VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1171)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,165 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1171)
SeverityVulnerabilityCVEInstallsPublished
Medium4.4Authenticated (Admin+) Stored Cross-Site Scripting
Namaste! LMS≤2.5.9.3Update to 2.5.9.4
CVE-2023-0548—
High8.8Authenticated (Subscriber+) SQL Injection
WP Statistics – Simple, privacy-friendly Google Analytics alternative≤13.2.10Update to 13.2.11
CVE-2022-38074—
High7.3Missing Authorization to Settings Update
Beautiful Cookie Consent Banner≤2.10.0Update to 2.10.1
——
High7.2Authenticated (Admin+) SQL Injection
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory≤2.2.23Update to 2.2.24
CVE-2023-0278—
Medium4.4Authenticated (Admin+) Stored Cross-Site Scripting
Arigato Autoresponder and Newsletter≤2.1.7.1Update to 2.1.7.2
CVE-2023-0543—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
GS Portfolio for Envato≤1.3.8Update to 1.4.0
CVE-2023-0559—
Medium5.3Protection Mechanism Bypass
Private Content≤8.4.3Update to 8.4.4
CVE-2023-0581—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy≤3.1.0.4Update to 3.1.0.5
CVE-2023-0380—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
GS Product Slider for WooCommerce – Product Carousel, Product Grid & Product Showcase≤1.5.8Update to 1.5.9
CVE-2023-0492—
Medium4.4Authenticated (Admin+) Stored Cross-Site Scripting
AI Contact Us Form≤1.0No patch available
CVE-2023-24386—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
GS Portfolio – Filterable Portfolio, Portfolio Grid & Portfolio Slider≤1.6.0Update to 1.6.1
CVE-2023-0540—
Medium4.3Cross-Site Request Forgery
Robo Gallery – Photo & Image Slider≤3.2.11Update to 3.2.12
CVE-2023-24414—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
EmbedStories – Display social media stories≤0.7.4Update to 0.7.5
CVE-2023-0372—
Medium6.1Reflected Cross-Site Scripting
BackupBuddy≤8.8.2Update to 8.8.3
CVE-2022-4897—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
MapGeo – Interactive Geo Maps≤1.5.8Update to 1.5.9
CVE-2023-23866—
High7.1Insecure Direct Object Reference
WP Private Message<1.0.6Update to 1.0.6
CVE-2023-0453—
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
Email Marketing Plugin – WP Email Capture≤3.9.3Update to 3.10
CVE-2023-23723—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
EmbedSocial – Social Media Feeds, Reviews and Galleries≤1.1.27Update to 1.1.28
CVE-2023-0371—
Medium6.5Authenticated (Contributor+) Local File Inclusion
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings≤1.0.107.2Update to 1.0.107.3
CVE-2023-23888—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Dark Mode – Improve Accessibility with AI Powered Dark Theme≤3.0.6Update to 4.0.0
CVE-2022-4714—
Medium6.4Authenticator (Contributor+) Stored Cross-Site Scripting via Shortcode
GS Books Showcase – Book Library, Book Grid & Book Slider for Authors≤1.3.0Update to 1.3.1
CVE-2023-0541—
Critical9.8PHP Object Injection
ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin≤2.5.3Update to 2.5.4
CVE-2023-0232—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin≤2.5.3Update to 2.5.4
CVE-2023-0231—
Medium5.5Authenticated (Editor+) Stored Cross-Site Scripting
Booking calendar, Appointment Booking System≤3.2.3Update to 3.2.4
CVE-2022-47438—
Medium5.3Unauthenticated Bypass Vulnerability
Booking calendar, Appointment Booking System≤3.2.3Update to 3.2.4
CVE-2023-24373—
Medium4.3Cross-Site Request Forgery
DH – Anti AdBlocker≤36Update to 37
CVE-2022-47162—
High8.1Insecure Direct Object Reference
Quick Restaurant Menu≤2.0.2Update to 2.1.0
CVE-2023-0550—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Blocksy Companion<1.8.68Update to 1.8.68
CVE-2023-23898—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Glossary≤2.1.27Update to 2.1.28
CVE-2023-24378—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
BNE Testimonials<2.0.8Update to 2.0.8
CVE-2023-24411—

Search VulnCrest Radar

Jump to

Are you sure?