__construct
Defined in 237 files
Last patched
Overview
__construct in wordpress-plugins/plugins was changed by 121 published CVE fixes between 2018 and 2026, in 241 distinct patches that added or removed 5,163 lines in total.
Defined in 237 files
Last patched
__construct in wordpress-plugins/plugins was changed by 121 published CVE fixes between 2018 and 2026, in 241 distinct patches that added or removed 5,163 lines in total.
The name occurs in 237 files: a4-barcode-generator/trunk/class/Core.php, osm/trunk/osm.php, revisionary/trunk/admin/admin_rvy.php, flynax-bridge/trunk/src/Widgets/FeaturedListings.php, email-subscribers/trunk/lite/admin/class-email-subscribers-admin.php, breadcrumb-navxt/trunk/class.bcn_breadcrumb_trail.php, wp-user-profile-avatar/trunk/wp-user-profile-avatar.php, wordpress-simple-paypal-shopping-cart/trunk/includes/class-wpsc-cart.php, revisionary/trunk/admin/admin-posts_rvy.php, newsletters-lite/trunk/models/subscriber.php, wp-user-avatar/trunk/src/Classes/UsernameEmailRestrictLogin.php, bandsintown/trunk/bandsintown.php, awesome-support/trunk/includes/gas-framework/lib/class-option-color.php, blog2social/trunk/includes/B2S/AutoPost.php, wp-special-textboxes/trunk/stb-class.php, masterstudy-lms-learning-management-system/trunk/_core/settings/lms_wpcfto_helpers.php, metasync/trunk/public/class-metasync-rest-api.php, s2member/trunk/src/includes/menu-pages/gen-ops.inc.php, popup-maker/trunk/classes/Extension/Updater.php, wp-user-avatar/trunk/src/Admin/SettingsPages/EmailSettings/EmailSettingsPage.php, password-protect-page/trunk/includes/addons/beaver-builder/modules/ppw-individual-page/class-ppw-module.php, metasync/trunk/admin/class-metasync-otto-debug.php, simple-download-monitor/trunk/main.php, bit-assist/trunk/backend/app/HTTP/Controllers/ApiWidgetController.php, responsive-lightbox/trunk/responsive-lightbox.php, wp-import-export-lite/trunk/includes/classes/import/class-wpie-import-actions.php, reviews-feed/trunk/class/Common/Builder/SBR_Feed_Builder.php, funnel-builder/trunk/admin/class-wffn-admin.php, revisionary/trunk/admin/class-list-table_rvy.php, artibot/trunk/artibot.php, form-maker/trunk/admin/views/Submissions_fm.php, a4-barcode-generator/trunk/class/Makers/A4BarcodesMaker.php, reviews-feed/trunk/class/Common/Feed.php, woo-lucky-wheel/trunk/includes/data.php, motopress-hotel-booking-lite/trunk/includes/core/data/room-type-availability-data.php, awesome-support/trunk/includes/gas-framework/lib/class-option-ajax-button.php, metasync/trunk/media-optimization/class-image-converter.php, qode-wishlist-for-woocommerce/trunk/class-qode-wishlist-for-woocommerce.php, wp-user-avatar/trunk/src/Admin/SettingsPages/ExtensionsSettingsPage.php, listdom/trunk/app/includes/integrations/divi.php, woo-lucky-wheel/trunk/frontend/frontend.php, clover-online-orders/trunk/admin/includes/class-moo-orders-list.php, listdom/trunk/app/includes/activation.php, slicewp/trunk/index.php, unlimited-elements-for-elementor/trunk/provider/gutenberg_integrate.class.php, woocommerce-products-filter/trunk/ext/front_builder/index.php, process-steps-template-designer/trunk/cool-process.php, latex2html/trunk/inc/settings.php, breadcrumb-navxt/trunk/class.bcn_network_admin.php, listdom/trunk/app/includes/hooks.php, funnel-builder/tags/3.4.7/modules/checkouts/includes/class-wfacp-template.php, listdom/trunk/app/includes/ix/mapping.php, breadcrumb-navxt/trunk/class.bcn_admin.php, events-manager/trunk/classes/em-taxonomy-terms.php, listdom/trunk/app/includes/api/controllers/images.php, woo-order-notes/trunk/wpc-order-notes.php, wp-user-avatar/trunk/src/Classes/FormPreviewHandler.php, zephyr-project-manager/trunk/includes/Base/AjaxHandler.php, breadcrumb-navxt/trunk/class.bcn_widget.php, contact-form-with-a-meeting-scheduler-by-vcita/trunk/core/sidebar_widget.php, woocommerce-products-filter/trunk/ext/query_save/index.php, review-for-discount/trunk/includes/class-xswcrd-review-discounts.php, contact-form-with-a-meeting-scheduler-by-vcita/trunk/Livesite.php, post-smtp/trunk/Postman/Postman-Mail/Zend-1.12.10/Exception.php, pojo-accessibility/trunk/modules/core/components/svg.php, widget-options/trunk/includes/pagebuilders/beaver/beaver.php, beaver-builder-lite-version/trunk/extensions/fl-builder-seo-plugins/classes/class-fl-builder-seo-plugins.php, awesome-support/trunk/includes/gas-framework/lib/class-customizer.php, listdom/trunk/app/includes/ptypes.php, hive-support/trunk/backend/class-hive-support-chat-ajax.php, woocommerce-jetpack/trunk/includes/class-wcj-products-per-page.php, breadcrumb-navxt/trunk/includes/adminKit/class-mtekk_adminkit_message.php, listdom/trunk/app