StagTools

StagTools has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.4 out of 10. 2023 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (100%).

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

3 independent researchers contributed these findings, one record each. StagTools is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.2.11.

Strategic Overview

Avg CVSSMedium

6.3/ 10

Patch Coverage67%

Open

Fixed

Get automatic notifications for all StagTools vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-58814

Stagtools <= 2.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records


2025-09-05 00:00	Stagtools <= 2.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting StagTools <= 2.3.8	`CVE-2025-58814`	6.4 Medium	theviper17y	No
2023-09-05 00:00	Stagtools <= 2.3.7 - Reflected Cross-Site Scripting StagTools <= 2.3.7	`CVE-2023-41868`	6.1 Medium	Le Ngoc Anh	Yes
2023-04-05 00:00	Stagtools <= 2.3.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode StagTools <= 2.3.6	`CVE-2023-0891`	6.4 Medium	xplo1t	Yes

Showing 1–3 of 3 reports

Latestv2.3.8

StagTools

Author

Ram Ratan Maurya

5.0(5)

100/100

Last Updated

2023-08-04 (3y ago)

Active Installs

1,000+

Downloads

122,154

Requires WP

5.0+

Requires PHP

7.3+

Tested up to

WP 6.2.11

Created

2013-07-27 (13y ago)

StagTools powers your WordPress website with some regularly needed shortcodes including buttons, columns, alerts, font icons etc. It also includes several widgets and editor styles. Shortcodes: Buttons ( optionally, with font icons ) Columns Dropcaps Tabs Toggle Font Icons by Font Awesome Google Maps with 5 predefined styles, and map types Custom Sidebars Area ( requires Stag Custom Sidebars plugin ) Image with CSS3 filters Videos ( supports oEmbeds ) Widgets: Twitter, Dribbble, Flickr Custom Post Types: Portfolio, Slides, Team, Testimonials Get Involved If you are a developer, you can contribute to the source code on StagTools Github Repository Checkout our finely tuned WordPress themes over at Codestag.

View on WordPress.org