VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1369)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

WordPress Vulnerability Database (page 1369)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Unauthenticated Cross-Site Scripting
Event List≤0.7.9Update to 0.7.10
CVE-2017-12068—
Medium6.4Authenticated Stored Cross-Site Scripting
Salutation<3.0.16Update to 3.0.16
CVE-2017-1000227—
Medium6.4Authenticated Stored Cross-Site Scripting
Salutation Responsive WordPress Theme<3.0.16Update to 3.0.16
——
Medium5.4Authenticated Stored Cross-Site Scripting
FormCraft<3.4Update to 3.4
CVE-2017-18600—
High7.4Authenticated Stored Cross-Site Scripting
Ultimate Affiliate Pro WordPress Plugin<4.0Update to 4.0
——
Medium6.1Cross-Site Scripting
WebLibrarian<3.4.8.7Update to 3.4.8.7
CVE-2017-18540—
Medium6.5Cross-Site Request Forgery
Embed Plus for YouTube Gallery, Livestream and Lazy Loading with Facades≤11.8.1Update to 11.8.2
CVE-2017-1000224—
Medium6.1Cross-Site Scripting
WebLibrarian<3.4.8.6Update to 3.4.8.6
CVE-2017-18539—
Medium6.1Reflected Cross-Site Scripting
Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder<1.6.5Update to 1.6.5
CVE-2017-2284—
Medium6.1Cross-Site Scripting
Simple Custom CSS and JS≤3.3Update to 3.4
CVE-2017-2285—
Critical9.8SQL Injection
wordpress-gallery-transformation≤0.7No patch available
CVE-2017-1002028—
High7.5Arbitrary File Download
WP Hide & Security Enhancer≤1.3.9.2Update to 1.4
——
High7.2Arabic Font <= 1.2 Cross-Site Request Forgery to Stored Cross-Site Scripting
Arabic Font≤1.2No patch available
——
Medium6.1Cross-Site Scripting
WebLibrarian<3.4.8.5Update to 3.4.8.5
CVE-2017-18538—
Medium5.4Cross-Site Scripting
IBPS Online Exam Plugin for WordPress≤1.0No patch available
CVE-2017-18601—
Medium6.1Open Redirect
Download Manager<2.9.51Update to 2.9.51
CVE-2017-2217—
High8.8Blind SQL Injection
Task Manager Pro - Task Management Plugin For Wordpress≤1.3.1No patch available
——
High8.8SQL Injection
IBPS Online Exam Plugin for WordPress≤1.0No patch available
CVE-2017-18602—
Medium6.4Stored Cross-Site Scripting
Task Manager Pro - Task Management Plugin For Wordpress≤1.3.1Update to 1.3.2
——
Medium6.1Reflected Cross-Site Scripting
Task Manager Pro - Task Management Plugin For Wordpress≤1.3.1No patch available
——
Medium6.1Cross-Site Scripting
3CX Free Live Chat, Calls & Messaging≤7.1.02Update to 7.1.03
CVE-2017-18508—
Medium6.1Authenticated Cross-Site Scripting
WP Statistics – Simple, privacy-friendly Google Analytics alternative≤12.0.9Update to 12.0.10
CVE-2017-10991—
High7.2Authenticated (Admin+) SQL Injection
DSubscribers<1.2.1Update to 1.2.1
——
High7.2SQL Injection
Add Edit Delete Listing Module≤1.0No patch available
CVE-2017-1002025—
Critical9.8SQL Injection via id Parameter
FormCraft – Form Builder1.0.5 – 1.0.5Update to 1.0.6
CVE-2017-13137—
High8.8Authenticated SQL Injection
Event Expresso Free≤3.1.37.11.LUpdate to 3.1.37.12.L
CVE-2017-1002026—
Medium4.3XML External Entity Injection
TablePress – Tables in WordPress made easy≤1.8Update to 1.8.1
CVE-2017-10889—
Medium6.1Reflected Cross-Site Scripting
WP Statistics – Simple, privacy-friendly Google Analytics alternative≤12.0.8.1Update to 12.0.9
——
Critical9.8SQL Injection
WatuPRO<5.5.3.7Update to 5.5.3.7
CVE-2017-9834—
High8.8Authenticated SQL Injection
WP Statistics – Simple, privacy-friendly Google Analytics alternative≤12.0.7Update to 12.0.8
CVE-2017-18515—

Search VulnCrest Radar

Jump to

Are you sure?