VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1188)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,165 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1188)
SeverityVulnerabilityCVEInstallsPublished
Medium4.3Cross-Site Request Forgery to Plugin Data Deletion & Settings Changes
Tickera – Sell Tickets & Manage Events≤3.4.9.9Update to 3.5.1.0
CVE-2022-4549—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Link Library≤7.4Update to 7.4.1
CVE-2022-4199—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Social Share, Social Login and Social Comments Plugin – Super Socializer≤7.13.44Update to 7.13.45
CVE-2022-4484—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Easy Accordion – AI-Powered FAQ & Accordion Blocks, Product FAQ≤2.1.20Update to 2.2.0
CVE-2022-4487—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
RSSImport≤4.6.1No patch available
CVE-2022-4658—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
WP Spell Check≤9.12Update to 9.13
CVE-2022-2658—
Medium5.4Unauthenticated Stored Cross-Site Scripting via Google Analytics
MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)≤8.9.0Update to 8.9.1
CVE-2022-3904—
Medium6.3Missing Authorization
Waiting: One-click countdowns≤0.6.2No patch available
CVE-2023-3999—
Medium6.3Cross-Site Request Forgery
Waiting: One-click countdowns≤0.6.2No patch available
CVE-2023-4000—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Justified Gallery≤1.7.0Update to 1.7.1
CVE-2022-4651—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Themify Portfolio Post≤1.2.0Update to 1.2.1
CVE-2022-4464—
High8.8Prototype Pollution
Block for Apple Maps≤1.0.3Update to 1.1.0
CVE-2022-46175—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
MashShare – Social Media Share Buttons, Social Share Icons≤3.8.6Update to 3.8.7
CVE-2022-4544—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Welcart e-Commerce≤2.8.8Update to 2.8.9
CVE-2022-4655—
Medium5.4Cross-Site Request Forgery
WP Spell Check≤9.12Update to 9.13
——
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
AI-Powered Carousel, Slider, Video & Photo Gallery Blocks by WP Carousel≤2.5.2Update to 2.5.3
CVE-2022-4482—
Medium6.4Authenticated (Contributor+) Stored Cross Site Scripting via Shortcode
Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials≤2.5.11Update to 2.6.0
CVE-2022-4648—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Font Awesome≤4.3.1Update to 4.3.2
CVE-2022-4478—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery≤1.13.2Update to 1.13.3
CVE-2022-4453—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Survey Maker by AYS≤3.1.1Update to 3.1.2
——
High7.1Cross-Site Request Forgery
Subscribe2 – Form, Email Subscribers & Newsletters≤10.37Update to 10.38
CVE-2022-4309—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Social Sharing Plugin – Sassy Social Share≤3.3.44Update to 3.3.45
CVE-2022-4451—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Meteor Slides≤1.5.6Update to 1.5.7
CVE-2022-4486—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Click to Chat – HoliThemes≤3.18Update to 3.18.1
CVE-2022-4480—
Medium6.4Authenticated (Contributor+) Stored Cross Site Scripting
Widgets for WooCommerce Products on Elementor≤1.0.7Update to 1.0.8
CVE-2022-4661—
Medium5.5Authenticated (Administrator+) CSV Injection
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP≤1.2.3.9Update to 1.2.3.10
CVE-2022-47442—
Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
Custom Post Types and Custom Fields creator – WCK≤2.3.2Update to 2.3.3
CVE-2022-4442—
Medium6.4Authenticated (Contributor+) Cross Site Scripting via shortcode
Simple Membership≤4.2.1Update to 4.2.2
CVE-2022-4469—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Page scroll to id≤1.7.5Update to 1.7.6
CVE-2022-4449—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Insert Pages≤3.7.4Update to 3.7.5
CVE-2022-4483—

Search VulnCrest Radar

Jump to

Are you sure?