VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1325)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1325)
SeverityVulnerabilityCVEInstallsPublished
High7.1Reflected Cross-Site Scripting
CareerUp - Job Board WordPress Theme<2.3.1Update to 2.3.1
CVE-2022-1167—
Medium6.4Stored Cross-Site Scripting
JobSearch WP Job Board≤1.5.1Update to 1.5.2
——
Medium6.1Reflected Cross-Site Scripting
JobSearch WP Job Board≤1.5.1Update to 1.5.2
——
Medium5.4Multiple Authenticated Stored Cross-Site Scripting
Testimonials Widget≤3.5.1Update to 4.0.1
CVE-2021-24136—
Medium6.1Reflected Cross-Site Scripting
JobSearch WP Job Board<1.5.3Update to 1.5.3
——
Medium6.4Stored Cross-Site Scripting
JobSearch WP Job Board≤1.5.1Update to 1.5.2
——
Medium6.4Stored Cross-Site Scripting
JobSearch WP Job Board≤1.5.1Update to 1.5.2
——
Medium6.4Authenticated Stored Cross-Site Scripting
JobSearch WP Job Board<1.5.3Update to 1.5.3
——
Medium6.1Reflected Cross-Site Scripting
InJob | Multi features for recruitment WordPress Theme≤3.4.0Update to 3.4.1
——
Medium6.1Reflected Cross-Site Scripting
Mona Lisa≤2.1.2Update to 2.1.3
——
Critical9.8SQL Injection
Payment Form for PayPal Pro<1.1.65Update to 1.1.65
CVE-2020-14092—
Medium6.1Cross-Site Scripting
Jetapo | Jobboard WordPress Theme with WooCommerce≤1.0.0Update to 1.1
——
Medium6.1Health & Medical Responsive WordPress Theme <= 1.2 - Cross-Site Scripting
CarePlus – Health & Medical Responsive WordPress Theme≤1.2No patch available
——
Medium6.1Cross-Site Scripting
WassUp Real Time Analytics≤1.9.4.4Update to 1.9.4.5
——
Medium6.4Job Board WordPress Theme <= 3.9.0 - Authenticated Stored Cross-Site Scripting
Careerfy - Job Board WordPress Theme≤3.9.0Update to 4.0.0
——
Medium6.4Job Board WordPress Theme <= 3.9.0 - Authenticated Stored Cross-Site Scripting
Careerfy - Job Board WordPress Theme≤3.9.0Update to 4.0.0
——
Medium6.1Job Board WordPress Theme <= 3.9.0 - Reflected Cross-Site Scripting
Careerfy - Job Board WordPress Theme≤3.9.0Update to 4.0.0
——
Medium6.4Job Board WordPress Theme <= 3.9.0 - Authenticated Stored Cross-Site Scripting
Careerfy - Job Board WordPress Theme≤3.9.0Update to 4.0.0
——
High8.8Cross-Site Request Forgery
Clean Login≤1.10.3Update to 1.10.4
CVE-2017-8875—
Medium6.1Reflected Cross-Site Scripting
Workup – Job Board WordPress Theme≤2.1.5Update to 2.1.6
——
Medium6.1Real Estate <= 1.7 - Reflected Cross-Site Scripting
Nexos - Real Estate WordPress Theme≤1.7Update to 1.8
——
Critical9.8Real Estate WordPress Theme <= 1.7 - SQL Injection
Nexos - Real Estate WordPress Theme≤1.7Update to 1.8
——
High8.8Insecure Direct Object Reference
Advanced Forms for ACF<1.6.9Update to 1.6.9
CVE-2021-24892—
Medium6.1Reflected Cross-Site Scripting
Page Builder: KingComposer – Free Drag and Drop page builder by King-Theme≤2.9.4Update to 2.9.5
CVE-2020-15299—
Medium6.4Authenticated Stored Cross-Site Scripting
Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode<5.1.2Update to 5.1.2
CVE-2020-15038—
Medium6.1Cross-Site Scripting
Travel Booking WordPress Theme<2.8.4Update to 2.8.4
——
Critical9.8SQL Injection
Travel Booking WordPress Theme<2.8.4Update to 2.8.4
——
Medium6.5Arbitrary Quiz Deletion via Cross-Site Request Forgery
Wp-Pro-Quiz≤0.37No patch available
CVE-2020-36504—
Medium6.1Cross-Site Scripting
YITH WooCommerce Ajax Product Filter<3.11.1Update to 3.11.1
——
Medium6.1Reflected Cross-Site Scripting
WooCommerce<4.2.1Update to 4.2.1
——

Search VulnCrest Radar

Jump to

Are you sure?