Database
WordPress Vulnerability Database (page 1370)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
- High8.8Cross-Site Request Forgery
Custom Sidebars – Dynamic Sidebar Classic Widget Area Manager
≤3.0.8Update to 3.0.8.1
- Medium6.1Reflected Cross-Site Scripting
Postman SMTP
≤1.7.2No patch available
- Medium5.4Authenticated SQL Injection
Ultimate Product Catalog
<4.2.3Update to 4.2.3
- Critical9.8SEO Spam Injection (Hidden Functionality)
Display Widgets
<2.7Update to 2.7
- Medium5.0Directory Traversal
Shortcodes Ultimate – Content Elements
<4.10.0Update to 4.10.0
- High7.5Local File Inclusion
WP Rocket
<2.10.4Update to 2.10.4
- Medium6.1Cross-Site Scripting
Analytics Tracker
≤1.1.0Update to 1.1.1
- Medium5.8SMTP Header Injection
Email Before Download
≤3.6Update to 4.0
- Critical9.8SQL Injection
Email Before Download
<4.0Update to 4.0
- Medium6.4Authenticated Cross-Site Scripting
Event Calendar WD version
<1.0.94Update to 1.0.94
- Medium6.1Reflected Cross-Site Scripting
All-in-One WP Migration and Backup
<6.46Update to 6.46
- Critical9.8Unauthenticated Local File Inclusion
Autoptimize
≤2.1.0Update to 2.1.1
- Medium6.1Cross-Site Scripting
Download Manager
≤2.9.51Update to 2.9.52
- Medium4.1Authenticated Path Traversal
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
<1.3.43Update to 1.3.43
- Medium6.1Cross-Site Scripting
WP-Members Membership Plugin
<3.1.8Update to 3.1.8
- Medium6.1Reflected Cross-Site Scripting
Download Manager
<2.9.50Update to 2.9.50
- Medium6.1Cross-Site Scripting
RSVP and Event Management
<2.3.8Update to 2.3.8
- Medium5.4Cross-Site Request Forgery to Cross-Site Scripting
Easy PayPal & Stripe Buy Now Button
<1.7.3Update to 1.7.3
- High8.8SQL Injection
WP Jobs
<1.5Update to 1.5
- High7.2Stored Cross-Site Scripting
Gift Certificate Creator
≤1.0Update to 1.1
- Medium6.1Cross-Site Scripting
WP Custom Fields Search
<1.0Update to 1.0
- High8.8Authenticated SQL Injection
Multi Feed Reader
≤2.2.3Update to 2.2.4
- High7.2SQL Injection
Crelly Slider
≤1.1.1Update to 1.1.2
- High7.2Authenticated (Admin+) SQL Injection
Event List
<0.7.9Update to 0.7.9
- High8.8SQL Injection
WP-Testimonials
≤3.4.1No patch available
- Medium6.1Reflected Cross-Site Scripting
Spiffy Calendar
<3.3.0Update to 3.3.0
- Critical9.8SQL Injection
Eventr
≤1.02.2No patch available
- Critical9.8SQL Injection
Eventr
≤1.02.2No patch available
- Medium6.1Reflected Cross-Site Scripting
wp-noexternallinks
<3.5.19Update to 3.5.19
- Medium4.9Directory Traversal
Newsletters
≤4.6.4.2Update to 4.6.4.3