Database

Critical WordPress vulnerabilities (page 1373)

Vulnerabilities rated Critical (CVSS 9.0 or higher by the CNA). Most need no account and lead to full site takeover.

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

Critical WordPress vulnerabilities (page 1373)
Severity	Vulnerability	CVE	Installs	Published
Medium6.1	Cross-Site Scripting Count per Day<3.2.3Update to 3.2.3	CVE-2012-6714	—	Jul 20, 2012
Critical9.8	Directory Traversal A Page Flip Book<3.0Update to 3.0	CVE-2012-6652	—	Jul 10, 2012
Medium6.1	Reflected Cross-Site Scripting socialfit≤1.2.2No patch available	CVE-2012-20005	—	Jul 6, 2012
Medium6.1	Cross-Site Scripting Job Manager≤0.7.18Update to 0.7.19	CVE-2012-6713	—	Jun 28, 2012
Medium6.1	Cross-Site Request Forgery WP CleanFix≤3.0.1Update to 3.0.2	CVE-2013-2108	—	Jun 28, 2012
Medium4.3	Sensitive Information Disclosure WordPress<3.3.3Update to 3.3.3	CVE-2012-6635	—	Jun 27, 2012
High8.8	Cross-Site Request Forgery WordPress≤3.4Update to 3.4.1	CVE-2012-3384	—	Jun 27, 2012
Medium4.3	Information Disclosure WordPress≤3.4Update to 3.4.1	CVE-2012-3385	—	Jun 27, 2012
Medium6.5	Cross-Site Scripting WordPress<3.3.3Update to 3.3.3	CVE-2012-6633	—	Jun 27, 2012
Medium5.3	Sensitive Information Disclosure WordPress<3.3.3Update to 3.3.3	CVE-2012-6634	—	Jun 27, 2012
Critical9.8	Arbitrary File Upload Fancy Gallery - Wordpress plugin \| Galleries≤1.2.4No patch available	—	—	Jun 23, 2012
Critical9.8	Arbitrary File Upload AJAX Multi Upload≤1.1Update to 2.0	—	—	Jun 23, 2012
Critical9.8	Arbitrary File Upload FlipBook≤1.0No patch available	—	—	Jun 22, 2012
Low3.7	Informational < 6.8 - Weak Hashing Algorithm WordPress<6.8Update to 6.8	CVE-2012-6707	—	Jun 20, 2012
Critical9.8	SQL Injection Quick Chat<4.00Update to 4.00	CVE-2018-12534	—	Jun 18, 2012
Critical9.8	Arbitrary File Upload lim4wp≤1.1.1No patch available	—	—	Jun 18, 2012
Critical9.8	Arbitrary File Upload LB Mixed Slideshow for WordPress≤1.0No patch available	—	—	Jun 18, 2012
Critical9.8	Arbitrary File Upload Famousall versionsNo patch available	—	—	Jun 17, 2012
Critical9.8	Arbitrary File Upload Evarisk≤5.1.5.4Update to 5.1.5.5	—	—	Jun 14, 2012
Critical9.8	Arbitrary File Upload Invit0r≤0.22No patch available	—	—	Jun 14, 2012
Critical9.8	Arbitrary File Upload Annonces≤1.2.0.1Update to 1.2.0.2	—	—	Jun 14, 2012
Critical9.8	Arbitrary File Upload Resume Submissions & Job Postings<2.5.2Update to 2.5.2	—	—	Jun 13, 2012
Critical9.8	Arbitrary File Upload Contus Video Gallery≤1.3No patch available	—	—	Jun 12, 2012
Critical9.8	Arbitrary File Upload Webcam Video Conference<4.51Update to 4.51	—	—	Jun 12, 2012
Critical9.8	Arbitrary File Upload FoxyPress<0.4.2.2Update to 0.4.2.2	CVE-2012-10020	—	Jun 12, 2012
Critical9.8	Arbitrary File Upload Woocommerce Wordpress Auctions≤2.0.1.3Update to 2.0.2	—	—	Jun 12, 2012
Critical9.8	Arbitrary File Upload HD FLV PLayer≤1.7Update to 1.8	CVE-2012-10011	—	Jun 12, 2012
Critical9.8	Arbitrary File Upload WP GPX Maps – GPX, FIT & KML maps with elevation profile<1.1.23Update to 1.1.23	CVE-2012-6649	—	Jun 11, 2012
Critical9.8	Arbitrary File Upload Top Quark Architecture<2.1.1Update to 2.1.1	—	—	Jun 11, 2012
Critical9.8	Arbitrary File Upload picturesurf-gallery≤1.2No patch available	—	—	Jun 8, 2012

