Database
WordPress Vulnerability Database (page 1368)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
| Severity | Vulnerability | CVE | Installs | Published |
|---|---|---|---|---|
| Medium6.3 | Media Related Security Issue | CVE-2011-3122 | — | |
| Medium6.3 | Security Hardening | CVE-2011-3125 | — | |
| Medium5.3 | Username Enumeration | CVE-2011-3126 | — | |
| High8.8 | Arbitrary File Upload | CVE-2011-3129 | — | |
| High8.8 | SQL Injection | CVE-2011-3130 | — | |
| Medium4.3 | Sensitive Information Disclosure | CVE-2011-3128 | — | |
| High7.1 | Clickjacking | CVE-2011-3127 | — | |
| Critical9.8 | Unauthenticated Remote Code Execution | CVE-2011-10033 | — | |
| Medium6.3 | Incorrect Authorization Checks | CVE-2011-5270 | — | |
| Medium4.3 | Incorrect Authorization for Contributor-level users | CVE-2011-1762 | — | |
| Medium6.4 | Cross-Site Scripting | CVE-2011-4956 | — | |
| High7.5 | Denial of Service | CVE-2011-4957 | — | |
| High7.5 | Path Traversal | CVE-2011-1669 | — | |
| Critical9.8 | Remote File Inclusion | CVE-2011-4342 | — | |
| Medium6.1 | Multiple Cross-Site Scripting | CVE-2011-5304 | — | |
| High7.1 | Cross-Site Request Forgery | CVE-2011-0760 | — | |
| High8.8 | Multiple Cross-Site Request Forgery | CVE-2011-0759 | — | |
| High7.5 | Directory Traversal | CVE-2011-5208 | — | |
| Critical9.8 | SQL Injection | CVE-2011-1047 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2011-5307 | — | |
| Critical9.8 | Arbitrary File Upload | CVE-2011-10041 | — | |
| High8.8 | Arbitrary File Upload | CVE-2013-1916 | — | |
| Critical9.8 | SQL Injection | CVE-2011-5308 | — | |
| Medium4.3 | Improper Authorization to Information Disclosure | CVE-2011-0701 | — | |
| High7.5 | Sensitive Information Disclosure | CVE-2011-3818 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2011-0740 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2011-0641 | — | |
| Medium5.4 | Missing Authorization | CVE-2010-5296 | — | |
| Medium6.4 | Cross-Site Scripting | CVE-2010-4536 | — | |
| High7.1 | Cross-Site Scripting | CVE-2010-4277 | — |
- Medium6.3Media Related Security Issue
WordPress
≤3.1.2Update to 3.2
- Medium6.3Security Hardening
WordPress
≤3.1.2Update to 3.1.3
- Medium5.3Username Enumeration
WordPress
≤3.1.2Update to 3.1.3
- High8.8Arbitrary File Upload
WordPress
≤3.1.2Update to 3.1.3
- High8.8SQL Injection
WordPress
≤3.1.2Update to 3.1.3
- Medium4.3Sensitive Information Disclosure
WordPress
≤3.1.2Update to 3.1.3
- High7.1Clickjacking
WordPress
≤3.1.2Update to 3.1.3
- Critical9.8Unauthenticated Remote Code Execution
is-human
≤1.4.2No patch available
- Medium6.3Incorrect Authorization Checks
WordPress
<3.0.6Update to 3.0.6
- Medium4.3Incorrect Authorization for Contributor-level users
WordPress
≤3.1.1Update to 3.1.2
- Medium6.4Cross-Site Scripting
WordPress
≤3.1Update to 3.1.1
- High7.5Denial of Service
WordPress
<3.1.1Update to 3.1.1
- High7.5Path Traversal
WP Custom Pages
≤0.5.0.1No patch available
- Critical9.8Remote File Inclusion
BackWPup – WordPress Backup & Restore Plugin
≤1.7.1Update to 1.7.2
- Medium6.1Multiple Cross-Site Scripting
SodaHead Polls
<2.0.4Update to 2.0.4
- High7.1Cross-Site Request Forgery
WP Related Posts
<1.1Update to 1.1
- High8.8Multiple Cross-Site Request Forgery
WP-reCAPTCHA
≤2.9.8.2Update to 3.0
- High7.5Directory Traversal
BackWPup – WordPress Backup & Restore Plugin
<1.4.1Update to 1.4.1
- Critical9.8SQL Injection
WP Forum Server
≤1.6.5Update to 1.6.6
- Medium6.1Cross-Site Scripting
photosmash-galleries
<1.0.5Update to 1.0.5
- Critical9.8Arbitrary File Upload
Uploadify
≤1.0No patch available
- High8.8Arbitrary File Upload
User Photo
≤0.9.4Update to 0.9.5
- Critical9.8SQL Injection
CDN Vote
<0.4.2Update to 0.4.2
- Medium4.3Improper Authorization to Information Disclosure
WordPress
≤3.0.4Update to 3.0.5
- High7.5Sensitive Information Disclosure
WordPress
≤3.0.4Update to 3.0 or 3.0.5
- Medium6.1Cross-Site Scripting
RSS Feed Reader
≤0.1No patch available
- Medium6.1Cross-Site Scripting
StatPressCN
≤1.9.0Update to 1.9.1
- Medium5.4Missing Authorization
WordPress
<3.0.2Update to 3.0.2
- Medium6.4Cross-Site Scripting
WordPress
≤3.0.3Update to 3.0.4
- High7.1Cross-Site Scripting
Embedded Video
≤4.1No patch available