VulnCrest
Search
Create account
Report an incident
Radar sectionsCritical
Check my site

Database

Critical WordPress vulnerabilities (page 1371)

Vulnerabilities rated Critical (CVSS 9.0 or higher by the CNA). Most need no account and lead to full site takeover.

Signals
Software

41,564 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

Critical WordPress vulnerabilities (page 1371)
SeverityVulnerabilityCVEInstallsPublished
High7.5Directory Traversal
Download Shortcode≤0.2.3Update to 1.0
CVE-2014-5465—
High8.8Cross-Site Request Forgery
Mingle Forum≤1.0.34Update to 1.0.35
CVE-2013-0736—
Critical9.8Arbitrary File Upload
sintic_galleryall versionsNo patch available
——
Medium5.4Missing Session Cookie Expiration
WordPress<4.0Update to 4.0
CVE-2012-5868—
Critical9.8SQL Injection
Oberliga Themeall versionsNo patch available
——
Critical9.8Arbitrary File Upload
Clockstone≤1.2No patch available
——
Critical9.1Content Spoofing
WordPress RokBox≤2.13No patch available
——
Critical9.8Arbitrary File Upload
WordPress RokBox≤2.13No patch available
——
High8.8Cross-Site Request Forgery
Welcart e-Commerce<1.2.2Update to 1.2.2
CVE-2012-5178—
Medium6.1Cross-Site Scripting
Welcart e-Commerce<1.2.2Update to 1.2.2
CVE-2012-5177—
Medium6.1Reflected Cross-Site Scripting
BuddyStream≤3.6.2Update to 3.6.3
CVE-2012-10007—
Critical9.8Remote File Inclusion via fsml-admin.js.php wpp parameter
Floating Social Media Links<1.4.3Update to 1.4.3
——
Critical9.8Remote File Inclusion via fsml-hideshow.js.php wpp parameter
Floating Social Media Links<1.4.3Update to 1.4.3
——
Critical9.8Premium WordPress Theme | Portfolio (Unspecified Version) - Arbitrary File Upload
Yvora - Premium WordPress Theme | Portfolioall versionsNo patch available
——
Critical9.8Arbitrary File Upload
dagda≤5.0No patch available
——
Critical9.8SQL Injection
Toolbox≤1.4No patch available
——
Critical9.8SQL Injection
CStar Design WordPress Theme≤4.9No patch available
——
Medium6.1Cross-Site Scripting
Video Lead Form<0.6Update to 0.6
CVE-2012-6312—
Critical9.8SQL Injection
Ads Box≤1.0No patch available
——
Critical9.8SQL Injection
Malmonationall versionsNo patch available
——
Medium5.3Sensitive Information Disclosure
Simple Gmail Login<1.1.4Update to 1.1.4
CVE-2012-6313—
Critical9.8Arbitrary File Upload
Zarzadzanie Kontemall versionsNo patch available
——
Critical9.8SQL Injection
Plg Novanaall versionsNo patch available
——
Critical9.8SQL Injection
Magazine Basicall versionsNo patch available
——
Medium6.1Cross-Site Scripting
Advanced Text Widget≤2.0.1Update to 2.0.2
CVE-2011-4618—
Critical9.8SQL Injection
Facebook Survey Pro≤1.0No patch available
——
Medium6.1Cross-Site Scripting
Uk Cookie≤1.1No patch available
CVE-2012-5856—
Critical9.8Arbitrary File Upload
Image News Slider≤3.3Update to 3.4
——
Medium6.1Cross-Site Scripting
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery≤1.9.6Update to 1.9.7
CVE-2012-3414—
Critical9.8Unauthenticated SQL Injection
Cardoza AJAX Search<1.3Update to 1.3
CVE-2012-5853—

Search VulnCrest Radar

Jump to

Are you sure?