Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

11,999 record changes · 5,026 advisory changes · newest first · grouped by dayCSV JSON RSS

SinceKindVendorSort

Counted changes, newest first, one line per change to a CVE record or a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.	Kind	Record or advisory, Which record was edited: a CVE id where the change was to the CVE catalog or the CISA KEV list, a GHSA id where it was to a GitHub advisory. The two are different units and are never counted together.	Vendor or package, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry.	What changed	Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Wed 8 Apr 2026· 213 record changes
2026-04-08	Product added	CVE-2024-13465	kodezen Wordfence	not named as affected at publication, now names ablocks – gutenberg blocks, user dashboard builder, popup builder, form builder & animation builder	Days to revision 415
2026-04-08	Product added	Show all 4 CVE records in this change: Product added: bslider – create responsive image, post, product, and video sliders named as affected from bpluginsHide the 4 CVE records in this change: Product added: bslider – create responsive image, post, product, and video sliders named as affected from bplugins	bplugins Wordfence	not named as affected at publication, now names bslider – create responsive image, post, product, and video sliders	Days to revision 237 to 429
2026-04-08	same kind of change as the line above	CVE-2024-13514	same vendor as the line above	same change as the line above	Days to revision 429
2026-04-08	same kind of change as the line above	CVE-2025-8418	same vendor as the line above	same change as the line above	Days to revision 240
2026-04-08	same kind of change as the line above	CVE-2025-8676	same vendor as the line above	same change as the line above	Days to revision 237
2026-04-08	same kind of change as the line above	CVE-2025-8680	same vendor as the line above	same change as the line above	Days to revision 237
2026-04-08	Product added	Show all 3 CVE records in this change: Product added: 1 click migration & backup: free wordpress migration plugin with zero downtime & easy clone named as affected from 1clickmigrationHide the 3 CVE records in this change: Product added: 1 click migration & backup: free wordpress migration plugin with zero downtime & easy clone named as affected from 1clickmigration	1clickmigration Wordfence	not named as affected at publication, now names 1 click migration & backup: free wordpress migration plugin with zero downtime & easy clone	Days to revision 335 to 415
2026-04-08	same kind of change as the line above	CVE-2024-13555	same vendor as the line above	same change as the line above	Days to revision 415
2026-04-08	same kind of change as the line above	CVE-2024-13609	same vendor as the line above	same change as the line above	Days to revision 415
2026-04-08	same kind of change as the line above	CVE-2025-3455	same vendor as the line above	same change as the line above	Days to revision 335
2026-04-08	Product added	CVE-2024-13731	bplugins Wordfence	not named as affected at publication, now names alert box block – display custom alerts and messages	Days to revision 379
2026-04-083 commits	Product added	Show all 14 CVE records in this change: Product added: beaver builder page builder – drag and drop website builder named as affected from beaverbuilderHide the 14 CVE records in this change: Product added: beaver builder page builder – drag and drop website builder named as affected from beaverbuilder	beaverbuilder Wordfence	not named as affected at publication, now names beaver builder page builder – drag and drop website builderBranches and original-value intervals are stated on each row.	Days to revision 224 to 756
2026-04-08	same kind of change as the line above	CVE-2024-1038	same vendor as the line above	same change as the line above	Days to revision 756
2026-04-08	same kind of change as the line above	CVE-2024-1074	same vendor as the line above	same change as the line above	Days to revision 756
2026-04-08	same kind of change as the line above	CVE-2024-1080	same vendor as the line above	same change as the line above	Days to revision 756
2026-04-08	same kind of change as the line above	CVE-2024-2925	same vendor as the line above	same change as the line above	Days to revision 737
2026-04-08	same kind of change as the line above	CVE-2024-4430	same vendor as the line above	same change as the line above	Days to revision 698
2026-04-08	same kind of change as the line above	CVE-2024-7895	same vendor as the line above	same change as the line above	Days to revision 587
2026-04-08	same kind of change as the line above	CVE-2024-0896	same vendor as the line above	same change as the line above	Days to revision 756
2026-04-08	same kind of change as the line above	CVE-2024-3923	same vendor as the line above	same change as the line above	Days to revision 699
6 more rows in this change are not listed here. Open all 14 rows →
2026-04-083 commits	Product added	Show all 16 CVE records in this change: Product added: shoplentor – all-in-one woocommerce growth & store enhancement plugin named as affected from devitemsllcHide the 16 CVE records in this change: Product added: shoplentor – all-in-one woocommerce growth & store enhancement plugin named as affected from devitemsllc	devitemsllc Wordfence	not named as affected at publication, now names shoplentor – all-in-one woocommerce growth & store enhancement pluginBranches and original-value intervals are stated on each row.	Days to revision 155 to 735
2026-04-08	same kind of change as the line above	CVE-2024-1057	same vendor as the line above	same change as the line above	Days to revision 719
2026-04-08	same kind of change as the line above	CVE-2024-2946	same vendor as the line above	same change as the line above	Days to revision 729
2026-04-08	same kind of change as the line above	CVE-2024-3345	same vendor as the line above	same change as the line above	Days to revision 687
2026-04-08	same kind of change as the line above	CVE-2024-4566	same vendor as the line above	same change as the line above	Days to revision 687
2026-04-08	same kind of change as the line above	CVE-2024-8668	same vendor as the line above	same change as the line above	Days to revision 561
2026-04-08	same kind of change as the line above	CVE-2025-1527	same vendor as the line above	same change as the line above	Days to revision 392
2026-04-08	same kind of change as the line above	CVE-2023-7067	same vendor as the line above	same change as the line above	Days to revision 706
