Database
WordPress Vulnerability Database (page 1254)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
WP Advanced Ticket System, Elite Support Helpdesk
<1.0.64Update to 1.0.64
- Medium6.1Reflected Cross-Site Scripting
Calendar_plugin
≤1.0No patch available
- Medium6.1Reflected Cross-Site Scripting
Plugmatter Pricing Table Lite
≤1.0.32No patch available
- Medium6.1Reflected Cross-Site Scripting
Moova
≤3.5Update to 3.6
- Medium6.1Reflected Cross-Site Scripting
Custom Post Type Relations
≤1.0No patch available
- Medium6.1Reflected Cross-Site Scripting
Simple Behance Portfolio
≤0.2No patch available
- Medium6.1Reflected Cross-Site Scripting
Media Usage
≤0.0.4No patch available
- Medium6.1Reflected Cross-Site Scripting
jQuery Tagline Rotator
≤0.1.5No patch available
- Medium6.1Reflected Cross-Site Scripting
WP Fountain
≤1.5.9No patch available
- Medium6.1Reflected Cross-Site Scripting
Scout bazar
≤1.3.3Update to 1.3.4
- Medium6.1Reflected Cross-Site Scripting
Simple Popup Newsletter
≤1.4.7No patch available
- Medium6.1Reflected Cross-Site Scripting
WP SEO Tags
≤2.2.7No patch available
- Medium6.1Reflected Cross-Site Scripting
2Way VideoCalls and Random Chat – HTML5 Webcam Videochat
≤5.2.7Update to 5.2.8
- Medium6.1Reflected Cross-Site Scripting
WP Songbook
≤2.0.11No patch available
- Medium6.1Reflected Cross-Site Scripting
Scribble Maps
≤1.2No patch available
- Medium6.1Smart Email Alerts <= 1.0.10 Reflected Cross-Site Scripting
Smart Email Alerts
≤1.0.10No patch available
- Medium6.1Reflected Cross-Site Scripting
Sidebar Adder 2
≤2.0.0No patch available
- Medium6.1Reflected Cross-Site Scripting
Multiplayer Games
≤3.7No patch available
- Medium6.1Reflected Cross-Site Scripting
typofr
≤0.11No patch available
- Medium6.1Reflected Cross-Site Scripting
Securimage-WP-Fixed
≤3.5.4No patch available
- Medium6.1Reflected Cross-Site Scripting
Software License Manager
<4.4.8Update to 4.4.8
- High8.8Per Page Add To Head <= 1.4.3 Cross-Site Request Forgery to Stored Cross-Site Scripting
Per page add to head
<1.4.4Update to 1.4.4
- Medium4.8Authenticated (Admin+) Stored Cross-Site Scripting
Per page add to head
≤1.4.4No patch available
- Medium5.4Authenticated (Contributor+) Stored Cross-Site Scripting
PDF.js Viewer
<2.0.2Update to 2.0.2
- Medium5.5Cross-Site Scripting
Book appointment online
≤1.38Update to 1.39
- Medium4.8Authenticated Stored Cross-Site Scripting
AddToAny Share Buttons
<1.7.48Update to 1.7.48
- Medium5.4Reflected Cross-Site Scripting
Custom Post View Generator
≤0.4.6No patch available
- Medium5.4Stored Cross-Site Scripting
Daily Prayer Time
<2021.08.10Update to 2021.08.10
- Medium4.8Authenticated (Admin+) Stored Cross-Site Scripting
Stop Spammers Classic
<2021.18Update to 2021.18
- Medium5.5Authenticated Stored Cross-Site Scripting
Form Builder | Create Responsive Contact Forms
≤1.9.8.3Update to 1.9.8.4
