Pricing
Solutions
WordPress security
Instantly fix and mitigate vulnerabilities
Plugin auditing
Paid auditing for WordPress vendors
Managed VDP
Start a security program for your plugins
Bug Bounty
Join the community and earn bounties
Enterprise API
At scale monitoring and vPatching for hosts
Vulnerability database
The latest WordPress security intelligence
Login
Start trial
Newsletter
Stefano Lissa
Developer
9.0.9
Latest version
300,000
Installations
4 days ago
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
11 fixed
5 Mitigation rules
Admin+ Stored XSS via Form vulnerability
< 8.8.5
Jul 9, 2025
Admin+ Stored XSS vulnerability
< 8.7.1
May 5, 2025
Unauthenticated Stored Cross-Site Scripting via np1 vulnerability
<= 8.3.4
Jun 4, 2024
Cross Site Request Forgery (CSRF) vulnerability
<= 8.0.6
Apr 10, 2024
IP Blacklist Bypass vulnerability
<= 8.2.0
Mar 28, 2024
Reflected Cross-Site Scripting vulnerability
<= 7.6.8
Mar 29, 2023
Reflected Cross-Site Scripting (XSS) vulnerability
<= 7.4.4
May 23, 2022
Reflected Cross-Site Scripting (XSS) vulnerability
<= 7.4.4
May 17, 2022
CSV Injection vulnerability
<= 6.5.3
Mar 16, 2021
Authenticated Cross-Site Scripting (XSS) vulnerability
<= 6.8.1
Aug 3, 2020
Authenticated Stored Cross-Site Scripting (XSS) vulnerability
<= 6.7.6
Jul 12, 2020