VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1246)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,163 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1246)
SeverityVulnerabilityCVEInstallsPublished
High8.8Authenticated (Subscriber+) SQL Injection
Hermit 音乐播放器≤3.1.6No patch available
CVE-2022-29410—
Medium4.8Cross-Site Scripting
Countdown, Coming Soon, Maintenance – Countdown & Clock≤2.3.2Update to 2.3.3
CVE-2022-29422—
Medium6.1Reflected Cross-Site Scripting
Countdown, Coming Soon, Maintenance – Countdown & Clock≤2.3.2Update to 2.3.3
CVE-2022-29421—
Medium6.1Reflected Cross-Site Scripting
ravpage≤2.16Update to 2.18
CVE-2022-29415—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Countdown, Coming Soon, Maintenance – Countdown & Clock≤2.3.2Update to 2.3.3
CVE-2022-29420—
Medium6.1Cross-Site Request Forgery to Cross-Site Scripting
Footer Text≤2.0.3No patch available
CVE-2022-27860—
Medium6.6Directory Traversal to File Deletion on Windows Hosts
All-in-One WP Migration and Backup≤7.58Update to 7.59
CVE-2022-1476—
High8.8Local File Inclusion
3CX Free Live Chat, Calls & Messaging≤9.4.2Update to 9.4.3
——
Critical9.8Unauthenticated SQL Injection
RSVPMaker≤9.2.6Update to 9.2.7
CVE-2022-1505—
Medium5.5Stored Cross-Site Scripting
Codup WooCommerce Dynamic Pricing Table View≤1.2.1.4Update to 1.2.1.5
——
High8.8Cross-Site Request Forgery to Stored Cross-Site Scripting
Coru LFMember≤1.0.2No patch available
CVE-2022-1618—
Medium6.1Reflected Cross-Site Scripting
Better Click To Share – Shareable Quote Boxes for X (Twitter)≤5.10.1Update to 5.10.2
——
High8.8Cross-Site Request Forgery to Stored Cross-Site Scripting
WP-Invoice – Web Invoice and Billing≤4.3.1Update to 4.3.2
CVE-2022-1617—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Curtain≤1.0.2No patch available
CVE-2022-1558—
High8.8Cross-Site Request Forgery
Coru LFMember≤1.0.2No patch available
——
Medium5.4Authenticated (Contributor+) Cross-Site Scripting
Psychological tests & quizzes≤0.21.19No patch available
CVE-2022-27854—
Medium5.4Authenticated (Contributor+) Stored Cross-Site Scripting
Psychological tests & quizzes≤0.21.19No patch available
CVE-2021-36867—
High7.2Unauthenticated Stored Cross-Site Scripting
WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto≤5.1.4Update to 5.2.0
CVE-2021-36895—
Medium6.4Stored Cross-Site Scripting
Social Live Chat Helpdesk – MyAlice≤1.2.7Update to 1.2.8
——
Medium5.4Cross-Site Request Forgery and Authenticated Settings Change
Melhor Envio≤2.11.19Update to 2.11.20
——
Medium6.1Reflected Cross-Site Scripting
Gwyn's Imagemap Selector≤0.3.3No patch available
CVE-2022-1221—
Medium6.1Reflected Cross-Site Scripting
Donate Extra≤2.02No patch available
CVE-2022-1268—
Medium6.4Reflected Cross-Site Scripting
Vertical scroll recent post<14.0Update to 14.0
CVE-2022-1171—
Medium5.5Admin+ Stored Cross-Site Scripting
Slider by 10Web – Responsive Image Slider≤1.2.51Update to 1.2.52
CVE-2022-1320—
Medium6.1Reflected Cross-Site Scripting
Turn off all comments≤1.0No patch available
CVE-2022-1192—
Critical9.8Unauthenticated SQL Injection
RSVPMaker≤9.2.5Update to 9.2.6
CVE-2022-1453—
Medium4.3Subscriber+ Arbitrary Settings Update
ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization≤3.3.1Update to 3.4.0
CVE-2022-29417—
High8.8Authenticated SQL Injection
3xSocializer≤0.98.22No patch available
CVE-2022-29419—
Medium6.1Reflected Cross-Site Scripting
Call Now Button – The Free Click to Call Button for WordPress<1.1.2Update to 1.1.2
CVE-2022-1455—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
ScrollReveal.js Effects≤1.2No patch available
CVE-2022-1512—

Search VulnCrest Radar

Jump to

Are you sure?