VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1084)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,165 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1084)
SeverityVulnerabilityCVEInstallsPublished
Medium6.5Cross-Site Request Forgery
All in One B2B for WooCommerce≤1.0.3No patch available
CVE-2023-3547—
High7.2Unauthenticated Stored Cross-Site Scripting
UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds≤1.0.7Update to 1.0.8
CVE-2023-39308—
High7.2Authenticated (Administrator+) SQL Injection via 'orderby'
ilGhera Support System for WooCommerce≤1.2.1Update to 1.2.2
CVE-2023-41685—
Medium4.3Cross-Site Request Forgery
MyCryptoCheckout – Bitcoin, Ethereum, and 100+ altcoins for WooCommerce≤2.125Update to 2.126
CVE-2023-41693—
High8.8Authenticated (Subscriber+) Arbitrary File Upload
Export Import Menus≤1.8.0Update to 1.9.0
CVE-2023-34385—
Medium4.3Missing Authorization
Bulk NoIndex & NoFollow Toolkit≤1.5Update to 1.51
CVE-2023-41688—
Medium5.4Missing Authorization
Tilda-publishing≤0.3.23Update to 0.3.24
CVE-2023-31234—
Medium5.3Missing Authorization
TelSender – Сontact form 7, Events, Wpforms, ninja forms and woocommerce to telegram bot≤1.14.11Update to 1.14.12
CVE-2023-41683—
Medium4.3Cross-Site Request Forgery
WP-dTree≤4.4.5Update to 4.5.0
CVE-2023-41667—
Medium4.3Cross-Site Request Forgery
SIS Handball≤1.0.45No patch available
CVE-2023-41684—
Medium4.3Missing Authorization to Settings Update
rtMedia for WordPress, BuddyPress and bbPress<4.6.15Update to 4.6.15
——
Medium4.3Cross-Site Request Forgery
Live News – Responsive News Ticker≤1.06Update to 1.07
CVE-2023-41669—
Medium4.3Cross-Site Request Forgery
Realbig For WordPress≤1.0.6Update to 1.0.7
CVE-2023-41694—
High8.8Authenticated (Subscriber+) SQL Injection
Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker≤2.6.0Update to 2.6.1
CVE-2023-34383—
Low2.7Authenticated (Admin+) Arbitrary File Access
FileOrganizer – WordPress File Manager≤1.0.3Update to 1.0.4
CVE-2023-3664—
Medium6.5Missing Authorization
Easy Newsletter Signups≤1.0.4No patch available
CVE-2023-41664—
Medium6.1Open Redirect
Login and Logout Redirect≤2.0.2No patch available
CVE-2023-41648—
Medium4.3Missing Authorization
Better Addons for Elementor≤1.3.8Update to 1.3.9
CVE-2023-41656—
Medium5.3Missing Authorization
Ovic Product Bundle≤1.1.2No patch available
CVE-2023-41649—
Medium5.4Cross-Site Request Forgery
Responsive Gallery Grid≤2.3.13Update to 2.3.14
CVE-2023-41659—
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
HollerBox — Fast & Effective Popups & Lead-Generation≤2.3.2Update to 2.3.3
CVE-2023-41657—
Medium6.1Reflected Cross-Site Scripting
WP-dTree≤4.4.5Update to 4.5.0
CVE-2023-41662—
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
Smarty for WordPress≤3.1.35No patch available
CVE-2023-41661—
Low3.3Authenticated (Administrator+) Stored Cross-Site Scripting
authLdap≤2.6.1Update to 2.6.2
CVE-2023-41655—
Medium6.1Reflected Cross-Site Scripting
Sermon&#039;e – Sermons Online≤1.0.0No patch available
CVE-2023-41653—
Critical9.8Unauthenticated SQL Injection
RSVPMaker≤10.6.6Update to 10.6.7
CVE-2023-41652—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Font Awesome 4 Menus≤4.7.0No patch available
CVE-2023-4718—
Medium4.3Cross-Site Request Forgery
Remove/hide Author, Date, Category Like Entry-Meta≤2.1No patch available
CVE-2023-41650—
Medium4.3Cross-Site Request Forgery
authLdap≤2.5.8Update to 2.5.9
CVE-2023-41654—
Medium4.3Cross-Site Request Forgery
Multi-column Tag Map≤17.0.26Update to 17.0.27
CVE-2023-41651—

Search VulnCrest Radar

Jump to

Are you sure?