VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1162)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,165 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1162)
SeverityVulnerabilityCVEInstallsPublished
Medium6.3Cross-Site Request Forgery
CSS JS Manager, Async JavaScript, Defer Render Blocking CSS≤2.4.49Update to 2.4.49.1
CVE-2022-47154—
Medium4.3Cross-Site Request Forgery in crpClearCache
Contextual Related Posts≤3.3.1Update to 3.3.2
——
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Companion Sitemap Generator – Simple, Smart, and SEO-Ready≤4.5.1.1Update to 4.5.2
CVE-2023-0066—
Medium5.4Cross Site Request Forgery
Community by PeepSo – Download from PeepSo.com≤6.0.2.0Update to 6.0.3.0
CVE-2022-41633—
Medium4.4Authenticated (Admin+) Stored Cross-Site Scripting via Admin Settings
Bing Site Verification plugin using Meta Tag≤1.0No patch available
CVE-2023-23875—
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
WP Custom Fields Search≤1.2.34Update to 1.2.35
CVE-2022-47157—
Medium4.3Cross-Site Request Forgery in rttpg_spare_me
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid≤5.0.4Update to 5.0.5
CVE-2022-46853—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Editor Blocks by Download Manager≤2.1.8Update to 2.1.9
CVE-2023-22713—
Medium4.4Authenticated (Admin+) Stored Cross-Site Scripting in show
Sponsors Carousel≤4.0.2No patch available
CVE-2023-23808—
Medium4.3Cross-Site Request Forgery leading to Plugin Settings Changes
Books Gallery – Book Showcase, Library & Affiliate Plugin≤4.4.8Update to 4.4.9
CVE-2023-23705—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Video Background≤2.7.3Update to 2.7.4
CVE-2022-4652—
Medium4.3Cross-Site Request Forgery via tptn_ajax_clearcache
WebberZone Top 10 — Popular Posts≤3.2.3Update to 3.2.4
——
Critical9.1Broadcast Live Video <= 5.5.15 - Missing Authorization to Unauthenticated Remote Code Execution
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP≤5.5.15Update to 5.5.16
CVE-2023-25699—
Medium4.3Cross Site Request Forgery
AidWP – Donation & Payment Forms (Stripe Powered)≤3.1.5Update to 3.1.6
CVE-2022-47422—
Medium4.4Authenticated(Admin+) Stored Cross-Site Scripting
Sitemap Index≤1.2.3No patch available
CVE-2023-23816—
Medium4.4Authenticated(Admin+) Stored Cross-Site Scripting
Stock market charts from finviz≤1.0.1Update to 1.0.2
CVE-2023-23809—
Medium4.3Cross-Site Request Forgery in add_to_favorite
Starter Templates: AI-Powered Website Templates for Elementor & Gutenberg≤3.1.20Update to 3.2.21
CVE-2022-46851—
Medium4.3Missing Authorization in crp_ajax_clearcache
Contextual Related Posts≤3.3.1Update to 3.3.2
——
Medium4.4Authenticated(Admin+) Stored Cross-Site Scripting
WordPress Custom Settings≤1.0No patch available
CVE-2023-23806—
Medium6.1Cross-Site Request Forgery
Easy Google Analytics for WordPress≤1.6.0No patch available
CVE-2023-23887—
High8.8PHAR Deserialization
BuddyForms≤2.7.7Update to 2.7.8
CVE-2023-26326—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content≤4.5.4Update to 4.5.5
CVE-2023-23820—
Medium4.4Authenticated(Admin+) Stored Cross-Site Scripting
Exquisite PayPal Donation≤2.0.0No patch available
CVE-2023-23785—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Portfolio Slideshow≤1.13.0No patch available
CVE-2023-23717—
Medium4.3Missing Authorization in ajaxCalculatePrice function
Advanced Dynamic Pricing and Discount Rules for WooCommerce≤4.1.5Update to 4.1.6
——
Medium5.4Cross-Site Request Forgery via handleSubmitAction function
Advanced Dynamic Pricing and Discount Rules for WooCommerce≤4.1.5Update to 4.1.6
——
Medium4.3Cross-Site Request Forgery via migrateProductOnlyToCommon function
Advanced Dynamic Pricing and Discount Rules for WooCommerce≤4.1.5Update to 4.1.6
——
Medium5.4Authenticated (Contributor+) Stored Cross-Site Scripting via googlepdf Shortcode
Simple PDF Viewer≤1.9No patch available
CVE-2023-23817—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Google Maps v3 Shortcode≤1.2.1No patch available
CVE-2023-23827—
Medium4.3Cross-Site Request Forgery via migrateCommonToProductOnly function
Advanced Dynamic Pricing and Discount Rules for WooCommerce≤4.1.5Update to 4.1.6
——

Search VulnCrest Radar

Jump to

Are you sure?