot named as affected at publication, now names b2bking — ultimate woocommerce b2b and wholesale plugin — wholesale prices, bulk order form & morenot counted: Product identity rewritten with unchanged scopeTime to revision 1,037 days
2026-04-08CVE-2023-3125same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed webwizardsdev/b2bking — ultimate woocommerce wholesale and b2b solution; a new product identity is not establishedTime to revision 1,037 days
2026-04-08CVE-2023-3126same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed webwizardsdev/b2bking — ultimate woocommerce wholesale and b2b solution; a new product identity is not establishedTime to revision 1,037 days
2026-04-08CVE-2023-3132Wordfencenot named as affected at publication, now names mainwp child – securely connects to the mainwp dashboard to manage multiple sitesNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed mainwp/mainwp child – securely connects sites to the mainwp wordpress manager dashboard; a new product identity is not establishedTime to revision 1,017 days
2026-04-08Wordfencenot named as affected at publication, now names user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login buildernot counted: Product identity rewritten with unchanged scopeTime to revision 706 to 1,001 days
2026-04-08CVE-2023-3342same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpeverest/user registration – custom registration form, login form and user profile for wordpress; a new product identity is not establishedTime to revision 1,001 days
2026-04-08CVE-2024-2417same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpeverest/user registration – custom registration form, login form, and user profile wordpress plugin; a new product identity is not establishedTime to revision 706 days
2026-04-08CVE-2023-3352Wordfencenot named as affected at publication, now names smush – image optimization, compression, lazy load, webp & cdnNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpmudev/smush image optimization – optimize images | compress & lazy load images | convert webp | image cdn; a new product identity is not establishedTime to revision 657 days
2026-04-08Wordfencenot named as affected at publication, now names profilegrid – user profiles, groups and communitiesnot counted: Product identity rewritten with unchanged scopeTime to revision 706 to 996 days
2026-04-08CVE-2023-3403same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed metagauss/profilegrid – user profiles, memberships, groups and communities; a new product identity is not establishedTime to revision 996 days
2026-04-08CVE-2023-3714same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed metagauss/profilegrid – user profiles, memberships, groups and communities; a new product identity is not establishedTime to revision 996 days
2026-04-08CVE-2024-3606same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed metagauss/profilegrid – user profiles, memberships, groups and communities; a new product identity is not establishedTime to revision 706 days
2026-04-08CVE-2023-3764Wordfencenot named as affected at publication, now names pdf builder for woocommerce. create invoices,packing slips and moreNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed edgarrojas/woocommerce pdf invoice builder, create invoices, packing slips and more; a new product identity is not establishedTime to revision 952 days
2026-04-08Wordfencenot named as affected at publication, now names wp ultimate csv importer – import csv, xml & excel into wordpressnot counted: Product identity rewritten with unchanged scopeTime to revision 979 days
2026-04-08CVE-2023-4141same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed smackcoders/import all pages, post types, products, orders, and users as xml & csv; a new product identity is not establishedTime to revision 979 days
2026-04-08CVE-2023-4142same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed smackcoders/import all pages, post types, products, orders, and users as xml & csv; a new product identity is not establishedTime to revision 979 days
2026-04-08Wordfencenot named as affected at publication, now names wpvivid — backup, migration & stagingnot counted: Product identity rewritten with unchanged scopeTime to revision 726 to 901 days
2026-04-08CVE-2023-4637same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpvividplugins/migration, backup, staging – wpvivid; a new product identity is not establishedTime to revision 793 days
2026-04-08CVE-2023-5121same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpvividplugins/migration, backup, staging – wpvivid; a new product identity is not establishedTime to revision 901 days
2026-04-08CVE-2024-3054same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpvividplugins/migration, backup, staging – wpvivid; a new product identity is not establishedTime to revision 726 days
2026-04-08CVE-2023-4960Wordfencenot named as affected at publication, now names wcfm marketplace – multivendor marketplace for woocommerceNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wclovers/wcfm marketplace – best multivendor marketplace for woocommerce; a new product identity is not establishedTime to revision 818 days
2026-04-08CVE-2023-5291Wordfencenot named as affected at publication, now names blog filter post filteringNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed awordpresslife/blog filter – advanced post filtering with categories or tags, post portfolio gallery, blog design template, post layout; a new product identity is not establishedTime to revision 918 days
2026-04-08CVE-2023-5467Wordfencenot named as affected at publication, now names geo my wpNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed ninjew/geo my wordpress; a new product identity is not establishedTime to revision 912 days
2026-04-08CVE-2023-5504Wordfencenot named as affected at publication, now names backwpup – wordpress backup & restore pluginNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wp_media/backwpup – wordpress backup plugin; a new product identity is not establishedTime to revision 818 days
