Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

782 changes · newest first · grouped by dayCSV JSON RSS

Showing changes seen on 2026-04-08. Every day

Counted changes changed on 2026-04-08, newest first, one line per change to a CVE record, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.	Kind	Record, Which record was edited, by its CVE id, or how many records one collapsed line stands on.	Vendor · product, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry.	What changed	Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Wed 8 Apr 2026· 161 record changes
2026-04-082 commits	Product added	Show all 3 CVE records in this change: Product added: ajax load more – infinite scroll, load more, & lazy load named as affected from dcooneyHide the 3 CVE records in this change: Product added: ajax load more – infinite scroll, load more, & lazy load named as affected from dcooney	dcooney Wordfence	not named as affected at publication, now names ajax load more – infinite scroll, load more, & lazy loadBranches and original-value intervals are stated on each row.	Days to revision 553 to 729
2026-04-08	same kind of change as the line above	CVE-2024-4711	same vendor as the line above	same change as the line above	Days to revision 677
2026-04-08	same kind of change as the line above	CVE-2024-8505	same vendor as the line above	same change as the line above	Days to revision 553
2026-04-08	same kind of change as the line above	CVE-2024-1790	same vendor as the line above	same change as the line above	Days to revision 729
2026-04-08	Product added	Show all 2 CVE records in this change: Product added: nexter blocks – gutenberg blocks, page builder & ai website builder named as affected from posimyththemesHide the 2 CVE records in this change: Product added: nexter blocks – gutenberg blocks, page builder & ai website builder named as affected from posimyththemes	posimyththemes Wordfence	not named as affected at publication, now names nexter blocks – gutenberg blocks, page builder & ai website builder	Days to revision 232 to 490
2026-04-08	same kind of change as the line above	CVE-2024-5020	same vendor as the line above	same change as the line above	Days to revision 490
2026-04-08	same kind of change as the line above	CVE-2025-8567	same vendor as the line above	same change as the line above	Days to revision 232
2026-04-08	Product added	CVE-2024-5162	ibabar Wordfence	not named as affected at publication, now names prettyphoto – simple lightbox plugin	Days to revision 672
2026-04-08	Product added	CVE-2024-5425	firelightwp Wordfence	not named as affected at publication, now names lightpress lightbox	Days to revision 671
2026-04-08	Product added	CVE-2024-5485	brainstormforce Wordfence	not named as affected at publication, now names ottokit: all-in-one automation platform	Days to revision 674
2026-04-08	Product added	CVE-2024-5654	westerndeal Wordfence	not named as affected at publication, now names gsheetconnector for cf7 – connect contact form 7 to google sheets and send form submissions in real time	Days to revision 669
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: happy woocommerce faqs – ultimate product faq plugin named as affected from happydevsHide the 2 CVE records in this change: Product added: happy woocommerce faqs – ultimate product faq plugin named as affected from happydevs	happydevs Wordfence	not named as affected at publication, now names happy woocommerce faqs – ultimate product faq pluginBranches and original-value intervals are stated on each row.	Days to revision 638
2026-04-08	same kind of change as the line above	CVE-2024-5669	same vendor as the line above	same change as the line above	Days to revision 638
2026-04-08	same kind of change as the line above	CVE-2024-5704	same vendor as the line above	same change as the line above	Days to revision 638
2026-04-083 commits	Product added	Show all 3 CVE records in this change: Product added: tickera – sell tickets & manage events named as affected from tickeraHide the 3 CVE records in this change: Product added: tickera – sell tickets & manage events named as affected from tickera	tickera Wordfence	not named as affected at publication, now names tickera – sell tickets & manage eventsBranches and original-value intervals are stated on each row.	Days to revision 481 to 660
2026-04-08	same kind of change as the line above	CVE-2024-5860	same vendor as the line above	same change as the line above	Days to revision 660
2026-04-08	same kind of change as the line above	CVE-2024-10263	same vendor as the line above	same change as the line above	Days to revision 519
2026-04-08	same kind of change as the line above	CVE-2024-12578	same vendor as the line above	same change as the line above	Days to revision 481
2026-04-08	Product added	CVE-2024-6590	javmah Wordfence	not named as affected at publication, now names wpgsi: spreadsheet integration	Days to revision 561
2026-04-08	Product added	CVE-2024-8757	afthemes Wordfence	not named as affected at publication, now names wp post author – author box, multiple authors, guest authors & custom avatars	Days to revision 543
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: stars testimonials — responsive reviews & star ratings named as affected from premioHide the 2 CVE records in this change: Product added: stars testimonials — responsive reviews & star ratings named as affected from premio	premio Wordfence	not named as affected at publication, now names stars testimonials — responsive reviews & star ratingsBranches and original-value intervals are stated on each row.	Days to revision 490 to 554
