Database
WordPress Vulnerability Database (page 1371)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
| Severity | Vulnerability | CVE | Installs | Published |
|---|---|---|---|---|
| Medium6.5 | Cryptographic Weakness | CVE-2008-4107 | — | |
| Medium6.4 | Cross-Site Scripting | CVE-2008-4671 | — | |
| Medium5.9 | Cryptographic Weakness | CVE-2008-3747 | — | |
| Critical9.8 | Arbitrary File Upload | CVE-2008-3362 | — | |
| High7.2 | Cross-Site Scripting | CVE-2008-3233 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2008-7321 | — | |
| Medium4.4 | Authenticated (Admin+) Stored Cross-Site Scripting | CVE-2008-7175 | — | |
| Critical9.8 | Unauthenticated SQL Injection | CVE-2008-2034 | — | |
| High8.1 | Authentication Bypass | CVE-2008-1930 | — | |
| High7.5 | Directory Traversal | CVE-2008-4769 | — | |
| Medium6.4 | Cross-Site Scripting | CVE-2008-2068 | — | |
| High7.2 | Arbitrary File Upload | CVE-2008-2392 | — | |
| Critical9.8 | Unauthenticated SQL Injection | CVE-2008-1982 | — | |
| Critical9.8 | SQL Injection | CVE-2008-1646 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2008-1061 | — | |
| Critical9.8 | Remote Code Execution | CVE-2008-1060 | — | |
| Critical9.8 | Remote File Inclusion | CVE-2008-1059 | — | |
| Critical9.8 | SQL Injection | CVE-2008-0939 | — | |
| Critical9.8 | SQL Injection | CVE-2008-0845 | — | |
| Critical9.8 | SQL Injection | CVE-2008-7040 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2008-0837 | — | |
| Medium6.4 | Cross-Site Scripting | CVE-2008-1304 | — | |
| Critical9.8 | SQL Injection | CVE-2008-0683 | — | |
| High7.2 | SQL Injection | CVE-2008-0616 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2008-0617 | — | |
| Critical9.8 | SQL Injection | CVE-2008-0682 | — | |
| Medium6.1 | Multiple Cross-Site Scripting | CVE-2008-0691 | — | |
| Medium5.3 | Directory Traversal | CVE-2008-0615 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2008-0618 | — | |
| Critical9.8 | 1.4.3 - SQL Injection | CVE-2008-0520 | — |
- Medium6.5Cryptographic Weakness
WordPress
≤2.6.1Update to 2.6.2
- Medium6.4Cross-Site Scripting
WordPress MU
<2.6Update to 2.6
- Medium5.9Cryptographic Weakness
WordPress
≤2.6Update to 2.6.1
- Critical9.8Arbitrary File Upload
Downloads Manager
≤0.2No patch available
- High7.2Cross-Site Scripting
WordPress
<2.6Update to 2.6
- Medium6.1Cross-Site Scripting
TubePress
≤1.5.7Update to 1.6.5
- Medium4.4Authenticated (Admin+) Stored Cross-Site Scripting
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery
≤1.9.0Update to 1.9.1
- Critical9.8Unauthenticated SQL Injection
Download Monitor
≤2.0.6Update to 2.0.9
- High8.1Authentication Bypass
WordPress
≤2.5Update to 2.5.1
- High7.5Directory Traversal
WordPress
≤2.5Update to 2.5.1
- Medium6.4Cross-Site Scripting
WordPress
≤2.5Update to 2.5.1
- High7.2Arbitrary File Upload
WordPress
≤2.5.1Update to 2.5.2
- Critical9.8Unauthenticated SQL Injection
WordPress Spreadsheet
≤0.6No patch available
- Critical9.8SQL Injection
WP-Download
≤1.2Update to 1.2.1
- Medium6.1Cross-Site Scripting
Sniplets
<1.2.3Update to 1.2.3
- Critical9.8Remote Code Execution
Sniplets
<1.2.3Update to 1.2.3
- Critical9.8Remote File Inclusion
Sniplets
<1.2.3Update to 1.2.3
- Critical9.8SQL Injection
WP Photo Album Plus
≤1.0Update to 1.1
- Critical9.8SQL Injection
WP People
≤3.4.1No patch available
- Critical9.8SQL Injection
Yellow Swordfish Simple Forum
≤1.11No patch available
- Medium6.1Cross-Site Scripting
Search Unleashed
≤0.2.10Update to 0.2.11
- Medium6.4Cross-Site Scripting
WordPress
≤2.3.2Update to 2.3.3
- Critical9.8SQL Injection
ShiftThis
all versionsNo patch available
- High7.2SQL Injection
DMSGuestbook
all versionsNo patch available
- Medium6.1Cross-Site Scripting
DMSGuestbook
<1.9.0Update to 1.9.0
- Critical9.8SQL Injection
WordSpew
≤3.71No patch available
- Medium6.1Multiple Cross-Site Scripting
WP-Footnotes
≤2.2Update to 3.0
- Medium5.3Directory Traversal
DMSGuestbook
≤1.8.0Update to 1.8.1
- Medium6.1Cross-Site Scripting
DMSGuestbook
<1.9.0Update to 1.9.0
- Critical9.81.4.3 - SQL Injection
WassUp Real Time Analytics
1.4 – 1.4.3Update to 1.4.4