2026-04-08CVE-2023-5741Wordfencenot named as affected at publication, now names custom form builder, contact forms, payment forms, surveys, pollsNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed powr/contact form – custom builder, payment form, and more; a new product identity is not establishedTime to revision 877 days
2026-04-08CVE-2023-5982Wordfencenot named as affected at publication, now names updraftplus: wp backup & migration pluginNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed davidanderson/updraftplus: wordpress backup & migration plugin; a new product identity is not establishedTime to revision 883 days
2026-04-08Wordfencenot named as affected at publication, now names spectra gutenberg blocks – website builder for the block editornot counted: Product identity rewritten with unchanged scopeTime to revision 492 to 729 days
2026-04-08CVE-2023-6486same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed brainstormforce/spectra – wordpress gutenberg blocks; a new product identity is not establishedTime to revision 729 days
2026-04-08CVE-2024-10484same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed brainstormforce/spectra – wordpress gutenberg blocks; a new product identity is not establishedTime to revision 492 days
2026-04-08CVE-2024-1814same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed brainstormforce/spectra – wordpress gutenberg blocks; a new product identity is not establishedTime to revision 685 days
2026-04-08Wordfencenot named as affected at publication, now names depicter — popup & slider buildernot counted: Product identity rewritten with unchanged scopeTime to revision 658 to 825 days
2026-04-08CVE-2023-6493same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed averta/depicter slider – responsive image slider, video slider & post slider; a new product identity is not establishedTime to revision 825 days
2026-04-08CVE-2024-4390same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed averta/slider & popup builder by depicter – add image slider, carousel slider, exit intent popup, popup modal, coupon popup, post slider carousel; a new product identity is not establishedTime to revision 658 days
2026-04-08CVE-2023-6884Wordfencenot named as affected at publication, now names rich showcase for google reviewsNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed widgetpack/plugin for google reviews; a new product identity is not establishedTime to revision 793 days
2026-04-08CVE-2023-6953Wordfencenot named as affected at publication, now names fluent pdf generatorNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpmanageninja/pdf generator for fluent forms – the contact form plugin; a new product identity is not establishedTime to revision 793 days
2026-04-08CVE-2023-6957Wordfencenot named as affected at publication, now names fluent forms – customizable contact forms, survey, quiz, & conversational form builderNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed techjewel/contact form plugin by fluent forms for quiz, survey, and drag & drop wp form builder; a new product identity is not establishedTime to revision 756 days
2026-04-08CVE-2024-0377Wordfencenot named as affected at publication, now names lifterlms – wp lms for elearning, online courses, & quizzesNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed chrisbadgett/lifterlms – wordpress lms plugin for elearning; a new product identity is not establishedTime to revision 756 days
2026-04-08CVE-2024-0434Wordfencenot named as affected at publication, now names travelly – tour & travel booking manager for woocommerce | tour & hotel booking solutionNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed magepeopleteam/wordpress tour & travel booking plugin for woocommerce – wptravelly; a new product identity is not establishedTime to revision 680 days
2026-04-08Wordfencenot named as affected at publication, now names the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommercenot counted: Product identity rewritten with unchanged scopeTime to revision 432 to 699 days
2026-04-08CVE-2024-0445same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed posimyththemes/the plus addons for elementor – elementor addons, page templates, widgets, mega menu, woocommerce; a new product identity is not establishedTime to revision 699 days
2026-04-08CVE-2024-10365same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed posimyththemes/the plus addons for elementor – elementor addons, page templates, widgets, mega menu, woocommerce; a new product identity is not establishedTime to revision 505 days
2026-04-08CVE-2024-11829same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed posimyththemes/the plus addons for elementor – elementor addons, page templates, widgets, mega menu, woocommerce; a new product identity is not establishedTime to revision 432 days
2026-04-08CVE-2024-2784same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed posimyththemes/the plus addons for elementor – elementor addons, page templates, widgets, mega menu, woocommerce; a new product identity is not establishedTime to revision 685 days
2026-04-08CVE-2024-2785same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed posimyththemes/the plus addons for elementor – elementor addons, page templates, widgets, mega menu, woocommerce; a new product identity is not establishedTime to revision 699 days
2026-04-08CVE-2024-4484same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed posimyththemes/the plus addons for elementor – elementor addons, page templates, widgets, mega menu, woocommerce; a new product identity is not establishedTime to revision 685 days
2026-04-08CVE-2024-4983same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed posimyththemes/the plus addons for elementor – elementor addons, page templates, widgets, mega menu, woocommerce; a new product identity is not establishedTime to revision 650 days
