WPtouch – Make your WordPress Website Mobile-Friendly

WPtouch – Make your WordPress Website Mobile-Friendly has 10 disclosed vulnerabilities in the WordSec catalog, reported between 2010 and 2025; all 10 are fixed as of September 2026. Their average CVSS score is 6.6, and the most serious one scores 9.9 out of 10. Severity breakdown: 1 critical and 4 high. 2022 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (40%). Other recurring categories include Open Redirect, Unrestricted Upload Of File With Dangerous Type.

Every one of the 10 issues recorded for WPtouch – Make your WordPress Website Mobile-Friendly has a vendor fix available, so running the current release closes all known holes.

7 independent researchers contributed these findings, most of them (2) reported by Nguyen Duy Quoc Khanh. WPtouch – Make your WordPress Website Mobile-Friendly is installed on roughly 50,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium

6.6/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WPtouch – Make your WordPress Website Mobile-Friendly vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.9

WPtouch <= 3.4.2 - Arbitrary File Upload

Read the full analysis

Vulnerability Records

10 records


2025-06-05 00:00	WPtouch <= 4.3.60 - Authenticated (Administrator+) Stored Cross-Site Scripting WPtouch <= 4.3.60	`CVE-2025-49318`	4.4 Medium	Nabil Irawan	Yes
2022-12-19 00:00	WPtouch <= 4.3.44 - Authenticated (Administrator+) PHP Object Injection WPtouch <= 4.3.44	`CVE-2022-3417`	7.2 High	Nguyen Duy Quoc Khanh	Yes
2022-12-19 00:00	WPtouch <= 4.3.44 - Authenticated (Administrator+) Arbitrary File Upload WPtouch <= 4.3.44	`CVE-2022-3416`	7.2 High	Nguyen Duy Quoc Khanh	Yes
2022-08-25 00:00	WPtouch <= 4.3.42 - Reflected Cross-Site Scripting WPtouch <= 4.3.42	`N/A`	6.1 Medium	Anonymous	Yes
2015-04-20 00:00	WPtouch <= 3.7.5.3 - Cross-Site Scripting WPtouch < 3.7.6	`N/A`	7.2 High	DANIEL CID	Yes
2015-01-29 00:00	WPTouch < 3.7 - Open Redirect WPtouch < 3.7	`N/A`	4.3 Medium	Anonymous	Yes
2014-08-01 00:00	WPtouch < 1.9.30 - Open Redirect WPtouch < 1.9.30	`N/A`	6.1 Medium	MaKyOtOx	Yes
2014-08-01 00:00	WPtouch <= 3.4.2 - Arbitrary File Upload WPtouch <= 3.4.2	`N/A`	9.9 Critical	Marc-Alexandre Montpas	Yes
2011-10-27 00:00	WPtouch <= 1.9.8 - SQL Injection WPtouch < 1.9.8.1	`CVE-2011-4803`	7.3 High	longrifle0x	Yes
2010-12-01 00:00	WPtouch < 1.9.20 - Cross-Site Scripting WPtouch < 1.9.20	`CVE-2010-4779`	6.1 Medium	High-Tech Bridge Security Research Lab	Yes

Showing 1–10 of 10 reports

Latestv4.3.62

WPtouch – Make your WordPress Website Mobile-Friendly

Author

WPtouch

3.7(341)

74/100

Last Updated

2025-12-04 (9mo ago)

Active Installs

50,000+

Downloads

14,854,313

Requires WP

4.2+

Requires PHP

Tested up to

WP 6.9.7

Created

2008-05-04 (19y ago)

WPtouch is a mobile plugin for WordPress that automatically adds a simple and elegant mobile theme for mobile visitors to your WordPress website. Recommended by Google, it will instantly enable a mobile-friendly version of your website that passes the Google Mobile test, and ensure your SEO rankings do not drop due to not having a mobile-friendly website. For more information about using WPtouch to achieve Google mobile-friendly status, please read our comprehensive mobile-friendly guide. The WPtouch administration panel and WordPress Customizer allow you to customize many aspects of its appearance, and deliver a fast, user-friendly and stylish version of your site to your mobile visitors, without modifying a single bit of code. Your regular desktop theme is left intact, and will continue to show for your non-mobile visitors. Go Pro for support and more control, enhanced themes & features WPtouch Pro offers a variety of enhanced themes for blogs, businesses, and WooCommerce retailers; extensions that add rich advertising options, advanced web font controls, caching, and more; and of course, top-notch one-on-one support from our professional team. For more information visit WPtouch.com. ‘WPtouch’ & ‘WPtouch Pro’ are trademarks of BraveNewCode Inc.

View on WordPress.org