Database

WordPress Vulnerability Database (page 1362)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

WordPress Vulnerability Database (page 1362)
Severity	Vulnerability	CVE	Installs	Published
Medium6.4	Authenticated Cross-Site Scripting WordPress≤4.9.1Update to 3.7.25 or 3.8.25 or 3.9.23 or 4.0.22 or 4.1.22 or 4.2.19 or 4.3.15 or 4.4.14 or 4.5.13 or 4.6.10 or 4.7.9 or 4.8.5 or 4.9.2	CVE-2018-5776	—	Jan 16, 2018
Medium6.1	Cross-Site Scripting Perfect Images: Regenerate Thumbnails, Image Sizes, WebP & AVIF<5.2.3Update to 5.2.3	CVE-2018-20983	—	Jan 14, 2018
Medium5.5	Cross-Site Scripting via coming-soon_sub_title parameter Coming Soon Page – Responsive Coming Soon & Maintenance Mode≤1.1.18Update to 1.1.19	CVE-2018-5660	—	Jan 12, 2018
Medium5.5	Cross-Site Scripting via bg_color parameter Coming Soon Page – Responsive Coming Soon & Maintenance Mode≤1.1.18Update to 1.1.19	CVE-2018-5666	—	Jan 12, 2018
Medium5.5	Cross-Site Scripting via logo_height parameter Coming Soon Page – Responsive Coming Soon & Maintenance Mode≤1.1.18Update to 1.1.19	CVE-2018-5665	—	Jan 12, 2018
High8.8	Cross-Site Request Forgery Booking calendar, Appointment Booking System<2.1.8Update to 2.1.8	CVE-2018-5673	—	Jan 12, 2018
Medium5.5	Cross-Site Scripting via button_text_link parameter Coming Soon Page – Responsive Coming Soon & Maintenance Mode≤1.1.18Update to 1.1.19	CVE-2018-5663	—	Jan 12, 2018
High8.8	Cross-Site Request Forgery Coming Soon Page – Responsive Coming Soon & Maintenance Mode≤1.1.18Update to 1.1.19	CVE-2018-5658	—	Jan 12, 2018
Medium5.5	Cross-Site Scripting via logo_width parameter Coming Soon Page – Responsive Coming Soon & Maintenance Mode≤1.1.18Update to 1.1.19	CVE-2018-5661	—	Jan 12, 2018
Medium5.5	Cross-Site Scripting via counter_title parameter Coming Soon Page – Responsive Coming Soon & Maintenance Mode≤1.1.18Update to 1.1.19	CVE-2018-5662	—	Jan 12, 2018
Medium6.1	Cross-Site Scripting Weblizar Pin Feeds<1.1.2Update to 1.1.2	CVE-2018-5654	—	Jan 12, 2018
Medium5.5	Stored Cross-Site Scripting Read and Understood≤2.1Update to 2.2	CVE-2018-5667	—	Jan 12, 2018
Medium5.5	Cross-Site Scripting via social_icon_1 parameter Coming Soon Page – Responsive Coming Soon & Maintenance Mode≤1.1.18Update to 1.1.19	CVE-2018-5664	—	Jan 12, 2018
Medium6.1	Reflected Cross-Site Scripting Weblizar Pin Feeds<1.1.2Update to 1.1.2	CVE-2018-5653	—	Jan 12, 2018
Medium6.4	Stored Cross-Site Scripting Markdown Editor (Formerly Dark Mode)<1.7Update to 1.7	CVE-2018-5652	—	Jan 12, 2018
Medium4.8	Cross-Site Scripting Markdown Editor (Formerly Dark Mode)<1.7Update to 1.7	CVE-2018-5651	—	Jan 12, 2018
Medium5.5	Stored Cross-Site Scripting Coming Soon Page – Responsive Coming Soon & Maintenance Mode<1.1.19Update to 1.1.19	CVE-2018-5659	—	Jan 12, 2018
Medium5.5	Cross-Site Scripting Booking calendar, Appointment Booking System<2.1.8Update to 2.1.8	CVE-2018-5672	—	Jan 11, 2018