2026-04-08Wordfencenot named as affected at publication, now names orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & morenot counted: Product identity rewritten with unchanged scopeTime to revision 454 to 793 days
2026-04-08CVE-2024-0508same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed themeisle/orbit fox by themeisle; a new product identity is not establishedTime to revision 793 days
2026-04-08CVE-2024-13183same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed themeisle/orbit fox by themeisle; a new product identity is not establishedTime to revision 454 days
2026-04-08CVE-2024-1497same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed themeisle/orbit fox by themeisle; a new product identity is not establishedTime to revision 756 days
2026-04-08CVE-2024-1499same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed themeisle/orbit fox by themeisle; a new product identity is not establishedTime to revision 756 days
2026-04-08Wordfencenot named as affected at publication, now names royal addons for elementor – addons and templates kit for elementornot counted: Product identity rewritten with unchanged scopeTime to revision 671 to 791 days
2026-04-08CVE-2024-0511same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wproyal/royal elementor addons and templates; a new product identity is not establishedTime to revision 791 days
2026-04-08CVE-2024-0512same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wproyal/royal elementor addons and templates; a new product identity is not establishedTime to revision 778 days
2026-04-08CVE-2024-0514same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wproyal/royal elementor addons and templates; a new product identity is not establishedTime to revision 778 days
2026-04-08CVE-2024-0515same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wproyal/royal elementor addons and templates; a new product identity is not establishedTime to revision 778 days
2026-04-08CVE-2024-0516same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wproyal/royal elementor addons and templates; a new product identity is not establishedTime to revision 778 days
2026-04-08CVE-2024-4087same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wproyal/royal elementor addons and templates; a new product identity is not establishedTime to revision 677 days
2026-04-08CVE-2024-4488same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wproyal/royal elementor addons and templates; a new product identity is not establishedTime to revision 671 days
2026-04-08Wordfencenot named as affected at publication, now names essential addons for elementor – popular elementor templates & widgetsnot counted: Product identity rewritten with unchanged scopeTime to revision 279 to 793 days
2026-04-08CVE-2024-0586same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpdevteam/essential addons for elementor – best elementor templates, widgets, kits & woocommerce builders; a new product identity is not establishedTime to revision 793 days
2026-04-08CVE-2024-1171same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpdevteam/essential addons for elementor – best elementor templates, widgets, kits & woocommerce builders; a new product identity is not establishedTime to revision 778 days
2026-04-08CVE-2024-1172same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpdevteam/essential addons for elementor – best elementor templates, widgets, kits & woocommerce builders; a new product identity is not establishedTime to revision 778 days
2026-04-08CVE-2024-1276same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpdevteam/essential addons for elementor – best elementor templates, widgets, kits & woocommerce builders; a new product identity is not establishedTime to revision 778 days
2026-04-08CVE-2024-2623same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpdevteam/essential addons for elementor – best elementor templates, widgets, kits & woocommerce builders; a new product identity is not establishedTime to revision 729 days
2026-04-08CVE-2024-3333same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpdevteam/essential addons for elementor – best elementor templates, widgets, kits & woocommerce builders; a new product identity is not establishedTime to revision 721 days
2026-04-08CVE-2024-4624same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpdevteam/essential addons for elementor – best elementor templates, widgets, kits & woocommerce builders; a new product identity is not establishedTime to revision 694 days
2026-04-08CVE-2024-5073same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpdevteam/essential addons for elementor – best elementor templates, widgets, kits & woocommerce builders; a new product identity is not establishedTime to revision 679 days
2 more rows in this change are not listed here. Open all 10 rows
2026-04-08CVE-2024-0612Wordfencenot named as affected at publication, now names content views – post grid & filter, recent posts, category posts … (shortcode, gutenberg blocks, and widgets for elementor)Not counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed pt-guy/content views – post grid, slider, accordion (gutenberg blocks and shortcode); a new product identity is not establishedTime to revision 793 days
2026-04-08CVE-2024-0660Wordfencenot named as affected at publication, now names formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builderNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed strategy11team/formidable forms – contact form, survey, quiz, payment, calculator form & custom form builder; a new product identity is not establishedTime to revision 793 days
2026-04-08CVE-2024-0681Wordfencenot named as affected at publication, now names page and post restrictionNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed cyberlord92/page restriction wordpress (wp) – protect wp pages/post; a new product identity is not establishedTime to revision 756 days
