VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1339)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1339)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Real Estate WordPress Theme < 4.2 - Cross-Site Scripting
Zoner - Real Estate WordPress Theme<4.2Update to 4.2
CVE-2019-25742—
High7.2Stored Cross-Site Scripting
Rich Reviews by Starfish≤1.7.4Update to 1.8.0
CVE-2019-25216—
High7.2 Stored Cross Site Scripting
DELUCKS SEO≤2.1.7Update to 2.1.8
CVE-2019-25146—
High8.8Cross-Site Request Forgery to PHP Object Injection
WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings<4.1.0Update to 4.1.0
——
Medium6.1Reflected Cross-Site Scripting
WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings≤4.0.9Update to 4.1.0
——
Medium6.5Unauthenticated Settings Import/Export
Motors – Car Dealership & Classified Listings Plugin<1.4.1Update to 1.4.1
CVE-2019-17228—
Medium6.1Cross-Site Scripting
Ultimate FAQ Accordion Plugin<1.8.25Update to 1.8.25
CVE-2019-17233—
Critical9.1Unauthenticated Options Import/Export
Ultimate FAQ Accordion Plugin<1.8.25Update to 1.8.25
CVE-2019-17232—
Medium6.1Stored Cross-Site Scripting
Motors – Car Dealership & Classified Listings Plugin<1.4.1Update to 1.4.1
CVE-2019-17229—
High7.4CSV Injection
Export Users to CSV<1.4Update to 1.4
CVE-2020-9466—
High8.3Arbitrary Settings Update
Advanced AJAX Product Filters<1.3.7Update to 1.3.7
——
Medium6.1Unauthenticated Stored Cross-Site Scripting
Quiz Maker, Poll Maker & Survey Maker by Opinion Stage≤19.6.24Update to 19.6.25
——
Medium6.4Authenticated Cross-Site Scripting
Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts<2.2.9Update to 2.2.9
CVE-2019-16289—
Medium5.3Information Disclosure
Easy!Appointments≤1.3.2Update to 1.4.0
CVE-2019-14936—
High7.1Reflected Cross-Site Scripting
Human Presence – Stop Form Spam Without ReCaptcha<2.0.9Update to 2.0.9
——
Medium6.1Cross-Site Scripting via RCCWP_CreateCustomFieldPage.php custom-field-css parameter
Magic Fields≤1.7.1Update to 1.7.2
CVE-2017-18611—
Medium6.1Cross-Site Scripting
Checklist≤1.1.8Update to 1.1.9
CVE-2019-16525—
Medium6.1Stored Cross-Site Scripting
SlickQuiz≤1.3.7.1No patch available
CVE-2019-12517—
Medium6.1Cross-Site Scripting via custom-write-panel-id Parameter
Magic Fields≤1.7.1Update to 1.7.2
CVE-2017-18609—
Medium6.1Reflected Cross-Site Scripting
Groundhogg — CRM, Newsletters, and Marketing Automation≤2.0.8.1Update to 2.0.9.11
——
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
WP Server Log Viewer≤1.0No patch available
CVE-2019-25315—
Medium6.1Cross-Site Scripting via RCCWP_CreateCustomFieldPage.php custom-group-id parameter
Magic Fields≤1.7.1Update to 1.7.2
CVE-2017-18610—
High8.8Authenticated SQL Injection
SlickQuiz≤1.3.7.1No patch available
CVE-2019-12516—
Critical9.8Stored Cross-Site Scripting via Import
LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes<3.35.0Update to 3.35.0
CVE-2019-15896—
Critical9.8Unauthenticated Arbitrary File Read
Access Governance for WordPress (aka AAM)<5.9.9Update to 5.9.9
CVE-2019-25213—
Medium6.1 Cross-Site Scripting
Photo Gallery by 10Web – Mobile-Friendly Image Gallery≤1.5.34Update to 1.5.35
CVE-2019-16118—
Medium6.4Real Estate Directory <= 1.1 - Stored Cross-Site Scripting
Selio≤1.1Update to 1.1.1
——
Critical9.8Real Estate Directory <= 1.1 - SQL Injection
Selio≤1.1Update to 1.1.1
——
Medium6.4Stored Cross-Site Scripting
Reality | Estate Multipurpose WordPress Theme≤2.3.0Update to 2.4.0
——
Critical9.8SQL Injection
Photo Gallery by 10Web – Mobile-Friendly Image Gallery<1.5.35Update to 1.5.35
CVE-2019-16119—

Search VulnCrest Radar

Jump to

Are you sure?