Database
WordPress Vulnerability Database (page 1325)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- High7.5Arbitrary File Download
Memphis Documents Library
≤3.1.5Update to 3.1.6
- Critical9.8Local File Inclusion
A/B Test for WordPress
≤1.0.7No patch available
- High8.8Cross-Site Request Forgery via wp_ajax_wp_compression_test
WordPress
<4.5Update to 4.5
- High8.8Cross-Site Request Forgery & Arbitrary File Upload
Beauty & Clean
≤1.0.8No patch available
- Medium6.1Cross-Site Scripting
Ocim MP3
all versionsNo patch available
- Medium6.1Reflected Cross-Site Scripting
Shibboleth
≤1.6Update to 1.7
- Medium6.1Reflected Cross-Site Scripting
Goodnews – Responsive WordPress News/Magazine | News / Editorial
≤5.11.1No patch available
- Medium6.1Reflected Cross-Site Scripting
Forget About Shortcode Buttons
≤1.1.1Update to 1.1.2
- Critical9.8SQL Injection
Export All Posts, Products, Orders & Users | WP Ultimate Exporter | WordPress CSV Export
≤1.1Update to 1.2
- Medium6.1Cross-Site Scripting
All-In-One Security (AIOS) – Security and Firewall
<4.0.6Update to 4.0.6
- Medium6.1Cross-Site Scripting
All-In-One Security (AIOS) – Security and Firewall
<4.0.5Update to 4.0.5
- High8.8Privilege Escalation
Divi Extra
≤1.2.3Update to 1.2.4
- High8.8Sensitive Information Disclosure
Bloom Email Opt-In
<1.1.0Update to 1.1.1
- High8.8Privilege Escalation
Bloom Email Opt-In
≤1.1.0Update to 1.1.1
- High7.2Multiple Vulnerabilities
mb.miniAudioPlayer – an HTML5 audio player for your mp3 files
≤1.7.6No patch available
- Critical9.8Missing Authorization
Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers
<1.8.4Update to 1.8.4
- High7.2Reflected Cross-Site Scripting
User Submitted Posts – Enable Users to Submit Posts from the Front End
<20160215Update to 20160215
- High8.8Privilege Escalation
Store Toolkit – WooCommerce Extensions, Quick Enhancements & Handy Tools
≤1.5.7Update to 1.5.8
- Medium6.1Reflected Cross-Site Scripting
PhotoXhibit
≤2.1.8No patch available
- Medium6.1Reflected Cross-Site Scripting
ajax-random-post
≤2.00No patch available
- Medium6.1Reflected Cross-Site Scripting
new-year-firework
≤1.1.9No patch available
- Medium6.1Reflected Cross-Site Scripting via title_az parameter
E-Search
≤1.0No patch available
- Medium6.1Reflected Cross-Site Scripting
Pondol Form to Mail
≤1.1No patch available
- Medium6.1Reflected Cross-Site Scripting
heat-trackr
<1.01Update to 1.01
- Medium6.1Reflected Cross-Site Scripting
Admin Font Editor
<1.8Update to 1.8
- Medium6.1Reflected Cross-Site Scripting
anti-plagiarism
≤3.60No patch available
- Medium6.1Reflected Cross-Site Scripting
Simplified Content
<1.0.1Update to 1.0.1
- Medium6.1Cross-Site Scripting
Recipes Writer
≤1.0.4No patch available
- Medium6.1Cross-Site Scripting
Easy Contact Form Builder
≤1.0Update to 1.1
- High8.8Missing Authorization
Store Toolkit – WooCommerce Extensions, Quick Enhancements & Handy Tools
≤1.5.6Update to 1.5.7