Database

WordPress Vulnerability Database (page 1367)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1367)
Severity	Vulnerability	CVE	Installs	Published
High7.3	SQL Injection WPtouch – Make your WordPress Website Mobile-Friendly<1.9.8.1Update to 1.9.8.1	CVE-2011-4803	—	Oct 27, 2011
Medium6.1	Cross-Site Scripting Cover WP≤1.6.5Update to 1.6.6	CVE-2011-3860	—	Oct 24, 2011
High8.8	Cross-Site Request Forgery User Access Manager<1.2Update to 1.2	CVE-2011-5328	—	Oct 11, 2011
Medium6.4	Stored Cross-Site Scripting Classipress≤3.1.4Update to 3.1.5	CVE-2011-5257	—	Oct 7, 2011
Critical9.8	SQL Injection WordPress Users≤1.3Update to 1.4	CVE-2011-4669	—	Oct 7, 2011
High8.8	SQL Injection WP-PostRatings≤1.61Update to 1.62	CVE-2011-4646	—	Oct 6, 2011
Medium6.1	Cross-Site Scripting Atahualpa<3.6.8Update to 3.6.8	CVE-2011-3850	—	Oct 4, 2011
Medium6.1	Cross-Site Scripting Morning Coffee<3.6Update to 3.6	CVE-2011-3862	—	Oct 4, 2011
Medium6.1	Cross-Site Scripting Black-Letterhead<1.6Update to 1.6	CVE-2011-3865	—	Sep 30, 2011
Medium6.1	Cross-Site Scripting Pixiv Custom<2.1.6Update to 2.1.6	CVE-2011-3858	—	Sep 29, 2011
Medium6.1	Cross-Site Scripting Elegant Grunge≤1.0.3Update to 1.0.4	CVE-2011-3856	—	Sep 29, 2011
Medium6.1	Cross-Site Scripting The Erudite≤2.7.8Update to 2.8	CVE-2011-3864	—	Sep 28, 2011
Medium6.1	Cross-Site Scripting F8 Lite≤4.2.1Update to 4.2.2	CVE-2011-3855	—	Sep 27, 2011
Medium6.1	Cross-Site Scripting evolve<1.2.7Update to 1.2.7	CVE-2011-3852	—	Sep 27, 2011
Medium6.1	Reflected Cross-Site Scripting RedLine<1.66Update to 1.66	CVE-2011-3863	—	Sep 27, 2011
High7.1	Cross-Site Scripting Hybrid<0.10Update to 0.10	CVE-2011-3853	—	Sep 27, 2011
Medium6.1	Cross-Site Scripting ZenLite≤4.3Update to 4.4	CVE-2011-3854	—	Sep 27, 2011
Medium6.1	Cross-Site Scripting News≤0.1Update to 0.2	CVE-2011-3851	—	Sep 27, 2011
Medium6.1	Cross-Site Scripting Web Minimalist 200901≤1.1No patch available	CVE-2011-3861	—	Sep 27, 2011
Medium6.1	Cross-Site Scripting Trending<0.2Update to 0.2	CVE-2011-3859	—	Sep 27, 2011
Medium6.1	Cross-Site Scripting Antisnews≤1.09Update to 1.10	CVE-2011-3857	—	Sep 27, 2011
Critical9.8	SQL Injection Photocrati≤4.0Update to 4.1	CVE-2015-2216	—	Sep 23, 2011
Medium6.1	Cross-Site Scripting WP-RecentComments<2.0.7Update to 2.0.7	CVE-2012-1068	—	Sep 22, 2011
Critical9.8	SQL Injection WP-RecentComments≤2.0.7Update to 2.1	CVE-2012-1067	—	Sep 22, 2011
Critical9.8	Remote File Inclusion AllWebMenus WordPress Menu Plugin≤1.1.3Update to 1.1.4	CVE-2011-3981	—	Sep 19, 2011
Critical9.8	Remote File Inclusion Relocate Upload<0.20Update to 0.20	CVE-2012-1205	—	Sep 19, 2011
Critical9.8	SQL Injection SCORM Cloud For WordPress<1.0.7Update to 1.0.7	CVE-2011-5216	—	Sep 7, 2011
Critical9.8	Remote File Download TimThumb<2.0Update to 2.0	CVE-2011-4106	—	Aug 1, 2011
Medium6.1	Cross-Site Scripting FV Flowplayer Video Player≤1.2.11Update to 1.2.12	CVE-2011-4568	—	Jul 22, 2011
