Database
WordPress Vulnerability Database (page 1160)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium4.3Missing Authorization in 'logPageContent' function
Redirection
≤1.1.3Update to 1.1.4
- Medium4.3Missing Authorization in 'loadSettings' function
Redirection
≤1.1.3Update to 1.1.4
- Medium4.3Cross-Site Request Forgery via 'deleteRedirect' function
Redirection
≤1.1.3Update to 1.1.4
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Responsive Clients Logo Gallery Plugin for WordPress – Smart Logo Showcase Lite
≤1.1.9No patch available
- Medium4.3Missing Authorization in 'liveSearch' function
Redirection
≤1.1.3Update to 1.1.4
- Medium4.3Missing Authorization in 'addRedirectRule' function
Redirection
≤1.1.3Update to 1.1.4
- Medium4.3Cross-Site Request Forgery via cp_create_private_pages_for_all_users
Client Portal – Private user pages and login
≤1.1.8Update to 1.1.9
- Medium4.3Cross-Site Request Forgery via 'cronLogDeleteOption' function
Redirection
≤1.1.3Update to 1.1.4
- Medium4.3Missing Authorization in 'instantEditRedirect' function
Redirection
≤1.1.3Update to 1.1.4
- High7.2Missing Authorization in Settings Import to Stored Cross-Site Scripting
10Web Booster – Website speed optimization, Cache & Page Speed optimizer
≤2.13.44Update to 2.13.45
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
real.Kit
≤5.1.0Update to 5.1.1
- High8.8Cross-Site Request Forgery
Booking Ultra Pro Appointments Booking Calendar Plugin
≤1.1.6Update to 1.1.7
- Medium4.3Cross-Site Request Forgery via 'saveRedirectSettings' function
Redirection
≤1.1.3Update to 1.1.4
- Medium5.4Cross-Site Request Forgery
Feed Them Social – Social Media Feeds, Video, and Photo Galleries
≤3.0.2Update to 4.0.0
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting via title
JS Job Manager
≤2.0.0Update to 2.0.1
- Medium4.3Cross-Site Request Forgery via 'addRedirectRule' function
Redirection
≤1.1.3Update to 1.1.4
- Medium4.3Missing Authorization in 'addRedirect' function
Redirection
≤1.1.3Update to 1.1.4
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
WordPress Старт
≤3.7Update to 3.8
- Medium4.3Cross-Site Request Forgery via 'instantEditRedirect' function
Redirection
≤1.1.3Update to 1.1.4
- Medium4.3Missing Authorization in 'redirectionPageContent' function
Redirection
≤1.1.3Update to 1.1.4
- Medium4.3Missing Authorization in 'deleteRedirect' function
Redirection
≤1.1.3Update to 1.1.4
- Medium4.3Authenticated (Subscriber+) Arbitrary Client Deletion (wo_ajax_remove_client)
WP OAuth Server (OAuth Authentication)
≤4.2.5Update to 4.3.0
- Medium4.3Cross-Site Request Forgery via 'statusBulkEdit' function
Redirection
≤1.1.3Update to 1.1.4
- Medium4.3Cross-Site Request Forgery
Read More Excerpt Link
≤1.6Update to 1.6.1
- Medium4.3Cross-Site Request Forgery via aDBc_save_settings_callback
Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance
≤3.1.1Update to 3.1.2
- Medium4.3Missing Authorization in 'SaveSettings' function
Redirection
≤1.1.3Update to 1.1.4
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Saan World Clock
≤1.8No patch available
- Low3.8Authenticated (Administrator+) Stored Cross-Site Scripting
wp2syslog
≤1.0.5No patch available
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
React Webcam
≤1.2.0No patch available
- Medium4.3Cross-Site Request Forgery via 'SaveSettings' function
Redirection
≤1.1.3Update to 1.1.4