Verowa Connect
Verowa Connect has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 4 are fixed as of September 2026. Their average CVSS score is 6.2, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 3 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (50%). Other recurring categories include SQL Injection.
Every one of the 4 issues recorded for Verowa Connect has a vendor fix available, so running the current release closes all known holes.
4 independent researchers contributed these findings, one record each. Verowa Connect is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2024-11460Verowa Connect <= 3.0.1 - Unauthenticated SQL Injection
Read the full analysisVulnerability Records

Verowa Connect
Author
Picture-Planet GmbH
Verowa is a swiss management software for churches and parishes. Verowa connects your team, manages your rooms and equipment, helps to plan events like church services or meetings and organizes your ads, office weeks and much more. Verowa keeps you informed of subsequent changes and also keeps your webpage content up to date with this plugin. This WordPress plugin is connecting with the Verowa API. To use it on your WordPress project you need to obtain an instance of Verowa and an API key. Please visit the Verowa website (in german) and contact us to get started. Subscriptions With Verowa Connect visitors of your website can subscribe to certain events. The number of seats can be limited and Verowa can provide a waiting list automatically if needed. Subscription forms may contain a large variety of input fields. The visitor’s data will be sent directly to Verowa where you can view and edit each individual subscription. (These options require the Verowa subscription module.) Room Reservations Verowa Connect can display complex room reservation forms, so your visitors can apply for rooms, devices and services. Verowa automatically sends confirmation mails and shows the data in a neat overview for you to check. Once approved one click changes the form data to a Verowa event. (These options require the Verowa room reservation module.)
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C