High8.8	Cross-Site Request Forgery SrbTransLatin – Serbian Latinisation≤1.46Update to 1.47	CVE-2018-5368	—	Jan 11, 2018
Medium4.8	Cross-Site Scripting SrbTransLatin – Serbian Latinisation≤1.46Update to 1.47	CVE-2018-5369	—	Jan 11, 2018
Medium4.8	Cross-Site Scripting via wpglobus_option[enabled_languages] WPGlobus≤1.9.6Update to 1.9.7	CVE-2018-5363	—	Jan 11, 2018
Medium5.5	Cross-Site Scripting Booking calendar, Appointment Booking System<2.1.8Update to 2.1.8	CVE-2018-5671	—	Jan 11, 2018
Medium4.8	Cross-Site Scripting via wpglobus_option[post_type][page] WPGlobus≤1.9.6Update to 1.9.7	CVE-2018-5362	—	Jan 11, 2018
Medium4.8	Cross-Site Scripting via wpglobus_option[post_type][post] WPGlobus≤1.9.6Update to 1.9.7	CVE-2018-5367	—	Jan 11, 2018
Medium4.8	Cross-Site Scripting via wpglobus_option[browser_redirect][redirect_by_language] WPGlobus≤1.9.6Update to 1.9.7	CVE-2018-5364	—	Jan 11, 2018
Medium6.1	Cross-Site Request Forgery to Cross-Site Scripting via wpglobus_option[selector_wp_list_pages][show_selector] WPGlobus≤1.9.6Update to 1.9.7	CVE-2018-5365	—	Jan 11, 2018
High8.8	SQL Injection Dbox 3D Slider Lite≤1.2.2Update to 1.2.3	CVE-2018-5374	—	Jan 11, 2018
High8.8	Cross-Site Request Forgery WPGlobus≤1.9.6Update to 1.9.7	CVE-2018-5361	—	Jan 11, 2018
Medium5.5	Cross-Site Scripting Booking calendar, Appointment Booking System<2.1.8Update to 2.1.8	CVE-2018-5670	—	Jan 11, 2018
Medium4.8	Cross-Site Scripting via wpglobus_option[more_languages] WPGlobus≤1.9.6Update to 1.9.7	CVE-2018-5366	—	Jan 11, 2018

Medium6.4
Authenticated Cross-Site Scripting
WordPress
≤4.9.1Update to 3.7.25 or 3.8.25 or 3.9.23 or 4.0.22 or 4.1.22 or 4.2.19 or 4.3.15 or 4.4.14 or 4.5.13 or 4.6.10 or 4.7.9 or 4.8.5 or 4.9.2
CVE-2018-5776Jan 16, 2018
Medium6.1
Cross-Site Scripting
Perfect Images: Regenerate Thumbnails, Image Sizes, WebP & AVIF
<5.2.3Update to 5.2.3
CVE-2018-20983Jan 14, 2018
Medium5.5
Cross-Site Scripting via coming-soon_sub_title parameter
Coming Soon Page – Responsive Coming Soon & Maintenance Mode
≤1.1.18Update to 1.1.19
CVE-2018-5660Jan 12, 2018
Medium5.5
Cross-Site Scripting via bg_color parameter
Coming Soon Page – Responsive Coming Soon & Maintenance Mode
≤1.1.18Update to 1.1.19
CVE-2018-5666Jan 12, 2018
Medium5.5
Cross-Site Scripting via logo_height parameter
Coming Soon Page – Responsive Coming Soon & Maintenance Mode
≤1.1.18Update to 1.1.19
CVE-2018-5665Jan 12, 2018
High8.8
Cross-Site Request Forgery
Booking calendar, Appointment Booking System
<2.1.8Update to 2.1.8
CVE-2018-5673Jan 12, 2018
Medium5.5
Cross-Site Scripting via button_text_link parameter
Coming Soon Page – Responsive Coming Soon & Maintenance Mode
≤1.1.18Update to 1.1.19
CVE-2018-5663Jan 12, 2018
High8.8
Cross-Site Request Forgery
Coming Soon Page – Responsive Coming Soon & Maintenance Mode
≤1.1.18Update to 1.1.19
