VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1290)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,156 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1290)
SeverityVulnerabilityCVEInstallsPublished
Medium4.3Cross-Site Request Forgery Bypass
WP-Backgrounds Lite≤2.3No patch available
CVE-2021-4419—
Medium5.3Access Bypass Control
WP Cerber Security, Anti-spam & Malware Scan<8.9.3Update to 8.9.3
CVE-2021-37598—
Medium4.3Cross-Site Request Forgery Bypass
Sell Media≤2.5.5Update to 2.5.6
CVE-2021-4420—
Medium6.1Reflected Cross-Site Scripting
Auto Amazon Links – Amazon Associates Affiliate Plugin≤4.6.19Update to 4.6.20
——
Medium6.1Cross-Site Request Forgery leading to Stored Cross-Site Scripting
Language Bar Flags≤1.0.8Update to 1.1.0
CVE-2021-24431—
Medium4.3Cross-Site Request Forgery Bypass
Opal Estate≤1.6.11No patch available
CVE-2021-4387—
Medium6.1Reflected Cross-Site Scripting
CBX Bookmark & Favorite≤1.6.8Update to 1.6.9
——
High7.2Arbitrary File Upload
Email Artillery (MASS EMAIL)≤4.1No patch available
CVE-2021-24490—
High7.3Missing Capabilities Check
Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News<2.3.5Update to 2.3.5
——
Medium6.1Cross-Site Request Forgery to Stored Cross-Site Scripting
Email Artillery (MASS EMAIL)≤4.1No patch available
——
Medium4.3Cross-Site Request Forgery Bypass
WP Security Question≤1.0.5No patch available
CVE-2021-4386—
Medium6.1Reflected Cross-Site Scripting
Email Artillery (MASS EMAIL)≤4.1No patch available
——
Medium6.1Unauthenticated Stored Cross-Site Scripting
Smash Balloon Social Post Feed – Simple Social Feeds for WordPress<2.19.2Update to 2.19.2
CVE-2021-24508—
Medium6.1Reflected Cross-Site Scripting
Calendar_plugin≤1.0No patch available
CVE-2021-34667—
Medium6.1Reflected Cross-Site Scripting
Moova≤3.5Update to 3.6
CVE-2021-34664—
Medium6.1Reflected Cross-Site Scripting
Simple Behance Portfolio≤0.2No patch available
CVE-2021-34649—
Medium6.1Reflected Cross-Site Scripting
Plugmatter Pricing Table Lite ≤1.0.32No patch available
CVE-2021-34659—
Medium6.1Reflected Cross-Site Scripting
Custom Post Type Relations≤1.0No patch available
CVE-2021-34654—
Medium6.1Reflected Cross-Site Scripting
jQuery Tagline Rotator≤0.1.5No patch available
CVE-2021-34663—
Medium6.1Reflected Cross-Site Scripting
Media Usage≤0.0.4No patch available
CVE-2021-34652—
Medium6.1Reflected Cross-Site Scripting
WP Fountain≤1.5.9No patch available
CVE-2021-34653—
Medium6.1Reflected Cross-Site Scripting
Scout bazar≤1.3.3Update to 1.3.4
CVE-2021-34643—
Medium6.1Smart Email Alerts <= 1.0.10 Reflected Cross-Site Scripting
Smart Email Alerts≤1.0.10No patch available
CVE-2021-34642—
Medium6.1Reflected Cross-Site Scripting
Sidebar Adder 2≤2.0.0No patch available
CVE-2021-34666—
Medium6.1Reflected Cross-Site Scripting
2Way VideoCalls and Random Chat – HTML5 Webcam Videochat≤5.2.7Update to 5.2.8
CVE-2021-34656—
Medium6.1Reflected Cross-Site Scripting
Scribble Maps≤1.2No patch available
CVE-2021-34651—
Medium6.1Reflected Cross-Site Scripting
WP SEO Tags≤2.2.7No patch available
CVE-2021-34665—
Medium6.1Reflected Cross-Site Scripting
WP Songbook≤2.0.11No patch available
CVE-2021-34655—
Medium6.1Reflected Cross-Site Scripting
Simple Popup Newsletter≤1.4.7No patch available
CVE-2021-34658—
Medium6.1Reflected Cross-Site Scripting
Multiplayer Games≤3.7No patch available
CVE-2021-34644—

Search VulnCrest Radar

Jump to

Are you sure?