VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1344)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1344)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Cross-Site Request Forgery to Cross-Site Scripting
WP Go Maps – Google Map, OpenStreetMap, Leaflet & Store Locator<7.11.35Update to 7.11.35
CVE-2019-14792—
Medium5.3Missing Authorization
WP Like Button<1.6.1Update to 1.6.1
CVE-2019-13344—
Medium6.1Reflected Cross-Site Scripting
Gallery PhotoBlocks≤1.1.40Update to 1.1.41
——
Medium6.1Cross-Site Scripting
Appointment Booking Calendar<1.3.19Update to 1.3.19
CVE-2019-14791—
High8.8Cross-Site Request Forgery
Visitor Traffic Real Time Statistics≤1.13Update to 1.14
CVE-2019-15832—
High7.5Unauthenticated Options update and CSS injection
Ocean Extra≤1.5.8Update to 1.5.9
CVE-2019-16250—
Medium6.1Reflected Cross-Site Scripting
Simple Mail Address Encoder<1.7Update to 1.7
CVE-2019-15833—
High8.8Cross-Site Request Forgery
Visitor Traffic Real Time Statistics≤1.12Update to 1.13
CVE-2019-15831—
High7.2Reflected Cross-Site Scripting
MyBookTable Bookstore by Stormhill Media≤3.2.2Update to 3.2.3
——
Critical9.8SQL Injection
Pie Register – User Registration, Profiles & Content Restriction<3.1.2Update to 3.1.2
CVE-2019-15659—
Medium6.1Cross-Site Scripting
Feed Them Gallery≤1.1.8Update to 1.1.9
——
High8.8Cross-Site Request Forgery to Stored Cross-Site Scripting
WooCommerce<3.6.5Update to 3.6.5
——
Medium6.5Directory Traversal
Insert or Embed Articulate Content into WordPress<4.29991Update to 4.29991
CVE-2019-15648—
High7.2Missing File Type Validation
WooCommerce≤3.6.4Update to 3.6.5
——
High8.8Directory Traversal
Newsletters<4.6.19Update to 4.6.19
CVE-2019-14788—
Medium5.4Cross-Site Scripting via contentarea Parameter
Newsletters<4.6.19Update to 4.6.19
CVE-2019-14787—
High8.8SQL Injection
Server Status by Hostname/IP≤4.6Update to 5.0
CVE-2019-12570—
Critical9.8Unauthenticated Blind SQL Injection
WP Statistics – Simple, privacy-friendly Google Analytics alternative≤12.6.6.1Update to 12.6.7
CVE-2019-13275—
High8.8Cross-Site Request Forgery
Widget Logic<5.10.2Update to 5.10.2
CVE-2019-12826—
Critical9.8Code Injection
Easy Forms for Mailchimp<6.5.3Update to 6.5.3
CVE-2019-15318—
High7.2Unauthenticated Stored Cross-Site Scripting via IP Manipulation
WP Statistics – Simple, privacy-friendly Google Analytics alternative≤12.6.6.1Update to 12.6.7
——
Medium6.1 Reflected Cross-Site Scripting
Essential Real Estate<1.7.2Update to 1.7.2
——
Medium6.1Cross-Site Scripting
Easy restaurant menu manager≤1.1.2Update to 1.2
CVE-2019-15842—
High7.13.1.2.5 - Reflected Cross-Site Scripting
Watu Quiz3.1.2.1 – 3.1.2.5Update to 3.1.2.6
——
High8.8Cross-Site Request Forgery
ACF: Better Search<3.3.1Update to 3.3.1
CVE-2019-14682—
High8.8Cross-Site Request Forgery
WP Better Permalinks<3.0.5Update to 3.0.5
CVE-2019-15835—
High8.8Cross-Site Request Forgery
Block wp-login≤1.3.0Update to 1.3.2
——
Medium6.1Reflected Cross-Site Scripting
360 Product Rotation<1.4.8Update to 1.4.8
CVE-2019-15082—
High8.8Cross-Site Request Forgery
Converter for Media – Optimize images | Convert WebP & AVIF≤1.0.2Update to 1.0.3
CVE-2019-15834—
Medium5.4Stored Cross-Site Scripting
WP Ultimate Recipe<3.12.7Update to 3.12.7
CVE-2019-15836—

Search VulnCrest Radar

Jump to

Are you sure?