2026-04-08	same kind of change as the line above	CVE-2024-8989	same vendor as the line above	same change as the line above	Days to revision 554
2026-04-08	same kind of change as the line above	CVE-2024-11429	same vendor as the line above	same change as the line above	Days to revision 490
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: eu/uk vat validation manager for woocommerce named as affected from wpcodefactoryHide the 2 CVE records in this change: Product added: eu/uk vat validation manager for woocommerce named as affected from wpcodefactory	wpcodefactory Wordfence	not named as affected at publication, now names eu/uk vat validation manager for woocommerceBranches and original-value intervals are stated on each row.	Days to revision 558
2026-04-08	same kind of change as the line above	CVE-2024-9189	same vendor as the line above	same change as the line above	Days to revision 558
2026-04-08	same kind of change as the line above	CVE-2024-8788	same vendor as the line above	same change as the line above	Days to revision 558
2026-04-08	Product added	CVE-2024-9384	wpcodefactory Wordfence	not named as affected at publication, now names price by quantity & bulk quantity discounts for woocommerce	Days to revision 552
2026-04-08	Product added	CVE-2024-9609	thimpress Wordfence	not named as affected at publication, now names learnpress – backup & migration tool	Days to revision 510
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: authpress named as affected from dueclicHide the 2 CVE records in this change: Product added: authpress named as affected from dueclic	dueclic Wordfence	not named as affected at publication, now names authpressBranches and original-value intervals are stated on each row.	Days to revision 541
2026-04-08	same kind of change as the line above	CVE-2024-9820	same vendor as the line above	same change as the line above	Days to revision 541
2026-04-08	same kind of change as the line above	CVE-2024-9687	same vendor as the line above	same change as the line above	Days to revision 541
2026-04-08	Product added	CVE-2024-9896	spiderdevs Wordfence	not named as affected at publication, now names forumax – ai powered advanced community forum plugin	Days to revision 522
2026-04-082 commits	Product added	Show all 3 CVE records in this change: Product added: chat widget: floating customer support button for 30+ channels, supporting sms, calls, and chat – bit assist named as affected from bitpressadminHide the 3 CVE records in this change: Product added: chat widget: floating customer support button for 30+ channels, supporting sms, calls, and chat – bit assist named as affected from bitpressadmin	bitpressadmin Wordfence	not named as affected at publication, now names chat widget: floating customer support button for 30+ channels, supporting sms, calls, and chat – bit assistBranches and original-value intervals are stated on each row.	Days to revision 417 to 418
2026-04-08	same kind of change as the line above	CVE-2025-0821	same vendor as the line above	same change as the line above	Days to revision 418
2026-04-08	same kind of change as the line above	CVE-2025-0822	same vendor as the line above	same change as the line above	Days to revision 417
2026-04-08	same kind of change as the line above	CVE-2024-13791	same vendor as the line above	same change as the line above	Days to revision 418
2026-04-08	Product added	CVE-2025-10289	wssoffice21 Wordfence	not named as affected at publication, now names ymc filter	Days to revision 117
2026-04-08	Product added	CVE-2025-11999	krishaweb Wordfence	not named as affected at publication, now names multi location marker	Days to revision 149
2026-04-08	Product added	CVE-2025-12189	breadbutter Wordfence	not named as affected at publication, now names bread & butter: ai-powered lead intelligence	Days to revision 125
2026-04-08	Product added	CVE-2025-13314	markutos987 Wordfence	not named as affected at publication, now names filter plus – product filter & wordpress filter	Days to revision 118
2026-04-08	Product added	CVE-2025-14446	ghozylab Wordfence	not named as affected at publication, now names easy notify lite	Days to revision 117
2026-04-08	Product added	CVE-2025-14846	socialchampio Wordfence	not named as affected at publication, now names auto post to social media from social champ	Days to revision 85
2026-04-083 commits	Product added	Show all 6 CVE records in this change: Product added: ultimate blocks – 25+ gutenberg blocks for block editor named as affected from ultimateblocksHide the 6 CVE records in this change: Product added: ultimate blocks – 25+ gutenberg blocks for block editor named as affected from ultimateblocks	ultimateblocks Wordfence	not named as affected at publication, now names ultimate blocks – 25+ gutenberg blocks for block editorBranches and original-value intervals are stated on each row.	Days to revision 302 to 659
2026-04-08	same kind of change as the line above	CVE-2025-1312	same vendor as the line above	same change as the line above	Days to revision 378
2026-04-08	same kind of change as the line above	CVE-2025-1703	same vendor as the line above	same change as the line above	Days to revision 378
2026-04-08	same kind of change as the line above	CVE-2023-6692	same vendor as the line above	same change as the line above	Days to revision 659
2026-04-08	same kind of change as the line above	CVE-2024-3513	same vendor as the line above	same change as the line above	Days to revision 645
