VulnCrest
Search
Create account
Report an incident
Radar sectionsCritical
Check my site

Database

Critical WordPress vulnerabilities (page 1370)

Vulnerabilities rated Critical (CVSS 9.0 or higher by the CNA). Most need no account and lead to full site takeover.

Signals
Software

41,564 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

Critical WordPress vulnerabilities (page 1370)
SeverityVulnerabilityCVEInstallsPublished
Critical9.8Remote File Inclusion
WP eCommerce Shop Styling<1.8Update to 1.8
CVE-2013-0724—
High7.2Multiple SQL Injections
MailPoet Newsletters (Previous)≤2.2Update to 2.2.1
CVE-2013-1408—
Critical9.8Multiple Vulnerabilities
Flash Newsall versionsNo patch available
——
Critical9.8SQL Injection
RLSWordPressSearchall versionsNo patch available
——
Critical9.8SQL Injection
WordPress Shout Box Widget≤2.0.2No patch available
——
Critical9.8Unauthenticated Remote File Inclusion
WordPress Gallery Plugin≤1.4No patch available
CVE-2012-4919—
Critical9.8SQL Injection
Portfolio Slideshow Proall versionsNo patch available
——
Medium6.1Cross-Site Scripting via playerID Parameter
audio-player<2.0.4.6Update to 2.0.4.6
CVE-2013-1464—
Critical9.8Arbitrary File Upload
Accordionall versionsNo patch available
——
Critical9.8Arbitrary File Upload
Power Zoomer≤1.2No patch available
——
Critical9.8SQL Injection
Dynamic Font Replacement DFR4WP EN≤1.3 ENNo patch available
——
Critical9.8Arbitrary File Upload
Sandbox≤1.6.1No patch available
——
Critical9.8Arbitrary File Upload
Chocolate WP – Responsive Photography Theme | Photographyall versionsNo patch available
——
Medium6.4Stored Cross-Site Scripting
WordPress<3.5.1Update to 3.5.1
CVE-2013-0236—
Medium6.4Cross-Site Scripting
WordPress≤3.5Update to 3.5.1
CVE-2013-0237—
Medium5.4Server-Side Request Forgery
WordPress≤3.5Update to 3.5.1
CVE-2013-0235—
Critical9.8Remote File Inclusion
Chocolate WP – Responsive Photography Theme | Photographyall versionsNo patch available
——
Critical9.8Arbitrary File Upload
File Uploader≤1.1No patch available
——
Critical9.8SQL Injection
WordPress Poll≤34.05Update to 34.06
CVE-2013-1401—
Critical9.8SQL Injection
WordPress Poll≤34.05Update to 34.06
CVE-2013-1400—
Critical9.8SQL Injection
Ripe HD FLV≤1.1No patch available
——
High7.5Directory Traversal
Forums<1.4.4Update to 1.4.4
CVE-2012-4920—
High7.5Directory Traversal
Google Doc Embedder<2.5.4Update to 2.5.4
CVE-2012-4915—
Critical9.8Arbitrary File Upload
Lightspeed≤1.1.2No patch available
——
Critical9.8Arbitrary File Upload
Eptonic≤1.4No patch available
——
Critical9.8Arbitrary File Upload
Nuance≤1.2No patch available
——
Critical9.8Arbitrary File Upload
ReFlex Gallery » WordPress Photo Gallery<3.1.4Update to 3.1.4
——
Critical9.8Arbitrary File Upload
Xerte Online≤0.35Update to 0.36
——
High7.5Directory Traversal
Download Shortcode≤0.2.3Update to 1.0
CVE-2014-5465—
Critical9.8Arbitrary File Upload
Level Four Store Front<8.1.15Update to 8.1.15
——
  • Critical9.8
    Remote File Inclusion

    WP eCommerce Shop Styling

    <1.8Update to 1.8

    CVE-2013-0724

  • High7.2
    Multiple SQL Injections

    MailPoet Newsletters (Previous)

