VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1182)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,165 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1182)
SeverityVulnerabilityCVEInstallsPublished
Medium5.4Cross-Site Request Forgery
GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI≤2.5.0Update to 2.5.1
——
Medium6.1Reflected Cross-Site Scripting
OTP Login With Phone Number, OTP Verification<1.4.2Update to 1.4.2
CVE-2023-23492—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortocde
jQuery T(-) Countdown Widget≤2.3.23Update to 2.3.24
CVE-2023-0171—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player≤2.1.11Update to 2.1.12
CVE-2023-0170—
High7.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps)≤3.12.6Update to 3.12.7
CVE-2022-4677—
Critical9.8Unauthenticated SQL Injection
Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions≤2.9.7Update to 2.9.8
CVE-2023-23488—
Medium6.1Reflected Cross-Site Scripting
Quick Event Manager<9.7.5Update to 9.7.5
CVE-2023-23491—
High8.8Authenticated (Subscriber+) SQL Injection
Survey Maker by AYS≤3.1.1Update to 3.1.2
CVE-2023-23490—
High7.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers≤1.11.2Update to 1.11.3
CVE-2023-0176—
High7.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
WPVR – 360 Panorama viewer and Virtual Tour Builder for WordPress≤8.2.6Update to 8.2.7
CVE-2023-0174—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
GamiPress – Button≤1.0.4Update to 1.0.5
——
Medium6.1Reflected Cross-Site Scripting
Tutor LMS – eLearning and online course solution≤2.0.9Update to 2.0.10
CVE-2023-0236—
Medium6.4Authenticated (Contributor+) Stored Cross-Sites Scripting via Shortcode
WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors≤2.4.4Update to 2.4.5
CVE-2023-0072—
Critical9.8Unauthenticated SQL Injection
10Web Map Builder for Google Maps≤1.0.72Update to 1.0.73
——
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Flexible Captcha≤4.1No patch available
CVE-2023-0147—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Breadcrumb – Breadcrumb for WooCommerce and Custom Post Types≤1.5.32Update to 1.5.33
CVE-2022-4836—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortocde
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell≤2.6.8Update to 2.6.9
CVE-2023-0173—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
ResponsiveVoice Text To Speech≤1.7.6Update to 1.7.7
CVE-2023-0070—
Critical9.8Unauthenticated SQL Injection
Hide My WP - Amazing Security Plugin for WordPress!<6.2.9Update to 6.2.9
CVE-2022-4681—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
My YouTube Channel≤3.0.12.1Update to 3.23.0
CVE-2022-4756—
Medium6.4Authenticated (Contributor+) Strored Cross-Site Scripting via Shortcode
WordPrezi≤0.8.2Update to 0.9
CVE-2023-0149—
High7.2Authenticated (Admin+) PHP Object Injection
HUSKY – Products Filter for WooCommerce Professional. MCP is onboard≤1.3.1Update to 1.3.2
CVE-2022-4489—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Naver Map≤1.1.0No patch available
CVE-2023-0146—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
WP Show Posts≤1.1.3Update to 1.1.4
CVE-2022-4459—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
GamiPress – Vimeo integration≤1.0.8Update to 1.0.9
CVE-2023-0154—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Gallery Factory Lite≤2.0.0No patch available
CVE-2023-0148—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Cloak Front End Email≤1.9.1Update to 1.9.2
CVE-2023-0150—
Medium6.4Authenticated (Contributor+ )Stored Cross-Site Scripting via Shortcode
EAN Barcode Generator for WooCommerce: UPC, ISBN & GTIN Inventory≤4.4.2Update to 4.4.3
CVE-2023-0062—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Send PDF for Contact Form 7≤0.9.9.1Update to 0.9.9.2
CVE-2023-0143—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Vimeo Video Autoplay Automute≤1.0No patch available
CVE-2023-0153—

Search VulnCrest Radar

Jump to

Are you sure?