VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1190)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,165 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1190)
SeverityVulnerabilityCVEInstallsPublished
Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
Multi Step Form≤1.7.7Update to 1.7.8
CVE-2022-4196—
Medium4.7Authenticated (Admin+) Server-Side Request Forgery
Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder≤5.5.4Update to 5.5.5
——
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
ImageLinks – Interactive Image Builder with Hotspots≤1.5.3Update to 1.5.4
CVE-2022-4393—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Logo Slider WP – Responsive Logo Carousel, Logo Gallery & Logo Showcase≤3.5.3Update to 3.6.0
CVE-2022-4664—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
iPanorama 360 – Advanced Virtual Tour Builder≤1.6.29Update to 1.6.30
CVE-2022-4392—
Medium4.3Missing Authorization
User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission≤3.6.0Update to 3.6.1
——
Medium6.5Missing Authorization to Error Log Deletion
ActiveCampaign for WooCommerce≤1.9.6Update to 1.9.7
——
Medium4.3Cross-Site Request Forgery
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker≤8.0.7Update to 8.0.8
CVE-2022-46862—
Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
Table of Contents Plus – Automatic Table of Contents for Posts & Pages≤2106Update to 2212
CVE-2022-4479—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Vision – Interactive Image Map with Hotspots Builder≤1.5.3Update to 1.5.4
CVE-2022-4391—
High8.8Authenticated (Contributor+) SQL Injection
Spiffy Calendar≤4.9.1Update to 4.9.2
CVE-2022-46859—
Medium5.4Cross-Site Request Forgery
Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder≤5.5.4Update to 5.5.5
CVE-2022-45806—
High8.8Cross-Site Request Forgery
WP CSV to Database – Insert CSV file content into WordPress database≤2.6No patch available
CVE-2022-47163—
Medium4.3Cross-Site Request Forgery in rtport_spare_me
Radius Portfolio – Filterable Grid, Gallery & Slider Portfolio≤2.8.8Update to 2.8.9
——
Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
404 to Start≤1.6.1No patch available
CVE-2022-3855—
Medium6.5Missing Authorization to Subscriber+ Arbitrary Post Creation
Royal Addons for Elementor – Addons and Templates Kit for Elementor≤1.3.55Update to 1.3.56
CVE-2022-4103—
High8.1Cross-Site Request Forgery
Royal Addons for Elementor – Addons and Templates Kit for Elementor≤1.3.55Update to 1.3.56
——
High8.1Authenticated (Subscriber+) Arbitrary Post Deletion
Royal Addons for Elementor – Addons and Templates Kit for Elementor≤1.3.55Update to 1.3.56
CVE-2022-4102—
Medium6.1Reflected Cross-Site Scripting
WP CSV≤1.8.0.0No patch available
CVE-2022-4368—
Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
Swifty Page Manager≤3.0.1No patch available
CVE-2023-0087—
High8.8Cross-Site Request Forgery
Swifty Page Manager≤3.0.1No patch available
CVE-2023-0088—
Medium6.6Authenticated (Admin+) PHP Object Injection
ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content≤4.3.2Update to 4.4.0
CVE-2022-45083—
Medium6.4Authenticated Stored Cross-Site Scripting
Permalink Manager Lite≤2.2.20.3Update to 2.3.0
CVE-2022-4410—
High7.1Authenticated (Subscriber+) Settings Update
Mega Addons For WPBakery Page Builder≤4.3.0No patch available
CVE-2022-4501—
Medium6.8Authenticated (Subscriber+) Information Disclosure
Wp Social Login and Register Social Counter≤1.9.0Update to 2.0
CVE-2022-47160—
Medium5.4Cross-Site Request Forgery
GS Insever Portfolio≤1.4.4No patch available
CVE-2022-47156—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
WP-Table Reloaded≤1.9.4No patch available
CVE-2022-4491—
High8.8Cross-Site Request Forgery
Mediamatic – Media Library Folders≤2.8.1No patch available
CVE-2023-0294—
Medium4.3Missing Authorization
Mediamatic – Media Library Folders≤2.8.1No patch available
CVE-2023-0293—
Medium4.3Cross-Site Request Forgery
User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission≤3.6.0Update to 3.6.1
CVE-2022-47150—

Search VulnCrest Radar

Jump to

Are you sure?