CVE-2024-13362: cross-site scripting (XSS) en Post SMTP – Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App y otras 131 tecnologías

[B] Qué hacer

¿Cómo lo soluciono?

1. 01

   Actualiza Advanced Classifieds & Directory Pro a la 3.2.5 y Advanced Scrollbar – Give Your Site a Sleek Branded Scrolling Feel a la 1.1.10 y AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization a la 2.10.0 y AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o a la 1.8.5 y AI Puffer – MCP Server for Claude & ChatGPT, with AI Chatbot a la 2.3.17 y AidWP – Donation & Payment Forms (Stripe Powered) a la 3.2.9 y Announcement Bar, Notification Bar & Banner – Bulletin a la 3.13.1 y Anti-Spam Protection – No API Key, GDPR Friendly a la 2.3.12 y Auto Post Cleaner a la 3.9.7 y Auto-Install Free SSL – Generate & Install Free SSL Certificates a la 4.5.1 y Automatic Internal Links for SEO by Pagup a la 2.0.1 y Automatic YouTube Gallery – Embed Auto-Updating YouTube Video Galleries, Feeds, Playlists & Channels a la 2.5.6 y AWCA – The Great Analytics Insights for Your eStore a la 3.16.0 y bBlocks – Essential Gutenberg Blocks & Patterns Collection a la 2.0.19 y Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots a la 2.7.0 y BlockSpare – Gutenberg Blocks, AI Content Generator & Site Builder for news, magazine, blog and business sites a la 3.2.8 y Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News a la 3.4.11 y Books Gallery – Book Showcase, Library & Affiliate Plugin a la 4.7.6 y Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO) a la 2.2.0 y Bulk Edit Posts and Products in Spreadsheet a la 2.25.19 y Carousel, Recent Post Slider and Banner Slider a la 2.2 y Code Manager a la 1.0.41 y Coupon Affiliates – Affiliate Plugin for WooCommerce a la 5.19.0 y Custom PHP Settings a la 2.3.2 y Disable Payment Methods based on cart conditions for WooCommerce a la 1.16.4 y Display Eventbrite Events a la 6.1.11 y Dracula Dark Mode – Accessibility, Reading Mode & Dark Mode for WordPress a la 1.2.8 y Dynamic Copyright Year a la 1.1 y Easy Age Verify a la 1.9 y Easy Appointment Booking & Scheduling Plugin – Webba Booking Calendar a la 5.1.8 y Easy Social Feed – All In One Social Feed Plugin for WordPress a la 6.6.6 y EazyDocs – AI Powered Knowledge Base, Wiki, Documentation & FAQ Builder a la 2.5.9 y EleSpare – Elementor News, Magazine & Blog Addons with Post Grid a la 3.3.4 y Embedder for Google Reviews a la 1.7.5 y Events Addon for Elementor a la 2.2.5 y Featured Images in RSS for Mailchimp & More a la 1.6.4 y File Manager for Google Drive – Integrate Google Drive a la 1.5.0 y Five-Star Ratings Shortcode a la 1.2.57 y FooGallery Photo Gallery : Image, Video & Masonry Galleries a la 2.4.29 y Forumax – AI Powered Advanced Community Forum Plugin a la 1.2.9 y Full Screen Background a la 2.0.3 y Geo Mashup a la 1.13.16 y Glossary a la 2.2.39 y Go Fetch Jobs (for WP Job Manager) a la 1.8.4.9.1 y Goal Tracker – Custom Event Tracking for GA4 a la 1.1.6 y HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player a la 2.5.1 y Image Alt Text Manager – Bulk & Dynamic Alt Tags For image SEO Optimization + AI a la 1.6.6 y Inavii Social Feed – Live Social Proof Gallery a la 2.7.7 y Independent Analytics – WordPress Analytics Plugin a la 2.10.0 y Internal Link Juicer: SEO Auto Linker for WordPress a la 2.25.2 y Ivory Search – WordPress Search Plugin a la 5.5.9 y Joli Table Of Contents – Table of Contents with Gutenberg Block & Shortcode a la 2.6.1 y Justified Gallery a la 1.10.0 y Kikote – Location Picker at Checkout & Google Address AutoFill Plugin for WooCommerce a la 1.10.8 y Knowledge Base documentation & wiki plugin – BasePress Docs a la 2.16.3.6 y Lightbox & Modal Popup WordPress Plugin – FooBox a la 2.7.34 y Logo Showcase – Responsive Logo Carousel, Logo