VulnCrest
Search
Create account
Report an incident
Radar sectionsCritical
Check my site

Database

Critical WordPress vulnerabilities (page 1372)

Vulnerabilities rated Critical (CVSS 9.0 or higher by the CNA). Most need no account and lead to full site takeover.

Signals
Software

41,564 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

Critical WordPress vulnerabilities (page 1372)
SeverityVulnerabilityCVEInstallsPublished
High7.3SQL Injection
All Video Gallery Plugin for WordPress<1.2Update to 1.2
CVE-2012-6653—
Medium6.1Cross Site Scripting via post_title parameter
Yoast SEO – Advanced SEO with real-time guidance and built-in AI≤2.1.1Update to 2.2
CVE-2012-6692—
Critical9.8SQL Injections
FireStorm Professional Real Estate Plugin≤2.06.03Update to 2.06.04
——
Critical9.8Command Injection
UnGallery<2.1.6Update to 2.1.6
——
High7.1Reflected Cross-Site Scripting
White Label CMS<1.5.1Update to 1.5.1
CVE-2012-5387—
High7.1Cross-Site Scripting
White Label CMS<1.5.1Update to 1.5.1
CVE-2012-5388—
Critical9.8Remote File Inclusion and Full Path Disclosure
Social Discussions≤6.1.1Update to 6.1.2
——
Critical9.8Remote File Inclusion
Crayon Syntax Highlighter≤1.13Update to 1.14
——
Medium6.1Cross-Site Scripting
MF Gig Calendar≤0.9.4.1Update to 0.9.5
CVE-2012-4242—
Medium6.1Cross-Site Scripting
WHOIS≤1.4.2.4No patch available
CVE-2011-5193—
High7.5Information Disclosure via Arbitrary File Downloads
simple-download-button-shortcode1.0 – 1.0Update to 1.1
CVE-2012-10016—
High8.8Cross-Site Request Forgery
DVS Custom Notification≤1.0.1No patch available
CVE-2012-4921—
Low3.8Missing Authorization Checks
WordPress≤3.4.1Update to 3.4.2
CVE-2012-4422—
Medium6.1Reflected Cross-Site Scripting
Download Monitor≤3.3.5.8Update to 3.3.5.9
CVE-2012-4768—
Medium6.4Cross-Site Scripting
WordPress≤3.4.1Update to 3.4.2
CVE-2012-3383—
Medium6.3Missing Authorization Checks on create_post
WordPress<3.4.2Update to 3.4.2
CVE-2012-4421—
Critical9.8Arbitrary File Upload
TDO Mini Forms≤0.13.9No patch available
——
Critical9.8Arbitrary File Upload
sem-wysiwyg≤1.0No patch available
——
Critical9.8Arbitrary File Upload
Monsters Editor for WP Super Edit≤1.1No patch available
——
Critical9.8Arbitrary File Upload
Rich Widget≤0.2.4No patch available
——
Medium6.1Multiple Cross-Site Scripting
quick-post-widget≤1.9.1No patch available
CVE-2012-4226—
Medium6.1Cross-Site Scripting
ThreeWP Email Reflector<1.16Update to 1.16
CVE-2012-2572—
High7.2Cross-Site Scripting
mini-mail-dashboard-widget<1.43Update to 1.43
CVE-2012-2583—
High7.2Cross-Site Scripting
Postie≤1.4.9Update to 1.4.10
CVE-2012-2580—
Medium6.1Cross-Site Scripting
WP SimpleMail≤1.0.6No patch available
CVE-2012-2579—
High7.5Directory Traversal
Vitamin<1.1.0Update to 1.1.0
CVE-2012-6651—
Medium6.1Reflected Cross-Site Scripting
Backend Localization1.6.1 – 1.6.1Update to 2.0
CVE-2012-10013—
Medium6.1Reflected Cross-Site Scripting
Backend Localization≤2.0Update to 2.0.1
CVE-2012-10014—
Medium4.3Cross-Site Request Forgery
BestWebSoft's Twitter≤2.14Update to 2.15
CVE-2012-10015—
Medium4.3Cross-Site Request Forgery
Portfolio Plugin≤2.04Update to 2.05
CVE-2012-10017—

Search VulnCrest Radar

Jump to

Are you sure?