Database
WordPress Vulnerability Database (page 1332)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- High7.2Unauthenticated Stored Cross-Site Scripting via Plugin Settings Change
10Web Map Builder for Google Maps
<1.0.64Update to 1.0.64
- Medium5.4Missing Authorization to Stored Cross-Site Scripting and Settings Update
Modern Events Calendar Lite
<5.1.7Update to 5.1.7
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
Async JavaScript
<2.20.02.27Update to 2.20.02.27
- Medium6.1Unauthenticated Stored Cross-Site Scripting
WP Job Board
≤5.5.3Update to 5.6.0
- Medium6.4Stored Cross-Site Scripting
Elementor Website Builder – more than just a page builder
≤2.9.2Update to 2.9.3
- High7.2Unauthenticated Arbitrary Plugin Settings Update
Flexible Checkout Fields for WooCommerce – WooCommerce Checkout Manager
<2.3.2Update to 2.3.2
- Medium6.4Authenticated Stored Cross-Site Scripting
Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More
<1.7.7Update to 1.7.7
- High8.8Cross-Site Request Forgery to Cross-Site Scripting and Setting Changes
Pricing Table by Supsystic – Responsive Pricing Plans & Comparison Tables
≤1.8.1Update to 1.8.2
- Medium6.1Reflected Cross-Site Scripting
Hero Maps Premium
≤2.2.2Update to 2.2.3
- High7.3Missing Authorization on AJAX Actions
Pricing Table by Supsystic – Responsive Pricing Plans & Comparison Tables
≤1.8.1Update to 1.8.2
- High7.2Unauthenticated Stored Cross-Site Scripting
Pricing Table by Supsystic – Responsive Pricing Plans & Comparison Tables
≤1.8.1Update to 1.8.2
- Medium5.5Multiple Cross-Site Scripting Issues
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
≤1.5.45Update to 1.5.46
- High8.8Cross-Site Request Forgery
Indeed Membership Pro
<8.6.2Update to 8.6.2
- High8.8Cross-Site Request Forgery
Indeed Membership Pro
<8.7Update to 8.7
- High8.1Lack of Origin Validation
CardGate Payments for WooCommerce
<3.1.16Update to 3.1.16
- Medium6.4Chained Quiz <= 1.1.9 -Stored Cross-Site Scripting
Chained Quiz
≤1.1.9Update to 1.1.9.1
- Medium6.4Authenticated Stored Cross-Site Scripting
Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials
≤2.1.6Update to 2.2
- High7.2SQL Injection
WP All Import Pro
≤4.1.1Update to 4.1.2
- Medium6.1Reflected Cross Site Scripting
WP All Import Pro
<4.1.1Update to 4.1.1
- Medium6.3Missing Authorization and Cross-Site Request Forgery Checks
WP All Import Pro
≤4.1.1Update to 4.1.2
- Medium6.4Authenticated Stored Cross-Site Scripting
Modula Image Gallery – Photo Grid & Video Gallery
<2.2.5Update to 2.2.5
- Medium6.4Stored Cross-Site Scripting
WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More
<1.5.9Update to 1.5.9
- High8.8Cross-Site Request Forgery
Easy Property Listings
<3.4Update to 3.4
- Critical9.8Improper Access Control to Privilege Escalation
wpCentral
≤1.5.0Update to 1.5.1
- High7.1Reflected Cross-Site Scripting
Fruitful
<3.8.1Update to 3.8.1
- Critical9.91.6.1 - Authorization Bypass to Site Reset
Starter Templates & Sites Pack by ThemeGrill
1.3.4 – 1.6.1Update to 1.6.2
- Critical9.82.6.7.6 - PHP Object Injection
Popup Builder – Create highly converting, mobile friendly marketing popups.
2.2.8 – 2.6.7.6Update to 3.0
- High8.1Custom Registration Forms, User Registration and User Login Plugin <= 4.6.0.2 - SQL Injection
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
<4.6.0.3Update to 4.6.0.3
- Critical9.8Privilege Escalation
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
<3.1.1Update to 3.1.1
- Critical9.8Authentication Bypass
ManageWP Worker
≤4.9.2Update to 4.9.3