Today's Date Inserter
Today's Date Inserter has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Today's Date Inserter has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Muhammad Yudha - DJ. Today's Date Inserter is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 3.9.40.
CVE-2025-48103Today's Date Inserter <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Today's Date Inserter
Author
mulscully
Simply and quickly add the current date and or time to your wordpress posts by using a simple shortcode in the text of your page or post. Simply use the short code [todaysdate] in your text and when the post or page is displayed, [todaysdate] will be replaced by the current date and/or time that you defined on the settings screen. You can also override the default format by including the format string in the shortcode. For example, if you placed the following text in your post and your format string was set to l, F jS Y -> Thank you for visiting my site today [todaysdate]. The date would be displayed as -> Thank you for visiting my site today Wednesday, April 23rd 2014. Here how to override he default setting by including the format string in the shortcode [todaysdate format=”F Y”] would display April 2014 no matter what the default was set to. This plugin also includes a Today’s date widget. This widget has it’s own default format, but can be overridden by and valid php date format string The plugin also uses the timezone settings from wordpress to display the time and date.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C