Database
Critical WordPress vulnerabilities (page 1355)
Vulnerabilities rated Critical (CVSS 9.0 or higher by the CNA). Most need no account and lead to full site takeover.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium6.1Cross-Site Scripting
Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More
≤0.4.4Update to 0.4.5
- Critical9.8SQL Injection
Global Flash Gallery
≤0.15.1Update to 0.15.2
- Medium6.1Cross-Site Scripting
Events Manager Pro
<2.2.9Update to 2.2.9
- Critical9.8Arbitrary File Upload
Uploader
≤1.0.4No patch available
- Critical9.9Authenticated SQL Injection
BSK PDF Manager
<1.5Update to 1.5
- High8.8Cross-Site Request Forgery
WP Activity Log
<1.2.5Update to 1.2.5
- Medium6.1Cross-Site Scripting
XEN Carousel
≤0.12.2No patch available
- Critical9.8SQL Injection
myftp-ftp-like-plugin-for-wordpress
≤1.1No patch available
- Critical9.1Path Disclosure and Denial of Service
Count per Day
≤3.2.3Update to 3.2.4
- Medium6.1Multiple Cross-Site Scripting
Pie Register – User Registration, Profiles & Content Restriction
≤1.30Update to 1.31
- Medium4.7Cross-Site Request Forgery
Simple Shopping Cart
<3.6Update to 3.6
- Medium6.1Cross-Site Request Forgery to Cross-Site Scripting
Dropdown Menu Widget
≤1.9.7No patch available
- Critical9.8SQL Injections
WP Symposium
≤12.11Update to 12.12
- Critical9.8Remote File Inclusion
WP-Table
≤1.43Update to 1.44
- Medium6.1Reflected Cross-Site Scripting
DZS Video Gallery
<7.95Update to 7.95
- Medium6.1Cross-Site Scripting
WP-Table Reloaded
≤1.9.3Update to 1.9.4
- High7.5Local File Inclusion
WP AmASIN – The Amazon Affiliate Shop
≤0.9.6Update to 0.9.7
- Medium6.1Reflected Cross-Site Scripting
WPCB
≤2.4.8No patch available
- Medium6.1Cross-Site Scripting
Events Manager – Calendar, Bookings, Tickets, Appointments and more!
<5.3.9Update to 5.3.9
- Medium6.1Cross-Site Scripting
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio
≤2.71Update to 2.72
- Medium6.1Multiple Cross-Site Scripting
Events Manager – Calendar, Bookings, Tickets, Appointments and more!
≤5.5.1Update to 5.5.2
- Medium6.1Cross-Site Scripting
Count per Day
≤3.1Update to 3.1.1
- Critical9.8Remote Code Execution
WP-Filebase
≤0.3.0.03Update to 0.3.0.04
- Critical9.8SQL Injection
WP eCommerce
≤3.8.9Update to 3.8.9.1
- Medium5.3Reflected Cross-Site Scripting
Verification Code for Comments
≤2.1.0No patch available
- Medium6.1Cross-Site Scripting
Yoast Duplicate Post
≤2.6Update to 3.0
- Medium4.3Cross-Site Request Forgery
WordPress Related Posts
<2.7.2Update to 2.7.2
- Critical9.8Unrestricted File Upload
gravity-file-ajax-upload-free
≤1.1No patch available
- High8.8SQL Injection
Mingle Forum
≤1.0.32.1Update to 1.0.33
- Medium6.1Reflected Cross-Site Scripting
Platinum SEO
≤1.3.7Update to 1.3.8