Database
WordPress Vulnerability Database (page 1324)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- High7.1Reflected Cross-Site Scripting
Careerfy - Job Board WordPress Theme
<4.4.0Update to 4.4.0
- High8.3Unauthenticated Stored Cross-Site Scripting
TC Custom JavaScript
<1.2.2Update to 1.2.2
- Medium6.5KEVPoCjQuery Manager for WordPress <= 1.10.4 & jQuery Migrate Helper <= 1.4.1- Running Vulnerable Dependency
Enable jQuery Migrate Helper
≤1.4.1No patch available
- Medium6.1Reflected Cross-Site Scripting
JobSearch WP Job Board
<1.5.5Update to 1.5.5
- Medium6.1Reflected Cross-Site Scripting
Careerfy - Job Board WordPress Theme
≤4.2.0Update to 4.3.0
- Medium6.1Reflected Cross-Site Scripting
GreenMart – Organic & Food WooCommerce WordPress Theme
<2.4.3Update to 2.4.3
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)
<3.6.2Update to 3.6.2
- Medium4.9Authenticated SQL Injection
Email Subscribers & Newsletters by Icegram Express – Email Marketing, Post Notifications & WooCommerce Marekting Automation for WordPress
<4.5.1Update to 4.5.1
- High8.8Cross-Site Request Forgery to Arbitrary File Upload
JetBackup – Backup, Restore & Migrate
≤1.3.9Update to 1.4.0
- High8.8Authentication Bypass
Customer Email Verification for WooCommerce
≤1.8.1Update to 1.8.2
- Medium5.3Email Injection
Contact Builder by Themify
≤1.4.5Update to 1.4.6
- High8.8Cross-Site Request Forgery
Email Subscribers & Newsletters by Icegram Express – Email Marketing, Post Notifications & WooCommerce Marekting Automation for WordPress
<4.5.1Update to 4.5.1
- Medium6.4Authenticated Stored Cross-Site Scripting
SendPress Newsletters
<1.20.7.13Update to 1.20.7.13
- Medium6.1Reflected Cross-Site Scripting
Workio – Job Board WordPress Theme
≤1.0.1Update to 1.0.2
- High8.3Stored Cross-Site Scripting
Newsletter – Send awesome emails from WordPress
≤6.7.6Update to 6.7.7
- Medium6.1Reflected Cross-Site Scripting
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
<1.13.40Update to 1.13.40
- Medium5.4Stored Cross-Site Scripting
3CX Free Live Chat, Calls & Messaging
≤8.1.9Update to 8.2.0
- High8.8Cross-Site Request Forgery
Responsive Menu – Mobile Menu & Hamburger Menu Builder
<3.1.4Update to 3.1.4
- High7.1City Travel Guide WordPress Theme < 1.3.3 - Reflected Cross-Site Scripting
Golo - City Travel Guide WordPress Theme
<1.3.3Update to 1.3.3
- High7.51.04 - Unauthenticated SQL Injection
SRS Simple Hits Counter
1.0.3 – 1.0.4Update to 1.1.0
- Medium6.1Reflected Cross-Site Scripting
Kormosola
≤1.0.22Update to 1.0.23
- High7.2Stored Cross-Site Scripting
Knight Lab Timeline
<3.7.0Update to 3.7.0
- Medium5.5CSV Injection
Wise Chat
≤2.8.3Update to 2.8.4
- Medium5.5Stored Cross-Site Scripting
Page Builder: KingComposer – Free Drag and Drop page builder by King-Theme
<2.9.4Update to 2.9.4
- Medium6.4Authenticated Stored Cross-Site Scripting
Powie’s WHOIS Domain Check
≤0.9.31Update to 0.9.32
- Critical9.8Arbitrary File Upload
Adning Advertising
≤1.5.5Update to 1.5.6
- Medium6.4Authenticated Stored Cross-Site Scripting
Elementor Website Builder – more than just a page builder
<2.9.14Update to 2.9.14
- Medium6.5Unauthenticated Arbitrary File Deletion via Path Traversal
Adning Advertising
≤1.5.5Update to 1.5.6
- High8.8Missing Authorization
Security Plugin, Firewall & Malware Scanner with Auto Removal
≤2.50Update to 2.51
- High7.2Cross-Site Scripting
Careerfy - Job Board WordPress Theme
≤4.0.0Update to 4.1.0