VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1284)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,156 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1284)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Reflected Cross-Site Scripting
Avada | Website Builder For WordPress & WooCommerce≤7.4.1Update to 7.4.2
——
Medium6.4Stored Cross-Site Scripting
Avada | Website Builder For WordPress & WooCommerce≤7.4.1Update to 7.4.2
——
Medium6.4Authenticated Stored Cross-Site Scripting
Easy Accordion – AI-Powered FAQ & Accordion Blocks, Product FAQ≤2.0.21Update to 2.0.22
CVE-2021-24576—
Medium6.4Cross-Site Scripting
Appointment Hour Booking – Booking Calendar<1.3.17Update to 1.3.17
CVE-2021-24712—
Medium6.1<= 1.4 - Reflected Cross-Site Scripting
Yet Another bol.com Plugin≤1.4No patch available
CVE-2021-38330—
Medium6.1Reflected Cross-Site Scripting
Custom Website Data≤2.2No patch available
CVE-2021-38347—
Medium6.1Reflected Cross-Site Scripting
Post Title Counter≤1.1No patch available
CVE-2021-38326—
Medium6.1Reflected Cross-Site Scripting
SMS OVH≤0.1No patch available
CVE-2021-38357—
Medium6.1Reflected Cross-Site Scripting
RSVPmaker Excel≤1.1No patch available
CVE-2021-38337—
Medium6.1Reflected Cross-Site Scripting
WordPress InviteBox Plugin≤1.4.1No patch available
CVE-2021-38359—
Medium6.1Reflected Cross-Site Scripting
GNU-Mailman Integration≤1.0.6No patch available
CVE-2021-38354—
High8.3Local File Inclusion
wp-publications≤0.0Update to 1.1
CVE-2021-38360—
Medium6.1Reflected Cross-Site Scripting
Integration of Moneybird for WooCommerce≤2.1.2No patch available
CVE-2021-38349—
Medium6.1Reflected Cross-Site Scripting
Advanced Search≤1.1.2Update to 1.1.3
CVE-2021-38348—
Medium6.1Reflected Cross-Site Scripting
WordPress Simple Shop≤1.2No patch available
CVE-2021-38340—
High7.65.8 - Authenticated Stored Cross-Site Scripting
WordPress<5.8.1Update to 5.4.7 or 5.5.6 or 5.6.5 or 5.7.3 or 5.8.1
CVE-2021-39201—
High7.5Regular Expression Denial of Service (ReDoS)
Insert Special Characters≤1.0.4Update to 1.0.5
——
High7.6 Stored Cross-Site Scripting in Custom HTML Block
WordPress5.8 beta 1 – 5.8 beta 2Update to 5.8
CVE-2021-39202—
Medium6.1DJ EmailPublish <= 1.7.2 Reflected Cross-Site Scripting
DJ EmailPublish≤1.7.2No patch available
CVE-2021-38329—
Medium6.1Reflected Cross-Site Scripting
Woocommerce Payment Gateway per Category≤2.0.10No patch available
CVE-2021-38341—
Medium6.1Reflected Cross-Site Scripting
Notices≤6.1No patch available
CVE-2021-38328—
Medium6.1YouTube Video Inserter <= 1.2.1.0 Reflected Cross-Site Scripting
YouTube Video Inserter≤1.2.1.0No patch available
CVE-2021-38327—
Medium6.8Block Editor Authorization Bypass
WordPress5.8 beta 1 – 5.8 beta 1Update to 5.8
CVE-2021-39203—
Medium5.35.8 - Sensitive Information Disclosure
WordPress<5.8.1Update to 5.4.7 or 5.5.6 or 5.6.5 or 5.7.3 or 5.8.1
CVE-2021-39200—
Medium6.1LoDash Update
WordPress<5.8.1Update to 5.4.7 or 5.5.6 or 5.6.5 or 5.7.3 or 5.8.1
CVE-2020-8203—
Medium6.1On Page SEO + Whatsapp Chat Button <= 1.0.1 Reflected Cross-Site Scripting
On Page SEO + Social Live Chat≤1.0.1Update to 1.0.2
CVE-2021-38332—
Medium6.1Reflected Cross-Site Scripting
OSD Subscribe≤1.2.3No patch available
CVE-2021-38351—
Medium6.1Dropdown and scrollable Text <= 2.0 Reflected Cross-Site Scripting
Dropdown and scrollable Text≤2.0Update to 2.1
CVE-2021-38353—
Medium6.1Reflected Cross-Site Scripting
Simple Matted Thumbnails≤1.01No patch available
CVE-2021-38339—
Medium6.1Reflected Cross-Site Scripting
WP-T-Wap≤1.13.2No patch available
CVE-2021-38331—

Search VulnCrest Radar

Jump to

Are you sure?