VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1132)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,165 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1132)
SeverityVulnerabilityCVEInstallsPublished
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
Gps Plotter≤5.3.0No patch available
CVE-2023-30874—
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
Cab Grid≤1.5.15Update to 1.6
CVE-2023-28533—
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
Image Optimizer by 10web – Image Optimizer and Compression plugin≤1.0.26Update to 1.0.27
——
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
eRocket≤1.2.4Update to 1.2.5
CVE-2023-28174—
Medium4.4Authenticated (Administrator+) Cross-Site Scripting via 'FormillaToolsID'
Customer Support Software, Live Chat, & Marketing Automation≤1.0Update to 1.1
——
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Redirect After Login≤0.1.9No patch available
CVE-2023-27624—
Medium6.1Reflected Cross-Site Scripting
Modal Dialog<3.5.15Update to 3.5.15
CVE-2023-31071—
Medium6.1Unauthenticated Cross-Site Scripting
Woocommerce Email Report≤2.4No patch available
CVE-2023-27627—
Medium4.3Cross-Site Request Forgery
Form Block<1.0.2Update to 1.0.2
CVE-2023-30616—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
WPJAM Basic≤6.2.1Update to 6.2.1.1
CVE-2023-23709—
Medium6.1Reflected Cross-Site Scripting via 'post_type'
CMS Tree Page View – Reorder Pages with a Drag-and-Drop Tree<1.6.8Update to 1.6.8
CVE-2023-30868—
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
Verified Reviews (Avis Vérifiés)≤2.3.14Update to 2.3.15
CVE-2023-23720—
Medium4.3Cross-Site Request Forgery
Ninja Tables – Responsive Table Builder for Data, Pricing & Product Tables≤4.3.4Update to 4.3.5
CVE-2022-47136—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via smlsubform shortcode
Mail Subscribe List≤2.1.9Update to 2.1.10
CVE-2023-23657—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
ActiveCampaign – The autonomous marketing platform≤8.1.11Update to 8.1.12
CVE-2023-0233—
Medium6.1Unauthenticated Stored Cross-Site Scripting via Cross-Site Request Forgery
WPBot – AI ChatBot for WordPress & Growth Suite: SEO, AI Writer, Email Marketing, Social Media≤4.4.4Update to 4.4.5
CVE-2023-10115K+
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Ninja Tables – Responsive Table Builder for Data, Pricing & Product Tables≤4.3.4Update to 4.3.5
CVE-2022-47137—
Medium6.1Reflected Cross-Site Scripting
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup≤4.0Update to 4.0.1
CVE-2022-47140—
Critical9.8Unauthenticated Arbitrary File Upload to Remote Code Execution
Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder≤1.8.1Update to 1.9
CVE-2022-4774—
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
Simple Tooltips≤2.1.4No patch available
CVE-2023-25958—
Medium6.1Reflected Cross-Site Scripting
Responsive Tabs — Horizontal, Vertical & Accordion Tabs for WordPress≤1.1.15Update to 1.1.16
CVE-2023-2184—
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Continuous announcement scroller≤13.0No patch available
CVE-2022-46819—
Medium4.3Cross-Site Request Forgery
Simple Share Buttons Adder≤8.4.6Update to 8.4.7
CVE-2022-47178—
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
Easy Ad Manager≤1.0.0No patch available
CVE-2023-25460—
Medium6.1Reflected Cross-Site Scripting via date_post_id
Property Hive≤1.5.48Update to 1.5.49
CVE-2023-22706—
Medium4.4Authenticated (Admin+) Stored Cross-Site Scripting
BizLibrary≤1.1No patch available
CVE-2023-0892—
High7.2Authenticated (Administrator+) SQL Injection
Shortcode IMDB≤6.0.8No patch available
CVE-2022-47432—
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
Yatra – Travel Booking & Tour Operator Software≤2.1.14Update to 2.1.15
CVE-2022-47436—
Medium4.3Cross-Site Request Forgery via album-gallery-column-settings.php
Album Gallery for Photo & Video≤1.4.9Update to 1.5.0
CVE-2023-23646—
Medium6.1Reflected Cross-Site Scripting
Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns)≤1.7.0.10Update to 1.7.0.11
CVE-2022-47441—

Search VulnCrest Radar

Jump to

Are you sure?