VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1298)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,156 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1298)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1 Cross-Site Request Forgery to Stored Cross-Site Scripting
Leaflet Map≤2.23.3Update to 3.0.0
CVE-2021-24467—
Medium6.3Missing Authorization
PWA for WP – Progressive Web Apps Made Simple≤1.7.32Update to 1.7.33
CVE-2021-4366—
High8.8Arbitrary File Upload
PWA for WP – Progressive Web Apps Made Simple≤1.7.32Update to 1.7.33
CVE-2021-4354—
Medium6.4Contributor+ Stored Cross-Site Scripting
Leaflet Map≤2.23.3Update to 3.0.0
CVE-2021-24468—
High7.3Authorization Bypass
MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.≤1.2.35.1Update to 1.2.35.2
——
High8.8Cross-Site Request Forgery
WooCommerce Custom Registration Form≤1.0.4No patch available
——
High8.3Cross-Site Request Forgery
ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema<1.2.9Update to 1.2.9
——
High8.8Cross-Site Request Forgery
KONTXT Improves WordPress Search≤1.4.6No patch available
——
High8.8Cross-Site Request Forgery
MZ Mindbody API≤2.8.2Update to 2.8.3
——
High8.8Cross-Site Request Forgery
Journey Analytics≤1.0.12Update to 1.0.13
——
Medium4.3Cross-Site Request Forgery
WP Prayer<1.5.5Update to 1.5.5
——
High8.8Cross-Site Request Forgery
MZ MBO Access≤2.0.8Update to 2.0.9
——
High8.8 Cross-Site Request Forgery to Cross-Site Scripting
Fontsampler≤0.4.12Update to 0.4.13
——
Medium6.1Reflected Cross-Site Scripting
WSMS (formerly WP SMS): SMS Notifications, OTP Login and WooCommerce SMS≤5.4.9Update to 5.4.9.1
——
High8.8Cross Site Request Forgery
Instantio — Side Cart & One-Page Checkout for WooCommerce≤1.2.5Update to 1.2.6
——
High7.5Authorization Bypass
Strong Testimonials≤2.51.2Update to 2.51.3
——
High8.8Cross-Site Request Forgery
BuddyPress Customer.io Analytics Integration≤1.1.6No patch available
——
High8.8Cross-Site Request Forgery
KONTXT Content Advisor≤2.2Update to 2.3
——
High8.8Cross-Site Request Forgery
intimate Payments Plugin≤1.3.1No patch available
——
High8.8Cross-Site Request Forgery
SEO≤4.0.2No patch available
——
High8.8Cross-Site Request Forgery
Express Shop for WooCommerce Product Table≤4.0.2Update to 4.0.3
——
High8.8Cross-Site Request Forgery
Global Multisite Search≤1.0.1No patch available
——
High8.8Cross-Site Request Forgery
Title Field Validation≤1.1No patch available
——
High8.8Cross-Site Request Forgery
YITH Request a Quote for WooCommerce≤1.6.3Update to 1.6.4
——
High8.8Cross-Site Request Forgery
Woostify≤1.9.1Update to 1.9.2
——
High8.8Cross-Site Request Forgery
Woocommerce Tabs Plugin, Add Custom Product Tabs≤1.0.1No patch available
——
High8.8Cross-Site Request Forgery
Adapta RGPD≤1.3.2Update to 1.3.3
——
Medium5.5Stored Cross-Site Scripting
PublishPress Taxonomies – Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms≤3.0.7.1Update to 3.0.7.2
CVE-2021-24444—
High8.8Cross-Site Request Forgery
BNG Gateway For WooCommerce≤1.6.10No patch available
——
Medium6.1Reflected Cross-Site Scripting
Newspaper Lite≤10.3.9.1Update to 11.0
CVE-2021-3135—

Search VulnCrest Radar

Jump to

Are you sure?