Favorites

WordPress plugin · favorites · WordPress.org ↗

Latest v2.3.8 Last release Aug 21, 2026 Tested up to WP 7.1.1 10,000+ active installs

Critical

High

Known total

Unfixed

Running Favorites on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
HIGH CVSS 7.5	Favorites [favorites] <= 2.3.6 (unfixed) WPVulnerability	<= 2.3.6	unfixed	CVE-2025-60202	Jul 21, 2025
HIGH CVSS 7.2	Favorites [favorites] < 2.3.4 WPVulnerability	< 2.3.4	v2.3.4	CVE-2024-2948	Mar 29, 2024
MEDIUM CVSS 5.4	Favorites [favorites] < 2.3.3 WPVulnerability	< 2.3.3	v2.3.3	CVE-2023-2304	May 30, 2023
LOW CVSS 3.5	Favorites [favorites] < 2.3.5 WPVulnerability · PoC available	< 2.3.5	v2.3.5	CVE-2025-1452	Mar 4, 2025

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.