/includes/api/resources/attribute.php, timeline-designer/trunk/admin/class-wp-timeline-lite-admin.php, awesome-support/trunk/includes/gas-framework/lib/class-option-font.php, listdom/trunk/app/includes/flash.php, bp-better-messages/trunk/addons/mycred.php, listdom/trunk/app/includes/dashboard/terms.php, listdom/trunk/app/includes/lifecycle.php, listdom/trunk/app/includes/api/controllers/profile.php, login-with-yourmembership/trunk/moym-settings.php, listdom/trunk/app/includes/i18n.php, bizcalendar-web/trunk/recaptcha/recaptchalib.php, divelogs-widget/trunk/divelogs-widget.php, listdom/trunk/app/includes/query.php, strabl-a-checkout-solution/trunk/src/Config/MerchantSettings.php, gsheetconnector-gravity-forms/trunk/gsheetconnector-gravityforms.php, rest-api-to-miniprogram/trunk/rest-api-to-miniprogram.php, listdom/trunk/app/includes/api/routes.php, listdom/trunk/app/includes/folder.php, listdom/trunk/app/includes/color.php, listdom/trunk/app/includes/menus.php, listdom/trunk/app/includes/rewriterules.php, form-vibes/trunk/inc/modules/submissions/module.php, listdom/trunk/app/includes/api/controllers/password.php, blog2social/trunk/includes/B2S/QuickPost.php, aryo-activity-log/trunk/hooks/class-aal-hook-comments.php, listdom/trunk/app/includes/api/controllers/taxonomies.php, ameliabooking/trunk/src/Application/Services/WaitingList/WaitingListService.php, all-in-one-seo-pack/trunk/app/Common/SearchStatistics/SearchStatistics.php, listdom/trunk/app/includes/api/controllers/i18n.php, post-grid/trunk/post-grid.php, listdom/trunk/app/includes/notifications/email/prepare.php, listdom/trunk/app/includes/notifications.php, listdom/trunk/app/includes/notifications/email/sender.php, taxonomy-chain-menu/trunk/index.php, listdom/trunk/app/includes/db.php, listdom/trunk/app/includes/fields.php, aryo-activity-log/trunk/hooks/class-aal-hook-attachment.php, post-type-x/trunk/core/includes/ic_session.php, woo-multi-currency/trunk/plugins/advanced_product_fields_for_woocommerce_pro.php, funnel-builder/trunk/admin/class-bwf-admin-settings.php, listdom/trunk/app/includes/api/validation.php, listdom/trunk/app/includes/api/resources/attachment.php, so-widgets-bundle/trunk/compat/elementor/elementor.php, arena-liveblog-and-chat-tool/trunk/albfre.php, login-with-yourmembership/trunk/includes/classes/class-moym-login-widget.php, listdom/trunk/app/includes/options.php, listdom/trunk/app/includes/api/resources/addon.php, custom-registration-form-builder-with-submission-manager/trunk/includes/class_rm_autoloader.php, listdom/trunk/app/includes/integrations.php, library-bookshelves/trunk/class-library-bookshelves.php, listdom/trunk/app/includes/api/controllers/push.php, listdom/trunk/app/includes/kses.php, listdom/trunk/app/includes/api/controllers/searchmodules.php, minimal-coming-soon-maintenance-mode/trunk/framework/admin/include/classes/class-mailchimp.php, revisionary/trunk/includes/CoreAdmin.php, infility-global/trunk/infility_global.php, 3d-flipbook-dflip-lite/trunk/inc/post-type.php, anchor-episodes-index/trunk/includes/main.php, funnel-builder/tags/3.4.7/modules/checkouts/builder/customizer/templates/embed_forms_1/template.php, listdom/trunk/app/includes/api/resources/taxonomy.php, advanced-custom-fields-table-field/trunk/class-jh-acf-field-table.php, listdom/trunk/app/includes/api/controllers/register.php, cubewp-framework/trunk/cube/classes/shortcodes/class-cubewp-shortcode-posts.php, additional-product-fields-for-woocommerce/trunk/core/Loader.php, awesome-support/trunk/includes/gas-framework/lib/class-option-number.php, listdom/trunk/app/includes/compatibility.php, listdom/trunk/app/includes/notifications/dispatcher.php, ameliabooking/trunk/src/Application/Services/Payment/PaymentApplicationService.php, unlimited-elements-for-elementor/trunk/inc_php/layouts/unitecreator_layout.class.php, woocommerce-jetpack/trunk/includes/shortcodes/class-wcj-orders-shortcodes.php, ultimate-addons-for-contact-form-7/trunk/addons/database/database.php, listdom/trunk/app/includes/api/resources/searchmodule.php, listdom/trunk/app/includes/ads.php, strabl-a-checkout-solution/trunk/src/Plugin.php, woo-cart-all-in-one/trunk/includes/frontend/sidebar-cart-icon.php, form-vibes/trunk/inc/classes/export.php, woocommerce-jetpack/trunk/includes/core/class-wcj-admin.php, latex2html/trunk/inc/options.php, listdom/trunk/app/includes/api/resource.php, breadcrumb-navxt/trunk/class.bcn_breadcrumb.php, post-grid/trunk/includes/duplicate-post.php, acf-extended/trunk/includes/hooks.php, awesome-support/trunk/includes/gas-framework/lib/class-option-multicheck.php, listdom/trunk/app/includes/api/resources/fields.php