Hostinger Tools

Hostinger Tools has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 7.3, and the most serious one scores 7.3 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Hostinger Tools has a vendor fix available, so running the current release closes it.

All of these findings were reported by Lucio Sá. Hostinger Tools is installed on roughly 3,000,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSHigh
7.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Hostinger Tools vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.3CVE-2023-6751

Hostinger <= 1.9.7 - Missing Authorization to Maintenance Mode Activation

Read the full analysis

Vulnerability Records

1 records
Hostinger Tools banner
Latestv3.0.77

Hostinger Tools

Hostinger

Author

Hostinger

3.5(40)
70/100
Last Updated
2026-08-25 (19d ago)
Active Installs
3,000,000+
Downloads
18,543,642
Requires WP
5.5+
Requires PHP
8.1+
Tested up to
WP 7.1
Created
2023-11-03 (3y ago)

Hostinger Tools is an all-in-one plugin designed to streamline essential tasks for WordPress site administrators. This plugin offers a range of features to help you manage your site’s information, maintenance mode, security, and redirects effectively. Features: Basic Info Displays the current WordPress version with automatic update checks. Shows the current PHP version with automatic update checks. Maintenance Mode Easily enable or disable maintenance mode for your site. Provide a URL to bypass maintenance mode for selected users. Security Enable or disable XML-RPC requests to enhance your site’s security. Enable or disable Authorize application page to enhance your site’s security. Redirects Force all URLs to use HTTPS for secure browsing. Force all URLs to use WWW to ensure consistency in site access. LLMs.txt Generation Automatically generate a structured LLMs.txt file in Markdown format. Include website title, description, posts, pages, and products (if WooCommerce is active). Keep the file updated when content changes or new content is published. Help AI-powered tools better understand and interact with your website content. Hostinger Tools is the new version of the previous Hostinger plugin, offering an updated and enhanced experience. The Onboarding assistant and the Learning section previously included in this plugin were moved to the separate plugin Hostinger Easy Onboarding.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C