VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1244)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,163 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1244)
SeverityVulnerabilityCVEInstallsPublished
Medium5.5Stored Cross-Site Scripting
IMDB Info Box≤2.0No patch available
CVE-2022-1294—
High7.2Authenticated (Admin+) SQL Injection
CUBE SLIDER≤1.2No patch available
CVE-2022-1684—
Medium5.4Missing Authorization Checks
All In One Login≤1.0.9Update to 1.1.0
CVE-2022-1589—
Medium5.5Authenticated (Admin+) Cross-Site Scripting
User Meta – User Profile Builder and User management plugin≤2.4.2Update to 2.4.3
CVE-2022-0376—
Medium6.1Stored Cross-Site Scripting
No Future Posts≤1.4No patch available
CVE-2022-1387—
High8.8Authenticated SQL Injection
Realty Workstation≤1.0.9Update to 1.0.10
CVE-2022-1691—
Medium6.5Tabnabbing
External Links in New Window / New Tab≤1.42Update to 1.43
CVE-2022-1583—
Medium5.5Stored Cross-Site Scripting
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder≤1.14.11Update to 1.14.12
CVE-2022-1564—
High7.2Authenticated (Admin+) SQL Injection
Logo Slider≤1.4.8No patch available
CVE-2022-1687—
Medium6.1Unauthenticated Stored Cross-Site Scripting
External Links in New Window / New Tab≤1.42Update to 1.43
CVE-2022-1582—
High7.2Authenticated (Admin+) SQL Injection via id Parameter
Note Press≤0.1.10No patch available
CVE-2022-1690—
High8.8Cross-Site Request Forgery to Cross-Site Scripting
JivoChat Live Chat – WP live chat plugin for WordPress≤1.3.5.3Update to 1.3.5.4
CVE-2022-0642—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Team Members≤5.1.0Update to 5.1.1
CVE-2022-1568—
High7.2Authenticated (Admin+) SQL Injection via orderby
Five Minute Webshop≤1.3.2Update to 1.3.3
CVE-2022-1685—
High7.2Authenticated (Admin+) SQL Injection via id
Five Minute Webshop≤1.3.2Update to 1.3.3
CVE-2022-1686—
Medium4.8Authenticated (Admin+) Stored Cross-Site Scripting
Slideshow≤2.3.1No patch available
CVE-2022-1299—
Medium6.1Authenticated (Admin+) Cross-Site Scripting
Amazon Link≤3.2.10No patch available
CVE-2022-1645—
High8.8Cross-Site Request Forgery to Arbitrary Page Creation
Bulk Page Creator≤1.1.3Update to 1.1.4
CVE-2022-1611—
Medium4.8Authenticated (Admin+) Cross-Site Scripting
Call&Book Mobile Bar≤1.2.2No patch available
CVE-2022-1644—
High7.2Authenticated (Admin+) SQL Injection via Update
Note Press≤0.1.10No patch available
CVE-2022-1689—
Medium4.8Authenticated (Admin+) Cross-Site Scripting
hpb Dashboard≤1.3.1No patch available
CVE-2022-1542—
Medium4.8Authenticated (Admin+) Cross-Site Scripting
BannerMan≤0.2.4No patch available
CVE-2022-1275—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Simple Real Estate Pack≤1.4.8No patch available
CVE-2022-1646—
Critical9.8Unauthenticated SQL Injection
CP Image Store with Slideshow<1.0.68Update to 1.0.68
CVE-2022-1692—
Medium6.1Cross-Site Scripting
Name Directory≤1.25.2Update to 1.25.3
CVE-2022-2072—
Medium5.5(Admin+) Stored Cross-Site Scripting
Flower Delivery by Florist One≤3.5.8Update to 3.5.9
CVE-2022-1113—
Medium5.5Authenticated Cross-Site Scripting
wpDataTables (Premium)≤2.1.27Update to 2.1.28
CVE-2022-29432—
High8.8Cross-Site Request Forgery to CPT base deletion
Remove CPT base≤5.8Update to 5.9
CVE-2022-29431—
High8.8Cross-Site Request Forgery leading to Stored Cross-Site Scripting
PNG to JPG≤4.0Update to 4.1
CVE-2022-29430—
Medium4.4Authenticated (Admin+) Stored Cross-Site Scripting
WP-Stateless – Google Cloud Storage≤3.1.1Update to 3.2.0
CVE-2022-4905—

Search VulnCrest Radar

Jump to

Are you sure?