, woocommerce-currency-switcher/trunk/classes/Rates/Aggregators/RateProvider.php, post-type-x/trunk/core/includes/blocks/index.php, one-click-order-reorder/trunk/includes/class-basket-order.php, booking-calendar/trunk/admin/models/Reservations.php, auto-post-to-social-media-wp-to-social-champ/trunk/includes/class-wp-socialchamp.php, bne-gallery-extended/trunk/bne-gallery-extended.php, listdom/trunk/app/includes/main.php, breadcrumb-navxt/trunk/includes/adminKit/class-mtekk_adminkit.php, advanced-members/trunk/core/class-fields.php, wp-fastest-cache/trunk/wpFastestCache.php, acf-extended/trunk/includes/modules/module.php, awesome-support/trunk/includes/gas-framework/lib/class-option-date.php, awesome-support/trunk/includes/gas-framework/lib/class-option-select.php, woocommerce-jetpack/trunk/includes/class-wcj-pdf-invoicing.php, listdom/trunk/app/includes/api/controllers/map.php, listdom/trunk/app/includes/api/controllers/logout.php, listdom/trunk/app/includes/ix/listdom.php, wp-event-manager/trunk/admin/wp-event-manager-cpt.php, awesome-support/trunk/includes/gas-framework/lib/class-meta-box.php, listdom/trunk/app/includes/integrations/vc.php, listdom/trunk/app/includes/integrations/elementor.php, rw-elephant-rental-inventory/trunk/rw-elephant-rental-inventory.php, listdom/trunk/app/includes/dashboard.php, listdom/trunk/app/includes/capability.php, listdom/trunk/app/includes/author.php, clover-online-orders/trunk/admin/includes/class-moo-products-list.php, bizcalendar-web/trunk/payment/MobilPay/composer-master/src/Request/PaymentAbstract.php, wpvivid-backuprestore/trunk/includes/customclass/class-wpvivid-google-drive.php, wp-event-manager/trunk/includes/wp-event-manager-post-types.php, footnotes-made-easy/trunk/footnotes-made-easy.php, fonto/trunk/includes/class-fonto.php, listdom/trunk/app/includes/api/resources/image.php, listdom/trunk/app/includes/api/resources/listing.php, layers/trunk/layers.php, listdom/trunk/app/includes/api/controllers/listings.php, listdom/trunk/app/includes/api/resources/availability.php, woocommerce-jetpack/trunk/includes/class-wcj-purchase-data.php, revisionary/trunk/front_rvy.php, listdom/trunk/app/includes/api/resources/embed.php, wp-security-audit-log/trunk/classes/Views/SetupWizard.php, listdom/trunk/app/includes/api/controllers/addons.php, listdom/trunk/app/includes/file.php, pie-forms-for-wp/trunk/includes/admin/builder/settings.php, magical-addons-for-elementor/trunk/includes/extra/custom-attribute.php, pixelyoursite/trunk/includes/class-pys.php, elegance-menu/trunk/includes/class-elegance-menu.php, wp-ultimate-csv-importer/tags/6.4.2/MediaHandling.php, swift-performance-lite/trunk/performance.php, listdom/trunk/app/includes/form.php, clover-online-orders/trunk/admin/includes/class-wp-list-table-moo.php, listdom/trunk/app/includes/personalize.php, motopress-hotel-booking-lite/trunk/includes/crons/cron-manager.php, listdom/trunk/app/includes/endpoints.php, responsive-lightbox/trunk/includes/class-folders.php, unlimited-elements-for-elementor/trunk/provider/core/unlimited_elements/provider_core_admin.class.php, bp-better-messages/trunk/addons/gamipress.php, ultimate-addons-for-contact-form-7/trunk/ultimate-addons-for-contact-form-7.php, so-widgets-bundle/trunk/base/inc/fields/posts.class.php, awesome-support/trunk/includes/file-uploader/class-file-uploader.php, listdom/trunk/app/includes/ajax.php, wpshop/trunk/includes/librairies/display/widgets/products.widget.php, listdom/trunk/app/includes/api/controllers/login.php, listdom/trunk/app/includes/endpoints/raw.php, listdom/trunk/app/includes/api/resources/user.php, pgall-for-woocommerce/trunk/includes/gateways/kcp/class-wc-gateway-kcp-escrow-bank.php, latex2html/trunk/latex2html.php, wp-retina-2x/trunk/core.php, listdom/trunk/app/includes/search.php, listdom/trunk/app/includes/api/controllers/search.php, acf-extended/trunk/includes/fields-settings/bidirectional.php, advanced-members/trunk/core/class-blocks.php, aruba-hispeed-cache/trunk/src/APC/object-cache.php, listdom/trunk/app/includes/map/provider.php, blog2social/trunk/includes/B2S/Api/Network/Pinterest.php, bp-better-messages/trunk/addons/files.php, listdom/trunk/app/includes/integrations/kc.php, listdom/trunk/app/includes/lite.php, delucks-seo/trunk/index.php, bp-better-messages/trunk/addons/buddyboss.php, awesome-support/trunk/includes/gas-framework/lib/class-option-sortable.php, listdom/trunk/app/includes/payload.php.
wordpress-plugins/plugins has 851 CVEs with a located fix in total, so 14% of them touched this function.
Every published CVE whose fix changed __construct, newest first, with the lines each fix touched.
