I Plant A Tree

I Plant A Tree has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2024; 1 is fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.

1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2024.

All of these findings were reported by SOPROBRO. I Plant A Tree is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium

6.3/ 10

Patch Coverage50%

Open

Fixed

Get automatic notifications for all I Plant A Tree vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2024-51883

I Plant A Tree <= 1.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2024-12-11 00:00	I Plant A Tree <= 1.7.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting I Plant A Tree <= 1.7.3	`CVE-2024-54331`	6.1 Medium	SOPROBRO	Yes
2024-11-08 00:00	I Plant A Tree <= 1.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting I Plant A Tree <= 1.7.4	`CVE-2024-51883`	6.4 Medium	SOPROBRO	No

Showing 1–2 of 2 reports

Latestv1.7.4

I Plant A Tree

Author

Micha

0.0(0)

0/100

Last Updated

2024-11-21 (2y ago)

Active Installs

10+

Downloads

5,354

Requires WP

4.2.2+

Requires PHP

Tested up to

WP 6.7.7

Created

2015-08-14 (11y ago)

This plugin shows the count of planted trees via I Plant A Tree, as well as saved CO2. Use it as configurable widget for your sidebar or simply with a shortcode.

View on WordPress.org