VulnCrest
Search
Create account
Report an incident
Radar sectionsCISA KEV
Check my site

Database

WordPress vulnerabilities listed in CISA KEV (page 1341)

Plugin and theme vulnerabilities that CISA lists in its Known Exploited Vulnerabilities catalog. If you run any of these versions, patch first and check for signs of compromise.

Severity
Signals
Software

41,172 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress vulnerabilities listed in CISA KEV (page 1341)
SeverityVulnerabilityCVEInstallsPublished
Medium4.8Authenticated Stored Cross-Site Scripting
Simple Security≤1.1.5Update to 1.1.6
CVE-2014-9570—
Medium6.1Stored Cross-Site Scripting
SlimStat Analytics – Real-Time Stats, Heatmaps & Ecommerce<3.5.6Update to 3.5.6
CVE-2014-100027—
Critical9.8Unauthenticated Blind SQL Injection via order_by Parameter
Photo Gallery by 10Web – Mobile-Friendly Image Gallery<1.2.8Update to 1.2.8
CVE-2015-1055—
Critical9.6Multiple Cross-Site Request Forgery
Pods – Custom Content Types and Fields≤2.4.3Update to 2.5
CVE-2014-7957—
Medium6.1Cross-Site Scripting
Pods – Custom Content Types and Fields≤2.4.3Update to 2.5
CVE-2014-7956—
Medium6.1Reflected Cross-Site Scripting
Greg's High Performance SEO<1.6.2Update to 1.6.2
CVE-2015-9319—
High8.8Arbitrary File Upload
WP EasyCart: Shopping Cart and eCommerce Store<3.0.16Update to 3.0.16
CVE-2014-9308—
Medium6.1Cross-Site Scripting
SlimStat Analytics – Real-Time Stats, Heatmaps & Ecommerce<3.9.3Update to 3.9.3
CVE-2015-1204—
Medium6.1Cross-Site Request Forgery to Cross-Site Scripting
simpleflickr≤3.0.3No patch available
CVE-2014-9396—
Medium6.1Cross-Site Scripting
Relevanssi – A Better Search<3.3.8Update to 3.3.8
CVE-2014-9443—
High8.8Cross-Site Request Forgery
Banner Effect Header<1.2.8Update to 1.2.8
CVE-2015-0920—
Medium6.5WordPress Ecommerce < 1.5.4 - Directory Traversal to Arbitrary File Disclosure
Cart66 Lite :: WordPress Ecommerce<1.5.4Update to 1.5.4
CVE-2014-9461—
High7.5Arbitrary File Read
Sell Downloads≤1.0.1Update to 1.0.2
CVE-2014-9511—
Critical9.8Arbitrary File Upload
cformsII<14.8Update to 14.8
CVE-2014-9473—
Medium6.1Cross-Site Scripting
Frontend Uploader<0.9.4Update to 0.9.4
CVE-2014-9444—
High8.8SQL Injection
Cart66 Lite :: WordPress Ecommerce<1.5.4Update to 1.5.4
CVE-2014-9442—
Medium6.1Reflected Cross-Site Scripting
wordpress-backup-to-dropbox<4.1Update to 4.1
CVE-2014-9310—
High8.8Cross-Site Request Forgery
gSlideShow≤0.1No patch available
CVE-2014-9391—
High8.8Cross-Site Request Forgery to Cross-Site Scripting
Post to Twitter≤0.7No patch available
CVE-2014-9393—
High8.8Cross-Site Request Forgery to Cross-Site Scripting
wp-unique-article-header-image≤1.0No patch available
CVE-2014-9400—
Medium6.1Cross-Site Request Forgery
PictoBrowser≤0.3.1No patch available
CVE-2014-9392—
High8.8Cross-Site Request Forgery to Stored Cross-Site Scripting
PWGRandom≤1.11No patch available
CVE-2014-9394—
High8.8Cross-Site Request Forgery leading to Cross-Site Scripting
wp-limit-posts-automatically≤0.7No patch available
CVE-2014-9401—
High7.5Directory Traversal
Slider Revolution≤4.1.4Update to 4.2
CVE-2014-9734—
High7.2Cross-Site Scripting
Slider Revolution≤4.2.2Update to 4.2.3
CVE-2015-5151—
High7.5Directory Traversal
DB Backup<5.0Update to 5.0
CVE-2014-9119—
Medium5.4Cross-Site Scripting
W3 Total Cache≤0.9.4Update to 0.9.4.1
CVE-2014-8724—
Medium6.1Cross-Site Scripting
iTwitter≤0.04No patch available
CVE-2014-9336—
High8.8Cross-Site Request Forgery and Stored Cross-Site Scripting
Sliding Social Icons≤1.61No patch available
CVE-2014-9437—
Medium6.1Cross-Site Request Forgery
DandyID Services≤1.5.9No patch available
CVE-2014-9335—

Search VulnCrest Radar

Jump to

Are you sure?