Favorites

Vulnerabilities 4Slug favoritesLatest version 2.3.6WordPress.org →

Minimum safe version

2.3.5

Update to 2.3.5 or later to address 3 fixable vulnerabilities

Latest available2.3.6 ✓⚠ 1 vulnerability has no fix
High 7.5 Unfixed
2025-11-06≤ 2.3.6

CVE-2025-60202

CVEWordfence
Low 3.5
2025-03-25< 2.3.5

WordPress Favorites Plugin < 2.3.5 is vulnerable to Cross Site Scripting (XSS)

PatchstackWordfenceCVE