WP CleanFix

WP CleanFix has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2012 and 2023; all 3 are fixed as of September 2026. Their average CVSS score is 7.3, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high.

The most common weakness is Code Injection, behind 1 of the records (33%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization.

Every one of the 3 issues recorded for WP CleanFix has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSHigh

7.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WP CleanFix vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2013-2109

WP Cleanfix Plugin < 5.0.0 - Remote Code Execution

Read the full analysis

Vulnerability Records

3 records


2023-11-28 00:00	WP Cleanfix <= 5.6.2 - Missing Authorization via register WP CleanFix <= 5.6.2	`CVE-2023-48775`	7.1 High	Abdi Pranata	Yes
2013-05-18 00:00	WP Cleanfix Plugin < 5.0.0 - Remote Code Execution WP CleanFix < 5.0.0	`CVE-2013-2109`	8.8 High	Henri Salo (fgeek)	Yes
2012-06-28 00:00	WP Cleanfix <= 3.0.1 - Cross-Site Request Forgery WP CleanFix <= 3.0.1	`CVE-2013-2108`	6.1 Medium	Anonymous	Yes

Showing 1–3 of 3 reports