Aptivada for WP
Aptivada for WP has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Aptivada for WP has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by johska. Aptivada for WP is installed on roughly 90 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.2.11.
CVE-2025-48135Aptivada for WP <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Aptivada for WP
Author
aptivadadev
Login to your Audience Admin account to get your contest/promotion created. Choose one of our professionally designed templates (or start from scratch) and customize it to your liking. Audience’s plugin provides a shortcode to easily place your contest anywhere you like. When your contest or promotion is up and running, Audience will store all entry data: email addresses, photos, videos, votes and more. You can export your data at any time to use for future marketing efforts. Audience also provides in-depth analytics to help you understand where your “audience” is coming from. Don’t have a Audience Admin account yet? Head to Audience.io and request a demo.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C