VulnCrest
Search
Create account
Report an incident
Radar sectionsCISA KEV
Check my site

Database

WordPress vulnerabilities listed in CISA KEV (page 1353)

Plugin and theme vulnerabilities that CISA lists in its Known Exploited Vulnerabilities catalog. If you run any of these versions, patch first and check for signs of compromise.

Severity
Signals
Software

41,172 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress vulnerabilities listed in CISA KEV (page 1353)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Cross-Site Scripting
WP-Business Directory≤1.0.2No patch available
CVE-2014-4599—
Medium6.1Reflected Cross-Site Scripting
Local Weather≤1.0No patch available
CVE-2014-4561—
Medium6.1Multiple Cross-Site Scripting
WP e-Commerce Swipe plugin≤3.1.0No patch available
CVE-2014-4559—
Medium6.1Cross-Site Scripting
WP-RSS-Spreadshirt-3DCube-Gallery≤1.3No patch available
CVE-2014-4553—
Medium6.1Reflected Cross-Site Scripting
WP-Planet≤0.1No patch available
CVE-2014-4592—
Medium6.1Reflected Cross-Site Scripting
Votecount For Balatarin≤0.1.1No patch available
CVE-2014-4572—
Medium6.1Cross-Site Scripting
zeenshare≤1.0.1No patch available
CVE-2014-4606—
Medium6.1Cross-Site Scripting
Infusionsoft Gravity Forms Add-on<1.5.7Update to 1.5.7
CVE-2014-4536—
Medium6.1Cross-Site Scripting
Pay Per Media Player≤1.24No patch available
CVE-2014-4543—
Medium6.1Stored Cross-Site Scripting
WP Ultimate Email Marketer≤1.1.0No patch available
CVE-2014-4600—
Medium6.1Cross-Site Scripting
GarageSale<1.2.3Update to 1.2.3
CVE-2014-4532—
High7.1Cross-Site Scripting
Toolpage≤1.6.1No patch available
CVE-2014-4560—
Medium6.4Cross-Site Scripting
shortcode-ninja≤1.4No patch available
CVE-2014-4550—
High7.1Cross-Site Scripting
WooCommerce SagePay Direct Payment Gateway<0.1.6.7Update to 0.1.6.7
CVE-2014-4549—
Medium6.1Cross-Site Scripting
verwei.se – WordPress – Twitter≤1.0.2No patch available
CVE-2014-4566—
Medium6.1Cross-Site Scripting
Diverse Solutions IDX Real Estate Listings & MLS Search<2.1.1Update to 2.1.1
CVE-2014-4521—
Medium6.1Cross-Site Scripting
Spotlight≤4.7No patch available
CVE-2014-4552—
Medium6.1Cross-Site Scripting
swipe-hq-checkout-for-eshop≤3.7.0No patch available
CVE-2014-4556—
Medium6.1Cross-Site Scripting
WP-Contact≤1.0No patch available
CVE-2014-4583—
Medium6.1Cross-Site Scripting
Import Legacy Media≤0.1No patch available
CVE-2014-4535—
Medium6.1Reflected Cross-Site Scripting
HTML5 Video Player with Playlist≤2.4.0No patch available
CVE-2014-4534—
Medium6.1Cross-Site Scripting
Social Connect≤0.10.1Update to 0.10.2
CVE-2014-4551—
Medium6.1Cross-Site Scripting
Style It≤1.0No patch available
CVE-2014-4555—
Medium6.1Cross-Site Scripting
Conversion Ninjaall versionsNo patch available
CVE-2014-4017—
High8.8SQL Injection
Pinpoint Booking System – Legacy version<1.3Update to 1.3
CVE-2014-3210—
High8.8Cross-Site Request Forgery
Login rebuilder<1.2.0Update to 1.2.0
CVE-2014-3882—
Medium6.13.9.001 - Cross-Site Scripting
iMember360is3.8.012 – <3.9.002Update to 3.9.002
CVE-2014-3842—
High8.8Cross-Site Request Forgery
Photo Gallery by 10Web – Mobile-Friendly Image Gallery<1.2.42Update to 1.2.42
CVE-2015-9380—
Medium4.3Cross-Site Request Forgery
Search Everything<8.1.1Update to 8.1.1
CVE-2014-3843—
Medium4.3Cross-Site Request Forgery
TinyMCE Color Picker<1.2Update to 1.2
CVE-2014-3845—

Search VulnCrest Radar

Jump to

Are you sure?