WP Helper Premium
Explore WP Helper Premium vulnerabilities across all versions. Currently tracking 5 known vulnerabilities, including severity, impact, and patch status.
Vulnerability Records
WP Helper Premium
Author
Mat Bao Corporation
WP Helper Premium is an all-in-one WordPress toolkit that consolidates 8 essential site management modules into a single plugin. Every module is independent — activate only what you need from a unified dashboard. Contact Channels Add a floating contact widget so visitors can reach you instantly. Greeting card — title, short description, and online/offline status Floating trigger button — custom color and left/right position Hotline card — separate info for online and offline hours Staff list — multiple agents with names and contact info Header & Footer Inject tracking, analytics, or custom code without editing theme files. Three code areas — <head>, body-open (<body>), and footer (</body>) Supports any HTML, JavaScript, or CSS snippet Applies site-wide and survives theme updates Pop-up Promotional and newsletter pop-ups with full scheduling and display control. Form pop-up — collects leads, integrates with Contact Form 7, WPForms, Gravity Forms, Ninja Forms Banner pop-up — image, title, subtitle, and CTA button Display rules — delay, cookie duration, and max display count Maintenance Mode Put your site under a professional maintenance page while you work. 6 templates — Dark, Light, Gradient, Construction, Corporate, Cyberpunk (Neon) AI content generation — auto-writes heading, sub-heading, and description (requires AI Hub) Countdown timer — shows visitors when the site returns Visitor stats — page views, unique visitors, and bounce rate while active Admin bypass — logged-in administrators see the site normally Email & Contact Manage every inbound form and outbound email from one place. Form Manager — collect, view, and export contact form submissions SMTP Config — reliable delivery via Gmail, Outlook, Zoho Mail, Yahoo Mail, or any custom SMTP server Spam Filter — honeypot, rate limiting, IP/country/keyword blocking, DNSBL check CAPTCHA — Math Quiz, Google reCAPTCHA, Cloudflare Turnstile, or hCaptcha Email Log — status, headers, and body of every email sent, with resend and CSV export WooCommerce Toolkit Extend WooCommerce with sales and operations tools — no extra plugins needed. Wallet Payment — Momo, ZaloPay, VNPay, ShopeePay Payment Templates — reusable info blocks for order/CRM management E-commerce Links — connect product listings to Shopee, Lazada, TikTok Shop Buy Now (CTA) button — custom placement and text on product pages Thank You page — customize post-purchase content AI Payment Verification — scan bank transfer receipts via OCR to auto-verify payments and flag fraud (requires AI Hub) AI Hub Connect Google Gemini, Anthropic Claude, or OpenAI GPT to power AI features site-wide. AI Writer — drafts blog posts and product descriptions AI Security — scans the site for vulnerabilities and misconfigurations AI SEO — audits pages and suggests on-page SEO improvements AI Payment — verifies bank transfer receipts via OCR and flags fraud risk Token stats & fallback — tracks usage per provider with automatic 3-tier fallback Protection & Optimization Harden and speed up your site with individual toggles — enable only what you need. Security — disable XML-RPC, hide WP version, custom login URL, disable copy/right-click Performance — remove query strings, disable embeds, Google Fonts, or Dashicons Productivity — duplicate pages/posts/menus, redirect 404s to the homepage, enable SVG uploads Privacy Policy This plugin does not track users, store personal data, or use cookies by default. Certain optional features transmit data to third-party services — see External Services below. All external calls are initiated server-side and occur only when the relevant feature is enabled and configured by a site administrator. External Services This plugin optionally connects to the following third-party services when the corresponding features are enabled by the site administrator. No data is sent unless the feature is explicitly activated and configured. Google Gemini API Used for AI-powered content generation (maintenance page content, product descriptions, image captions). Data sent: text prompts provided by the administrator. * Service: https://ai.google.dev/ * Terms of Service: https://ai.google.dev/terms * Privacy Policy: https://policies.google.com/privacy Anthropic Claude API Used as a fallback AI provider for content generation when configured by the administrator. * Service: https://www.anthropic.com/ * Terms of Service: https://www.anthropic.com/legal/consumer-terms * Privacy Policy: https://www.anthropic.com/legal/privacy OpenAI API Used as an optional AI provider for content generation when configured by the administrator. * Service: https://openai.com/ * Terms of Service: https://openai.com/terms * Privacy Policy: https://openai.com/privacy ip-api.com Used by the Spam Filter feature to look up the country/ISP of a visitor’s IP address when country-based blocking is enabled. Only the visitor’s IP address is transmitted. * Service: https://ip-api.com/ * Terms of Service: https://ip-api.com/docs * Privacy Policy: https://ip-api.com/ Google reCAPTCHA Used by the Captcha module when the administrator selects Google reCAPTCHA. Visitor IP and browser information are sent to Google for spam scoring. * Service: https://www.google.com/recaptcha/ * Terms of Service: https://policies.google.com/terms * Privacy Policy: https://policies.google.com/privacy Cloudflare Turnstile Used by the Captcha module when the administrator selects Cloudflare Turnstile. Challenge tokens are verified server-side with Cloudflare. * Service: https://www.cloudflare.com/products/turnstile/ * Terms of Service: https://www.cloudflare.com/terms/ * Privacy Policy: https://www.cloudflare.com/privacypolicy/ hCaptcha Used by the Captcha module when the administrator selects hCaptcha. Challenge responses are verified server-side with hCaptcha. * Service: https://www.hcaptcha.com/ * Terms of Service: https://www.hcaptcha.com/terms * Privacy Policy: https://www.hcaptcha.com/privacy Pexels API Used to search and import free stock photos for AI-generated pages when the administrator has configured a Pexels API key. * Service: https://www.pexels.com/ * Terms of Service: https://www.pexels.com/terms-of-service/ * Privacy Policy: https://www.pexels.com/privacy-policy/ Pixabay API Used to search and import free stock photos as an alternative image source when configured by the administrator. * Service: https://pixabay.com/ * Terms of Service: https://pixabay.com/service/terms/ * Privacy Policy: https://pixabay.com/service/privacy/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C