VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1245)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,163 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1245)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Reflected Cross-Site Scripting
WP 2FA – Two-factor authentication for WordPress≤2.2.0Update to 2.2.1
CVE-2022-1527—
High8.8Cross-Site Request Forgery to Remote Code Execution
Code Snippets Extended≤1.4.7No patch available
CVE-2022-29429—
Medium5.5Authenticated (Admin+) Cross-Site Scripting
WP Slider Plugin≤1.4.5No patch available
CVE-2022-29428—
Medium4.3Cross-Site Request Forgery
Disable Right Click For WP≤1.1.6No patch available
CVE-2022-29427—
Medium5.4Authenticated (Contributor+) Stored Cross-Site Scripting
Andrea Pernici News Sitemap for Google≤1.0.16No patch available
CVE-2021-36912—
Medium5.4Reflected Cross-Site Scripting
Slideshow, Image Slider by 2J≤1.3.54No patch available
CVE-2022-29426—
Medium6.1Cross-Site Scripting
Checkout Files Upload for WooCommerce≤2.1.2Update to 2.1.3
CVE-2022-29425—
Medium6.1Reflected Cross-Site Scripting
Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier )≤9.7.1Update to 9.7.2
CVE-2022-29424—
Medium5.5Admin+ Stored Cross-Site Scripting
Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls≤4.0.1Update to 4.0.2
CVE-2022-1456—
Medium6.1Reflected Cross-Site Scripting
WP JS≤2.0.6No patch available
CVE-2022-1567—
High8.8Authenticated (Subscriber+) Arbitrary Options Update
Content Mask≤1.8.4Update to 1.8.4.1
CVE-2022-1203—
Medium5.4Cross-Site Scripting via SVG
Enable SVG≤1.3.1Update to 1.4.0
CVE-2022-1562—
High7.2Cross-Site Scripting
OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO )≤3.0.1Update to 3.0.2
——
Medium6.1Reflected Cross-Site Scripting
VikBooking Hotel Booking Engine & PMS<1.5.9Update to 1.5.9
CVE-2022-1528—
Medium4.4Cross-Site Scripting
Smush – Image Optimization, Compression, Lazy Load, WebP & CDN≤3.9.8Update to 3.9.9
CVE-2022-1009—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
WP Subscribe≤1.2.12Update to 1.2.13
CVE-2021-36844—
Medium6.5Unprotected AJAX Actions
Breeze Cache≤2.0.2Update to 2.0.3
CVE-2022-29444—
Medium5.5Editor+ Stored Cross-Site Scripting
Tabs Responsive – With WooCommerce Product Tabs Extension≤2.2.7Update to 2.2.8
CVE-2022-1298—
Medium5.5Admin+ Stored Cross-Site Scripting via breadcrumbs
WP Meta SEO≤4.4.6Update to 4.4.7
CVE-2022-1093—
Critical9.8Unauthenticated SQL Injection
WP Contacts Manager≤2.2.4No patch available
CVE-2022-1014—
High7.2Authenticated SQL Injection
StaffList≤3.1.2Update to 3.1.5
CVE-2022-1556—
Medium6.1Reflected Cross-Site Scripting
XML Sitemap Generator for Google≤2.0.3Update to 2.0.4
CVE-2022-0346—
Medium6.1Reflected Cross-Site Scripting
Check & Log Email – Easy Email Testing & Mail logging≤1.0.5Update to 1.0.6
CVE-2022-1547—
Critical9.8SQL Injection
Nirweb support≤2.7.9Update to 2.8.2
CVE-2022-0781—
High8.8Cross-Site Request Forgery
Subscribe To Comments Reloaded≤211130Update to 220502
CVE-2022-29414—
Medium4.3Arbitrary Redirect
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin≤2.3.1Update to 2.3.2
CVE-2022-1209—
Medium5.4Multiple Cross-Site Request Forgery
Hermit 音乐播放器≤3.1.6No patch available
CVE-2022-29412—
Low3.8Pro Features Lock Bypass
Countdown, Coming Soon, Maintenance – Countdown & Clock≤2.3.2Update to 2.3.3
CVE-2022-29423—
High8.8 Cross-Site Request Forgery to Stored Cross-Site Scripting
Hermit 音乐播放器≤3.1.6No patch available
CVE-2022-29413—
Critical9.8Unauthenticated SQL Injection
Hermit 音乐播放器≤3.1.6No patch available
CVE-2022-29411—

Search VulnCrest Radar

Jump to

Are you sure?