VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1310)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,156 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1310)
SeverityVulnerabilityCVEInstallsPublished
Medium4.7Open Redirection
OneLogin SAML SSO≤3.1.2Update to 3.2.0
——
Medium6.1Reflected Cross-Site Scripting
Realteo≤1.2.3Update to 1.2.4
CVE-2021-24237—
High8.8Cross-Site Request Forgery to Account Creation
WooCommerce Customers Manager<26.6Update to 26.6
——
Critical9.9Privilege Escalation
Controlled Admin Access<1.5.6Update to 1.5.6
CVE-2021-4360—
Medium6.1Reflected Cross Site Scripting
Ivory Search – WordPress Search Plugin≤4.6Update to 4.6.1
CVE-2021-24234—
Medium6.1Reflected Cross-Site Scripting
Advanced Booking Calendar<1.6.8Update to 1.6.8
CVE-2021-24232—
Medium6.1Reflected Cross-Site Scripting
WooCommerce Customers Manager≤26.5Update to 26.6
——
Medium6.1Reflected Cross-Site Scripting
Cooked Pro<1.7.5.6Update to 1.7.5.6
CVE-2021-24233—
High8.8Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Login Security and History≤1.0No patch available
CVE-2021-24328—
Medium5.5Authenticated Stored Cross-Site Scripting
Virtual Robots.txt≤1.9Update to 1.10
CVE-2021-28121—
Medium5.4Reflected Cross-Site Scripting via calId Parameter
Advanced Booking Calendar<1.6.7Update to 1.6.7
CVE-2021-24225—
High7.5Local File Disclosure
Patreon WordPress<1.7.0Update to 1.7.0
CVE-2021-24227—
High8.8Arbitrary File Upload
Easy Form Builder≤1.0No patch available
CVE-2021-24224—
Critical9.6Reflected Cross-Site Scripting
Patreon WordPress<1.7.2Update to 1.7.2
CVE-2021-24229—
High8.1Cross-Site Request Forgery
Patreon WordPress<1.7.0Update to 1.7.0
CVE-2021-24230—
Critical9.8Arbitrary File Upload
N5 Upload Form≤1.0No patch available
CVE-2021-24223—
High8.8Cross-Site Request Forgery
Patreon WordPress≤1.6.9Update to 1.7.0
CVE-2021-24231—
Critical9.6Reflected Cross-Site Scripting
Patreon WordPress<1.7.2Update to 1.7.2
CVE-2021-24228—
High8.8Authenticated SQL injection via shortcode
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker≤7.1.11Update to 7.1.12
CVE-2021-24221—
Medium5.3Information Exposure
AccessAlly≤3.5.6Update to 3.5.7
CVE-2021-24226—
Critical9.8Arbitrary File Upload
WP-Curriculo Vitae Free≤6.3No patch available
CVE-2021-24222—
High8.8Cross-site Request Forgery to Stored Cross-site Scripting and Settings Deletion via wp_ajax_(save|delete)_fbe_settings
Meta pixel for WordPress3.0.0 – <3.0.4Update to 3.0.4
CVE-2021-24218—
High8.1PHP Object Injection
Meta pixel for WordPress≤2.2.2Update to 3.0.0
CVE-2021-24217—
Medium6.4Authenticated Stored Cross-Site Scripting
MapifyLite (by MapifyPro)≤3.3Update to 4.0.0
——
Critical9.1 Arbitrary File Upload
Ignition<2.0.0Update to 2.0.0
CVE-2021-24220—
Medium6.1DOM-based Cross-Site Scripting
Elementor Website Builder – more than just a page builder0.1.0 – 3.4.7Update to 3.4.8
CVE-2021-24891—
Medium6.12.9.7 - Reflected Cross Site Scripting
GiveWP – Donation Plugin and Fundraising Platform2.4.0 – <2.10.0Update to 2.10.0
CVE-2021-24213—
Critical9.8Improper Access Control & Privilege Escalation
Controlled Admin Access<1.5.2Update to 1.5.2
CVE-2021-24215—
High7.5Unauthenticated Arbitrary IP Ban
SecuPress with Simple SSL – Simple and Performant Security<2.0Update to 2.0
——
Medium4.3Cross-Site Request Forgery Bypass
eCommerce Product Catalog<2.9.44Update to 2.9.44
CVE-2021-4392—

Search VulnCrest Radar

Jump to

Are you sure?