High8.8	SQL Injection Social Slider<7.4.2Update to 7.4.2	CVE-2011-5286	—	Jul 20, 2011

High7.3
SQL Injection
WPtouch – Make your WordPress Website Mobile-Friendly
<1.9.8.1Update to 1.9.8.1
CVE-2011-4803Oct 27, 2011
Medium6.1
Cross-Site Scripting
Cover WP
≤1.6.5Update to 1.6.6
CVE-2011-3860Oct 24, 2011
High8.8
Cross-Site Request Forgery
User Access Manager
<1.2Update to 1.2
CVE-2011-5328Oct 11, 2011
Medium6.4
Stored Cross-Site Scripting
Classipress
≤3.1.4Update to 3.1.5
CVE-2011-5257Oct 7, 2011
Critical9.8
SQL Injection
WordPress Users
≤1.3Update to 1.4
CVE-2011-4669Oct 7, 2011
High8.8
SQL Injection
WP-PostRatings
≤1.61Update to 1.62
CVE-2011-4646Oct 6, 2011
Medium6.1
Cross-Site Scripting
Atahualpa
<3.6.8Update to 3.6.8
CVE-2011-3850Oct 4, 2011
Medium6.1
Cross-Site Scripting
Morning Coffee
<3.6Update to 3.6
CVE-2011-3862Oct 4, 2011
Medium6.1
Cross-Site Scripting
Black-Letterhead
<1.6Update to 1.6
CVE-2011-3865Sep 30, 2011
Medium6.1
Cross-Site Scripting
Pixiv Custom
<2.1.6Update to 2.1.6
CVE-2011-3858Sep 29, 2011
Medium6.1
Cross-Site Scripting
Elegant Grunge
≤1.0.3Update to 1.0.4
CVE-2011-3856Sep 29, 2011
Medium6.1
Cross-Site Scripting
The Erudite
≤2.7.8Update to 2.8
CVE-2011-3864Sep 28, 2011
Medium6.1
Cross-Site Scripting
F8 Lite
≤4.2.1Update to 4.2.2
CVE-2011-3855Sep 27, 2011
Medium6.1
Cross-Site Scripting
evolve
<1.2.7Update to 1.2.7
CVE-2011-3852Sep 27, 2011
Medium6.1
Reflected Cross-Site Scripting
RedLine
<1.66Update to 1.66
CVE-2011-3863Sep 27, 2011
High7.1
Cross-Site Scripting
Hybrid
<0.10Update to 0.10
CVE-2011-3853Sep 27, 2011
Medium6.1
Cross-Site Scripting
ZenLite
≤4.3Update to 4.4
CVE-2011-3854Sep 27, 2011
Medium6.1
Cross-Site Scripting
News
≤0.1Update to 0.2
CVE-2011-3851Sep 27, 2011
Medium6.1
Cross-Site Scripting
Web Minimalist 200901
≤1.1No patch available
CVE-2011-3861Sep 27, 2011
Medium6.1
Cross-Site Scripting
Trending
<0.2Update to 0.2
CVE-2011-3859Sep 27, 2011
Medium6.1
Cross-Site Scripting
Antisnews
≤1.09Update to 1.10
CVE-2011-3857Sep 27, 2011
Critical9.8
SQL Injection
Photocrati
≤4.0Update to 4.1
CVE-2015-2216Sep 23, 2011
Medium6.1
Cross-Site Scripting
WP-RecentComments
<2.0.7Update to 2.0.7
CVE-2012-1068Sep 22, 2011
Critical9.8
SQL Injection
WP-RecentComments
≤2.0.7Update to 2.1
CVE-2012-1067Sep 22, 2011
Critical9.8
Remote File Inclusion
AllWebMenus WordPress Menu Plugin
≤1.1.3Update to 1.1.4
CVE-2011-3981Sep 19, 2011
Critical9.8
Remote File Inclusion
Relocate Upload
<0.20Update to 0.20
CVE-2012-1205Sep 19, 2011
Critical9.8
SQL Injection
SCORM Cloud For WordPress
<1.0.7Update to 1.0.7
CVE-2011-5216Sep 7, 2011
Critical9.8
Remote File Download
TimThumb
<2.0Update to 2.0
CVE-2011-4106Aug 1, 2011
Medium6.1
Cross-Site Scripting
FV Flowplayer Video Player
≤1.2.11Update to 1.2.12
CVE-2011-4568Jul 22, 2011
High8.8
SQL Injection
Social Slider
<7.4.2Update to 7.4.2
CVE-2011-5286Jul 20, 2011