VulnCrest
Search
Create account
Report an incident
Radar sectionsCISA KEV
Check my site

Database

WordPress vulnerabilities listed in CISA KEV (page 1315)

Plugin and theme vulnerabilities that CISA lists in its Known Exploited Vulnerabilities catalog. If you run any of these versions, patch first and check for signs of compromise.

Severity
Signals
Software

41,175 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress vulnerabilities listed in CISA KEV (page 1315)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Cross-Site Scripting
Contact Form Manager≤1.4.3Update to 1.4.4
CVE-2017-20054—
Medium6.4Stored Cross-Site Scripting
Contact Form Plugin≤4.0.1Update to 4.0.2
CVE-2017-20055—
Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
User Login Log≤2.2.2No patch available
CVE-2017-20056—
Medium6.1Cross-Site Scripting via Cross-Site Request Forgery
Atahualpa≤3.7.24No patch available
CVE-2024-27948—
Medium5.3Missing Authorization
How to Create an App for Android iPhone Easytouch≤3.0No patch available
CVE-2017-1002000—
High7.2Unauthenticated Stored Cross-Site Scripting
NewStatPress<1.2.5Update to 1.2.5
CVE-2017-18575—
High8.8Cross-Site Request Forgery
Contact Form Manager≤1.4.3Update to 1.4.4
CVE-2017-20053—
Critical9.8Arbitrary File Upload
webapp-builder≤2.0No patch available
CVE-2017-1002002—
Medium6.1Stored Cross-Site Scripting
Relevanssi – A Better Search<3.5.8Update to 3.5.8
CVE-2017-1000038—
Critical9.8Arbitrary File Upload
Wordpress Plugin Mobile App Native 3.03.0 – 3.0No patch available
CVE-2017-6104—
Medium6.1Cross-Site Scripting
Kama Click Counter≤3.4.9Update to 3.5.0
CVE-2017-18615—
High8.1Blind SQL Injection
Kama Click Counter≤3.4.9Update to 3.5.0
CVE-2017-18614—
High8.8Cross-Site Request Forgery
Democracy Poll≤5.3.6Update to 5.4
CVE-2017-18521—
Medium6.1Reflected Cross-Site Scripting
GD Rating System<2.1Update to 2.1
CVE-2017-18591—
Medium6.1Cross-Site Scripting
Democracy Poll<5.4Update to 5.4
CVE-2017-18520—
Medium6.1Cross-Site Scripting
Wordpress plugin AnyVar≤0.1.1No patch available
CVE-2017-6103—
Critical9.8Arbitrary File Upload
Fast Image Adder≤1.1Update to 1.2
CVE-2015-1000001—
Medium6.1Cross-Site Scripting
Time Sheets<1.5.2Update to 1.5.2
CVE-2017-18582—
High7.2SQL Injection via id parameter
Mail Masta≤1.0No patch available
CVE-2017-6573—
High7.2SQL Injection via id parameter
Mail Masta≤1.0No patch available
CVE-2017-6571—
High7.2SQL Injection via camp_id parameter
Mail Masta≤1.0No patch available
CVE-2017-6097—
Critical9.8SQL Injection via list_id parameter
Mail Masta≤1.0No patch available
CVE-2017-6095—
High7.2SQL Injection via list_id parameter
Mail Masta≤1.0No patch available
CVE-2017-6098—
High7.2SQL Injection via member_id parameter
Mail Masta≤1.0No patch available
CVE-2017-6575—
High7.2SQL Injection via list_id parameter
Mail Masta≤1.0No patch available
CVE-2017-6577—
High7.2SQL Injection via filter_list parameter
Mail Masta≤1.0No patch available
CVE-2017-6572—
High7.2SQL Injection via id parameter
Mail Masta≤1.0No patch available
CVE-2017-6570—
High7.2SQL Injection via filter_list parameter
Mail Masta≤1.0No patch available
CVE-2017-6096—
Medium6.1Reflected Cross-Site Scripting
Time Sheets<1.5.0Update to 1.5.0
CVE-2017-18581—
Medium6.1Authenticated (Admin+) Stored Cross-Site Scripting
Easy Table≤1.6Update to 1.7
CVE-2017-20108—

Search VulnCrest Radar

Jump to

Are you sure?