Slider & Logo Grid a la 3.2.9 y MapGeo – Interactive Geo Maps a la 1.6.23 y Mapster WP Maps a la 1.21.0 y Marijuana Age Verify a la 1.6 y Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits a la 2.0.7.3 y Menu Image, Icons made easy a la 3.13 y Message Filter for Contact Form 7 a la 1.6.3.3 y Meta Field Block – Display Custom Fields for ACF, Meta Box and More a la 1.3.4 y Music Player for Elementor – Audio Player & Podcast Player a la 2.4.4 y Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar a la 2.1.35 y Ocean Extra a la 2.4.4 y Open User Map – Interactive Leaflet Maps a la 1.4.1 y Pay For Post with WooCommerce a la 3.1.28 y PDF Poster – Let visitors read PDF’s without leaving the page a la 2.3.1 y Place Order Without Payment for WooCommerce a la 2.6.7 y Post List Designer – Category Post, Recent Post, Post List a la 3.3.8 y Post Slider and Carousel Pro a la 2.1.3 y Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider a la 3.2.9 y Post SMTP – Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App a la 3.1.0 y Post to Google My Business (Google Business Profile) a la 3.2.2 y Premmerce Permalink Manager for WooCommerce a la 2.3.12 y Primary Addon for Elementor a la 1.6.5 y Product Layouts for WooCommerce a la 1.3.5 y Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player a la 2.0.83 y Radio Station by netmix® – Manage and play your Show Schedule in WordPress! a la 2.5.17 y Restaurant & Cafe Addon for Elementor a la 1.6.1 y Restrict – membership, site, content and user access restrictions for WordPress a la 2.3.1 y Role Based Pricing for Woo by Meow Crew a la 1.6.1 y Secure Gateway for Authorize.net and WooCommerce by Pledged Plugins a la 6.1.14 y Security Ninja – WordPress Security & Firewall a la 5.225 y Send Users Email – Email Subscribers, Email Marketing Newsletter a la 1.6.2 y Share This Image a la 2.08 y Shortcodes Ultimate – Content Elements a la 7.3.4 y SimpLy Gallery a la 3.2.4.5 y Smart phone field for Gravity Forms a la 2.2.0 y Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews a la 3.2.9 y Spotlight Social Photo Feed a la 1.7.1 y StoreCustomizer – A plugin to Customize all WooCommerce Pages a la 2.6.0 y StreamWeasels Twitch Integration a la 1.9.3 y TablePress – Tables in WordPress made easy a la 3.0.3 y Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent a la 1.1.17 y Team Members Showcase a la 3.3.2 y Team Members – Team Showcase, Team Slider, Grid, Table & Staff Directory a la 2.6.1 y Text To Speech TTS Accessibility a la 1.8.12 y Thank You Page for WooCommerce a la 4.2.1 y TreePress – Easy Family Trees & Ancestor Profiles a la 3.0.7 y TrueAna – True Analytics Dashboard a la 2.10.0 y Ultimeter – the Ultimate Progress and Goals Meter a la 3.0.7 y Unlimited Elements for Elementor a la 1.5.141 y URL Shortify – Simple and Easy URL Shortener a la 1.10.5.1 y Webheadcoder Multi-Step Forms for Contact Form 7 a la 4.4.2 y WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto a la 8.0.8 y WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms a la 1.7.1 y WP Coupons and Deals – WordPress Coupon Plugin a la 3.2.3 y WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps a la 5.5.32 y WP Encryption: One Click SSL / HTTPS & Free SSL certificate, HTTPS redirect a la 7.7.3 y WP fail2ban – Advanced Security a la 5.4.0 y WP Meta and Date Remover a la 2.3.5 y WP Mobile Menu – The Mobile-Friendly Responsive Menu a la 2.8.7 y WP Notification Bell a la 1.4.3 y WP Page Templates a la 1.1.17 y WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars a la 3.8.4 y WP Top News — Build a Complete News Portal in WordPress a la 2.4.3 y WPIDE – File Manager & Code Editor a la 3.5.2 y XT Variation Swatches for WooCommerce a la 1.9.7 y YASR – Yet Another Star Rating Plugin for WordPress a la 3.4.15 o posterior.

