VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1355)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1355)
SeverityVulnerabilityCVEInstallsPublished
High7.5Unauthenticated Arbitrary File Deletion via Path Traversal
ARforms<3.5.2Update to 3.5.2
CVE-2018-15818—
Medium6.4Cross-Site Scripting
Support Board<1.2.4Update to 1.2.4
CVE-2018-18373—
Critical9.8Arbitrary File Upload
Tajer≤1.0.5No patch available
CVE-2018-9206—
High8.8SQL Injection
Image Intense≤3.2.5Update to 3.2.6
——
Medium6.1Cross-Site Scripting via rules[0][content] parameter
WP Fastest Cache – WordPress Cache Plugin≤0.8.8.5Update to 0.8.8.6
CVE-2018-17586—
Medium6.1Cross-Site Scripting via the rules[0][content] parameter in a wpfc_save_exclude_pages action
WP Fastest Cache – WordPress Cache Plugin≤0.8.8.5Update to 0.8.8.6
CVE-2018-17583—
High8.8Cross-Site Request Forgery via page to wpfastestcacheoptions
WP Fastest Cache – WordPress Cache Plugin≤0.8.8.5Update to 0.8.8.6
CVE-2018-17584—
Medium6.1Cross-Site Scripting via wpFastestCachePage options, wpFastestCachePreload_number or wpFastestCacheLanguage parameter
WP Fastest Cache – WordPress Cache Plugin≤0.8.8.5Update to 0.8.8.6
CVE-2018-17585—
High7.2Unauthenticated Stored Cross-Site Scripting
WPML Multilingual CMS≤3.6.3Update to 4.0
CVE-2018-18069—
Medium6.1Multiple Cross-Site Scripting vulnerabilities
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin≤2.0.27Update to 2.0.28
CVE-2018-17866—
High7.2SQL Injection
Slideshow Gallery LITE≤1.6.8Update to 1.6.9
CVE-2018-18018—
Medium6.1Cross-Site Scripting
Slideshow Gallery LITE≤1.6.8Update to 1.6.9
CVE-2018-18017—
Medium6.1Cross-Site Scripting
Slideshow Gallery LITE≤1.6.8Update to 1.6.9
CVE-2018-18019—
High8.8Cross-Site Request Forgery
Companion Auto Update<3.2.1Update to 3.2.1
CVE-2018-20972—
Medium4.7Reflected Cross-Site Scripting and Information Disclosure
Wordfence Security – Firewall, Malware Scan, and Login Security<7.1.14Update to 7.1.14
——
Critical9.8Local File Inclusion
Companion Auto Update<3.2.1Update to 3.2.1
CVE-2018-20973—
Critical9.8Arbitrary File Upload
Wp-Insert≤2.4.2Update to 2.4.3
CVE-2018-17573—
High7.5Firewall Bypass
WebARX≤1.3.0No patch available
CVE-2019-17214—
Medium6.1Stored Cross-Site Scripting
WebARX≤1.3.0No patch available
CVE-2019-17213—
Medium5.3Sensitive Data Exposure
Breadcrumb NavXT≤6.1.0Update to 6.2.0
——
Medium6.1Reflected Cross-Site Scripting
FV Flowplayer Video Player≤7.2.0.727Update to 7.2.1.727
——
High7.4PHP Object Injection
Blog2Social: Social Media Auto Post & Scheduler<5.0.1Update to 5.0.1
——
High7.5Directory Traversal
Localize My Post≤1.0No patch available
CVE-2018-16299—
Medium6.4Unspecified Cross-Site Scripting
WP Mail SMTP by WPForms – SMTP for Reliable Email Delivery with Gmail, Outlook, Amazon SES, Brevo, Other SMTP & More<1.4.0Update to 1.4.0
——
Critical9.8Directory Traversal
微信群发助手-Wechat Broadcast≤1.2.0No patch available
CVE-2018-16283—
Medium6.4Stored Cross-Site Scripting
MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)≤7.1Update to 7.2.0
——
Medium6.1Reflected Cross-Site Scripting
Arigato Autoresponder and Newsletter≤2.5.1.8Update to 2.5.1.9
CVE-2018-1002007—
Medium6.1Reflected Cross-Site Scripting
Arigato Autoresponder and Newsletter≤2.5.1.8Update to 2.5.1.9
CVE-2018-1002004—
Medium6.1Reflected Cross-Site Scripting
Arigato Autoresponder and Newsletter≤2.5.1.8Update to 2.5.1.9
CVE-2018-1002002—
Medium6.1Reflected Cross-Site Scripting
Arigato Autoresponder and Newsletter≤2.5.1.8Update to 2.5.1.9
CVE-2018-1002009—

Search VulnCrest Radar

Jump to

Are you sure?