wp-Monalisa

wp-Monalisa has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2024; all 2 are fixed as of September 2026. Their average CVSS score is 4.9, and the most serious one scores 5.5 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.

Every one of the 2 issues recorded for wp-Monalisa has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by SOPROBRO. wp-Monalisa is installed on roughly 600 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
4.9/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all wp-Monalisa vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.5

wp-Monalisa <= 6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records
wp-Monalisa banner
Latestv6.6

wp-Monalisa

tuxlog

Author

tuxlog

4.8(25)
96/100
Last Updated
2025-12-06 (9mo ago)
Active Installs
600+
Downloads
100,429
Requires WP
4.0+
Requires PHP
0+
Tested up to
WP 6.9.7
Created
2009-05-20 (18y ago)

wp-monalisa is the plugin that smiles at you like monalisa does. place the smilies of your choice in posts, pages or comments. There are a lot plugins for smiley support out there and some of them are really useful. Most of them don’t work out of the box and this is what wp-monalisa tries to achieve, giving you the ability to maintain your smilies and even turn them into img tags. it’s easy and it smiles at you…what else do you want? Features: maintain your smilies in a separate directory activate or deactivate smilies for posts or comments replace smilies with img tags extend or replace wordpress smiley replacement while edit posts or pages, pops-up in a draggable meta-box extends your comment form to give you visitors the freedom to smile 🙂 support for fckeditor (tested with v3.3.1) fully integrated with BuddyPress, bbPress and wpForo The video shows a short overview of what wp-monalisa can do for you. Credits: Thanks go to all who support this plugin, with hints and suggestions for improvment and specially to Michal Maciejewski, polish translation Denny from http://www.vau3.de for testing and giving input for the BuddyPress integration FJ Bakry, Camisto (https://camisto.com) for indonesian translation

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C