Medium6.1
Cross-Site Scripting
Count per Day
<3.2.3Update to 3.2.3
CVE-2012-6714Jul 20, 2012
Critical9.8
Directory Traversal
A Page Flip Book
<3.0Update to 3.0
CVE-2012-6652Jul 10, 2012
Medium6.1
Reflected Cross-Site Scripting
socialfit
≤1.2.2No patch available
CVE-2012-20005Jul 6, 2012
Medium6.1
Cross-Site Scripting
Job Manager
≤0.7.18Update to 0.7.19
CVE-2012-6713Jun 28, 2012
Medium6.1
Cross-Site Request Forgery
WP CleanFix
≤3.0.1Update to 3.0.2
CVE-2013-2108Jun 28, 2012
Medium4.3
Sensitive Information Disclosure
WordPress
<3.3.3Update to 3.3.3
CVE-2012-6635Jun 27, 2012
High8.8
Cross-Site Request Forgery
WordPress
≤3.4Update to 3.4.1
CVE-2012-3384Jun 27, 2012
Medium4.3
Information Disclosure
WordPress
≤3.4Update to 3.4.1
CVE-2012-3385Jun 27, 2012
Medium6.5
Cross-Site Scripting
WordPress
<3.3.3Update to 3.3.3
CVE-2012-6633Jun 27, 2012
Medium5.3
Sensitive Information Disclosure
WordPress
<3.3.3Update to 3.3.3
CVE-2012-6634Jun 27, 2012
Critical9.8
Arbitrary File Upload
Fancy Gallery - Wordpress plugin | Galleries
≤1.2.4No patch available
25627b5c-958c-45ad-8450-8dfccdfdac31Jun 23, 2012
Critical9.8
Arbitrary File Upload
AJAX Multi Upload
≤1.1Update to 2.0
8f20734d-4105-401b-992a-b47d049f70f4Jun 23, 2012
Critical9.8
Arbitrary File Upload
FlipBook
≤1.0No patch available
589fa6f2-fa60-4bdc-9692-50d5591ceb93Jun 22, 2012
Low3.7
Informational < 6.8 - Weak Hashing Algorithm
WordPress
<6.8Update to 6.8
CVE-2012-6707Jun 20, 2012
Critical9.8
SQL Injection
Quick Chat
<4.00Update to 4.00
CVE-2018-12534Jun 18, 2012
Critical9.8
Arbitrary File Upload
lim4wp
≤1.1.1No patch available
fca11e5b-2b6c-42f0-baf3-4ee023535f83Jun 18, 2012
Critical9.8
Arbitrary File Upload
LB Mixed Slideshow for WordPress
≤1.0No patch available
18557f4a-05b2-4cb4-afef-19c5c63c37a4Jun 18, 2012
Critical9.8
Arbitrary File Upload
Famous
all versionsNo patch available
a25528b1-28e0-4ac7-a7ab-2568b8349990Jun 17, 2012
Critical9.8
Arbitrary File Upload
Evarisk
≤5.1.5.4Update to 5.1.5.5
aff4f695-3c3b-48ee-8de1-674b588f332fJun 14, 2012
Critical9.8
Arbitrary File Upload
Invit0r
≤0.22No patch available
66a6569b-88ec-42d8-8396-6e62f1c51b24Jun 14, 2012
Critical9.8
Arbitrary File Upload
Annonces
≤1.2.0.1Update to 1.2.0.2
f821e1e2-9114-4b24-bd87-18ab49aa446eJun 14, 2012
Critical9.8
Arbitrary File Upload
Resume Submissions & Job Postings
<2.5.2Update to 2.5.2
50537e01-834e-4247-a80f-daa114eedcf1Jun 13, 2012
Critical9.8
Arbitrary File Upload
Contus Video Gallery
≤1.3No patch available
6b443610-416c-41d6-9449-9e20f719af06Jun 12, 2012
Critical9.8
Arbitrary File Upload
Webcam Video Conference
<4.51Update to 4.51
6a4d5a40-2ec0-468e-bafb-a713629f6006Jun 12, 2012
Critical9.8
Arbitrary File Upload
FoxyPress
<0.4.2.2Update to 0.4.2.2
CVE-2012-10020Jun 12, 2012
Critical9.8
Arbitrary File Upload
Woocommerce Wordpress Auctions
≤2.0.1.3Update to 2.0.2
9b5bdeb8-d5ee-4e30-8aaf-88893abf4145Jun 12, 2012
Critical9.8
Arbitrary File Upload
HD FLV PLayer
≤1.7Update to 1.8
CVE-2012-10011Jun 12, 2012
Critical9.8
Arbitrary File Upload
WP GPX Maps – GPX, FIT & KML maps with elevation profile
<1.1.23Update to 1.1.23
CVE-2012-6649Jun 11, 2012
Critical9.8
Arbitrary File Upload
Top Quark Architecture
<2.1.1Update to 2.1.1
67b152b5-e662-4dbd-a7db-87fc63cfb307Jun 11, 2012
Critical9.8
Arbitrary File Upload
picturesurf-gallery
≤1.2No patch available
c54d503f-9de5-496f-bd6d-2e417a5c1b67Jun 8, 2012