VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1238)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,163 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1238)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Cross-Site Request Forgery
MailPress≤7.2.1No patch available
CVE-2022-1843—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
WP Zillow Review Slider<2.4Update to 2.4
CVE-2022-1915—
Medium6.1Cross-Site Scripting
Icegram Engage – Popups, Welcome Bars, Optins, Slide-Ins & Lead Generation for WordPress<2.1.8Update to 2.1.8
CVE-2022-1776—
High8.8Cross-Site Request Forgery
Cross-Linker≤3.0.1.9No patch available
CVE-2022-1826—
High7.2Admin+ SQL Injection
Better Find and Replace – AI-Powered Suggestions<1.3.6Update to 1.3.6
CVE-2022-1472—
Medium6.1Reflected Cross-Site Scripting
New User Approve≤2.4Update to 2.4.1
——
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Newsletter – Send awesome emails from WordPress<7.4.6Update to 7.4.6
CVE-2022-1889—
Medium6.8Cross-Site Request Forgery to Settings Update
CaPa Protect≤0.5.8.2No patch available
CVE-2022-1832—
Medium5.5Authenticated (Admin+) Cross-Site Scripting
Print, PDF & Email by PrintFriendly<5.2.3Update to 5.2.3
CVE-2022-0663—
Medium6.1Cross-Site Request Forgery to Log Deletion
WP-EMail<2.69.0Update to 2.69.0
CVE-2022-1630—
High8.8Cross-Site Request Forgery
PDF24 Articles To PDF≤4.2.2No patch available
CVE-2022-1828—
High8.8Cross-Site Request Forgery
Multi-page Toolkit≤2.6No patch available
CVE-2022-1818—
Medium5.4Cross-Site Scripting
Trade Runner≤3.9Update to 3.10
——
High8.8Cross-Site Request Forgery
Inline Google Maps≤5.11No patch available
CVE-2022-1829—
Medium6.5Spam Protection Bypass
WP-EMail<2.69.0Update to 2.69.0
CVE-2022-1614—
Medium5.5Authenticated (Admin+) Cross-Site Scripting
XML Sitemap Generator for Google≤4.1.1Update to 4.1.2
CVE-2021-25088—
High8.8Cross-Site Request Forgery
PDF24 Article To PDF≤4.2.2No patch available
CVE-2022-1827—
High8.8Cross-Site Request Forgery to Arbitrary Settings Update
Amazon Einzeltitellinks≤1.3.3No patch available
CVE-2022-1830—
High8.8Cross-Site Request Forgery
WPlite≤1.3.1No patch available
CVE-2022-1831—
High8.8Cross-Site Request Forgery
My Private Site – Make Your Whole Site Private, Force Login & Block Registration Spam≤3.0.7Update to 3.0.8
CVE-2022-1627—
Medium4.3Cross-Site Request Forgery
Social Share Buttons by Supsystic≤2.2.3Update to 2.2.4
CVE-2021-36890—
Medium4.8Author+ Stored Cross-Site Scripting
Pricing Table WordPress Plugin – Easy Pricing Tables≤3.1.2Update to 3.1.3
CVE-2021-36866—
Medium6.4Authenticated (Editor+) Stored Cross-Site Scripting
Export All URLs≤4.1Update to 4.2
CVE-2022-27856—
High8.8Cross-Site Request Forgery
Admin Management Xtended≤2.4.4Update to 2.4.5
CVE-2022-29450—
Medium6.3Missing Authorization
Plausible Analytics≤1.2.3Update to 1.2.4
——
Medium4.4Authenticated (Editor+) Stored Cross-Site Scripting
Export All URLs≤4.1Update to 4.2
CVE-2022-29452—
Medium5.5Cross-Site Scripting
No External Links≤4.7.4Update to 4.8.0
CVE-2022-1095—
Medium6.1Cross-Site Scripting
PressForward≤5.2.8Update to 5.2.9
——
Medium5.5Administrator+ Cross-Site Scripting
Coming Soon & Maintenance Mode by Colorlib≤1.0.98Update to 1.0.99
CVE-2022-1945—
High7.2Cross-Site Scripting
Real-Time Post Statistics for WordPress≤2.5Update to 2.6
——

Search VulnCrest Radar

Jump to

Are you sure?