VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1173)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,165 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1173)
SeverityVulnerabilityCVEInstallsPublished
Medium4.3Cross-Site Request Forgery
DH – Anti AdBlocker≤36Update to 37
CVE-2022-47162—
Medium6.5Unauthenticated CSV Injection
Site Reviews≤6.2.0Update to 6.4.0
CVE-2022-46801—
Medium4.4Authenticated (Administrator+) Cross-Site Scripting
Quick Restaurant Menu≤2.0.2Update to 2.1.0
CVE-2023-0553—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Bootstrap Shortcodes<3.4.6Update to 3.4.6
——
High8.8Cross-Site Request Forgery to Arbitrary Plugin Install and Activation
Uncanny Toolkit for LearnDash≤3.6.4.1Update to 3.6.4.2
CVE-2023-23714—
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
Advanced Social Pixel≤2.1.1No patch available
CVE-2023-24381—
Medium4.4Authenticated (Admin+) Stored Cross-Site Scripting
VikBooking Hotel Booking Engine & PMS<1.5.12Update to 1.5.12
CVE-2023-24396—
Medium6.3Missing Authorization
JS Help Desk – AI-Powered Support & Ticketing System≤2.7.1Update to 2.7.2
CVE-2022-46840—
High7.2Unauthenticated Stored Cross-Site Scripting
Welcart e-Commerce≤2.8.10Update to 2.8.11
CVE-2023-22705—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Bootstrap Shortcodes<3.4.6Update to 3.4.6
——
Critical9.1Missing Authorization to Plugin Settings Update
JS Help Desk – AI-Powered Support & Ticketing System2.7.1 – 2.7.1Update to 2.7.2
CVE-2022-46838—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Bootstrap Shortcodes<3.4.6Update to 3.4.6
——
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Bootstrap Shortcodes<3.4.6Update to 3.4.6
——
High7.2Unauthenticated CSV Injection
Noptin – Newsletter, New Post Notifications & Email Automation≤1.10.3Update to 1.11.0
CVE-2022-46803—
Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
Greenshift – animation and page builder blocks≤4.9.9Update to 5.0.0
CVE-2023-22707—
High7.5Information Exposure
ContentStudio≤1.2.5Update to 1.2.6
CVE-2023-0557—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Bootstrap Shortcodes≤3.4.0No patch available
——
Critical9.8Unauthenticated Arbitrary File Upload
JS Help Desk – AI-Powered Support & Ticketing System≤2.7.1Update to 2.7.2
CVE-2022-46839—
Medium4.4Authenticated (Admin+) Stored Cross-Site Scripting
Simple Image Popup≤1.3.6Update to 2.0.0
CVE-2022-47610—
Medium4.3Cross-Site Request Forgery
Efí Bank≤1.4.8Update to 2.0.0
——
High7.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Olevmedia Shortcodes≤1.1.9No patch available
CVE-2023-0168—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Bootstrap Shortcodes<3.4.6Update to 3.4.6
——
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
eVision Responsive Column Layout Shortcodes≤2.3No patch available
CVE-2023-0064—
Medium5.4WP OAuth Server (OAuth Authentication) <= 4.2.5 -Cross-Site Request Forgery
WP OAuth Server (OAuth Authentication)≤4.2.5Update to 4.3.0
——
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Client Logo Carousel≤3.0.0Update to 3.0.1
CVE-2023-0073—
Medium6.4Authenticated (Contributor+) Stored Cross Site Scripting
Hueman Addons≤2.3.3No patch available
CVE-2022-4784—
Medium6.5Missing Authorization
Efí Bank≤1.4.8Update to 2.0.0
——
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Bootstrap Shortcodes<3.4.6Update to 3.4.6
——
Medium6.6Authenticated (Admin+) SQL Injection
Intuitive Custom Post Order≤3.1.4Update to 3.1.5
CVE-2023-1016—
Medium6.1Reflected Cross-Site Scripting
Loan Comparison≤1.5.1Update to 1.5.3
CVE-2023-0442—

Search VulnCrest Radar

Jump to

Are you sure?