VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1167)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,165 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1167)
SeverityVulnerabilityCVEInstallsPublished
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Block Options
Scriptless Social Sharing≤3.2.1Update to 3.2.2
CVE-2023-0377—
High7.2Authenticated (Admin+) SQL Injection
All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements2.0.8 – 2.0.8Update to 2.0.9
CVE-2023-0487—
High8.8Cross-Site Request Forgery to PHAR Deserialization
ImageMagick Engine≤1.7.5Update to 1.7.6
CVE-2022-3568—
High8.8Authenticated (Subscriber+) SQL Injection
Rich Showcase for Google Reviews≤2.2.3Update to 2.2.4
CVE-2022-44580—
Medium6.1Reflected Cross Site Scripting
微信机器人高级版≤6.2.1No patch available
CVE-2022-45837—
Medium5.4Cross-Site Request Forgery to Arbitrary Media Deletion
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker≤8.0.8Update to 8.0.9
CVE-2023-0292—
High8.5Authenticated (Subscriber+) PHP Object Injection via prompt_dismiss_notice
Replyable – Subscribe to Comments and Reply by Email≤2.2.9Update to 2.2.10
CVE-2022-4265—
Medium4.3Cross Site Request Forgery
ColorWay≤4.2.3No patch available
CVE-2023-25447—
Medium5.4Cross-Site Request Forgery via ajax_edit_folder
Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types≤2.18.16Update to 2.18.17
CVE-2023-0726—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Responsive Pricing Table≤5.1.6Update to 5.1.7
CVE-2022-46855—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Yellow Yard Searchbar≤2.7.27Update to 2.8.12
CVE-2023-1110—
Medium5.4Cross-Site Request Forgery via ajax_delete_folder
Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types≤2.18.16Update to 2.18.17
CVE-2023-0727—
High8.8Cross-Site Request Forgery
Slider by Supsystic≤1.8.6Update to 1.8.7
CVE-2022-47155—
Medium5.4Cross-Site Request Forgery via ajax_clone_folder
Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types≤2.18.16Update to 2.18.17
CVE-2023-0725—
Medium5.4Cross-Site Request Forgery on ajax_move_object
Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types≤2.18.16Update to 2.18.17
CVE-2023-0723—
Medium5.4Missing Authorization via ajax_save_state
Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types≤2.18.16Update to 2.18.17
CVE-2023-0711—
Medium5.4Cross-Site Request Forgery via ajax_save_state
Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types≤2.18.16Update to 2.18.17
CVE-2023-0722—
Medium5.4Missing Authorization on ajax_move_object
Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types≤2.18.16Update to 2.18.17
CVE-2023-0712—
Medium5.4Missing Authorization on ajax_add_folder
Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types≤2.18.16Update to 2.18.17
CVE-2023-0713—
Medium5.4Cross-Site Request Forgery via ajax_add_folder
Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types≤2.18.16Update to 2.18.17
CVE-2023-0724—
Medium5.4Cross-Site Request Forgery via ajax_save_folder_order
Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types≤2.18.16Update to 2.18.17
CVE-2023-0730—
Medium5.4Missing Authorization on ajax_edit_folder
Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types≤2.18.16Update to 2.18.17
CVE-2023-0716—
Medium5.4Missing Authorization on ajax_save_folder
Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types≤2.18.16Update to 2.18.17
CVE-2023-0718—
High7.2Authenticated (Author+) Arbitrary File Upload
Auto Featured Image (Auto Post Thumbnail)≤3.9.15Update to 3.9.16
CVE-2023-0477—
Medium5.4Cross-Site Request Forgery on ajax_save_folder
Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types≤2.18.16Update to 2.18.17
CVE-2023-0728—
Medium5.4Missing Authorization via ajax_delete_folder
Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types≤2.18.16Update to 2.18.17
CVE-2023-0717—
Medium5.4Cross-Site Request Forgery via ajax_save_sort_order
Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types≤2.18.16Update to 2.18.17
CVE-2023-0729—
Medium6.4Authenticated (Editor+) Stored Cross-Site Scripting
MapGeo – Interactive Geo Maps≤1.5.9Update to 1.5.11
CVE-2023-0731—
Medium5.4Missing Authorization on ajax_clone_folder
Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types≤2.18.16Update to 2.18.17
CVE-2023-0715—
Medium5.4Missing Authorization on ajax_save_sort_order
Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types≤2.18.16Update to 2.18.17
CVE-2023-0719—

Search VulnCrest Radar

Jump to

Are you sure?