VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1201)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,163 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1201)
SeverityVulnerabilityCVEInstallsPublished
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Advanced WP Columns≤2.0.6No patch available
CVE-2022-3426—
Medium5.6Authorization Bypass via Insufficient Validation
Clerk≤3.8.2Update to 3.8.3
CVE-2022-3907—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Add Comments≤1.0.1No patch available
CVE-2022-3909—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Uji Countdown≤2.3Update to 2.3.1
CVE-2022-3837—
High8.8Authenticated (Subscriber+) Arbitrary File Upload
wpForo Forum≤2.0.9Update to 2.1.0
CVE-2022-40200—
High8.8Cross-Site Request Forgery
wpForo Forum≤2.0.9Update to 2.1.0
CVE-2022-40192—
Medium4.3Cross-Site Request Forgery
WPML Multilingual CMS≤4.5.13Update to 4.5.14
CVE-2022-45072—
Medium4.3Missing Authorization to Settings Change
WPML Multilingual CMS≤4.5.10Update to 4.5.11
CVE-2022-38461—
High8.8Cross-Site Request Forgery
JWT Authentication for WP REST APIs≤2.4.0Update to 2.4.1
CVE-2022-45073—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Seed Social≤2.0.3Update to 2.0.4
CVE-2022-3836—
Medium5.9Authenticated (Admin+) CSV Injection
User Blocker≤1.5.5Update to 1.5.6
CVE-2022-45078—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Car Rental by BestWebSoft≤1.1.2No patch available
CVE-2022-44734—
High8.8Cross-Site Request Forgery
Quick Restaurant Reservations≤1.5.4Update to 1.5.5
CVE-2022-44739—
Medium4.3Cross-Site Request Forgery
WPML Multilingual CMS≤4.5.13Update to 4.5.14
CVE-2022-45071—
High7.2Authenticated (Admin+) SQL Injection
WP CSV Exporter≤1.3.6Update to 1.3.7
CVE-2022-3249—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Simple Video Embedder≤2.2No patch available
CVE-2022-44590—
Medium4.3Missing Authorization to Translation Job Status Change
WPML Multilingual CMS≤4.5.10Update to 4.5.11
CVE-2022-38974—
High8.8Cross-Site Request Forgery
Asgaros Forum≤2.1.0Update to 2.2.0
CVE-2022-41608—
Medium5.4Authorization Bypass to Blocking Control Bypass
Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots≤1.9.10.68Update to 1.9.10.69
CVE-2022-40216—
Medium6.1Reflected Cross-Site Scripting
WP Affiliate Platform≤6.3.9Update to 6.4.0
CVE-2022-3896—
High7.2Authenticated (Administrator+) Arbitrary File Upload
Theme Demo Import≤1.1.3No patch available
CVE-2022-1538—
High8.8Cross-Site Request Forgery to Arbitrary File Deletion
3DPrint≤3.5.4.8Update to 3.5.6.9
CVE-2022-3899—
High7.2Authenticated (Admininstrator+) SQL Injection
Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database≤1.4.5Update to 1.4.6
CVE-2022-3764—
Medium6.1Reflected Cross-Site Scripting
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas≤7.9Update to 7.9.4
CVE-2022-43487—
Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
WP OAuth Server (OAuth Authentication)≤4.2.1Update to 4.2.2
CVE-2022-3892—
Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
WP Affiliate Platform≤6.3.9Update to 6.4.0
CVE-2022-3897—
High8.8Cross-Site Request Forgery
WP Affiliate Platform≤6.3.9Update to 6.4.0
CVE-2022-3898—
High8.0Authenticated (Admin+) PHP Object Injection
Checkout Field Editor (Checkout Manager) for WooCommerce≤1.7.2Update to 1.8.0
CVE-2022-3490—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Cyklodev WP Notify≤1.2.1Update to 1.3.0
CVE-2022-44625—
High7.2Authenticated (Administrator+) SQL Injection
HTML Forms – Simple WordPress Forms Plugin≤1.3.24Update to 1.3.25
CVE-2022-3689—

Search VulnCrest Radar

Jump to

Are you sure?