2026-04-08	same kind of change as the line above	CVE-2024-1960	same vendor as the line above	same change as the line above	Days to revision 729
8 more rows in this change are not listed here. Open all 16 rows →
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: kali forms — contact form & drag-and-drop builder named as affected from wpchillHide the 2 CVE records in this change: Product added: kali forms — contact form & drag-and-drop builder named as affected from wpchill	wpchill Wordfence	not named as affected at publication, now names kali forms — contact form & drag-and-drop builderBranches and original-value intervals are stated on each row.	Days to revision 778
2026-04-08	same kind of change as the line above	CVE-2024-1218	same vendor as the line above	same change as the line above	Days to revision 778
2026-04-08	same kind of change as the line above	CVE-2024-1217	same vendor as the line above	same change as the line above	Days to revision 778
2026-04-08	Product added	CVE-2024-1505	kodezen Wordfence	not named as affected at publication, now names academy lms – wordpress lms plugin for complete elearning solution	Days to revision 756
2026-04-083 commits	Product added	Show all 8 CVE records in this change: Product added: wpbakery page builder named as affected from wpbakeryHide the 8 CVE records in this change: Product added: wpbakery page builder named as affected from wpbakery	wpbakery Wordfence	not named as affected at publication, now names wpbakery page builderBranches and original-value intervals are stated on each row.	Days to revision 259 to 706
2026-04-08	same kind of change as the line above	CVE-2024-1840	same vendor as the line above	same change as the line above	Days to revision 706
2026-04-08	same kind of change as the line above	CVE-2024-1805	same vendor as the line above	same change as the line above	Days to revision 706
2026-04-08	same kind of change as the line above	CVE-2024-1841	same vendor as the line above	same change as the line above	Days to revision 706
2026-04-08	same kind of change as the line above	CVE-2024-1842	same vendor as the line above	same change as the line above	Days to revision 706
2026-04-08	same kind of change as the line above	CVE-2024-5265	same vendor as the line above	same change as the line above	Days to revision 665
2026-04-08	same kind of change as the line above	CVE-2024-5709	same vendor as the line above	same change as the line above	Days to revision 611
2026-04-08	same kind of change as the line above	CVE-2024-5708	same vendor as the line above	same change as the line above	Days to revision 611
2026-04-08	same kind of change as the line above	CVE-2025-4968	same vendor as the line above	same change as the line above	Days to revision 259
2026-04-083 commits	Product added	Show all 4 CVE records in this change: Product added: post grid named as affected from pickpluginsHide the 4 CVE records in this change: Product added: post grid named as affected from pickplugins	pickplugins Wordfence	not named as affected at publication, now names post gridBranches and original-value intervals are stated on each row.	Days to revision 603 to 671
2026-04-08	same kind of change as the line above	CVE-2024-1988	same vendor as the line above	same change as the line above	Days to revision 671
2026-04-08	same kind of change as the line above	CVE-2024-4042	same vendor as the line above	same change as the line above	Days to revision 671
2026-04-08	same kind of change as the line above	CVE-2024-6346	same vendor as the line above	same change as the line above	Days to revision 615
2026-04-08	same kind of change as the line above	CVE-2024-7588	same vendor as the line above	same change as the line above	Days to revision 603
2026-04-08	Product added	CVE-2024-2255	wpdevteam Wordfence	not named as affected at publication, now names gutenberg essential blocks – page builder for gutenberg blocks & patterns	Days to revision 750
2026-04-08	Product added	CVE-2024-2280	wpdive Wordfence	not named as affected at publication, now names better addons for elementor	Days to revision 741
2026-04-083 commits	Product added	Show all 4 CVE records in this change: Product added: sky addons – elementor addons with widgets & templates named as affected from wowdevsHide the 4 CVE records in this change: Product added: sky addons – elementor addons with widgets & templates named as affected from wowdevs	wowdevs Wordfence	not named as affected at publication, now names sky addons – elementor addons with widgets & templatesBranches and original-value intervals are stated on each row.	Days to revision 503 to 756
2026-04-08	same kind of change as the line above	CVE-2024-2286	same vendor as the line above	same change as the line above	Days to revision 756
2026-04-08	same kind of change as the line above	CVE-2024-11601	same vendor as the line above	same change as the line above	Days to revision 503
2026-04-08	same kind of change as the line above	CVE-2024-9542	same vendor as the line above	same change as the line above	Days to revision 503
2026-04-08	same kind of change as the line above	CVE-2024-11104	same vendor as the line above	same change as the line above	Days to revision 503
2026-04-08	Product added	CVE-2024-2399	leap13 Wordfence	not named as affected at publication, now names premium addons for elementor – powerful elementor templates & widgets	Days to revision 755
2026-04-082 commits	Product added	Show all 7 CVE records in this change: Product added: ultimate addons for elementor named as affected from brainstormforceHide the 7 CVE records in this change: Product added: ultimate addons for elementor named as affected from brainstormforce	brainstormforce Wordfence	not named as affected at publication, now names ultimate addons for elementorBranches and original-value intervals are stated on each row.	Days to revision 516 to 756
2026-04-08	same kind of change as the line above	CVE-2024-2618	same vendor as the line above	same change as the line above	Days to revision 685
2026-04-08	same kind of change as the line above	CVE-2024-4634	same vendor as the line above	same change as the line above	Days to revision 692
2026-04-08	same kind of change as the line above	CVE-2024-5757	same vendor as the line above	same change as the line above	Days to revision 665
2026-04-08	same kind of change as the line above	CVE-2024-10050	same vendor as the line above	same change as the line above	Days to revision 531
2026-04-08	same kind of change as the line above	CVE-2024-10325	same vendor as the line above	same change as the line above	Days to revision 516