2026-04-08CVE-2024-0836Wordfencenot named as affected at publication, now names review schema – review & structure data schema pluginNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed techlabpro1/wordpress review & structure data schema plugin – review schema; a new product identity is not establishedTime to revision 798 days
2026-04-08Wordfencenot named as affected at publication, now names element pack – widgets, templates & addons for elementornot counted: Product identity rewritten with unchanged scopeTime to revision 473 to 732 days
2026-04-08CVE-2024-0837same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed bdthemes/element pack elementor addons (header footer, template library, dynamic grid & carousel, remote arrows); a new product identity is not establishedTime to revision 732 days
2026-04-08CVE-2024-11852same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed bdthemes/element pack elementor addons (header footer, template library, dynamic grid, carousel and remote arrows); a new product identity is not establishedTime to revision 473 days
2026-04-08CVE-2024-3926same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed bdthemes/element pack elementor addons (header footer, template library, dynamic grid & carousel, remote arrows); a new product identity is not establishedTime to revision 686 days
2026-04-08CVE-2024-4359same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed bdthemes/element pack elementor addons (header footer, template library, dynamic grid & carousel, remote arrows); a new product identity is not establishedTime to revision 608 days
2026-04-08CVE-2024-5555same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed bdthemes/element pack elementor addons (header footer, template library, dynamic grid & carousel, remote arrows); a new product identity is not establishedTime to revision 629 days
2026-04-08CVE-2024-0952Wordfencenot named as affected at publication, now names erp: complete hr, accounting & crm suite with woocommerce crm supportNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wedevs/wp erp | complete hr solution with recruitment & job listings | woocommerce crm & accounting; a new product identity is not establishedTime to revision 729 days
2026-04-08Wordfencenot named as affected at publication, now names webtoffee woocommerce pdf invoices, packing slips, delivery notes & shipping labelsnot counted: Product identity rewritten with unchanged scopeTime to revision 733 to 748 days
2026-04-08CVE-2024-0957same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed webtoffee/woocommerce pdf invoices, packing slips, delivery notes and shipping labels; a new product identity is not establishedTime to revision 748 days
2026-04-08CVE-2024-3216same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed webtoffee/woocommerce pdf invoices, packing slips, delivery notes and shipping labels; a new product identity is not establishedTime to revision 733 days
2026-04-08CVE-2024-10055Wordfencenot named as affected at publication, now names wp click to chat – email, live chat, call & book now buttonsNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed ninjateam/click to chat – wp support all-in-one floating widget; a new product identity is not establishedTime to revision 537 days
2026-04-08Wordfencenot named as affected at publication, now names project manager – ai powered project management, task management, kanban board & time trackernot counted: Product identity rewritten with unchanged scopeTime to revision 417 to 512 days
2026-04-08CVE-2024-10174same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wedevs/wp project manager – task, team, and project management plugin featuring kanban board and gantt charts; a new product identity is not establishedTime to revision 512 days
2026-04-08CVE-2024-10548same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wedevs/wp project manager – task, team, and project management plugin featuring kanban board and gantt charts; a new product identity is not establishedTime to revision 476 days
2026-04-08CVE-2024-13752same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wedevs/wp project manager – task, team, and project management plugin featuring kanban board and gantt charts; a new product identity is not establishedTime to revision 417 days
2026-04-08Wordfencenot named as affected at publication, now names sms alert – sms & otp for woocommerce, order notifications & abandoned cart recoverynot counted: Product identity rewritten with unchanged scopeTime to revision 526 to 756 days
2026-04-08CVE-2024-10233same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed cozyvision1/sms alert order notifications – woocommerce; a new product identity is not establishedTime to revision 526 days
2026-04-08CVE-2024-1489same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed cozyvision1/sms alert order notifications – woocommerce; a new product identity is not establishedTime to revision 756 days
2026-04-08CVE-2024-10247Wordfencenot named as affected at publication, now names video gallery – youtube gallery, vimeo, video portfolio, image portfolio and image galleryNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed totalsoft/video gallery – youtube gallery and vimeo gallery; a new product identity is not establishedTime to revision 489 days
2026-04-08CVE-2024-10392Wordfencenot named as affected at publication, now names ai puffer – your ai engine for wordpress (formerly ai power)Not counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed senols/ai power: complete ai pack; a new product identity is not establishedTime to revision 525 days
2026-04-08CVE-2024-10508Wordfencenot named as affected at publication, now names registrationmagic – custom registration forms, user registration, payment, and user loginNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed metagauss/registrationmagic – user registration plugin with custom registration forms; a new product identity is not establishedTime to revision 515 days
