Database
WordPress Vulnerability Database (page 1206)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- High8.8Cross-Site Request Forgery
Phone Orders for WooCommerce
≤3.7.1Update to 3.7.2
- Medium6.4Missing Authorization to Stored Cross-Site Scripting
Traffic Manager
≤1.4.5No patch available
- High7.2Authenticated (Administrator+) SQL Injection
IP Blacklist Cloud
≤5.00No patch available
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
2kb Amazon Affiliates Store
≤2.1.5No patch available
- High7.1Authenticated (Subscriber+) Nonce Leakage and Authorization Bypass
SearchWP Premium
≤4.2.5Update to 4.2.6
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
IP Blacklist Cloud
≤5.00No patch available
- High8.8Cross-Site Request Forgery
Auto Upload Images
≤3.3Update to 3.3.1
- Medium6.5Missing Authorization
WIP Custom Login
≤1.2.7Update to 1.2.8
- Medium6.5Missing Authorization
Traffic Manager
≤1.4.5No patch available
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Advanced Floating Content Lite
≤1.2.1Update to 1.2.2
- Medium6.5Missing Authorization
Phone Orders for WooCommerce
≤3.7.1Update to 3.7.2
- Critical9.8Unauthorized Account Access and Privilege Escalation
tagDiv Composer
<3.5Update to 3.5
- Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Auto Upload Images
≤3.3Update to 3.3.1
- High8.8Cross-Site Request Forgery
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
≤7.3.10Update to 7.3.11
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
OAuth Client by DigitialPixies
≤1.1.0No patch available
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
WP Page Builder
≤1.2.6Update to 1.2.7
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
≤7.3.4Update to 7.3.5
- Medium5.3Sensitive Information Disclosure
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
≤7.3.10Update to 7.3.11
- High7.2Unauthenticated Stored Cross-Site Scripting
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
≤7.3.10Update to 7.3.11
- High7.2Authenticated (Administrator+) SQL Injection
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
≤7.3.4Update to 7.3.5
- Medium5.4Insecure Direct Object Reference
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
≤7.3.6Update to 7.3.7
- High8.8Cross-Site Request Forgery
OAuth Client by DigitialPixies
≤1.1.0No patch available
- Medium6.1Reflected Cross-Site Scripting
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
≤7.3.4Update to 7.3.5
- Medium6.4Multiple Authenticated (Contributor+) Stored Cross-Site Scripting
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
≤7.3.4Update to 7.3.5
- High7.2CSV Injection
Database for Contact Form 7, WPforms, Elementor forms
≤1.2.9Update to 1.3.0
- High7.4Server-Side Request Forgery
Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots
≤1.9.10.68Update to 1.9.10.69
- Medium4.3Missing Authorization
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
≤7.3.10Update to 7.3.11
- High8.8Cross-Site Request Forgery
Hungarian Pickup Points & Shipping Labels for WooCommerce
≤1.9.0.2Update to 1.9.0.3
- High8.8Cross-Site Request Forgery
Advanced Order Export For WooCommerce
≤3.3.2Update to 3.3.3
- High8.8Cross-Site Request Forgery
Integration for Szamlazz.hu and WooCommerce
≤5.6.3.2Update to 5.6.3.3