CVE-2026-103897 · responsive-lightbox/trunk/responsive-lightbox.php · lines 339–341 · +3 −2
CVE-2026-92174 · so-widgets-bundle/trunk/base/inc/fields/posts.class.php · lines 39–40 · +0 −6
CVE-2026-92174 · so-widgets-bundle/trunk/compat/elementor/elementor.php · line 24 · +0 −3
CVE-2026-4123 · rw-elephant-rental-inventory/trunk/rw-elephant-rental-inventory.php · lines 86–89 · +4 −0
CVE-2026-15946 · metasync/trunk/admin/class-metasync-otto-debug.php · line 40 · +0 −3
CVE-2026-15946 · metasync/trunk/media-optimization/class-image-converter.php · line 135 · +1 −1
CVE-2026-15946 · metasync/trunk/public/class-metasync-rest-api.php · line 76 · +0 −2
CVE-2026-15947 · metasync/trunk/admin/class-metasync-otto-debug.php · line 40 · +0 −3
CVE-2026-15947 · metasync/trunk/media-optimization/class-image-converter.php · line 135 · +1 −1
CVE-2026-15947 · metasync/trunk/public/class-metasync-rest-api.php · line 76 · +0 −2
CVE-2026-16582 · ameliabooking/trunk/src/Application/Services/Payment/PaymentApplicationService.php · line 110 · +0 −1
CVE-2026-90650 · motopress-hotel-booking-lite/trunk/includes/core/data/room-type-availability-data.php · lines 43–72 · +13 −1 in 2 hunks
CVE-2026-90650 · motopress-hotel-booking-lite/trunk/includes/crons/cron-manager.php · lines 42–43 · +2 −0
CVE-2026-10148 · ameliabooking/trunk/src/Application/Services/WaitingList/WaitingListService.php · line 48 · +0 −2
CVE-2026-15889 · aruba-hispeed-cache/trunk/src/APC/object-cache.php · line 328 · +1 −1
CVE-2026-76931 · zephyr-project-manager/trunk/includes/Base/AjaxHandler.php · line 152 · +1 −0
CVE-2025-11729 · password-protect-page/trunk/includes/addons/beaver-builder/modules/ppw-individual-page/class-ppw-module.php · lines 16–31 · +7 −4 in 2 hunks
CVE-2026-3640 · strabl-a-checkout-solution/trunk/src/Config/MerchantSettings.php · lines 5–20 · +6 −3
CVE-2026-3640 · strabl-a-checkout-solution/trunk/src/Plugin.php · lines 37–38 · +1 −1
CVE-2026-4094 · woocommerce-currency-switcher/trunk/classes/Rates/Aggregators/RateProvider.php · lines 11–74 · +62 −44
CVE-2026-2052 · widget-options/trunk/includes/pagebuilders/beaver/beaver.php · line 47 · +1 −0
CVE-2026-3243 · advanced-members/trunk/core/class-blocks.php · line 32 · +1 −0
CVE-2026-3243 · advanced-members/trunk/core/class-fields.php · line 51 · +1 −0
CVE-2026-2479 · responsive-lightbox/trunk/includes/class-folders.php · lines 71–72 · +2 −0
CVE-2026-2479 · responsive-lightbox/trunk/responsive-lightbox.php · lines 383–385 · +3 −3
CVE-2025-13842 · breadcrumb-navxt/trunk/class.bcn_admin.php · line 63 · +1 −1
CVE-2025-13842 · breadcrumb-navxt/trunk/class.bcn_breadcrumb.php · line 73 · +1 −1
CVE-2025-13842 · breadcrumb-navxt/trunk/class.bcn_breadcrumb_trail.php · lines 33–145 · +6 −5 in 4 hunks
CVE-2025-13842 · breadcrumb-navxt/trunk/class.bcn_network_admin.php · line 40 · +1 −1
CVE-2025-13842 · breadcrumb-navxt/trunk/class.bcn_widget.php · line 30 · +0 −5
CVE-2025-13842 · breadcrumb-navxt/trunk/includes/adminKit/class-mtekk_adminkit_message.php · line 44 · +1 −1
CVE-2025-13842 · breadcrumb-navxt/trunk/includes/adminKit/class-mtekk_adminkit.php · line 105 · +1 −1
CVE-2026-2019 · woo-cart-all-in-one/trunk/includes/frontend/sidebar-cart-icon.php · line 10 · +1 −1
CVE-2025-8615 · cubewp-framework/trunk/cube/classes/shortcodes/class-cubewp-shortcode-posts.php · lines 18–143 · +115 −29
CVE-2025-14846 · auto-post-to-social-media-wp-to-social-champ/trunk/includes/class-wp-socialchamp.php · line 78 · +1 −1
CVE-2025-14070 · review-for-discount/trunk/includes/class-xswcrd-review-discounts.php · lines 69–70 · +2 −2
CVE-2025-12067 · advanced-custom-fields-table-field/trunk/class-jh-acf-field-table.php · line 42 · +1 −1
CVE-2025-14509 · woo-lucky-wheel/trunk/frontend/frontend.php · lines 9–395 · +374 −316
CVE-2025-14509 · woo-lucky-wheel/trunk/includes/data.php · lines 55–97 · +3 −10 in 2 hunks
CVE-2025-12976 · events-manager/trunk/classes/em-taxonomy-terms.php · line 45 · +1 −1
CVE-2025-13962 · divelogs-widget/trunk/divelogs-widget.php · lines 83–233 · +125 −131
CVE-2025-13642 · wp-user-avatar/trunk/src/Classes/FormPreviewHandler.php · lines 14–33 · +19 −1
CVE-2025-12558 · beaver-builder-lite-version/trunk/extensions/fl-builder-seo-plugins/classes/class-fl-builder-seo-plugins.php · line 12 · +1 −0
CVE-2025-13109 · woocommerce-products-filter/trunk/ext/query_save/index.php · lines 19–26 · +3 −3
CVE-2025-13157 · qode-wishlist-for-woocommerce/trunk/class-qode-wishlist-for-woocommerce.php · lines 36–61 · +6 −7 in 2 hunks
CVE-2025-11733 · footnotes-made-easy/trunk/footnotes-made-easy.php · lines 113–115 · +3 −32
CVE-2025-11704 · elegance-menu/trunk/includes/class-elegance-menu.php · line 77 · +1 −1
CVE-2025-10700 · pojo-accessibility/trunk/modules/core/components/svg.php · line 20 · +0 −1
