VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1183)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,165 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1183)
SeverityVulnerabilityCVEInstallsPublished
Medium5.3Information Disclosure
Mega Main Menu≤2.2.2No patch available
——
Medium4.3Insufficient Access Control to Template Kit Import
Royal Addons for Elementor – Addons and Templates Kit for Elementor≤1.3.59Update to 1.3.60
CVE-2022-4709—
Medium4.3Insufficient Access Control to Template Activation
Royal Addons for Elementor – Addons and Templates Kit for Elementor≤1.3.59Update to 1.3.60
CVE-2022-4705—
Medium6.1Reflected Cross-Site Scripting
Royal Addons for Elementor – Addons and Templates Kit for Elementor≤1.3.59Update to 1.3.60
CVE-2022-4710—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Page View Count≤2.6.0Update to 2.6.1
CVE-2023-0095—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar≤3.7.9Update to 3.8.0
CVE-2023-0144—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Strong Testimonials≤3.0.2Update to 3.0.3
CVE-2022-4717—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Easy Testimonials≤3.9.2Update to 3.9.3
CVE-2022-4577—
Medium4.3Insufficient Access Control to Plugin Activation
Royal Addons for Elementor – Addons and Templates Kit for Elementor≤1.3.59Update to 1.3.60
CVE-2022-4701—
Medium4.3Cross-Site Request Forgery to Menu Template creation
Royal Addons for Elementor – Addons and Templates Kit for Elementor≤1.3.59Update to 1.3.60
CVE-2022-4707—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
PDF.js Viewer≤2.1.7Update to 2.1.8
CVE-2022-4670—
Medium5.4Insufficient Access Control to Template Import
Royal Addons for Elementor – Addons and Templates Kit for Elementor≤1.3.59Update to 1.3.60
CVE-2022-4704—
Medium4.3Insufficient Access Control to Import Deletion
Royal Addons for Elementor – Addons and Templates Kit for Elementor≤1.3.59Update to 1.3.60
CVE-2022-4703—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Clean Login≤1.13.6Update to 1.13.7
CVE-2022-4838—
Medium4.3Insufficient Access Control to Menu Settings Update
Royal Addons for Elementor – Addons and Templates Kit for Elementor≤1.3.59Update to 1.3.60
CVE-2022-4711—
High7.4YourChannel <= 1.2.2 Authenticated (Contributor+) Cross-Site Scripting via Shortcode
YourChannel: Everything you want in a YouTube plugin.≤1.2.2Update to 1.2.3
——
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
WP-ShowHide≤1.04Update to 1.05
CVE-2022-4825—
Medium4.3Insufficient Access Control to Template Conditions Modification
Royal Addons for Elementor – Addons and Templates Kit for Elementor≤1.3.59Update to 1.3.60
CVE-2022-4708—
High8.8Cross Site Request Forgery
User Meta Manager≤3.4.8No patch available
CVE-2023-23712—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
PPWP – Password Protect Pages≤1.8.5Update to 1.8.6
CVE-2022-4626—
Medium5.4Insufficient Access Control to Plugin Deactivation
Royal Addons for Elementor – Addons and Templates Kit for Elementor≤1.3.59Update to 1.3.60
CVE-2022-4702—
Medium5.4Insufficient Access Control to Theme Activation
Royal Addons for Elementor – Addons and Templates Kit for Elementor≤1.3.59Update to 1.3.60
CVE-2022-4700—
High8.8Arbitrary File Upload
WPDating≤7.4.1Update to 7.4.2
——
Medium4.3Cross-Site Request Forgery
Exclusive Addons for Elementor≤2.6.1Update to 2.6.2
CVE-2022-45067—
Critical9.8Missing Authorization
ContentStudio≤1.2.5Update to 1.2.6
CVE-2023-0556—
Medium6.4Authenticated (Contributor+) Stored Cross-Site SQcripting via Shortcode
Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News≤3.2Update to 3.3
CVE-2022-4792—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CPO Companion≤1.0.4Update to 1.1.0
CVE-2022-4837—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Custom Product Tabs for WooCommerce & WordPress Tabs Builder – Smart Tabs≤2.1.16Update to 2.1.17
CVE-2023-0071—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scriptiong via Shortcode
Post List Designer – Category Post, Recent Post, Post List≤3.1Update to 3.2
CVE-2022-4749—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
WP Social Widget≤2.2.3Update to 2.2.4
CVE-2023-0074—

Search VulnCrest Radar

Jump to

Are you sure?