    ≤2.2Update to 2.2.1

    CVE-2013-1408

  • Critical9.8
    Multiple Vulnerabilities

    Flash News

    all versionsNo patch available

    58ea0c9c-f63d-4c31-b02e-a86d5fe732aa

  • Critical9.8
    SQL Injection

    RLSWordPressSearch

    all versionsNo patch available

    5c79d861-e2e8-4fca-883f-79401544b0b1

  • Critical9.8
    SQL Injection

    WordPress Shout Box Widget

    ≤2.0.2No patch available

    2d10f043-df2c-4e81-bd99-e478a2dca0cf

  • Critical9.8
    Unauthenticated Remote File Inclusion

    WordPress Gallery Plugin

    ≤1.4No patch available

    CVE-2012-4919

  • Critical9.8
    SQL Injection

    Portfolio Slideshow Pro

    all versionsNo patch available

    b6cab377-0a8a-45d2-a966-4c7f100b9409

  • Medium6.1
    Cross-Site Scripting via playerID Parameter

    audio-player

    <2.0.4.6Update to 2.0.4.6

    CVE-2013-1464

  • Critical9.8
    Arbitrary File Upload

    Accordion

    all versionsNo patch available

    8f5fa529-4c6e-465e-a281-78ba74e5a718

  • Critical9.8
    Arbitrary File Upload

    Power Zoomer

    ≤1.2No patch available

    c6a0811e-f02b-49d1-915e-cf7ac4b5e1f5

  • Critical9.8
    SQL Injection

    Dynamic Font Replacement DFR4WP EN

    ≤1.3 ENNo patch available

    c978a252-1f77-4c8d-b51a-04ed3493ee34

  • Critical9.8
    Arbitrary File Upload

    Sandbox

    ≤1.6.1No patch available

    a3160602-6522-478d-8a99-d097472d10ac

  • Critical9.8
    Arbitrary File Upload

    Chocolate WP – Responsive Photography Theme | Photography

    all versionsNo patch available

    a537f82c-5139-439e-817f-7fd0ece958bd

  • Medium6.4
    Stored Cross-Site Scripting

    WordPress

    <3.5.1Update to 3.5.1

    CVE-2013-0236

  • Medium6.4
    Cross-Site Scripting

    WordPress

    ≤3.5Update to 3.5.1

    CVE-2013-0237

  • Medium5.4
    Server-Side Request Forgery

    WordPress

    ≤3.5Update to 3.5.1

    CVE-2013-0235

  • Critical9.8
    Remote File Inclusion

    Chocolate WP – Responsive Photography Theme | Photography

    all versionsNo patch available

    f0e77557-f377-4752-bc5b-ec00f2520150

  • Critical9.8
    Arbitrary File Upload

    File Uploader

    ≤1.1No patch available

    9ae5b5f1-77a7-4626-a9b5-6f146c32a6db

  • Critical9.8
    SQL Injection

    WordPress Poll

    ≤34.05Update to 34.06

    CVE-2013-1401

  • Critical9.8
    SQL Injection

    WordPress Poll

    ≤34.05Update to 34.06

    CVE-2013-1400

  • Critical9.8
    SQL Injection

    Ripe HD FLV

    ≤1.1No patch available

    cf159a11-9490-4f79-a62d-c279cfe26108

  • High7.5
    Directory Traversal

    Forums

    <1.4.4Update to 1.4.4

    CVE-2012-4920

  • High7.5
    Directory Traversal

    Google Doc Embedder

    <2.5.4Update to 2.5.4

    CVE-2012-4915

  • Critical9.8
    Arbitrary File Upload

    Lightspeed

    ≤1.1.2No patch available

    89620065-b961-49c9-a662-bee300b5da72

  • Critical9.8
    Arbitrary File Upload

    Eptonic

    ≤1.4No patch available

    e87d7ca0-6fa3-4ca3-b308-d47e1e2e6566

  • Critical9.8
    Arbitrary File Upload

    Nuance

    ≤1.2No patch available

    06e90f64-f64e-4871-9106-1d7af02f13d2

  • Critical9.8
    Arbitrary File Upload

    ReFlex Gallery » WordPress Photo Gallery

    <3.1.4Update to 3.1.4

    fe17abd8-9ee2-4b9c-a30b-68d95e341722

  • Critical9.8
    Arbitrary File Upload

    Xerte Online

    ≤0.35Update to 0.36

    0b4b0cd0-dcc2-4790-8aeb-a304088dea3c

  • High7.5
    Directory Traversal

    Download Shortcode

    ≤0.2.3Update to 1.0

    CVE-2014-5465

  • Critical9.8
    Arbitrary File Upload

    Level Four Store Front

    <8.1.15Update to 8.1.15

    d0ace3b6-7941-43c6-b636-8f7b9d51da3e

Search VulnCrest Radar

Jump to

Are you sure?