VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1242)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,163 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1242)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Signup forms <= 1.5.3 - Reflected Cross-Site Scripting
MailerLite – Signup forms (official)≤1.5.3Update to 1.5.4
CVE-2022-1604—
Critical9.8Remote Code Execution
Member Hero≤1.0.9No patch available
CVE-2022-0885—
Medium6.5Authenticated Arbitrary Plugin Deactivation and Settings Modification
JupiterX≤2.0.6Update to 2.0.7
CVE-2022-1656—
High8.8Cross-Site Request Forgery to Settings Update
OnePress Social Locker≤5.6.2No patch available
CVE-2022-1608—
Medium5.4Cross-Site Request Forgery
Code Snippets Extended≤1.4.7No patch available
CVE-2022-29435—
High8.8Cross-Site Request Forgery to Stored Cross-Site Scripting
Code Snippets Extended≤1.4.7No patch available
CVE-2022-29436—
Medium4.1Authenticated (Contributor+) Stored Cross-Site Scripting
Opal Hotel Room Booking≤1.2.7No patch available
CVE-2022-29449—
Medium6.8Authenticated Local File Inclusion
Popup Box – Easily Create WordPress Popups≤2.1.2Update to 2.2
CVE-2022-29445—
Critical9.8Unauthenticated SQL Injection
RSVPMaker≤9.3.2Update to 9.3.3
CVE-2022-1768—
Medium5.3Protection Bypass due to IP Spoofing
iQ Block Country≤1.2.13Update to 1.2.17
CVE-2022-1762—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Reviews Block for Google<2.0.0Update to 2.0.0
CVE-2022-1772—
High8.8Cross-Site Request Forgery
Useful Banner Manager≤1.6.1No patch available
CVE-2022-1694—
Medium6.1Cross-Site Scripting
Advanced Admin Search≤1.1.2Update to 1.1.6
CVE-2022-0626—
Critical9.6Cross-Site Request Forgery
Hot Linked Image Cacher≤1.16No patch available
CVE-2022-1765—
Medium6.1Reflected Cross-Site Scripting
WP Athletics≤1.1.7No patch available
CVE-2022-1773—
Medium6.4Cross-Site Scripting
All in One Invite Codes≤1.0.14Update to 1.0.15
——
Critical9.8Unauthenticated SQL Injection
Bestbooks≤2.6.3No patch available
CVE-2022-0827—
High7.3Missing Authorization
Enqueue Anything≤1.0.1No patch available
CVE-2021-25116—
Medium6.4Stored Cross-Site Scripting
WP Athletics≤1.1.7No patch available
CVE-2022-1549—
Medium6.4Stored Cross-Site Scripting
Keyword Rank Tracker≤1.0.7Update to 1.0.8
——
Medium6.8Authenticated Local File Inclusion
Counter Box – Add Countdowns, Timers & Dynamic Counters to WordPress≤1.1.1Update to 1.2
CVE-2022-29446—
Medium6.8Authenticated Local File Inclusion
Hover Effects – easily create any hover effect≤2.1Update to 2.1.1
CVE-2022-29447—
High7.2Local File Inclusion
Social Proof Popups & Real-Time Notifications – Herd Effects≤5.2Update to 5.2.1
CVE-2022-29448—
High8.8Cross-Site Request Forgery to Arbitrary Settings Update
LiveSync for WordPress≤1.0No patch available
CVE-2022-1712—
Medium5.5Authenticated (Admin+) Cross-Site Scripting
Video Slider – Slider Carousel<1.4.8Update to 1.4.8
CVE-2022-1541—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Photo Gallery by 10Web – Mobile-Friendly Image Gallery<1.6.4Update to 1.6.4
CVE-2022-1394—
High8.8Cross-Site Request Forgery to Settings Update
Discy - Social Questions and Answers WordPress Theme<5.2Update to 5.2
CVE-2022-1421—
High8.8Cross-Site Request Forgery to Settings Reset
Discy - Social Questions and Answers WordPress Theme<5.2Update to 5.2
CVE-2022-1422—
Medium6.1Reflected Cross-Site Scripting
Ask Me - Responsive Questions & Answers WordPress<6.8.2Update to 6.8.2
CVE-2022-1241—
Medium6.4Authenticated (Contributor+) Cross-Site Scripting
//// WP BORN BABIES PLUGIN ///≤1.0No patch available
CVE-2022-1506—

Search VulnCrest Radar

Jump to

Are you sure?