VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1350)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software
Active filters:Clear all

41,241 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1350)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Multiple Cross-Site Scripting
WP Super Cache≤1.3Update to 1.3.1
CVE-2013-2008—
Critical9.8Unrestricted File Upload
gravity-file-ajax-upload-free≤1.1No patch available
CVE-2014-4972—
Critical9.8Remote File Inclusion
WP-Table≤1.43Update to 1.44
CVE-2007-2484—
Medium6.1Cross-Site Scripting
Events Manager – Calendar, Bookings, Tickets, Appointments and more!<5.3.9Update to 5.3.9
CVE-2013-7479—
Medium6.1Reflected Cross-Site Scripting
Platinum SEO≤1.3.7Update to 1.3.8
CVE-2013-5918—
Medium6.1Cross-Site Request Forgery to Cross-Site Scripting
Dropdown Menu Widget≤1.9.7No patch available
CVE-2013-2704—
Medium4.7Cross-Site Request Forgery
Simple Shopping Cart<3.6Update to 3.6
CVE-2013-2705—
High8.8SQL Injection
Mingle Forum≤1.0.32.1Update to 1.0.33
CVE-2012-5327—
Medium4.3Cross-Site Request Forgery
WordPress Related Posts<2.7.2Update to 2.7.2
CVE-2013-3476—
Medium5.3Reflected Cross-Site Scripting
Verification Code for Comments≤2.1.0No patch available
CVE-2014-4565—
Medium6.1Cross-Site Scripting
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio≤2.71Update to 2.72
CVE-2013-3261—
Medium6.1Multiple Cross-Site Scripting
Pie Register – User Registration, Profiles & Content Restriction≤1.30Update to 1.31
CVE-2013-4954—
High7.5Local File Inclusion
WP AmASIN – The Amazon Affiliate Shop≤0.9.6Update to 0.9.7
CVE-2014-4577—
Medium6.1Reflected Cross-Site Scripting
DZS Video Gallery<7.95Update to 7.95
CVE-2014-3923—
Medium6.1Cross-Site Scripting
Yoast Duplicate Post≤2.6Update to 3.0
CVE-2014-10378—
Medium6.1Cross-Site Scripting
Count per Day≤3.1Update to 3.1.1
CVE-2012-0895—
Critical9.8Remote Code Execution
W3 Total Cache≤0.9.2.8Update to 0.9.2.9
CVE-2013-2010—
Medium6.1Multiple Cross-Site Scripting
Events Manager – Calendar, Bookings, Tickets, Appointments and more!≤5.5.1Update to 5.5.2
CVE-2013-7477—
Medium6.1Cross-Site Scripting
Crowdsignal Dashboard – Polls, Surveys & more≤2.0.24Update to 2.0.25
CVE-2014-4856—
Medium6.1Cross-Site Scripting
WP-Table Reloaded≤1.9.3Update to 1.9.4
CVE-2013-1463—
Medium6.1Reflected Cross-Site Scripting
WPCB≤2.4.8No patch available
CVE-2014-4581—
High8.8Cross-Site Request Forgery to Cross-Site Scripting
Contextual Related Posts≤1.8.6Update to 1.8.7
CVE-2013-2710—
Medium6.1Cross-Site Scripting
HK Exif Tags≤1.11Update to 1.12
CVE-2014-100007—
Medium5.3Cross-Site Scripting
Adminimize<1.7.22Update to 1.7.22
CVE-2011-5128—
Medium6.1Cross-Site Scripting
WP Construction Mode≤1.8Update to 1.9
CVE-2014-4854—
Critical9.8Local/Remote File Inclusion
SlideDeck 2 Lite Responsive Content Slider≤2.3.3Update to 2.3.5
CVE-2013-7483—
High8.8Cross-Site Request Forgery
underConstruction<1.09Update to 1.09
CVE-2013-2699—
Medium6.1Multiple Cross-Site Scripting
Uploader≤1.0.4No patch available
CVE-2013-2287—
Medium6.1Unauthenticated Stored Cross-Site Scripting
Mail Subscribe List≤2.0.9Update to 2.1
CVE-2013-10026—
High8.8Cross-Site Request Forgery
sexybookmarks≤6.1.4.0Update to 6.1.5.0
CVE-2013-3256—

Search VulnCrest Radar

Jump to

Are you sure?