Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

CISA ADP · SSVC 2.0.3

Exploitation

None

Automatable

No

Technical impact

Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

• Go Fetch Jobs (for WP Job Manager) Vendorsebet Affected up to 1.8.4.8.1 Fixed in — No fix listed CNA
• Dynamic Copyright Year Vendor5starplugins Affected up to 1.0.4 Fixed in — No fix listed CNA
• Code Manager Vendorpeterschulznl Affected up to 1.0.40 Fixed in — No fix listed CNA
• Advanced Scrollbar – Custom Scrollbar Styling and Behavior VendorbPlugins Affected up to 1.1.3 Fixed in — No fix listed CNA
• Goal Tracker – Custom Event Tracking for GA4 Vendoryuvalo Affected up to 1.1.5 Fixed in — No fix listed CNA
• Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent VendorEssekia Affected up to 1.1.13 Fixed in — No fix listed CNA
• WP Page Templates Vendorjosevega Affected up to 1.1.16 Fixed in — No fix listed CNA
• Payment Gateway for ACBA BANK VendorHK Digital Agency LLC Affected up to 1.2.6 Fixed in — No fix listed CNA
• Dracula Dark Mode – Accessibility, Reading Mode & Dark Mode for WordPress Vendorprinceahmed Affected up to 1.2.7 Fixed in — No fix listed CNA
• Forumax – AI Powered Advanced Community Forum Plugin Vendorspiderdevs Affected up to 1.2.7 Fixed in — No fix listed CNA
• Five-Star Ratings Shortcode Vendorseezee Affected up to 1.2.56 Fixed in — No fix listed CNA
• Product Layouts for WooCommerce VendorBiplob Adhikari Affected up to 1.3.1 Fixed in — No fix listed CNA
• Meta Field Block – Display custom fields in the Block Editor without coding Vendormr2p Affected up to 1.3.3 Fixed in — No fix listed CNA
• Custom WooCommerce Checkout Fields Editor Vendorthemelocation Affected up to 1.3.4 Fixed in — No fix listed CNA
• Open User Map Vendor100plugins Affected up to 1.4.0 Fixed in — No fix listed CNA
• WP Notification Bell Vendorwpdever Affected up to 1.4.2 Fixed in — No fix listed CNA
• Remove Add to Cart WooCommerce Vendorthemelocation Affected up to 1.4.7 Fixed in — No fix listed CNA
• File Manager for Google Drive – Integrate Google Drive Vendorprinceahmed Affected up to 1.4.9 Fixed in — No fix listed CNA
• Marijuana Age Verify Vendor5starplugins Affected up to 1.5.5 Fixed in — No fix listed CNA
• RevivePress – Keep your Old Content Evergreen Vendorinfosatech Affected up to 1.5.8 Fixed in — No fix listed CNA
• Restaurant & Cafe Addon for Elementor Vendornicheaddons Affected up to 1.5.8 Fixed in — No fix listed CNA
• Send Users Email – Email Subscribers, Email Marketing Newsletter VendorPARETO Digital Affected up to 1.5.10 Fixed in — No fix listed CNA
• Unlimited Elements For Elementor Vendorunitecms Affected up to 1.5.140 Fixed in — No fix listed CNA
• Role Based Pricing for Woo by Meow Crew Vendormeowcrew Affected up to 1.6.0 Fixed in — No fix listed CNA
• Primary Addon for Elementor Vendornicheaddons Affected up to 1.6.0 Fixed in — No fix listed CNA
• Featured Images in RSS for Mailchimp & More Vendor5starplugins Affected up to 1.6.3 Fixed in — No fix listed CNA
• Image Alt Text Manager – Bulk & Dynamic Alt Tags For image SEO Optimization + AI Vendorwpsaad Affected up to 1.6.3 Fixed in — No fix listed CNA
• Message Filter for Contact Form 7 VendorKofi Mokome Affected up to 1.6.3.2 Fixed in — No fix listed CNA
• Embedder for Google Reviews VendorPARETO Digital Affected up to 1.6.6 Fixed in — No fix listed CNA
• MapGeo – Interactive Geo Maps Vendorinteractivegeomaps Affected up to 1.6.22 Fixed in — No fix listed CNA
• WPBITS Addons For Elementor Page Builder Vendorwpbits Affected up to 1.7 Fixed in — No fix listed CNA
• Widgets on Pages Vendortoddhalfpenny Affected up to 1.7 Fixed in — No fix listed CNA
• Spotlight Social Feeds – Block, Shortcode, and Widget Vendorrebelcode Affected up to 1.7.0 Fixed in — No fix listed CNA
• WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms Vendortobias_conrad Affected up to 1.7.0 Fixed in — No fix listed CNA
• AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o Vendorwebfactory Affected up to 1.7.2 Fixed in — No fix listed CNA
• Text To Speech TTS Accessibility Vendorhasanazizul Affected up to 1.7.34 Fixed in — No fix listed CNA
• Easy Age Verify Vendor5starplugins Affected up to 1.8.5 Fixed in — No fix listed CNA
• AI Puffer – Chat. Create. Automate. (formerly AI Power) Vendorsenols Affected up to 1.8.99 Fixed in — No fix listed CNA
• Justified Gallery Vendordamian-gora Affected up to 1.9.0 Fixed in — No fix listed CNA
• Mapster WP Maps Vendormapster Affected up to 1.9.0 Fixed in — No fix listed CNA
• StreamWeasels Twitch Integration Vendorstreamweasels Affected up to 1.9.2 Fixed in — No fix listed CNA
• XT Variation Swatches for WooCommerce Vendorxplodedthemes Affected up to 1.9.4 Fixed in — No fix listed CNA
• bBlocks – Essential Gutenberg Blocks & Patterns Collection VendorbPlugins Affected up to 1.9.8 Fixed in — No fix listed CNA
• URL Shortify – Simple and Easy URL Shortener VendorKaizenCoders Affected up to 1.10.4 Fixed in — No fix listed CNA
• Kikote – Location Picker at Checkout & Google Address AutoFill Plugin for WooCommerce VendorUriahs Victor Affected up to 1.10.6 Fixed in — No fix listed CNA
• Geo Mashup Vendorcyberhobo Affected up to 1.13.15 Fixed in — No fix listed CNA
• Disable Payment Methods based on cart conditions for WooCommerce Vendorjosevega Affected up to 1.16.3 Fixed in — No fix listed CNA
• Automatic Internal Links for SEO by Pagup Vendorpagup Affected up to 2.0.0 Fixed in — No fix listed CNA
• Full Screen Background Vendorenweby Affected up to 2.0.2 Fixed in — No fix listed CNA
• Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits Vendorlitonice13 Affected up to 2.0.7.2 Fixed in — No fix listed CNA
• Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player Vendorprinceahmed Affected up to 2.0.82 Fixed in — No fix listed CNA
• Carousel, Recent Post Slider and Banner Slider Vendorspicethemes Affected up to 2.1 Fixed in — No fix listed CNA
• Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO) Vendorpagup Affected up to 2.1.0 Fixed in — No fix listed CNA
• XT Quick View for WooCommerce Vendorxplodedthemes Affected up to 2.1.5 Fixed in — No fix listed CNA
• Smart phone field for Gravity Forms VendorPluginsCafe Affected up to 2.1.6 Fixed in — No fix listed CNA
• Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar Vendorfooplugins Affected up to 2.1.34 Fixed in — No fix listed CNA
• PDF Poster – Display PDF Files with Custom Viewer VendorbPlugins Affected up to 2.2.0 Fixed in — No fix listed CNA
• Events Addon for Elementor Vendornicheaddons Affected up to 2.2.2 Fixed in — No fix listed CNA
• HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player VendorbPlugins Affected up to 2.2.27 Fixed in — No fix listed CNA
• Glossary Vendormte90 Affected up to 2.2.38 Fixed in — No fix listed CNA
• Restrict – membership, site, content and user access restrictions for WordPress Vendortickera Affected up to 2.3.0 Fixed in — No fix listed CNA
• Custom PHP Settings Vendorcyclonecode Affected up to 2.3.1 Fixed in — No fix listed CNA
• WP Meta and Date Remover Vendorprasadkirpekar Affected up to 2.3.4 Fixed in — No fix listed CNA
• Anti-Spam Protection – No API Key, GDPR Friendly VendorFullworks Affected up to 2.3.7 Fixed in — No fix listed CNA
• Premmerce Permalink Manager for WooCommerce VendorPremmerce Affected up to 2.3.11 Fixed in — No fix listed CNA
• Music Player for Elementor – Audio Player & Podcast Player Vendorsmartwpress Affected up to 2.4.1 Fixed in — No fix listed CNA
• TopNewsWp – Display Tikcer News, RSS Feed Widget and Many More Vendormhmrajib Affected up to 2.4.1 Fixed in — No fix listed CNA
• Ocean Extra Vendoroceanwp Affected up to 2.4.2 Fixed in — No fix listed CNA
• Gallery by FooGallery Vendorfooplugins Affected up to 2.4.27 Fixed in — No fix listed CNA
