TARIFFUXX

TARIFFUXX has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 6.5 out of 10.

The most common weakness is SQL Injection, behind 1 of the records (100%).

The one issue recorded for TARIFFUXX has a vendor fix available, so running the current release closes it.

All of these findings were reported by Muhammad Yudha - DJ. TARIFFUXX is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
6.5/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all TARIFFUXX vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.5CVE-2025-10682

TARIFFUXX <= 1.4 - Authenticated (Contributor+) SQL Injection via tariffuxx_configurator Shortcode

Read the full analysis

Vulnerability Records

1 records
TARIFFUXX banner
Latestv1.6
5.0(1)
100/100
Last Updated
2026-05-26 (4mo ago)
Active Installs
20+
Downloads
1,479
Requires WP
5.7+
Requires PHP
7.4+
Tested up to
WP 7.0.4
Created
2022-06-03 (4y ago)

Integriere hochwertige Vergleiche oder Widgets für Mobilfunk- und DSL-Tarife in Deutschland mit dem TARIFFUXX-Plugin: – Einfache Integration via Shortcode – Individualisierbar (Einstellungen und Farben) – Mehrwert für deine Besucher – Verdiene Provisionen für Tarifvermittlungen Weitere Informationen – TARIFFUXX Partnerprogramm English: Integrate high-quality comparison tables for mobile and fixed line tariffs in Germany using TARIFFUXX-Plugin: – Easy short code integration – Fully customizable (settings and colors) – Added value for visitors – Earn commissions Further information – TARIFFUXX affiliate program (German only) License TARIFFUXX is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 2 of the License, or any later version. TARIFFUXX is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with TARIFFUXX. If not, see https://www.gnu.org/licenses/gpl-2.0.html.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C