Database
Critical WordPress vulnerabilities (page 1319)
Vulnerabilities rated Critical (CVSS 9.0 or higher by the CNA). Most need no account and lead to full site takeover.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
| Severity | Vulnerability | CVE | Installs | Published |
|---|---|---|---|---|
| Medium6.1 | Reflected Cross-Site Scripting | CVE-2017-18591 | — | |
| High8.8 | Cross-Site Request Forgery | CVE-2017-18521 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2017-18520 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2017-6103 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2017-18582 | — | |
| Critical9.8 | Arbitrary File Upload | CVE-2015-1000001 | — | |
| High7.2 | SQL Injection via id parameter | CVE-2017-6573 | — | |
| High7.2 | SQL Injection via id parameter | CVE-2017-6571 | — | |
| Critical9.8 | SQL Injection via list_id parameter | CVE-2017-6095 | — | |
| High7.2 | SQL Injection via member_id parameter | CVE-2017-6575 | — | |
| High7.2 | SQL Injection via camp_id parameter | CVE-2017-6097 | — | |
| High7.2 | SQL Injection via filter_list parameter | CVE-2017-6096 | — | |
| High7.2 | SQL Injection via id parameter | CVE-2017-6570 | — | |
| High7.2 | SQL Injection via filter_list parameter | CVE-2017-6572 | — | |
| High7.2 | SQL Injection via list_id parameter | CVE-2017-6577 | — | |
| High7.2 | SQL Injection via list_id parameter | CVE-2017-6098 | — | |
| Medium6.1 | Reflected Cross-Site Scripting | CVE-2017-18581 | — | |
| Medium6.1 | Authenticated (Admin+) Stored Cross-Site Scripting | CVE-2017-20108 | — | |
| Medium6.4 | Cross-Site Scripting | CVE-2017-18579 | — | |
| High8.1 | Authenticated Directory Traversal leading to Local File Inclusion | CVE-2017-18585 | — | |
| High7.5 | Directory Traversal | CVE-2017-20287 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2017-18541 | — | |
| Medium6.1 | Reflected Cross-Site Scripting | CVE-2017-9288 | — | |
| Critical9.8 | SQL Injection | CVE-2017-18548 | — | |
| High7.3 | Arbitrary Page Modification WordPress≤4.7.1Update to 3.7.18 or 3.8.18 or 3.9.16 or 4.0.15 or 4.1.15 or 4.2.12 or 4.3.8 or 4.4.7 or 4.5.6 or 4.6.3 or 4.7.2 | CVE-2017-1001000 | — | |
| Medium6.1 | Cross-Site Scripting WordPress≤4.7.1Update to 3.7.18 or 3.8.18 or 3.9.16 or 4.0.15 or 4.1.15 or 4.2.12 or 4.3.8 or 4.4.7 or 4.5.6 or 4.6.3 or 4.7.2 | CVE-2017-5612 | — | |
| High8.8 | Authenticated SQL Injection WordPress≤4.7.1Update to 3.7.18 or 3.8.18 or 3.9.16 or 4.0.15 or 4.1.15 or 4.2.12 or 4.3.8 or 4.4.7 or 4.5.6 or 4.6.3 or 4.7.2 | CVE-2017-5611 | — | |
| Medium4.3 | Authorization Bypass to Term Disclosure WordPress≤4.7.1Update to 3.7.18 or 3.8.18 or 3.9.16 or 4.0.15 or 4.1.15 or 4.2.12 or 4.3.8 or 4.4.7 or 4.5.6 or 4.6.3 or 4.7.2 | CVE-2017-5610 | — | |
| Critical9.8 | Unauthenticated PHP Object Injection | CVE-2016-15004 | — | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting | CVE-2017-20177 | — |
- Medium6.1Reflected Cross-Site Scripting
GD Rating System
<2.1Update to 2.1
- High8.8Cross-Site Request Forgery
Democracy Poll
≤5.3.6Update to 5.4
- Medium6.1Cross-Site Scripting
Democracy Poll
<5.4Update to 5.4
- Medium6.1Cross-Site Scripting
Wordpress plugin AnyVar
≤0.1.1No patch available
- Medium6.1Cross-Site Scripting
Time Sheets
<1.5.2Update to 1.5.2
- Critical9.8Arbitrary File Upload
Fast Image Adder
≤1.1Update to 1.2
- High7.2SQL Injection via id parameter
Mail Masta
≤1.0No patch available
- High7.2SQL Injection via id parameter
Mail Masta
≤1.0No patch available
- Critical9.8SQL Injection via list_id parameter
Mail Masta
≤1.0No patch available
- High7.2SQL Injection via member_id parameter
Mail Masta
≤1.0No patch available
- High7.2SQL Injection via camp_id parameter
Mail Masta
≤1.0No patch available
- High7.2SQL Injection via filter_list parameter
Mail Masta
≤1.0No patch available
- High7.2SQL Injection via id parameter
Mail Masta
≤1.0No patch available
- High7.2SQL Injection via filter_list parameter
Mail Masta
≤1.0No patch available
- High7.2SQL Injection via list_id parameter
Mail Masta
≤1.0No patch available
- High7.2SQL Injection via list_id parameter
Mail Masta
≤1.0No patch available
- Medium6.1Reflected Cross-Site Scripting
Time Sheets
<1.5.0Update to 1.5.0
- Medium6.1Authenticated (Admin+) Stored Cross-Site Scripting
Easy Table
≤1.6Update to 1.7
- Medium6.4Cross-Site Scripting
Corner Ad
<1.0.8Update to 1.0.8
- High8.1Authenticated Directory Traversal leading to Local File Inclusion
Posts in Page
<1.3.0Update to 1.3.0
- High7.5Directory Traversal
Javo Spot - Multi Purpose Directory WordPress Theme
<3.0.0Update to 3.0.0
- Medium6.1Cross-Site Scripting
XO Security
<1.5.3Update to 1.5.3
- Medium6.1Reflected Cross-Site Scripting
Raygun
≤1.8.0Update to 1.8.1
- Critical9.8SQL Injection
Note Press
<0.1.2Update to 0.1.2
- High7.3Arbitrary Page Modification
WordPress
≤4.7.1Update to 3.7.18 or 3.8.18 or 3.9.16 or 4.0.15 or 4.1.15 or 4.2.12 or 4.3.8 or 4.4.7 or 4.5.6 or 4.6.3 or 4.7.2
- Medium6.1Cross-Site Scripting
WordPress
≤4.7.1Update to 3.7.18 or 3.8.18 or 3.9.16 or 4.0.15 or 4.1.15 or 4.2.12 or 4.3.8 or 4.4.7 or 4.5.6 or 4.6.3 or 4.7.2
- High8.8Authenticated SQL Injection
WordPress
≤4.7.1Update to 3.7.18 or 3.8.18 or 3.9.16 or 4.0.15 or 4.1.15 or 4.2.12 or 4.3.8 or 4.4.7 or 4.5.6 or 4.6.3 or 4.7.2
- Medium4.3Authorization Bypass to Term Disclosure
WordPress
≤4.7.1Update to 3.7.18 or 3.8.18 or 3.9.16 or 4.0.15 or 4.1.15 or 4.2.12 or 4.3.8 or 4.4.7 or 4.5.6 or 4.6.3 or 4.7.2
- Critical9.8Unauthenticated PHP Object Injection
InfiniteWP Client
<1.6.1.1Update to 1.6.1.1
- High7.2Unauthenticated Stored Cross-Site Scripting
WangGuard
<1.8.0Update to 1.8.0