• Automatic YouTube Gallery Vendorplugins360 Affected up to 2.5.5 Fixed in — No fix listed CNA
• EazyDocs – AI Powered Knowledge Base, Wiki, Documentation & FAQ Builder Vendorspiderdevs Affected up to 2.5.7 Fixed in — No fix listed CNA
• Team Members – A WordPress Team Plugin with Gallery, Grid, Carousel, Slider, Table, List, and More Vendorsamdani Affected up to 2.5.8 Fixed in — No fix listed CNA
• Radio Station by netmix® – Manage and play your Show Schedule in WordPress! VendorTony Zeoli Affected up to 2.5.9 Fixed in — No fix listed CNA
• StoreCustomizer – A plugin to Customize all WooCommerce Pages VendorKaira Affected up to 2.5.9 Fixed in — No fix listed CNA
• Joli Table Of Contents Vendorwpjoli Affected up to 2.6.0 Fixed in — No fix listed CNA
• GA4WP – Analytics Dashboard for the Website VendorPassionate Brains Affected up to 2.6.0 Fixed in — No fix listed CNA
• Place Order Without Payment for WooCommerce Vendornitin247 Affected up to 2.6.5 Fixed in — No fix listed CNA
• Better Messages – Live Chat, Chat Rooms, Real-Time Messaging & Private Messages Vendorwordplus Affected up to 2.6.7 Fixed in — No fix listed CNA
• Share This Image Vendormihail-barinov Affected up to 2.07 Fixed in — No fix listed CNA
• Inavii Social Feed Vendorinavii Affected up to 2.7.0 Fixed in — No fix listed CNA
• Lightbox & Modal Popup WordPress Plugin – FooBox Vendorfooplugins Affected up to 2.7.33 Fixed in — No fix listed CNA
• XT Floating Cart for WooCommerce Vendorxplodedthemes Affected up to 2.8.4 Fixed in — No fix listed CNA
• WP Mobile Menu – The Mobile-Friendly Responsive Menu Vendortakanakui Affected up to 2.8.6 Fixed in — No fix listed CNA
• AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization VendorPassionate Brains Affected up to 2.9.2 Fixed in — No fix listed CNA
• Independent Analytics Vendorbensibley Affected up to 2.9.7 Fixed in — No fix listed CNA
• Knowledge Base documentation & wiki plugin – BasePress Docs Vendorcodesavory Affected up to 2.16.3.3 Fixed in — No fix listed CNA
• Internal Link Juicer: SEO Auto Linker for WordPress Vendordavidanderson Affected up to 2.24.6 Fixed in — No fix listed CNA
• Bulk Edit Posts and Products in Spreadsheet Vendorjosevega Affected up to 2.25.16 Fixed in — No fix listed CNA
• Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App Vendorsaadiqbal Affected up to 3.0.0 Fixed in — No fix listed CNA
• TablePress – Tables in WordPress made easy Vendortobiasbg Affected up to 3.0.2 Fixed in — No fix listed CNA
• Ultimeter Vendorbouncingsprout Affected up to 3.0.5 Fixed in — No fix listed CNA
• TreePress – Easy Family Trees & Ancestor Profiles Vendorblackandwhitedigital Affected up to 3.0.6 Fixed in — No fix listed CNA
• Pay For Post with WooCommerce Vendormattpramschufer Affected up to 3.1.26 Fixed in — No fix listed CNA
• Post to Google My Business (Google Business Profile) Vendorkoen12344 Affected up to 3.1.28 Fixed in — No fix listed CNA
• WP Coupons and Deals – Coupon Plugin For Affiliate Marketers VendorImtiaz Rayhan Affected up to 3.2.2 Fixed in — No fix listed CNA
• Advanced Classifieds & Directory Pro Vendorpluginsware Affected up to 3.2.4 Fixed in — No fix listed CNA
• Mixed Media Gallery Blocks Vendorgallerycreator Affected up to 3.2.4.4 Fixed in — No fix listed CNA
• BlockSpare — News, Magazine and Blog Addons for (Gutenberg) Block Editor Vendorblockspare Affected up to 3.2.6 Fixed in — No fix listed CNA
• AidWP – Donation & Payment Forms (Stripe Powered) Vendormhmrajib Affected up to 3.2.6 Fixed in — No fix listed CNA
• Logo Showcase – Responsive Logo Carousel, Logo Slider & Logo Grid Vendorinfornweb Affected up to 3.2.7 Fixed in — No fix listed CNA
• Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider Vendorpluginandplay Affected up to 3.2.7 Fixed in — No fix listed CNA
• Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews Vendorsamdani Affected up to 3.2.8 Fixed in — No fix listed CNA