2026-04-08	same kind of change as the line above	CVE-2025-2918	same vendor as the line above	same change as the line above	Days to revision 302
2026-04-08	same kind of change as the line above	CVE-2024-4268	same vendor as the line above	same change as the line above	Days to revision 645
2026-04-08	Product added	CVE-2025-1450	premio Wordfence	not named as affected at publication, now names floating chat widget: contact chat icons, telegram chat, line messenger, wechat, email, sms, call button – chaty	Days to revision 405
2026-04-08	Product added	CVE-2025-1717	pluginly Wordfence	not named as affected at publication, now names login me now – passwordless, magic link, otp & social login for wordpress	Days to revision 406
2026-04-083 commits	Product added	Show all 6 CVE records in this change: Product added: eventin – event calendar, event registration, tickets & booking (ai powered) named as affected from arrayticsHide the 6 CVE records in this change: Product added: eventin – event calendar, event registration, tickets & booking (ai powered) named as affected from arraytics	arraytics Wordfence	not named as affected at publication, now names eventin – event calendar, event registration, tickets & booking (ai powered)Branches and original-value intervals are stated on each row.	Days to revision 336 to 790
2026-04-08	same kind of change as the line above	CVE-2025-1766	same vendor as the line above	same change as the line above	Days to revision 385
2026-04-08	same kind of change as the line above	CVE-2024-7149	same vendor as the line above	same change as the line above	Days to revision 558
2026-04-08	same kind of change as the line above	CVE-2025-1770	same vendor as the line above	same change as the line above	Days to revision 385
2026-04-08	same kind of change as the line above	CVE-2024-1122	same vendor as the line above	same change as the line above	Days to revision 790
2026-04-08	same kind of change as the line above	CVE-2024-6033	same vendor as the line above	same change as the line above	Days to revision 630
2026-04-08	same kind of change as the line above	CVE-2025-3419	same vendor as the line above	same change as the line above	Days to revision 336
2026-04-08	Product added	CVE-2025-2168	bdthemes Wordfence	not named as affected at publication, now names ultimate store kit – addon for woocommerce, edd and elementor	Days to revision 343
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: stop spammers classic named as affected from webguyioHide the 2 CVE records in this change: Product added: stop spammers classic named as affected from webguyio	webguyio Wordfence	not named as affected at publication, now names stop spammers classicBranches and original-value intervals are stated on each row.	Days to revision 307 to 704
2026-04-08	same kind of change as the line above	CVE-2025-2935	same vendor as the line above	same change as the line above	Days to revision 307
2026-04-08	same kind of change as the line above	CVE-2023-7065	same vendor as the line above	same change as the line above	Days to revision 704
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: login, registration and lost password blocks named as affected from arkenonHide the 2 CVE records in this change: Product added: login, registration and lost password blocks named as affected from arkenon	arkenon Wordfence	not named as affected at publication, now names login, registration and lost password blocksBranches and original-value intervals are stated on each row.	Days to revision 334 to 349
2026-04-08	same kind of change as the line above	CVE-2025-3607	same vendor as the line above	same change as the line above	Days to revision 349
2026-04-08	same kind of change as the line above	CVE-2025-3605	same vendor as the line above	same change as the line above	Days to revision 334
2026-04-083 commits	Product added	Show all 4 CVE records in this change: Product added: elementskit elementor addons – advanced widgets & templates addons for elementor named as affected from roxnorHide the 4 CVE records in this change: Product added: elementskit elementor addons – advanced widgets & templates addons for elementor named as affected from roxnor	roxnor Wordfence	not named as affected at publication, now names elementskit elementor addons – advanced widgets & templates addons for elementorBranches and original-value intervals are stated on each row.	Days to revision 258 to 706
2026-04-08	same kind of change as the line above	CVE-2025-4479	same vendor as the line above	same change as the line above	Days to revision 294
2026-04-08	same kind of change as the line above	CVE-2024-11180	same vendor as the line above	same change as the line above	Days to revision 375
2026-04-08	same kind of change as the line above	CVE-2024-3499	same vendor as the line above	same change as the line above	Days to revision 706
2026-04-08	same kind of change as the line above	CVE-2025-3614	same vendor as the line above	same change as the line above	Days to revision 258
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: malcure malware shield — removal, repair, monitor named as affected from malcureHide the 2 CVE records in this change: Product added: malcure malware shield — removal, repair, monitor named as affected from malcure	malcure Wordfence	not named as affected at publication, now names malcure malware shield — removal, repair, monitorBranches and original-value intervals are stated on each row.	Days to revision 264 to 267