2026-04-08	same kind of change as the line above	CVE-2024-1237	same vendor as the line above	same change as the line above	Days to revision 756
2026-04-08	same kind of change as the line above	CVE-2024-2619	same vendor as the line above	same change as the line above	Days to revision 692
2026-04-08	Product added	CVE-2024-2833	blueglassch Wordfence	not named as affected at publication, now names job postings	Days to revision 720
2026-04-08	Product added	CVE-2024-3073	smub Wordfence	not named as affected at publication, now names easy wp smtp – wordpress smtp and email logs: gmail, office 365, outlook, custom smtp, and more	Days to revision 664
2026-04-083 commits	Product added	Show all 7 CVE records in this change: Product added: relevanssi premium named as affected from relevanssiHide the 7 CVE records in this change: Product added: relevanssi premium named as affected from relevanssi	relevanssi Wordfence	not named as affected at publication, now names relevanssi premiumBranches and original-value intervals are stated on each row.	Days to revision 313 to 756
2026-04-08	same kind of change as the line above	CVE-2024-3213	same vendor as the line above	same change as the line above	Days to revision 729
2026-04-08	same kind of change as the line above	CVE-2025-5016	same vendor as the line above	same change as the line above	Days to revision 313
2026-04-08	same kind of change as the line above	CVE-2024-1380	same vendor as the line above	same change as the line above	Days to revision 756
2026-04-08	same kind of change as the line above	CVE-2024-3214	same vendor as the line above	same change as the line above	Days to revision 729
2026-04-08	same kind of change as the line above	CVE-2024-7630	same vendor as the line above	same change as the line above	Days to revision 601
2026-04-08	same kind of change as the line above	CVE-2025-4054	same vendor as the line above	same change as the line above	Days to revision 337
2026-04-08	same kind of change as the line above	CVE-2025-4396	same vendor as the line above	same change as the line above	Days to revision 331
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: convertplus named as affected from brainstorm forceHide the 2 CVE records in this change: Product added: convertplus named as affected from brainstorm force	brainstorm force Wordfence	not named as affected at publication, now names convertplusBranches and original-value intervals are stated on each row.	Days to revision 705
2026-04-08	same kind of change as the line above	CVE-2024-3240	same vendor as the line above	same change as the line above	Days to revision 705
2026-04-08	same kind of change as the line above	CVE-2024-3237	same vendor as the line above	same change as the line above	Days to revision 705
2026-04-08	Product added	CVE-2024-3820	wpdatatables Wordfence	not named as affected at publication, now names wpdatatables (premium)	Days to revision 676
2026-04-08	Product added	CVE-2024-4045	smub Wordfence	not named as affected at publication, now names popup builder & popup maker for wordpress – optinmonster email marketing and lead generation	Days to revision 684
2026-04-08	Product added	CVE-2024-4398	bplugins Wordfence	not named as affected at publication, now names html5 audio player – the ultimate no-code podcast, mp3 & audio player	Days to revision 698
2026-04-08	Product added	CVE-2024-4632	brainstormforce Wordfence	not named as affected at publication, now names cartflows – funnel builder & checkout plugin for woocommerce	Days to revision 658
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: optimole – optimize images in real time named as affected from optimoleHide the 2 CVE records in this change: Product added: optimole – optimize images in real time named as affected from optimole	optimole Wordfence	not named as affected at publication, now names optimole – optimize images in real timeBranches and original-value intervals are stated on each row.	Days to revision 694 to 797
2026-04-08	same kind of change as the line above	CVE-2024-4636	same vendor as the line above	same change as the line above	Days to revision 694
2026-04-08	same kind of change as the line above	CVE-2024-1047	same vendor as the line above	same change as the line above	Days to revision 797
2026-04-082 commits	Product added	Show all 3 CVE records in this change: Product added: ajax load more – infinite scroll, load more, & lazy load named as affected from dcooneyHide the 3 CVE records in this change: Product added: ajax load more – infinite scroll, load more, & lazy load named as affected from dcooney	dcooney Wordfence	not named as affected at publication, now names ajax load more – infinite scroll, load more, & lazy loadBranches and original-value intervals are stated on each row.	Days to revision 553 to 729
2026-04-08	same kind of change as the line above	CVE-2024-4711	same vendor as the line above	same change as the line above	Days to revision 677
2026-04-08	same kind of change as the line above	CVE-2024-8505	same vendor as the line above	same change as the line above	Days to revision 553
2026-04-08	same kind of change as the line above	CVE-2024-1790	same vendor as the line above	same change as the line above	Days to revision 729
2026-04-08	Product added	Show all 2 CVE records in this change: Product added: nexter blocks – gutenberg blocks, page builder & ai website builder named as affected from posimyththemesHide the 2 CVE records in this change: Product added: nexter blocks – gutenberg blocks, page builder & ai website builder named as affected from posimyththemes	posimyththemes Wordfence	not named as affected at publication, now names nexter blocks – gutenberg blocks, page builder & ai website builder	Days to revision 232 to 490
2026-04-08	same kind of change as the line above	CVE-2024-5020	same vendor as the line above	same change as the line above	Days to revision 490
2026-04-08	same kind of change as the line above	CVE-2025-8567	same vendor as the line above	same change as the line above	Days to revision 232
2026-04-08	Product added	CVE-2024-5162	ibabar Wordfence	not named as affected at publication, now names prettyphoto – simple lightbox plugin	Days to revision 672
2026-04-08	Product added	CVE-2024-5425	firelightwp Wordfence	not named as affected at publication, now names lightpress lightbox	Days to revision 671
2026-04-08	Product added	CVE-2024-5485	brainstormforce Wordfence	not named as affected at publication, now names ottokit: all-in-one automation platform	Days to revision 674
