Database

WordPress Vulnerability Database (page 1172)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1172)
Severity	Vulnerability	CVE	Installs	Published
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting Bootstrap Shortcodes<3.4.6Update to 3.4.6	—	—	Jan 27, 2023
High8.2	Authorization Bypass ContentStudio≤1.2.5Update to 1.2.6	CVE-2023-0558	—	Jan 27, 2023
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting Bootstrap Shortcodes<3.4.6Update to 3.4.6	—	—	Jan 27, 2023
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting Bootstrap Shortcodes<3.4.6Update to 3.4.6	CVE-2022-4777	—	Jan 27, 2023
Medium4.4	Authenticated (Admin+) Stored Cross-Site Scripting Namaste! LMS<2.5.9.2Update to 2.5.9.2	CVE-2023-24383	—	Jan 27, 2023
High7.2	Unauthenticated Stored Cross-Site Scripting Limit Login Attempts Plus – WordPress Limit Login Attempts By Felix≤1.0.9Update to 1.1.0	—	—	Jan 27, 2023
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Greenshift – animation and page builder blocks≤4.9.9Update to 5.0	CVE-2023-0378	—	Jan 27, 2023
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting Glossary≤2.1.27Update to 2.1.28	CVE-2023-24378	—	Jan 27, 2023
Medium4.4	Authenticated (Admin+) Stored Cross-Site Scripting VikBooking Hotel Booking Engine & PMS<1.5.12Update to 1.5.12	CVE-2023-24396	—	Jan 27, 2023
Medium4.4	Authenticated (Admin+) Stored Cross-Site Scripting Simple Image Popup≤1.3.6Update to 2.0.0	CVE-2022-47610	—	Jan 27, 2023
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting Bootstrap Shortcodes<3.4.6Update to 3.4.6	—	—	Jan 27, 2023
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting Bootstrap Shortcodes<3.4.6Update to 3.4.6	—	—	Jan 27, 2023
High8.6	Unauthenticated SQL Injection JS Help Desk – AI-Powered Support & Ticketing System≤2.7.1Update to 2.7.2	CVE-2022-47151	—	Jan 27, 2023
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting Bootstrap Shortcodes<3.4.6Update to 3.4.6	—	—	Jan 27, 2023
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting Bootstrap Shortcodes≤3.4.0No patch available	—	—	Jan 27, 2023
Critical9.1	Missing Authorization to Plugin Settings Update JS Help Desk – AI-Powered Support & Ticketing System2.7.1 – 2.7.1Update to 2.7.2	CVE-2022-46838	—	Jan 27, 2023
Medium6.4	Authenticated (Author+) Stored Cross-Site Scripting Greenshift – animation and page builder blocks≤4.9.9Update to 5.0.0	CVE-2023-22707	—	Jan 27, 2023
Medium6.3	Missing Authorization JS Help Desk – AI-Powered Support & Ticketing System≤2.7.1Update to 2.7.2	CVE-2022-46840	—	Jan 27, 2023
Critical9.8	Unauthenticated Arbitrary File Upload JS Help Desk – AI-Powered Support & Ticketing System≤2.7.1Update to 2.7.2	CVE-2022-46839	—	Jan 27, 2023
High7.5	Information Exposure ContentStudio≤1.2.5Update to 1.2.6	CVE-2023-0557	—	Jan 27, 2023
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting Bootstrap Shortcodes<3.4.6Update to 3.4.6	—	—	Jan 27, 2023
High8.8	Cross-Site Request Forgery to Arbitrary Plugin Install and Activation Uncanny Toolkit for LearnDash≤3.6.4.1Update to 3.6.4.2	CVE-2023-23714	—	Jan 27, 2023
Medium4.4	Authenticated (Administrator+) Stored Cross-Site Scripting Advanced Social Pixel≤2.1.1No patch available	CVE-2023-24381	—	Jan 27, 2023
High7.2	Unauthenticated CSV Injection Noptin – Newsletter, New Post Notifications & Email Automation≤1.10.3Update to 1.11.0	CVE-2022-46803	—	Jan 27, 2023
High7.2	Unauthenticated Stored Cross-Site Scripting Welcart e-Commerce≤2.8.10Update to 2.8.11	CVE-2023-22705	—	Jan 27, 2023
Medium4.3	Cross-Site Request Forgery Organization chart≤1.4.4Update to 1.4.5	CVE-2023-24384	—	Jan 27, 2023
Medium5.5	Authenticated (Editor+) Stored Cross-Site Scripting Booking calendar, Appointment Booking System≤3.2.3Update to 3.2.4	CVE-2022-47438	—	Jan 27, 2023
Medium5.4	Cross-Site Request Forgery to Stored Cross-Site Scripting and Settings Reset WPBot – AI ChatBot for WordPress & Growth Suite: SEO, AI Writer, Email Marketing, Social Media≤4.2.8Update to 4.2.9	CVE-2023-24415	5K+	Jan 27, 2023
Medium4.3	Cross-Site Request Forgery Booking calendar, Appointment Booking System≤3.2.3Update to 3.2.4	CVE-2023-24388	—	Jan 27, 2023
Medium5.3	Unauthenticated Bypass Vulnerability Booking calendar, Appointment Booking System≤3.2.3Update to 3.2.4	CVE-2023-24373	—	Jan 27, 2023

Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
Bootstrap Shortcodes
<3.4.6Update to 3.4.6
7fab0e10-d388-41d4-a01f-9bbb8c3cfb5fJan 27, 2023
High8.2
Authorization Bypass
ContentStudio
≤1.2.5Update to 1.2.6
CVE-2023-0558Jan 27, 2023
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
Bootstrap Shortcodes
<3.4.6Update to 3.4.6
974a3228-5eab-41be-b3c1-82e71cde8de7Jan 27, 2023
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
Bootstrap Shortcodes
<3.4.6Update to 3.4.6
CVE-2022-4777Jan 27, 2023
Medium4.4
Authenticated (Admin+) Stored Cross-Site Scripting
Namaste! LMS
<2.5.9.2Update to 2.5.9.2
CVE-2023-24383Jan 27, 2023
High7.2
Unauthenticated Stored Cross-Site Scripting
Limit Login Attempts Plus – WordPress Limit Login Attempts By Felix
≤1.0.9Update to 1.1.0
94dbf144-4a8f-4d9a-ad32-703a91823acbJan 27, 2023
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Greenshift – animation and page builder blocks
≤4.9.9Update to 5.0
CVE-2023-0378Jan 27, 2023
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
Glossary
≤2.1.27Update to 2.1.28
CVE-2023-24378Jan 27, 2023
Medium4.4
Authenticated (Admin+) Stored Cross-Site Scripting
VikBooking Hotel Booking Engine & PMS
<1.5.12Update to 1.5.12
CVE-2023-24396Jan 27, 2023
Medium4.4
Authenticated (Admin+) Stored Cross-Site Scripting
Simple Image Popup
≤1.3.6Update to 2.0.0
CVE-2022-47610Jan 27, 2023
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
Bootstrap Shortcodes
<3.4.6Update to 3.4.6
7416f5e2-5c59-4192-a87c-b3174fd84a01Jan 27, 2023
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
Bootstrap Shortcodes
<3.4.6Update to 3.4.6
77122403-5865-40d7-96d5-557147098c4eJan 27, 2023
High8.6
Unauthenticated SQL Injection
JS Help Desk – AI-Powered Support & Ticketing System
≤2.7.1Update to 2.7.2
CVE-2022-47151Jan 27, 2023
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
Bootstrap Shortcodes
<3.4.6Update to 3.4.6
7bc2eebb-d232-4aef-94e5-68876bba0f93Jan 27, 2023
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
Bootstrap Shortcodes
≤3.4.0No patch available
4e97e603-b864-41ef-98c8-b0304a72ec44Jan 27, 2023
Critical9.1
Missing Authorization to Plugin Settings Update
JS Help Desk – AI-Powered Support & Ticketing System
2.7.1 – 2.7.1Update to 2.7.2
CVE-2022-46838Jan 27, 2023
Medium6.4
Authenticated (Author+) Stored Cross-Site Scripting
Greenshift – animation and page builder blocks
≤4.9.9Update to 5.0.0
CVE-2023-22707Jan 27, 2023
Medium6.3
Missing Authorization
JS Help Desk – AI-Powered Support & Ticketing System
≤2.7.1Update to 2.7.2
CVE-2022-46840Jan 27, 2023
Critical9.8
Unauthenticated Arbitrary File Upload
JS Help Desk – AI-Powered Support & Ticketing System
≤2.7.1Update to 2.7.2
CVE-2022-46839Jan 27, 2023
High7.5
Information Exposure
ContentStudio
≤1.2.5Update to 1.2.6
CVE-2023-0557Jan 27, 2023
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
Bootstrap Shortcodes
<3.4.6Update to 3.4.6
5235a235-911e-4462-90c5-05b0c7cb45a3Jan 27, 2023
High8.8
Cross-Site Request Forgery to Arbitrary Plugin Install and Activation
Uncanny Toolkit for LearnDash
≤3.6.4.1Update to 3.6.4.2
CVE-2023-23714Jan 27, 2023
Medium4.4
Authenticated (Administrator+) Stored Cross-Site Scripting
Advanced Social Pixel
≤2.1.1No patch available
CVE-2023-24381Jan 27, 2023
High7.2
Unauthenticated CSV Injection
Noptin – Newsletter, New Post Notifications & Email Automation
≤1.10.3Update to 1.11.0
CVE-2022-46803Jan 27, 2023
High7.2
Unauthenticated Stored Cross-Site Scripting
Welcart e-Commerce
≤2.8.10Update to 2.8.11
CVE-2023-22705Jan 27, 2023
Medium4.3
Cross-Site Request Forgery
Organization chart
≤1.4.4Update to 1.4.5
CVE-2023-24384Jan 27, 2023
Medium5.5
Authenticated (Editor+) Stored Cross-Site Scripting
Booking calendar, Appointment Booking System
≤3.2.3Update to 3.2.4
CVE-2022-47438Jan 27, 2023
Medium5.4
Cross-Site Request Forgery to Stored Cross-Site Scripting and Settings Reset
WPBot – AI ChatBot for WordPress & Growth Suite: SEO, AI Writer, Email Marketing, Social Media
≤4.2.8Update to 4.2.9
CVE-2023-244155K+Jan 27, 2023
Medium4.3
Cross-Site Request Forgery
Booking calendar, Appointment Booking System
≤3.2.3Update to 3.2.4
CVE-2023-24388Jan 27, 2023
Medium5.3
Unauthenticated Bypass Vulnerability
Booking calendar, Appointment Booking System
≤3.2.3Update to 3.2.4
CVE-2023-24373Jan 27, 2023