2026-04-08	same kind of change as the line above	CVE-2025-6043	same vendor as the line above	same change as the line above	Days to revision 267
2026-04-08	same kind of change as the line above	CVE-2025-7772	same vendor as the line above	same change as the line above	Days to revision 264
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: site.pro for woocommerce named as affected from b1accountingHide the 2 CVE records in this change: Product added: site.pro for woocommerce named as affected from b1accounting	b1accounting Wordfence	not named as affected at publication, now names site.pro for woocommerceBranches and original-value intervals are stated on each row.	Days to revision 265
2026-04-08	same kind of change as the line above	CVE-2025-6717	same vendor as the line above	same change as the line above	Days to revision 265
2026-04-08	same kind of change as the line above	CVE-2025-6718	same vendor as the line above	same change as the line above	Days to revision 265
2026-04-08	Product added	CVE-2025-8215	cyberchimps Wordfence	not named as affected at publication, now names responsive addons for elementor – free elementor addons, kits and elementor templates	Days to revision 210
2026-04-08	Product added	CVE-2023-2833	reviewx Wordfence	not named as affected at publication, now names reviewx – multi-criteria reviews for woocommerce with google reviews & schema	Days to revision 1,037
2026-04-08	Product added	CVE-2023-3093	yaycommerce Wordfence	not named as affected at publication, now names yaysmtp and email logs: amazon ses, sendgrid, outlook, mailgun, brevo, google and any smtp service	Days to revision 1,002
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: payment gateway of stripe for woocommerce named as affected from themehighHide the 2 CVE records in this change: Product added: payment gateway of stripe for woocommerce named as affected from themehigh	themehigh Wordfence	not named as affected at publication, now names payment gateway of stripe for woocommerceBranches and original-value intervals are stated on each row.	Days to revision 810 to 952
2026-04-08	same kind of change as the line above	CVE-2023-3162	same vendor as the line above	same change as the line above	Days to revision 952
2026-04-08	same kind of change as the line above	CVE-2024-0705	same vendor as the line above	same change as the line above	Days to revision 810
2026-04-08	Product added	CVE-2023-4961	poptin Wordfence	not named as affected at publication, now names poptin – exit pop ups & email popups	Days to revision 901
2026-04-08	Product added	CVE-2023-4968	wplegalpages Wordfence	not named as affected at publication, now names privacy policy generator – wplp legal pages	Days to revision 902
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: super testimonial – testimonial & customer review slider plugin for wordpress named as affected from themepointsHide the 2 CVE records in this change: Product added: super testimonial – testimonial & customer review slider plugin for wordpress named as affected from themepoints	themepoints Wordfence	not named as affected at publication, now names super testimonial – testimonial & customer review slider plugin for wordpressBranches and original-value intervals are stated on each row.	Days to revision 414 to 902
2026-04-08	same kind of change as the line above	CVE-2023-5613	same vendor as the line above	same change as the line above	Days to revision 902
2026-04-08	same kind of change as the line above	CVE-2024-13704	same vendor as the line above	same change as the line above	Days to revision 414
2026-04-08	Product added	CVE-2023-6325	rometheme Wordfence	not named as affected at publication, now names rtmform builder	Days to revision 686
2026-04-08	Product added	Show all 3 CVE records in this change: Product added: ecommerce fabrick named as affected from easynoloHide the 3 CVE records in this change: Product added: ecommerce fabrick named as affected from easynolo	easynolo Wordfence	not named as affected at publication, now names ecommerce fabrick	Days to revision 770
2026-04-08	same kind of change as the line above	CVE-2024-0431	same vendor as the line above	same change as the line above	Days to revision 770
2026-04-08	same kind of change as the line above	CVE-2024-0432	same vendor as the line above	same change as the line above	Days to revision 770
2026-04-08	same kind of change as the line above	CVE-2024-0433	same vendor as the line above	same change as the line above	Days to revision 770
2026-04-08	Product added	CVE-2024-0908	bplugins Wordfence	not named as affected at publication, now names advanced post block – showcase posts with grid, list, card layouts and filters	Days to revision 706
2026-04-08	Product added	Show all 3 CVE records in this change: Product added: mixed media gallery blocks named as affected from gallerycreatorHide the 3 CVE records in this change: Product added: mixed media gallery blocks named as affected from gallerycreator	gallerycreator Wordfence	not named as affected at publication, now names mixed media gallery blocks	Days to revision 117 to 649
2026-04-08	same kind of change as the line above	CVE-2024-10034	same vendor as the line above	same change as the line above	Days to revision 503
2026-04-08	same kind of change as the line above	CVE-2024-5424	same vendor as the line above	same change as the line above	Days to revision 649
2026-04-08	same kind of change as the line above	CVE-2025-14288	same vendor as the line above	same change as the line above	Days to revision 117