2026-04-08	Product added	CVE-2024-5654	westerndeal Wordfence	not named as affected at publication, now names gsheetconnector for cf7 – connect contact form 7 to google sheets and send form submissions in real time	Days to revision 669
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: happy woocommerce faqs – ultimate product faq plugin named as affected from happydevsHide the 2 CVE records in this change: Product added: happy woocommerce faqs – ultimate product faq plugin named as affected from happydevs	happydevs Wordfence	not named as affected at publication, now names happy woocommerce faqs – ultimate product faq pluginBranches and original-value intervals are stated on each row.	Days to revision 638
2026-04-08	same kind of change as the line above	CVE-2024-5669	same vendor as the line above	same change as the line above	Days to revision 638
2026-04-08	same kind of change as the line above	CVE-2024-5704	same vendor as the line above	same change as the line above	Days to revision 638
2026-04-083 commits	Product added	Show all 3 CVE records in this change: Product added: tickera – sell tickets & manage events named as affected from tickeraHide the 3 CVE records in this change: Product added: tickera – sell tickets & manage events named as affected from tickera	tickera Wordfence	not named as affected at publication, now names tickera – sell tickets & manage eventsBranches and original-value intervals are stated on each row.	Days to revision 481 to 660
2026-04-08	same kind of change as the line above	CVE-2024-5860	same vendor as the line above	same change as the line above	Days to revision 660
2026-04-08	same kind of change as the line above	CVE-2024-10263	same vendor as the line above	same change as the line above	Days to revision 519
2026-04-08	same kind of change as the line above	CVE-2024-12578	same vendor as the line above	same change as the line above	Days to revision 481
2026-04-08	Product added	CVE-2024-6590	javmah Wordfence	not named as affected at publication, now names wpgsi: spreadsheet integration	Days to revision 561
2026-04-08	Product added	CVE-2024-8757	afthemes Wordfence	not named as affected at publication, now names wp post author – author box, multiple authors, guest authors & custom avatars	Days to revision 543
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: stars testimonials — responsive reviews & star ratings named as affected from premioHide the 2 CVE records in this change: Product added: stars testimonials — responsive reviews & star ratings named as affected from premio	premio Wordfence	not named as affected at publication, now names stars testimonials — responsive reviews & star ratingsBranches and original-value intervals are stated on each row.	Days to revision 490 to 554
2026-04-08	same kind of change as the line above	CVE-2024-8989	same vendor as the line above	same change as the line above	Days to revision 554
2026-04-08	same kind of change as the line above	CVE-2024-11429	same vendor as the line above	same change as the line above	Days to revision 490
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: eu/uk vat validation manager for woocommerce named as affected from wpcodefactoryHide the 2 CVE records in this change: Product added: eu/uk vat validation manager for woocommerce named as affected from wpcodefactory	wpcodefactory Wordfence	not named as affected at publication, now names eu/uk vat validation manager for woocommerceBranches and original-value intervals are stated on each row.	Days to revision 558
2026-04-08	same kind of change as the line above	CVE-2024-9189	same vendor as the line above	same change as the line above	Days to revision 558
2026-04-08	same kind of change as the line above	CVE-2024-8788	same vendor as the line above	same change as the line above	Days to revision 558
2026-04-08	Product added	CVE-2024-9384	wpcodefactory Wordfence	not named as affected at publication, now names price by quantity & bulk quantity discounts for woocommerce	Days to revision 552
2026-04-08	Product added	CVE-2024-9609	thimpress Wordfence	not named as affected at publication, now names learnpress – backup & migration tool	Days to revision 510
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: authpress named as affected from dueclicHide the 2 CVE records in this change: Product added: authpress named as affected from dueclic	dueclic Wordfence	not named as affected at publication, now names authpressBranches and original-value intervals are stated on each row.	Days to revision 541
2026-04-08	same kind of change as the line above	CVE-2024-9820	same vendor as the line above	same change as the line above	Days to revision 541
2026-04-08	same kind of change as the line above	CVE-2024-9687	same vendor as the line above	same change as the line above	Days to revision 541
2026-04-08	Product added	CVE-2024-9896	spiderdevs Wordfence	not named as affected at publication, now names forumax – ai powered advanced community forum plugin	Days to revision 522
2026-04-082 commits	Product added	Show all 3 CVE records in this change: Product added: chat widget: floating customer support button for 30+ channels, supporting sms, calls, and chat – bit assist named as affected from bitpressadminHide the 3 CVE records in this change: Product added: chat widget: floating customer support button for 30+ channels, supporting sms, calls, and chat – bit assist named as affected from bitpressadmin	bitpressadmin Wordfence	not named as affected at publication, now names chat widget: floating customer support button for 30+ channels, supporting sms, calls, and chat – bit assistBranches and original-value intervals are stated on each row.	Days to revision 417 to 418
2026-04-08	same kind of change as the line above	CVE-2025-0821	same vendor as the line above	same change as the line above	Days to revision 418
2026-04-08	same kind of change as the line above	CVE-2025-0822	same vendor as the line above	same change as the line above	Days to revision 417
2026-04-08	same kind of change as the line above	CVE-2024-13791	same vendor as the line above	same change as the line above	Days to revision 418
2026-04-08	Product added	CVE-2025-10289	wssoffice21 Wordfence	not named as affected at publication, now names ymc filter	Days to revision 117
2026-04-08	Product added	CVE-2025-11999	krishaweb Wordfence	not named as affected at publication, now names multi location marker	Days to revision 149
2026-04-08	Product added	CVE-2025-12189	breadbutter Wordfence	not named as affected at publication, now names bread & butter: ai-powered lead intelligence	Days to revision 125
