VulnCrest
Search
Create account
Report an incident
Radar sectionsCISA KEV
Check my site

Database

WordPress vulnerabilities listed in CISA KEV (page 1293)

Plugin and theme vulnerabilities that CISA lists in its Known Exploited Vulnerabilities catalog. If you run any of these versions, patch first and check for signs of compromise.

Severity
Signals
Software

41,175 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress vulnerabilities listed in CISA KEV (page 1293)
SeverityVulnerabilityCVEInstallsPublished
High8.8Cross-site Request Forgery
Attendance Manager≤0.5.6Update to 0.5.7
CVE-2019-5971—
Medium6.1Cross-Site Scripting
Online Lesson Booking≤0.8.6Update to 0.8.7
CVE-2019-5972—
Medium6.1Stored Cross-Site Scripting
Attendance Manager≤0.5.6Update to 0.5.7
CVE-2019-5970—
High8.8Cross-Site Request Forgery
Breadcrumbs by menu≤1.0.1Update to 1.0.3
CVE-2019-15865—
Medium6.1Cross-Site Scripting
Breadcrumbs by menu<1.0.3Update to 1.0.3
CVE-2019-15864—
High7.5Unauthorized Account Creation
ConvertPlus≤3.4.4Update to 3.4.5
CVE-2019-15863—
High8.8Arbitrary File Upload
Crelly Slider≤1.3.4Update to 1.3.5
CVE-2019-15866—
High8.8Cross-Site Request Forgery
Zoho SalesIQ – Live chat, chatbots, and visitor tracking<1.0.9Update to 1.0.9
CVE-2019-15645—
Medium6.4Stored Cross-Site Scripting
WP Statistics – Simple, privacy-friendly Google Analytics alternative≤12.6.5Update to 12.6.6.1
CVE-2019-12566—
High8.8Cross-Site Request Forgery
Zoho SalesIQ – Live chat, chatbots, and visitor tracking≤1.0.8Update to 1.0.9
CVE-2019-5963—
High7.2Stored Cross-Site Scripting
Zoho SalesIQ – Live chat, chatbots, and visitor tracking<1.0.9Update to 1.0.9
CVE-2019-15644—
Medium6.1Cross-Site Scripting
Zoho SalesIQ – Live chat, chatbots, and visitor tracking≤1.0.8Update to 1.0.9
CVE-2019-5962—
Critical9.8Unprotected Functions
3CX Free Live Chat, Calls & Messaging<8.0.33Update to 8.0.33
CVE-2019-12498—
High8.8Privilege Escalation
Slick Popup: Contact Form 7 Popup Plugin<1.7.2Update to 1.7.2
CVE-2019-15867—
Medium6.1Cross-Site Scripting
SAML Single Sign On – SSO Login<4.8.73Update to 4.8.73
CVE-2019-12346—
High8.8Cross-Site Request Forgery
Affiliates Manager<2.6.6Update to 2.6.6
CVE-2019-15868—
High8.8Cross-site Request Forgery
Related YouTube Videos<1.9.9Update to 1.9.9
CVE-2019-5980—
High7.2Stored Cross-Site Scripting
Hostel≤1.1.3Update to 1.1.4
CVE-2019-12345—
High7.8Unauthenticated CSV Injection
Hustle – Email Marketing, Lead Generation, Optins, Popups≤6.0.7Update to 6.0.8.1
CVE-2019-11872—
High7.5Arbitrary File Download
Simple File List≤3.2.7Update to 3.2.8
CVE-2022-1119—
Critical9.8Cross-Site Request Forgery
WP Booking System – Booking Calendar<1.5.2Update to 1.5.2
CVE-2019-12239—
Medium6.1Unauthenticated Stored Cross-Site Scripting from Visitors
SlimStat Analytics – Real-Time Stats, Heatmaps & Ecommerce≤4.8Update to 4.8.1
CVE-2019-15112—
Medium6.1Unauthenticated Stored Cross-Site Scripting
FV Flowplayer Video Player≤7.3.13.727Update to 7.3.14.727
CVE-2019-14799—
Critical9.8SQL Injection
FV Flowplayer Video Player<7.3.15.727Update to 7.3.15.727
CVE-2019-14801—
Medium5.3Sensitive Information Exposure
FV Flowplayer Video Player≤7.3.14.727Update to 7.3.15.727
CVE-2019-14800—
High8.1Object Injection Bypass
OptionTree≤2.7.2Update to 2.7.3
CVE-2019-15321—
High8.1Object Injection Bypass
OptionTree≤2.7.2Update to 2.7.3
CVE-2019-15320—
Medium5.4Cross-Site Scripting via show_products_page_limit parameter
Woocommerce Products Price Bulk Edit≤2.0No patch available
CVE-2019-14796—
Medium4.8Cross-Site Scripting
Toggle The Title≤1.4No patch available
CVE-2019-14795—
Medium6.1Unauthenticated Stored Cross-Site Scripting
3CX Free Live Chat, Calls & Messaging≤8.0.26Update to 8.0.27
CVE-2019-14950—

Search VulnCrest Radar

Jump to

Are you sure?