2026-04-08	Product added	Show all 2 CVE records in this change: Product added: borderless – addons and templates for elementor named as affected from visualmodoHide the 2 CVE records in this change: Product added: borderless – addons and templates for elementor named as affected from visualmodo	visualmodo Wordfence	not named as affected at publication, now names borderless – addons and templates for elementor	Days to revision 433
2026-04-08	same kind of change as the line above	CVE-2024-10867	same vendor as the line above	same change as the line above	Days to revision 433
2026-04-08	same kind of change as the line above	CVE-2024-11600	same vendor as the line above	same change as the line above	Days to revision 433
2026-04-08	Product added	CVE-2024-11009	pagup Wordfence	not named as affected at publication, now names automatic internal links for seo by pagup	Days to revision 497
2026-04-08	Product added	CVE-2024-11337	divineapi Wordfence	not named as affected at publication, now names divine astro	Days to revision 457
2026-04-08	Product added	CVE-2024-11410	sharabindu Wordfence	not named as affected at publication, now names yoo bar – floating notification & promo bar for website	Days to revision 483
2026-04-08	Product added	CVE-2024-11462	filestack Wordfence	not named as affected at publication, now names filestack wp upload	Days to revision 481
2026-04-08	Product added	CVE-2024-11907	skyword Wordfence	not named as affected at publication, now names skyword xmlrpc publishing	Days to revision 454
2026-04-08	Product added	CVE-2024-12419	tobias_conrad Wordfence	not named as affected at publication, now names wow styler for cf7 – visual styler for contact form 7 forms	Days to revision 457
2026-04-08	Product added	Show all 3 CVE records in this change: Product added: opace ai scribe: seo content creator & humaizer for openai & anthropic named as affected from opacewebdesignHide the 3 CVE records in this change: Product added: opace ai scribe: seo content creator & humaizer for openai & anthropic named as affected from opacewebdesign	opacewebdesign Wordfence	not named as affected at publication, now names opace ai scribe: seo content creator & humaizer for openai & anthropic	Days to revision 454
2026-04-08	same kind of change as the line above	CVE-2024-12473	same vendor as the line above	same change as the line above	Days to revision 454
2026-04-08	same kind of change as the line above	CVE-2024-12605	same vendor as the line above	same change as the line above	Days to revision 454
2026-04-08	same kind of change as the line above	CVE-2024-12606	same vendor as the line above	same change as the line above	Days to revision 454
2026-04-08	Product added	CVE-2024-12504	videowhisper Wordfence	not named as affected at publication, now names broadcast live video – live streaming : webrtc, hls, rtsp, rtmp	Days to revision 440
2026-04-08	Product added	Show all 2 CVE records in this change: Product added: pinpoint booking system – version 2 named as affected from dotonpaperHide the 2 CVE records in this change: Product added: pinpoint booking system – version 2 named as affected from dotonpaper	dotonpaper Wordfence	not named as affected at publication, now names pinpoint booking system – version 2	Days to revision 412 to 578
2026-04-08	same kind of change as the line above	CVE-2024-13235	same vendor as the line above	same change as the line above	Days to revision 412
2026-04-08	same kind of change as the line above	CVE-2024-7112	same vendor as the line above	same change as the line above	Days to revision 578
2026-04-08	Product added	CVE-2024-13509	ws form Wordfence	not named as affected at publication, now names ws form pro	Days to revision 436
2026-04-08	Product added	CVE-2024-13750	prismitsystems Wordfence	not named as affected at publication, now names multilevel referral plugin for woocommerce	Days to revision 404
2026-04-08	Product added	CVE-2024-13818	genetechproducts Wordfence	not named as affected at publication, now names pie register – user registration, profiles & content restriction	Days to revision 412
2026-04-08	Product added	CVE-2024-1047	optimole Wordfence	not named as affected at publication, now names super page cache	Days to revision 797
2026-04-08	Product added	CVE-2024-1047	rsocial Wordfence	not named as affected at publication, now names revive social – social media auto post and scheduling automation plugin	Days to revision 797
2026-04-08	Product added	CVE-2024-1047Show all 8 products in this change: Product added: 8 products named as affected in CVE-2024-1047Hide the 8 products in this change: Product added: 8 products named as affected in CVE-2024-1047	themeisle Wordfence	not named as affected at publication, now names lightstart – maintenance mode, coming soon and landing page builder and 7 more	Days to revision 797
2026-04-08	same kind of change as the line above	CVE-2024-1047	same vendor as the line above	not named as affected at publication, now names lightstart – maintenance mode, coming soon and landing page builder	Days to revision 797
2026-04-08	same kind of change as the line above	CVE-2024-1047	same vendor as the line above	not named as affected at publication, now names menu icons by themeisle	Days to revision 797
2026-04-08	same kind of change as the line above	CVE-2024-1047	same vendor as the line above	not named as affected at publication, now names multiple page generator plugin – mpg	Days to revision 797
