VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1152)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,165 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1152)
SeverityVulnerabilityCVEInstallsPublished
Medium4.3Missing Authorization in 'ajax_deactivate'
RapidLoad AI – Optimize Web Vitals Automatically≤1.7.1Update to 1.7.2
CVE-2023-1336—
Medium4.3Cross-Site Request Forgery via 'attach_rule'
RapidLoad AI – Optimize Web Vitals Automatically≤1.7.1Update to 1.7.2
CVE-2023-1343—
Medium4.3Missing Authorization in 'queue_posts'
RapidLoad AI – Optimize Web Vitals Automatically≤1.7.1Update to 1.7.2
CVE-2023-1334—
Medium5.4Authenticated (Contributor+) Arbitrary Content Deletion
GiveWP – Donation Plugin and Fundraising Platform≤2.25.1Update to 2.25.2
CVE-2023-23672—
Medium4.3Missing Authorization in 'clear_uucss_logs'
RapidLoad AI – Optimize Web Vitals Automatically≤1.7.1Update to 1.7.2
CVE-2023-1337—
Medium5.4Cross-Site Request Forgery via plugin_mass_delete_unused_tags_init
Mass Delete Unused Tags≤2.0.0Update to 3.0.0
CVE-2023-27430—
Medium4.3Cross-Site Request Forgery via 'uucss_update_rule'
RapidLoad AI – Optimize Web Vitals Automatically≤1.7.1Update to 1.7.2
CVE-2023-1344—
Medium4.3Missing Authorization in 'attach_rule'
RapidLoad AI – Optimize Web Vitals Automatically≤1.7.1Update to 1.7.2
CVE-2023-1338—
Medium4.3Missing Authorization in 'clear_page_cache'
RapidLoad AI – Optimize Web Vitals Automatically≤1.7.1Update to 1.7.2
CVE-2023-1333—
Medium4.3Cross-Site Request Forgery via 'clear_uucss_logs'
RapidLoad AI – Optimize Web Vitals Automatically≤1.7.1Update to 1.7.2
CVE-2023-1340—
Medium4.3Missing Authorization in 'uucss_update_rule'
RapidLoad AI – Optimize Web Vitals Automatically≤1.7.1Update to 1.7.2
CVE-2023-1339—
Medium4.4Authenticated (Administrator+) Cross-Site Scripting via Form Name
Easy Forms for Mailchimp≤6.8.8Update to 6.8.9
CVE-2023-1323—
Medium5.8Unauthenticated Arbitrary Email Sending
Real Estate 7 WordPress≤3.3.4Update to 3.3.5
——
Medium5.4Missing Authorization via save_popup_enabled_state
Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder≤1.17.1Update to 1.18.0
CVE-2022-45819—
Medium4.3Cross-Site Request Forgery via give_cache_flush
GiveWP – Donation Plugin and Fundraising Platform≤2.25.1Update to 2.25.2
CVE-2023-25450—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Image Over Image For WPBakery Page Builder<3.0Update to 3.0
CVE-2023-0399—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via give_form_grid shortcode
GiveWP – Donation Plugin and Fundraising Platform≤2.25.1Update to 2.25.2
CVE-2023-23668—
Medium4.3Cross-Site Request Forgery via save
GiveWP – Donation Plugin and Fundraising Platform≤2.25.1Update to 2.25.2
——
Medium4.1Authenticated (Admin+) Server-Side Request Forgery via give_get_content_by_ajax_handler
GiveWP – Donation Plugin and Fundraising Platform≤2.25.1Update to 2.25.2
CVE-2022-40312—
Medium6.1Cross-Site Request Forgery to Cross-Site Scripting via render_dropdown
GiveWP – Donation Plugin and Fundraising Platform≤2.25.1Update to 2.25.2
——
Medium4.3Cross-Site Request Forgery to Settings Update and Cache Clearing
Affiliate Super Assistent≤1.5.1Update to 1.5.2
CVE-2023-27417—
Medium5.4Cross-Site Request Forgery via plugin_activation
HT Easy GA4 – Google Analytics WordPress Plugin≤1.0.6Update to 1.0.7
CVE-2023-23802—
Medium5.3Directory Traversal
Drag and Drop Multiple File Upload PRO - Contact Form 7 Standard≤2.10.9Update to 2.11.0
CVE-2023-1112—
Medium6.1Reflected Cross-Site Scripting via 'replytocom'
Webmention≤4.0.8Update to 4.0.9
——
Medium5.3Information Disclosure via updraft_ajaxrestore
UpdraftPlus Premium≤1.22.24Update to 1.23.1
——
Medium4.3Cross-Site Request Forgery via init
Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder≤1.18.0Update to 1.18.1
——
Medium4.3Easy Redirect Manager <= 2.72 - Cross-Site Request Forgery via dismiss_notice
301 Redirects – Redirect Manager≤2.72Update to 2.73
——
Medium4.3Cross-Site Request Forgery leading to Settings Updates
cformsII≤15.0.4Update to 15.0.5
CVE-2023-25449—
Medium4.3Cross-Site Request Forgery via wp_ajax_tifm_save_decision
Clone≤2.3.7Update to 2.3.8
——
High8.3Unauthenticated CSV Injection
GiveWP – Donation Plugin and Fundraising Platform≤2.25.1Update to 2.25.2
CVE-2023-22719—

Search VulnCrest Radar

Jump to

Are you sure?