VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1320)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software
Active filters:Clear all

41,244 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1320)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Reflected Cross-Site Scripting
All-In-One Security (AIOS) – Security and Firewall<4.2.0Update to 4.2.0
CVE-2016-10866—
Critical9.8SQL Injection
Answer My Question≤1.3No patch available
CVE-2016-20073—
High7.2SQL Injection
FireStorm Shopping Cart eCommerce Plugin≤2.07.02No patch available
CVE-2016-10951—
High8.8SQL Injection
Image Optimizer, Resizer and CDN – Sirv<1.3.2Update to 1.3.2
CVE-2016-10950—
Medium6.1Cross-Site Scripting
WassUp Real Time Analytics<1.9.1Update to 1.9.1
CVE-2016-10919—
Medium6.1Cross-Site Scripting
Quotes Collection<2.0.6Update to 2.0.6
CVE-2016-10952—
High8.8Cross-Site Request Forgery
GoDaddy Email Marketing<1.1.4Update to 1.1.4
CVE-2016-10903—
Medium6.1Reflected Cross-Site Scripting
Tera Charts≤1.0No patch available
CVE-2016-1000151—
Medium6.1Reflected Cross-Site Scripting
Pondol Carousel≤1.0No patch available
CVE-2016-1000145—
Medium6.1Reflected Cross-Site Scripting
CM Tooltip Glossary<3.3.5Update to 3.3.5
CVE-2016-1000132—
Medium6.1Reflected Cross-Site Scripting
Simpel Reserveren 3≤3.5.2No patch available
CVE-2016-1000149—
Medium6.1Reflected Cross-Site Scripting via channel parameter
HDW WordPress Video Gallery≤1.2No patch available
CVE-2016-1000135—
Medium6.1Reflected Cross-Site Scripting via playlist parameter
HDW WordPress Video Gallery≤1.2No patch available
CVE-2016-1000134—
Medium6.1Reflected Cross-Site Scripting
Tidio Gallery≤1.1No patch available
CVE-2016-1000153—
Medium6.1Reflected Cross-Site Scripting
E-Search≤1.0No patch available
CVE-2016-1000131—
Medium6.1Reflected Cross-Site Scripting
WHIZZ<1.0.8Update to 1.0.8
CVE-2016-1000154—
Medium6.1Reflected Cross-Site Scripting
indexisto≤1.0.5No patch available
CVE-2016-1000138—
Medium6.1Reflected Cross-Site Scripting via gid
PhotoXhibit≤2.1.8No patch available
CVE-2016-1000143—
Critical9.8SQL Injection
Zotpress<6.1.3Update to 6.1.3
CVE-2016-1000217—
Medium6.1Cross-Site Scripting
WP Editor<1.2.6.3Update to 1.2.6.3
CVE-2016-10877—
Medium5.0Server-Side Request Forgery
WordPress<4.5Update to 4.5
CVE-2016-4029—
High8.8Cross-Site Request Forgery
Google Doc Embedder≤2.6.1Update to 2.6.2
CVE-2016-10882—
Medium6.1Cross-Site Scripting
Google Doc Embedder<2.6.2Update to 2.6.2
CVE-2016-10881—
Medium6.1Cross-Site Scripting
Google Doc Embedder<2.6.1Update to 2.6.1
CVE-2016-10880—
High7.5Insecure Direct Object Reference
WP Support Plus Responsive Ticket System<7.1.0Update to 7.1.0
CVE-2016-10930—
Critical9.8Multipurpose WordPress Theme | WordPress < 1.8 - Arbitrary File Upload
Neosense - Multipurpose WordPress Theme | WordPress<1.8Update to 1.8
CVE-2016-10954—
High8.8Cross-Site Request Forgery to Cross-Site Scripting
Podlove Podcast Publisher<2.3.16Update to 2.3.16
CVE-2016-10941—
High8.8Multiple Cross-Site Request Forgery
Simple Membership≤3.3.2Update to 3.3.3
CVE-2016-10884—
Medium6.4Stored Cross-Site Scripting
WP Frontend Profile≤0.2.1Update to 0.2.2
CVE-2019-15110—
Critical9.8Privilege Escalation
WP Frontend Profile≤0.2.1Update to 0.2.2
CVE-2019-15111—

Search VulnCrest Radar

Jump to

Are you sure?