VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1186)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,165 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1186)
SeverityVulnerabilityCVEInstallsPublished
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
PixCodes≤2.3.6Update to 2.3.7
CVE-2022-4671—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Simple Sitemap – Responsive HTML Sitemap for WordPress≤3.5.7Update to 3.5.8
CVE-2022-4472—
High7.2Authenticated (Administrator+) PHP Object Injection
Analyticator≤6.5.5Update to 6.5.6
CVE-2022-4323—
Medium5.4Cross-Site Request Forgery
Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools≤6.0.0Update to 6.0.1
CVE-2022-4017—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Passster – Password Protect Pages and Content≤3.5.5.7Update to 3.5.5.8
CVE-2021-24837—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Auto Publish for Google My Business≤3.3Update to 3.4
CVE-2022-4790—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Genesis Columns Advanced≤2.0.3Update to 2.0.4
CVE-2022-4706—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Blocks
WebberZone Top 10 — Popular Posts≤3.2.2Update to 3.2.3
CVE-2022-4570—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Content Control – The Ultimate Content Restriction Solution! Restrict Content, Create Conditional Blocks & More≤1.1.9Update to 1.1.10
CVE-2022-4509—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory≤2.2.21Update to 2.2.22
CVE-2022-4775—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Logo Slider – Logo Carousel, Logo Showcase, Logo Gallery & Client Logos≤3.3.7Update to 3.3.8
CVE-2022-4624—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Video Conferencing with Zoom≤4.0.9Update to 4.0.10
CVE-2022-4578—
Critical9.8Unauthenticated Arbitrary File Upload
Aidreformall versionsNo patch available
CVE-2022-0316—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
10Web Map Builder for Google Maps≤1.0.71Update to 1.0.72
CVE-2022-4758—
Medium5.3Missing Authentication leading to Sensitive Information Disclosure (Private Post Leakage)
Passster – Password Protect Pages and Content≤3.5.5.8Update to 3.5.5.9
CVE-2021-24881—
Medium6.4Authenticated (Contributor+) Stored Cross Site Scripting via Shortcode
WP Popups – WordPress Popup builder≤2.1.4.7Update to 2.1.4.8
CVE-2022-4716—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Product Slider, Product Carousel and Product Grid Gallery for WooCommerce – Reno Product Slider (formerly Product Slider for WooCommerce)≤2.6.3Update to 2.6.4
CVE-2022-4629—
Medium4.3Cross-Site Request Forgery
Image SEO – AI-Driven Image SEO Optimizer≤2.0.7Update to 2.0.8
CVE-2022-4548—
Critical9.8Privilege Escalation
User Verification by PickPlugins≤1.0.93Update to 1.0.94
CVE-2022-4693—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Word Balloon≤4.19.2Update to 4.19.3
CVE-2022-4751—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Structured Content (JSON-LD) #wpsc≤1.5.0Update to 1.5.1
CVE-2022-4715—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
WPZOOM Portfolio Lite – Filterable Portfolio Plugin≤1.2.1Update to 1.2.2
CVE-2022-4789—
Medium5.5Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
ShiftNav – Responsive Mobile Menu≤1.7.1Update to 1.7.2
CVE-2022-4627—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Collapse-O-Matic≤1.8.2Update to 1.8.3
CVE-2022-4475—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
OneClick Chat to Order≤1.0.4.1Update to 1.0.4.2
CVE-2022-4760—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Print-O-Matic≤2.1.7Update to 2.1.8
CVE-2022-4753—
Medium5.4WP Security & Firewall <= 1.8 - Cross-Site Request Forgery
BruteBank – WP Security & Firewall≤1.8Update to 1.9
CVE-2022-4443—
High7.2Authenticated (Administrator+) PHP Object Injection
Analyticator≤6.5.5Update to 6.5.6
CVE-2022-3425—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Search & Filter≤1.2.15Update to 1.2.16
CVE-2022-4467—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
HashBar – Announcement, Notification Bar & Popup Campaign≤1.3.5Update to 1.3.6
CVE-2022-4650—

Search VulnCrest Radar

Jump to

Are you sure?