Database
WordPress Vulnerability Database (page 1214)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Critical9.1Directory Traversal and Local File Inclusion
SearchWP Live Ajax Search
1.0 – 1.6.2Update to 1.6.3
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews
≤1.9.6Update to 1.9.7
- High7.5Missing Authorization to Plugin Settings Change
Awesome Filterable Portfolio
≤1.9.7No patch available
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
Taskbuilder – Project Management & Task Management Tool With Kanban Board
≤1.0.7Update to 1.0.8
- High7.2Unauthenticated Stored Cross-Site Scripting
Awesome Filterable Portfolio
≤1.9.7No patch available
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
CPO Shortcodes
≤1.5.0No patch available
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
Advanced Comment Form
≤1.2.0Update to 1.2.1
- High8.8Cross-Site Request Forgery
Integration for Billingo & Gravity Forms
≤1.0.3Update to 1.0.4
- Medium6.8Authenticated (Administrator+) Path Traversal
Enable Media Replace
≤3.6.3Update to 4.0.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
NOTICE BOARD
≤1.1No patch available
- Medium5.3Time-Based TOTP attack to Sensitive Information Exposure
WP 2FA – Two-factor authentication for WordPress
≤2.2.1Update to 2.3.0
- Medium6.1Reflected Cross-Site Scripting
Cryptocurrency Pricing list and Ticker
≤1.5No patch available
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider
3.27.8 – 3.27.8Update to 3.27.9
- High7.2Authenticated Stored Cross-Site Scripting
Awesome Support – WordPress HelpDesk & Support Plugin
≤6.0.7Update to 6.0.8
- High8.8Cross-Site Request Forgery
Rate My Post – Star Rating Plugin by FeedbackWP
≤3.3.4Update to 3.3.5
- High8.8Cross-Site Request Forgery
Sucuri Security – Auditing, Malware Scanner and Security Hardening
≤1.8.33Update to 1.8.34
- Medium5.3Missing Authorization to Unauthenticated Settings Update
Disable User Login
≤1.0.1No patch available
- Medium5.5Authenticated (Vendor+) Stored Cross-Site Scripting
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy
≤3.6.3Update to 3.6.4
- Medium6.1Reflected Cross-Site Scripting
Soledad
≤8.2.4Update to 8.2.5
- Critical9.8Unauthenticated Privilege Escalation
WPGateway
≤3.5No patch available
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
Add Shortcodes Actions And Filters
≤2.10No patch available
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
DSGVO All in one for WP
≤4.2Update to 4.3
- Medium6.5Missing Authorization to Plugin Settings Update
Photospace Gallery
≤2.3.5No patch available
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
PCA Predict
≤1.0.3No patch available
- High8.8Cross-Site Request Forgery
Read more By Adam
≤1.1.8No patch available
- High8.8Cross-Site Request Forgery
YDS Support Ticket System
≤1.0No patch available
- High8.8Cross-Site Request Forgery to Plugin Settings Update
Advanced Dynamic Pricing and Discount Rules for WooCommerce
≤4.1.3Update to 4.1.4
- High8.8Cross-Site Request Forgery to Plugin Settings Update
RD Station
≤5.2.0Update to 5.2.1
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
We’re Open!
≤1.37Update to 1.38
- High8.8Cross-Site Request Forgery
Corner Ad
≤1.0.56Update to 1.0.57