VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1239)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,163 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1239)
SeverityVulnerabilityCVEInstallsPublished
Medium5.5Cross-Site Scripting
No External Links≤4.7.4Update to 4.8.0
CVE-2022-1095—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Hotel Booking<3.3Update to 3.3
CVE-2022-29443—
Medium5.4Stored Cross-Site Scripting
Private Messages For WordPress≤2.1.10No patch available
CVE-2022-29442—
Medium4.3Cross-Site Request Forgery
Private Messages For WordPress≤2.1.10No patch available
CVE-2022-29441—
High8.8Cross-Site Request Forgery to Slide Deletion
Image Slider by NextCode – Photo & Video Slider≤1.1.2No patch available
CVE-2022-29439—
High8.8Multiple Cross-Site Request Forgery
Image Slider by NextCode – Photo & Video Slider≤1.1.2No patch available
CVE-2022-29437—
High8.8Cross-Site Request Forgery to Settings Chage
Seamless Donations is Sunset≤5.1.7Update to 5.1.8
CVE-2022-1610—
Medium5.5Authenticated (Admin+) Cross-Site Scripting
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget<1.5.0Update to 1.5.0
CVE-2022-1266—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
underConstruction<1.21Update to 1.21
CVE-2022-1896—
High8.8Cross-Site Request Forgery
Mail Subscribe List<2.1.4Update to 2.1.4
CVE-2022-1603—
High8.8Cross-Site Request Forgery to Construction Mode Disabled
underConstruction<1.20Update to 1.20
CVE-2022-1895—
Medium5.4Cross-Site Scripting
Display Data on your site! Create Dynamic Content Templates from any form of data. Works with ACF, Pods, BuddyPress/ BuddyBoss≤1.3.8Update to 1.3.9
——
Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
Image Slider by NextCode – Photo & Video Slider≤1.1.2No patch available
CVE-2022-29438—
Medium6.1Cross-Site Scripting
OTP Login & Register Woocommerce≤2.0Update to 2.1
——
Medium6.5Unauthenticated SQL Injection via AJAX call
Envato Sales By Item≤1.1No patch available
——
Medium5.4Stored Cross-Site Scripting
Mail Subscribe List≤2.1.6Update to 2.1.7
——
Medium6.1Reflected Cross-Site Scripting
Subscriptions & Memberships for PayPal≤1.1.5Update to 1.1.6
——
Medium6.1Cross-Site Scripting
Wbcom Designs – BuddyPress Group Reviews≤2.8.1Update to 2.8.2
——
High8.8Cross-Site Request Forgery to Settings Update
Direct Checkout for WooCommerce – Skip Cart with Buy Buttons≤1.2Update to 1.3
——
High8.8Cross-Site Request Forgery to Cross-Site Scripting
Easy PayPal Shopping Cart≤1.1.9Update to 1.1.10
——
Medium6.1Reflected Cross-Site Scripting
VS Contact Form≤11.5Update to 11.6
——
Medium5.4Cross-Site Scripting
Dropdown and scrollable Text≤2.0Update to 2.1
——
Medium6.4Cross Site Scripting
Codup Read Only Admin≤1.1.1.7Update to 1.1.1.8
——
Medium5.5Authenticated Cross-Site Scripting
Countdown, Coming Soon, Maintenance – Countdown & Clock≤2.3.9.5Update to 2.3.9.6
——
Medium6.1Cross-Site Scripting
WordPress to Freshsales Integration≤1.3.2.2Update to 1.3.2.3
——
Medium6.1Reflected Cross-Site Scripting via Page
Easy PayPal Events & Tickets≤1.1.1Update to 1.1.7
——
Medium6.1Reflected Cross-Site Scripting via Page
Accept Donations with PayPal & Stripe≤1.3Update to 1.3.1
——
Medium6.1Stored Cross-Site Scripting
Elements For Elementor≤1.9Update to 2.0
——
Medium6.1Reflected Cross-Site Scripting
Ocean Extra<1.9.5Update to 1.9.5
CVE-2021-25104—
Medium5.3Rating Denial of Service
Rating by BestWebSoft≤1.5Update to 1.6
CVE-2021-25121—

Search VulnCrest Radar

Jump to

Are you sure?