VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1345)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1345)
SeverityVulnerabilityCVEInstallsPublished
Medium6.4Stored Cross-Site Scripting
LiveChat – Live Chat Plugin for WP Websites≤3.7.3Update to 3.7.4
——
Critical9.8SQL Injection
Author Chat≤1.9.0Update to 2.0.0
——
Medium6.1Cross-Site Scripting
Limb Gallery | Create Beautiful Image & Video Galleries<1.4.0Update to 1.4.0
CVE-2019-14790—
High8.8Cross-Site Request Forgery
Easy Google Adsense and Banner Ads Manager – AdsforWP≤1.8Update to 1.9
——
High7.2Stored Cross-Site Scripting
Live Chat Unlimited≤2.8.3Update to 2.8.4
——
Medium5.4Authenticated Stored Cross-Site Scripting
WebP Express<0.14.11Update to 0.14.11
CVE-2019-15837—
High7.2Stored Cross-Site Scripting
Intelligent WordPress Live Chat Support Plugin | Utilities≤1.0.4No patch available
——
Medium6.1Reflected Cross-Site Scripting
Custom 404 Pro<3.2.9Update to 3.2.9
CVE-2019-14789—
Medium6.1Cross-Site Request Forgery and Stored Cross-Site Scripting
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin≤2.0.51Update to 2.0.52
CVE-2019-14946—
Medium5.4Cross-Site Request Forgery and Stored Cross-Site Scripting
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin≤2.0.51Update to 2.0.52
CVE-2019-14947—
Medium6.1Reflected Cross-Site Scripting
Custom 404 Pro<3.2.8Update to 3.2.8
CVE-2019-15838—
High8.8Cross-site Request Forgery
Custom CSS Pro≤1.0.3Update to 1.0.4
CVE-2019-5984—
Medium5.7Cross-Site Request Forgery
Admin renamer extended≤3.2.1No patch available
CVE-2019-14680—
High8.8Cross-Site Request Forgery
HTML5 Maps≤1.6.5.6Update to 1.6.5.7
CVE-2019-5983—
Medium5.4Cross-Site Scripting
CP Contact Form with PayPal<1.3.02Update to 1.3.02
CVE-2019-14785—
Medium6.1Cross-Site Scripting
CP Contact Form with PayPal≤1.3.01Update to 1.3.02
CVE-2019-14784—
High8.8Cross-Site Request Forgery
Deny All Firewall≤1.1.6Update to 1.1.7
CVE-2019-14681—
Medium6.3Cross-Site Request Forgery leading to attachment deletion & Path Traversal
Import and export users and customers≤1.14.1.3Update to 1.14.2.2
CVE-2019-14683—
Medium6.4Cross-Site Scripting
Photospace Responsive Gallery≤1.1.7Update to 1.1.8
——
Medium6.5Authenticated Settings Reset via reset-cmb Parameter
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings<1.0.27.1Update to 1.0.27.1
CVE-2019-14786—
High7.5Directory Traversal
Import and export users and customers≤1.14.2.1Update to 1.14.2.2
CVE-2019-15326—
Medium6.1Cross-Site Scripting
Import and export users and customers≤1.14.1.2Update to 1.14.1.3
CVE-2019-15327—
Critical9.8Local File Inclusion
Sina Extension for Elementor<2.2.1Update to 2.2.1
CVE-2019-15839—
High7.2Unauthenticated Stored Cross-Site Scripting via track_link
PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links<2.1.10Update to 2.1.10
CVE-2019-25147—
High8.8Cross-Site Request Forgery
GoHero Store Customizer for WooCommerce≤2.4Update to 2.5
CVE-2019-5979—
High7.2Cross-Site Scripting
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings≤1.0.26Update to 1.0.27
——
High8.8Cross-Site Request Forgery allowing Option Update
Meta for WooCommerce≤1.9.12Update to 1.9.15
CVE-2019-15841—
Medium6.1Cross-Site Scripting
Cookieless Backend Server Tracking for Google Analytics – WordPress Plugin<1.2.1Update to 1.2.1
——
High8.8Authorization Bypass
Dropshix<4.0.14Update to 4.0.14
——
High8.8Cross-Site Request Forgery
Meta for WooCommerce≤1.9.12Update to 1.9.15
CVE-2019-15840—

Search VulnCrest Radar

Jump to

Are you sure?