VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1236)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,163 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1236)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Reflected Cross-Site Scripting
SAML Single Sign On – SSO Login≤4.9.20Update to 4.9.21
——
Critical9.8ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 3.4.7 -Authentication Bypass via Password Reset Weakness
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup≤3.4.7Update to 3.4.8
CVE-2022-1903—
Critical9.8Unauthenticated Plugin Settings Reset
Backup, Restore and Migrate your sites with XCloner≤4.2.16Update to 4.3.6
CVE-2022-0444—
High8.1Insecure OAuth Implementation to Authentication Bypass
Simple Single Sign On≤4.1.1No patch available
CVE-2022-2083—
Low3.8Stored Cross-Site Scripting
Image Gallery – Grid Gallery≤1.1.2Update to 1.1.3
CVE-2022-1327—
Medium6.1Reflected Cross-Site Scripting
Currency Switcher for WordPress≤1.0.3Update to 1.0.4
——
Medium6.1Reflected Cross-Site Scripting
Pricing Table WordPress Plugin – Easy Pricing Tables≤3.2.0Update to 3.2.1
CVE-2022-1904—
High8.8Arbitrary File Deletion
HTML2WP≤1.0.0No patch available
CVE-2022-1572—
Medium6.1Reflected Cross-Site Scripting
Download Manager≤3.2.42Update to 3.2.43
CVE-2022-1985—
Medium6.1Reflected Cross-Site Scripting
WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets≤3.6.6Update to 3.6.7
——
Medium6.1Reflected Cross-Site Scripting
ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF≤4.22.9Update to 4.22.10
——
Medium6.4Cross-Site Scripting
My Content Management1.7.1 – 1.7.1Update to 1.7.2
——
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Trade Runner≤3.9Update to 3.10
——
Medium6.1Reflected Cross-Site Scripting
core plugin for kitestudio themes<2.3.1Update to 2.3.1
CVE-2022-1951—
Medium6.5Missing Authorization
Browser and Operating System Finder≤1.2No patch available
——
Medium6.1Reflected Cross-Site Scripting
Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts≤2.4.5Update to 2.4.6
——
Medium6.1Reflected Cross-Site Scripting
Ultimate WooCommerce CSV Importer≤2.0No patch available
CVE-2022-1470—
Critical9.8Arbitrary File Upload
HTML2WP≤1.0.0No patch available
CVE-2022-1574—
Medium4.1Server-Side Request Forgery
WP Ultimate CSV Importer – WordPress CSV, XML & Excel Import Export≤6.5.2Update to 6.5.3
CVE-2022-1977—
High8.8Cross-Site Request Forgery
HTML2WP≤1.0.0No patch available
CVE-2022-1573—
Critical9.6Cross-Site Request Forgery
Add Post URL≤2.1.0No patch available
CVE-2022-1913—
High7.2Admin+ SQL Injection
Contest Gallery Commerce – Upload, Vote & Sell with PayPal & Stripe≤17.0.4Update to 17.0.5
——
Medium5.3Sensitive Information Disclosure
FormsDB – Save Elementor Forms to Google Sheets & Post Type≤1.5Update to 1.6
——
Medium5.4Cross-Site Scripting via SVG Upload
Easy SVG Support≤3.2.0Update to 3.3.0
CVE-2022-1964—
Medium5.4Arbitrary File Deletion
3D Product configurator for WooCommerce≤1.0.5Update to 1.0.6
CVE-2022-1953—
Medium6.4Authenticated (Contributor+) Cross-Site Scripting
Modern Events Calendar Lite≤6.2.9Update to 6.3.0
CVE-2022-30533—
High8.8Cross-Site Request Forgery
Cimy Header Image Rotator≤6.1.1No patch available
CVE-2022-1885—
Medium6.1Reflected Cross-Site Scripting
Active Woot Products Tables for WooCommerce. 100% FREE ≤1.0.4Update to 1.0.5
CVE-2022-1916—
High8.8Cross-Site Request Forgery to Settings Update
Social Share Buttons by Supsystic≤2.2.3Update to 2.2.4
CVE-2022-1653—
Critical9.6Cross-Site Request Forgery
New User Approve≤2.4Update to 2.4.1
CVE-2022-1625—

Search VulnCrest Radar

Jump to

Are you sure?