VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1289)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,156 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1289)
SeverityVulnerabilityCVEInstallsPublished
High8.8Cross-Site Request Forgery to Settings Update
博客社交分享组件≤1.4.5No patch available
——
Medium5.4Authenticated (Subscriber+) Stored Cross-Site Scripting
博客社交分享组件≤1.4.4Update to 1.4.5
CVE-2021-24618—
Medium6.1Reflected Cross-Site Scripting
Jock On Air Now (JOAN)≤5.6.1Update to 5.6.2
——
High7.2Unauthenticated Stored Cross-Site Scripting
Jock On Air Now (JOAN)≤5.6.2Update to 5.6.3
——
High8.8Information Disclosure via REST API
BuddyPress≤9.0.0Update to 9.1.1
——
Medium6.5Cross-Site Request Forgery to Settings Update
Jock On Air Now (JOAN)≤5.6.1Update to 5.6.2
——
High8.8Cross-Site Request Forgery to Stored Cross-Site Scripting
WP EasyCart: Shopping Cart and eCommerce Store≤5.1.0Update to 5.1.5
CVE-2021-34645—
High8.1Cross-Site Request Forgery
Print My Blog – Print, PDF, & eBook Converter WordPress Plugin≤3.4.1Update to 3.4.2
CVE-2021-24636—
Medium6.4Stored Cross-Site Scripting
ThinkTwit<1.7.1Update to 1.7.1
CVE-2021-24582—
Critical9.8SQL Injection
BuddyPress≤9.0.0Update to 9.1.1
——
Medium5.4Unauthorised AJAX Calls
Visual Link Preview<2.2.3Update to 2.2.3
CVE-2021-24635—
Medium5.4Cross-Site Scripting
Gutenslider – Image & Video Slider Block<5.2.0Update to 5.2.0
CVE-2021-24640—
Medium6.1Reflected Cross-Site Scripting
MF Gig Calendar≤1.1Update to 1.2
CVE-2021-24510—
Medium4.8Authenticated Stored Cross-Site Scripting
Icegram Engage – Popups, Welcome Bars, Optins, Slide-Ins & Lead Generation for WordPress≤2.0.2Update to 2.0.3
CVE-2021-36832—
Critical9.8Unauthenticated Arbitrary File Upload
Shopp≤1.4No patch available
CVE-2021-24493—
Medium6.5Gutenberg Blocks for Post Grid <= 2.4.9 - Unauthorized Access Controls
Post Grid Gutenberg Blocks – PostX<2.4.10Update to 2.4.10
CVE-2021-24652—
High8.8Cross-Site Request Forgery
Fileviewer≤2.2No patch available
CVE-2021-24491—
Medium6.1Reflected Cross-Site Scripting
SP Project & Document Manager≤4.25Update to 4.26
CVE-2021-38315—
Medium6.45.0.3 - Stored Cross-Site Scripting
SEOPress – AI SEO Plugin & On-site SEO≤5.0.3Update to 5.0.4
CVE-2021-34641—
Medium4.3Cross-Site Request Forgery Bypass
Event Espresso – Event Registration & Ticketing Sales≤4.10.11Update to 4.10.12
CVE-2021-4404—
Critical9.8Multifactor Bypass
WP Cerber Security, Anti-spam & Malware Scan<8.9.3Update to 8.9.3
CVE-2021-37597—
Medium4.3Cross-Site Request Forgery Bypass
Etsy Integration For WooCommerce≤3.3.1Update to 3.3.2
CVE-2021-4409—
Medium6.1Reflected Cross-Site Scripting
Afterpay Gateway for WooCommerce≤3.2.0Update to 3.2.1
——
Medium4.8Authenticated Stored Cross-Site Scripting
WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses<2.0.44Update to 2.0.44
CVE-2021-24621—
Medium6.1Unauthenticated Stored Cross-Site Scripting
Smash Balloon Social Post Feed – Simple Social Feeds for WordPress<2.19.2Update to 2.19.2
CVE-2021-24508—
Medium4.3Cross-Site Request Forgery Bypass
Rucy≤0.4.4No patch available
CVE-2021-4396—
Medium6.1Reflected Cross-Site Scripting
CBX Bookmark & Favorite≤1.6.8Update to 1.6.9
——
Medium6.1Cross-Site Request Forgery to Stored Cross-Site Scripting
Email Artillery (MASS EMAIL)≤4.1No patch available
——
High7.2Authenticated SQL Injection
Email Artillery (MASS EMAIL)≤4.1No patch available
——
Medium4.3Missing Authorization
Opal Estate≤1.6.11No patch available
CVE-2021-4388—

Search VulnCrest Radar

Jump to

Are you sure?