VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1361)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

WordPress Vulnerability Database (page 1361)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Cross-Site Scripting
Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder<3.2.14Update to 3.2.14
CVE-2018-7280—
Critical9.8Arbitrary File Upload
Deep Blue≤1.9.2No patch available
——
High8.3Authentication Bypass
MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites<3.4.5Update to 3.4.5
——
Medium6.1Cross-Site Scripting
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin≤2.0Update to 2.0.4
CVE-2018-6944—
Medium4.8Cross-Site Scripting via image alt and title text
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery≤2.2.44Update to 2.2.45
CVE-2018-1000172—
Medium6.1Cross-Site Scripting
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin<2.0.4Update to 2.0.4
CVE-2018-6943—
High8.8Cross-Site Request Forgery
Church Admin<1.2550Update to 1.2550
CVE-2018-20971—
High7.2Cross-Site Scripting
Online Scheduling and Appointment Booking System – Bookly≤14.5Update to 14.6
CVE-2018-6891—
Critical9.8App Showcase & App Store WordPress Theme < 1.2.1 - Missing Authorization to Arbitrary Options Update
Swape - App Showcase & App Store WordPress Theme<1.2.1Update to 1.2.1
CVE-2018-21013—
Medium4.8Cross-Site Scripting via flickrRSS_set
flickrRSS≤5.3.1No patch available
CVE-2018-6466—
Medium4.8Cross-Site Scripting via flickrRSS_tags
flickrRSS≤5.3.1No patch available
CVE-2018-6469—
Medium4.8Cross-Site Scripting via flickrRSS_id
flickrRSS≤5.3.1No patch available
CVE-2018-6468—
Medium4.3Cross-Site Request Forgery
flickrRSS≤5.3.1No patch available
CVE-2018-6467—
High7.5Denial of Service
WordPress<5.0Update to 5.0
CVE-2018-6389—
Medium6.1Cross-Site Scripting
Property Hive<1.4.15Update to 1.4.15
CVE-2018-6465—
Critical9.8SQL Injection
Image Slider≤1.1.95Update to 1.1.97
——
Critical9.8SQL Injection
User Control≤2.1.0No patch available
——
Medium6.1Reflected Cross-Site Scripting
WP Ultimate CSV Importer – WordPress CSV, XML & Excel Import Export<3.8.8Update to 3.8.8
——
Medium6.1Cross-Site Scripting
Splashing Images<2.1.1Update to 2.1.1
CVE-2018-6194—
High8.8PHP Object Injection
Splashing Images≤2.1Update to 2.1.1
CVE-2018-6195—
High8.8Missing Authorization Checks
Health Check & Troubleshooting≤1.2.3Update to 1.2.4
——
High7.5Unauthenticated Subscriber Download
Email Subscribers & Newsletters by Icegram Express – Email Marketing, Post Notifications & WooCommerce Marekting Automation for WordPress≤3.4.7Update to 3.4.8
CVE-2018-6015—
Medium5.5Stored Cross-Site Scripting
Coming Soon Page – Responsive Coming Soon & Maintenance Mode<1.1.19Update to 1.1.19
CVE-2018-5657—
High7.2Unauthenticated Server Side Request Forgery
Google Forms<0.92Update to 0.92
——
Medium5.3Responsive Multi-Purpose Theme < 4.2.1 - Information Exposure
enfold<4.2.1Update to 4.2.1
——
Medium6.1Cross-Site Scripting
Soundy Audio Playlist≤4.6No patch available
CVE-2018-6001—
Medium6.1Reflected Cross-Site Scripting
Smash Balloon Social Photo Feed – Easy Social Feeds Plugin≤1.5.1Update to 1.6
——
Medium6.1Cross-Site Scripting
Soundy Background Music≤3.9No patch available
CVE-2018-6002—
Medium5.4Stored Cross-Site Scripting
BuddyBoss Media≤3.2.3Update to 3.2.4
CVE-2018-21014—
Medium6.4Authenticated Cross-Site Scripting
WordPress≤4.9.1Update to 3.7.25 or 3.8.25 or 3.9.23 or 4.0.22 or 4.1.22 or 4.2.19 or 4.3.15 or 4.4.14 or 4.5.13 or 4.6.10 or 4.7.9 or 4.8.5 or 4.9.2
CVE-2018-5776—

Search VulnCrest Radar

Jump to

Are you sure?