CVE-2025-10648 · login-with-yourmembership/trunk/includes/classes/class-moym-login-widget.php · line 25 · +1 −1
CVE-2025-10648 · login-with-yourmembership/trunk/moym-settings.php · lines 42–44 · +3 −1
CVE-2025-8606 · gsheetconnector-gravity-forms/trunk/gsheetconnector-gravityforms.php · line 90 · +1 −1
CVE-2025-10130 · layers/trunk/layers.php · lines 78–136 · +24 −15
CVE-2025-9219 · post-smtp/trunk/Postman/Postman-Mail/Zend-1.12.10/Exception.php · line 43 · +1 −1
CVE-2024-13342 · woocommerce-jetpack/trunk/includes/class-wcj-pdf-invoicing.php · lines 95–98 · +3 −1
CVE-2024-13342 · woocommerce-jetpack/trunk/includes/class-wcj-products-per-page.php · line 63 · +1 −1
CVE-2024-13342 · woocommerce-jetpack/trunk/includes/class-wcj-purchase-data.php · line 102 · +1 −1
CVE-2024-13342 · woocommerce-jetpack/trunk/includes/core/class-wcj-admin.php · lines 73–74 · +2 −0
CVE-2025-8977 · simple-download-monitor/trunk/main.php · lines 349–358 · +2 −2 in 2 hunks
CVE-2025-5061 · wp-import-export-lite/trunk/includes/classes/import/class-wpie-import-actions.php · lines 21–22 · +2 −2
CVE-2025-6207 · wp-import-export-lite/trunk/includes/classes/import/class-wpie-import-actions.php · lines 21–22 · +2 −2
CVE-2025-8196 · magical-addons-for-elementor/trunk/includes/extra/custom-attribute.php · line 22 · +0 −1
CVE-2015-10135 · wpshop/trunk/includes/librairies/display/widgets/products.widget.php · line 12 · +1 −1
CVE-2025-2799 · wp-event-manager/trunk/admin/wp-event-manager-cpt.php · line 59 · +1 −0
CVE-2025-2799 · wp-event-manager/trunk/includes/wp-event-manager-post-types.php · line 81 · +0 −1
CVE-2025-6220 · ultimate-addons-for-contact-form-7/trunk/addons/database/database.php · lines 51–52 · +2 −0
CVE-2025-6220 · ultimate-addons-for-contact-form-7/trunk/ultimate-addons-for-contact-form-7.php · line 33 · +1 −1
CVE-2025-5018 · hive-support/trunk/backend/class-hive-support-chat-ajax.php · line 43 · +0 −6
CVE-2025-2892 · all-in-one-seo-pack/trunk/app/Common/SearchStatistics/SearchStatistics.php · line 80 · +1 −0
CVE-2025-3107 · newsletters-lite/trunk/models/subscriber.php · lines 112–155 · +6 −6 in 3 hunks
CVE-2025-3748 · taxonomy-chain-menu/trunk/index.php · lines 46–52 · +2 −2
CVE-2025-4177 · flynax-bridge/trunk/src/Widgets/FeaturedListings.php · lines 49–59 · +2 −2 in 2 hunks
CVE-2025-4179 · flynax-bridge/trunk/src/Widgets/FeaturedListings.php · lines 49–59 · +2 −2 in 2 hunks
CVE-2025-3890 · wordpress-simple-paypal-shopping-cart/trunk/includes/class-wpsc-cart.php · lines 31–111 · +81 −68
CVE-2025-3874 · wordpress-simple-paypal-shopping-cart/trunk/includes/class-wpsc-cart.php · lines 31–111 · +81 −68
CVE-2025-3889 · wordpress-simple-paypal-shopping-cart/trunk/includes/class-wpsc-cart.php · lines 31–111 · +81 −68
CVE-2024-13567 · awesome-support/trunk/includes/file-uploader/class-file-uploader.php · line 91 · +1 −1
CVE-2024-13567 · awesome-support/trunk/includes/gas-framework/lib/class-customizer.php · lines 48–59 · +4 −4
CVE-2024-13567 · awesome-support/trunk/includes/gas-framework/lib/class-meta-box.php · line 37 · +1 −1
CVE-2024-13567 · awesome-support/trunk/includes/gas-framework/lib/class-option-ajax-button.php · lines 95–108 · +3 −3 in 2 hunks
CVE-2024-13567 · awesome-support/trunk/includes/gas-framework/lib/class-option-color.php · lines 24–121 · +3 −3 in 2 hunks
CVE-2024-13567 · awesome-support/trunk/includes/gas-framework/lib/class-option-date.php · lines 35–36 · +2 −2
CVE-2024-13567 · awesome-support/trunk/includes/gas-framework/lib/class-option-font.php · lines 88–96 · +6 −6
CVE-2024-13567 · awesome-support/trunk/includes/gas-framework/lib/class-option-multicheck.php · lines 23–24 · +2 −2
CVE-2024-13567 · awesome-support/trunk/includes/gas-framework/lib/class-option-number.php · lines 39–40 · +2 −2
CVE-2024-13567 · awesome-support/trunk/includes/gas-framework/lib/class-option-select.php · lines 30–34 · +5 −5
CVE-2024-13567 · awesome-support/trunk/includes/gas-framework/lib/class-option-sortable.php · lines 38–39 · +2 −2
CVE-2025-1405 · post-type-x/trunk/core/includes/blocks/index.php · lines 32–33 · +2 −2
CVE-2025-1405 · post-type-x/trunk/core/includes/ic_session.php · line 101 · +1 −1
CVE-2024-13802 · bandsintown/trunk/bandsintown.php · lines 8–333 · +270 −220 in 2 hunks
CVE-2024-13464 · library-bookshelves/trunk/class-library-bookshelves.php · line 29 · +1 −1
CVE-2025-0822 · bit-assist/trunk/backend/app/HTTP/Controllers/ApiWidgetController.php · line 21 · +1 −1
CVE-2024-13791 · bit-assist/trunk/backend/app/HTTP/Controllers/ApiWidgetController.php · line 21 · +1 −1
CVE-2024-13487 · woo-multi-currency/trunk/plugins/advanced_product_fields_for_woocommerce_pro.php · lines 11–15 · +5 −1
CVE-2024-13612 · bp-better-messages/trunk/addons/buddyboss.php · line 70 · +1 −0
