Today's Date Inserter

Today's Date Inserter has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Today's Date Inserter has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Muhammad Yudha - DJ. Today's Date Inserter is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 3.9.40.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Today's Date Inserter vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-48103

Today's Date Inserter <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Plugin Profile
Latestv1.2.1

Today's Date Inserter

mulscully

Author

mulscully

4.3(6)
86/100
Last Updated
2014-08-19 (12y ago)
Active Installs
700+
Downloads
11,693
Requires WP
3.0.1+
Requires PHP
0+
Tested up to
WP 3.9.40
Created
2014-04-29 (13y ago)

Simply and quickly add the current date and or time to your wordpress posts by using a simple shortcode in the text of your page or post. Simply use the short code [todaysdate] in your text and when the post or page is displayed, [todaysdate] will be replaced by the current date and/or time that you defined on the settings screen. You can also override the default format by including the format string in the shortcode. For example, if you placed the following text in your post and your format string was set to l, F jS Y -> Thank you for visiting my site today [todaysdate]. The date would be displayed as -> Thank you for visiting my site today Wednesday, April 23rd 2014. Here how to override he default setting by including the format string in the shortcode [todaysdate format=”F Y”] would display April 2014 no matter what the default was set to. This plugin also includes a Today’s date widget. This widget has it’s own default format, but can be overridden by and valid php date format string The plugin also uses the timezone settings from wordpress to display the time and date.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C