VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1285)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,156 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1285)
SeverityVulnerabilityCVEInstallsPublished
High7.5Regular Expression Denial of Service (ReDoS)
Insert Special Characters≤1.0.4Update to 1.0.5
——
High7.6 Stored Cross-Site Scripting in Custom HTML Block
WordPress5.8 beta 1 – 5.8 beta 2Update to 5.8
CVE-2021-39202—
Medium6.1Reflected Cross-Site Scripting
WP Scrippets≤1.5.1No patch available
CVE-2021-38333—
Medium6.1Reflected Cross-Site Scripting
Border Loading Bar≤1.0.1No patch available
CVE-2021-38338—
Medium6.1Feedify – Web Push Notifications <= 2.1.8 Reflected Cross-Site Scripting
Feedify – Web Push Notifications≤2.1.8Update to 2.1.9
CVE-2021-38352—
Medium6.1Reflected Cross-Site Scripting
WP Design Maps & Places≤1.2No patch available
CVE-2021-38334—
Medium6.1Reflected Cross-Site Scripting
Bug Library≤2.0.3Update to 2.0.4
CVE-2021-38355—
Medium6.1MoolaMojo <= 0.7.4.1 Reflected Cross-Site Scripting
MoolaMojo≤0.7.4.1No patch available
CVE-2021-38358—
Medium6.8Block Editor Authorization Bypass
WordPress5.8 beta 1 – 5.8 beta 1Update to 5.8
CVE-2021-39203—
Medium6.1Reflected Cross-Site Scripting
3D Cover Carousel≤1.0No patch available
CVE-2021-38318—
Medium6.1Reflected Cross-Site Scripting
RentPress≤6.6.4No patch available
CVE-2021-38323—
Medium6.1Reflected Cross-Site Scripting
Custom Menu Plugin≤1.3.3No patch available
CVE-2021-38321—
Medium6.1Reflected Cross-Site Scripting
Twitter Friends Widget≤3.1No patch available
CVE-2021-38322—
Medium6.1Reflected Cross-Site Scripting
simpleSAMLphp Authentication≤0.7.0No patch available
CVE-2021-38320—
Medium5.5Authenticated Stored Cross-Site Scripting
WP Go Maps – Google Map, OpenStreetMap, Leaflet & Store Locator<8.1.13Update to 8.1.13
CVE-2021-36870—
High8.2Unauthenticated SQL Injection
SP Rental Manager≤1.5.3No patch available
CVE-2021-38324—
Medium6.1Reflected Cross-Site Scripting
More from Google≤0.0.2No patch available
CVE-2021-38319—
Medium6.1Reflected Cross-Site Scripting
WP Academic People List≤0.4.1No patch available
CVE-2021-38316—
Medium6.1Reflected Cross-Site Scripting
User Activation Email≤1.3.0No patch available
CVE-2021-38325—
Medium5.5Authenticated Stored Cross-Site Scripting
WP Google Maps Pro≤8.1.11Update to 8.1.12
CVE-2021-36871—
Medium6.1Konnichiwa! Membership <= 0.8.3 Reflected Cross-Site Scripting
Konnichiwa! Membership≤0.8.3No patch available
CVE-2021-38317—
Medium4.8Stored Cross-Site Scripting
Weather Effect≤1.3.5Update to 1.3.6
CVE-2021-24709—
Medium4.8Admin+ Stored Cross Site Scripting
WP Sitemap Page<1.7.0Update to 1.7.0
CVE-2021-24715—
Medium5.4Cross-Site Scripting
Chained Quiz<1.2.7.2Update to 1.2.7.2
CVE-2021-24690—
High8.8Missing Authorization
Share, Print and PDF Products for WooCommerce<2.8.0Update to 2.8.0
CVE-2021-4337—
High8.8Cross-Site Request Forgery
Weather Effect<1.3.4Update to 1.3.4
CVE-2021-24683—
High8.8Cross-Site Request Forgery
Directory Listings WordPress plugin – uListing≤2.0.8Update to 2.0.9
——
Medium6.1Reflected Cross-Site Scripting
ELEX WooCommerce Google Shopping (Google Product Feed)≤1.2.3Update to 1.2.4
——
Medium6.1Reflected Cross-Site Scripting
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP≤1.2.2.28Update to 1.2.2.29
——
Medium4.8Admin+ Stored Cross-Site Scripting
Modern Events Calendar Lite≤5.22.1Update to 5.22.2
CVE-2021-24687—

Search VulnCrest Radar

Jump to

Are you sure?