Database
WordPress Vulnerability Database (page 1314)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- High8.8Boolean-Based Blind SQL Injections
Pricing Table by Supsystic – Responsive Pricing Plans & Comparison Tables
≤1.8.8Update to 1.8.9
- Medium6.1Social Directory WordPress Theme <= 2.4.2 - Reflected Cross-Site Scripting
Wyzi - Social Directory WordPress Theme
≤2.4.2Update to 2.4.3
- High7.5Server-Side Request Forgery
Like Button Rating ♥ LikeBtn
<2.6.32Update to 2.6.32
- High7.5Unauthenticated Settings Import & Export
Ultimate GDPR & CCPA Compliance Toolkit for WordPress
<2.5Update to 2.5
- High8.8Cross-Site Request Forgery
Name Directory
≤1.17.4Update to 1.18
- High8.8Contact Form 7 Style <= 3.1.9 Cross-Site Request Forgery
Contact Form 7 Style
≤3.1.9No patch available
- Medium6.1Reflected Cross-Site Scripting
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
<1.5.68Update to 1.5.68
- High8.8SQL Injection
wpDataTables (Premium)
≤3.4Update to 3.4.1
- Critical9.8Authentication Bypass
MStore API – Create Native Android & iOS Apps On The Cloud
≤3.1.9Update to 3.2.0
- Medium6.1Reflected Cross-Site Scripting
Popup Builder – Create highly converting, mobile friendly marketing popups.
≤3.73Update to 3.74
- Medium6.1Reflected Cross-Site Scripting
Ivory Search – WordPress Search Plugin
≤4.5.10Update to 4.5.11
- High7.2Authenticated (Admin+) SQL injection
WP Editor
≤1.2.6.3Update to 1.2.7
- Medium6.4Authenticated Stored Cross-Site Scripting
Modern Events Calendar Lite
≤5.16.4Update to 5.16.5
- High8.8Authenticated SQL Injection
Modern Events Calendar Lite
≤5.16.5Update to 5.16.6
- High7.5Unauthenticated Events Export
Modern Events Calendar Lite
≤5.16.4Update to 5.16.5
- High7.2Authenticated Arbitrary File Upload leading to Remote Code Execution
Modern Events Calendar Lite
≤5.16.4Update to 5.16.5
- Critical9.8Missing Authorization
Directory Listings WordPress plugin – uListing
<1.7Update to 1.7
- Critical9.8Arbitrary File Upload
Super Forms – Drag & Drop Form Builder
≤4.9.700Update to 4.9.800
- Critical9.1Unauthenticated Arbitrary Post/Page Deletion
Directory Listings WordPress plugin – uListing
<1.7Update to 1.7
- Medium6.3Popup Builder <= 3.72 Missing Authorization on AJAX actions
Popup Builder – Create highly converting, mobile friendly marketing popups.
≤3.71Update to 3.72
- Critical9.6Unauthenticated Stored Cross-Site Scripting
Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder
<4.09.05Update to 4.09.05
- Critical9.8Unauthenticated Options Changes via wp_route
Directory Listings WordPress plugin – uListing
<1.7Update to 1.7
- Critical9.8Unauthenticated Arbitrary Account Creation
Directory Listings WordPress plugin – uListing
<1.7Update to 1.7
- Medium6.5Unauthenticated Arbitrary Roles and Capabilities Creation/Deletion
Directory Listings WordPress plugin – uListing
<1.7Update to 1.7
- High7.5Unauthenticated Information Disclosure
Directory Listings WordPress plugin – uListing
<1.7Update to 1.7
- Critical9.8Unauthenticated Wordpress Options Changes via AJAX
Directory Listings WordPress plugin – uListing
<1.7Update to 1.7
- Critical9.8Unauthenticated Arbitrary Account Changes
Directory Listings WordPress plugin – uListing
<1.7Update to 1.7
- Critical9.8Arbitrary File Upload
YITH WooCommerce Gift Cards Premium
<3.3.1Update to 3.3.1
- High8.8CSV Injection
Database Addon for Contact Form 7 – CFDB7
<1.2.5.6Update to 1.2.5.6
- Medium6.5Information Disclosure
Doneren met Mollie
≤2.8.4Update to 2.8.5