Bacon Ipsum
Bacon Ipsum has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Bacon Ipsum has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Chu The Anh. Bacon Ipsum is installed on roughly 80 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.9.31.
CVE-2025-49443Bacon Ipsum <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Bacon Ipsum
Author
Chris McCoy
The Bacon Ipsum Plugin lets you Generate Bacon Ipsum Text for your WordPress site, and also lets you Insert Meaty Images into your posts. Bacon Ipsum Generator The Generator is pretty straight forward, Simply goto a post or page, or any other post type and click the Bacon Ipsum Button next to the Add Media Button. Select each option you wish and click Generate Bacon Bacon Mockup You can either use the Generator or Simply Add the [bacon_mockup] shortcode to a post or page Parameters, all are optional [bacon_mockup] width : Width of the Bacon Image. Default is 300 height : Height of the Bacon Image. Default is 200 alt : The alt tag for the image. Default is Yummy Bacon! class : css class for the image (incase you want to style it yourself). Default is baconthumb tag : pick a custom image based on a tag as listed on the Bacon Mockup Tag Page Complete Tag List for Reference bacon bacon-eggs bacon2 beef brisket corned-beef drumstick drumstick2 family-style-bbq flank-steak hamburger pastrami pork-ribs pulled-pork ribeye ribeye2 ribeyes-and-bacon ribs-of-beef salami sausage sausage2 sirloin wing-rib random See the List at Bacon Mockup Bacon Love Widget Show your love for Bacon Ipsum by adding a Widget to a widget area with a cool animated banner.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C