CVE-2018-5658Jan 12, 2018
Medium5.5
Cross-Site Scripting via logo_width parameter
Coming Soon Page – Responsive Coming Soon & Maintenance Mode
≤1.1.18Update to 1.1.19
CVE-2018-5661Jan 12, 2018
Medium5.5
Cross-Site Scripting via counter_title parameter
Coming Soon Page – Responsive Coming Soon & Maintenance Mode
≤1.1.18Update to 1.1.19
CVE-2018-5662Jan 12, 2018
Medium6.1
Cross-Site Scripting
Weblizar Pin Feeds
<1.1.2Update to 1.1.2
CVE-2018-5654Jan 12, 2018
Medium5.5
Stored Cross-Site Scripting
Read and Understood
≤2.1Update to 2.2
CVE-2018-5667Jan 12, 2018
Medium5.5
Cross-Site Scripting via social_icon_1 parameter
Coming Soon Page – Responsive Coming Soon & Maintenance Mode
≤1.1.18Update to 1.1.19
CVE-2018-5664Jan 12, 2018
Medium6.1
Reflected Cross-Site Scripting
Weblizar Pin Feeds
<1.1.2Update to 1.1.2
CVE-2018-5653Jan 12, 2018
Medium6.4
Stored Cross-Site Scripting
Markdown Editor (Formerly Dark Mode)
<1.7Update to 1.7
CVE-2018-5652Jan 12, 2018
Medium4.8
Cross-Site Scripting
Markdown Editor (Formerly Dark Mode)
<1.7Update to 1.7
CVE-2018-5651Jan 12, 2018
Medium5.5
Stored Cross-Site Scripting
Coming Soon Page – Responsive Coming Soon & Maintenance Mode
<1.1.19Update to 1.1.19
CVE-2018-5659Jan 12, 2018
Medium5.5
Cross-Site Scripting
Booking calendar, Appointment Booking System
<2.1.8Update to 2.1.8
CVE-2018-5672Jan 11, 2018
High8.8
Cross-Site Request Forgery
SrbTransLatin – Serbian Latinisation
≤1.46Update to 1.47
CVE-2018-5368Jan 11, 2018
Medium4.8
Cross-Site Scripting
SrbTransLatin – Serbian Latinisation
≤1.46Update to 1.47
CVE-2018-5369Jan 11, 2018
Medium4.8
Cross-Site Scripting via wpglobus_option[enabled_languages]
WPGlobus
≤1.9.6Update to 1.9.7
CVE-2018-5363Jan 11, 2018
Medium5.5
Cross-Site Scripting
Booking calendar, Appointment Booking System
<2.1.8Update to 2.1.8
CVE-2018-5671Jan 11, 2018
Medium4.8
Cross-Site Scripting via wpglobus_option[post_type][page]
WPGlobus
≤1.9.6Update to 1.9.7
CVE-2018-5362Jan 11, 2018
Medium4.8
Cross-Site Scripting via wpglobus_option[post_type][post]
WPGlobus
≤1.9.6Update to 1.9.7
CVE-2018-5367Jan 11, 2018
Medium4.8
Cross-Site Scripting via wpglobus_option[browser_redirect][redirect_by_language]
WPGlobus
≤1.9.6Update to 1.9.7
CVE-2018-5364Jan 11, 2018
Medium6.1
Cross-Site Request Forgery to Cross-Site Scripting via wpglobus_option[selector_wp_list_pages][show_selector]
WPGlobus
≤1.9.6Update to 1.9.7
CVE-2018-5365Jan 11, 2018
High8.8
SQL Injection
Dbox 3D Slider Lite
≤1.2.2Update to 1.2.3
CVE-2018-5374Jan 11, 2018
High8.8
Cross-Site Request Forgery
WPGlobus
≤1.9.6Update to 1.9.7
CVE-2018-5361Jan 11, 2018
Medium5.5
Cross-Site Scripting
Booking calendar, Appointment Booking System
<2.1.8Update to 2.1.8
CVE-2018-5670Jan 11, 2018
Medium4.8
Cross-Site Scripting via wpglobus_option[more_languages]
WPGlobus
≤1.9.6Update to 1.9.7
CVE-2018-5366Jan 11, 2018