VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1323)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1323)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Cross-Site Scripting
Sell Media<2.4.2Update to 2.4.2
CVE-2019-6112—
Medium6.1Reflected Cross-Site Scripting
Admin Menu≤1.1No patch available
CVE-2020-24316—
Medium6.1Reflected Cross-Site Scripting
RSS Feed Widget<2.8.1Update to 2.8.1
CVE-2020-24314—
Medium6.1Reflected Cross-Site Scripting
Ultimate Appointment Booking & Scheduling<1.1.10Update to 1.1.10
CVE-2020-24313—
Medium6.1Reflected Cross-Site Scripting
Nova Lite<1.3.9Update to 1.3.9
CVE-2020-17362—
Medium6.1Cross-Site Scripting
Very Simple Quiz≤1.0.0No patch available
——
High7.4Missing Capabilities Check
Facebook Chat Plugin – Live Chat Plugin for WordPress<1.6Update to 1.6
CVE-2020-36838—
High8.3Missing Authorization
CMP – Coming Soon & Maintenance Plugin by NiteoThemes≤3.8.1Update to 3.8.2
CVE-2020-36730—
High8.8Authenticated (Subscriber+) SQL Injection
Ajax Search Pro≤4.18.7Update to 4.19
——
Critical9.8Arbitrary File Upload
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker<7.0.1Update to 7.0.1
CVE-2020-35949—
Medium6.5Reflected Cross-Site Scripting
Newsletter – Send awesome emails from WordPress<6.8.2Update to 6.8.2
CVE-2020-35933—
Medium6.1Cross-Site Request Forgery to Cross-Site Scripting
Ajax Search Pro≤4.18.7Update to 4.19
——
High8.2Unauthenticated Arbitrary File Deletion
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker<7.0.1Update to 7.0.1
CVE-2020-35951—
High7.5Missing Authorization
Product Input Fields for WooCommerce≤1.2.6Update to 1.2.7
CVE-2020-36696—
High8.8Arbitrary File Upload
Divi Builder≤4.3.2Update to 4.5.3
CVE-2020-35945—
High7.5Authenticated PHP Object Injection
Newsletter – Send awesome emails from WordPress<6.8.2Update to 6.8.2
CVE-2020-35932—
Medium6.1Fullscreen Portfolio WordPress Theme <= 2.4 - Reflected Cross-Site Scripting
Konzept - Fullscreen Portfolio WordPress Theme≤2.4Update to 2.5
——
Medium4.3Sensitive Information Disclosure
JetBackup – Backup, Restore & Migrate≤1.4.0Update to 1.4.1
CVE-2020-36668—
Medium5.4Missing Authorization to Unauthorized Backup Location Change
JetBackup – Backup, Restore & Migrate≤1.4.0Update to 1.4.1
CVE-2020-36667—
Medium6.4Stored Cross-Site Scripting
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker≤6.4.12Update to 7.0.0
——
High7.1Cross-Site Scripting
Gallery PhotoBlocks<1.2.0Update to 1.2.0
——
Medium6.1Reflected Cross-Site Scripting
JobSearch WP Job Board<1.5.6Update to 1.5.6
——
Medium6.4Multiple Cross-Site Scripting
JobCareer | Job Board Responsive WordPress Theme≤3.4Update to 3.5
——
Medium6.1Reflected Cross-Site Scripting
WP Foodbakery≤1.9Update to 2.0
——
Medium6.1Cross-Site Scripting
Home Villas | Real Estate WordPress Theme≤2.2Update to 2.3
——
Medium6.1Cross-Site Scripting
JobCareer | Job Board Responsive WordPress Theme≤3.4Update to 3.5
——
Medium6.1Reflected Cross-Site Scripting
Real Estate 7 WordPress≤3.0.3Update to 3.0.4
——
Medium6.1Open Redirect
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin<2.1.7Update to 2.1.7
——
High8.8Cross-Site Request Forgery
Social Rocket – Social Sharing Plugin≤1.2.9Update to 1.2.10
——
High7.1Reflected Cross-Site Scripting
Careerfy - Job Board WordPress Theme<4.4.0Update to 4.4.0
——

Search VulnCrest Radar

Jump to

Are you sure?