2026-04-08	Product added	CVE-2025-13314	markutos987 Wordfence	not named as affected at publication, now names filter plus – product filter & wordpress filter	Days to revision 118
2026-04-08	Product added	CVE-2025-14446	ghozylab Wordfence	not named as affected at publication, now names easy notify lite	Days to revision 117
2026-04-08	Product added	CVE-2025-14846	socialchampio Wordfence	not named as affected at publication, now names auto post to social media from social champ	Days to revision 85
2026-04-083 commits	Product added	Show all 6 CVE records in this change: Product added: ultimate blocks – 25+ gutenberg blocks for block editor named as affected from ultimateblocksHide the 6 CVE records in this change: Product added: ultimate blocks – 25+ gutenberg blocks for block editor named as affected from ultimateblocks	ultimateblocks Wordfence	not named as affected at publication, now names ultimate blocks – 25+ gutenberg blocks for block editorBranches and original-value intervals are stated on each row.	Days to revision 302 to 659
2026-04-08	same kind of change as the line above	CVE-2025-1312	same vendor as the line above	same change as the line above	Days to revision 378
2026-04-08	same kind of change as the line above	CVE-2025-1703	same vendor as the line above	same change as the line above	Days to revision 378
2026-04-08	same kind of change as the line above	CVE-2023-6692	same vendor as the line above	same change as the line above	Days to revision 659
2026-04-08	same kind of change as the line above	CVE-2024-3513	same vendor as the line above	same change as the line above	Days to revision 645
2026-04-08	same kind of change as the line above	CVE-2025-2918	same vendor as the line above	same change as the line above	Days to revision 302
2026-04-08	same kind of change as the line above	CVE-2024-4268	same vendor as the line above	same change as the line above	Days to revision 645
2026-04-08	Product added	CVE-2025-1450	premio Wordfence	not named as affected at publication, now names floating chat widget: contact chat icons, telegram chat, line messenger, wechat, email, sms, call button – chaty	Days to revision 405
2026-04-08	Product added	CVE-2025-1717	pluginly Wordfence	not named as affected at publication, now names login me now – passwordless, magic link, otp & social login for wordpress	Days to revision 406
2026-04-083 commits	Product added	Show all 6 CVE records in this change: Product added: eventin – event calendar, event registration, tickets & booking (ai powered) named as affected from arrayticsHide the 6 CVE records in this change: Product added: eventin – event calendar, event registration, tickets & booking (ai powered) named as affected from arraytics	arraytics Wordfence	not named as affected at publication, now names eventin – event calendar, event registration, tickets & booking (ai powered)Branches and original-value intervals are stated on each row.	Days to revision 336 to 790
2026-04-08	same kind of change as the line above	CVE-2025-1766	same vendor as the line above	same change as the line above	Days to revision 385
2026-04-08	same kind of change as the line above	CVE-2024-7149	same vendor as the line above	same change as the line above	Days to revision 558
2026-04-08	same kind of change as the line above	CVE-2025-1770	same vendor as the line above	same change as the line above	Days to revision 385
2026-04-08	same kind of change as the line above	CVE-2024-1122	same vendor as the line above	same change as the line above	Days to revision 790
2026-04-08	same kind of change as the line above	CVE-2024-6033	same vendor as the line above	same change as the line above	Days to revision 630
2026-04-08	same kind of change as the line above	CVE-2025-3419	same vendor as the line above	same change as the line above	Days to revision 336
2026-04-08	Product added	CVE-2025-2168	bdthemes Wordfence	not named as affected at publication, now names ultimate store kit – addon for woocommerce, edd and elementor	Days to revision 343
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: stop spammers classic named as affected from webguyioHide the 2 CVE records in this change: Product added: stop spammers classic named as affected from webguyio	webguyio Wordfence	not named as affected at publication, now names stop spammers classicBranches and original-value intervals are stated on each row.	Days to revision 307 to 704
2026-04-08	same kind of change as the line above	CVE-2025-2935	same vendor as the line above	same change as the line above	Days to revision 307
2026-04-08	same kind of change as the line above	CVE-2023-7065	same vendor as the line above	same change as the line above	Days to revision 704
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: login, registration and lost password blocks named as affected from arkenonHide the 2 CVE records in this change: Product added: login, registration and lost password blocks named as affected from arkenon	arkenon Wordfence	not named as affected at publication, now names login, registration and lost password blocksBranches and original-value intervals are stated on each row.	Days to revision 334 to 349
2026-04-08	same kind of change as the line above	CVE-2025-3607	same vendor as the line above	same change as the line above	Days to revision 349
2026-04-08	same kind of change as the line above	CVE-2025-3605	same vendor as the line above	same change as the line above	Days to revision 334
2026-04-083 commits	Product added	Show all 4 CVE records in this change: Product added: elementskit elementor addons – advanced widgets & templates addons for elementor named as affected from roxnorHide the 4 CVE records in this change: Product added: elementskit elementor addons – advanced widgets & templates addons for elementor named as affected from roxnor	roxnor Wordfence	not named as affected at publication, now names elementskit elementor addons – advanced widgets & templates addons for elementorBranches and original-value intervals are stated on each row.	Days to revision 258 to 706
2026-04-08	same kind of change as the line above	CVE-2025-4479	same vendor as the line above	same change as the line above	Days to revision 294
2026-04-08	same kind of change as the line above	CVE-2024-11180	same vendor as the line above	same change as the line above	Days to revision 375
2026-04-08	same kind of change as the line above	CVE-2024-3499	same vendor as the line above	same change as the line above	Days to revision 706
