Database
WordPress Vulnerability Database (page 1168)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium5.4Cross-Site Request Forgery via ajax_save_state
Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types
≤2.18.16Update to 2.18.17
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
eCommerce Product Catalog
≤3.3.4Update to 3.3.5
- Medium6.5Authenticated(Subscriber+) Sensitive Information Disclosure
Gutenberg Forms – WordPress Form Builder Plugin
≤2.2.8.3Update to 2.2.9
- Medium6.1CSV Injection
Comments Import & Export
≤2.3.1Update to 2.3.2
- Medium5.4Cross-Site Request Forgery to Stored Cross-Site Scripting
0mk Shortener
≤0.2No patch available
- High7.2Unauthenticated Stored Cross-Site Scripting
Monolit
≤2.0.6Update to 2.0.7
- High7.2Authenticated(Editor+) Privilege Escalation
Redirection for Contact Form 7
≤2.7.0Update to 2.8.0
- Medium5.4Missing Authorization via ajax_unassign_folders
Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types
≤2.18.16Update to 2.18.17
- Medium4.3Missing Authorization leading to Authenticated (Subscriber+) Sensitive Information Disclosure
Ajax Search Lite – Live Search & Filter
≤4.10.3Update to 4.11
- Medium4.3Cross Site Request Forgery
A2 Optimized WP – Turbocharge and secure your WordPress site
≤3.0.4Update to 3.0.5
- Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Chained Quiz
≤1.3.2.5Update to 1.3.2.6
- Medium4.3Cross-Site Request Forgery
Conversios – GA4, Google Ads & Meta Conversion Tracking with Product Feed for WooCommerce
≤5.2.3Update to 5.2.4
- Medium6.1Open Redirect
Pie Register – User Registration, Profiles & Content Restriction
≤3.8.2.2Update to 3.8.2.3
- Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Arigato Autoresponder and Newsletter
≤2.7.1Update to 2.7.1.1
- Medium5.4Authenticated (Subscriber+) Plugin Settings Change
Auto Affiliate Links
≤6.2.1.5Update to 6.2.1.6
- Medium6.4Authenticated(Contributor+) Cross-Site Scripting via Shortcode
Icegram Collect – Easy Contact Form, Subscription Form & Lead Collection Plugin for WordPress
≤1.3.8Update to 1.3.9
- Medium6.5Missing Authorization in save_costs
Cost of Goods: Product Cost & Profit Calculator for WooCommerce
≤2.8.6Update to 2.8.7
- Medium4.3Cross-Site Request Forgery
PayPal Brasil para WooCommerce
≤1.4.2Update to 1.4.3
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Option
Qubely – Advanced Gutenberg Blocks
≤1.8.4Update to 1.8.5
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Quick Contact Form
≤8.0.3.1Update to 8.0.4
- Medium6.5Unauthenticated CSV Injection
Email Subscribers & Newsletters by Icegram Express – Email Marketing, Post Notifications & WooCommerce Marekting Automation for WordPress
≤5.5.2Update to 5.5.3
- Medium6.4Authenticated(Contributor+) Stored Cross-Site Scripting
Visualizer – Tables & Charts Manager with Built-in AI Generator
≤3.9.1Update to 3.9.2
- High8.8Authenticated (Subscriber+) SQL Injection
GigPress
≤2.3.28Update to 2.3.29
- Medium6.5Cross-Site Request Forgery in save_costs
Cost of Goods: Product Cost & Profit Calculator for WooCommerce
≤2.8.6Update to 2.8.7
- Medium4.3Cross-Site Request Forgery
Mercado Pago payments for WooCommerce
≤6.3.1Update to 6.4.0
- Medium4.3Cross-Site Request Forgery via feedback_action
CodePeople Post Map for Google Maps
≤1.0.43Update to 1.0.44
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Feedback Form Submission
CodePeople Post Map for Google Maps
≤1.0.43Update to 1.0.44
- Medium4.3Cross-Site Request Forgery
Album and Image Gallery Plus Lightbox
≤1.6.2Update to 1.6.3
- Medium5.4Cross-Site Request Forgery via ajax_unassign_folders
Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types
≤2.18.16Update to 2.18.17
- Medium5.4Cross-Site Request Forgery to Post Updates
ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
≤2.5.1Update to 2.5.2