VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1372)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

WordPress Vulnerability Database (page 1372)
SeverityVulnerabilityCVEInstallsPublished
High8.8SQL Injection
WDSocialWidgets≤1.0.13Update to 1.0.14
——
Medium6.1Reflected Cross-Site Scripting
Dave&#039;s WordPress Live Search<4.6Update to 4.6
——
Medium6.1Cross-Site Scripting
cformsII≤14.13.2Update to 14.13.3
CVE-2017-18559—
Critical9.8PHP Object Injection
AJAX Random Posts≤0.3.3No patch available
——
Critical9.8PHP Object Injection
SiteBuilder Dynamic Components≤1.0No patch available
CVE-2017-18604—
Critical9.8PHP Object Injection
My Geo Posts Free≤1.2No patch available
——
Critical9.8PHP Object Injection
Referrer Detector≤4.2.1.0No patch available
——
Critical9.8Object Injection
Gravitate QA Tracker≤1.2.1No patch available
CVE-2017-18605—
Medium6.1Stored Cross-Site Scripting
Avada | Website Builder For WordPress & WooCommerce<5.1.5Update to 5.1.5
CVE-2017-18606—
High8.8Cross-Site Request Forgery
Avada | Website Builder For WordPress & WooCommerce<5.1.5Update to 5.1.5
CVE-2017-18607—
Medium6.1Cross-Site Scripting
Jetpack – AI Agents & MCP, Security, Backup & Analytics<4.0.3Update to 4.0.3
CVE-2016-10706—
Critical9.8Arbitrary file upload
flickr-picture-backup≤0.7No patch available
CVE-2017-1002016—
Medium6.1Reflected Cross-Site Scripting
Jetpack – AI Agents & MCP, Security, Backup & Analytics<4.2Update to 4.2
——
Critical9.6CSV Injection
Jetpack – AI Agents & MCP, Security, Backup & Analytics<4.2Update to 4.2
——
Critical9.8Timing Attack
Jetpack – AI Agents & MCP, Security, Backup & Analytics<4.2Update to 4.2
——
High7.2Authenticated SQL Injection
cformsII<14.13Update to 14.13
CVE-2017-18570—
Critical9.8Arbitrary File Upload
CatalogX Product Catalog, Product Enquiry & Quotes for WooCommerce≤3.0.5Update to 3.1.0
CVE-2017-18592—
Medium6.1Reflected Cross-Site Scripting
Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred<1.7.8Update to 1.7.8
CVE-2017-20008—
Medium6.1Reflected Cross-Site Scripting
Simple Job Board<2.4.4Update to 2.4.4
CVE-2017-18498—
Medium6.1Reflected Cross-Site Scripting
Contact Form for WordPress – Ultimate Form Builder Lite<1.3.3Update to 1.3.3
——
Medium6.1Cross-Site Scripting
Spot.IM Comments<4.0.4Update to 4.0.4
CVE-2017-18608—
Medium6.1Cross-Site Scripting
AccessPress Social Icons≤1.6.6Update to 1.6.7
——
Medium6.1Reflected Cross-Site Scripting
PromoBar by BestWebSoft – Customizable Advertisement Banner for WordPress Website<1.1.1Update to 1.1.1
CVE-2017-18529—
Medium6.1Reflected Cross-Site Scripting
Social Buttons Pack by BestWebSoft<1.1.1Update to 1.1.1
CVE-2017-18500—
Medium6.1Reflected Cross-Site Scripting
Error Log Viewer by BestWebSoft<1.0.6Update to 1.0.6
CVE-2017-18562—
Medium6.1Reflected Cross-Site Scripting
Realty by BestWebSoft<1.1.0Update to 1.1.0
CVE-2017-18532—
Medium6.1Reflected Cross-Site Scripting
Rating by BestWebSoft<0.2Update to 0.2
CVE-2017-18530—
Medium5.3Arbitrary Wordpress Shortcode Injection
Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder≤3.0.31Update to 3.0.32
——
Critical9.8Shortcode Injection
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin≤1.3.83Update to 1.3.84
——
Medium6.1Cross-Site Scripting
BestWebSoft's LinkedIn<1.0.5Update to 1.0.5
CVE-2017-18516—
  • High8.8
    SQL Injection

