VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1240)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,163 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1240)
SeverityVulnerabilityCVEInstallsPublished
High8.8Cross-Site Request Forgery
Core Control≤1.2.1Update to 1.2.2
CVE-2022-1760—
High7.2Cross-Site Scripting
Tainacan≤0.18.9Update to 0.18.10
——
High7.2Cross-Site Scripting
Seamless Donations is Sunset≤5.1.12Update to 5.1.13
——
Medium6.3Unprotected AJAX Action to Content Import
Shapely Companion≤1.2.6Update to 1.2.7
——
Medium5.4Cross-Site Request Forgery to Post Duplication
Gallery for Social Photo≤1.0.0.27Update to 1.0.0.29
CVE-2022-2224—
High8.8Subscriber+ SQL Injection
Gallery for Social Photo≤1.0.0.25Update to 1.0.0.27
——
High8.8Cross-Site Request Forgery to Settings Changes
a3 Portfolio≤2.10Update to 3.0.0
——
Medium5.4Cross-Site Request Forgery to Post Duplication
Image Slider≤1.1.121Update to 1.1.123
CVE-2022-2223—
High8.8Subscriber+ SQL Injection
Image Slider≤1.1.119Update to 1.1.121
——
Medium6.1Cross-Site Scripting
WP Statistics – Simple, privacy-friendly Google Analytics alternative<13.2.0Update to 13.2.0
CVE-2022-27231—
Medium6.4Missing Authorization
Filr – Secure document library<1.2.2.1Update to 1.2.2.1
CVE-2022-1777—
Critical9.6Cross-Site Request Forgery
postTabs≤2.10.6No patch available
CVE-2022-1781—
High8.8Cross-Site Request Forgery
Static Page eXtended≤2.1No patch available
CVE-2022-1763—
Medium6.1Reflected Cross-Site Scripting
Newsletter – Send awesome emails from WordPress≤7.4.4Update to 7.4.5
CVE-2022-1756—
High8.8Cross-Site Request Forgery to Options Update
Change Uploaded File Permissions≤4.0.0No patch available
CVE-2022-1788—
Medium6.1Reflected Cross-Site Scripting
Simple Membership≤4.1.0Update to 4.1.1
CVE-2022-1724—
Critical9.8SQL Injection
KiviCare – Clinic & Patient Management System (EHR)≤2.3.8Update to 2.3.9
CVE-2022-0786—
High8.8Cross-Site Request Forgery to Disable Protection
Private Files≤0.40No patch available
CVE-2022-1793—
Medium5.0Arbitrary e-mail Sending
Like Button Rating ♥ LikeBtn≤2.6.44Update to 2.6.45
CVE-2022-0745—
Critical9.6Cross-Site Request Forgery to Settings Update and Stored Cross-Site Scripting
LaTeX for WordPress≤3.4.10No patch available
CVE-2022-1780—
High8.8Cross-Site Request Forgery to Arbitrary Settings Update
Auto Delete Posts≤1.3.0No patch available
CVE-2022-1779—
High8.8Cross-Site Request Forgery
Peter’s Collaboration E-mails≤2.2.0No patch available
CVE-2022-1761—
Medium6.1Reflected Cross-Site Scripting
Zephyr Project Manager≤3.2.40Update to 3.2.41 or 3.2.5
CVE-2022-1822—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Sticky Popup≤1.2No patch available
CVE-2022-1750—
Medium4.8Authenticated Stored Cross-Site Scripting
Appointment Hour Booking – Booking Calendar≤1.3.55Update to 1.3.56
CVE-2022-1710—
Critical9.6Cross-Site Request Forgery to Settings Update and Stored Cross-Site Scripting
WP-chgFontSize≤1.8No patch available
CVE-2022-1764—
High8.8Cross-Site Request Forgery to Cross-Site Scripting
Genki Pre-Publish Reminder≤1.4.1No patch available
CVE-2022-1758—
Critical9.6Cross-Site Request Forgery to Settings update and Cross-Site Scripting
RB Internal Links≤2.0.16No patch available
CVE-2022-1759—
High8.8Cross-Site Request Forgery to Settings Update
New User Email Set Up≤0.5.2No patch available
CVE-2022-1790—
Critical9.6Cross-Site Request Forgery to Settings Update
One Click Plugin Updater≤2.4.14No patch available
CVE-2022-1791—

Search VulnCrest Radar

Jump to

Are you sure?