Database
Critical WordPress vulnerabilities (page 1273)
Vulnerabilities rated Critical (CVSS 9.0 or higher by the CNA). Most need no account and lead to full site takeover.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium6.1Reflected Cross-Site Scripting
WP Quick FrontEnd Editor – WordPress Plugin
≤5.5No patch available
- Medium6.4Authenticated (Contributor+) Stored Cross Site Scripting
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More
<2.10.3Update to 2.10.3
- Critical9.8Unauthenticated Arbitrary Object Deserialization leading to Remote Code Execution
Five Star Restaurant Menu and Food Ordering
<2.2.1Update to 2.2.1
- Medium5.5Stored Cross-Site Scripting via 'name'
Custom Global Variables
≤1.1.0Update to 1.1.1
- Critical9.8Unauthenticated Remote Code Execution
e-signature
<1.5.6.8Update to 1.5.6.8
- Critical9.1PHP Object Injection
Modal Survey - WordPress Poll, Survey & Quiz Plugin
≤2.0.1.8Update to 2.0.1.8.2
- Medium5.5Cross-Site Scripting
WP24 Domain Check
≤1.6.2Update to 1.6.3
- High7.5Broken Password Mechanism
Kadence Security – Password, Two Factor Authentication, and Brute Force Protection
≤7.6.1Update to 7.7.0
- High8.0SQL Injection via WP_Query
WordPress
<5.8.3Update to 3.7.37 or 3.8.37 or 3.9.35 or 4.0.34 or 4.1.34 or 4.2.31 or 4.3.27 or 4.4.26 or 4.5.25 or 4.6.22 or 4.7.22 or 4.8.18 or 4.9.19 or 5.0.15 or 5.1.12 or 5.2.14 or 5.3.11 or 5.4.9 or 5.5.8 or 5.6.7 or 5.7.5 or 5.8.3
- High7.2Unauthenticated Stored Cross-Site Scripting
Database for Contact Form 7, WPforms, Elementor forms
≤1.1.6Update to 1.1.7
- Medium4.8Admin+ Stored Cross-Site Scripting
WP-Paginate
≤2.1.3Update to 2.1.4
- High7.2Authenticated SQL Injection
Contact Form Submissions
≤1.7Update to 1.7.1
- Critical9.8Insecure Deserialization
Newsletter Manager
≤1.5.1No patch available
- Medium5.5Authenticated Stored Cross-Site Scripting via IP setting
LiteSpeed Cache
≤3.6Update to 3.6.1
- Medium5.5Cross-Site Scripting
WP-PostRatings
≤1.86Update to 1.86.1
- Medium6.1Cross-Site Scripting
All-In-One Security (AIOS) – Security and Firewall
<4.4.6Update to 4.4.6
- High8.2Cross-Site Request Forgery and Cross-Site Scripting
Site Offline Or Coming Soon Or Maintenance Mode
≤1.4.2Update to 1.4.4
- High7.5File Read / Directory Traversal
W3 Total Cache
0.9.2.6 – 0.9.3Update to 0.9.4
- Medium5.4Cross-Site Scripting
Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More
<1.8.3.3Update to 1.8.3.3
- Critical9.8WordPress Directory & Listing Theme < 2.6.1 - Arbitrary Plugin Installation, Activation and Deactivation
ListingPro - WordPress Directory & Listing Theme
<2.6.1Update to 2.6.1
- Medium5.3WordPress Directory & Listing Theme < 2.6.1 - Sensitive Information Disclosure
ListingPro - WordPress Directory & Listing Theme
<2.6.1Update to 2.6.1
- High8.8Cross-Site Request Forgery
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery
≤3.4.7Update to 3.5.0
- High8.8Cross-Site Request Forgery to Arbitrary File Upload
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery
≤3.4.7Update to 3.5.0
- High8.1Arbitrary File Upload via Bypass
Contact Form 7
<5.3.2Update to 5.3.2
- High7.5Unauthenticated Backup Download
Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid
≤1.14.9Update to 1.14.10
- Medium6.1Reflected Cross-Site Scripting
Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention
≤2.15.2Update to 2.17.4
- High7.3Login Rate Limiting Bypass
Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention
≤2.17.3Update to 2.17.4
- Medium6.1Reflected Cross-Site Scripting
directories
<1.3.46Update to 1.3.46
- Medium6.1Cross-Site Scripting via _drts_form_build_id, _t_ Parameters
directories
<1.3.46Update to 1.3.46
- Medium6.1Reflected Cross-Site Scripting via font-size
Page Builder: Pagelayer – Drag and Drop website builder
<1.3.5Update to 1.3.5