Simply Excerpts

Simply Excerpts has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Simply Excerpts has a vendor fix available, so running the current release closes it.

All of these findings were reported by niclo. Simply Excerpts is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
4.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Simply Excerpts vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.4CVE-2023-5137

Simply Excerpts <= 1.4 - Authenticated (Admin+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Plugin Profile
Latestv1.7

Simply Excerpts

A. Jones

Author

A. Jones

5.0(2)
100/100
Last Updated
2026-02-22 (7mo ago)
Active Installs
500+
Downloads
11,785
Requires WP
0+
Requires PHP
0+
Tested up to
WP 6.9.7
Created
2015-11-14 (11y ago)

Version 1.7 Donations for extended support are appreciated but are never required! For quicker support, please visit our website www.shooflysolutions.com Please be kind and rate this plugin. Everything helps! This plugin is a very simple plugin the allows you to change the number of words that are displayed in excerpts and to replace the elipsis with text. The settings for this plugin can be found on the Settings Menu in the Admin Panel. Check the box for the option you wish to manage and enter the value. There are two options: “Maximum number of words to display in an excerpt” and “Read More Text”. You should not use this plugin with other plugins that modify excerpts. Arbitrary section Need more? Customization is available. Contact sales@shooflysolutions.com for more information.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C