VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1178)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,165 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1178)
SeverityVulnerabilityCVEInstallsPublished
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Theme Blvd Responsive Google Maps≤1.0.2No patch available
CVE-2023-22698—
Medium6.3Reflected Cross-Site Scripting
User Meta Manager≤3.4.9No patch available
CVE-2023-22718—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Themify Portfolio Post≤1.2.1Update to 1.2.2
CVE-2023-0362—
Medium4.3Cross-Site Request Forgery
Nice PayPal Button Lite≤1.3.5No patch available
CVE-2023-22686—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
amr shortcode any widget≤4.0No patch available
CVE-2022-4458—
Medium4.3Cross-Site Request Forgery
SRS Simple Hits Counter≤1.1.0Update to 1.1.1
CVE-2023-22709—
Medium6.6Authenticated (Admi+) Stored Cross-Site Scripting
Interactive Polish Map≤1.2Update to 1.2.1
CVE-2023-23821—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
DTX – Dynamic Text Extension for Contact Form 7≤2.0.3Update to 3.0.0
——
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Youtube shortcode≤1.8.5No patch available
CVE-2023-23687—
Medium6.4Authenticated (Contributor+) Stored Cross Site Scripting via Shortcode
Oi Yandex.Maps for WordPress≤3.2.7No patch available
CVE-2023-22721—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Easy PayPal & Stripe Buy Now Button≤1.7.3Update to 1.7.4
CVE-2022-4628—
High8.8Cross Site Request Forgery
Maintenance Mode by Supsystic≤1.7.10Update to 1.7.11
CVE-2023-22714—
Medium5.4Missing Authorization
URL Shortener by MyThemeShop≤1.0.16No patch available
CVE-2023-23896—
High8.1Missing Authorization
AI Puffer – MCP Server for Claude & ChatGPT, with AI Chatbot≤1.4.37Update to 1.4.38
CVE-2023-0405—
Medium4.3Cross-Site Request Forgery
WP Fast Cache≤1.5No patch available
CVE-2023-22675—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
GiveWP – Donation Plugin and Fundraising Platform≤2.23.2Update to 2.24
CVE-2022-4448—
Medium6.1Reflected Cross-Site Scripting
Camera slideshow≤1.4.0.1No patch available
CVE-2023-22682—
High8.8Cross Site Request Forgery
WP-TopBar≤5.36No patch available
CVE-2023-23680—
High7.2Authenticated (Admin+) SQL Injection
Mapwiz≤1.0.1No patch available
CVE-2022-4546—
High8.8Cross-Site Request Forgery
Admin Log≤1.50No patch available
CVE-2023-23721—
High8.8Authenticated (Contributor+) SQL Injection
WP Helper Premium≤4.2.0Update to 4.3.0
——
Critical9.8Unauthenticated SQL Injection
GiveWP – Donation Plugin and Fundraising Platform≤2.23.2Update to 2.24
CVE-2023-0224—
Medium5.4Authenticated (Contributor+) Stored Cross-Site Scripting
M Chart≤1.9.4Update to 1.10
CVE-2023-23892—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Better Font Awesome≤2.0.3Update to 2.0.4
CVE-2022-4512—
Medium6.5Authenticated (Subscriber+) Arbitrary Plugin Installation
MainWP Favorites Extension≤4.0.10Update to 4.0.11
——
Critical9.8Unauthenticated Arbitrary File Upload
MainWP File Uploader Extension≤4.1Update to 4.1.1
CVE-2023-23656—
Critical9.8Unauthenticated SQL Injection
MainWP Broken Link Checker≤4.0No patch available
CVE-2023-23737—
High8.8Cross-Site Request Forgery
MainWP Wordfence Extension≤4.0.7Update to 4.0.8
——
Medium4.3Missing Authorization
MainWP Comments Extension≤4.0.6Update to 4.0.7
CVE-2023-23663—
Critical9.8Unauthenticated PHP Object Injection
MainWP Links Manager Extension≤2.1No patch available
CVE-2023-23649—

Search VulnCrest Radar

Jump to

Are you sure?