VulnCrest
Search
Create account
Report an incident
Radar sectionsCISA KEV
Check my site

Database

WordPress vulnerabilities listed in CISA KEV (page 1327)

Plugin and theme vulnerabilities that CISA lists in its Known Exploited Vulnerabilities catalog. If you run any of these versions, patch first and check for signs of compromise.

Severity
Signals
Software

41,172 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress vulnerabilities listed in CISA KEV (page 1327)
SeverityVulnerabilityCVEInstallsPublished
Medium6.6PHP Object Injection
SecureMoz Security Audit≤1.0.5No patch available
CVE-2015-6828—
Medium6.3Cross-Site Request Forgery
Contact Form Generator : Creative form builder for WordPress≤2.1.86Update to 2.5.0
CVE-2015-6965—
Critical9.8Local File Inclusion
Memphis Documents Library≤2.6.16Update to 3.0
CVE-2014-10384—
Critical9.8Remote File Inclusion
Memphis Documents Library<3.0Update to 3.0
CVE-2014-10383—
Critical9.8Remote File Inclusion via TimThumb
BJ Lazy Load0.7.5 – 0.7.5Update to 1.0
CVE-2015-9415—
Medium6.1Cross-Site Scripting in Accept-Language Header
WPML Multilingual CMS2.9.3 – 3.2.6Update to 3.2.7
CVE-2015-9416—
Medium4.3Cross-Site Request Forgery
WatuPRO<4.9.0.8Update to 4.9.0.8
CVE-2015-9418—
Medium6.1Cross-Site Request Forgery to Stored Cross-Site Scripting
Testimonial Slider≤1.2.5Update to 1.3.0
CVE-2015-9417—
Medium6.4Cross-Site Scripting
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery≤2.1.9Update to 2.1.10
CVE-2015-9537—
Medium6.1Reflected Cross-Site Scripting
CKEditor for WordPress≤4.5.3Update to 4.5.3.1
CVE-2015-9349—
Medium6.1Cross-Site Scripting
sourceAFRICA≤0.1.3No patch available
CVE-2015-6920—
High8.8 Authenticated (Subscriber+) Arbitrary File Upload
Responsive Thumbnail Slider<1.0.1Update to 1.0.1
CVE-2015-10144—
Medium6.1Stored Cross-Site Scripting
Captain Slider≤1.0.6No patch available
CVE-2015-9419—
High7.5Insecure Direct Object Reference
Job Manager≤0.7.25No patch available
CVE-2015-6668—
Medium6.5Local File Inclusion
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery≤2.1.10Update to 2.1.15
CVE-2015-9538—
Medium5.5Cross-Site Scripting
Embeds for YouTube<3.3.3Update to 3.3.3
CVE-2015-6535—
Medium6.1Reflected Cross-Site Scripting
Navis DocumentCloud<0.1.1Update to 0.1.1
CVE-2015-2807—
Medium6.1Reflected Cross-Site Scripting
SoundCloud Is Gold<2.3.2Update to 2.3.2
CVE-2015-9420—
High8.8Multiple Cross-Site Request Forgery
Private Only≤3.5.1No patch available
CVE-2015-5483—
High8.8SQL Injection
WordPress Meta Robots≤2.1No patch available
CVE-2015-9400—
High8.8Authenticated Blind SQL Injection
GoCodes≤1.3.5No patch available
CVE-2015-9398—
Medium6.1Cross-Site Request Forgery to Stored Cross-Site Scripting
Cincopa video and media plug-in<1.137Update to 1.137
CVE-2015-10109—
Medium6.1Reflected Cross-Site Scripting
Simple Fields<1.4.11Update to 1.4.11
CVE-2015-9302—
Medium6.5Cross-Site Request Forgery leading to Stored Cross-Site Scripting
plugnedit<6.2.0Update to 6.2.0
CVE-2015-9422—
Medium6.1Stored Cross-Site Scripting
SEO Redirection Plugin – 301 Redirect Manager<4.3Update to 4.3
CVE-2016-10896—
Medium5.4Cross-Site Scripting
GoCodes≤1.3.5No patch available
CVE-2015-9397—
Medium6.1Reflected Cross-Site Scripting
Olevmedia Shortcodes<1.1.9Update to 1.1.9
CVE-2015-9421—
Medium6.3Cross-Site Request Forgery
Multicons<3.0Update to 3.0
CVE-2015-9424—
Medium6.1Reflected Cross-Site Scripting
OnePress Social Locker<4.2.5Update to 4.2.5
CVE-2015-9425—
Medium5.4Authenticated Stored Cross-Site Scripting
plugnedit<6.2.0Update to 6.2.0
CVE-2015-9423—

Search VulnCrest Radar

Jump to

Are you sure?