Database
WordPress Vulnerability Database (page 1321)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- High8.8Cross-Site Request Forgery
Coming Soon & Maintenance Mode Page & Under Construction
≤1.57Update to 1.58
- Medium4.3Cross-Site Request Forgery Bypass
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy
<3.0.9Update to 3.0.9
- Medium6.1Reflected Cross-Site Scripting
DiveBook
≤1.1.4No patch available
- Critical9.8SQL Injection
DiveBook
≤1.1.4No patch available
- Medium5.3Sensitive Information Disclosure via Directory Listing
Noo JobMonster
≤4.6.6Update to 4.6.6.1
- Medium6.8Authenticated (Admin+) SQL Injection
10Web Social Post Feed
<1.1.27Update to 1.1.27
- Medium6.1Cross-Site Scripting
Affiliates Manager
<2.7.8Update to 2.7.8
- Medium5.3Unauthenticated Email Forgery
Email Subscribers & Newsletters by Icegram Express – Email Marketing, Post Notifications & WooCommerce Marekting Automation for WordPress
<4.5.6Update to 4.5.6
- Medium6.13.7 - Reflected Cross-Site Scripting
Love Travel
2.0 – 3.7Update to 3.8
- Medium6.11.9 - Reflected Cross-Site Scripting and Cross-Frame Scripting
Love Travel
1.0 – 1.9Update to 2.0
- Critical9.8SQL Injection
WP Go Maps – Google Map, OpenStreetMap, Leaflet & Store Locator
≤7.11.17Update to 7.11.18
- Medium6.1Reflected Cross-Site Scripting
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
<3.2.7.3Update to 3.2.7.3
- Medium6.1Reflected Cross-Site Scripting
Addon Elements for Elementor (formerly Elementor Addon Elements)
<1.6.4Update to 1.6.4
- Medium6.1Reflected Cross-Site Scripting
Cookiebot – Cookie Banner & Cookie Consent for GDPR, CCPA & Google Consent Mode
<3.6.1Update to 3.6.1
- Medium6.1Reflected Cross-Site Scripting
Sticky Menu & Sticky Header
<2.21Update to 2.21
- Medium6.1Reflected Cross-Site Scripting
AGCA – Custom Dashboard & Login Page
≤6.5.4Update to 6.5.5
- Medium4.7Reflected Cross-Site Scripting
All-In-One Security (AIOS) – Security and Firewall
≤4.4.3Update to 4.4.4
- Medium5.5Constant Contact Forms <= 1.8.7 Editor+ Stored Cross-Site Scripting
Constant Contact Forms
<1.8.8Update to 1.8.8
- Medium4.3Cross-Site Request Forgery Bypass
EWWW Image Optimizer
≤5.8.1Update to 5.9
- Medium4.3Cross-Site Request Forgery
ActiveCampaign – The autonomous marketing platform
<8.0.2Update to 8.0.2
- High7.2SQL injection
Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance
<3.0.2Update to 3.0.2
- Medium5.0Missing Authorization
NextScripts: Social Networks Auto-Poster
≤4.3.17Update to 4.3.18
- Critical9.8Arbitrary File Upload
Augmented reality plugin
≤1.2.0No patch available
- Critical9.8KEVPoCArbitrary File Upload/Remote Code Execution
File Manager
≤6.8Update to 6.9
- Medium5.4Reflected Cross-Site Scripting
Ceceppa Multilingua
≤1.5.17No patch available
- Medium6.1Cross-Site Scripting
Chamber Dashboard Business Directory
<3.3.1Update to 3.3.1
- Medium6.1Reflected Cross-Site Scripting
Subscribe Sidebar plugin by Blubrry
≤1.3.1No patch available
- Medium5.4Cross-Site Scripting
Recall Products
≤0.8No patch available
- Medium5.4Stored Cross-Site Scripting
WP smart CRM & Invoices FREE
≤1.8.7No patch available
- High8.8Authenticated SQL Injection
Recall Products
≤0.8No patch available