   Es la corrección más reciente que dan las fuentes. Si no puedes cambiar de rama, cada una tiene la suya en la lista de arriba.

2. 02

   Que no te pille la próxima.

   Añade Advanced Classifieds & Directory Pro y Advanced Scrollbar – Give Your Site a Sleek Branded Scrolling Feel y AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization y AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o y AI Puffer – MCP Server for Claude & ChatGPT, with AI Chatbot y AidWP – Donation & Payment Forms (Stripe Powered) y Announcement Bar, Notification Bar & Banner – Bulletin y Anti-Spam Protection – No API Key, GDPR Friendly y Auto Post Cleaner y Auto-Install Free SSL – Generate & Install Free SSL Certificates y Automatic Internal Links for SEO by Pagup y Automatic YouTube Gallery – Embed Auto-Updating YouTube Video Galleries, Feeds, Playlists & Channels y AWCA – The Great Analytics Insights for Your eStore y bBlocks – Essential Gutenberg Blocks & Patterns Collection y Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots y BlockSpare – Gutenberg Blocks, AI Content Generator & Site Builder for news, magazine, blog and business sites y Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News y Books Gallery – Book Showcase, Library & Affiliate Plugin y Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO) y Bulk Edit Posts and Products in Spreadsheet y Carousel, Recent Post Slider and Banner Slider y Checkout with Cash App on WooCommerce y Code Manager y Coupon Affiliates – Affiliate Plugin for WooCommerce y Custom PHP Settings y Custom WooCommerce Checkout Fields Editor y Disable Payment Methods based on cart conditions for WooCommerce y Display Eventbrite Events y Dracula Dark Mode – Accessibility, Reading Mode & Dark Mode for WordPress y Dynamic Copyright Year y Easy Age Verify y Easy Appointment Booking & Scheduling Plugin – Webba Booking Calendar y Easy Social Feed – All In One Social Feed Plugin for WordPress y EazyDocs – AI Powered Knowledge Base, Wiki, Documentation & FAQ Builder y EleSpare – Elementor News, Magazine & Blog Addons with Post Grid y Embedder for Google Reviews y Events Addon for Elementor y Featured Images in RSS for Mailchimp & More y File Manager for Google Drive – Integrate Google Drive y Five-Star Ratings Shortcode y FooGallery Photo Gallery : Image, Video & Masonry Galleries y Forumax – AI Powered Advanced Community Forum Plugin y Full Screen Background y Geo Mashup y Glossary y Go Fetch Jobs (for WP Job Manager) y Goal Tracker – Custom Event Tracking for GA4 y HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player y Image Alt Text Manager – Bulk & Dynamic Alt Tags For image SEO Optimization + AI y Inavii Social Feed – Live Social Proof Gallery y Independent Analytics – WordPress Analytics Plugin y Internal Link Juicer: SEO Auto Linker for WordPress y Ivory Search – WordPress Search Plugin y Joli Table Of Contents – Table of Contents with Gutenberg Block & Shortcode y Justified Gallery y Kikote – Location Picker at Checkout & Google Address AutoFill Plugin for WooCommerce y Knowledge Base documentation & wiki plugin – BasePress Docs y Lightbox & Modal Popup WordPress Plugin – FooBox y Logo Showcase – Responsive Logo Carousel, Logo Slider & Logo Grid y MapGeo – Interactive Geo Maps y Mapster WP Maps y Marijuana Age Verify y Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits y Menu Image, Icons made easy y Message Filter for Contact Form 7 y Meta Field Block – Display Custom