Known vulnerabilities in WPtouch – Make your WordPress Website Mobile-Friendly

With just a few clicks, make your WordPress website mobile-friendly (iPhone, Android, and more). Recommended by Google, it will instantly enable a mob …

10Reported vulnerabilities

9.9Highest CVSS score

4.3.62Latest version

50,000+Active installs

What to do now

Update WPtouch – Make your WordPress Website Mobile-Friendly to 4.3.61 or later. 10 of these have a fixed version available. Updating resolves them.

Plugin last updated: December 4, 2025 / Tested up to WordPress: 6.9.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2022-3416	High 7.2	17.3%	Before 4.3.45	`4.3.45`	January 9, 2023
CVE-2022-3417	High 8.8	0.9%	Before 4.3.45	`4.3.45`	January 9, 2023
WF-ee5acf1d-e405-4aa6-8355-b5aebbbb1d1d	Critical 9.9	—	3.4.2 and earlier	`3.4.3`	August 1, 2014
CVE-2011-4803	High 7.3	2.6%	Before 1.9.8.1	`1.9.8.1`	October 27, 2011
WF-26e7c3fa-7ae7-4343-8494-2955cb755c6d	High 7.2	—	Before 3.7.6	`3.7.6`	April 20, 2015
CVE-2010-4779	Medium 6.1	1.9%	Before 1.9.20	`1.9.20`	December 1, 2010
WF-3a0d85e8-33fa-46eb-b71b-d93715bc373e	Medium 6.1	—	4.3.42 and earlier	`4.3.44`	August 25, 2022
WF-dac38b2e-4d38-4b16-b6a1-ed3c0561e7c2	Medium 6.1	—	Before 1.9.30	`1.9.30`	August 1, 2014
CVE-2025-49318	Medium 4.4	0.2%	4.3.60 and earlier	`4.3.61`	June 5, 2025
WF-a0de486b-1ad9-440f-b2f8-b0a2a9af4d0f	Medium 4.3	—	Before 3.7	`3.7`	January 29, 2015

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.