Database
WordPress Vulnerability Database (page 1174)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Opening Hours
≤2.3.0No patch available
- Medium4.3Missing Authorization to Authenticated Settings Change
Intuitive Custom Post Order
≤3.1.3Update to 3.1.4
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Login Logout Menu
≤1.3.3No patch available
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
GetResponse for WordPress
≤5.5.31Update to 5.5.32
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Easy Social Box / Page Plugin
≤4.1.2Update to 4.1.3
- Medium6.1Cross-Site Scripting
Fascinate
≤1.0.8Update to 1.0.9
- Medium6.5Missing Authorization to Job Posting Manipulation
JobBoardWP – Job Board Listings and Submissions
≤1.2.2Update to 1.2.3
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Post Views Count (Support caching plugins!)
≤3.0.2No patch available
- Medium6.4Authenticated (Contributor+) Cross-Site Scripting via Shortcode
Loan Comparison
≤1.5.2Update to 1.5.3
- High8.8Unauthenticated SQL Injection
10Web Booster – Website speed optimization, Cache & Page Speed optimizer
≤2.12.22Update to 2.12.23
- Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Auto Hide Admin Bar
≤1.6.1Update to 1.6.2
- Medium6.1Reflected Cross-Site Scripting
Loan Comparison
≤1.5.1Update to 1.5.3
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
WP Responsive Testimonials Slider And Widget
≤1.5No patch available
- Medium6.3Cross-Site Request Forgery to Plugin Activation
Spectra Legacy – Gutenberg Blocks
≤2.3.1Update to 2.3.2
- Medium6.3Missing Authorization Checks
Spectra Legacy – Gutenberg Blocks
≤2.3.1Update to 2.3.2
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress
≤1.2.1Update to 1.2.2
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
WP Font Awesome
≤1.7.8Update to 1.7.9
- Medium5.4Authenticated (Contributor+) Stored Cross-Site Scripting via Block Settings
Easy Affiliate Links
≤3.7.0Update to 3.7.1
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Live Composer – Free WordPress Website Builder
≤1.5.22Update to 1.5.23
- Medium4.4Authenticated (Admin+) Stored Cross-Site Scripting
Watu Quiz
≤3.3.8.2Update to 3.3.8.3
- Medium4.3Missing Authorization to Authenticated Settings Change
Intuitive Custom Post Order
≤3.1.3Update to 3.1.4
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Spectra Legacy – Gutenberg Blocks
≤1.14.11Update to 1.15.0
- Medium4.3Lite <= 1.5.5 - Authenticated (Subscriber+) Settings Change
Ultimate Addons for Beaver Builder (UABB)
≤1.5.5Update to 1.5.6
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Customer Reviews for WooCommerce
≤5.16.0Update to 5.17.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Markup (JSON-LD) structured in schema.org
≤4.8.1No patch available
- Medium6.1Reflected Cross-Site Scripting
WP Helper Premium
≤4.2.0Update to 4.3.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Shortcode for Font Awesome
≤1.4Update to 1.4.1
- Medium4.3Cross-Site Request Forgery
Intuitive Custom Post Order
≤3.1.3Update to 3.1.4
- Medium5.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Timed Content
≤2.72Update to 2.73
- Medium6.1Reflected Cross-Site Scripting
Watu Quiz
≤3.3.8.1Update to 3.3.8.2