VulnCrest
Search
Create account
Report an incident
Radar sectionsCritical
Check my site

Database

Critical WordPress vulnerabilities (page 1351)

Vulnerabilities rated Critical (CVSS 9.0 or higher by the CNA). Most need no account and lead to full site takeover.

Signals
Software

41,564 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

Critical WordPress vulnerabilities (page 1351)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Cross-Site Scripting
AWP Classifieds<3.0Update to 3.0
CVE-2014-10012—
Medium6.1Cross-Site Scripting
Contact Form Clean and Simple<4.4.1Update to 4.4.1
CVE-2014-8955—
Medium6.1Reflected Cross-Site Scripting
Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder≤2.8.6Update to 2.8.7
CVE-2014-8815—
Medium6.1Reflected Cross-Site Scripting
WP Photo Album Plus≤5.4.17Update to 5.4.18
CVE-2014-8814—
High7.2Missing Authorization
Smart Forms – when you need more than just a contact form≤2.1.0Update to 2.1.1
CVE-2014-8803—
Critical9.83.11 - SQL Injection
Store Locator for WordPress with Google Maps – LotsOfLocales<3.12Update to 3.12
CVE-2014-8621—
Medium5.4Cross-Site Scripting
BulletProof Security<.51.1Update to .51.1
CVE-2014-7958—
High7.2Stored Cross-Site Scripting
Contact Bank – Contact Form Builder for WordPress≤2.0.69Update to 2.0.70
CVE-2014-8807—
Medium4.3Server-Side Request Forgery
BulletProof Security≤.51Update to .51.1
CVE-2014-8749—
Medium6.1JavaScript Injection
WP Support Plus Responsive Ticket System≤4.0Update to 4.1
CVE-2014-10391—
Medium6.12.6 - Cross-Site Scripting
post highlights2.0 – 2.6Update to 2.6.1
CVE-2014-8087—
High7.5Missing Authorization
Database Backup for WordPress≤2.2.4Update to 2.3.0
CVE-2014-10076—
Medium6.1Reflected Cross-Site Scripting
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor≤2.0.2Update to 2.0.3
CVE-2014-8492—
Medium5.3Sensitive Data Exposure
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio<4.25Update to 4.25
CVE-2014-8491—
Critical9.8SQL Injection
CP Multi View Events Calendar<1.0.2Update to 1.0.2
CVE-2014-8586—
Critical9.8Arbitrary File Upload
Creative Contact Form<1.0.0Update to 1.0.0
CVE-2014-8739—
Critical9.8SQL Injection
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin≤1.3.58Update to 1.3.59
——
Critical9.8SQL Injection
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin≤1.3.58Update to 1.3.59
——
Medium6.1Cross-Site Scripting
NEX-Forms Lite – WordPress Contact Form builder<3.4Update to 3.4
CVE-2014-7151—
High8.8Cross-Site Request Forgery
Featured Comments<1.2.5Update to 1.2.5
CVE-2014-10382—
High7.22.4 - Stored Cross-Site Scripting
Contact Form Integrated With Google Maps1.0 – 2.4Update to 2.5
CVE-2014-7238—
Medium6.1Reflected Cross-Site Scripting
Gallery Bank – WordPress Photo Gallery Plugin<3.0.70Update to 3.0.70
CVE-2014-8758—
High7.2Sensitive Information Disclosure
Backup, Restore and Migrate your sites with XCloner<3.1.2Update to 3.1.2
CVE-2014-8607—
High7.2Remote Code Execution
Backup, Restore and Migrate your sites with XCloner<3.1.2Update to 3.1.2
CVE-2014-8603—
High7.5Improper Access Control to Information Disclosure
Backup, Restore and Migrate your sites with XCloner≤3.1.1Update to 3.1.2
CVE-2014-8605—
Medium6.1Stored Cross-Site Scripting
Easy Contact Form Solution<1.7Update to 1.7
CVE-2014-7240—
High7.5Sensitive Information Disclosure
Backup, Restore and Migrate your sites with XCloner<3.1.2Update to 3.1.2
CVE-2014-8604—
Medium4.9Directory Traversal
Backup, Restore and Migrate your sites with XCloner<3.1.2Update to 3.1.2
CVE-2014-8606—
Medium6.1Cross-Site Scripting
cformsII≤13.1Update to 13.2
CVE-2014-10377—
High8.8Cross-Site Request Forgery
O2tweet≤0.0.4No patch available
CVE-2014-9338—
  • Medium6.1
    Cross-Site Scripting

