VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1270)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,156 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1270)
SeverityVulnerabilityCVEInstallsPublished
Medium5.3Unauthenticated Arbitrary Settings Change
WP Mail Logging<1.10.0Update to 1.10.0
——
High8.8SQL Injection
MOLIE – Instructure Canvas Linking tool≤0.5No patch available
CVE-2021-25007—
High8.8SQL Injection
Rich Reviews by Starfish<1.9.6Update to 1.9.6
CVE-2021-24753—
Medium4.8Smart Floating Action Button <= 2.5.4 - Admin+ Stored Cross-Site Scripting
Buttonizer – Floating Menus, Sticky Buttons, & Popup Builder≤2.5.4Update to 2.5.5
CVE-2021-24992—
Medium4.8Authenticated Stored Cross-Site Scripting
Asgaros Forum≤1.15.13Update to 1.15.14
CVE-2021-42365—
High8.8Stetic <= 1.0.6 Cross-Site Request Forgery to Stored Cross-Site Scripting
Stetic≤1.0.6Update to 1.0.7
CVE-2021-42364—
Medium5.4Subscriber+ Stored Cross-Site Scripting
WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content<4.19.3Update to 4.19.3
CVE-2021-24988—
Medium6.1Reflected Cross-Site Scripting
MOLIE – Instructure Canvas Linking tool≤0.5No patch available
CVE-2021-25006—
Medium6.4Cross-Site Scripting
Download Manager<3.2.22Update to 3.2.22
CVE-2021-24969—
Medium5.5Authenticated (Admin+) Cross-Site Scripting
Typebot<1.4.3Update to 1.4.3
CVE-2021-24902—
Medium6.1Reflected Cross-Site Scripting
NextScripts: Social Networks Auto-Poster≤4.3.20Update to 4.3.21
CVE-2021-38356—
Medium6.1Reflected Cross-Site Scripting
Awesome Support – WordPress HelpDesk & Support Plugin≤6.0.6Update to 6.0.7
CVE-2021-36919—
High8.1Dependency Confusion
WordPress≤5.7.5Update to 5.8
CVE-2021-44223—
High8.8Cross-Site Request Forgery
Browser and Operating System Finder<1.2Update to 1.2
CVE-2021-20851—
High7.5Authorization Bypass
Hide My WP - Amazing Security Plugin for WordPress!≤6.2.3Update to 6.2.4
CVE-2021-36917—
High8.6SQL Injection
Hide My WP - Amazing Security Plugin for WordPress!≤6.2.3Update to 6.2.4
CVE-2021-36916—
High7.2Unauthenticated Stored Cross-Site Scripting
Tickera – Sell Tickets & Manage Events≤3.4.8.2Update to 3.4.8.3
CVE-2021-24797—
Medium6.1Reflected Cross-Site Scripting
WPFront User Role Editor≤3.2.0Update to 3.2.1
CVE-2021-24984—
Medium5.5Authenticated Stored Cross-Site Scripting
HTML5 Responsive FAQ≤2.8.5No patch available
CVE-2021-24995—
Medium6.1Reflected Cross-Site Scripting
IDPay for Contact Form 7≤2.1.2Update to 2.3.2
CVE-2021-24996—
Medium6.1Reflected Cross-Site Scripting
Gwolle Guestbook≤4.1.2Update to 4.2
CVE-2021-24980—
Medium4.8Authenticated (Admin+) Stored Cross-Site Scripting
Cybersoldier<1.7.0Update to 1.7.0
CVE-2021-24895—
Medium6.1Reflected Cross-Site Scripting
Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions<2.6.6Update to 2.6.6
CVE-2021-24979—
Medium6.1Reflected Cross-Site Scripting
WPFront User Role Editor<3.2.1.11184Update to 3.2.1.11184
——
Medium6.1Reflected Cross-Site Scripting
Blog2Social: Social Media Auto Post & Scheduler≤6.8.6Update to 6.8.7
CVE-2021-24956—
High8.8Cross-Site Request Forgery
Kudos Donations – Donation Forms for Mollie & Stripe<3.1.2Update to 3.1.2
——
Medium6.5Stored Cross-Site Scripting
Logo Carousel<1.7.2Update to 1.7.2
CVE-2015-9434—
High7.2SQL Injection
ExportFeed: List WooCommerce Products on eBay Store≤2.0.1.0No patch available
CVE-2021-4208—
Medium5.4Contributor+ Stored Cross-Site Scripting
Logo Carousel – Responsive Logo Slider, Logo Showcase, and Clients Logo Gallery≤3.4.1Update to 3.4.2
CVE-2021-24738—
Medium4.3Unauthorised Private Post Access
Logo Carousel – Responsive Logo Slider, Logo Showcase, and Clients Logo Gallery≤3.4.1Update to 3.4.2
CVE-2021-24739—

Search VulnCrest Radar

Jump to

Are you sure?