VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1192)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,165 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1192)
SeverityVulnerabilityCVEInstallsPublished
Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
Image Optimizer, Resizer and CDN – Sirv≤6.8.0Update to 6.8.1
CVE-2022-4119—
Medium6.1Reflected Cross-Site Scripting
Vietnam Checkout for WooCommerce≤2.0.4Update to 2.0.5
CVE-2022-46843—
Medium5.5Authenticated (Editor+) Stored Cross-Site Scripting
Team Members≤5.2.0Update to 5.2.1
CVE-2022-3936—
High7.2Authenticated (Admin+) SQL Injection
LetsRecover – WooCommerce Abandoned Cart Notifications≤1.1.0Update to 1.2.0
CVE-2022-4355—
Medium6.1Reflected Cross-Site Scripting
Afterpay Gateway for WooCommerce≤3.5.0Update to 3.5.1
CVE-2022-29416—
Critical9.8Unauthenticated SQL Injection
WP User – Custom Registration Forms, Login and User Profile≤7.0No patch available
CVE-2022-4049—
Medium6.4Job Board <= 1.2.32 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Superio - Job Board≤1.2.32Update to 1.2.33
CVE-2022-4114—
Critical9.8Unauthenticated SQL Injection
Cryptocurrency Widgets Pack≤1.8.1Update to 2.0
CVE-2022-4059—
High7.2Authenticated (Admin+) SQL Injection
LetsRecover – WooCommerce Abandoned Cart Notifications≤1.1.0Update to 1.2.0
CVE-2022-4356—
High7.2Authenticated (Admin+) SQL Injection
WP RSS By Publishers≤0.1No patch available
CVE-2022-4359—
High7.2Authenticated (Admin+) SQL Injection
WP RSS By Publishers≤0.1No patch available
CVE-2022-4360—
High7.2Authenticated (Administrator+) PHP Object Injection
Custom Field Template≤2.5.7Update to 2.5.8
CVE-2022-4324—
High8.8Authenticated (Author+) SQL Injection
Smackcoders – Email Template Builder for WooCommerce≤1.7.1Update to 1.7.2
CVE-2022-3860—
High7.2Authenticated (Admin+) SQL Injection
WP RSS By Publishers≤0.1No patch available
CVE-2022-4358—
Medium6.1Reflected Cross-Site Scripting
WP-Lister Lite for Amazon≤2.4.2Update to 2.4.3
CVE-2022-4369—
Medium4.3Cross-Site Request Forgery
Wholesale Market for WooCommerce≤2.0.0Update to 2.0.1
CVE-2022-4363—
Medium6.1Reflected Cross-Site Scripting
Product Table, Grid, List Builder For WooCommerce≤1.0No patch available
CVE-2022-4329—
Medium5.3Missing Authorization
Moosend Website Connector≤1.0.189Update to 1.0.190
——
High7.2Authenticated (Administrator+) PHP Object Injection
White Label CMS≤2.4Update to 2.5
CVE-2022-4302—
Medium5.5Authenticated (Administrator+) SQL Injection
Qe SEO Handyman≤1.0No patch available
CVE-2022-4351—
Medium5.5Authenticated (Admin+) Cross-Site Scripting
Video Gallery – YouTube Playlist, Channel Gallery by YotuWP≤1.3.10Update to 1.3.11
——
Critical9.8Unauthenticated SQL Injection
Joy Of Text Lite – SMS messaging for WordPress.≤2.3.0Update to 2.3.1
CVE-2022-4099—
Medium5.5Authenticated (Administrator+) SQL Injection
Qe SEO Handyman≤1.0No patch available
CVE-2022-4352—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Login with Cognito≤1.4.8Update to 1.4.9
CVE-2022-4200—
Medium6.4Authenticated (Contributor+) Cross-Site Scripting
WP Calendar≤1.5.3No patch available
CVE-2022-45814—
Critical9.8Missing Authorization
ContentStudio≤1.1.8Update to 1.1.9
——
Medium5.4Reflected Cross-Site Scripting
Panda Pods Repeater Field≤1.5.3Update to 1.5.4
CVE-2022-4306—
Medium4.3Missing Authorization
WP 2FA – Two-factor authentication for WordPress≤2.2.0Update to 2.2.1
CVE-2022-44595—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
WP Social Sharing≤2.2No patch available
CVE-2022-4198—
Medium6.4Authenticated (Contributor+) Cross-Site Scripting
GC Testimonials≤1.3.2No patch available
CVE-2022-45817—

Search VulnCrest Radar

Jump to

Are you sure?