Fields for ACF, Meta Box and More y Music Player for Elementor – Audio Player & Podcast Player y Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar y Ocean Extra y Open User Map – Interactive Leaflet Maps y Pay For Post with WooCommerce y Payment Gateway for ACBA BANK y PDF Poster – Let visitors read PDF’s without leaving the page y Place Order Without Payment for WooCommerce y Post List Designer – Category Post, Recent Post, Post List y Post Slider and Carousel Pro y Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider y Post SMTP – Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App y Post to Google My Business (Google Business Profile) y Premmerce Permalink Manager for WooCommerce y Premmerce Product Filter for WooCommerce y Primary Addon for Elementor y Product Layouts for WooCommerce y Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player y Radio Station by netmix® – Manage and play your Show Schedule in WordPress! y Remove Add to Cart WooCommerce y Restaurant & Cafe Addon for Elementor y Restrict – membership, site, content and user access restrictions for WordPress y RevivePress – Keep your Old Content Evergreen y Role Based Pricing for Woo by Meow Crew y Secure Gateway for Authorize.net and WooCommerce by Pledged Plugins y Security Ninja – WordPress Security & Firewall y Send Users Email – Email Subscribers, Email Marketing Newsletter y Share This Image y Shortcodes Ultimate – Content Elements y SimpLy Gallery y Smart phone field for Gravity Forms y Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews y Spotlight Social Photo Feed y StoreCustomizer – A plugin to Customize all WooCommerce Pages y StreamWeasels Twitch Integration y TablePress – Tables in WordPress made easy y Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent y Team Members Showcase y Team Members – Team Showcase, Team Slider, Grid, Table & Staff Directory y Text To Speech TTS Accessibility y Thank You Page for WooCommerce y TreePress – Easy Family Trees & Ancestor Profiles y TrueAna – True Analytics Dashboard y Ultimeter – the Ultimate Progress and Goals Meter y Unlimited Elements for Elementor y URL Shortify – Simple and Easy URL Shortener y Webheadcoder Multi-Step Forms for Contact Form 7 y Widgets on Pages y WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto y WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms y WP Coupons and Deals – WordPress Coupon Plugin y WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps y WP Encryption: One Click SSL / HTTPS & Free SSL certificate, HTTPS redirect y WP fail2ban – Advanced Security y WP Meta and Date Remover y WP Mobile Menu – The Mobile-Friendly Responsive Menu y WP Notification Bell y WP Page Templates y WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars y WP Top News — Build a Complete News Portal in WordPress y WPBITS Addons For Elementor Page Builder y WPIDE – File Manager & Code Editor y XT Floating Cart for WooCommerce y XT Quick View for WooCommerce y XT Variation Swatches for WooCommerce y YASR – Yet Another Star Rating Plugin for WordPress a Mi stack y tendrás a mano lo que salga de lo que usas.

[C] Cronología

Qué ha pasado

1. 30 abr. 2026 T0

   Se publica la vulnerabilidad

   según Wordfence Intelligence (Defiant)

2. 16 oct. 2026 T+169d

   Hay una versión corregida

   según Wordfence Intelligence (Defiant)

[D] Trazabilidad

Fuentes

• Wordfence Intelligence (Defiant) d694491c-c0f5-4418-805a-db792ea4f712 · consultada el 14 nov. 2026