VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1231)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,163 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1231)
SeverityVulnerabilityCVEInstallsPublished
Critical9.8Remote Code Execution
The School Management Pro≤9.9.6Update to 9.9.7
CVE-2022-1609—
Medium6.1Reflected Cross-Site Scripting
miniOrange 2FA – Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator)≤5.5.7Update to 5.5.75
——
High8.8Multiple Cross-Site Request Forgery
Insights from Google PageSpeed≤4.0.6Update to 4.0.7
CVE-2022-1672—
Medium6.1Reflected Cross-Site Scripting
Download Manager≤3.2.43Update to 3.2.44
CVE-2022-2168—
Critical9.6Cross-Site Request Forgery to Stored Cross-Site Scripting
a3 Responsive Slider≤2.1.0Update to 2.2.0
——
Medium4.9Authenticated Arbitrary File Download
Download Monitor≤4.5.9Update to 4.5.91
CVE-2022-2222—
Medium6.1Reflected Cross-Site Scripting
LukasApps CAPTCHA tools for Contact Form 7≤0.1.1Update to 0.1.2
CVE-2022-2187—
Medium6.1Stored Cross Site Scripting
Simple Page Transition≤1.4.1No patch available
CVE-2022-2341—
Medium5.5Cross-Site Scripting
Bulk Page Generator and Mass Page Builder – Page Generator≤1.6.4Update to 1.6.6
CVE-2022-2100—
Medium6.1Reflected Cross-Site Scripting
Discount Rules for WooCommerce≤2.4.1Update to 2.4.2
CVE-2022-2090—
Medium4.8Authenticated (Admin+) Stored Cross-Site Scripting
W-DALIL≤2.0No patch available
CVE-2022-2340—
High8.1Authentication Bypass
OAuth Single Sign On – SSO (OAuth Client)≤6.22.5Update to 6.22.6
CVE-2022-2133—
High8.8Cross-Site Request Forgery to Arbitrary Options Update
Jquery Validation For Contact Form 7≤5.2Update to 5.3
CVE-2022-2144—
Medium6.1Cross-Site Scripting
BuddyForms≤2.6.9Update to 2.6.10
——
Medium6.1Cross-Site Scripting
Header Footer Code Manager≤1.1.23Update to 1.1.24
CVE-2022-0899—
Medium6.1Reflected Cross-Site Scripting
Download Manager≤3.2.43Update to 3.2.44
——
Critical9.8Authentication Bypass
WordPress OpenID Connect Client≤2.1.7Update to 2.1.8
——
Medium5.5Cross-Site Scripting
Loading Page with Loading Screen≤1.0.82Update to 1.0.83
CVE-2022-2169—
Critical9.8Authentication Bypass
OAuth 2.0 client for SSO≤1.11.3Update to 1.11.4
CVE-2022-34858—
Critical9.8Authentication Bypass
Login with WHMCS≤1.11.3Update to 1.11.4
——
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Stape Conversion Tracking≤1.1.1Update to 1.1.2
——
Medium6.5Unprotected AJAX Actions
eBay Dropshipping and Affiliate by Wooshark≤1.5.6No patch available
——
Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
Post Comments as bbPress Topics≤2.2.3Update to 2.2.4
——
Critical9.8Authentication Bypass
Login with Cognito≤1.4.6Update to 1.4.7
——
High8.8Cross-Site Request Forgery to Cross-Site Scripting
DX Share Selection≤1.4Update to 1.5
CVE-2022-2001—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Re:amaze Helpdesk & Live Chat≤1.2.5Update to 2.0
——
Medium5.5Administrator+ Cross-Site Scripting
404s≤3.4.9Update to 3.5.1
CVE-2022-2118—
High8.8Cross-Site Request Forgery to Settings Update
WP Meta SEO≤4.4.8Update to 4.4.9
CVE-2022-30337—
High8.8Cross-Site Request Forgery
Freshdesk (official)≤2.3.6Update to 2.4.0
——
Medium6.4Subscriber+ Stored Cross-Site Scripting
Simple Post Notes≤1.7.5Update to 1.7.6
CVE-2022-2186—

Search VulnCrest Radar

Jump to

Are you sure?