2026-04-08	same kind of change as the line above	CVE-2025-3614	same vendor as the line above	same change as the line above	Days to revision 258
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: malcure malware shield — removal, repair, monitor named as affected from malcureHide the 2 CVE records in this change: Product added: malcure malware shield — removal, repair, monitor named as affected from malcure	malcure Wordfence	not named as affected at publication, now names malcure malware shield — removal, repair, monitorBranches and original-value intervals are stated on each row.	Days to revision 264 to 267
2026-04-08	same kind of change as the line above	CVE-2025-6043	same vendor as the line above	same change as the line above	Days to revision 267
2026-04-08	same kind of change as the line above	CVE-2025-7772	same vendor as the line above	same change as the line above	Days to revision 264
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: site.pro for woocommerce named as affected from b1accountingHide the 2 CVE records in this change: Product added: site.pro for woocommerce named as affected from b1accounting	b1accounting Wordfence	not named as affected at publication, now names site.pro for woocommerceBranches and original-value intervals are stated on each row.	Days to revision 265
2026-04-08	same kind of change as the line above	CVE-2025-6717	same vendor as the line above	same change as the line above	Days to revision 265
2026-04-08	same kind of change as the line above	CVE-2025-6718	same vendor as the line above	same change as the line above	Days to revision 265
2026-04-08	Product added	CVE-2025-8215	cyberchimps Wordfence	not named as affected at publication, now names responsive addons for elementor – free elementor addons, kits and elementor templates	Days to revision 210
2026-04-08	Product added	CVE-2023-2833	reviewx Wordfence	not named as affected at publication, now names reviewx – multi-criteria reviews for woocommerce with google reviews & schema	Days to revision 1,037
2026-04-08	Product added	CVE-2023-3093	yaycommerce Wordfence	not named as affected at publication, now names yaysmtp and email logs: amazon ses, sendgrid, outlook, mailgun, brevo, google and any smtp service	Days to revision 1,002
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: payment gateway of stripe for woocommerce named as affected from themehighHide the 2 CVE records in this change: Product added: payment gateway of stripe for woocommerce named as affected from themehigh	themehigh Wordfence	not named as affected at publication, now names payment gateway of stripe for woocommerceBranches and original-value intervals are stated on each row.	Days to revision 810 to 952
2026-04-08	same kind of change as the line above	CVE-2023-3162	same vendor as the line above	same change as the line above	Days to revision 952
2026-04-08	same kind of change as the line above	CVE-2024-0705	same vendor as the line above	same change as the line above	Days to revision 810
2026-04-08	Product added	CVE-2023-4961	poptin Wordfence	not named as affected at publication, now names poptin – exit pop ups & email popups	Days to revision 901
2026-04-08	Product added	CVE-2023-4968	wplegalpages Wordfence	not named as affected at publication, now names privacy policy generator – wplp legal pages	Days to revision 902
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: super testimonial – testimonial & customer review slider plugin for wordpress named as affected from themepointsHide the 2 CVE records in this change: Product added: super testimonial – testimonial & customer review slider plugin for wordpress named as affected from themepoints	themepoints Wordfence	not named as affected at publication, now names super testimonial – testimonial & customer review slider plugin for wordpressBranches and original-value intervals are stated on each row.	Days to revision 414 to 902
2026-04-08	same kind of change as the line above	CVE-2023-5613	same vendor as the line above	same change as the line above	Days to revision 902
2026-04-08	same kind of change as the line above	CVE-2024-13704	same vendor as the line above	same change as the line above	Days to revision 414
2026-04-08	Product added	CVE-2023-6325	rometheme Wordfence	not named as affected at publication, now names rtmform builder	Days to revision 686
2026-04-08	Product added	Show all 3 CVE records in this change: Product added: ecommerce fabrick named as affected from easynoloHide the 3 CVE records in this change: Product added: ecommerce fabrick named as affected from easynolo	easynolo Wordfence	not named as affected at publication, now names ecommerce fabrick	Days to revision 770
2026-04-08	same kind of change as the line above	CVE-2024-0431	same vendor as the line above	same change as the line above	Days to revision 770
2026-04-08	same kind of change as the line above	CVE-2024-0432	same vendor as the line above	same change as the line above	Days to revision 770
2026-04-08	same kind of change as the line above	CVE-2024-0433	same vendor as the line above	same change as the line above	Days to revision 770
2026-04-08	Product added	CVE-2024-0908	bplugins Wordfence	not named as affected at publication, now names advanced post block – showcase posts with grid, list, card layouts and filters	Days to revision 706
2026-04-08	Product added	Show all 3 CVE records in this change: Product added: mixed media gallery blocks named as affected from gallerycreatorHide the 3 CVE records in this change: Product added: mixed media gallery blocks named as affected from gallerycreator	gallerycreator Wordfence	not named as affected at publication, now names mixed media gallery blocks	Days to revision 117 to 649
2026-04-08	same kind of change as the line above	CVE-2024-10034	same vendor as the line above	same change as the line above	Days to revision 503
2026-04-08	same kind of change as the line above	CVE-2024-5424	same vendor as the line above	same change as the line above	Days to revision 649
2026-04-08	same kind of change as the line above	CVE-2025-14288	same vendor as the line above	same change as the line above	Days to revision 117
2026-04-08	Product added	Show all 2 CVE records in this change: Product added: borderless – addons and templates for elementor named as affected from visualmodoHide the 2 CVE records in this change: Product added: borderless – addons and templates for elementor named as affected from visualmodo	visualmodo Wordfence	not named as affected at publication, now names borderless – addons and templates for elementor	Days to revision 433
