Database
WordPress Vulnerability Database (page 1291)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium6.1Reflected Cross-Site Scripting
Multiplayer Games
≤3.7No patch available
- Medium6.1Reflected Cross-Site Scripting
Securimage-WP-Fixed
≤3.5.4No patch available
- Medium6.1Reflected Cross-Site Scripting
Software License Manager
<4.4.8Update to 4.4.8
- High8.8Per Page Add To Head <= 1.4.3 Cross-Site Request Forgery to Stored Cross-Site Scripting
Per page add to head
<1.4.4Update to 1.4.4
- Medium5.4Authenticated (Contributor+) Stored Cross-Site Scripting
PDF.js Viewer
<2.0.2Update to 2.0.2
- Medium4.8Authenticated (Admin+) Stored Cross-Site Scripting
Per page add to head
≤1.4.4No patch available
- Medium6.1Cross-Site Scripting
miniOrange 2FA – Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator)
≤5.4.39Update to 5.4.40
- Medium5.4Stored Cross-Site Scripting
Daily Prayer Time
<2021.08.10Update to 2021.08.10
- Medium5.5Cross-Site Scripting
Picture Gallery – Frontend Uploads & Image Editor
≤1.4.2Update to 1.4.3
- Medium5.4Reflected Cross-Site Scripting
Custom Post View Generator
≤0.4.6No patch available
- Medium6.1SQL Injection
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
≤7.1.13Update to 7.1.14
- Medium5.5Cross-Site Scripting
Book appointment online
≤1.38Update to 1.39
- Medium4.8Authenticated Stored Cross-Site Scripting
AddToAny Share Buttons
<1.7.48Update to 1.7.48
- Medium6.1Cross-Site Scripting
Two Factor Authentication (2FA , MFA, OTP SMS and Email)
≤1.0.7Update to 1.0.8
- Medium6.3Missing Authorization
MWB Point of Sale (POS) for WooCommerce- Generate Barcodes, Process your Bills, Synchronize, Your Online-Offline Orders
≤1.0.0Update to 1.0.1
- Medium6.1Cross-Site Scripting
Clean Login
1.12.6.3 – 1.12.6.3Update to 1.12.6.4
- Medium4.8Authenticated (Admin+) Stored Cross-Site Scripting
Stop Spammers Classic
<2021.18Update to 2021.18
- Medium6.1Reflected Cross-Site Scripting
WPvivid — Backup, Migration & Staging
≤0.9.55Update to 0.9.56
- High7.1Cross-Site Request Forgery
Download Manager
<3.2.13Update to 3.2.13
- Medium5.4Authenticated Stored Cross-Site Scripting
WPFront Notification Bar
≤2.0.0Update to 2.1.0
- Medium6.1Cross-Site Scripting
Tutor LMS – eLearning and online course solution
≤1.9.5Update to 1.9.6
- Medium5.4Authenticated Stored Cross-Site Scripting
AddToAny Share Buttons
<1.7.46Update to 1.7.46
- Medium6.1Cross-Site Scripting
Affiliate Program Suite — SliceWP Affiliates
≤1.0.45Update to 1.0.46
- Medium6.1Reflected Cross-Site Scripting
Titan Framework
all versionsNo patch available
- Medium6.1Cross-Site Scripting
SpeakOut! Email Petitions
≤2.13.1.1Update to 2.13.3
- Medium5.5Authenticated Stored Cross-Site Scripting
Form Builder | Create Responsive Contact Forms
≤1.9.8.3Update to 1.9.8.4
- Medium6.1Cross-Site Scripting
Keyword Meta
≤3.0Update to 3.1
- Medium6.1Cross-Site Scripting
Form Builder | Create Responsive Contact Forms
≤1.9.8.4Update to 1.9.8.5
- High7.2Unauthenticated Cross-Site Scripting
ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content
≤3.1.10Update to 3.1.11
- Medium5.5Admin+ Stored Cross-Site Scripting
Site Reviews
<5.13.1Update to 5.13.1