Database
WordPress Vulnerability Database (page 1262)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- High7.2Admin+ SQL Injection
Database Backup for WordPress
<2.5.1Update to 2.5.1
- Medium6.1Reflected Cross-Site Scripting
Ad Inserter – Ad Manager & AdSense Ads
<2.7.10Update to 2.7.10
- Medium4.3Missing Authorization to Arbitrary Email Send
Coming soon and Maintenance mode
≤3.6.6Update to 3.6.7
- Medium4.3Arbitrary Menu Deletion via Cross-Site Request Forgery
Float menu – awesome floating side menu
≤4.3Update to 4.3.1
- Medium6.1Reflected Cross-Site Scripting
Anti-Malware Security and Brute-Force Firewall
<4.20.94Update to 4.20.94
- Medium6.1Reflected Cross-Site Scripting
Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance
<3.0.4Update to 3.0.4
- High8.8Cross-Site Request Forgery
Classic Editor +
≤2.6.3Update to 2.6.4
- High8.8SQL Injection
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
≤5.0.1.5Update to 5.0.1.6
- High8.8Cross-Site request Forgery to Arbitrary Email Send
Coming soon and Maintenance mode
<3.6.8Update to 3.6.8
- Critical9.8Local File Inclusion
Essential Addons for Elementor – Popular Elementor Templates & Widgets
1.0.0 – 5.0.4Update to 5.0.5
- Medium6.1Drag & Drop Form Builder WordPress <= 6.0.3 - Reflected Cross-Site Scripting
Super Forms – Drag & Drop Form Builder
≤6.0.3Update to 6.0.4
- High8.8Authenticated SQL Injection
Download Manager
<3.2.34Update to 3.2.34
- High8.8Authenticated SQL Injection
Support Board
<3.4.2Update to 3.4.2
- High8.8Cross-Site Request Forgery
AnyComment
<0.2.18Update to 0.2.18
- High8.3Missing Authorization on Rest Route
Email Template Designer – WP HTML Mail
≤3.0.9Update to 3.1
- Medium5.3Race Condition
AnyComment
<0.2.18Update to 0.2.18
- Medium6.1Reflected Cross-Site Scripting via AJAX action
FOX – Currency Switcher Professional for WooCommerce
≤1.3.7.4Update to 1.3.7.5
- Medium5.5Admin+ Stored Cross-Site Scripting
Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning
≤13.0.5Update to 13.0.6
- Medium5.4Cross-Site Scripting
The Buffer Button
≤1.0No patch available
- Medium6.1Reflected Cross-Site Scripting
GiveWP – Donation Plugin and Fundraising Platform
<2.17.3Update to 2.17.3
- Medium5.4Subscriber+ Page Creation & Settings Update to Stored Cross-Site Scripting
Five Star Business Profile and Schema
≤2.1.6Update to 2.1.7
- High8.8Cross-Site Request Forgery
Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots
≤1.9.9.148Update to 1.9.9.149
- High7.5Backdoor
AccessPress Social Icons
1.8.2 – 1.8.2Update to 1.8.3
- Medium5.4Contributor+ Stored Cross-Site Scripting
Image Photo Gallery Final Tiles Grid
≤3.5.2Update to 3.5.3
- Medium4.8Admin+ Stored Cross-Site Scripting
User Registration, Login & Landing Pages – LeadMagic
≤1.2.7No patch available
- Medium4.8Reflected Cross-Site Scripting via Import Tool
GiveWP – Donation Plugin and Fundraising Platform
<2.17.3Update to 2.17.3
- Medium5.4Stored Cross-Site Scripting
Translation Exchange – Translate Your WordPress Site In Minutes!
≤1.0.14No patch available
- Medium6.4Stored Cross-Site Scripting via Profile
ProfileGrid – User Profiles, Groups and Communities
≤4.7.4Update to 4.7.7
- High8.8Cross-Site Request Forgery
Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots
≤1.9.9.148Update to 1.9.9.149
- Medium6.1Reflected Cross-Site Scripting
GiveWP – Donation Plugin and Fundraising Platform
<2.17.3Update to 2.17.3