Database
WordPress Vulnerability Database (page 1312)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium4.3Cross-Site Request Forgery
VM Backups
≤1.0No patch available
- High8.8Cross-Site Request Forgery to Cross-Site Scripting
VM Backups
≤1.0No patch available
- Medium6.1Unauthenticated Stored Cross-Site Scripting
JH 404 Logger
≤1.1No patch available
- High8.1Cross-Site Request Forgery
Database Backups
≤1.2.2.6No patch available
- Critical9.8Authentication Bypass
The Plus Addons for Elementor Page Builder Pro
<4.1.7Update to 4.1.7
- Critical9.8SQL Injection
Super Store Finder
<6.5Update to 6.5
- Medium6.5Authorization Bypass to Private Message Disclosure
BuddyPress
≤7.2.0Update to 7.2.1
- High8.8Authenticated SQL Injection
Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
<2.5.6Update to 2.5.6
- High7.5Unauthenticated Blind SQL Injection
Anti-Spam, Spam FireWall by CleanTalk
≤5.153.3Update to 5.153.4
- Critical9.8Arbitrary File Upload
WooCommerce Upload Files
<59.4Update to 59.4
- Medium6.5Sensitive Information Disclosure
User Profile Picture
<2.5.0Update to 2.5.0
- Medium6.1Reflected Cross-Site Scripting
Advanced Order Export For WooCommerce
≤3.1.7Update to 3.1.8
- High8.8Cross-Site Request Forgery
Process Steps Template Designer
<1.3Update to 1.3
- Medium4.3Cross-Site Request Forgery Bypass
WP Travel – Ultimate Travel Booking System, Tour Management Engine
≤4.4.6Update to 4.4.7
- Medium5.4Cross-Site Request Forgery Bypass
Forminator Forms – Contact Form, Payment Form & Custom Form Builder
<1.13.5Update to 1.13.5
- Medium4.3Cross-Site Request Forgery Bypass
Defender Security – Malware Scanner, Login Security & Firewall
≤2.4.6Update to 2.4.6.1
- Medium4.3Cross-Site Request Forgery Bypass
Post SMTP – Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
≤2.0.20Update to 2.0.21
- High8.8Cross-Site Request Forgery to Settings Import
Better Search – Relevant search results for WordPress
<2.5.3Update to 2.5.3
- Medium4.3Cross-Site Request Forgery Bypass
WP Private Content Plus
≤3.1Update to 3.2
- Medium4.3Cross-Site Request Forgery Bypass
eCommerce Product Catalog
<3.0.18Update to 3.0.18
- High8.8Cross-Site Request Forgery Bypass
Style Kits for Elementor
≤1.8.0Update to 1.8.1
- Medium4.3Cross-Site Request Forgery Bypass
Custom Banners
≤3.2.2Update to 3.3
- Medium4.3Cross-Site Request Forgery Bypass
Abandoned Cart Lite for WooCommerce
≤5.8.5Update to 5.8.6
- Medium4.7Stored Cross-Site Scripting
Cookie Information | Free GDPR Consent Solution
≤1.5.5Update to 1.5.6
- Medium4.3Cross-Site Request Forgery Bypass
Process Steps Template Designer
≤1.2.1Update to 1.3
- Medium4.3Cross-Site Request Forgery Bypass
ElasticPress
≤3.5.3Update to 3.5.4
- Medium4.3Cross-Site Request Forgery Bypass
Better Search – Relevant search results for WordPress
≤2.5.2Update to 2.5.3
- High7.2Server Side Request Forgery
Under Construction, Coming Soon & Maintenance Mode
<1.1.2Update to 1.1.2
- Medium6.1Server Side Request Forgery
Under Construction, Coming Soon & Maintenance Mode
≤1.1.1Update to 1.1.2
- Medium5.4Reflected Cross-Site Scripting
File Manager
<7.1Update to 7.1