VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1209)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,163 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1209)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Reflected Cross-Site Scripting
Newspaper - News & WooCommerce WordPress Theme≤11.5.1Update to 12
CVE-2022-2167—
Medium6.1Reflected Cross-Site Scripting
s2Framework≤4.1.5Update to 4.1.6
——
Medium6.1Reflected Cross-Site Scripting
Rock Convert≤2.10.2Update to 2.11.0
CVE-2022-3440—
High7.2Authenticated (Administrator+) PHP Object Injection
Ocean Extra≤2.0.4Update to 2.0.5
CVE-2022-3374—
Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
Rock Convert≤2.10.2Update to 2.11.0
CVE-2022-3441—
High7.2Authenticated (Administrator+) PHP Object Injection
Customizer Export/Import≤0.9.4Update to 0.9.5
CVE-2022-3380—
High8.8Cross-Site Request Forgery
SeoSamba for WordPress Webmasters≤1.0.5Update to 1.0.6
CVE-2022-41620—
Medium6.1Reflected Cross-Site Scripting
Newspaper - News & WooCommerce WordPress Theme≤11.5.1Update to 12
CVE-2022-2627—
High7.2Authenticated (Administrator+) PHP Object Injection
PublishPress Capabilities: User Role Access Control, Admin Area Permissions≤2.5.1Update to 2.5.2
CVE-2022-3366—
Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
WP Contact Slider – Contact Form Slider Widget≤2.4.7Update to 2.4.8
CVE-2022-3237—
High7.2Authenticated (Administrator+) PHP Object Injection
Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more≤1.4.9Update to 1.5.0
CVE-2022-3334—
High8.1Missing Authorization to Privilege Escalation
Automatic User Roles Switcher≤1.1.1Update to 1.1.2
CVE-2022-3419—
Medium6.1Reflected Cross-Site Scripting
Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More<1.8.4.7Update to 1.8.4.7
CVE-2022-2190—
Critical9.8Unauthenticated SQL Injection
AWP Classifieds≤4.2.1Update to 4.3
CVE-2022-3254—
High7.2PHP Object Injection
Smart Slider 3≤3.5.1.9Update to 3.5.1.11
CVE-2022-3357—
Medium5.5Authenticated (Subscriber+) Plugin Options Update to Cross-Site Scripting
WP Total Hacks≤4.7.2No patch available
CVE-2022-3096—
Medium6.1Reflected Cross-Site Scripting
eCommerce Product Catalog≤3.0.70Update to 3.0.71
——
Medium6.1Reflected Cross-Site Scripting
Billingo Official for WooCommerce≤3.3.9Update to 3.4.0
CVE-2022-3420—
Medium5.5Authenticated (Administrator+) Cross-Site Scripting
Image/Banner Widget≤1.4.5No patch available
——
Medium5.5Authenticated (Administrator+) Cross-Site Scripting
Subpages Extended≤1.6.6No patch available
——
Medium6.5Missing Authorization
Post Slider≤1.6.7No patch available
CVE-2022-40975—
Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
WP Word Count≤3.2.3Update to 3.2.4
CVE-2022-3408—
Medium6.1Stored Cross-Site Scripting
Log HTTP Requests≤1.3.1Update to 1.3.2
CVE-2022-3402—
Medium4.3Race Condition
WP-Polls≤2.76.0Update to 2.77.0
CVE-2022-40130—
Critical9.8Unauthenticated Arbitrary File Upload
Create Block Theme≤1.2.1Update to 1.2.2
——
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Rock Convert≤2.11.0Update to 3.0.0
CVE-2022-36428—
Medium6.1Reflected Cross-Site Scripting
IP Blacklist Cloud≤5.00No patch available
——
Critical9.8Unauthenticated SQL Injection
Product Vendors≤2.1.65Update to 2.1.66
——
Medium6.5Missing Authorization to Table Modification
Table Generator≤1.3.0No patch available
——
Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
WP Humans.txt≤1.0.6No patch available
CVE-2022-3392—

Search VulnCrest Radar

Jump to

Are you sure?