VulnCrest
Search
Create account
Report an incident
Radar sectionsCritical
Check my site

Database

Critical WordPress vulnerabilities (page 1348)

Vulnerabilities rated Critical (CVSS 9.0 or higher by the CNA). Most need no account and lead to full site takeover.

Signals
Software

41,564 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

Critical WordPress vulnerabilities (page 1348)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Cross-Site Scripting
SlimStat Analytics – Real-Time Stats, Heatmaps & Ecommerce<3.9.3Update to 3.9.3
CVE-2015-1204—
Medium6.1Cross-Site Scripting
Relevanssi – A Better Search<3.3.8Update to 3.3.8
CVE-2014-9443—
Medium6.1Cross-Site Request Forgery to Cross-Site Scripting
simpleflickr≤3.0.3No patch available
CVE-2014-9396—
High8.8Cross-Site Request Forgery
Banner Effect Header<1.2.8Update to 1.2.8
CVE-2015-0920—
Medium6.5WordPress Ecommerce < 1.5.4 - Directory Traversal to Arbitrary File Disclosure
Cart66 Lite :: WordPress Ecommerce<1.5.4Update to 1.5.4
CVE-2014-9461—
Critical9.8Arbitrary File Upload
cformsII<14.8Update to 14.8
CVE-2014-9473—
High7.5Arbitrary File Read
Sell Downloads≤1.0.1Update to 1.0.2
CVE-2014-9511—
Medium6.1Cross-Site Scripting
Frontend Uploader<0.9.4Update to 0.9.4
CVE-2014-9444—
High8.8SQL Injection
Cart66 Lite :: WordPress Ecommerce<1.5.4Update to 1.5.4
CVE-2014-9442—
Medium6.1Reflected Cross-Site Scripting
wordpress-backup-to-dropbox<4.1Update to 4.1
CVE-2014-9310—
High8.8Cross-Site Request Forgery
gSlideShow≤0.1No patch available
CVE-2014-9391—
High8.8Cross-Site Request Forgery leading to Cross-Site Scripting
wp-limit-posts-automatically≤0.7No patch available
CVE-2014-9401—
High8.8Cross-Site Request Forgery to Cross-Site Scripting
Post to Twitter≤0.7No patch available
CVE-2014-9393—
High8.8Cross-Site Request Forgery to Stored Cross-Site Scripting
PWGRandom≤1.11No patch available
CVE-2014-9394—
High8.8Cross-Site Request Forgery to Cross-Site Scripting
wp-unique-article-header-image≤1.0No patch available
CVE-2014-9400—
Medium6.1Cross-Site Request Forgery
PictoBrowser≤0.3.1No patch available
CVE-2014-9392—
High7.2Cross-Site Scripting
Slider Revolution≤4.2.2Update to 4.2.3
CVE-2015-5151—
High7.5Directory Traversal
Slider Revolution≤4.1.4Update to 4.2
CVE-2014-9734—
Medium5.4Cross-Site Scripting
W3 Total Cache≤0.9.4Update to 0.9.4.1
CVE-2014-8724—
High7.5Directory Traversal
DB Backup<5.0Update to 5.0
CVE-2014-9119—
High8.8Cross-Site Request Forgery and Stored Cross-Site Scripting
Sliding Social Icons≤1.61No patch available
CVE-2014-9437—
Medium6.1Cross-Site Scripting
iTwitter≤0.04No patch available
CVE-2014-9336—
Critical9.8Remote Code Execution
Download Manager<2.7.5Update to 2.7.5
——
Medium6.1Cross-Site Scripting
Mikiurl Wordpress Eklentisi≤2.0No patch available
CVE-2014-9337—
Medium6.1Cross-Site Request Forgery
DandyID Services≤1.5.9No patch available
CVE-2014-9335—
High8.8Multiple Cross-Site Request Forgery
spnbabble≤1.4.1No patch available
CVE-2014-9339—
Medium6.1Cross-Site Scripting
wpCommentTwit≤0.5No patch available
CVE-2014-9340—
Medium6.1Cross-Site Request Forgery
Timed Popup WordPress Plugin≤1.4No patch available
CVE-2014-9525—
High7.2Cross-Site Scripting
Simple visitor stat≤1.0No patch available
CVE-2014-9453—
Medium6.1Cross-Site Request Forgery to Cross-Site Scripting
WP-ViperGB≤1.3.10Update to 1.3.11
CVE-2014-9460—

Search VulnCrest Radar

Jump to

Are you sure?