• Team Members Showcase Vendorwpspeedo Affected up to 3.3.0 Fixed in — No fix listed CNA
• EleSpare – News, Magazine and Blog Addons for Elementor Vendorelespare Affected up to 3.3.2 Fixed in — No fix listed CNA
• Post List Designer – Category Post, Recent Post, Post List Vendorinfornweb Affected up to 3.3.7 Fixed in — No fix listed CNA
• Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News Vendorinfornweb Affected up to 3.4.9 Fixed in — No fix listed CNA
• YASR – Yet Another Star Rating Plugin for WordPress Vendordashlabsltd Affected up to 3.4.12 Fixed in — No fix listed CNA
• WPIDE – File Manager & Code Editor Vendorxplodedthemes Affected up to 3.5.1 Fixed in — No fix listed CNA
• Premmerce Product Filter for WooCommerce VendorPremmerce Affected up to 3.7.3 Fixed in — No fix listed CNA
• WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars VendorAF themes Affected up to 3.8.3 Fixed in — No fix listed CNA
• Delete Posts automatically Vendorwpmagics Affected up to 3.9.6 Fixed in — No fix listed CNA
• Menu Image, Icons made easy Vendortakanakui Affected up to 3.12 Fixed in — No fix listed CNA
• AWCA – The Great Analytics Insights for Your eStore VendorPassionate Brains Affected up to 3.12.0 Fixed in — No fix listed CNA
• Announcement & Notification Banner – Bulletin Vendormikewire_rocksolid Affected up to 3.12.1 Fixed in — No fix listed CNA
• Thank You Page for WooCommerce Vendornitin247 Affected up to 4.2.0 Fixed in — No fix listed CNA
• Contact Form 7 Multi-Step Forms Vendorwebheadllc Affected up to 4.4.1 Fixed in — No fix listed CNA
• Auto-Install Free SSL – Generate & Install Free SSL Certificates Vendorspeedify Affected up to 4.5.0 Fixed in — No fix listed CNA
• WP Books Gallery – Build Stunning Book Showcases & Libraries in Minutes Vendormhmrajib Affected up to 4.6.8 Fixed in — No fix listed CNA
• Easy Appointment Booking & Scheduling System – Webba Booking Calendar Vendorwebba-agency Affected up to 5.0.57 Fixed in — No fix listed CNA
• WP fail2ban – Advanced Security Vendorinvisnet Affected up to 5.3.4 Fixed in — No fix listed CNA
• Ivory Search – WordPress Search Plugin Vendorvinod-dalvi Affected up to 5.5.8 Fixed in — No fix listed CNA
• WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards Vendorpeterschulznl Affected up to 5.5.31 Fixed in — No fix listed CNA
• Coupon Affiliates – Affiliate Plugin for WooCommerce Vendorelliotvs Affected up to 5.17.2 Fixed in — No fix listed CNA
• Security Ninja – WordPress Security & Firewall Vendorcleverplugins Affected up to 5.222 Fixed in — No fix listed CNA
• Checkout with Cash App on WooCommerce Vendortheafricanboss Affected up to 6.0.2 Fixed in — No fix listed CNA
• Display Eventbrite Events VendorFullworks Affected up to 6.1.10 Fixed in — No fix listed CNA
• Secure Gateway for Authorize.net and WooCommerce by Pledged Plugins Vendormohsinoffline Affected up to 6.1.13 Fixed in — No fix listed CNA
• Easy Social Feed – Social Photos Gallery and Post Feed for WordPress Vendorsjaved Affected up to 6.6.5 Fixed in — No fix listed CNA
• WP Shortcodes Plugin — Shortcodes Ultimate Vendorgn_themes Affected up to 7.3.3 Fixed in — No fix listed CNA
• WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan Vendorgowebsmarty Affected up to 7.7.0 Fixed in — No fix listed CNA
• WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto Vendortripetto Affected up to 8.0.7 Fixed in — No fix listed CNA

No fixed version listed by the sources yet.

1. 2026-10-02 Threatist record created from CVE-2024-13362
2. 2026-10-03 Alias added: GHSA-c7cj-88jr-mhx2

• TI-2022-04562 Freemius SDK <= 2.4.2 - Missing Authorization Checks CVSS 3.1MEDIUM 6.3

• CVE-2024-13362 · CVE Program
• CVE-2024-13362 · NVD
• FIRST EPSS
• GHSA-c7cj-88jr-mhx2 · GitHub Advisory Database · CC BY 4.0

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences