VulnCrest
Search
Create account
Report an incident
Radar sectionsCritical
Check my site

Database

Critical WordPress vulnerabilities (page 1323)

Vulnerabilities rated Critical (CVSS 9.0 or higher by the CNA). Most need no account and lead to full site takeover.

Signals
Software

41,567 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

Critical WordPress vulnerabilities (page 1323)
SeverityVulnerabilityCVEInstallsPublished
Medium6.5Denial of Service
WordPress<4.6Update to 4.6
CVE-2016-6896—
Medium6.1Multipurpose WordPress Theme (All Versions) - Reflected Cross-Site Scripting
Akal - Multipurpose WordPress Themeall versionsNo patch available
CVE-2016-10957—
Medium5.5Cross-Site Scripting
CampTix Event Ticketing<1.5Update to 1.5
CVE-2016-10763—
Medium4.3Authorization Bypass
WordPress<4.6Update to 4.6
CVE-2016-10148—
High8.8Cross-Site Request Forgery
WordPress<4.6Update to 4.6
CVE-2016-6897—
Critical9.8Local File Inclusion
Ajax Load More – Infinite Scroll, Load More, & Lazy Load<2.11.2Update to 2.11.2
——
High8.8Cross-Site Request Forgery
Photo Gallery by Supsystic – Image Gallery, Masonry, Albums & Lightbox<1.8.6Update to 1.8.6
CVE-2016-10918—
Medium6.1Cross-Site Scripting
LoginWP (Formerly Peter's Login Redirect)<2.9.1Update to 2.9.1
CVE-2016-10925—
High8.8Cross-Site Request Forgery
Add From Server<3.3.2Update to 3.3.2
CVE-2016-10914—
Critical9.8Unauthenticated PHP Object injection
Ecwid by Lightspeed Ecommerce Shopping Cart≤4.4.3Update to 4.4.4
——
Medium6.1Reflected Cross-Site Scripting
FormBuilder≤1.05Update to 1.06
CVE-2016-10910—
High8.8Cross-Site Request Forgery
WP Database Backup – Unlimited Database & Files Backup by Backup for WP<4.3.3Update to 4.3.3
CVE-2016-10874—
Medium6.1Cross-Site Scripting
Activity Log – Monitor User and Agent Changes<2.3.3Update to 2.3.3
CVE-2016-10891—
Medium6.1Reflected Cross-Site Scripting
Activity Log – Monitor User and Agent Changes<2.3.2Update to 2.3.3
CVE-2016-10890—
Medium6.1Cross-Site Scripting
WP Database Backup – Unlimited Database & Files Backup by Backup for WP<4.3.3Update to 4.3.3
CVE-2016-10873—
High8.8Remote Code Execution
wsecure lite<2.4Update to 2.4
CVE-2016-10960—
Medium5.4Authenticated Stored Cross-Site Scripting
Yoast SEO – Advanced SEO with real-time guidance and built-in AI<3.4.1Update to 3.4.1
CVE-2021-24153—
Medium6.1Cross-Site Scripting
Uji Countdown≤2.0.6Update to 2.0.7
CVE-2016-10900—
Critical9.8Unauthenticated Arbitrary File Upload
Estatik Real Estate Plugin≤2.3.0Update to 2.3.1
CVE-2016-10958—
Medium6.1Unauthenticated Stored Cross-Site Scripting
3CX Free Live Chat, Calls & Messaging≤6.2.03Update to 6.2.04
CVE-2016-10879—
Critical9.8Arbitrary File Upload
Adblock Blocker0.0.1 – 0.0.1No patch available
——
High8.8Cross-Site Request Forgery to Arbitrary File Upload
Estatik Real Estate Plugin≤2.3.0Update to 2.3.1
CVE-2016-10959—
Medium6.1Cross-Site Scripting
WP Database Backup – Unlimited Database & Files Backup by Backup for WP<4.3.1Update to 4.3.1
CVE-2016-10875—
Medium6.1Cross-Site Scripting
WP-Polls≤2.73Update to 2.73.1
CVE-2016-10936—
Medium6.1Cross-Site Scripting
WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings<3.1.2Update to 3.1.2
CVE-2016-10878—
Medium5.3Unauthenticated Settings Change
Total Security≤3.4.0Update to 3.4.1
CVE-2016-10899—
Medium6.1Cross-Site Scripting
Total Security<3.4.1Update to 3.4.1
CVE-2016-10898—
Medium6.1Reflected Cross-Site Scripting
WP Mail<1.2Update to 1.2
CVE-2017-5942—
Medium6.1Cross-Site Scripting
Nofollow Links≤1.0.10Update to 1.0.11
CVE-2016-4833—
Medium6.1Cross-Site Scripting
Icegram Engage – Popups, Welcome Bars, Optins, Slide-Ins & Lead Generation for WordPress<1.9.19Update to 1.9.19
CVE-2016-10963—

Search VulnCrest Radar

Jump to

Are you sure?