VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1302)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,156 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1302)
SeverityVulnerabilityCVEInstallsPublished
Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
Easy Cookies Policy≤1.6.2No patch available
CVE-2021-24405—
Medium6.1Reflected Cross-Site Scripting
Welcart e-Commerce≤2.2.3Update to 2.2.4
CVE-2021-20734—
Medium6.5Arbitrary Product Import/Update
BCS BatchLine Book Importer≤1.5.7Update to 1.5.8
——
Medium6.1Reflected Cross-Site Scripting
Real Estate 7 WordPress<3.1.1Update to 3.1.1
CVE-2021-24387—
Critical9.8Local File Inclusion
Motor – Cars, Parts, Service, Equipments and Accessories WooCommerce Store<3.1.0Update to 3.1.0
CVE-2021-24375—
Medium6.1Reflected Cross-Site Scripting
Advanced AJAX Product Filters≤1.5.4.6Update to 1.5.4.7
CVE-2021-24432—
High8.8Authenticated Remote Command Execution
Form Manager<1.7.3Update to 1.7.3
CVE-2015-7806—
Medium4.3Multiple Roles <= 1.3.1- Cross-Site Request Forgery Bypass
Multiple Roles≤1.3.1Update to 1.3.2
CVE-2021-4402—
Medium4.3Cross-Site Request Forgery Bypass
Custom css-js-php≤2.0.7No patch available
CVE-2021-4418—
Critical9.8Object Injection
JoomSport – for Sports: Team & League, Football, Hockey & more<5.1.8Update to 5.1.8
CVE-2021-24384—
Medium4.3Cross-Site Request Forgery Bypass
WP Prayer≤1.6.5Update to 1.6.6
CVE-2021-4412—
Medium4.3Cross-Site Request Forgery Bypass
Qtranslate Slug≤1.1.18No patch available
CVE-2021-4410—
Medium6.1Reflected Cross-Site Scripting
Payment Gateway of Stripe for WooCommerce≤3.5.9Update to 3.6.0
——
Medium6.1Reflected Cross-Site Scripting
WP Hardening (discontinued)≤1.2.1Update to 1.2.2
CVE-2021-24372—
Medium5.4Authenticated Stored Cross-Site Scripting
Smart Slider 3<3.5.0.9Update to 3.5.0.9
CVE-2021-24382—
Medium6.1Newspaper Magazine News BuddyPress AMP < 5.4.4 - Reflected Cross-Site Scripting
Jannah - Newspaper Magazine News BuddyPress AMP<5.4.4Update to 5.4.4
CVE-2021-24364—
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Recently<3.0.5Update to 3.0.5
——
Medium5.4Authenticated Stored Cross-Site Scripting
WP Go Maps – Google Map, OpenStreetMap, Leaflet & Store Locator<8.1.12Update to 8.1.12
CVE-2021-24383—
Medium6.1Reflected Cross-Site Scripting
WP Hardening (discontinued)<1.2.2Update to 1.2.2
CVE-2021-24373—
Medium5.3Add Like/Dislike Bypass
Comments Like Dislike<1.1.4Update to 1.1.4
CVE-2021-24379—
High8.8Arbitrary File Upload to Remote Code Exectution
Recently≤3.0.4Update to 3.0.5
CVE-2021-4382—
Critical9.8wpDiscuz 7.0 - 7.0.4 - Unauthenticated Arbitrary File Upload leading to Remote Code Execution
Comments – wpDiscuz7.0 – 7.0.4Update to 7.0.5
CVE-2020-24186—
Critical9.82.1.2 - Arbitrary Options Change
Social Sharing Plugin – Kiwi2.1.0 – 2.1.2Update to 2.1.3
CVE-2021-4362—
Critical9.8SQL Injection
Location Manager<2.1.0.10Update to 2.1.0.10
CVE-2021-24361—
Medium6.4Cross-Site Scripting
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker<7.1.19Update to 7.1.19
——
Medium6.1Reflected Cross-Site Scripting
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker≤7.1.17Update to 7.1.18
CVE-2021-24368—
High8.8SQL Injection
Stock in & out≤1.0.4No patch available
CVE-2021-24520—
Medium5.4Authenticated Stored Cross-Site Scripting
Payment forms, Buy now buttons, and Invoicing System | GetPaid≤2.3.3Update to 2.3.4
CVE-2021-24369—
Medium6.1Reflected Cross-Site Scripting
Bitcoin Payments – Blockonomics<3.3Update to 3.3
——
Medium6.1Open Redirect
MC4WP: Mailchimp for WordPress≤4.8.4Update to 4.8.5
——

Search VulnCrest Radar

Jump to

Are you sure?