2026-04-08	same kind of change as the line above	CVE-2024-10867	same vendor as the line above	same change as the line above	Days to revision 433
2026-04-08	same kind of change as the line above	CVE-2024-11600	same vendor as the line above	same change as the line above	Days to revision 433
2026-04-08	Product added	CVE-2024-11009	pagup Wordfence	not named as affected at publication, now names automatic internal links for seo by pagup	Days to revision 497
2026-04-08	Product added	CVE-2024-11337	divineapi Wordfence	not named as affected at publication, now names divine astro	Days to revision 457
2026-04-08	Product added	CVE-2024-11410	sharabindu Wordfence	not named as affected at publication, now names yoo bar – floating notification & promo bar for website	Days to revision 483
2026-04-08	Product added	CVE-2024-11462	filestack Wordfence	not named as affected at publication, now names filestack wp upload	Days to revision 481
2026-04-08	Product added	CVE-2024-11907	skyword Wordfence	not named as affected at publication, now names skyword xmlrpc publishing	Days to revision 454
2026-04-08	Product added	CVE-2024-12419	tobias_conrad Wordfence	not named as affected at publication, now names wow styler for cf7 – visual styler for contact form 7 forms	Days to revision 457
2026-04-08	Product added	Show all 3 CVE records in this change: Product added: opace ai scribe: seo content creator & humaizer for openai & anthropic named as affected from opacewebdesignHide the 3 CVE records in this change: Product added: opace ai scribe: seo content creator & humaizer for openai & anthropic named as affected from opacewebdesign	opacewebdesign Wordfence	not named as affected at publication, now names opace ai scribe: seo content creator & humaizer for openai & anthropic	Days to revision 454
2026-04-08	same kind of change as the line above	CVE-2024-12473	same vendor as the line above	same change as the line above	Days to revision 454
2026-04-08	same kind of change as the line above	CVE-2024-12605	same vendor as the line above	same change as the line above	Days to revision 454
2026-04-08	same kind of change as the line above	CVE-2024-12606	same vendor as the line above	same change as the line above	Days to revision 454
2026-04-08	Product added	CVE-2024-12504	videowhisper Wordfence	not named as affected at publication, now names broadcast live video – live streaming : webrtc, hls, rtsp, rtmp	Days to revision 440
2026-04-08	Product added	Show all 2 CVE records in this change: Product added: pinpoint booking system – version 2 named as affected from dotonpaperHide the 2 CVE records in this change: Product added: pinpoint booking system – version 2 named as affected from dotonpaper	dotonpaper Wordfence	not named as affected at publication, now names pinpoint booking system – version 2	Days to revision 412 to 578
2026-04-08	same kind of change as the line above	CVE-2024-13235	same vendor as the line above	same change as the line above	Days to revision 412
2026-04-08	same kind of change as the line above	CVE-2024-7112	same vendor as the line above	same change as the line above	Days to revision 578
2026-04-08	Product added	CVE-2024-13509	ws form Wordfence	not named as affected at publication, now names ws form pro	Days to revision 436
2026-04-08	Product added	CVE-2024-13750	prismitsystems Wordfence	not named as affected at publication, now names multilevel referral plugin for woocommerce	Days to revision 404
2026-04-08	Product added	CVE-2024-13818	genetechproducts Wordfence	not named as affected at publication, now names pie register – user registration, profiles & content restriction	Days to revision 412
2026-04-08	Product added	CVE-2024-1047	optimole Wordfence	not named as affected at publication, now names super page cache	Days to revision 797
2026-04-08	Product added	CVE-2024-1047	rsocial Wordfence	not named as affected at publication, now names revive social – social media auto post and scheduling automation plugin	Days to revision 797
2026-04-08	Product added	CVE-2024-1047Show all 8 products in this change: Product added: 8 products named as affected in CVE-2024-1047Hide the 8 products in this change: Product added: 8 products named as affected in CVE-2024-1047	themeisle Wordfence	not named as affected at publication, now names lightstart – maintenance mode, coming soon and landing page builder and 7 more	Days to revision 797
2026-04-08	same kind of change as the line above	CVE-2024-1047	same vendor as the line above	not named as affected at publication, now names lightstart – maintenance mode, coming soon and landing page builder	Days to revision 797
2026-04-08	same kind of change as the line above	CVE-2024-1047	same vendor as the line above	not named as affected at publication, now names menu icons by themeisle	Days to revision 797
2026-04-08	same kind of change as the line above	CVE-2024-1047	same vendor as the line above	not named as affected at publication, now names multiple page generator plugin – mpg	Days to revision 797
2026-04-08	same kind of change as the line above	CVE-2024-1047	same vendor as the line above	not named as affected at publication, now names otter blocks – gutenberg blocks, page builder for gutenberg editor & fse	Days to revision 797
2026-04-08	same kind of change as the line above	CVE-2024-1047	same vendor as the line above	not named as affected at publication, now names ppom – product addons & custom fields for woocommerce	Days to revision 797
2026-04-08	same kind of change as the line above	CVE-2024-1047	same vendor as the line above	not named as affected at publication, now names rss aggregator by feedzy – feed to post, autoblogging, news & youtube video feeds aggregator	Days to revision 797
2026-04-08	same kind of change as the line above	CVE-2024-1047	same vendor as the line above	not named as affected at publication, now names starter sites & templates by neve	Days to revision 797
2026-04-08	same kind of change as the line above	CVE-2024-1047	same vendor as the line above	not named as affected at publication, now names visualizer: tables and charts manager for wordpress	Days to revision 797
2026-04-08	Product added	Show all 3 CVE records in this change: Product added: wpcafe – restaurant menu, online food ordering & table booking system named as affected from arrayticsHide the 3 CVE records in this change: Product added: wpcafe – restaurant menu, online food ordering & table booking system named as affected from arraytics	arraytics Wordfence	not named as affected at publication, now names wpcafe – restaurant menu, online food ordering & table booking system	Days to revision 653 to 686
