Database
WordPress Vulnerability Database (page 1056)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- High8.8Authenticated (Contributor+) SQL Injection via Shortcode
WD WidgetTwitter
≤1.0.9No patch available
- Medium6.4Social Warfare <= 4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Social Sharing Plugin – Social Warfare
≤4.4.3Update to 4.4.4
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
WebToffee WP Backup and Migration
≤1.4.4Update to 1.4.5
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
ImageMapper
≤1.2.6No patch available
- Medium5.3Information Exposure via legacy log file
Membership Plugin – Kadence Memberships
≤3.2.7Update to 3.2.8
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting via Shortcode
Social Feed | All social media in one place
≤1.5.4.6No patch available
- Medium4.3Missing Authorization to Settings Update
WebToffee WP Backup and Migration
≤1.4.3Update to 1.4.4
- Medium6.1Reflected Cross-Site Scripting via _wpnonce
LexonRank: AI Link Building, Free Backlinks, GEO & SEO Automation
≤1.2.29Update to 1.2.30
- Low3.3Authenticated(Administrator+) Directory Traversal to Arbitrary CSV File Deletion
LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes
≤7.4.2Update to 7.5.0
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
Comments Ratings
≤1.1.7Update to 1.1.9
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
Basic Interactive World Map
≤2.0Update to 2.7
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
Post Grid & Post Slider – Carousel, Filter Tabs & Related Posts
≤1.0.20Update to 1.0.21
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Interact Quiz & Form Embed
≤3.0.7Update to 3.1
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Apollo13 Framework Extensions
≤1.9.0Update to 1.9.1
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Gift Up Gift Cards for WordPress and WooCommerce
≤2.20.1Update to 2.20.2
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting]
Social Feed | All social media in one place
≤1.5.4.6No patch available
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
Layer Slider
≤1.1.9.7No patch available
- Medium4.3Cross-Site Request Forgery via save_admin_options
SmartText Rotator – Add Motion to Your Words
≤5.4Update to 5.5
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Medialist
≤1.4.0Update to 1.4.1
- Medium5.3Masked Login Area Security Feature Bypass
Defender Security – Malware Scanner, Login Security & Firewall
≤4.2.0Update to 4.2.1
- Medium4.3Missing Authorization
CatalogX Product Catalog, Product Enquiry & Quotes for WooCommerce
<5.0.3Update to 5.0.3
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Top 25 Social Icons
≤3.1No patch available
- High7.5Missing Authorization via Multiple AJAX Actions
WP Travel – Ultimate Travel Booking System, Tour Management Engine
≤7.7.0Update to 7.8.1
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Easy PayPal Shopping Cart
≤1.1.10Update to 1.1.11
- Medium5.8Missing Authorization
Simple Job Board
≤2.10.5Update to 2.10.6
- High7.2Authenticated (Administrator+) SQL Injection
iPages – FlipBook Image & PDF Viewer
<1.5.0Update to 1.5.0
- Medium4.3Cross-Site Request Forgery via check_capability
WP Affiliate Disclosure
≤1.2.6Update to 1.2.7
- Medium6.5Missing Authorization
CatalogX Product Catalog, Product Enquiry & Quotes for WooCommerce
<5.0.3Update to 5.0.3
- Medium4.3Cross-Site Request Forgery via send_test_email
Email Templates Customizer and Designer for WordPress and WooCommerce
≤1.4.2Update to 1.4.3
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
ShortCodes UI
≤1.9.8No patch available