VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1255)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,163 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1255)
SeverityVulnerabilityCVEInstallsPublished
High7.5Unauthenticated Sensitive Data Disclosure
Booking Package<1.5.29Update to 1.5.29
CVE-2022-0709—
High8.8Cross-Site Request Forgery
Analytics Cat – Google Analytics Made Easy≤1.0.9Update to 1.1.0
CVE-2022-27855—
Medium6.5Cross-Site Request Forgery
FormBuilder≤1.08No patch available
CVE-2022-0830—
Critical9.8SQL Injection
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection<6.88Update to 6.90
CVE-2021-25070—
Medium5.5Admin+ SQL Injection
Easy Social Icons≤3.1.3Update to 3.1.4
CVE-2022-0887—
Medium6.1Reflected Cross-Site Scripting
Insights from Google PageSpeed<4.0.4Update to 4.0.4
CVE-2022-0431—
High7.2Contact Form 7 <= 1.3.6.2 - Unauthenticated Stored Cross-Site Scripting
Drag and Drop Multiple File Upload for Contact Form 7≤1.3.6.2Update to 1.3.6.3
CVE-2022-0595—
Critical9.8SQL Injection
Popup Builder – Create highly converting, mobile friendly marketing popups.<4.1.1Update to 4.1.1
CVE-2022-0479—
Medium6.1Reflected Cross-Site Scripting
Akismet Privacy Policies≤2.0.1No patch available
CVE-2021-25071—
Critical9.8Unauthenticated SQL Injection
SpeakOut! Email Petitions<2.14.15.1Update to 2.14.15.1
CVE-2022-0846—
High7.2Authenticated (Admin+) SQL Injection
Wow Countdowns – easily create any countdowns, counters and timers≤3.1.2No patch available
CVE-2021-25064—
High7.2Unauthenticated Stored Cross-Site Scripting
Plezi<1.0.3Update to 1.0.3
CVE-2022-0680—
Medium4.3Cross-Site Request Forgery leading to Plugin Backup Disclosure
Church Admin<3.4.135Update to 3.4.135
CVE-2022-0833—
Medium6.1Reflected Cross-Site Scripting
Redirection for Contact Form 7≤2.4.0Update to 2.5.0
CVE-2022-0250—
Medium6.1Reflected Cross-Site Scripting
Popup Like box – Page Plugin<3.6.1Update to 3.6.1
CVE-2022-0641—
High7.2Authenticated (Admin+) SQL Injection
Sync WooCommerce Product feed to Google Shopping≤1.2.4No patch available
CVE-2021-25068—
High8.8Missing Authorization to Sensitive Information Disclosure
Translate WordPress with GTranslate<2.9.9Update to 2.9.9
CVE-2022-0770—
Medium6.4Authenticated Cross-Site Scripting
Menu Image, Icons made easy<3.0.8Update to 3.0.8
CVE-2022-0450—
Medium4.8Admin+ Stored Cross-Site Scripting
Interactive Human Anatomy with Clickable Body Parts<2.4Update to 2.4
CVE-2022-0388—
Critical9.8SQL Injection
Title Experiments Free<9.0.1Update to 9.0.1
CVE-2022-0784—
Medium6.3Missing Authorization Checks
Lightbox & Modal Popup WordPress Plugin – FooBox<2.7.17Update to 2.7.17
CVE-2022-4974100K+
Medium6.1Reflected Cross-Site Scripting
Conference Scheduler≤2.4.3Update to 2.4.4
CVE-2022-0600—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
MC4WP: Mailchimp for WordPress≤4.8.6Update to 4.8.7
CVE-2021-36833—
Medium5.5Cross-Site Scripting
MC4WP: Mailchimp for WordPress<4.8.7Update to 4.8.7
——
High7.2Coupon Affiliates < 4.16.4.5 - Stored Cross-Site Scripting
Coupon Affiliates – Affiliate Plugin for WooCommerce<4.16.4.5Update to 4.16.4.5
CVE-2022-0818—
Critical9.8Unauthenticated SQL Injection
Limit Login Attempts (Spam Protection)≤4.9.1Update to 5.1
CVE-2022-0787—
High7.2Stored Cross Site Scripting via lastName
Booking for Appointments and Events Calendar – Amelia≤1.0.46Update to 1.0.47
CVE-2022-0834—
Medium6.1Reflected Cross-Site Scripting
Mapping multiple URLs redirect same page≤5.8No patch available
CVE-2022-0599—
Medium6.1Reflected Cross-Site Scripting
Pz-LinkCard≤2.4.5.1Update to 2.4.5.2
CVE-2021-25012—
Medium6.1Reflected Cross-Site Scripting
Bulk Creator≤1.0.1No patch available
CVE-2022-0647—

Search VulnCrest Radar

Jump to

Are you sure?