Lewe ChordPress – ChordPro Text Formatter

Lewe ChordPress – ChordPro Text Formatter has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Lewe ChordPress – ChordPro Text Formatter has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Nguyen Xuan Chien. Lewe ChordPress – ChordPro Text Formatter is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Lewe ChordPress – ChordPro Text Formatter vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2025-52789

Lewe ChordPress <= 3.9.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Lewe ChordPress – ChordPro Text Formatter banner
Latestv4.0.1

Lewe ChordPress – ChordPro Text Formatter

George Lewe

Author

George Lewe

4.5(11)
90/100
Last Updated
2025-10-13 (11mo ago)
Active Installs
100+
Downloads
12,301
Requires WP
5.0+
Requires PHP
0+
Tested up to
WP 6.8.8
Created
2018-12-25 (8y ago)

Lewe ChordPress pretty-prints ChordPro formatted text files on your pages and posts. You can configure output and formatting options. With &#8216;interactive’ mode on, you can transpose the chords up and down and also print the output right from the page. Lewe ChordPress supports SVGuitar for visual chord representation. Your input to Lewe ChordPress needs to be a valid ChordPro formatted text. ChordPro is a simple text-based syntax used to write lead sheets, the lyrics and chords of a song. ChordPro also comes with a command line tool that pretty prints that text into other formats like PDF. You can read all about ChordPro here: ChordPro The Lewe ChordPress plugin allows to put ChordPro text inside its shortcode tags on a page or post and will pretty print it when the web page is displayed. Simply insert a ChordPro text inbetween the [chordpress] and [/chordpress] tags and it will be rendered based on the default options of the plugin. You can change output and formatting settings on the plugin’s admin page. A TinyMCE editor integration is also included, providing an editor menu button to insert the shortcode for you with its default paramaters, e.g. wrapping it around selected text. The [chordpress] shortag allows specifying custom options for rendering ChordPro texts. For example: [chordpress transpose="1"] will transpose the chords rendered by one semitone. [chordpress interactive="yes"] will allow you to transpose the chords up and down and also print the output right from the rendered page. Check out this example: Lewe ChordPress Demo The [chordpress-chord] shortag allows you to display a guitar chord as a diagram. For example: [chordpress-chord chord="112"] will show the guitar chord post with ID 112 as a diagram. [chordpress-chord barre="5,1,1" fingers="(3,2,'2'),(4,3,'4'),(5,3,'3')" title="F# Major" tuning="E,A,D,G,H,E"] will show a custom guitar chord. Check out this example: Lewe ChordPress Guitar Chord Demo If not from the WordPress marketplace, get the plugin here: Lewe ChordPress Homepage Features renders the lyrics/chord format of ChordPro configure output and formatting transpose up and down on the fly from the rendered page print the rendered output show chord diagrams Lewe ChordPress supports the following ChordPro tags: {album} {artist} {composer} {subtitle} {title} {year} {meta} for all of the above Lewe ChordPress supports custom CSS for the following ChordPro tags: {comment} {start_of_chorus}, {end_of_chorus} {start_of_verse}, {end_of_verse} Lewe ChordPress supports note/chord translations Chord transponation H/B Notation Usage Enter a [chordpress] shortcode in your page or post editor Paste your ChordPro text right after it Enter the closing [/chordpress] shortcode Optional shortcode parameters float= Forces the rendered text block to float left or right. hbnotation= Input is H/B notation (using H for B and Bb for B). Wether it is displayed as such is defined on the Options page. interactive= Enables interactive mode. A listbox will be shown on the right of the title that allows you to transpose the chords on the fly. Also, a print button will be shown fopr printing out the rendered ChordPro text. transpose= Enter a positive or negative number for the amount of semitones to transpose the chords Use the “Lewe ChordPress” admin menu of your backend to change the default settings. Documentation Lewe ChordPress User Manual Support Choose your preferred support channel: 1. WordPress Support Forum 2. Lewe Service Desk 4. Lewe ChordPress User Manual Credits The ChordPro team of course @rlisle for his work on the ChordsAndLyrics plugin that he created in 2009 Ahkâm for the beautiful Lewe ChordPress Plugin Icon The developers of the SVGuitar chord rendering module

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C