Database
WordPress Vulnerability Database (page 1204)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium4.3Missing Authorization
Gallery Images Ape
≤2.2.8No patch available
- High8.8Cross-Site Request Forgery to File Deletion
Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools
≤5.6.6Update to 5.6.7
- Medium4.9Authenticated (Admin/Shop Manager+) Arbitrary File Download
Booster Elite for WooCommerce
<1.1.7Update to 1.1.7
- High8.8Cross-Site Request Forgery
Booster Elite for WooCommerce
<1.1.7Update to 1.1.7
- High8.8Cross-Site Request Forgery
Restaurant Menu – Food Ordering System – Table Reservation
≤2.3.1Update to 2.3.2
- Medium6.4Authenticated (Contributor+) Cross-Site Scripting
Gallery Images Ape
≤2.2.8No patch available
- Medium6.5Sensitive Information Disclosure
Translation with DeepL API
≤1.7.4Update to 1.7.5
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
AFS Analytics
≤4.15Update to 4.16
- Medium6.3Missing Authorization on AJAX Actions
Restaurant Menu – Food Ordering System – Table Reservation
≤2.3.0Update to 2.3.1
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
Custom Product Tabs for WooCommerce
≤1.7.9Update to 1.8.0
- Medium4.3Missing Authorization
Appointment Booking Calendar
≤1.3.69Update to 1.3.70
- Medium6.4Authenticated (Subscriber+) Cross-Site Scripting
Soledad
≤8.2.5Update to 8.2.6
- Medium4.3Missing Authorization
Appointment Hour Booking – Booking Calendar
≤1.3.71Update to 1.3.72
- High8.8Cross-Site Request Forgery
Advanced Dynamic Pricing and Discount Rules for WooCommerce
≤4.1.5Update to 4.1.6
- High8.8Cross-Site Request Forgery via lock_unlock_terawallet
Wallet for WooCommerce
≤1.3.24Update to 1.4.0
- High8.8Cross-Site Request Forgery
Advanced Coupons for WooCommerce – BOGO, Store Credit & WooCommerce Coupons
≤4.5Update to 4.5.0.1
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
WP Glossary
≤3.1.2No patch available
- High8.8Cross-Site Request Forgery
Forms by CaptainForm – Form Builder for WordPress
≤2.5.3No patch available
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
Evaluate
≤1.0No patch available
- Critical9.8Arbitrary Code Execution
Api2Cart Bridge Connector
≤1.1.0Update to 1.2.0
- High8.8Cross-Site Request Forgery to Settings Disconnect
Creative Mail – Easier WordPress & WooCommerce Email Marketing
≤1.5.4Update to 1.6.0
- High8.8Cross-Site Request Forgery
Creative Mail – Easier WordPress & WooCommerce Email Marketing
≤1.5.4Update to 1.6.0
- High7.2Authenticated (Admin+) Limited Remote Code Execution via um_populate_dropdown_options
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
≤2.5.0Update to 2.5.1
- High8.8Cross-Site Request Forgery
Ask Me - Responsive Questions & Answers WordPress
<6.8.7Update to 6.8.7
- Medium4.3Authenticated (Contributor+) Directory Traversal via Shortcodes
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
≤2.5.0Update to 2.5.1
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
WP Best Quiz
≤1.0No patch available
- Medium6.4Authenticated (Subscriber+) Cross-Site Scripting
Slideshow SE
≤2.5.5Update to 2.5.6
- Medium4.7Authenticated (Admin+) Directory Traversal
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
1.0 – 2.5.0Update to 2.5.1
- Medium5.5Authenticated (Admin+) Server Side Request Forgery
All in One SEO Pro – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic
≤4.2.5.1Update to 4.2.6
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
Slideshow SE
≤2.5.5Update to 2.5.6