2026-04-08CVE-2024-10536Wordfencenot named as affected at publication, now names fancypost – post blocks, grids & sliders for block editor and elementorNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpqode/fancypost – best ultimate post block, post grid, layouts, carousel, slider for gutenberg & elementor; a new product identity is not establishedTime to revision 457 days
2026-04-08CVE-2024-10542Wordfencenot named as affected at publication, now names spam protection, honeypot, anti-spam by cleantalkNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed cleantalk/spam protection, anti-spam, firewall by cleantalk; a new product identity is not establishedTime to revision 499 days
2026-04-08CVE-2024-10666Wordfencenot named as affected at publication, now names feeds for twitter – embed social media posts with live updatesNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed bplugins/easy twitter feed – twitter feeds plugin for wp; a new product identity is not establishedTime to revision 503 days
2026-04-08Wordfencenot named as affected at publication, now names affiliate-toolkit – multi-network affiliate & amazon product displaynot counted: Product identity rewritten with unchanged scopeTime to revision 503 to 762 days
2026-04-08CVE-2024-10675same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed cservit/affiliate-toolkit – wp affiliate plugin with amazon; a new product identity is not establishedTime to revision 503 days
2026-04-08CVE-2024-1851same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed cservit/affiliate-toolkit – wordpress affiliate plugin; a new product identity is not establishedTime to revision 762 days
2026-04-08CVE-2024-10685Wordfencenot named as affected at publication, now names business essentials for contact form 7Not counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed scottpaterson/contact form 7 redirect & thank you page; a new product identity is not establishedTime to revision 513 days
2026-04-08CVE-2024-10687Wordfencenot named as affected at publication, now names contest gallery – upload & vote photos, media, sell with paypal & stripeNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed contest-gallery/photos, files, youtube, twitter, instagram, tiktok, ecommerce contest gallery – upload, vote, sell via paypal, social share buttons; a new product identity is not establishedTime to revision 519 days
2026-04-08CVE-2024-10692Wordfencenot named as affected at publication, now names powerpack addons for elementor (free widgets, extensions and templates)Not counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed ideaboxcreations/powerpack elementor addons (free widgets, extensions and templates); a new product identity is not establishedTime to revision 488 days
2026-04-08CVE-2024-10878Wordfencenot named as affected at publication, now names sugar calendar – events calendar, event tickets, and events management platformNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed smub/sugar calendar – event calendar, event tickets, and event management platform; a new product identity is not establishedTime to revision 498 days
2026-04-08Wordfencenot named as affected at publication, now names product table and list builder for woocommerce litenot counted: Product identity rewritten with unchanged scopeTime to revision 505 to 620 days
2026-04-08CVE-2024-10899same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wcproducttable/woocommerce product table lite; a new product identity is not establishedTime to revision 505 days
2026-04-08CVE-2024-6458same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wcproducttable/woocommerce product table lite; a new product identity is not establishedTime to revision 620 days
2026-04-08CVE-2024-10970Wordfencenot named as affected at publication, now names motors – car dealership & classified listings pluginNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed stylemix/motors – car dealer, classifieds & listing; a new product identity is not establishedTime to revision 448 days
2026-04-08CVE-2024-11202Wordfencenot named as affected at publication, now names cm business directory – optimise and showcase local business and 5 morenot counted: Product identity rewritten with unchanged scopeTime to revision 498 days
2026-04-08CVE-2024-11202same vendor as the line abovenot named as affected at publication, now names cm business directory – optimise and showcase local businessNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed creativemindssolutions/cm business directory plugin – business listing directory; a new product identity is not establishedTime to revision 498 days
2026-04-08CVE-2024-11202same vendor as the line abovenot named as affected at publication, now names cm e-mail blacklist – simple email filtering for safer registrationNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed creativemindssolutions/name: cm e-mail registration blacklist; a new product identity is not establishedTime to revision 498 days
2026-04-08CVE-2024-11202same vendor as the line abovenot named as affected at publication, now names cm header and footer – add custom scripts and styles to your header and footer with easeNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed creativemindssolutions/cm header & footer script loader – insert script plugin; a new product identity is not establishedTime to revision 498 days
2026-04-08CVE-2024-11202same vendor as the line abovenot named as affected at publication, now names cm pop-up – create engaging popups to capture attention and boost interactionNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed creativemindssolutions/cm pop-up banners for wordpress; a new product identity is not establishedTime to revision 498 days
2026-04-08CVE-2024-11202same vendor as the line abovenot named as affected at publication, now names cm search and replace – optimize content edits with a powerful search and replace toolNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed creativemindssolutions/cm wordpress search and replace plugin; a new product identity is not establishedTime to revision 498 days