    WDSocialWidgets

    ≤1.0.13Update to 1.0.14

    2238c9ba-6d00-4a21-a050-7b8a5f307964

  • Medium6.1
    Reflected Cross-Site Scripting

    Dave&#039;s WordPress Live Search

    <4.6Update to 4.6

    3003bd3b-aee5-4bac-9a62-e747f544d2bd

  • Medium6.1
    Cross-Site Scripting

    cformsII

    ≤14.13.2Update to 14.13.3

    CVE-2017-18559

  • Critical9.8
    PHP Object Injection

    AJAX Random Posts

    ≤0.3.3No patch available

    17ccf3f5-ac71-4827-bf11-9a5199f8752e

  • Critical9.8
    PHP Object Injection

    SiteBuilder Dynamic Components

    ≤1.0No patch available

    CVE-2017-18604

  • Critical9.8
    PHP Object Injection

    My Geo Posts Free

    ≤1.2No patch available

    cc550fd9-c332-4a40-b4a9-166d5ffebc76

  • Critical9.8
    PHP Object Injection

    Referrer Detector

    ≤4.2.1.0No patch available

    4b40e33b-4aa8-4378-b044-a8a636d34f73

  • Critical9.8
    Object Injection

    Gravitate QA Tracker

    ≤1.2.1No patch available

    CVE-2017-18605

  • Medium6.1
    Stored Cross-Site Scripting

    Avada | Website Builder For WordPress & WooCommerce

    <5.1.5Update to 5.1.5

    CVE-2017-18606

  • High8.8
    Cross-Site Request Forgery

    Avada | Website Builder For WordPress & WooCommerce

    <5.1.5Update to 5.1.5

    CVE-2017-18607

  • Medium6.1
    Cross-Site Scripting

    Jetpack – AI Agents & MCP, Security, Backup & Analytics

    <4.0.3Update to 4.0.3

    CVE-2016-10706

  • Critical9.8
    Arbitrary file upload

    flickr-picture-backup

    ≤0.7No patch available

    CVE-2017-1002016

  • Medium6.1
    Reflected Cross-Site Scripting

    Jetpack – AI Agents & MCP, Security, Backup & Analytics

    <4.2Update to 4.2

    35293a82-b535-47a2-8a34-e54fe836ca89

  • Critical9.6
    CSV Injection

    Jetpack – AI Agents & MCP, Security, Backup & Analytics

    <4.2Update to 4.2

    f4703ca7-0677-4128-b9b7-31132ff1804d

  • Critical9.8
    Timing Attack

    Jetpack – AI Agents & MCP, Security, Backup & Analytics

    <4.2Update to 4.2

    fc6dcf93-7f1f-4e87-8ba5-852d23b1f0fd

  • High7.2
    Authenticated SQL Injection

    cformsII

    <14.13Update to 14.13

    CVE-2017-18570

  • Critical9.8
    Arbitrary File Upload

    CatalogX Product Catalog, Product Enquiry & Quotes for WooCommerce

    ≤3.0.5Update to 3.1.0

    CVE-2017-18592

  • Medium6.1
    Reflected Cross-Site Scripting

    Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred

    <1.7.8Update to 1.7.8

    CVE-2017-20008

  • Medium6.1
    Reflected Cross-Site Scripting

    Simple Job Board

    <2.4.4Update to 2.4.4

    CVE-2017-18498

  • Medium6.1
    Reflected Cross-Site Scripting

    Contact Form for WordPress – Ultimate Form Builder Lite

    <1.3.3Update to 1.3.3

    041807ab-9354-4438-8e8a-77140f41eedb

  • Medium6.1
    Cross-Site Scripting

    Spot.IM Comments

    <4.0.4Update to 4.0.4

    CVE-2017-18608

  • Medium6.1
    Cross-Site Scripting

    AccessPress Social Icons

    ≤1.6.6Update to 1.6.7

    004206fd-c46e-48d7-93f1-884b3261fdb6

  • Medium6.1
    Reflected Cross-Site Scripting

    PromoBar by BestWebSoft – Customizable Advertisement Banner for WordPress Website

    <1.1.1Update to 1.1.1

    CVE-2017-18529

  • Medium6.1
    Reflected Cross-Site Scripting

    Social Buttons Pack by BestWebSoft

    <1.1.1Update to 1.1.1

    CVE-2017-18500

  • Medium6.1
    Reflected Cross-Site Scripting

    Error Log Viewer by BestWebSoft

    <1.0.6Update to 1.0.6

    CVE-2017-18562

  • Medium6.1
    Reflected Cross-Site Scripting

    Realty by BestWebSoft

    <1.1.0Update to 1.1.0

    CVE-2017-18532

  • Medium6.1
    Reflected Cross-Site Scripting

    Rating by BestWebSoft

    <0.2Update to 0.2

    CVE-2017-18530

  • Medium5.3
    Arbitrary Wordpress Shortcode Injection

    Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder

    ≤3.0.31Update to 3.0.32

    f3ebaf25-1bd3-4770-b4bd-30de83b31add

  • Critical9.8
    Shortcode Injection

    Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    ≤1.3.83Update to 1.3.84

    bab67a5c-3390-4423-8fa9-b5ffbc98324d

  • Medium6.1
    Cross-Site Scripting

    BestWebSoft's LinkedIn

    <1.0.5Update to 1.0.5

    CVE-2017-18516

Search VulnCrest Radar

Jump to

Are you sure?