ValidateCertify Free

ValidateCertify Free has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (100%).

Every one of the 2 issues recorded for ValidateCertify Free has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. ValidateCertify Free is installed on roughly 900 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all ValidateCertify Free vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2025-48115

ValidateCertify <= 1.6.4 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

2 records
ValidateCertify Free banner
Latestv1.6.5

ValidateCertify Free

Javier Revilla

Author

Javier Revilla

3.7(3)
74/100
Last Updated
2026-03-15 (6mo ago)
Active Installs
900+
Downloads
12,542
Requires WP
6.0+
Requires PHP
7.3+
Tested up to
WP 6.9.7
Created
2023-06-14 (3y ago)

ValidateCertify: Authenticity and trust in certificate validation With ValidateCertify, you ensure the reliability of your certificates and offer an efficient solution for their validation. Its configuration is quick and easy: Upload your database with key information (name, surname, course, date and certificate code). Allow your users to validate certificates using a shortcode or widget, without complications. ValidateCertify Features – Free Manual certificate management: Add new certificates individually. Edit or delete existing certificates using their unique code. View and manage your entire database from an intuitive interface. Simplified validation: Integrate a shortcode to display the validation option on any page or post. Display key certificate information: first name, last name, course, date, and code. Elevate your Experience with ValidateCertify Pro Enhanced Features of ValidateCertify – Pro Unlock advanced features to manage certificates in bulk and streamline your workflow: Bulk Upload: Upload up to 1000 certificates in one step. Smart Detection: Automatically identify and exclude duplicate codes in batches. Flexible Export: Download your database at any time. Customizable Options: Delete entire databases if needed. Customize the shortcode button design to fit your style. Integrate the ValidateCertify widget for Elementor. Take your Validation to the Next Level with ValidateCertify ProPlus Advanced Features of ValidateCertify – ProPlus Access advanced features that maximize efficiency and accuracy: Automatic code generation: Generate unique codes when uploading certificates. Renowned field: Display additional information, such as the “certificate” field (previously known as “course”). All-in-one: Includes all the features of the Pro version plus these new, enhanced tools. Custom Fields: Starting with this version, you can request customization by contacting our team. Multi-Language Support ValidateCertify is fully compatible with WPML, TranslatePress and other translation plugins, making it easy to use in any language. You can help by adding a new language intranslate.wordpress.org. With ValidateCertify, transform your WordPress site into a professional and reliable system for validating certificates.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C