2026-04-08CVE-2024-11202same vendor as the line abovenot named as affected at publication, now names cm video lessons manager – simplify video lessons management for better educationNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed creativemindssolutions/video lessons manager – wordpress lms plugin; a new product identity is not establishedTime to revision 498 days
2026-04-08CVE-2024-11265Wordfencenot named as affected at publication, now names easymedia – increase media upload file size | role-based upload limit | increase execution timeNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed codepopular/increase maximum upload file size | increase execution time; a new product identity is not establishedTime to revision 502 days
2026-04-08CVE-2024-11270Wordfencenot named as affected at publication, now names webinarpress – webinar system for wordpressNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpwebinarsystem/wordpress webinar plugin – webinarpress; a new product identity is not establishedTime to revision 456 days
2026-04-08CVE-2024-11275Wordfencenot named as affected at publication, now names timetics – appointment booking & schedulingNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed arraytics/wp timetics- ai-powered appointment booking calendar and online scheduling plugin; a new product identity is not establishedTime to revision 481 days
2026-04-08CVE-2024-11388Wordfencenot named as affected at publication, now names dino game – embed google chrome dinosaur game in your websiteNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed tahmidulkarim/dino game – embed google chrome dinosaur game in wordpress; a new product identity is not establishedTime to revision 504 days
2026-04-08CVE-2024-11642Wordfencenot named as affected at publication, now names post grid master — post grids & ajax filtersNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed mdshuvo/post grid master – custom post types, taxonomies & ajax filter everything with infinite scroll, load more, pagination & shortcode builder; a new product identity is not establishedTime to revision 454 days
2026-04-08Wordfencenot named as affected at publication, now names kudos donations: easy donations with mollie | one-off & recurring | pdf invoices | buttons & formsnot counted: Product identity rewritten with unchanged scopeTime to revision 496 days
2026-04-08CVE-2024-11684same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed iseardmedia/kudos donations – easy donations and payments with mollie; a new product identity is not establishedTime to revision 496 days
2026-04-08CVE-2024-11685same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed iseardmedia/kudos donations – easy donations and payments with mollie; a new product identity is not establishedTime to revision 496 days
2026-04-08Wordfencenot named as affected at publication, now names wp job portal – ai-powered recruitment system for company or job board websitenot counted: Product identity rewritten with unchanged scopeTime to revision 432 to 481 days
2026-04-08CVE-2024-11712same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpjobportal/wp job portal – a complete recruitment system for company or job board website; a new product identity is not establishedTime to revision 481 days
2026-04-08CVE-2024-12131same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpjobportal/wp job portal – a complete recruitment system for company or job board website; a new product identity is not establishedTime to revision 456 days
2026-04-08CVE-2024-12132same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpjobportal/wp job portal – a complete recruitment system for company or job board website; a new product identity is not establishedTime to revision 460 days
2026-04-08CVE-2024-13371same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpjobportal/wp job portal – a complete recruitment system for company or job board website; a new product identity is not establishedTime to revision 432 days
2026-04-08CVE-2024-13372same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpjobportal/wp job portal – a complete recruitment system for company or job board website; a new product identity is not establishedTime to revision 432 days
2026-04-08CVE-2024-13428same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpjobportal/wp job portal – a complete recruitment system for company or job board website; a new product identity is not establishedTime to revision 432 days
2026-04-08CVE-2024-11724Wordfencenot named as affected at publication, now names cookie banner for gdpr / ccpa – wplp cookie consentNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wplegalpages/cookie consent, consent log, cookie scanner, script blocker (for gdpr, ccpa & eprivacy) : wp cookie consent; a new product identity is not establishedTime to revision 483 days
2026-04-08CVE-2024-11733Wordfencenot named as affected at publication, now names wp popular postsNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed hcabrera/wordpress popular posts; a new product identity is not establishedTime to revision 460 days
2026-04-08CVE-2024-11756Wordfencenot named as affected at publication, now names sweepwidget – contests, giveaways, sweepstakes & photo contestsNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed sweepwidget/sweepwidget contests, giveaways, photo contests, competitions; a new product identity is not establishedTime to revision 457 days
2026-04-08CVE-2024-11766Wordfencenot named as affected at publication, now names gs books showcase – display books in grid, slider & more | library for wordpressNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed samdani/wordpress book plugin for displaying books in grid, flip, slider, popup layout and more; a new product identity is not establishedTime to revision 483 days
