plugin
3 known security issues reported for the Hercules Core WordPress plugin. Most recent disclosed Oct 21, 2025.
Running Hercules Core on your site? Check whether your installed version is affected.
Scan your site freeThe Hercules Core plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application which can be used to...
The Hercules Core plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on a function in all versions up to, and including, 6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify the plugin's settings and access them...
The Hercules Core plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.4 via deserialization of untrusted input. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerab...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free