VulnCrest
Search
Create account
Report an incident
Radar sectionsCritical
Check my site

Database

Critical WordPress vulnerabilities (page 1356)

Vulnerabilities rated Critical (CVSS 9.0 or higher by the CNA). Most need no account and lead to full site takeover.

Signals
Software

41,564 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

Critical WordPress vulnerabilities (page 1356)
SeverityVulnerabilityCVEInstallsPublished
Critical9.8SQL Injection
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio≤0.59Update to 0.60
——
Critical9.8Local/Remote File Inclusion
SlideDeck 2 Lite Responsive Content Slider≤2.3.3Update to 2.3.5
CVE-2013-7483—
Medium6.1Reflected Cross-Site Scripting
WP App Maker≤1.0.16.4No patch available
CVE-2014-4578—
Medium6.1Cross-Site Scripting
WP Construction Mode≤1.8Update to 1.9
CVE-2014-4854—
Medium6.1Cross-Site Scripting
bib2html≤0.9.3No patch available
CVE-2014-3870—
Medium5.3Cross-Site Scripting
Redirection<2.2.10Update to 2.2.10
CVE-2011-4562—
Medium6.1Cross-Site scripting
Hot Files: File Sharing and Download Manager Plugin≤1.0.0No patch available
CVE-2014-4588—
High8.8Cross-Site Request Forgery
Disable Comments<1.0.4Update to 1.0.4
CVE-2014-2550—
Medium6.1Unauthenticated Stored Cross-Site Scripting
Mail Subscribe List≤2.0.9Update to 2.1
CVE-2013-10026—
Medium6.1Cross-Site Scripting
Count per Day≤3.1.1Update to 3.2
CVE-2012-3434—
Medium6.1Reflected Cross-Site Scripting
Redirection<2.2.9Update to 2.2.9
CVE-2011-5329—
Medium6.1Cross-Site Scripting via Search Parameter
All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)≤2.0.3Update to 2.0.3.1
CVE-2013-5988—
High8.8Cross-Site Request Forgery
Xhanch – My Twitter≤2.7.6Update to 2.7.7
CVE-2013-3253—
High7.3Authentication Bypass
Portable phpMyAdmin≤1.3.0Update to 1.3.1
CVE-2012-5469—
Medium6.5Cross-Site Request Forgery
wp-html-sitemap≤1.2No patch available
CVE-2014-2675—
Medium6.3Cross-Site Request Forgery
WordPress Content Slide≤1.4.2No patch available
CVE-2013-2708—
Medium6.1Open Redirection
WP Symposium≤13.04Update to 13.05
CVE-2013-2694—
Critical9.9Arbitrary File Upload
WPtouch – Make your WordPress Website Mobile-Friendly≤3.4.2Update to 3.4.3
——
High8.1Unauthenticated Local File Inclusion
Tinymce Thumbnail Gallery≤1.0.0Update to 1.1.0
CVE-2012-20002—
Critical9.8Cross-Site Request Forgery to SQL Injection
WordPress Automatic Plugin≤2.0.3Update to 2.0.4
——
High8.8Remote Code Execution
WP Super Cache≤1.2Update to 1.3
CVE-2013-2009—
High7.2Stored Cross-Site Scripting
PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links<1.6.3Update to 1.6.3
CVE-2013-1636—
Medium6.1Reflected Cross Site Scripting
WHOIS≤1.4.2.2Update to 1.4.2.3
CVE-2011-5194—
High8.8SQL Injection
Mingle Forum<1.0.33Update to 1.0.33
CVE-2012-5328—
Medium4.3Cross-Site Request Forgery
Calendar≤1.3.2Update to 1.3.3
CVE-2013-2698—
Medium6.1Cross-Site Scripting
BulletProof Security≤.48.9Update to .49
CVE-2013-3487—
Medium6.1Cross-Site Scripting
Count per Day≤3.1Update to 3.1.1
CVE-2012-0895—
Critical9.8SQL Injection
WP eCommerce≤3.8.9Update to 3.8.9.1
——
Medium6.1Reflected Cross-Site Scripting
WPCB≤2.4.8No patch available
CVE-2014-4581—
High7.5Local File Inclusion
WP AmASIN – The Amazon Affiliate Shop≤0.9.6Update to 0.9.7
CVE-2014-4577—

Search VulnCrest Radar

Jump to

Are you sure?