WP Downgrade | Specific Core Version

WP Downgrade | Specific Core Version has one disclosed vulnerability in the WordSec catalog, all reported in 2022; it is fixed as of September 2026. Their average CVSS score is 4.8, and the most serious one scores 4.8 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for WP Downgrade | Specific Core Version has a vendor fix available, so running the current release closes it.

All of these findings were reported by Taurus Omar. WP Downgrade | Specific Core Version is installed on roughly 100,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.2.11.

Strategic Overview

Avg CVSSMedium
4.8/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all WP Downgrade | Specific Core Version vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.8CVE-2022-1001

WP Downgrade <= 1.2.2 - Admin+ Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Plugin Profile
Latestv1.2.6

WP Downgrade | Specific Core Version

Reisetiger

Author

Reisetiger

4.8(169)
96/100
Last Updated
2023-05-08 (3y ago)
Active Installs
100,000+
Downloads
1,679,577
Requires WP
3.0.1+
Requires PHP
0+
Tested up to
WP 6.2.11
Created
2016-04-30 (11y ago)

WordPress Core Downgrade/Update EN: The plugin “WP Downgrade” forces the WordPress update routine to perform the installation of a specified WordPress release. The Core Release you specify is then downloaded from wordpress.org and installed as would any regular update. You can permanently stay on a previous version of your choice or update selected. The user Gahapati describes it so much better than I can. (Thank you!) WP Downgrade | Specific Core Version has the potential for becoming one of the best-loved plugins among those, who simply cannot update to the latest WP release. In the past the latest WP release was the only offering for WP’s Automatic Update routine. This left all those behind, who have to wait with Core updates, until their plugins become compatible with newer WP releases. When this finally happens, more often than not there has already been yet another Core update. In the end a dreaded, cumbersome, time-consuming and error-prone Manual Update used to be the only way to go. With WP Downgrade | Specific Core Version this is now a thing of the past. Anyone who lags behind the latest WP release is now able to use Automatic Updates even to lower WP versions. What WP Downgrade does simply is to make WP believe that the version you want to update to actually is the latest version. Because of this, there is no difference to updating to the latest version. For security reasons I think this is a must-have plugin for anyone running a “seasoned” WP installation, and it actually should be a Core feature to be able to update not to the latest WP release exclusively but instead to have a choice among secure releases. New advanced option: You are now able to manually edit the download link, if necessary. This allows, for example, a change of language for wp-core. Or you can get the release from another source. DE: Das Plugin “WP Downgrade” zwingt die WordPress-interne Update-Funktion, ein bestimmtes WordPress-Release zu installieren. Das definierte Core-Release wird wie ein regul&auml;res Update von wordpress.org bezogen und direkt installiert. Das klappt wie gewohnt per Update-Button im Admin-Bereich oder per Auto-Update. Die Versionsnummer kann sowohl höher als auch niedriger sein als die aktuell installierte Version. Somit ist also auch ein Rollback auf frühere Releases möglich. Dein WordPress wird solange auf dieser Version bleiben, bis du eine neue Versionsnummer in WP-Downgrade hinterlegst (oder bis du die Versionsnummer leerst oder das Plugin deaktivierst). Achtung: Nutzung auf eigene Gefahr! WP-Downgrade funktioniert normalerweise prima. Trotzdem ist ein Versionswechsel immer ein riskanter Eingriff! Du solltest auf jeden Fall vorher ein Backup deiner Dateien und der Datenbank anlegen! Ich übernehme keinerlei Gewähr für deine Installation und werde auch keinen Support leisten. Plugin hilfreich? Sag Danke! Ich stelle das Plugin kostenlos zur Verf&uuml;gung, freue mich aber sehr &uuml;ber Spenden oder einen Link auf meinen Reiseblog https://www.reisetiger.net! 🙂 Bitte bewerte WP Downgrade, wenn es f&uuml;r dich n&uuml;tzlich ist!

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C