VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1082)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,165 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1082)
SeverityVulnerabilityCVEInstallsPublished
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
Order Delivery Date for WP e-Commerce≤1.2No patch available
CVE-2023-41859—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
User Submitted Posts – Enable Users to Submit Posts from the Front End≤20230811Update to 20230901
CVE-2023-4779—
Medium6.1Reflected Cross-Site Scripting
StagTools≤2.3.7Update to 2.3.8
CVE-2023-41868—
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
Back To The Top Button≤2.1.6Update to 2.1.7
CVE-2023-41733—
Medium4.3Missing Authorization via AJAX actions
Slider Pro≤4.8.6Update to 4.8.7
CVE-2023-41865—
Medium6.1Unauthenticated Cross-Site Scripting
Raise Mag≤1.0.7No patch available
CVE-2023-28621—
High7.2Reflected Cross-Site Scripting
Simple Membership≤4.3.5Update to 4.3.6
CVE-2023-4719—
Medium4.3Cross-Site Request Forgery
MailMunch – Grow your Email List≤3.1.2Update to 3.1.3
CVE-2023-41852—
Medium4.3Cross-Site Request Forgery
SendPress Newsletters≤1.23.11.6No patch available
CVE-2023-41730—
Medium5.4Cross-Site Request Forgery
Easy WP Cleaner≤1.9Update to 2.0
CVE-2023-41697—
Medium4.3Missing Authorization to Opt-In
Analytify – Google Analytics 4 Tracking and Reporting in WordPress<5.1.1Update to 5.1.1
CVE-2023-41695—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
WordPress Social Login≤3.0.4No patch available
CVE-2023-4773—
Medium4.3Cross-Site Request Forgery
WP Custom Post Template≤1.0No patch available
CVE-2023-41851—
Medium4.3Cross-Site Request Forgery
WP iCal Availability≤1.0.3No patch available
CVE-2023-41853—
High7.2Unauthenticated Stored Cross-Site Scripting via form submission
PeproDev CF7 Database≤1.7.0Update to 1.8.0
CVE-2023-41863—
Medium4.3Missing Authorization
Laposta Signup Basic≤1.4.1Update to 1.4.2
——
Medium4.3Missing Authorization via AJAX action
WP Accessibility Helper (WAH)≤0.6.2.4Update to 0.6.2.5
CVE-2023-41869—
Critical9.8Unauthenticated PHP Object Injection
Flatsome≤3.17.5Update to 3.17.6
CVE-2023-40555—
Medium4.3Cross-Site Request Forgery
Outbound Link Manager≤1.2No patch available
CVE-2023-41850—
Medium4.3Cross-Site Request Forgery
AWP Classifieds≤4.3Update to 4.3.1
CVE-2023-41801—
Medium4.3Missing Authorization to notice dismissal
SAML Single Sign On – SSO Login≤5.0.4Update to 5.0.5
CVE-2023-41873—
Medium4.3Missing Authorization
Social Share, Social Login and Social Comments Plugin – Super Socializer≤7.13.54Update to 7.13.55
——
Medium4.3Cross-Site Request Forgery
Social Share, Social Login and Social Comments Plugin – Super Socializer≤7.13.54Update to 7.13.55
CVE-2023-41802—
Medium6.1Reflected Cross-Site Scripting
Click To Tweet≤2.0.14No patch available
CVE-2023-41856—
Medium6.1Reflected Cross-Site Scripting
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress≤8.6.2Update to 8.6.3
CVE-2023-41867—
Low3.8CSV Injection
Directorist: AI-Powered Business Directory, Listings & Classified Ads≤7.7.1Update to 7.7.2
CVE-2023-41798—
Medium6.1Reflected Cross-Site Scripting
Restrict – membership, site, content and user access restrictions for WordPress≤2.2.4Update to 2.2.5
CVE-2023-41861—
Medium4.3Cross-Site Request Forgery
Laposta Signup Embed<1.1.1Update to 1.1.1
——
Medium5.3Missing Authorization to Sensitive Information Exposure
Email posts to subscribers≤6.2No patch available
CVE-2023-41735—
Medium6.1Reflected Cross-Site Scripting via 'pensopay_action'
pensopay Payments≤6.3.1Update to 6.3.2
CVE-2023-41691—

Search VulnCrest Radar

Jump to

Are you sure?