WP Discord Invite

WP Discord Invite has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 4 are fixed as of September 2026. Their average CVSS score is 5.1, and the most serious one scores 6.1 out of 10. 2023 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (75%). Other recurring categories include Cross-Site Request Forgery (CSRF).

Every one of the 4 issues recorded for WP Discord Invite has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. WP Discord Invite is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
5.1/ 10
Patch Coverage100%
Open

0

Fixed

4

Get automatic notifications for all WP Discord Invite vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1

WP Discord Invite <= 2.4.1 - Reflected Cross-Site Scripting via webhook

Read the full analysis

Vulnerability Records

4 records
Plugin Profile
Latestv2.6.0

WP Discord Invite

Sarvesh M Rao

Author

Sarvesh M Rao

4.6(7)
92/100
Last Updated
2026-02-14 (7mo ago)
Active Installs
400+
Downloads
12,591
Requires WP
5.2+
Requires PHP
7.2+
Tested up to
WP 6.9.7
Created
2021-01-07 (6y ago)

Transform your long, forgettable Discord invite links into branded, professional vanity URLs on your own domain. Perfect for communities, gaming servers, content creators, and businesses. 🎯 Key Features 🔗 Branded Vanity URLs * Create custom short links: yoursite.com/discord, yoursite.com/community, or any path you choose * Professional and memorable – perfect for marketing materials, social media, and verbal sharing * No external URL shorteners needed – everything on your domain 📊 Real-Time Analytics * Track total clicks with beautiful visual stats dashboard * Monitor last click timestamp * Reset counters anytime for new campaigns * Modern card-based analytics interface 🎨 Social Media Previews * Customize rich embeds for Discord, Twitter, Facebook, WhatsApp, and more * Upload server icons directly from WordPress media library * Custom colors matching your brand (Discord blue #5865f2 by default) * Live preview – see exactly how your embed will look before publishing * Professional first impression when sharing your invite 🔔 Discord Webhook Notifications * Get instant notifications in Discord when someone clicks your invite * Easy OAuth integration – login with Discord to select channels * Alternative manual webhook URL input * Perfect for tracking engagement in real-time 💎 Modern Admin Interface * Complete UI overhaul in version 2.6.0 * Clean card-based design matching WordPress standards * Intuitive help toggles for every setting * Responsive layout works perfectly on mobile * WordPress media library integration for images 📸 Visual Examples When you share your vanity URL, people see: * Your server icon/logo * Custom invitation message * Server name and description * Branded colors * Professional, trustworthy appearance Perfect for: * Gaming communities and Discord servers * Content creators and streamers * Educational communities * Business team coordination * Open source projects * NFT and crypto communities 🚀 How It Works Install & Activate – One-click installation from WordPress Configure Your Link – Set your Discord invite code and choose your vanity path Customize Appearance – Upload your server icon, write compelling descriptions Share Everywhere – Use your branded link in videos, social media, websites Track Performance – Monitor clicks and engagement from your WordPress dashboard 🔒 Privacy & Security No data sent to external servers (except Discord OAuth for webhooks) All analytics stored in your WordPress database Open source – inspect the code anytime Regular security updates Follows WordPress coding standards 📚 Documentation & Support Complete Documentation Support Forum GitHub Repository Report Bugs Disclaimer: This plugin is not affiliated with Discord Inc. Discord and related logos are trademarks of Discord Inc. Credits: * Logo crafted with love by Dawn Saju * Developed by Sarvesh M Rao Support Need help? Here’s how to get support: Documentation: Check our comprehensive docs first Forum: Ask questions in the WordPress support forum GitHub: Report bugs or request features on GitHub Reviews: Love the plugin? Leave a review ❤️ Contribute WP Discord Invite is open source! Contribute on GitHub: Submit bug reports Suggest new features Contribute code Translate the plugin Improve documentation Support Development: If this plugin helps your community, consider buying me a coffee ☕

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C