Defined in 45 files
Last patched
init in wordpress-plugins/plugins was changed by 42 published CVE fixes between 2012 and 2026, in 47 distinct patches that added or removed 726 lines in total.
The name occurs in 45 files: countdown-builder/trunk/config/config.php, login-with-ajax/trunk/login-with-ajax.php, woo-thank-you-page-nextmove-lite/trunk/includes/xlwcty-public.php, strabl-a-checkout-solution/trunk/assets/js/strabl_checkout.js, interactive-3d-flipbook-powered-physics-engine/trunk/index.php, ace-post-type-builder/trunk/includes/class-cptb-core.php, bdthemes-element-pack-lite/trunk/admin/assets/js/ep-megamenu-admin.js, mshop-naver-talktalk/trunk/includes/class-msntt-shortcodes.php, easyappointments/trunk/public/class-easyappointments-public.php, envialosimple-email-marketing-y-newsletters-gratis/trunk/assets/js/grapes/plugins/images-gallery.js, masterstudy-lms-learning-management-system/trunk/_core/lms/classes/course.php, awesome-support/trunk/awesome-support.php, wpadverts/trunk/blocks/details/index.php, breadcrumb-navxt/trunk/class.bcn_network_admin.php, elespare/trunk/elespare.php, blog2social/trunk/assets/js/b2s/network.js, woo-orders-tracking/trunk/assets/js/admin-setting.js, acf-extended/trunk/acf-extended.php, academy/trunk/addons/webhooks/database.php, avif-support/trunk/includes/Core/Core.php, wp-user-avatar/trunk/src/Classes/BlockRegistrations.php, woocommerce-products-filter/trunk/ext/turbo_mode/index.php, wp-slimstat/trunk/admin/view/wp-slimstat-reports.php, ameliabooking/trunk/ameliabooking.php, breadcrumb-navxt/trunk/class.bcn_admin.php, revisionary/trunk/revisionary_main.php, wp-nested-pages/trunk/app/NestedPages.php, conditional-menus/trunk/init.php, countdown-builder/trunk/classes/RegisterPostType.php, academy/trunk/addons/quizzes/database.php, string-locator/trunk/includes/class-string-locator.php, wp-gdpr-compliance/trunk/WordPress/Admin/Pages/AbstractPage.php, expand-maker/trunk/config.php, newsletters-lite/trunk/wp-mailinglist.php, academy/trunk/addons/certificates/database.php, doubly/trunk/inc_php/front.class.php, beaver-builder-lite-version/trunk/classes/class-fl-builder-admin-advanced.php, breadcrumb-navxt/trunk/includes/adminKit/class-mtekk_adminkit.php, woocommerce-products-filter/trunk/ext/by_onsales/index.php, file-upload-types/trunk/src/Plugin.php, popup-builder/trunk/com/config/config.php, file-upload-types/trunk/src/Settings.php, so-widgets-bundle/trunk/compat/compat.php, woocommerce-currency-switcher/trunk/classes/woocs.php, slicewp/trunk/includes/admin/affiliates/class-submenu-page-affiliates.php.
wordpress-plugins/plugins has 851 CVEs with a located fix in total, so 5% of them touched this function.
Every published CVE whose fix changed init, newest first, with the lines each fix touched.
CVE-2026-92174 · so-widgets-bundle/trunk/compat/compat.php · lines 57–103 · +47 −0
CVE-2026-14311 · ameliabooking/trunk/ameliabooking.php · lines 384–385 · +2 −0
CVE-2026-3640 · strabl-a-checkout-solution/trunk/assets/js/strabl_checkout.js · lines 852–1403 · +22 −15 in 2 hunks
CVE-2026-4094 · woocommerce-currency-switcher/trunk/classes/woocs.php · lines 779–780 · +2 −2
CVE-2026-0703 · woo-thank-you-page-nextmove-lite/trunk/includes/xlwcty-public.php · lines 168–191 · +8 −6 in 2 hunks
CVE-2026-1314 · interactive-3d-flipbook-powered-physics-engine/trunk/index.php · line 85 · +1 −1
CVE-2026-1032 · conditional-menus/trunk/init.php · lines 184–195 · +5 −1
CVE-2025-13842 · breadcrumb-navxt/trunk/class.bcn_admin.php · line 124 · +1 −1
CVE-2025-13842 · breadcrumb-navxt/trunk/class.bcn_network_admin.php · lines 63–82 · +4 −4
CVE-2025-13842 · breadcrumb-navxt/trunk/includes/adminKit/class-mtekk_adminkit.php · line 262 · +1 −1
CVE-2025-9856 · popup-builder/trunk/com/config/config.php · line 147 · +1 −1
