WP-Record

WP-Record has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for WP-Record has a vendor fix available, so running the current release closes it.

All of these findings were reported by Khaled Alenazi (Nxploited). WP-Record is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.7.35.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WP-Record vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2025-10684

Construction Light <= 1.6.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation

Read the full analysis

Vulnerability Records

1 records


2025-11-21 00:00	Construction Light <= 1.6.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation WP-Record <= 1.6.7	`CVE-2025-10684`	5.3 Medium	Khaled Alenazi (Nxploited)	Yes

Showing 1–1 of 1 reports

Latestv0.1.0

WP-Record

Author

victorcruz

0.0(0)

0/100

Last Updated

2018-02-01 (9y ago)

Active Installs

10+

Downloads

1,659

Requires WP

4.6+

Requires PHP

Tested up to

WP 4.7.35

Created

2018-01-19 (9y ago)

Couple years ago, I entered to a post of a website which had a small audio player. This little thing gave me the possibility to hear what the post was doing while working on my tasks. So, I didn´t have to spend time reading. This is what makes WP-Record, so useful… and we are thinking about making it better with some new options that will be developed soon.

View on WordPress.org