VulnCrest
Search
Create account
Report an incident
Radar sectionsCritical
Check my site

Database

Critical WordPress vulnerabilities (page 1307)

Vulnerabilities rated Critical (CVSS 9.0 or higher by the CNA). Most need no account and lead to full site takeover.

Signals
Software

41,567 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

Critical WordPress vulnerabilities (page 1307)
SeverityVulnerabilityCVEInstallsPublished
Medium4.8Cross-Site Scripting via flickrRSS_id
flickrRSS≤5.3.1No patch available
CVE-2018-6468—
Medium4.3Cross-Site Request Forgery
flickrRSS≤5.3.1No patch available
CVE-2018-6467—
High7.5Denial of Service
WordPress<5.0Update to 5.0
CVE-2018-6389—
Medium6.1Cross-Site Scripting
Property Hive<1.4.15Update to 1.4.15
CVE-2018-6465—
Critical9.8SQL Injection
Image Slider≤1.1.95Update to 1.1.97
——
Critical9.8SQL Injection
User Control≤2.1.0No patch available
——
Medium6.1Cross-Site Scripting
Splashing Images<2.1.1Update to 2.1.1
CVE-2018-6194—
High8.8PHP Object Injection
Splashing Images≤2.1Update to 2.1.1
CVE-2018-6195—
High7.5Unauthenticated Subscriber Download
Email Subscribers & Newsletters by Icegram Express – Email Marketing, Post Notifications & WooCommerce Marekting Automation for WordPress≤3.4.7Update to 3.4.8
CVE-2018-6015—
Medium5.5Stored Cross-Site Scripting
Coming Soon Page – Responsive Coming Soon & Maintenance Mode<1.1.19Update to 1.1.19
CVE-2018-5657—
Medium6.1Cross-Site Scripting
Soundy Background Music≤3.9No patch available
CVE-2018-6002—
Medium6.1Cross-Site Scripting
Soundy Audio Playlist≤4.6No patch available
CVE-2018-6001—
Medium5.4Stored Cross-Site Scripting
BuddyBoss Media≤3.2.3Update to 3.2.4
CVE-2018-21014—
Medium6.4Authenticated Cross-Site Scripting
WordPress≤4.9.1Update to 3.7.25 or 3.8.25 or 3.9.23 or 4.0.22 or 4.1.22 or 4.2.19 or 4.3.15 or 4.4.14 or 4.5.13 or 4.6.10 or 4.7.9 or 4.8.5 or 4.9.2
CVE-2018-5776—
Medium6.1Cross-Site Scripting
Perfect Images: Regenerate Thumbnails, Image Sizes, WebP & AVIF<5.2.3Update to 5.2.3
CVE-2018-20983—
Medium5.5Cross-Site Scripting via coming-soon_sub_title parameter
Coming Soon Page – Responsive Coming Soon & Maintenance Mode≤1.1.18Update to 1.1.19
CVE-2018-5660—
Medium5.5Cross-Site Scripting via logo_height parameter
Coming Soon Page – Responsive Coming Soon & Maintenance Mode≤1.1.18Update to 1.1.19
CVE-2018-5665—
High8.8Cross-Site Request Forgery
Booking calendar, Appointment Booking System<2.1.8Update to 2.1.8
CVE-2018-5673—
Medium5.5Cross-Site Scripting via bg_color parameter
Coming Soon Page – Responsive Coming Soon & Maintenance Mode≤1.1.18Update to 1.1.19
CVE-2018-5666—
Medium5.5Cross-Site Scripting via button_text_link parameter
Coming Soon Page – Responsive Coming Soon & Maintenance Mode≤1.1.18Update to 1.1.19
CVE-2018-5663—
Medium6.1Cross-Site Scripting
Weblizar Pin Feeds<1.1.2Update to 1.1.2
CVE-2018-5654—
Medium5.5Stored Cross-Site Scripting
Read and Understood≤2.1Update to 2.2
CVE-2018-5667—
Medium5.5Cross-Site Scripting via logo_width parameter
Coming Soon Page – Responsive Coming Soon & Maintenance Mode≤1.1.18Update to 1.1.19
CVE-2018-5661—
High8.8Cross-Site Request Forgery
Coming Soon Page – Responsive Coming Soon & Maintenance Mode≤1.1.18Update to 1.1.19
CVE-2018-5658—
Medium5.5Cross-Site Scripting via counter_title parameter
Coming Soon Page – Responsive Coming Soon & Maintenance Mode≤1.1.18Update to 1.1.19
CVE-2018-5662—
Medium6.1Reflected Cross-Site Scripting
Weblizar Pin Feeds<1.1.2Update to 1.1.2
CVE-2018-5653—
Medium6.4Stored Cross-Site Scripting
Markdown Editor (Formerly Dark Mode)<1.7Update to 1.7
CVE-2018-5652—
Medium5.5Cross-Site Scripting via social_icon_1 parameter
Coming Soon Page – Responsive Coming Soon & Maintenance Mode≤1.1.18Update to 1.1.19
CVE-2018-5664—
Medium5.5Stored Cross-Site Scripting
Coming Soon Page – Responsive Coming Soon & Maintenance Mode<1.1.19Update to 1.1.19
CVE-2018-5659—
Medium4.8Cross-Site Scripting
Markdown Editor (Formerly Dark Mode)<1.7Update to 1.7
CVE-2018-5651—

Search VulnCrest Radar

Jump to

Are you sure?