ValidateCertify Free
ValidateCertify Free has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10. 2025 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (100%).
Every one of the 2 issues recorded for ValidateCertify Free has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. ValidateCertify Free is installed on roughly 900 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2025-48115ValidateCertify <= 1.6.4 - Cross-Site Request Forgery
Read the full analysisVulnerability Records

ValidateCertify Free
Author
Javier Revilla
ValidateCertify: Authenticity and trust in certificate validation With ValidateCertify, you ensure the reliability of your certificates and offer an efficient solution for their validation. Its configuration is quick and easy: Upload your database with key information (name, surname, course, date and certificate code). Allow your users to validate certificates using a shortcode or widget, without complications. ValidateCertify Features – Free Manual certificate management: Add new certificates individually. Edit or delete existing certificates using their unique code. View and manage your entire database from an intuitive interface. Simplified validation: Integrate a shortcode to display the validation option on any page or post. Display key certificate information: first name, last name, course, date, and code. Elevate your Experience with ValidateCertify Pro Enhanced Features of ValidateCertify – Pro Unlock advanced features to manage certificates in bulk and streamline your workflow: Bulk Upload: Upload up to 1000 certificates in one step. Smart Detection: Automatically identify and exclude duplicate codes in batches. Flexible Export: Download your database at any time. Customizable Options: Delete entire databases if needed. Customize the shortcode button design to fit your style. Integrate the ValidateCertify widget for Elementor. Take your Validation to the Next Level with ValidateCertify ProPlus Advanced Features of ValidateCertify – ProPlus Access advanced features that maximize efficiency and accuracy: Automatic code generation: Generate unique codes when uploading certificates. Renowned field: Display additional information, such as the “certificate” field (previously known as “course”). All-in-one: Includes all the features of the Pro version plus these new, enhanced tools. Custom Fields: Starting with this version, you can request customization by contacting our team. Multi-Language Support ValidateCertify is fully compatible with WPML, TranslatePress and other translation plugins, making it easy to use in any language. You can help by adding a new language intranslate.wordpress.org. With ValidateCertify, transform your WordPress site into a professional and reliable system for validating certificates.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C