Database
WordPress Vulnerability Database (page 1280)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium6.1Reflected Cross-Site Scripting
Simple Download Monitor
<3.9.5Update to 3.9.5
- Medium5.3Missing Authorization to Settings Change
JobSearch WP Job Board
≤1.8.1Update to 1.8.2
- Medium4.3Missing Authorization on jobsearch_update_job_import_schedule_call() function
JobSearch WP Job Board
≤1.8.1Update to 1.8.2
- Medium4.3Log Reset
Simple Download Monitor
≤3.9.5Update to 3.9.6
- High8.8Missing Authorization to Arbitrary Options Update
JobSearch WP Job Board
≤1.8.1Update to 1.8.2
- Medium6.1Reflected Cross-Site Scripting
World Travel Information
≤1.0.0No patch available
- Medium4.3Plugin's Settings Update via Cross-Site Request Forgery
Far Future Expiry Header
≤1.4Update to 1.5
- Medium4.3Insecure Direct Object Reference
Image Source Control Lite – Show Image Credits and Captions
<2.3.1Update to 2.3.1
- High7.6Missing Authorization to Stored Cross-Site Scripting
Starter Templates: AI-Powered Website Templates for Elementor & Gutenberg
≤2.7.0Update to 2.7.1
- Medium6.5Settings Update
Logo Slider and Showcase
<1.3.37Update to 1.3.37
- Medium5.5Admin+ Stored Cross-Site Scripting
Events Made Easy
<2.2.24Update to 2.2.24
- Medium6.1Reflected Cross-Site Scripting
Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots
<1.9.9.41Update to 1.9.9.41
- Medium6.1Cross-Site Request Forgery to Stored Cross-Site Scripting
Accept Donations with PayPal & Stripe
≤1.3Update to 1.3.1
- Medium5.5Admin+ Stored Cross-Site Scripting
Coming Soon, Under Construction & Maintenance Mode By Dazzler
≤1.6.3Update to 1.6.7
- Medium6.1Reflected Cross-Site Scripting
Cardinity Payment Gateway for WooCommerce
≤3.0.6Update to 3.0.7
- High8.8Accept Donations with PayPal <= 1.3.0 Cross-Site Request Forgery to Post Deletion
Accept Donations with PayPal & Stripe
<1.3.1Update to 1.3.1
- Medium5.5Multiple Admin+ Cross Site Scripting
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar
≤2.4.1Update to 2.4.2
- Medium6.1Reflected Cross-Site Scripting
Themify Builder
≤5.3.1Update to 5.3.2
- High8.8Cross-Site Request Forgery
Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots
<1.9.9.41Update to 1.9.9.41
- Medium4.33.3.9 - Missing Authorization Controls to Financial Account Hijacking
Stripe for WooCommerce
3.0.0 – 3.3.9Update to 3.3.10
- Medium6.1Reflected Cross-Site Scripting
Ivory Search – WordPress Search Plugin
≤4.6.6Update to 4.7
- Critical9.1Arbitrary Plugin Installation/Activation
JS Job Manager
<1.1.9Update to 1.1.9
- Medium5.3Sensitive Information Disclosure
Credova Financial
≤1.4.8Update to 1.4.9
- Medium5.5Cross-Site Scripting
Download Manager
<3.2.16Update to 3.2.16
- Medium6.5Missing Authorization
Stylish Price List – Price Table Builder & QR Code Restaurant Menu
≤6.9.0Update to 6.9.1
- Medium5.4Authenticated Stored Cross Site Scripting
Modern Events Calendar Lite
≤5.22.2Update to 5.22.3
- Medium5.5Admin+ Stored Cross-Site Scripting
WPeMatico RSS Feed Fetcher
<2.6.12Update to 2.6.12
- Critical9.8Arbitrary Image Upload
Stylish Price List – Price Table Builder & QR Code Restaurant Menu
<6.9.0Update to 6.9.0
- Medium5.4Cross-Site Scripting
WP Reactions Lite
<1.3.6Update to 1.3.6
- Medium6.4Contributor+ Stored Cross-Site Scripting
Cool Tag Cloud
≤2.25Update to 2.26