We’re Open!
We’re Open! has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2023; all 5 are fixed as of September 2026. Their average CVSS score is 4.8, and the most serious one scores 5.5 out of 10. 2023 was the busiest year with 3 disclosures.
The most common weakness is Cross-Site Scripting, behind 3 of the records (60%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization.
Every one of the 5 issues recorded for We’re Open! has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, one record each. We’re Open! is installed on roughly 5,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2022-3139We’re Open! <= 1.41 - Authenticated (Administrator+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

We’re Open!
Author
Noah Hearle
Control all aspects of your business’ opening hours with this very easy management tool with multiple display options and conditional text while open or closed with renewed content upon status changes. This plugin offers a high degree of customization and can be placed almost anywhere using a shortcode or widget. Features: Shortcode and Widget to display your opening hours in a wide variety of formats Responsive interface to quickly set regular opening hours separate from special opening hours for public holidays Set up to 3 groups of opening times per day Set 24 hour opening times Set a date range for a temporary closure of your business Consolidation of hours with options for: Just weekdays, Just the weekend, Separate weekdays and the weekend, Full consolidation Very high level of customization such as: Separator characters, Extensive day and time formatting, Prefix and suffix for each group of times, Local language day names with option to overwrite, Consolidation words, Hiding of closed days, Start the week to any day including the current day, Regular or special opening hours only, Separate day/date formatting for regular and special opening hours, Date labeling and notes for special opening hours, Date ranges, and much more… Option to refresh opening hours or reload the page at the start of each day HTML classes to give high-level of design customization (e.g. past, today, tomorrow, future, special) Right To Left (RTL) language support Conditional shortcode to show content only when open, closed or special opening hours Automatic data refreshing or page reload occurring with a change of open or closed status Conditionally show HTML containing special opening hours – only when this is available Conditional text with variables (e.g. show text or HTML relevant to current open status) Structured Data (Schema.org) support to give accurate information about opening hours to search engines and services such as Google My Business and it assists with SEO Populate and synchronize opening hours from Google My Business (Google API Key, Place ID, Google Billing Account are required) A comprehensive and free plugin with no upgrades for additional functionality Demo: We have a comprehensive showcase of the shortcode’s design and functionality on our Demonstration Website. Basic Shortcode Table designs Opening hours as text Consolidation Conditional shortcodes Conditional special opening hours Labels and notes Replacement text and logic Replacement text reference Recommendations: If populating from Google, I would recommend setting your business in Google and finding your Place ID. And if used more than once, create a Google Billing Account to receive your substantial free API Request allocation. This is just my second public plugin and all comments are very welcome. It is a sister plugin to Reviews and Rating – Google My Business. Getting started with Google Places API In order to retrieve your opening hours from Google My Business, you will need a Google API Key, locate your Place ID and set your billing information. With the Billing details, you’ll receive a substantial free allocation, ample enough to use this feature for free. Google API Key Guidelines Place ID Finder Google Cloud Billing Account
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C