2026-04-08	same kind of change as the line above	CVE-2024-1047	same vendor as the line above	not named as affected at publication, now names otter blocks – gutenberg blocks, page builder for gutenberg editor & fse	Days to revision 797
2026-04-08	same kind of change as the line above	CVE-2024-1047	same vendor as the line above	not named as affected at publication, now names ppom – product addons & custom fields for woocommerce	Days to revision 797
2026-04-08	same kind of change as the line above	CVE-2024-1047	same vendor as the line above	not named as affected at publication, now names rss aggregator by feedzy – feed to post, autoblogging, news & youtube video feeds aggregator	Days to revision 797
2026-04-08	same kind of change as the line above	CVE-2024-1047	same vendor as the line above	not named as affected at publication, now names starter sites & templates by neve	Days to revision 797
2026-04-08	same kind of change as the line above	CVE-2024-1047	same vendor as the line above	not named as affected at publication, now names visualizer: tables and charts manager for wordpress	Days to revision 797
2026-04-08	Product added	Show all 3 CVE records in this change: Product added: wpcafe – restaurant menu, online food ordering & table booking system named as affected from arrayticsHide the 3 CVE records in this change: Product added: wpcafe – restaurant menu, online food ordering & table booking system named as affected from arraytics	arraytics Wordfence	not named as affected at publication, now names wpcafe – restaurant menu, online food ordering & table booking system	Days to revision 653 to 686
2026-04-08	same kind of change as the line above	CVE-2024-1855	same vendor as the line above	same change as the line above	Days to revision 686
2026-04-08	same kind of change as the line above	CVE-2024-5427	same vendor as the line above	same change as the line above	Days to revision 678
2026-04-08	same kind of change as the line above	CVE-2024-5431	same vendor as the line above	same change as the line above	Days to revision 653
2026-04-08	Product added	CVE-2024-1862	forwardflip Wordfence	not named as affected at publication, now names add to cart custom redirect for woocommerce	Days to revision 756
2026-04-08	Product added	CVE-2024-1895	awordpresslife Wordfence	not named as affected at publication, now names event monster – manager & ticket booking	Days to revision 708
2026-04-08	Product added	CVE-2024-2387	nasirahmed Wordfence	not named as affected at publication, now names afi – the easiest integration plugin	Days to revision 750
2026-04-08	Product added	CVE-2024-2967	aharonyan Wordfence	not named as affected at publication, now names guest posting / frontend posting / front editor – wp front user submit	Days to revision 706
2026-04-08	Product added	CVE-2024-3275	digitalmeactivecampaign Wordfence	not named as affected at publication, now names eroom – webinar & meeting plugin for zoom, google meet, microsoft teams	Days to revision 706
2026-04-08	Product added	Show all 2 CVE records in this change: Product added: cookie banner for gdpr / ccpa – wplp cookie consent named as affected from wplegalpagesHide the 2 CVE records in this change: Product added: cookie banner for gdpr / ccpa – wplp cookie consent named as affected from wplegalpages	wplegalpages Wordfence	not named as affected at publication, now names cookie banner for gdpr / ccpa – wplp cookie consent	Days to revision 652 to 706
2026-04-08	same kind of change as the line above	CVE-2024-3599	same vendor as the line above	same change as the line above	Days to revision 706
2026-04-08	same kind of change as the line above	CVE-2024-4869	same vendor as the line above	same change as the line above	Days to revision 652
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: livemesh addons by elementor named as affected from livemeshHide the 2 CVE records in this change: Product added: livemesh addons by elementor named as affected from livemesh	livemesh Wordfence	not named as affected at publication, now names livemesh addons by elementorBranches and original-value intervals are stated on each row.	Days to revision 644
2026-04-08	same kind of change as the line above	CVE-2024-3638	same vendor as the line above	same change as the line above	Days to revision 644
2026-04-08	same kind of change as the line above	CVE-2024-2385	same vendor as the line above	same change as the line above	Days to revision 644
2026-04-08	Product added	CVE-2024-4014	hcaptcha Wordfence	not named as affected at publication, now names hcaptcha for wp	Days to revision 718
2026-04-082 commits	Product added	Show all 3 CVE records in this change: Product added: element pack – widgets, templates & addons for elementor named as affected from bdthemesHide the 3 CVE records in this change: Product added: element pack – widgets, templates & addons for elementor named as affected from bdthemes	bdthemes Wordfence	not named as affected at publication, now names element pack – widgets, templates & addons for elementorBranches and original-value intervals are stated on each row.	Days to revision 608 to 665
2026-04-08	same kind of change as the line above	CVE-2024-4360	same vendor as the line above	same change as the line above	Days to revision 608
2026-04-08	same kind of change as the line above	CVE-2024-3925	same vendor as the line above	same change as the line above	Days to revision 665
2026-04-08	same kind of change as the line above	CVE-2024-4643	same vendor as the line above	same change as the line above	Days to revision 614
2026-04-08	Product added	CVE-2024-4706	wpo365 Wordfence	not named as affected at publication, now names wpo365 \| seamless wordpress + microsoft integration (wpo365 \| login)	Days to revision 685
