Database
WordPress Vulnerability Database (page 1218)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium6.5Missing Authorization to Plugin Options Update
Better Font Awesome
2.0.1 – 2.0.1Update to 2.0.2
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
wp-forecast
≤7.5Update to 8.0
- High7.5Missing Authorization
Access Code Feeder
≤1.0.3No patch available
- High8.8Cross-Site Request Forgery to Plugin Settings Update
Better Font Awesome
≤2.0.1Update to 2.0.2
- Medium6.1Reflected Cross-Site Scripting
Event Calendar – Calendar
≤1.4.6Update to 1.4.7
- Medium6.1Reflected Cross-Site Scripting
WPtouch – Make your WordPress Website Mobile-Friendly
≤4.3.42Update to 4.3.44
- High8.8Cross-Site Request Forgery to Settings Update
SEO Scout: Content Optimization, Keyword Research, Rank Tracking + SEO Testing
≤0.9.83No patch available
- High7.5Missing Authorization
Accommodation System
≤1.0.1No patch available
- Medium5.5Authenticated (Administrator+) Cross-Site Scripting
Poll, Survey, Questionnaire and Voting system
≤1.7.4Update to 1.7.5
- Medium6.5Missing Authorization to Event Modification
Event Calendar – Calendar
≤1.4.6Update to 1.4.7
- High7.5Missing Authorization
About Rentals
≤1.5No patch available
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
Launcher: Coming Soon & Maintenance Mode
≤1.0.11Update to 1.0.12
- High7.5Missing Authorization
About Me
≤1.0.12No patch available
- Critical9.1Missing Authorization to Unauthenticated Arbitrary Options Update
Alphabetic Pagination
≤3.0.7Update to 3.0.8
- Medium5.5Authenticated (Administrator+) Stored Cross Site Scripting
3dady real-time web stats
≤1.0No patch available
- High8.8Authenticated (Subscriber+) SQL Injection
BadgeOS
≤3.7.1.2Update to 3.7.1.3
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
WP Socializer – Simple & Easy Social Media Share Icons
≤7.2Update to 7.3
- High7.3Missing Authorization
OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO )
≤3.0.3Update to 3.0.4
- Medium4.3Cross-Site Request Forgery
WordPress Ping Optimizer
≤2.35.1.2.3Update to 2.35.1.3.0
- Medium6.1Unauthenticated Reflected Cross-Site Scripting
All-in-One WP Migration and Backup
≤7.62Update to 7.63
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
Float to Top Button
≤2.3.6No patch available
- Medium6.5Authenticated (Administrator+) Path Traversal
WPvivid — Backup, Migration & Staging
≤0.9.75Update to 0.9.76
- Medium4.9Directory Traversal
Ajax Load More – Infinite Scroll, Load More, & Lazy Load
≤5.5.3Update to 5.5.4
- Medium5.3Missing Authorization
Video Gallery – YouTube Playlist, Channel Gallery by YotuWP
≤1.3.8Update to 1.3.9
- High7.5Cross-Site Request Forgery to PHAR Deserialization
Ajax Load More – Infinite Scroll, Load More, & Lazy Load
≤5.5.3Update to 5.5.4
- Medium5.5Authenticated (Editor+) Stored Cross-Site Scripting
Search Exclude
≤1.2.6Update to 1.2.7
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
Currency Switcher for WooCommerce by WBW
≤1.6.5Update to 1.6.6
- Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
WP Cerber Security, Anti-spam & Malware Scan
≤9.0Update to 9.1
- Medium6.1Reflected Cross-Site Scripting
Classified Listing – AI-Powered Classified ads & Business Directory
<2.2.14Update to 2.2.14
- Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
WP-UserOnline
≤2.88.0Update to 2.88.1