Sign-up Sheets

Sign-up Sheets has 9 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2025; all 9 are fixed as of September 2026. Their average CVSS score is 5.7, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 2 high. 2025 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 3 of the records (33%). Other recurring categories include Cross-Site Scripting, Code Injection.

Every one of the 9 issues recorded for Sign-up Sheets has a vendor fix available, so running the current release closes all known holes.

8 independent researchers contributed these findings, most of them (2) reported by Ajay Sandipan Thorbole. Sign-up Sheets is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
5.7/ 10
Patch Coverage100%
Open

0

Fixed

9

Get automatic notifications for all Sign-up Sheets vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.1CVE-2025-49393

Sign-up Sheets <= 2.3.2 - Unauthenticated PHP Object Injection

Read the full analysis

Vulnerability Records

9 records
Sign-up Sheets banner
Latestv2.3.4

Sign-up Sheets

Fetch Designs

Author

Fetch Designs

4.8(16)
96/100
Last Updated
2026-08-22 (22d ago)
Active Installs
1,000+
Downloads
66,338
Requires WP
5.5+
Requires PHP
5.5+
Tested up to
WP 7.1
Created
2012-10-23 (14y ago)

Sign-up Sheets helps you organize sign-ups, events, shifts, and other scheduled tasks directly in WordPress. It offers a flexible way to coordinate people, time slots, and responsibilities without relying on a third-party service. The free version of Sign-up Sheets includes core tools for building and managing sign-up sheets on your site: Add, edit, and clear sign-up spots as needed Copy a sheet or task to speed up setup Send confirmation emails after sign-up Let logged-in users view all of their sign-ups on one page with the [user_sign_ups] shortcode Create an unlimited number of sign-up sheets and spots Enable optional reCAPTCHA protection Export sign-up data for one sheet or all sheets to CSV Support WordPress GDPR privacy features for your sign-up sheets Built with accessibility in mind based on WCAG Guidelines. If you run into any accessibility issues, please report them to help make the plugin more inclusive for all users. See the full list of Sign-up Sheets features The Pro version of Sign-up Sheets adds advanced tools for more complex scheduling and form needs: Create custom task fields and custom sign-up form fields Send optional reminder emails before an event Customize confirmation and reminder emails per sheet Assign categories to sign-up sheets and display current sheets for a specific category Let logged-in users edit their own sign-ups Enable Spot Locking to hold a spot for 3 minutes while a user completes the sign-up form Use Compact and Semi-Compact display modes to condense tasks with many spots into a single line Set sign-up limits per task See the full list of Sign-up Sheets features Sign-up Sheets is used for church and nonprofit volunteer opportunities, school and PTO/PTA events, club sign-ups, meeting room reservations, photographer time slots, peronal gatherings, and more. It is a practical alternative to monthly paid services like SignUpGenius while keeping your sign-ups on your own WordPress site.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C