VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1276)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,156 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1276)
SeverityVulnerabilityCVEInstallsPublished
Medium4.8Admin+ Stored Cross-Site Scripting
Access Governance for WordPress (aka AAM)<6.8.0Update to 6.8.0
CVE-2021-24830—
Medium5.5Stored Cross-Site Scripting via $custom_profile
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses≤4.1.3.1Update to 4.1.3.2
CVE-2021-39348—
High7.2Admin+ SQL Injection
Stream – Activity Log & Audit Trail≤3.8.1Update to 3.8.2
CVE-2021-24772—
Medium6.5Plugin's Setting Update via Cross-Site Request Forgery
MouseWheel Smooth Scroll≤5.6Update to 5.7
CVE-2021-24852—
Medium6.4Contributor+ Stored Cross-Site Scripting
Insert Pages≤3.6.1Update to 3.7.0
CVE-2021-24850—
Medium4.8Authenticated Stored Cross-Site Scripting
Sprout Invoices – Client Invoicing & Estimates<19.9.7Update to 19.9.7
CVE-2021-24787—
High7.2Admin+ SQL Injection
Email Log≤2.4.6Update to 2.4.7
CVE-2021-24758—
Medium5.5Leaky Paywall <= 4.16.5 Authenticated Stored Cross-Site Scripting
Leaky Paywall≤4.16.5Update to 4.16.6
CVE-2021-39357—
High8.8Cross-Site Request Forgery
Slider, Image Slider & Carousel by Slider Factory – Responsive Slideshow, Video Slider<1.3.2Update to 1.3.2
——
Medium6.1Reflected Cross-Site Scripting
TableOn – WordPress Posts Table Filterable <1.0.1Update to 1.0.1
——
High8.1Cross-Site Request Forgery
Support Board<3.3.6Update to 3.3.6
CVE-2021-24823—
Medium5.4Authenticated Stored Cross-Site Scripting
Microsoft Clarity≤0.3Update to 0.4
CVE-2021-33850—
Medium5.4Stored Cross-Site Scripting
QR Redirector<1.6.1Update to 1.6.1
CVE-2021-24854—
High8.8Cross-Site Request Forgery
Simple JWT Login – Allows you to use JWT on REST endpoints.<3.2.1Update to 3.2.1
CVE-2021-24804—
Medium6.1Responsive Multi-Purpose Theme < 4.8.4 - Reflected Cross-Site Scripting
enfold<4.8.4Update to 4.8.4
CVE-2021-24719—
Medium4.3Settings Change via Cross-Site Request Forgery
WP Performance Score Booster – Optimize Speed, Enable Cache & Page Preload≤2.0Update to 2.1
CVE-2021-24776—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Content Staging≤2.0.1No patch available
CVE-2021-39356—
Medium4.3Cross-Site Request Forgery
QR Redirector<1.6Update to 1.6
CVE-2021-24853—
Medium4.8Cross-Site Scripting
Shared Files – File Upload & Download Manager<1.6.61Update to 1.6.61
CVE-2021-24856—
Medium6.1Reflected Cross-Site Scripting
IMPress for IDX Broker<3.0.6Update to 3.0.6
——
Medium6.1Unauthenticated Stored Cross-Site Scripting
My Tickets – Accessible Event Ticketing<1.8.31Update to 1.8.31
CVE-2021-24796—
High8.8Subscriber+ SQL Injection
SEO Redirection Plugin – 301 Redirect Manager≤8.1Update to 8.2
CVE-2021-24847—
Medium4.8Admin+ Stored Cross-Site Scripting
Accept Donations with PayPal & Stripe≤1.3.1Update to 1.3.2
CVE-2021-24815—
Medium5.5Admin+ Stored Cross-Site Scripting
Helpful<4.4.59Update to 4.4.59
CVE-2021-24841—
Medium6.1Reflected Cross-Site Scripting
Active Directory Integration / LDAP Integration<3.6.95Update to 3.6.95
——
Medium4.3Contributor+ Arbitrary Posts/Pages Access
Insert Pages≤3.6.1Update to 3.7.0
CVE-2021-24851—
High7.2Admin+ SQL Injection
Speed Booster Pack ⚡ PageSpeed Optimization Suite≤4.3.3Update to 4.3.3.1
CVE-2021-25023—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
MPL-Publisher — Ebook & Audiobook Creator≤1.30.2Update to 1.30.3
CVE-2021-39343—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Indeed Job Importer≤1.0.5No patch available
CVE-2021-39355—
Medium5.5Stored Cross-Site Scripting
JobBoardWP – Job Board Listings and Submissions≤1.0.7Update to 1.1.0
CVE-2021-39329—

Search VulnCrest Radar

Jump to

Are you sure?