Database
WordPress Vulnerability Database (page 1225)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews
≤1.9.6Update to 1.9.7
- High7.5Sensitive Information Disclosure
Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More
≤1.4.7Update to 1.4.7.1
- High8.8Cross-Site Request Forgery
Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools
≤5.6.1Update to 5.6.2
- High8.8Cross-Site Request Forgery
WP Coder – Insert & Manage Code Snippets
≤2.5.2Update to 2.5.3
- High8.8Cross-Site Request Forgery to Cross-Site Scripting
uContext for Amazon
≤3.9.1No patch available
- Medium6.1Reflected Cross-Site Scripting
VR Calendar
≤2.3.1Update to 2.3.2
- High8.8Cross-Site Request Forgery
Trust Payments Gateway for WooCommerce (JavaScript Library)
≤1.2.0Update to 1.2.1
- Medium6.1Reflected Cross-Site Scripting
Feed Them Social – Social Media Feeds, Video, and Photo Galleries
≤2.9.9Update to 3.0.1
- High7.2Authenticated (Admin+) Arbitrary Options Update
Tabs – Responsive Tabs with WooCommerce Product Tab Extension
≤3.6.0Update to 3.7.0
- Medium5.4Authenticated (Subscriber+) Stored Cross-Site Scripting
Feed Them Social – Social Media Feeds, Video, and Photo Galleries
≤2.9.9Update to 3.0.1
- Medium6.1Reflected Cross-Site-Scripting
Rezgo Online Booking
4.1.7 – 4.1.7Update to 4.1.8
- High8.8Cross-Site Request Forgery
Trust Payments Gateway for WooCommerce (JavaScript Library)
≤1.2.2Update to 1.2.3
- Medium6.3Missing Authorization
Directorist: AI-Powered Business Directory, Listings & Classified Ads
≤7.2.3Update to 7.3.0
- High7.2Unauthenticated Stored Cross-Site Scripting
WP Sticky Button – Click to Chat
≤1.3Update to 1.4.0
- Medium5.4Missing Authorization
Product Slider, Product Carousel and Product Grid Gallery for WooCommerce – Reno Product Slider (formerly Product Slider for WooCommerce)
≤2.5.6Update to 2.5.7
- High8.8Cross-Site Request Forgery to Cross-Site Scripting
Link Optimizer Lite
≤1.4.5No patch available
- Medium6.1Stored Cross-Site Scripting
Smartideo
≤2.7.0Update to 2.7.1
- Medium5.3Information Disclosure
WPGraphQL WooCommerce
≤0.12.3Update to 0.12.4
- High8.8Privilege Escalation
Multiple Roles
<1.3.7Update to 1.3.7
- High8.8Cross-Site Request Forgery to Cross-Site Scripting
uContext for Clickbank
≤3.9.1No patch available
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
Simple Banner – Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website
≤2.11.0Update to 2.12.0
- Medium6.3Sensitive Data Exposure
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce
≤1.10.5Update to 1.10.6
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
Coming Soon – Under Construction
≤1.2.0No patch available
- Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
JobBoardWP – Job Board Listings and Submissions
≤1.1.0Update to 1.2.0
- High7.2Authenticated Arbitrary Options Update
Shortcode Addons- with Visual Composer, Divi, Beaver Builder and Elementor Extension
≤3.1.2Update to 3.2.0
- High7.2Authenticated (Admin+) Arbitrary Options Update
Flipbox – Awesomes Flip Boxes Image Overlay
≤2.6.0Update to 2.6.1
- High7.2Authenticated (Admin+) Remote Code Execution on Multi-Site
WP-DBManager
≤2.80.7Update to 2.80.8
- Medium5.3Sensitive Information Disclosure
SearchWP Live Ajax Search
≤1.6.1Update to 1.6.2
- High7.2Authenticated (Administrator+) SQL Injection
TranslatePress – Translate Multilingual sites with AI Translation
≤2.3.2Update to 2.3.3
- High7.3Sensitive Information Disclosure
WP Libre Form 2
≤2.0.8Update to 2.0.9