VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1261)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,163 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1261)
SeverityVulnerabilityCVEInstallsPublished
High7.2SQL Injection
WP Review Slider<11.0Update to 11.0
CVE-2022-0383—
High8.8SQL Injection
WP Email Users≤1.7.6No patch available
CVE-2021-24959—
Medium4.3Server Information Disclosure
Perfect Brands for WooCommerce≤2.0.4Update to 2.0.5
CVE-2022-23982—
Medium4.3Unauthorized Brand Creation
Perfect Brands for WooCommerce≤2.0.4Update to 2.0.5
CVE-2022-23981—
Medium5.5Authenticated (Contributor+) Stored Cross-Site Scripting
Price Table≤0.2.2No patch available
CVE-2022-25604—
Medium6.1Reflected Cross-Site Scripting
WHMCS Bridge≤6.3Update to 6.4b
CVE-2021-25112—
High7.3Unauthenticated SQL Injection
[GWA] AutoResponder≤2.3No patch available
CVE-2021-44779—
High8.8Cross-Site Request Forgery to Stored Cross-Site Scripting
[GWA] AutoResponder≤2.7.4Update to 4.0
——
Medium6.5Arbitrary Post Deletion and Plugin Settings Update via Cross-Site Request Forgery
Maps Plugin using Google Maps for WordPress – WP Google Map≤1.8.3Update to 1.8.4
CVE-2021-25081—
Medium4.8Admin+ Stored Cross-Site Scripting
StatCounter – Real Time Visitor Stats, Session Replay & Heatmaps<2.0.7Update to 2.0.7
CVE-2021-24920—
Medium6.1Reflected Cross-Site Scripting
Embed Swagger≤1.0.0No patch available
CVE-2022-0381—
Medium6.1Reflected Cross-Site Scripting
WordPress GDPR≤1.9.26Update to 1.9.27
CVE-2021-24814—
Medium4.3Arbitrary Image Renaming
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses≤4.1.4.1Update to 4.1.5
CVE-2022-0377—
Medium6.5WordPress GDPR & CCPA <= 1.9.26 Reflected Cross-Site Scripting
WordPress GDPR<1.9.27Update to 1.9.27
CVE-2022-0220—
Medium5.4Missing Authorization to Settings Update & Stored Cross-Site Scripting
WP Responsive Menu≤3.1.7Update to 3.1.7.1
CVE-2021-24971—
Medium4.8Admin+ Stored Cross-Site Scripting
WP Ultimate CSV Importer – WordPress CSV, XML & Excel Import Export<6.4.3Update to 6.4.3
CVE-2022-0360—
Medium6.1Reflected Cross-Site Scripting
WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content≤4.19.3Update to 4.20
CVE-2022-0189—
High7.4Authenticated (Contributor+) Stored Cross-Site Scripting
Add Subtitle≤1.1.0No patch available
CVE-2021-24897—
High8.8Cross-Site Request Forgery to Arbitrary Member Deletion
Simple Membership<4.0.9Update to 4.0.9
CVE-2022-0328—
Medium6.1Reflected Cross-Site Scripting
Testimonial WordPress Plugin – AP Custom Testimonial<1.4.7Update to 1.4.7
CVE-2022-23912—
High8.8Authenticated Arbitrary File Upload
AdSanity<1.8.2Update to 1.8.2
CVE-2022-4949—
High7.2SQL Injection
Testimonial WordPress Plugin – AP Custom Testimonial≤1.4.7Update to 1.4.8
CVE-2022-23911—
High8.1Cross-Site Request Forgery to Data Reset
Access Demo Importer≤1.0.7Update to 1.0.8
CVE-2022-23976—
High8.8Cross-Site Request Forgery
Lean WP≤1.4.0No patch available
——
Medium6.1Reflected Cross-Site Scripting
Ad Inserter – Ad Manager & AdSense Ads<2.7.10Update to 2.7.10
CVE-2022-0288—
High7.2Admin+ SQL Injection
Database Backup for WordPress<2.5.1Update to 2.5.1
CVE-2022-0255—
Medium6.4Missing Authorization to Stored Cross-Site Scripting
Duplicate Page or Post≤1.5.0Update to 1.5.1
CVE-2021-25075—
High8.8Cross-Site Request Forgery
WP Debugging≤2.11.7Update to 2.11.8
——
High8.8Local File Inclusion and PHAR Deserialization
Popup Builder – Create highly converting, mobile friendly marketing popups.<4.0.7Update to 4.0.7
CVE-2021-25082—
High7.2Authenticated SQL Injection via order & orderby Parameters
Popup Builder – Create highly converting, mobile friendly marketing popups.<4.0.7Update to 4.0.7
CVE-2022-0228—

Search VulnCrest Radar

Jump to

Are you sure?