VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1288)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,156 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1288)
SeverityVulnerabilityCVEInstallsPublished
Critical9.8Unauthenticated SQL Injection
Podlove Podcast Publisher<3.5.6Update to 3.5.6
CVE-2021-24666—
High7.2SQL Injection
SMTP Mail≤1.2.1Update to 1.2.2
——
High7.2Authenticated (Admin+) Local File Inclusion
Live Scores for SportsPress≤1.9.0Update to 1.9.1
——
Medium6.1Reflected Cross-Site Scripting
Database for Contact Form 7, WPforms, Elementor forms≤1.2.0Update to 1.2.1
——
Medium6.1Reflected Cross-Site Scripting
Live Scores for SportsPress≤1.9.0Update to 1.9.1
——
Medium5.4Authenticated Stored Cross-Site Scripting
Recipe Card Blocks Lite<2.8.3Update to 2.8.3
CVE-2021-24634—
Medium4.3Unauthorised Event TimeSlot Deletion
Timetable and Event Schedule by MotoPress≤2.4.1Update to 2.4.2
CVE-2021-24583—
Medium5.4Authenticated Stored Cross-Site Scripting
SimpLy Gallery<2.2.1Update to 2.2.1
CVE-2021-24667—
High7.2Authenticated (Admin+) Arbitrary File Upload
Simple Schools Staff Directory≤1.1No patch available
CVE-2021-24663—
Medium6.5Arbitrary User's Hashed Password/Email/Username Disclosure
Timetable and Event Schedule by MotoPress≤2.3.19Update to 2.4.0
CVE-2021-24585—
Medium6.1Stored Cross-Site Scripting
Limit Login Attempts<4.0.50Update to 4.0.50
CVE-2021-24657—
Medium5.4Authenticated (Contributor+) Stored Cross-Site Scripting
Shortcodes Ultimate – Content Elements<5.10.2Update to 5.10.2
CVE-2021-24525—
Medium6.4Unauthorised Event TimeSlot Update
Timetable and Event Schedule by MotoPress≤2.4.1Update to 2.4.2
CVE-2021-24584—
Critical9.1Unauthenticated Path Traversal in REST API
OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy.≤4.5.3Update to 4.5.4
CVE-2021-24638—
Medium4.3Arbitrary Comment Deletion via Cross-Site Request Forgery
Comment Link Remove and Other Comment Tools≤2.1.4Update to 2.1.6
CVE-2021-24725—
Medium5.4Authenticated (Contributor+) Stored Cross-Site Scripting via blockType arguments
Fonts Plugin | Google Fonts, Adobe Fonts & Upload Fonts<3.0.3Update to 3.0.3
CVE-2021-24637—
Medium5.4Author+ Stored Cross-Site Scripting
Timetable and Event Schedule by MotoPress≤2.3.18Update to 2.3.19
CVE-2021-24724—
Medium5.4Contributor+ Stored Cross-Site Scripting
WP Video Lightbox≤1.9.2Update to 1.9.3
CVE-2021-24665—
Medium4.8Authenticated Stored Cross-Site Scripting
Post Views Counter≤1.3.4Update to 1.3.5
CVE-2021-24613—
High8.1Subscriber+ Arbitrary File/Folder Deletion
OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy.≤4.5.3Update to 4.5.4
CVE-2021-24639—
High7.2Authenticated (Admin+) SQL Injection
RESPONSIVE 3D SLIDER≤1.2No patch available
CVE-2021-24398—
High7.2Authenticated (Admin+) SQL Injection
WP Domain Redirect≤1.0No patch available
CVE-2021-24401—
High7.2Authenticated (Admin+) SQL Injection
GSEOR – WordPress SEO Plugin≤1.3No patch available
CVE-2021-24396—
High8.8Authenticated (Admin+) SQL Injection
WordPress Page Contact≤1.0No patch available
CVE-2021-24403—
High7.2Authenticated (Admin+) SQL Injection
The Sorter≤1.0No patch available
CVE-2021-24399—
High7.2Authenticated (Admin+) SQL Injection
Display Users≤2.0.0No patch available
CVE-2021-24400—
High7.2Authenticated SQL Injection via product_id Parameter
Product Feed on WooCommerce for Google, Awin, Shareasale, Bing, and More<3.3.1.0Update to 3.3.1.0
CVE-2021-24511—
High7.2Authenticated (Admin+) SQL Injection
MicroCopy≤1.1.0No patch available
CVE-2021-24397—
High8.8Authenticated (Admin+) SQL Injection
WP-Board≤1.1(Beta)No patch available
CVE-2021-24404—
High7.2Authenticated (Admin+) SQL Injection
WP iCommerce – the first interactive ecommerce for wordpress≤1.1.1No patch available
CVE-2021-24402—

Search VulnCrest Radar

Jump to

Are you sure?