CVE-2024-13612 · bp-better-messages/trunk/addons/files.php · lines 37–38 · +2 −0
CVE-2024-13612 · bp-better-messages/trunk/addons/gamipress.php · line 27 · +1 −1
CVE-2024-13612 · bp-better-messages/trunk/addons/mycred.php · line 27 · +1 −1
CVE-2024-10789 · wp-user-profile-avatar/trunk/wp-user-profile-avatar.php · lines 58–96 · +4 −4 in 3 hunks
CVE-2024-12077 · booking-calendar/trunk/admin/models/Reservations.php · lines 3–513 · +486 −499
CVE-2024-12290 · infility-global/trunk/infility_global.php · line 116 · +1 −1
CVE-2024-11437 · timeline-designer/trunk/admin/class-wp-timeline-lite-admin.php · line 71 · +1 −0
CVE-2024-11688 · latex2html/trunk/inc/options.php · lines 118–128 · +9 −9
CVE-2024-11688 · latex2html/trunk/inc/settings.php · lines 72–145 · +52 −22
CVE-2024-11688 · latex2html/trunk/latex2html.php · line 146 · +1 −1
CVE-2024-8326 · s2member/trunk/src/includes/menu-pages/gen-ops.inc.php · lines 436–539 · +2 −2 in 2 hunks
CVE-2024-11384 · arena-liveblog-and-chat-tool/trunk/albfre.php · line 185 · +1 −0
CVE-2024-12004 · woo-order-notes/trunk/wpc-order-notes.php · line 49 · +1 −2
CVE-2024-11436 · pie-forms-for-wp/trunk/includes/admin/builder/settings.php · line 12 · +1 −1
CVE-2024-10516 · swift-performance-lite/trunk/performance.php · line 101 · +1 −1
CVE-2024-10056 · contact-form-with-a-meeting-scheduler-by-vcita/trunk/core/sidebar_widget.php · lines 4–135 · +101 −96
CVE-2024-10056 · contact-form-with-a-meeting-scheduler-by-vcita/trunk/Livesite.php · lines 29–86 · +56 −48
CVE-2024-11854 · listdom/trunk/app/includes/activation.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/ads.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/ajax.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/api/controllers/addons.php · line 13 · +1 −9
CVE-2024-11854 · listdom/trunk/app/includes/api/controllers/i18n.php · line 13 · +1 −9
CVE-2024-11854 · listdom/trunk/app/includes/api/controllers/images.php · line 13 · +1 −9
CVE-2024-11854 · listdom/trunk/app/includes/api/controllers/listings.php · line 13 · +1 −9
CVE-2024-11854 · listdom/trunk/app/includes/api/controllers/login.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/api/controllers/logout.php · line 13 · +1 −9
CVE-2024-11854 · listdom/trunk/app/includes/api/controllers/map.php · line 15 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/api/controllers/password.php · line 13 · +1 −9
CVE-2024-11854 · listdom/trunk/app/includes/api/controllers/profile.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/api/controllers/push.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/api/controllers/register.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/api/controllers/searchmodules.php · line 13 · +1 −9
CVE-2024-11854 · listdom/trunk/app/includes/api/controllers/search.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/api/controllers/taxonomies.php · line 13 · +1 −9
CVE-2024-11854 · listdom/trunk/app/includes/api/resource.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/api/resources/addon.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/api/resources/attachment.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/api/resources/attribute.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/api/resources/availability.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/api/resources/embed.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/api/resources/fields.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/api/resources/image.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/api/resources/listing.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/api/resources/searchmodule.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/api/resources/taxonomy.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/api/resources/user.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/api/routes.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/api/validation.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/author.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/capability.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/color.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/compatibility.php · line 18 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/dashboard.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/dashboard/terms.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/db.php · line 10 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/endpoints.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/endpoints/raw.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/fields.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/file.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/flash.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/folder.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/form.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/hooks.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/i18n.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/integrations/divi.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/integrations/elementor.php · line 15 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/integrations/kc.php · lines 13–19 · +1 −10
