Plugin Groups

Plugin Groups has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 6.5 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Plugin Groups has a vendor fix available, so running the current release closes it.

All of these findings were reported by Francesco Carlucci. Plugin Groups is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

6.5/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Plugin Groups vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.5CVE-2024-1108

Plugin Groups <= 2.0.6 - Missing Authorization to Unauthenticated Denial of Service

Read the full analysis

Vulnerability Records

1 records


2024-02-20 00:00	Plugin Groups <= 2.0.6 - Missing Authorization to Unauthenticated Denial of Service Plugin Groups <= 2.0.6	`CVE-2024-1108`	6.5 Medium	Francesco Carlucci	Yes

Showing 1–1 of 1 reports

Latestv3.0.0

Plugin Groups

Author

David Cramer

4.3(31)

86/100

Last Updated

2026-07-12 (2mo ago)

Active Installs

1,000+

Downloads

29,403

Requires WP

6.7+

Requires PHP

7.4+

Tested up to

WP 7.0.4

Created

2015-04-14 (12y ago)

If you have a lot of plugins installed, it can be difficult to manage them all. Now you can organize the plugins admin page by grouping your plugins by purpose. Each group will be displayed as a plugin status tabs in the plugins admin page, so you can easily filter which plugins you are viewing by group. A free plugin by David Cramer. Contribute to the development on GitHub

View on WordPress.org