VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1356)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1356)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Reflected Cross-Site Scripting
Arigato Autoresponder and Newsletter≤2.5.1.8Update to 2.5.1.9
CVE-2018-1002004—
Medium6.1Reflected Cross-Site Scripting
Arigato Autoresponder and Newsletter≤2.5.1.8Update to 2.5.1.9
CVE-2018-1002008—
Medium4.8Cross-Site Scripting
Arigato Autoresponder and Newsletter≤2.5.1.8Update to 2.5.1.9
CVE-2018-1002006—
Medium6.1Reflected Cross-Site Scripting
Arigato Autoresponder and Newsletter≤2.5.1.8Update to 2.5.1.9
CVE-2018-1002003—
Medium6.1Reflected Cross-Site Scripting
Arigato Autoresponder and Newsletter≤2.5.1.8Update to 2.5.1.9
CVE-2018-1002009—
Medium6.4Stored Cross-Site Scripting
WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More<1.4.8Update to 1.4.8
——
Medium6.1Reflected Cross-Site Scripting
Arigato Autoresponder and Newsletter≤2.5.1.8Update to 2.5.1.9
CVE-2018-1002002—
Medium6.1Stored Cross-Site Scripting
File Manager≤3.0Update to 3.1
CVE-2018-169671M+
High8.8Cross-Site Request Forgery
File Manager≤3.0Update to 3.1
CVE-2018-169661M+
Critical9.8Unauthenticated Arbitrary File Upload/Download
File Manager≤3.0Update to 3.1
CVE-2018-251051M+
Medium5.3 Sensitive Information Exposure
Unyson≤2.7.18Update to 2.7.19
——
High7.2Cross-Site Scripting
I Recommend This – Love/Like Button for WordPress Posts<3.8.2Update to 3.8.2
——
Critical9.8Privilege Escalation
UserPro - Community and User Profile WordPress Plugin<4.9.28Update to 4.9.28
——
Critical9.8Privilege Escalation
wpForo Forum≤1.5.1Update to 1.5.2
CVE-2018-16613—
Medium6.1Reflected Cross-Site Scripting
File Manager<3.0Update to 3.0
CVE-2018-163631M+
High7.5PHAR Unserialization
WordPress≤5.0Update to 3.7.28 or 3.8.28 or 3.9.26 or 4.0.25 or 4.1.25 or 4.2.22 or 4.3.18 or 4.4.17 or 4.5.16 or 4.6.13 or 4.7.12 or 4.8.8 or 4.9.9 or 5.0.1
CVE-2018-1000773—
Medium6.3Authorization Bypass
Contact Form 7<5.0.4Update to 5.0.4
CVE-2018-20979—
High7.5Provider and Business Listing Theme < 3.2 - Path Traversal
Service Finder - Provider and Business Listing WordPress Theme<3.2Update to 3.2
——
Medium6.1Unauthenticated Cross-Site Scripting
UserPro - Community and User Profile WordPress Plugin≤4.9.23Update to 4.9.24
CVE-2018-16285—
Medium6.6Authenticated PHP Object Injection
WooCommerce<3.4.5Update to 3.4.5
——
Critical9.8Sensitive Information Disclosure leading to Remote Code Execution
Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More≤1.2.40Update to 1.2.42
CVE-2018-172071M+
Medium6.4Authenticated Stored Cross-Site Scripting
Jibu Pro≤1.7No patch available
CVE-2018-17138—
Medium6.4Authenticated Stored Cross-Site Scripting
Quizlord≤2.0No patch available
CVE-2018-17140—
High8.3Cross-Site Scripting
Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder<3.3.14Update to 3.3.14
——
Medium5.3CAPTCHA Reuse
Ajax BootModal Login≤1.4.3No patch available
CVE-2018-15876—
Critical9.8SQL Injection
Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported)<4.1.8Update to 4.1.8
CVE-2018-16159—
High8.8Remote Command Injection
Plainview Activity Monitor<20180826Update to 20180826
CVE-2018-15877—
High7.3CSV Injection
Export and Import Users and Customers<1.3.2Update to 1.3.2
CVE-2019-15092—
High8.6CSV Injection
Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder≤3.3.13Update to 3.3.14
CVE-2018-16308—
Medium6.1Cross-Site Scripting
Supreme Directory<1.1.9Update to 1.1.9
——

Search VulnCrest Radar

Jump to

Are you sure?