CVE-2025-14476 · doubly/trunk/inc_php/front.class.php · line 355 · +1 −1
CVE-2025-12558 · beaver-builder-lite-version/trunk/classes/class-fl-builder-admin-advanced.php · lines 384–387 · +2 −1
CVE-2025-13405 · ace-post-type-builder/trunk/includes/class-cptb-core.php · lines 21–32 · +1 −4 in 2 hunks
CVE-2025-12099 · academy/trunk/addons/certificates/database.php · line 11 · +1 −1
CVE-2025-12099 · academy/trunk/addons/quizzes/database.php · line 11 · +1 −1
CVE-2025-12099 · academy/trunk/addons/webhooks/database.php · line 12 · +1 −1
CVE-2025-8878 · wp-user-avatar/trunk/src/Classes/BlockRegistrations.php · lines 9–12 · +4 −1
CVE-2025-5289 · interactive-3d-flipbook-powered-physics-engine/trunk/index.php · line 85 · +1 −1
CVE-2025-4857 · newsletters-lite/trunk/wp-mailinglist.php · lines 1598–1644 · +46 −39
CVE-2024-13567 · awesome-support/trunk/awesome-support.php · lines 203–210 · +7 −7
CVE-2024-13639 · expand-maker/trunk/config.php · lines 166–168 · +3 −3
CVE-2024-11229 · mshop-naver-talktalk/trunk/includes/class-msntt-shortcodes.php · line 9 · +1 −1
CVE-2024-10108 · wpadverts/trunk/blocks/details/index.php · line 41 · +1 −1
CVE-2024-10016 · file-upload-types/trunk/src/Plugin.php · lines 49–56 · +3 −1
CVE-2024-10016 · file-upload-types/trunk/src/Settings.php · line 32 · +1 −1
CVE-2024-9436 · revisionary/trunk/revisionary_main.php · line 32 · +1 −0
CVE-2024-9060 · avif-support/trunk/includes/Core/Core.php · lines 127–138 · +12 −0
CVE-2024-8714 · slicewp/trunk/includes/admin/affiliates/class-submenu-page-affiliates.php · line 18 · +1 −1
CVE-2024-6457 · woocommerce-products-filter/trunk/ext/turbo_mode/index.php · line 101 · +1 −0
CVE-2024-5943 · wp-nested-pages/trunk/app/NestedPages.php · line 15 · +1 −1
CVE-2024-4615 · elespare/trunk/elespare.php · line 162 · +0 −2
CVE-2024-2017 · countdown-builder/trunk/config/config.php · lines 81–95 · +4 −4 in 2 hunks
CVE-2024-5039 · woocommerce-products-filter/trunk/ext/by_onsales/index.php · line 46 · +1 −1
CVE-2024-3926 · bdthemes-element-pack-lite/trunk/admin/assets/js/ep-megamenu-admin.js · line 0 · +0 −283
CVE-2024-3942 · masterstudy-lms-learning-management-system/trunk/_core/lms/classes/course.php · line 21 · +1 −1
CVE-2024-2125 · envialosimple-email-marketing-y-newsletters-gratis/trunk/assets/js/grapes/plugins/images-gallery.js · lines 18–32 · +7 −4
CVE-2024-0698 · easyappointments/trunk/public/class-easyappointments-public.php · lines 148–151 · +4 −4
CVE-2022-0493 · string-locator/trunk/includes/class-string-locator.php · line 39 · +0 −15
CVE-2022-0601 · countdown-builder/trunk/classes/RegisterPostType.php · lines 55–56 · +2 −2
CVE-2022-0601 · countdown-builder/trunk/config/config.php · lines 78–93 · +6 −6 in 2 hunks
CVE-2022-0147 · wp-gdpr-compliance/trunk/WordPress/Admin/Pages/AbstractPage.php · line 22 · +0 −1
CVE-2021-25062 · woo-orders-tracking/trunk/assets/js/admin-setting.js · line 22 · +0 −51
CVE-2021-24865 · acf-extended/trunk/acf-extended.php · line 202 · +1 −0
CVE-2019-17550 · blog2social/trunk/assets/js/b2s/network.js · line 271 · +1 −1
CVE-2015-9273 · wp-slimstat/trunk/admin/view/wp-slimstat-reports.php · line 77 · +1 −1
CVE-2012-4283 · login-with-ajax/trunk/login-with-ajax.php · lines 120–149 · +10 −10 in 2 hunks
CVE-2012-2759 · login-with-ajax/trunk/login-with-ajax.php · lines 120–149 · +10 −10 in 2 hunks
Get an alert when the next CVE fix lands in wordpress-plugins/plugins, with the patched functions.
Monitor plugins CVEsFunctions in the same files that CVE fixes also changed.
Functions in wordpress-plugins/plugins changed by the most CVE fixes.
Common questions about CVE fixes to init.
Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.
Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.
