VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1222)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,163 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1222)
SeverityVulnerabilityCVEInstallsPublished
Medium5.3Sensitive Information Disclosure
User Private Files – Secure File Sharing and Client Portal Plugin≤1.1.0Update to 1.1.1
——
Medium5.5Authenticated (Admin+) Cross-Site Scripting
Twitter Bootstrap Slider≤1.1.3No patch available
——
Medium5.5Authenticated (Admin+) Cross-Site Scripting
Social Media Auto Poster – Schedule & Publish to Buffer≤3.8.1Update to 3.8.2
——
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Minimal Coming Soon – Coming Soon Page≤2.34Update to 2.35
——
Medium5.5Authenticated (Admin+) Cross-Site Scripting
Social Media Auto Poster – Schedule & Publish to Hootsuite≤1.4.5Update to 1.4.6
——
High7.2Authenticated (Admin+) Arbitrary File Upload
Cyclone Slider≤3.2.0No patch available
——
Medium6.1Cross-Site Scripting
Protect WP Admin≤3.7Update to 3.8
——
High7.2Authenticated (Admin+) Arbitrary File Upload
PostmagThemes One click Demo Import for WordPress Site≤1.0.6Update to 1.0.7
——
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Simple Telegram≤0.9.3No patch available
——
High8.8Unauthorized File Upload
Contempo Real Estate Custom Posts≤3.2.6Update to 3.2.7
——
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Product Carousel Slider & Grid Ultimate for WooCommerce≤1.8.6Update to 1.8.7
——
Medium6.3Missing Authorization
WP-MUI – Mass User Input – Add and Export WP Users Quickly≤1.8No patch available
——
Medium6.4Stored Cross-Site Scripting
Testimonial – Testimonial Slider and Showcase Plugin≤2.2.6Update to 2.2.7
——
Medium6.1Reflected Cross-Site Scripting
Download Manager≤3.2.53Update to 3.2.54
——
High8.8Cross-Site Request Forgery
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions≤3.8.11.8Update to 3.8.12
——
Medium4.3Missing Authorization
Sensei LMS – Online Courses, Quizzes, & Learning≤4.5.1Update to 4.5.2
CVE-2022-2080—
Medium5.3Information Disclosure
Sensei LMS – Online Courses, Quizzes, & Learning≤4.4.3Update to 4.5.0
CVE-2022-2034—
Medium6.13.0.0 - Reflected Cross-Site Scripting
PDF Invoices & Packing Slips for WooCommerce2.14.0 – 3.0.0Update to 3.0.1
CVE-2022-2537—
Medium4.3Authenticated (Subscriber+) Server-Side Request Forgery
Mailchimp for WooCommerce≤2.7Update to 2.7.1
CVE-2022-2267—
High7.2Authenticated (Admininstrator+) Local File Inclusion
WPIDE – File Manager & Code Editor≤2.6Update to 3.0
CVE-2022-2261—
Medium4.9Authenticated (Admin+) Server-Side Request Forgery
Mailchimp for WooCommerce≤2.7.1Update to 2.7.2
CVE-2022-2556—
Critical9.8Missing Authorization Checks
ActiveDEMAND≤0.2.27Update to 0.2.28
CVE-2022-36296—
High8.8Cross-Site Request Forgery to Plugin Settings Update
Download Manager≤3.2.48Update to 3.2.49
CVE-2022-34347—
Critical9.8Authentication Bypass
WP OAuth Server ( Login with WordPress )≤3.0.4Update to 4.0.1
CVE-2022-34149—
High8.8Cross-Site Request Forgery
WP Hotel Booking≤1.10.5Update to 1.10.6
CVE-2021-36852—
Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
MaxButtons – Create buttons≤9.2Update to 9.3
CVE-2022-38703—
High8.8Cross-Site Request Forgery
MaxButtons – Create buttons≤9.2Update to 9.3
CVE-2022-36346—
Medium4.7Open Redirect
My Calendar – Accessible Event Manager≤3.3.16Update to 3.3.17
CVE-2022-36371—
High8.8Cross-Site Request Forgery to Cross-Site Scripting
Banner Cycler≤1.4No patch available
CVE-2022-2233—
High7.2Authenticated (Administrator+) SQL Injection
Fluent Support – Helpdesk & Customer Support Ticket System≤1.5.7Update to 1.5.8
CVE-2022-2559—

Search VulnCrest Radar

Jump to

Are you sure?