Clients

Clients has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; none of them are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

None of the 2 issues recorded for Clients have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2024.

2 independent researchers contributed these findings, one record each. Clients is installed on roughly 60 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.9.31.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Clients vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2024-54245

Clients <= 1.1.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2025-04-02 00:00	Clients <= 1.1.4 - Missing Authorization Clients <= 1.1.4	`CVE-2025-31746`	4.3 Medium	Kévin Mosbahi (Mika)	No
2024-12-06 00:00	Clients <= 1.1.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting Clients <= 1.1.4	`CVE-2024-54245`	6.4 Medium	SOPROBRO	No

Showing 1–2 of 2 reports

Plugin Profile

Latestv1.1.4

Clients

Author

Think201

3.0(1)

60/100

Last Updated

2018-10-12 (8y ago)

Active Installs

60+

Downloads

6,031

Requires WP

3.5.2+

Requires PHP

Tested up to

WP 4.9.31

Created

2015-01-13 (12y ago)

Clients provide you an easiest way to add and retrieve clients. Various UI styling to choose to display your client list is the add on you were looking for. Salient Features Add client information from backend Recieve list of clients as a short code to use it in your site Choice of adding featured clients Option of adding client since date for your client Also, you may choose the UI style you want to display client information on your site Like the plugin or want features? Tweet to us @think201 Also you can read more about the plugin & its development at Think201 Plugin Support Dedicated Support: talk to us on Twitter @think201 or Think201 To raise issues or if you have a question for us, post to the support forum here https://wordpress.org/support/plugin/clients and we are happy to help. Requirements WordPress 3.5.2 or greater PHP 5.2.6 or greater (5.3 recommended) MySQL 4.1.2 or greater (5.x recommended)

View on WordPress.org