VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1352)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software
Active filters:Clear all

41,241 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1352)
SeverityVulnerabilityCVEInstallsPublished
High7.2Cross-Site Scripting
Wordfence Security – Firewall, Malware Scan, and Login Security≤5.1.3Update to 5.1.4
CVE-2014-4664—
Medium6.1Reflected Cross-Site Scripting
WhyDoWork AdSense≤1.2No patch available
CVE-2014-9100—
High8.8Cross-Site Request Forgery
WhyDoWork AdSense≤1.2No patch available
CVE-2014-9099—
Critical9.8SQL Injection
fbgorillaall versionsNo patch available
CVE-2014-5200—
Critical9.8SQL Injection
Lead-Octopus-Power<1.1.1Update to 1.1.1
CVE-2014-5189—
Medium5.4Cross-Site Scripting
WORDPRESS VIDEO GALLERY≤2.5Update to 2.6
CVE-2014-9098—
Critical9.8SQL Injection
WORDPRESS VIDEO GALLERY<2.6Update to 2.6
CVE-2014-9097—
Medium5.3Information Disclosure
WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps<2.0.2Update to 2.0.2
CVE-2014-5337—
Medium6.1JavaScript Code Injection
3CX Free Live Chat, Calls & Messaging<4.1.0Update to 4.1.0
CVE-2014-10386—
Critical9.8Arbitrary Command Execution
WordPress Flash Uploader<3.1.3Update to 3.1.3
CVE-2014-5014—
Medium6.1Cross-Site Scripting
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor<1.1.66Update to 1.1.66
CVE-2014-10380—
High7.5Sensitive Information Disclosure
WP BackItUp Community Edition≤1.9Update to 1.9.1
CVE-2014-9012—
Medium6.1Cross-Site Scrpting
Compfight<1.5Update to 1.5
CVE-2014-8622—
Medium6.1Reflected Cross-Site Scripting
Compfight≤1.4Update to 1.5
CVE-2014-5202—
Medium6.1Reflected Cross-Site Scripting
Blogroll Fun – Show Last Post and Last Update Time<0.8.5Update to 0.8.5
CVE-2014-125132—
Medium6.1Cross-Site Scripting
WP Snap App≤1.5No patch available
CVE-2014-4596—
High7.1Cross-Site Scripting
yahoo-updates-for-wordpress≤1.0No patch available
CVE-2014-4603—
Medium6.1Multiple Cross-Site Scripting
wp-guestmap≤1.8No patch available
CVE-2014-4587—
Medium6.1Cross-Site Scripting
vn-calendar≤1.0No patch available
CVE-2014-4571—
High7.2Cross-Site Scripting
anyfont≤2.2.3No patch available
CVE-2014-4515—
Medium6.1Cross-Site Scripting
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP<4.27.4Update to 4.27.4
CVE-2014-4569—
High8.8Local File Inclusion
Theme My Login<6.3.10Update to 6.3.10
CVE-2014-5155—
High7.1Cross-Site Scripting
Random Banner<2.0Update to 2.0
CVE-2014-4847—
High7.1Cross-Site Scripting
Custom Banners<2.1Update to 2.1
CVE-2014-4724—
High8.8Cross-Site Request Forgery to Cross-Site Scripting
Blogstand Banner≤1.0No patch available
CVE-2014-4848—
High7.1Cross-Site Scripting
Easy Banners≤1.4No patch available
CVE-2014-4723—
High8.8Cross-Site Request Forgery
Simple Share Buttons Adder≤4.4Update to 4.5
CVE-2014-4717—
Critical9.8Remote Code Execution
Ajax Search Lite – Live Search & Filter<3.11Update to 3.11
CVE-2014-4663—
Medium6.1Reflected Cross-Site Scripting
Ruven Toolkit≤2.0No patch available
CVE-2014-4548—
Medium6.1Reflected Cross-Site Scripting
VideoWhisper Video Presentation≤3.25Update to 3.31
CVE-2014-4570—

Search VulnCrest Radar

Jump to

Are you sure?