2026-04-08CVE-2024-11826Wordfencenot named as affected at publication, now names quill forms | conversational multi step forms, surveys & quizzesNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed mdmag/quill forms | the best typeform alternative | create conversational multi step form, survey, quiz, cost estimation or donation form on wordpress; a new product identity is not establishedTime to revision 456 days
2026-04-08CVE-2024-11855Wordfencenot named as affected at publication, now names koalendar – easy appointment scheduling & booking pluginNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed koalendar/koalendar – events & appointments booking calendar; a new product identity is not establishedTime to revision 481 days
2026-04-08CVE-2024-11880Wordfencenot named as affected at publication, now names b testimonial – customer testimonials in custom layoutsNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed bplugins/b testimonial – testimonial plugin for wp; a new product identity is not establishedTime to revision 490 days
2026-04-08CVE-2024-11930Wordfencenot named as affected at publication, now names taskbuilder – project management & task management tool with kanban boardNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed taskbuilder/taskbuilder – wordpress project & task management plugin; a new product identity is not establishedTime to revision 459 days
2026-04-08CVE-2024-12112Wordfencenot named as affected at publication, now names easy form builder by whitestudio — drag & drop form builderNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed hassantafreshi/easy form builder – wordpress plugin form builder: contact form, survey form, payment form, and custom form builder; a new product identity is not establishedTime to revision 456 days
2026-04-08CVE-2024-12156Wordfencenot named as affected at publication, now names qc seo help for llms.txt, ai analytics, ai content writer, subtitle to articleNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed quantumcloud/ai content writer, rss feed to post, autoblogging seo help; a new product identity is not establishedTime to revision 483 days
2026-04-08Wordfencenot named as affected at publication, now names bit form – custom contact form, multi step, conversational form & payment form buildernot counted: Product identity rewritten with unchanged scopeTime to revision 281 to 470 days
2026-04-08CVE-2024-12190same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed bitpressadmin/contact form by bit form: multi step form, calculation contact form, payment contact form & custom contact form builder; a new product identity is not establishedTime to revision 470 days
2026-04-08CVE-2024-13450same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed bitpressadmin/contact form by bit form: multi step form, calculation contact form, payment contact form & custom contact form builder; a new product identity is not establishedTime to revision 438 days
2026-04-08CVE-2024-13451same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed bitpressadmin/contact form by bit form: multi step form, calculation contact form, payment contact form & custom contact form builder; a new product identity is not establishedTime to revision 281 days
2026-04-08Wordfencenot named as affected at publication, now names wc affiliate – woocommerce affiliate pluginnot counted: Product identity rewritten with unchanged scopeTime to revision 390 to 437 days
2026-04-08CVE-2024-12334same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed codexpert/wc affiliate – a complete woocommerce affiliate plugin; a new product identity is not establishedTime to revision 437 days
2026-04-08CVE-2024-12336same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed codexpert/wc affiliate – a complete woocommerce affiliate plugin; a new product identity is not establishedTime to revision 390 days
2026-04-08CVE-2024-12338Wordfencenot named as affected at publication, now names website toolbox forumNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed websitetoolbox/website toolbox community; a new product identity is not establishedTime to revision 483 days
2026-04-08Wordfencenot named as affected at publication, now names binary mlm for woocommercenot counted: Product identity rewritten with unchanged scopeTime to revision 457 days
2026-04-08CVE-2024-12383same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed letscms/binary mlm woocommerce; a new product identity is not establishedTime to revision 457 days
2026-04-08CVE-2024-12384same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed letscms/binary mlm woocommerce; a new product identity is not establishedTime to revision 457 days
2026-04-08CVE-2024-12395Wordfencenot named as affected at publication, now names additional fees for woocommerce checkoutNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed amitwpdeveloper/woocommerce additional fees on checkout (free); a new product identity is not establishedTime to revision 477 days
2026-04-08CVE-2024-12412Wordfencenot named as affected at publication, now names booking and rental manager for bike | car | resort | appointment | dress | equipmentNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed magepeopleteam/rental and booking manager for bike, car, dress, resort with woocommerce integration – wprently | wordpress plugin; a new product identity is not establishedTime to revision 453 days
2026-04-08CVE-2024-12544Wordfencenot named as affected at publication, now names surveyjs: drag & drop form builderNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed devsoftbaltic/surveyjs: drag & drop wordpress form builder to create, style and embed multiple forms of any complexity; a new product identity is not establishedTime to revision 404 days
2026-04-08CVE-2024-12560Wordfencenot named as affected at publication, now names button block – design stylish, interactive, and multi-functional buttonsNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed bplugins/button block – get fully customizable & multi-functional buttons; a new product identity is not establishedTime to revision 476 days
