Database

WordPress Vulnerability Database (page 1324)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1324)
Severity	Vulnerability	CVE	Installs	Published
Medium6.1	Cross-Site Scripting افزونه پیامک ووکامرس \| Persian WooCommerce SMS≤3.3.2Update to 3.3.3	CVE-2016-10987	—	Apr 21, 2016
Medium6.1	Reflected Cross-Site Scripting Echo Sign<1.2Update to 1.2	CVE-2016-10985	—	Apr 21, 2016
Medium6.1	Reflected Cross-Site Scripting Echo Sign<1.2Update to 1.2	CVE-2016-10984	—	Apr 21, 2016
Medium6.1	Reflected Cross-Site Scripting Tweet Wheel<1.0.3.3Update to 1.0.3.3	CVE-2016-10986	—	Apr 21, 2016
Medium6.1	Cross-Site Scripting Translate WordPress – Google Language Translator<5.0.06Update to 5.0.06	CVE-2016-10870	—	Apr 18, 2016
Medium6.1	Stored Cross-Site Scripting Kento Post View Counter≤2.8No patch available	CVE-2016-10981	—	Apr 17, 2016
Medium5.4	Stored Cross-Site Scripting leenk.me<2.6.0Update to 2.6.0	CVE-2016-10988	—	Apr 17, 2016
High8.8	Cross-Site Request Forgery Kento Post View Counter≤2.8No patch available	CVE-2016-10982	—	Apr 17, 2016
High8.8	Cross-Site Request Forgery leenk.me≤2.5.0Update to 2.6.0	CVE-2016-10989	—	Apr 16, 2016
Medium6.1	Reflected Cross-Site Scripting Kento Post View Counter≤2.8No patch available	CVE-2016-10980	—	Apr 16, 2016
Medium6.1	Reflected Cross-Site Scripting WPSOLR – Elasticsearch and Solr search≤8.6Update to 8.7	CVE-2016-1000155	—	Apr 12, 2016
Medium6.4	Cross-Site Scripting via Network Settings Page WordPress<4.5Update to 4.5	CVE-2016-6634	—	Apr 12, 2016
Medium6.1	Reflected Cross-Site Scripting S3 Video Plugin≤0.983No patch available	CVE-2016-1000148	—	Apr 12, 2016
Medium6.1	Reflected Cross-Site Scripting MiniMax – Page Layout Builder≤1.9.3No patch available	CVE-2016-1000141	—	Apr 12, 2016
Medium6.1	Reflected Cross-Site Scripting Hero Maps Pro≤2.1.0Update to 2.2.0	CVE-2016-1000137	—	Apr 12, 2016
Medium6.1	Reflected Cross-Site Scripting MW Font Changer<4.3Update to 4.3	CVE-2016-1000142	—	Apr 12, 2016
Medium6.1	Reflected Cross-Site Scripting Defa Online Image Protector Free Edition≤3.4No patch available	CVE-2016-1000129	—	Apr 12, 2016
High8.8	Cross-Site Request Forgery WP Database Backup – Unlimited Database & Files Backup by Backup for WP≤4.3Update to 4.3.1	CVE-2016-10876	—	Apr 8, 2016
Critical9.8	SQL Injection All-In-One Security (AIOS) – Security and Firewall<4.0.7Update to 4.0.7	CVE-2016-10888	—	Apr 6, 2016
Medium6.1	Reflected Cross-Site Scripting Post Duplicator≤2.16Update to 2.17	CVE-2016-15027	—	Apr 6, 2016
Medium6.1	Cross-Site Scripting Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin<1.3.40Update to 1.3.40	CVE-2016-10872	—	Apr 6, 2016
Medium6.1	Cross-Site Request Forgery to Cross-Site Scripting Lightbox Plus≤2.7.2No patch available	CVE-2016-10865	—	Apr 5, 2016
Medium6.1	Cross-Site Scripting WP Customer Reviews<3.0.9Update to 3.0.9	CVE-2016-10901	—	Apr 4, 2016
High7.2	Stored Cross-Site Scripting WP Cerber Security, Anti-spam & Malware Scan<2.7Update to 2.7	CVE-2016-10990	—	Apr 1, 2016
Medium6.1	Cross-Site Scripting ScoreMe≤2016-04-01No patch available	CVE-2016-10993	—	Apr 1, 2016
High7.5	Directory Traversal Zedna eBook download<1.2Update to 1.2	CVE-2016-10924	—	Mar 29, 2016
Medium6.1	Unauthenticated Cross-Site Scripting WP Favorite Posts≤1.6.5Update to 1.6.6	CVE-2016-1160	—	Mar 29, 2016
Medium6.1	Cross-Site Scripting Music Store – WordPress eCommerce≤1.0.41Update to 1.0.43	CVE-2016-10992	—	Mar 28, 2016
High7.5	Local File Inclusion IMDB Profile Widget<1.0.9Update to 1.0.9	CVE-2016-10991	—	Mar 26, 2016
