Verowa Connect

Verowa Connect has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 4 are fixed as of September 2026. Their average CVSS score is 6.2, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (50%). Other recurring categories include SQL Injection.

Every one of the 4 issues recorded for Verowa Connect has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, one record each. Verowa Connect is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
6.2/ 10
Patch Coverage100%
Open

0

Fixed

4

Get automatic notifications for all Verowa Connect vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.5CVE-2024-11460

Verowa Connect <= 3.0.1 - Unauthenticated SQL Injection

Read the full analysis

Vulnerability Records

4 records
Verowa Connect banner
Latestv3.5.0
0.0(0)
0/100
Last Updated
2026-06-04 (3mo ago)
Active Installs
100+
Downloads
11,570
Requires WP
6.3+
Requires PHP
8.0+
Tested up to
WP 7.0.4
Created
2016-01-21 (11y ago)

Verowa is a swiss management software for churches and parishes. Verowa connects your team, manages your rooms and equipment, helps to plan events like church services or meetings and organizes your ads, office weeks and much more. Verowa keeps you informed of subsequent changes and also keeps your webpage content up to date with this plugin. This WordPress plugin is connecting with the Verowa API. To use it on your WordPress project you need to obtain an instance of Verowa and an API key. Please visit the Verowa website (in german) and contact us to get started. Subscriptions With Verowa Connect visitors of your website can subscribe to certain events. The number of seats can be limited and Verowa can provide a waiting list automatically if needed. Subscription forms may contain a large variety of input fields. The visitor’s data will be sent directly to Verowa where you can view and edit each individual subscription. (These options require the Verowa subscription module.) Room Reservations Verowa Connect can display complex room reservation forms, so your visitors can apply for rooms, devices and services. Verowa automatically sends confirmation mails and shows the data in a neat overview for you to check. Once approved one click changes the form data to a Verowa event. (These options require the Verowa room reservation module.)

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C