VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1278)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,156 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1278)
SeverityVulnerabilityCVEInstallsPublished
High7.2Admin+ SQL injection
Affiliates Manager≤2.8.6Update to 2.8.7
CVE-2021-24844—
Medium4.8Authenticated (Admin+) Stored Cross-Site Scripting
Storefront Footer Text≤1.0.1No patch available
CVE-2021-24607—
Medium5.3Modern Blog WordPress Theme < 3.0.4 - Authorization Bypass
Squaretype - Modern Blog WordPress Theme<3.0.4Update to 3.0.4
CVE-2021-24840—
High8.8SQL Injection
School Management System – WPSchoolPress<2.1.10Update to 2.1.10
CVE-2021-24575—
Medium5.5Stored Cross-Site Scripting
Qwizcards | online quizzes and flashcards≤3.61Update to 3.62
CVE-2021-24706—
Critical9.8Authentication Bypass
Pie Register – User Registration, Profiles & Content Restriction≤3.7.1.4Update to 3.7.1.5
CVE-2025-34077—
Medium4.8Admin+ Stored Cross-Site Scripting
Print-O-Matic≤2.0.2Update to 2.0.3
CVE-2021-24710—
Medium6.1Reflected Cross-Site Scripting
WP Header Images<2.0.1Update to 2.0.1
CVE-2021-24798—
Medium6.1Reflected Cross-Site Scripting
iPages – FlipBook Image & PDF Viewer<1.4.3Update to 1.4.3
——
Medium6.1Reflected Cross-Site Scripting
iPanorama 360 – Advanced Virtual Tour Builder<1.6.22Update to 1.6.22
——
Medium4.8Authenticated (Admin+) Stored Cross-Site Scripting
Quiz Tool Lite≤2.3.15No patch available
CVE-2021-24701—
High8.8Frontend Manager for WooCommerce <= 6.5.11 - Customer/Subscriber+ SQL Injection
WCFM – Frontend Manager for WooCommerce≤6.5.11Update to 6.5.12
CVE-2021-24835—
Medium6.5Authenticated PHP Code Injection
Loco Translate<2.5.4Update to 2.5.4
CVE-2021-24721—
High8.8SQL Injection
MAZ Loader – Preloader Builder for WordPress<1.3.3Update to 1.3.3
CVE-2021-24669—
High7.1Reflected Cross-Site Scripting
School Management System – WPSchoolPress<2.1.10Update to 2.1.10
——
High8.8Cross-Site Request Forgery
WP SEO Redirect 301<2.3.2Update to 2.3.2
CVE-2021-24832—
Medium6.1Reflected Cross-Site Scripting
Vision – Interactive Image Map with Hotspots Builder≤1.5.1Update to 1.5.2
——
Medium6.1Reflected Cross-Site Scripting
WordPress Easy Custom Js And Css Plugin≤1.1.2No patch available
——
High8.1Authentication Bypass
Pie Register – User Registration, Profiles & Content Restriction<3.7.1.6Update to 3.7.1.6
CVE-2021-24647—
High8.8Cross-Site Request Forgery
Coupon Affiliates – Affiliate Plugin for WooCommerce<4.11.3.4Update to 4.11.3.4
——
High7.2Authenticated SQL Injections
Header Footer Code Manager<1.1.14Update to 1.1.14
CVE-2021-24791—
Medium6.1Reflected Cross-Site Scripting
ImageLinks – Interactive Image Builder with Hotspots≤1.5.2Update to 1.5.3
——
Critical9.8Unauthenticated SQL Injection
Asgaros Forum≤1.15.12Update to 1.15.13
CVE-2021-24827—
Medium5.5Authenticated (Admin+) Cross-Site Scripting
Inline Related Posts≤3.0.4Update to 3.0.5
——
Medium5.5Authenticated (Editor+) Stored Cross-Site Scripting
Comment Engine Pro≤1.0No patch available
CVE-2021-36911—
High7.2Authenticated (Admin+) SQL Injection
Wow Forms – create any form with custom style≤3.1.3No patch available
CVE-2021-24628—
Medium6.4Agent+ Stored Cross-Site Scripting
Support Board≤3.3.4Update to 3.3.5
CVE-2021-24807—
High8.8Cross-Site Request Forgery
Chameleon CSS≤1.2No patch available
CVE-2021-24626—
High7.2Authenticated (Admin+) SQL Injection
Post Content XMLRPC≤1.0No patch available
CVE-2021-24629—
High8.8Authenticated (Author+) SQL Injection
Schreikasten≤0.14.18No patch available
CVE-2021-24630—

Search VulnCrest Radar

Jump to

Are you sure?