2026-04-08CVE-2024-12584Wordfencenot named as affected at publication, now names xpro addons — 140+ widgets for elementorNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed xpro/140+ widgets | xpro addons for elementor – free; a new product identity is not establishedTime to revision 456 days
2026-04-08CVE-2024-13354Wordfencenot named as affected at publication, now names responsive addons for elementor – free elementor addons, kits and elementor templatesNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed cyberchimps/responsive addons for elementor – free elementor addons plugin and elementor templates; a new product identity is not establishedTime to revision 439 days
2026-04-08CVE-2024-13487Wordfencenot named as affected at publication, now names curcy – multi currency for woocommerce – smoothly on woocommerce 9.xNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed villatheme/curcy – multi currency for woocommerce – the best free currency exchange plugin – run smoothly on woocommerce 9.x; a new product identity is not establishedTime to revision 427 days
2026-04-08Wordfencenot named as affected at publication, now names nex-forms – ultimate forms plugin for wordpressnot counted: Product identity rewritten with unchanged scopeTime to revision 393 to 798 days
2026-04-08CVE-2024-13498same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed webaways/nex-forms – ultimate form builder – contact forms and much more; a new product identity is not establishedTime to revision 393 days
2026-04-08CVE-2024-1130same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed webaways/nex-forms – ultimate form builder – contact forms and much more; a new product identity is not establishedTime to revision 798 days
2026-04-08CVE-2024-13541Wordfencenot named as affected at publication, now names adirectory – wp business directory plugin and classified ads listings directoryNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed adirectory/adirectory – wordpress directory listing plugin; a new product identity is not establishedTime to revision 421 days
2026-04-08CVE-2024-13606Wordfencenot named as affected at publication, now names js help desk – ai-powered support & ticketing systemNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed rabilal/js help desk – the ultimate help desk & support plugin; a new product identity is not establishedTime to revision 419 days
2026-04-08CVE-2024-13697Wordfencenot named as affected at publication, now names better messages – live chat, chat rooms, real-time messaging & private messagesNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wordplus/better messages – live chat for wordpress, buddypress, peepso, ultimate member, buddyboss; a new product identity is not establishedTime to revision 403 days
2026-04-08Wordfencenot named as affected at publication, now names responsive plus – elementor templates & starter sitesnot counted: Product identity rewritten with unchanged scopeTime to revision 417 to 673 days
2026-04-08CVE-2024-13834same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed cyberchimps/responsive plus – starter templates, advanced features and customizer settings for responsive theme.; a new product identity is not establishedTime to revision 417 days
2026-04-08CVE-2024-5222same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed cyberchimps/responsive addons – starter templates, advanced features and customizer settings for responsive theme.; a new product identity is not establishedTime to revision 673 days
2026-04-08Wordfencenot named as affected at publication, now names easy social feed – social photos gallery and post feed for wordpressnot counted: Product identity rewritten with unchanged scopeTime to revision 757 days
2026-04-08CVE-2024-1214same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed sjaved/easy social feed – social photos gallery – post feed – like box; a new product identity is not establishedTime to revision 757 days
2026-04-08CVE-2024-1278same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed sjaved/easy social feed – social photos gallery – post feed – like box; a new product identity is not establishedTime to revision 757 days
2026-04-08CVE-2024-1294Wordfencenot named as affected at publication, now names sunshine photo cart – client photo gallery & photo proofing for photographersNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed sunshinephotocart/sunshine photo cart: free client galleries for photographers; a new product identity is not establishedTime to revision 778 days
2026-04-08Wordfencenot named as affected at publication, now names jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpressnot counted: Product identity rewritten with unchanged scopeTime to revision 663 to 757 days
2026-04-08CVE-2024-1326same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed jegtheme/jeg elementor kit; a new product identity is not establishedTime to revision 757 days
2026-04-08CVE-2024-3162same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed jegtheme/jeg elementor kit; a new product identity is not establishedTime to revision 736 days
2026-04-08CVE-2024-4479same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed jegtheme/jeg elementor kit; a new product identity is not establishedTime to revision 663 days

This kind is counted once per record and per product, so one record that added four products counts four times and the number of records behind these changes is smaller. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

Use arrow keys to move between days, Home or End to reach either end, and Enter to open a day.
4,561 record edits in the 52 weeks to 2026-09-07. Scroll for earlier dates.fewermore

What this page cannot see

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Paste your closed CVE tickets and see which of these changes hit them →