2026-04-08	Product added	CVE-2024-6123	bitpressadmin Wordfence	not named as affected at publication, now names bit form – custom contact form, multi step, conversational form & payment form builder	Days to revision 638
2026-04-08	Product added	CVE-2024-6571	arnoldasarny Wordfence	not named as affected at publication, now names image seo – ai-driven image seo optimizer	Days to revision 624
2026-04-08	Product added	CVE-2024-6872	templatespare Wordfence	not named as affected at publication, now names templatespare – 1000+ wordpress starter templates & full site migration tool \| 1-click import/export & no-code builder	Days to revision 613
2026-04-08	Product added	Show all 2 CVE records in this change: Product added: kb support – customer support ticket & helpdesk plugin, knowledge base plugin named as affected from logonincHide the 2 CVE records in this change: Product added: kb support – customer support ticket & helpdesk plugin, knowledge base plugin named as affected from logoninc	logoninc Wordfence	not named as affected at publication, now names kb support – customer support ticket & helpdesk plugin, knowledge base plugin	Days to revision 554
2026-04-08	same kind of change as the line above	CVE-2024-8548	same vendor as the line above	same change as the line above	Days to revision 554
2026-04-08	same kind of change as the line above	CVE-2024-8632	same vendor as the line above	same change as the line above	Days to revision 554
2026-04-08	Product added	CVE-2024-8628	properfraction Wordfence	not named as affected at publication, now names mailoptin – popup, optin forms & email newsletters for mailchimp, hubspot, aweber etc.	Days to revision 562
2026-04-08	Product added	CVE-2024-8672	marketingfire Wordfence	not named as affected at publication, now names widget options – advanced conditional visibility for gutenberg blocks & classic widgets	Days to revision 496
2026-04-08	Product added	CVE-2024-9109	octolize Wordfence	not named as affected at publication, now names shipping live rates and access points for ups for woocommerce	Days to revision 531
2026-04-08	Product added	CVE-2024-9377	wpcodefactory Wordfence	not named as affected at publication, now names export products, orders & customers for woocommerce	Days to revision 546
2026-04-08	Product added	CVE-2024-9935	redefiningtheweb Wordfence	not named as affected at publication, now names pdf generator for wordpress elementor	Days to revision 509
2026-04-08	Product added	CVE-2025-0350	badhonrocks Wordfence	not named as affected at publication, now names divi carousel free (divi5 support)	Days to revision 438
2026-04-08	Product added	CVE-2025-11457	easycommerce Wordfence	not named as affected at publication, now names easycommerce – ai-powered wordpress ecommerce plugin to sell digital products, subscriptions & physical goods	Days to revision 149
2026-04-08	Product added	CVE-2025-11828	pubudu-malalasekara Wordfence	not named as affected at publication, now names post blocks & tools	Days to revision 149
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: pixel manager for woocommerce – conversion tracking, google ads, ga4, tiktok, dynamic remarketing named as affected from alekvHide the 2 CVE records in this change: Product added: pixel manager for woocommerce – conversion tracking, google ads, ga4, tiktok, dynamic remarketing named as affected from alekv	alekv Wordfence	not named as affected at publication, now names pixel manager for woocommerce – conversion tracking, google ads, ga4, tiktok, dynamic remarketingBranches and original-value intervals are stated on each row.	Days to revision 141 to 294
2026-04-08	same kind of change as the line above	CVE-2025-12545	same vendor as the line above	same change as the line above	Days to revision 141
2026-04-08	same kind of change as the line above	CVE-2025-6201	same vendor as the line above	same change as the line above	Days to revision 294
2026-04-08	Product added	CVE-2025-13887	wisdmlabs Wordfence	not named as affected at publication, now names ai chatbot for wordpress by ai botkit – live in 2 minutes, no code	Days to revision 91
2026-04-08	Product added	Show all 2 CVE records in this change: Product added: wp ultimate csv importer – import csv, xml & excel into wordpress named as affected from smackcodersHide the 2 CVE records in this change: Product added: wp ultimate csv importer – import csv, xml & excel into wordpress named as affected from smackcoders	smackcoders Wordfence	not named as affected at publication, now names wp ultimate csv importer – import csv, xml & excel into wordpress	Days to revision 373
2026-04-08	same kind of change as the line above	CVE-2025-2007	same vendor as the line above	same change as the line above	Days to revision 373
2026-04-08	same kind of change as the line above	CVE-2025-2008	same vendor as the line above	same change as the line above	Days to revision 373
2026-04-08	Product added	CVE-2025-3521	wpspeedo Wordfence	not named as affected at publication, now names team members showcase	Days to revision 343
2026-04-08	Product added	Show all 2 CVE records in this change: Product added: hive support \| ai-powered help desk, live chat and chatbot named as affected from hivesupportHide the 2 CVE records in this change: Product added: hive support \| ai-powered help desk, live chat and chatbot named as affected from hivesupport	hivesupport Wordfence	not named as affected at publication, now names hive support \| ai-powered help desk, live chat and chatbot	Days to revision 307