    AWP Classifieds

    <3.0Update to 3.0

    CVE-2014-10012

  • Medium6.1
    Cross-Site Scripting

    Contact Form Clean and Simple

    <4.4.1Update to 4.4.1

    CVE-2014-8955

  • Medium6.1
    Reflected Cross-Site Scripting

    Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder

    ≤2.8.6Update to 2.8.7

    CVE-2014-8815

  • Medium6.1
    Reflected Cross-Site Scripting

    WP Photo Album Plus

    ≤5.4.17Update to 5.4.18

    CVE-2014-8814

  • High7.2
    Missing Authorization

    Smart Forms – when you need more than just a contact form

    ≤2.1.0Update to 2.1.1

    CVE-2014-8803

  • Critical9.8
    3.11 - SQL Injection

    Store Locator for WordPress with Google Maps – LotsOfLocales

    <3.12Update to 3.12

    CVE-2014-8621

  • Medium5.4
    Cross-Site Scripting

    BulletProof Security

    <.51.1Update to .51.1

    CVE-2014-7958

  • High7.2
    Stored Cross-Site Scripting

    Contact Bank – Contact Form Builder for WordPress

    ≤2.0.69Update to 2.0.70

    CVE-2014-8807

  • Medium4.3
    Server-Side Request Forgery

    BulletProof Security

    ≤.51Update to .51.1

    CVE-2014-8749

  • Medium6.1
    JavaScript Injection

    WP Support Plus Responsive Ticket System

    ≤4.0Update to 4.1

    CVE-2014-10391

  • Medium6.1
    2.6 - Cross-Site Scripting

    post highlights

    2.0 – 2.6Update to 2.6.1

    CVE-2014-8087

  • High7.5
    Missing Authorization

    Database Backup for WordPress

    ≤2.2.4Update to 2.3.0

    CVE-2014-10076

  • Medium6.1
    Reflected Cross-Site Scripting

    User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor

    ≤2.0.2Update to 2.0.3

    CVE-2014-8492

  • Medium5.3
    Sensitive Data Exposure

    Album and Image Gallery with Lightbox – Flagallery Photo Portfolio

    <4.25Update to 4.25

    CVE-2014-8491

  • Critical9.8
    SQL Injection

    CP Multi View Events Calendar

    <1.0.2Update to 1.0.2

    CVE-2014-8586

  • Critical9.8
    Arbitrary File Upload

    Creative Contact Form

    <1.0.0Update to 1.0.0

    CVE-2014-8739

  • Critical9.8
    SQL Injection

    Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin

    ≤1.3.58Update to 1.3.59

    4d3fd9b8-b9b7-4884-9188-6bf255058323

  • Critical9.8
    SQL Injection

    Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin

    ≤1.3.58Update to 1.3.59

    a9c7d539-2ea7-4f72-b0d2-6082e26918ce

  • Medium6.1
    Cross-Site Scripting

    NEX-Forms Lite – WordPress Contact Form builder

    <3.4Update to 3.4

    CVE-2014-7151

  • High8.8
    Cross-Site Request Forgery

    Featured Comments

    <1.2.5Update to 1.2.5

    CVE-2014-10382

  • High7.2
    2.4 - Stored Cross-Site Scripting

    Contact Form Integrated With Google Maps

    1.0 – 2.4Update to 2.5

    CVE-2014-7238

  • Medium6.1
    Reflected Cross-Site Scripting

    Gallery Bank – WordPress Photo Gallery Plugin

    <3.0.70Update to 3.0.70

    CVE-2014-8758

  • High7.2
    Sensitive Information Disclosure

    Backup, Restore and Migrate your sites with XCloner

    <3.1.2Update to 3.1.2

    CVE-2014-8607

  • High7.2
    Remote Code Execution

    Backup, Restore and Migrate your sites with XCloner

    <3.1.2Update to 3.1.2

    CVE-2014-8603

  • High7.5
    Improper Access Control to Information Disclosure

    Backup, Restore and Migrate your sites with XCloner

    ≤3.1.1Update to 3.1.2

    CVE-2014-8605

  • Medium6.1
    Stored Cross-Site Scripting

    Easy Contact Form Solution

    <1.7Update to 1.7

    CVE-2014-7240

  • High7.5
    Sensitive Information Disclosure

    Backup, Restore and Migrate your sites with XCloner

    <3.1.2Update to 3.1.2

    CVE-2014-8604

  • Medium4.9
    Directory Traversal

    Backup, Restore and Migrate your sites with XCloner

    <3.1.2Update to 3.1.2

    CVE-2014-8606

  • Medium6.1
    Cross-Site Scripting

    cformsII

    ≤13.1Update to 13.2

    CVE-2014-10377

  • High8.8
    Cross-Site Request Forgery

    O2tweet

    ≤0.0.4No patch available

    CVE-2014-9338

Search VulnCrest Radar

Jump to

Are you sure?