VulnCrest
Search
Create account
Report an incident
Radar sectionsCISA KEV
Check my site

Database

WordPress vulnerabilities listed in CISA KEV (page 1240)

Plugin and theme vulnerabilities that CISA lists in its Known Exploited Vulnerabilities catalog. If you run any of these versions, patch first and check for signs of compromise.

Severity
Signals
Software

41,182 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress vulnerabilities listed in CISA KEV (page 1240)
SeverityVulnerabilityCVEInstallsPublished
High7.5Local File Inclusion
Images to WebP≤1.8Update to 1.9
CVE-2021-24644—
High7.5SQL Injection
Mang Board≤1.9.9Update to 2.0.0
CVE-2021-26609—
Medium6.5SQL Injection
Duplicate Post<1.2.0Update to 1.2.0
CVE-2021-43408—
Medium5.4Stored Cross-Site Scripting
Logo Showcase – Responsive Logo Carousel, Logo Slider & Logo Grid<1.2.4Update to 1.2.4
CVE-2021-24729—
High8.1Cross-Site Request Forgery
Images to WebP<1.9Update to 1.9
CVE-2021-24641—
Medium5.5Stored Cross-Site Scripting via $custom_profile
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses≤4.1.3.1Update to 4.1.3.2
CVE-2021-39348—
Medium4.8Authenticated Stored Cross-Site Scripting
Sprout Invoices – Client Invoicing & Estimates<19.9.7Update to 19.9.7
CVE-2021-24787—
Medium6.4Contributor+ Stored Cross-Site Scripting
Insert Pages≤3.6.1Update to 3.7.0
CVE-2021-24850—
High7.2Admin+ SQL Injection
Email Log≤2.4.6Update to 2.4.7
CVE-2021-24758—
Medium4.3Cross-Site Request Forgery
QR Redirector<1.6Update to 1.6
CVE-2021-24853—
Medium4.3Settings Change via Cross-Site Request Forgery
WP Performance Score Booster – Optimize Speed, Enable Cache & Page Preload≤2.0Update to 2.1
CVE-2021-24776—
Medium6.1Unauthenticated Stored Cross-Site Scripting
My Tickets – Accessible Event Ticketing<1.8.31Update to 1.8.31
CVE-2021-24796—
Medium5.4Stored Cross-Site Scripting
QR Redirector<1.6.1Update to 1.6.1
CVE-2021-24854—
Medium6.1Responsive Multi-Purpose Theme < 4.8.4 - Reflected Cross-Site Scripting
enfold<4.8.4Update to 4.8.4
CVE-2021-24719—
Medium4.8Cross-Site Scripting
Shared Files – File Upload & Download Manager<1.6.61Update to 1.6.61
CVE-2021-24856—
High8.8Subscriber+ SQL Injection
SEO Redirection Plugin – 301 Redirect Manager≤8.1Update to 8.2
CVE-2021-24847—
Medium5.5Admin+ Stored Cross-Site Scripting
Helpful<4.4.59Update to 4.4.59
CVE-2021-24841—
Medium4.8Admin+ Stored Cross-Site Scripting
Accept Donations with PayPal & Stripe≤1.3.1Update to 1.3.2
CVE-2021-24815—
High7.2Admin+ SQL Injection
Stream – Activity Log & Audit Trail≤3.8.1Update to 3.8.2
CVE-2021-24772—
Medium5.5Leaky Paywall <= 4.16.5 Authenticated Stored Cross-Site Scripting
Leaky Paywall≤4.16.5Update to 4.16.6
CVE-2021-39357—
Medium4.3Contributor+ Arbitrary Posts/Pages Access
Insert Pages≤3.6.1Update to 3.7.0
CVE-2021-24851—
Medium6.5Plugin's Setting Update via Cross-Site Request Forgery
MouseWheel Smooth Scroll≤5.6Update to 5.7
CVE-2021-24852—
Medium5.4Authenticated Stored Cross-Site Scripting
Microsoft Clarity≤0.3Update to 0.4
CVE-2021-33850—
High8.8Cross-Site Request Forgery
Simple JWT Login – Allows you to use JWT on REST endpoints.<3.2.1Update to 3.2.1
CVE-2021-24804—
High8.1Cross-Site Request Forgery
Support Board<3.3.6Update to 3.3.6
CVE-2021-24823—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Content Staging≤2.0.1No patch available
CVE-2021-39356—
High7.2Admin+ SQL Injection
Speed Booster Pack ⚡ PageSpeed Optimization Suite≤4.3.3Update to 4.3.3.1
CVE-2021-25023—
Medium5.5Stored Cross-Site Scripting
JobBoardWP – Job Board Listings and Submissions≤1.0.7Update to 1.1.0
CVE-2021-39329—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Indeed Job Importer≤1.0.5No patch available
CVE-2021-39355—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
MPL-Publisher — Ebook & Audiobook Creator≤1.30.2Update to 1.30.3
CVE-2021-39343—

Search VulnCrest Radar

Jump to

Are you sure?