Database
WordPress Vulnerability Database (page 1297)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- High8.8Cross-site request forgery
WPCS – WordPress Currency Switcher Professional
≤1.1.6Update to 1.1.7
- Medium6.1Reflected Cross-Site Scripting
Marmoset Viewer
<1.9.3Update to 1.9.3
- Medium6.1Reflected Cross-Site Scripting
CP Multi View Events Calendar
≤1.3.99Update to 1.4.01
- Medium6.1Cross-Site Request Forgery to Cross-Site Scripting
TNIT Filter Gallery Plugin
≤0.0.6Update to 0.0.7
- High8.8Cross-Site Request Forgery
WooCommerce Extra Cost
≤2.6No patch available
- High7.2Authenticated (Admin+) Remote Code Execution
Speed Booster Pack ⚡ PageSpeed Optimization Suite
<4.2.0Update to 4.2.0
- High8.8Cross-Site Request Forgery
WPHEKA Request For Quote for WooCommerce
<1.3Update to 1.3
- Medium6.1Reflected Cross-Site Scripting
Generate Images (AI) – Magic Post Thumbnail
≤3.3.6Update to 3.3.7
- High8.8Cross-Site Request Forgery
Category slider for WooCommerce
≤2.0.0Update to 2.1.0
- Medium4.3Cross-Site Request Forgery Bypass
Amministrazione Trasparente
≤7.1Update to 7.1.1
- Medium4.9Authenticated (Admin+) Path Traversal to Arbitrary File Read
Haxcan
≤1.0.0No patch available
- Medium4.3Cross-Site Request Forgery Bypass
Locations
≤3.2.1Update to 4.0
- Medium4.3Cross-Site Request Forgery Bypass
Recarto – Abandoned Cart Recovery for WooCommerce
≤1.0.4Update to 1.0.4.1
- High8.8Cross-Site Request Forgery
Woo MerchantX
≤1.0No patch available
- High8.8Cross-Site Request Forgery
NMI Gateway For WooCommerce
≤1.6.11No patch available
- Medium5.4Cross-Site Request Forgery to Favorite Addition/Deletion
CRM: Contact Management Simplified – UkuuPeople
≤1.6.3No patch available
- Medium4.3Cross-Site Request Forgery Bypass
Slider Hero with Video Background, Animation
≤8.2.0Update to 8.2.1
- Medium4.3Cross-Site Request Forgery Bypass
Vuukle – Comments, Reactions, Quizzes, Share Bar & Ad Revenue
≤3.4.31Update to 4.0
- High8.8Cross-Site Request Forgery
Travel Light
≤1.0No patch available
- Medium4.3Cross-Site Request Forgery Bypass
WP Easy Pay – Payment and Donation Form Builder for Square
≤3.2.0Update to 3.2.3
- Medium5.4Simple Icons <= 2.7.7 - Authenticated Cross-Site Scripting
Popular Brand Icons – Simple Icons
<2.7.8Update to 2.7.8
- Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
WP Popular Posts
≤5.3.3Update to 5.3.4
- High8.8Authenticated Blind SQL Injection
WooCommerce Blocks
≤5.5Update to 2.5.16 or 2.6.2 or 2.7.2 or 2.8.1 or 2.9.1 or 3.0.1 or 3.1.1 or 3.2.1 or 3.3.1 or 3.4.1 or 3.5.1 or 3.6.1 or 3.7.2 or 3.8.1 or 3.9.1 or 4.0.1 or 4.1.1 or 4.2.1 or 4.3.1 or 4.4.3 or 4.5.3 or 4.6.1 or 4.7.1 or 4.8.1 or 4.9.2 or 5.0.1 or 5.1.1 or 5.2.1 or 5.3.2 or 5.4.1 or 5.5.1
- Medium5.5Authenticated Stored Cross-Site Scripting
Forms
<1.12.3Update to 1.12.3
- Medium4.3Missing Authorization Checks
WP Upload Restriction
≤2.2.4Update to 2.2.5
- Medium4.3Missing Authorization Checks
WP Upload Restriction
≤2.2.4Update to 2.2.5
- Medium6.1Reflected Cross-Site Scripting
Community Events
<1.4.8Update to 1.4.8
- High8.1Cross-Site Request Forgery
Workreap - Freelance Marketplace and Directory WordPress Theme
<2.2.2Update to 2.2.2
- Critical9.8Freelance Marketplace and Directory WordPress Theme < 2.2.2 - Arbitrary File Upload
Workreap - Freelance Marketplace and Directory WordPress Theme
<2.2.2Update to 2.2.2
- Medium6.4Contributor+ Stored Cross-Site Scripting
Leaflet Map
≤2.23.3Update to 3.0.0