2026-04-08	same kind of change as the line above	CVE-2025-5018	same vendor as the line above	same change as the line above	Days to revision 307
2026-04-08	same kind of change as the line above	CVE-2025-5019	same vendor as the line above	same change as the line above	Days to revision 307
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: featured image plus – bulk edit featured images, unsplash & alt text manager named as affected from krasenslavovHide the 2 CVE records in this change: Product added: featured image plus – bulk edit featured images, unsplash & alt text manager named as affected from krasenslavov	krasenslavov Wordfence	not named as affected at publication, now names featured image plus – bulk edit featured images, unsplash & alt text managerBranches and original-value intervals are stated on each row.	Days to revision 260 to 313
2026-04-08	same kind of change as the line above	CVE-2025-5818	same vendor as the line above	same change as the line above	Days to revision 260
2026-04-08	same kind of change as the line above	CVE-2025-4431	same vendor as the line above	same change as the line above	Days to revision 313
2026-04-08	Product added	CVE-2025-6441	tobias_conrad Wordfence	not named as affected at publication, now names webinarignition – live, automated & evergreen webinars for woocommerce	Days to revision 258
2026-04-08	Product added	CVE-2025-7960	kingaddons Wordfence	not named as affected at publication, now names king addons for elementor – 80+ elementor widgets, 4 000+ elementor templates, woocommerce, mega menu, popup builder	Days to revision 116
2026-04-08	Product added	CVE-2025-8420	cyberlord92 Wordfence	not named as affected at publication, now names employee directory – staff directory and listing	Days to revision 246
2026-04-08	Product added	CVE-2025-8420Show all 6 products in this change: Product added: 6 products named as affected in CVE-2025-8420Hide the 6 products in this change: Product added: 6 products named as affected in CVE-2025-8420	emarket-design Wordfence	not named as affected at publication, now names campus directory – faculty, staff & student directory plugin for wordpress and 5 more	Days to revision 246
2026-04-08	same kind of change as the line above	CVE-2025-8420	same vendor as the line above	not named as affected at publication, now names campus directory – faculty, staff & student directory plugin for wordpress	Days to revision 246
2026-04-08	same kind of change as the line above	CVE-2025-8420	same vendor as the line above	not named as affected at publication, now names customer support ticket system & helpdesk plugin for wordpress	Days to revision 246
2026-04-08	same kind of change as the line above	CVE-2025-8420	same vendor as the line above	not named as affected at publication, now names event rsvp and simple event management plugin	Days to revision 246
2026-04-08	same kind of change as the line above	CVE-2025-8420	same vendor as the line above	not named as affected at publication, now names project management, bug and issue tracking plugin – software issue manager	Days to revision 246
2026-04-08	same kind of change as the line above	CVE-2025-8420	same vendor as the line above	not named as affected at publication, now names simple contact form plugin for wordpress – wp easy contact	Days to revision 246
2026-04-08	same kind of change as the line above	CVE-2025-8420	same vendor as the line above	not named as affected at publication, now names video gallery – youtube gallery & responsive video playlist	Days to revision 246
2026-04-08	Product added	CVE-2025-8492	wordpresschef Wordfence	not named as affected at publication, now names salon booking system – free version	Days to revision 209
2026-04-08	Product added	CVE-2023-5756	supsysticcom Wordfence	not named as affected at publication, now names wordpress flipbook by supsystic	Days to revision 851
2026-04-08	Product added	CVE-2024-0699	tigroumeow Wordfence	not named as affected at publication, now names ai engine – the chatbot, ai framework & mcp for wordpress	Days to revision 793
2026-04-08	Product added	CVE-2024-10669	bplugins Wordfence	not named as affected at publication, now names countdown timer block – animated countdown for events or launches	Days to revision 516
2026-04-08	Product added	CVE-2024-11882	bplugins Wordfence	not named as affected at publication, now names awesome faq – modern accordion, tabs,responsive & super fast faq builder.	Days to revision 483
2026-04-08	Product added	CVE-2024-1896	awordpresslife Wordfence	not named as affected at publication, now names photo gallery for images	Days to revision 706
2026-04-08	Product added	CVE-2024-3105	themeisle Wordfence	not named as affected at publication, now names woody code snippets – insert php, css, js, and header/footer scripts	Days to revision 662

Rows, not records: a moved fix version or an extended range counts once per record, product and release branch; an added product once per record and product; every other kind once per record or advisory. Days to revision is how long the value first stated stood: from the record's or advisory's publication, or from the day a KEV field value was first seen, to the first commit that replaced it. An addition to KEV has no earlier value and shows none. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

Data sources and quality

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Check my CVEs against these changes →