VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1193)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,163 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1193)
SeverityVulnerabilityCVEInstallsPublished
Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
WP-Ban≤1.69Update to 1.69.1
CVE-2022-4260—
Medium5.5WidgetKit <= 2.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
WidgetKit for Elementor – Lightweight Elementor Addons, Widgets & Templates≤2.4.3Update to 2.4.4
CVE-2022-4256—
Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
WP User – Custom Registration Forms, Login and User Profile≤7.0No patch available
CVE-2022-4519—
High8.3Server-Side Request Forgery
UpdraftCentral Dashboard0.8.23 – 0.8.23Update to 0.8.24
——
Critical9.8Unauthenticated SQL Injection
Build App Online≤1.0.18Update to 1.0.19
CVE-2022-3241—
High8.8Cross-Site Request Forgery
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more≤3.3.2Update to 3.3.3
——
High8.8Cross-Site Request Forgery
Royal Addons for Elementor – Addons and Templates Kit for Elementor≤1.3.55Update to 1.3.56
——
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
Add to Home Screen & Progressive Web App≤2.0Update to 2.1
——
Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
Filter Gallery≤0.1.5Update to 0.1.6
CVE-2022-4142—
High7.5Authenticated (Author+) SQL Injection via cg_copy_start
Contest Gallery Commerce – Upload, Vote & Sell with PayPal & Stripe≤19.1.4.1Update to 19.1.5
CVE-2022-4161—
High8.1Unauthenticated SQL Injection via cg_Fields
Contest Gallery Commerce – Upload, Vote & Sell with PayPal & Stripe≤19.1.4.1Update to 19.1.5
CVE-2022-4158—
High7.5Authenticated (Author+) SQL Injection via cg_multiple_files_for_post
Contest Gallery Commerce – Upload, Vote & Sell with PayPal & Stripe≤19.1.4.1Update to 19.1.5
CVE-2022-4164—
High7.5Authenticated (Author+) SQL Injection via cg_copy_id
Contest Gallery Commerce – Upload, Vote & Sell with PayPal & Stripe≤19.1.4.1Update to 19.1.5
CVE-2022-4160—
High8.1Unauthenticated SQL Injection via user_id
Contest Gallery Commerce – Upload, Vote & Sell with PayPal & Stripe≤19.1.5Update to 19.1.5.1
CVE-2022-4156—
High7.5Authenticated (Author+) SQL Injection via cg_option_id
Contest Gallery Commerce – Upload, Vote & Sell with PayPal & Stripe≤19.1.4.1Update to 19.1.5
CVE-2022-4157—
Medium6.1Reflected Cross-Site-Scripting
Essential Real Estate≤3.9.6Update to 4.0.0
——
Medium4.3Cross-Site Request Forgery
Loginizer<1.7.6Update to 1.7.6
CVE-2022-45079—
Medium6.6Authenticated (Administrator+) SQL Injection via wp_user_id
Contest Gallery Pro≤19.1.4.1Update to 19.1.5
CVE-2022-4154—
High7.5Authenticated (Author+) SQL Injection via wp_user_id
Contest Gallery Commerce – Upload, Vote & Sell with PayPal & Stripe≤19.1.4.1Update to 19.1.5
CVE-2022-4155—
High8.8Cross-Site Request Forgery
Custom Content by Country (by Shield Security)3.1.2 – 3.1.2Update to 3.1.3
CVE-2022-41650—
Medium6.1Reflected Cross-Site Scripting
Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools≤5.6.2Update to 5.6.3
CVE-2022-4227—
High7.5Authenticated (Author+) SQL Injection via cg_id
Contest Gallery Commerce – Upload, Vote & Sell with PayPal & Stripe≤19.1.5Update to 19.1.5.1
CVE-2022-4159—
Medium6.1Stored Cross-Site Scripting via Cross-Site Request Forgery
Supra CSV≤4.0.3No patch available
CVE-2022-3853—
High7.5Authenticated (Author+) SQL Injection via cg_order
Contest Gallery Commerce – Upload, Vote & Sell with PayPal & Stripe≤19.1.4.1Update to 19.1.5
CVE-2022-4165—
Critical9.8Unauthenticated PHP Object Injection
Stop Spammers Classic≤2022.5Update to 2022.6
CVE-2022-4120—
Medium6.5Authenticated (Contributor+) Insecure Direct Object Reference
ACF Quick Edit Fields≤3.2.2Update to 3.2.3
CVE-2023-7286—
High7.5Authenticated (Author+) SQL Injection via cg_row
Contest Gallery Commerce – Upload, Vote & Sell with PayPal & Stripe≤19.1.4.1Update to 19.1.5
CVE-2022-4162—
Medium5.3Sensitive Information Disclosure
Autoptimize≤3.0.4Update to 3.1.0
CVE-2022-4057—
Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
forumAttachments for bbPress≤4.3.1Update to 4.4
CVE-2022-45816—
Medium6.5Authenticated (Subscriber+) Information Disclosure and PHAR deserialization
Welcart e-Commerce≤2.8.5Update to 2.8.6
CVE-2022-4237—

Search VulnCrest Radar

Jump to

Are you sure?