VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1348)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1348)
SeverityVulnerabilityCVEInstallsPublished
Medium5.5Admin+ Stored Cross-Site Scripting
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin<2.0.46Update to 2.0.46
——
Critical9.4Arbitrary File Deletion/Read
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin≤2.0.45Update to 2.0.46
——
Medium5.4Authenticated Cross-Site Scripting
Photo Gallery by 10Web – Mobile-Friendly Image Gallery≤1.5.22Update to 1.5.23
CVE-2019-14797—
Medium6.4Low-Privileged Stored Cross-Site Scripting
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin≤2.0.45Update to 2.0.46
——
High7.5Unauthenticated Arbitrary File Read
diarise≤1.5.9No patch available
CVE-2019-25779—
High8.8Authenticated SQL Injection
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder<1.13.3Update to 1.13.3
CVE-2019-10866—
Medium5.3Unauthenticated Comment Creation
WPGraphQL≤0.2.3Update to 0.3.0
CVE-2019-9881—
Medium5.4Authenticated Cross-Site Scripting
Custom Field Suite≤2.5.14Update to 2.5.15
CVE-2019-11871—
Critical9.8Administrative User Creation
WPGraphQL≤0.2.3Update to 0.3.0
CVE-2019-9879—
Medium6.1Cross-Site Scripting
Ultimate FAQ Accordion Plugin<1.8.22Update to 1.8.22
CVE-2019-15643—
High7.5Information Exposure
Gravity Forms≤2.4.8Update to 2.4.9
CVE-2020-13764—
Critical9.1Information Exposure
WPGraphQL≤0.2.3Update to 0.3.0
CVE-2019-9880—
Critical9.8PHP Object Injection
Virim≤0.4No patch available
CVE-2019-12240—
Medium4.3Improper Input Validation via openssl_verify
W3 Total Cache≤0.9.7.3Update to 0.9.7.4
——
Medium6.1Reflected Cross-Site Scripting
W3 Total Cache≤0.9.7.3Update to 0.9.7.4
——
Critical9.8Arbitrary File Upload
wp-live-chat-support-pro≤8.0.26Update to 8.0.27
CVE-2019-11185—
High7.5Sensitive Information Disclosure
WP Backup+≤2018-11-22No patch available
CVE-2018-19456—
Critical9.8PHP Object Injection
Carts Guru≤1.4.5Update to 1.4.6
CVE-2019-12241—
Medium6.4Cross-Site Scripting
Travel Booking WordPress Theme<2.7.8.4Update to 2.7.8.4
——
Medium6.4Cross-Site Scripting
Timely All-in-One Events Calendar≤2.5.38Update to 2.5.39
——
Medium6.1Reflected Cross-Site Scripting
Blog2Social: Social Media Auto Post & Scheduler<5.0.3Update to 5.0.3
CVE-2019-9576—
Critical9.8Unauthenticated Arbitrary File Upload
User Submitted Posts – Enable Users to Submit Posts from the Front End<20190426Update to 20190426
CVE-2019-25138—
High7.2Cross-Site Scripting
Advanced Woo Search – Product Search for WooCommerce≤1.68Update to 1.70
——
High7.2Unauthenticated Stored Cross-Site Scripting
Blog Designer≤1.8.10Update to 1.8.12
——
Medium6.1Unauthenticated Cross-Site Scripting
My Calendar – Accessible Event Manager≤3.1.9Update to 3.1.10
CVE-2019-15713—
Critical9.8SQL Injection
RSVPMaker≤6.1.9Update to 6.2
CVE-2019-15646—
Critical9.8Server-Side Request Forgery
Print My Blog – Print, PDF, & eBook Converter WordPress Plugin≤1.6.6Update to 1.6.7
CVE-2019-11565—
High7.5Unauthenticated Arbitrary Media Deletion
Checkout Field Manager (Checkout Manager) for WooCommerce≤4.2.6Update to 4.3
CVE-2019-11807—
Medium6.4Stored Cross-Site Scripting
JobCareer | Job Board Responsive WordPress Theme<2.5.1Update to 2.5.1
CVE-2019-15869—
Critical9.8Unauthenticated OS Command Injection
WP Database Backup – Unlimited Database & Files Backup by Backup for WP<5.2Update to 5.2
CVE-2019-25224—

Search VulnCrest Radar

Jump to

Are you sure?