CVE-2024-11854 · listdom/trunk/app/includes/integrations.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/integrations/vc.php · lines 13–19 · +1 −10
CVE-2024-11854 · listdom/trunk/app/includes/ix/listdom.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/ix/mapping.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/kses.php · line 81 · +0 −5
CVE-2024-11854 · listdom/trunk/app/includes/lifecycle.php · line 15 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/lite.php · lines 13–27 · +3 −32
CVE-2024-11854 · listdom/trunk/app/includes/main.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/map/provider.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/menus.php · line 19 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/notifications/dispatcher.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/notifications/email/prepare.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/notifications/email/sender.php · line 20 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/notifications.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/options.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/payload.php · line 14 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/personalize.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/ptypes.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/query.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/rewriterules.php · line 13 · +0 −8
CVE-2024-11854 · listdom/trunk/app/includes/search.php · line 13 · +0 −8
CVE-2024-11119 · bne-gallery-extended/trunk/bne-gallery-extended.php · line 57 · +1 −1
CVE-2024-9170 · woocommerce-jetpack/trunk/includes/shortcodes/class-wcj-orders-shortcodes.php · line 116 · +1 −1
CVE-2024-11228 · pgall-for-woocommerce/trunk/includes/gateways/kcp/class-wc-gateway-kcp-escrow-bank.php · line 18 · +0 −2
CVE-2024-9214 · additional-product-fields-for-woocommerce/trunk/core/Loader.php · line 49 · +1 −1
CVE-2024-8717 · 3d-flipbook-dflip-lite/trunk/inc/post-type.php · lines 90–98 · +5 −3
CVE-2024-10189 · anchor-episodes-index/trunk/includes/main.php · line 31 · +0 −1
CVE-2024-8920 · fonto/trunk/includes/class-fonto.php · lines 144–146 · +3 −0
CVE-2021-4450 · post-grid/trunk/includes/duplicate-post.php · line 17 · +1 −0
CVE-2021-4450 · post-grid/trunk/post-grid.php · line 24 · +1 −1
CVE-2024-9895 · clover-online-orders/trunk/admin/includes/class-moo-orders-list.php · lines 12–13 · +2 −2
CVE-2024-9895 · clover-online-orders/trunk/admin/includes/class-moo-products-list.php · lines 26–27 · +2 −2
CVE-2024-9895 · clover-online-orders/trunk/admin/includes/class-wp-list-table-moo.php · lines 142–143 · +2 −2
CVE-2024-9436 · revisionary/trunk/admin/admin-posts_rvy.php · lines 7–39 · +7 −5 in 3 hunks
CVE-2024-9436 · revisionary/trunk/admin/admin_rvy.php · lines 58–141 · +16 −6 in 4 hunks
CVE-2024-9436 · revisionary/trunk/admin/class-list-table_rvy.php · lines 37–54 · +4 −1 in 2 hunks
CVE-2024-9436 · revisionary/trunk/front_rvy.php · line 31 · +1 −1
CVE-2024-9436 · revisionary/trunk/includes/CoreAdmin.php · line 9 · +1 −1
CVE-2024-8254 · email-subscribers/trunk/lite/admin/class-email-subscribers-admin.php · lines 68–98 · +0 −7 in 2 hunks
CVE-2024-8771 · email-subscribers/trunk/lite/admin/class-email-subscribers-admin.php · lines 68–98 · +0 −7 in 2 hunks
CVE-2024-8633 · form-maker/trunk/admin/views/Submissions_fm.php · lines 17–39 · +0 −2 in 2 hunks
CVE-2024-8484 · rest-api-to-miniprogram/trunk/rest-api-to-miniprogram.php · lines 82–84 · +3 −0
CVE-2024-8481 · wp-special-textboxes/trunk/stb-class.php · lines 25–35 · +1 −3 in 2 hunks
CVE-2024-8714 · slicewp/trunk/index.php · line 106 · +1 −1
CVE-2024-5309 · form-vibes/trunk/inc/classes/export.php · line 23 · +1 −5
CVE-2024-5309 · form-vibes/trunk/inc/modules/submissions/module.php · line 49 · +0 −1
CVE-2024-7870 · pixelyoursite/trunk/includes/class-pys.php · lines 101–153 · +47 −18
CVE-2024-8199 · reviews-feed/trunk/class/Common/Builder/SBR_Feed_Builder.php · lines 53–58 · +6 −1
CVE-2024-8199 · reviews-feed/trunk/class/Common/Feed.php · lines 65–67 · +1 −5
CVE-2024-8200 · reviews-feed/trunk/class/Common/Builder/SBR_Feed_Builder.php · lines 53–58 · +6 −1
CVE-2024-8200 · reviews-feed/trunk/class/Common/Feed.php · lines 65–67 · +1 −5
CVE-2024-7054 · popup-maker/trunk/classes/Extension/Updater.php · lines 103–122 · +1 −2 in 2 hunks
