VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1299)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,156 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1299)
SeverityVulnerabilityCVEInstallsPublished
High8.8Cross-Site Request Forgery
MZ MBO Access≤2.0.8Update to 2.0.9
——
High8.8Cross-Site Request Forgery
intimate Payments Plugin≤1.3.1No patch available
——
High8.8Authenticated SQL Injection
Handsome Testimonials & Reviews<2.1.1Update to 2.1.1
CVE-2021-24492—
High8.8Authenticated SQL Injection
Survey Maker by AYS<1.5.6Update to 1.5.6
CVE-2021-24459—
High8.8Authenticated SQL Injection
Popup Box – Create Countdown, Coupon, Video, Contact Form Popups<2.3.4Update to 2.3.4
CVE-2021-24458—
Medium6.1Cross-Site Scripting
Popup Like box – Page Plugin≤3.5.2Update to 3.5.3
——
High8.1Authorization Bypass
Workreap - Freelance Marketplace and Directory WordPress Theme<2.2.2Update to 2.2.2
CVE-2021-24501—
Medium6.1Cross-Site Scripting
Popup Box – Create Countdown, Coupon, Video, Contact Form Popups≤2.3.3Update to 2.3.4
——
High7.2SQL Injection
Secure Copy Content Protection and Content Locking<2.6.7Update to 2.6.7
CVE-2021-24484—
High8.8Blind SQL Injection
FAQ Builder AYS≤1.3.5Update to 1.3.6
CVE-2021-24461—
Medium6.1Reflected Cross-Site Scripting
Image Slider by Ays- Responsive Slider and Carousel≤2.4.9Update to 2.5.0
——
High8.8SQL Injection
Image Slider by Ays- Responsive Slider and Carousel<2.5.0Update to 2.5.0
CVE-2021-24463—
Medium6.1Reflected Cross-Site Scripting
Survey Maker by AYS≤1.5.5Update to 1.5.6
——
Medium6.1Reflected Cross-Site Scripting
Photo Gallery by Ays – Responsive Image Gallery≤4.4.3Update to 4.4.4
——
High8.8SQL Injection
Popup Like box – Page Plugin≤3.5.2Update to 3.5.3
CVE-2021-24460—
Low2.7Server-Side Request Forgery
RSVPMaker<8.7.3Update to 8.7.4
CVE-2021-24371—
Medium5.4Stored Cross-Site Scripting
WP Offload SES Lite≤1.4.4Update to 1.4.5
CVE-2021-24494—
High7.2SQL Injection
Quiz Maker by AYS<6.2.0.9Update to 6.2.0.9
CVE-2021-24456—
High7.2SQL Injection
Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls<3.2.1Update to 3.2.1
CVE-2021-24483—
High8.8Blind SQL Injection
Portfolio Responsive Gallery≤1.1.7Update to 1.1.8
CVE-2021-24457—
High7.2Responsive Image Gallery <= 4.4.3 - Authenticated Blind SQL Injections
Photo Gallery by Ays – Responsive Image Gallery<4.4.4Update to 4.4.4
CVE-2021-24462—
Medium6.1Cross-Site Scripting
Portfolio Responsive Gallery≤1.1.7Update to 1.1.8
——
Critical9.83.1.3 - Unauthenticated Privilege Escalation
ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content3.0.0 – 3.1.3Update to 3.1.4
CVE-2021-34622—
Critical9.83.1.3 - Arbitrary File Upload
ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content3.0.0 – 3.1.3Update to 3.1.4
CVE-2021-34624—
Medium5.4Stored Cross-Site Scripting
Yada Wiki<3.4.1Update to 3.4.1
CVE-2021-24470—
High7.2SQL Injection
Side Menu Lite – Sticky Floating Side Menu≤2.1.1Update to 2.2.1
CVE-2021-24521—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Bookshelf≤2.0.4No patch available
CVE-2021-24478—
Critical9.83.1.3 - Unauthenticated Privilege Escalation
ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content3.0.0 – 3.1.3Update to 3.1.4
CVE-2021-34621—
Medium4.3Cross-Site Request Forgery Bypass
Edwiser Bridge – WordPress Moodle Integration≤2.0.6Update to 2.0.7
CVE-2021-4399—
Medium5.5Authenticated Stored Cross-Site Scripting
Tutor LMS – eLearning and online course solution≤1.9.1Update to 1.9.2
CVE-2021-24455—

Search VulnCrest Radar

Jump to

Are you sure?