High8.1	Unauthenticated Local File Inclusion Issuu Panel<1.6.6No patch available	CVE-2016-20101	—	Mar 23, 2016

Medium6.1
Cross-Site Scripting
افزونه پیامک ووکامرس | Persian WooCommerce SMS
≤3.3.2Update to 3.3.3
CVE-2016-10987Apr 21, 2016
Medium6.1
Reflected Cross-Site Scripting
Echo Sign
<1.2Update to 1.2
CVE-2016-10985Apr 21, 2016
Medium6.1
Reflected Cross-Site Scripting
Echo Sign
<1.2Update to 1.2
CVE-2016-10984Apr 21, 2016
Medium6.1
Reflected Cross-Site Scripting
Tweet Wheel
<1.0.3.3Update to 1.0.3.3
CVE-2016-10986Apr 21, 2016
Medium6.1
Cross-Site Scripting
Translate WordPress – Google Language Translator
<5.0.06Update to 5.0.06
CVE-2016-10870Apr 18, 2016
Medium6.1
Stored Cross-Site Scripting
Kento Post View Counter
≤2.8No patch available
CVE-2016-10981Apr 17, 2016
Medium5.4
Stored Cross-Site Scripting
leenk.me
<2.6.0Update to 2.6.0
CVE-2016-10988Apr 17, 2016
High8.8
Cross-Site Request Forgery
Kento Post View Counter
≤2.8No patch available
CVE-2016-10982Apr 17, 2016
High8.8
Cross-Site Request Forgery
leenk.me
≤2.5.0Update to 2.6.0
CVE-2016-10989Apr 16, 2016
Medium6.1
Reflected Cross-Site Scripting
Kento Post View Counter
≤2.8No patch available
CVE-2016-10980Apr 16, 2016
Medium6.1
Reflected Cross-Site Scripting
WPSOLR – Elasticsearch and Solr search
≤8.6Update to 8.7
CVE-2016-1000155Apr 12, 2016
Medium6.4
Cross-Site Scripting via Network Settings Page
WordPress
<4.5Update to 4.5
CVE-2016-6634Apr 12, 2016
Medium6.1
Reflected Cross-Site Scripting
S3 Video Plugin
≤0.983No patch available
CVE-2016-1000148Apr 12, 2016
Medium6.1
Reflected Cross-Site Scripting
MiniMax – Page Layout Builder
≤1.9.3No patch available
CVE-2016-1000141Apr 12, 2016
Medium6.1
Reflected Cross-Site Scripting
Hero Maps Pro
≤2.1.0Update to 2.2.0
CVE-2016-1000137Apr 12, 2016
Medium6.1
Reflected Cross-Site Scripting
MW Font Changer
<4.3Update to 4.3
CVE-2016-1000142Apr 12, 2016
Medium6.1
Reflected Cross-Site Scripting
Defa Online Image Protector Free Edition
≤3.4No patch available
CVE-2016-1000129Apr 12, 2016
High8.8
Cross-Site Request Forgery
WP Database Backup – Unlimited Database & Files Backup by Backup for WP
≤4.3Update to 4.3.1
CVE-2016-10876Apr 8, 2016
Critical9.8
SQL Injection
All-In-One Security (AIOS) – Security and Firewall
<4.0.7Update to 4.0.7
CVE-2016-10888Apr 6, 2016
Medium6.1
Reflected Cross-Site Scripting
Post Duplicator
≤2.16Update to 2.17
CVE-2016-15027Apr 6, 2016
Medium6.1
Cross-Site Scripting
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
<1.3.40Update to 1.3.40
CVE-2016-10872Apr 6, 2016
Medium6.1
Cross-Site Request Forgery to Cross-Site Scripting
Lightbox Plus
≤2.7.2No patch available
CVE-2016-10865Apr 5, 2016
Medium6.1
Cross-Site Scripting
WP Customer Reviews
<3.0.9Update to 3.0.9
CVE-2016-10901Apr 4, 2016
High7.2
Stored Cross-Site Scripting
WP Cerber Security, Anti-spam & Malware Scan
<2.7Update to 2.7
CVE-2016-10990Apr 1, 2016
Medium6.1
Cross-Site Scripting
ScoreMe
≤2016-04-01No patch available
CVE-2016-10993Apr 1, 2016
High7.5
Directory Traversal
Zedna eBook download
<1.2Update to 1.2
CVE-2016-10924Mar 29, 2016
Medium6.1
Unauthenticated Cross-Site Scripting
WP Favorite Posts
≤1.6.5Update to 1.6.6
CVE-2016-1160Mar 29, 2016
Medium6.1
Cross-Site Scripting
Music Store – WordPress eCommerce
≤1.0.41Update to 1.0.43
CVE-2016-10992Mar 28, 2016
High7.5
Local File Inclusion
IMDB Profile Widget
<1.0.9Update to 1.0.9
CVE-2016-10991Mar 26, 2016
High8.1
Unauthenticated Local File Inclusion
Issuu Panel
<1.6.6No patch available
CVE-2016-20101Mar 23, 2016