CVE-2024-6836 · funnel-builder/tags/3.4.7/modules/checkouts/builder/customizer/templates/embed_forms_1/template.php · lines 25–26 · +2 −2
CVE-2024-6836 · funnel-builder/tags/3.4.7/modules/checkouts/includes/class-wfacp-template.php · lines 93–97 · +3 −1
CVE-2024-6836 · funnel-builder/trunk/admin/class-wffn-admin.php · line 117 · +1 −1
CVE-2024-3604 · osm/trunk/osm.php · lines 293–302 · +2 −2 in 2 hunks
CVE-2024-3603 · osm/trunk/osm.php · lines 293–302 · +2 −2 in 2 hunks
CVE-2024-5641 · one-click-order-reorder/trunk/includes/class-basket-order.php · lines 24–30 · +7 −7
CVE-2024-5192 · funnel-builder/trunk/admin/class-bwf-admin-settings.php · lines 25–38 · +14 −0
CVE-2024-5192 · funnel-builder/trunk/admin/class-wffn-admin.php · lines 115–117 · +3 −0
CVE-2024-5087 · minimal-coming-soon-maintenance-mode/trunk/framework/admin/include/classes/class-mailchimp.php · line 35 · +1 −1
CVE-2024-5329 · unlimited-elements-for-elementor/trunk/inc_php/layouts/unitecreator_layout.class.php · line 34 · +0 −1
CVE-2024-5329 · unlimited-elements-for-elementor/trunk/provider/core/unlimited_elements/provider_core_admin.class.php · line 23 · +1 −1
CVE-2024-5329 · unlimited-elements-for-elementor/trunk/provider/gutenberg_integrate.class.php · line 22 · +0 −1
CVE-2024-5039 · woocommerce-products-filter/trunk/ext/front_builder/index.php · lines 31–33 · +3 −0
CVE-2024-1679 · a4-barcode-generator/trunk/class/Core.php · lines 75–144 · +9 −5 in 4 hunks
CVE-2024-1679 · a4-barcode-generator/trunk/class/Makers/A4BarcodesMaker.php · lines 60–127 · +68 −0
CVE-2024-1677 · a4-barcode-generator/trunk/class/Core.php · lines 75–144 · +9 −5 in 4 hunks
CVE-2024-1677 · a4-barcode-generator/trunk/class/Makers/A4BarcodesMaker.php · lines 60–127 · +68 −0
CVE-2024-3942 · masterstudy-lms-learning-management-system/trunk/_core/settings/lms_wpcfto_helpers.php · lines 7–27 · +2 −2 in 2 hunks
CVE-2024-1780 · bizcalendar-web/trunk/payment/MobilPay/composer-master/src/Request/PaymentAbstract.php · lines 154–158 · +5 −5
CVE-2024-1780 · bizcalendar-web/trunk/recaptcha/recaptchalib.php · line 59 · +1 −1
CVE-2024-0447 · artibot/trunk/artibot.php · line 33 · +0 −2
CVE-2024-0449 · artibot/trunk/artibot.php · line 33 · +0 −2
CVE-2023-5576 · wpvivid-backuprestore/trunk/includes/customclass/class-wpvivid-google-drive.php · line 58 · +1 −1
CVE-2019-25146 · delucks-seo/trunk/index.php · lines 78–83 · +6 −3
CVE-2020-36716 · wp-security-audit-log/trunk/classes/Views/SetupWizard.php · lines 67–79 · +5 −2
CVE-2021-4349 · process-steps-template-designer/trunk/cool-process.php · lines 45–66 · +19 −17
CVE-2022-0420 · custom-registration-form-builder-with-submission-manager/trunk/includes/class_rm_autoloader.php · line 48 · +1 −1
CVE-2022-0360 · wp-ultimate-csv-importer/tags/6.4.2/MediaHandling.php · lines 19–20 · +2 −4
CVE-2021-24865 · acf-extended/trunk/includes/fields-settings/bidirectional.php · lines 16–26 · +6 −6
CVE-2021-24865 · acf-extended/trunk/includes/hooks.php · line 22 · +1 −1
CVE-2021-24865 · acf-extended/trunk/includes/modules/module.php · line 27 · +1 −2
CVE-2021-24955 · wp-user-avatar/trunk/src/Admin/SettingsPages/EmailSettings/EmailSettingsPage.php · lines 46–48 · +3 −2
CVE-2021-24955 · wp-user-avatar/trunk/src/Admin/SettingsPages/ExtensionsSettingsPage.php · lines 26–28 · +3 −1
CVE-2021-24955 · wp-user-avatar/trunk/src/Classes/UsernameEmailRestrictLogin.php · line 12 · +1 −1
CVE-2021-24954 · wp-user-avatar/trunk/src/Admin/SettingsPages/EmailSettings/EmailSettingsPage.php · lines 46–48 · +3 −2
CVE-2021-24954 · wp-user-avatar/trunk/src/Admin/SettingsPages/ExtensionsSettingsPage.php · lines 26–28 · +3 −1
CVE-2021-24954 · wp-user-avatar/trunk/src/Classes/UsernameEmailRestrictLogin.php · line 12 · +1 −1
CVE-2019-17550 · blog2social/trunk/includes/B2S/Api/Network/Pinterest.php · lines 12–19 · +7 −2
CVE-2019-17550 · blog2social/trunk/includes/B2S/AutoPost.php · lines 19–50 · +9 −16 in 2 hunks
CVE-2019-17550 · blog2social/trunk/includes/B2S/QuickPost.php · line 11 · +1 −1
CVE-2019-13635 · wp-fastest-cache/trunk/wpFastestCache.php · lines 248–251 · +4 −0
CVE-2018-8729 · aryo-activity-log/trunk/hooks/class-aal-hook-attachment.php · line 38 · +0 −1
CVE-2018-8729 · aryo-activity-log/trunk/hooks/class-aal-hook-comments.php · line 74 · +0 −1
CVE-2018-0511 · wp-retina-2x/trunk/core.php · lines 17–31 · +5 −5
Get an alert when the next CVE fix lands in wordpress-plugins/plugins, with the patched functions.
Monitor plugins CVEsFunctions in the same files that CVE fixes also changed.
Functions in wordpress-plugins/plugins changed by the most CVE fixes.
Common questions about CVE fixes to __construct.
Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.
Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.