Plugin icon

WPtouch – Make your WordPress Website Mobile-Friendly

wptouch

Vulnerabilities:

11

Last Updated:

December 4, 2025

Active Installs:

60000

Published
Title
Fixed in
CVSS
Published
2025-06-05
Title
WPtouch < 4.3.61 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 4.3.61
CVSS
4.4 (medium)
Published
2022-12-19
Title
WPtouch < 4.3.45 - Admin+ PHP Object Injection
Fixed in
Fixed in 4.3.45
CVSS
4.1 (medium)
Published
2022-12-19
Title
WPtouch < 4.3.45 - Admin+ Arbitrary File Upload
Fixed in
Fixed in 4.3.45
CVSS
6.6 (medium)
Published
2022-08-29
Title
WPtouch < 4.3.44 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.3.44
CVSS
6.1 (medium)
Published
2015-04-20
Title
WPtouch Mobile Plugin < 3.7.6 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 3.7.6
CVSS
n/a
Published
2015-01-29
Title
WPtouch < 3.7 - Unvalidated Open Redirect
Fixed in
Fixed in 3.7
CVSS
n/a
Published
2014-08-01
Title
WPtouch 3.x - Insecure Nonce Generation
Fixed in
Fixed in 3.4.3
CVSS
n/a
Published
2014-08-01
Title
WPtouch 1.9.19.4 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.9.20
CVSS
n/a
Published
2014-08-01
Title
WPtouch 1.9.8 - include/submit.php Multiple Parameter SQL Injection
Fixed in
Fixed in 1.9.8.1
CVSS
n/a
Published
2014-08-01
Title
WPtouch 1.9.27 - 'wptouch_redirect' Parameter URI Redirection
Fixed in
Fixed in 1.9.30
CVSS
n/a
Published
2014-08-01
Title
WPtouch 1.9.8 - ajax/file_upload.php Crafted Content-Type File Upload Remote Code Execution
Fixed in
Fixed in 1.9.8.1
CVSS
n/a