VulnCrest
Search
Create account
Report an incident
Radar sectionsCISA KEV
Check my site

Database

WordPress vulnerabilities listed in CISA KEV (page 1347)

Plugin and theme vulnerabilities that CISA lists in its Known Exploited Vulnerabilities catalog. If you run any of these versions, patch first and check for signs of compromise.

Severity
Signals
Software

41,172 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress vulnerabilities listed in CISA KEV (page 1347)
SeverityVulnerabilityCVEInstallsPublished
High8.8Cross-Site Request Forgery Protection Bypass
WordPress≤3.9.1Update to 3.7.4 or 3.8.4 or 3.9.2
CVE-2014-5204—
Low2.7Denial of Service via XML
WordPress≤3.9.1Update to 3.7.4 or 3.8.4 or 3.9.2
CVE-2014-5265—
Low3.8Authenticated Cross-Site Scripting via Avatar URL
WordPress≤3.9.1Update to 3.7.4 or 3.8.4 or 3.9.2
CVE-2014-5240—
Critical9.8SQL Injection
WordPress Spreadsheet≤0.62No patch available
CVE-2014-8363—
Medium6.1Cross-Site Scripting
WordPress Spreadsheet≤0.62No patch available
CVE-2014-8364—
Medium6.5Brute Force of Cross-Site Request Forgery Tokens
WordPress≤3.9.1Update to 3.7.4 or 3.8.4 or 3.9.2
CVE-2014-5205—
High7.2Deserialization via Widgets
WordPress≤3.9.1Update to 3.7.4 or 3.8.4 or 3.9.2
CVE-2014-5203—
High8.8Cross-Site Request Forgery to Cross-Site Scripting
Contextual Related Posts≤1.8.6Update to 1.8.7
CVE-2013-2710—
Medium5.3Cross-Site Scripting
Adminimize<1.7.22Update to 1.7.22
CVE-2011-5128—
Medium6.1Cross-Site Scripting
WP Construction Mode≤1.8Update to 1.9
CVE-2014-4854—
Medium6.1Multiple Cross-Site Scripting
Events Manager – Calendar, Bookings, Tickets, Appointments and more!≤5.5.1Update to 5.5.2
CVE-2013-7477—
Medium5.3Full Path Disclosure
WP PHP widget≤1.0.2No patch available
CVE-2013-0721—
Medium6.1Cross-Site Scripting
HK Exif Tags≤1.11Update to 1.12
CVE-2014-100007—
Medium6.1Cross-Site Scripting
Count per Day≤3.1Update to 3.1.1
CVE-2012-0895—
Medium6.1Reflected Cross-Site Scripting
WPCB≤2.4.8No patch available
CVE-2014-4581—
Medium6.1Unauthenticated Stored Cross-Site Scripting
Mail Subscribe List≤2.0.9Update to 2.1
CVE-2013-10026—
Medium6.1Cross-Site Scripting
Yoast Duplicate Post≤2.6Update to 3.0
CVE-2014-10378—
Medium6.1Cross-Site Scripting
WP-Table Reloaded≤1.9.3Update to 1.9.4
CVE-2013-1463—
High8.8Cross-Site Request Forgery
sexybookmarks≤6.1.4.0Update to 6.1.5.0
CVE-2013-3256—
High8.8Cross-Site Request Forgery
underConstruction<1.09Update to 1.09
CVE-2013-2699—
Medium6.1Multiple Cross-Site Scripting
Uploader≤1.0.4No patch available
CVE-2013-2287—
Critical9.8Remote Code Execution
W3 Total Cache≤0.9.2.8Update to 0.9.2.9
CVE-2013-2010—
Critical9.8Arbitrary File Upload
MailPoet Newsletters (Previous)≤2.6.6Update to 2.6.7
CVE-2014-4725—
Critical9.8Remote Code Execution
WP Super Cache<1.3.2Update to 1.3.2
CVE-2013-2011—
Critical9.8Local/Remote File Inclusion
SlideDeck 2 Lite Responsive Content Slider≤2.3.3Update to 2.3.5
CVE-2013-7483—
Medium6.1Cross-Site Scripting
Crowdsignal Dashboard – Polls, Surveys & more≤2.0.24Update to 2.0.25
CVE-2014-4856—
Medium6.1Reflected Cross-Site Scripting
DZS Video Gallery<7.95Update to 7.95
CVE-2014-3923—
Medium6.1Cross-Site Scripting
Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More≤0.4.4Update to 0.4.5
CVE-2013-46251M+
High7.1Cross-Site Request Forgery to Stored Cross-Site Scripting
Quick Page/Post Redirect Plugin<5.0.5Update to 5.0.5
CVE-2014-2598—
Medium4.3Cross-Site Request Forgery
Calendar≤1.3.2Update to 1.3.3
CVE-2013-2698—

Search VulnCrest Radar

Jump to

Are you sure?