2026-04-08	same kind of change as the line above	CVE-2024-1855	same vendor as the line above	same change as the line above	Days to revision 686
2026-04-08	same kind of change as the line above	CVE-2024-5427	same vendor as the line above	same change as the line above	Days to revision 678
2026-04-08	same kind of change as the line above	CVE-2024-5431	same vendor as the line above	same change as the line above	Days to revision 653
2026-04-08	Product added	CVE-2024-1862	forwardflip Wordfence	not named as affected at publication, now names add to cart custom redirect for woocommerce	Days to revision 756
2026-04-08	Product added	CVE-2024-1895	awordpresslife Wordfence	not named as affected at publication, now names event monster – manager & ticket booking	Days to revision 708
2026-04-08	Product added	CVE-2024-2387	nasirahmed Wordfence	not named as affected at publication, now names afi – the easiest integration plugin	Days to revision 750
2026-04-08	Product added	CVE-2024-2967	aharonyan Wordfence	not named as affected at publication, now names guest posting / frontend posting / front editor – wp front user submit	Days to revision 706
2026-04-08	Product added	CVE-2024-3275	digitalmeactivecampaign Wordfence	not named as affected at publication, now names eroom – webinar & meeting plugin for zoom, google meet, microsoft teams	Days to revision 706
2026-04-08	Product added	Show all 2 CVE records in this change: Product added: cookie banner for gdpr / ccpa – wplp cookie consent named as affected from wplegalpagesHide the 2 CVE records in this change: Product added: cookie banner for gdpr / ccpa – wplp cookie consent named as affected from wplegalpages	wplegalpages Wordfence	not named as affected at publication, now names cookie banner for gdpr / ccpa – wplp cookie consent	Days to revision 652 to 706
2026-04-08	same kind of change as the line above	CVE-2024-3599	same vendor as the line above	same change as the line above	Days to revision 706
2026-04-08	same kind of change as the line above	CVE-2024-4869	same vendor as the line above	same change as the line above	Days to revision 652
2026-04-082 commits	Product added	Show all 2 CVE records in this change: Product added: livemesh addons by elementor named as affected from livemeshHide the 2 CVE records in this change: Product added: livemesh addons by elementor named as affected from livemesh	livemesh Wordfence	not named as affected at publication, now names livemesh addons by elementorBranches and original-value intervals are stated on each row.	Days to revision 644
2026-04-08	same kind of change as the line above	CVE-2024-3638	same vendor as the line above	same change as the line above	Days to revision 644
2026-04-08	same kind of change as the line above	CVE-2024-2385	same vendor as the line above	same change as the line above	Days to revision 644
2026-04-08	Product added	CVE-2024-4014	hcaptcha Wordfence	not named as affected at publication, now names hcaptcha for wp	Days to revision 718
2026-04-082 commits	Product added	Show all 3 CVE records in this change: Product added: element pack – widgets, templates & addons for elementor named as affected from bdthemesHide the 3 CVE records in this change: Product added: element pack – widgets, templates & addons for elementor named as affected from bdthemes	bdthemes Wordfence	not named as affected at publication, now names element pack – widgets, templates & addons for elementorBranches and original-value intervals are stated on each row.	Days to revision 608 to 665
2026-04-08	same kind of change as the line above	CVE-2024-4360	same vendor as the line above	same change as the line above	Days to revision 608
2026-04-08	same kind of change as the line above	CVE-2024-3925	same vendor as the line above	same change as the line above	Days to revision 665
2026-04-08	same kind of change as the line above	CVE-2024-4643	same vendor as the line above	same change as the line above	Days to revision 614
2026-04-08	Product added	CVE-2024-4706	wpo365 Wordfence	not named as affected at publication, now names wpo365 \| seamless wordpress + microsoft integration (wpo365 \| login)	Days to revision 685
2026-04-08	Product added	CVE-2024-6123	bitpressadmin Wordfence	not named as affected at publication, now names bit form – custom contact form, multi step, conversational form & payment form builder	Days to revision 638
2026-04-08	Product added	CVE-2024-6571	arnoldasarny Wordfence	not named as affected at publication, now names image seo – ai-driven image seo optimizer	Days to revision 624
2026-04-08	Product added	CVE-2024-6872	templatespare Wordfence	not named as affected at publication, now names templatespare – 1000+ wordpress starter templates & full site migration tool \| 1-click import/export & no-code builder	Days to revision 613
2026-04-08	Product added	Show all 2 CVE records in this change: Product added: kb support – customer support ticket & helpdesk plugin, knowledge base plugin named as affected from logonincHide the 2 CVE records in this change: Product added: kb support – customer support ticket & helpdesk plugin, knowledge base plugin named as affected from logoninc	logoninc Wordfence	not named as affected at publication, now names kb support – customer support ticket & helpdesk plugin, knowledge base plugin	Days to revision 554
2026-04-08	same kind of change as the line above	CVE-2024-8548	same vendor as the line above	same change as the line above	Days to revision 554
2026-04-08	same kind of change as the line above	CVE-2024-8632	same vendor as the line above	same change as the line above	Days to revision 554
2026-04-08	Product added	CVE-2024-8628	properfraction Wordfence	not named as affected at publication, now names mailoptin – popup, optin forms & email newsletters for mailchimp, hubspot, aweber etc.	Days to revision 562

Two units, never added: changes to a CVE record or KEV entry, and changes to a GitHub advisory. Rows, not records: a moved fix version or an extended range counts once per record, product and release branch; an added product once per record and product; every other kind once per record or advisory. Days to revision is how long the value first stated stood: from the record's or advisory's publication, or from the day a KEV field value was first seen, to the first commit that replaced it. An addition to KEV has no earlier value and shows none. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

Data sources and quality

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Check my CVEs against these changes →