Database

WordPress Vulnerability Database (page 1372)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

WordPress Vulnerability Database (page 1372)
Severity	Vulnerability	CVE	Installs	Published
Critical9.1	SQL injection fgallery≤2.4.1Update to 2.4.2	CVE-2008-0491	—	Jan 30, 2008
Critical9.8	SQL Injection AdServe≤0.2Update to 0.3	CVE-2008-0507	—	Jan 30, 2008
Critical9.8	SQL Injection wp-cal≤0.3No patch available	CVE-2008-0490	—	Jan 27, 2008
Medium6.1	Cross-Site Request Forgery to Cross-Site Scripting Dean's Permalinks Migration≤1.0No patch available	CVE-2008-0508	—	Jan 21, 2008
Critical9.8	Remote SQL Injection wp-forum≤1.7.4Update to 1.7.7	CVE-2008-0388	—	Jan 19, 2008
High7.3	Authorization Bypass SpamBam≤2.1No patch available	CVE-2008-4616	—	Jan 15, 2008
High7.5	CAPTCHA Bypass Peter's Math Anti-Spam≤0.1.6Update to 1.0.0	CVE-2008-7216	—	Jan 15, 2008
Medium6.1	Authenticated (Admin+) Stored Cross-Site Scripting WP-ContactForm≤1.5No patch available	CVE-2008-0197	—	Jan 13, 2008
Critical9.8	Arbitrary File Upload wp-FileManager≤1.2Update to 1.3	CVE-2008-0222	—	Jan 6, 2008
High8.8	Cross-Site Request Forgery WP-ContactForm≤1.5.1No patch available	CVE-2008-0198	—	Jan 3, 2008
Medium6.1	Reflected Cross-Site Scripting Math Comment Spam Protection≤2.1Update to 2.2	CVE-2008-0204	—	Jan 3, 2008
Critical9.8	2.3.1 - Authorization Bypass WordPress1.5 – 2.3.1Update to 2.3.2	CVE-2007-6013	—	Dec 29, 2007
Medium5.3	Full Path Disclosure WordPress≤2.4Update to 2.5	CVE-2008-0191	—	Dec 16, 2007
High7.5	Directory Traversal PictPress≤0.91Update to 0.99	CVE-2007-6369	—	Dec 5, 2007
High7.2	Cross-Site Scripting Cryptographp≤1.2No patch available	CVE-2008-0203	—	Nov 28, 2007
High7.1	Cross-Site Scripting Captcha!≤2.5dUpdate to 2.6	CVE-2008-0206	—	Nov 26, 2007
High8.8	Cross-Site Request Forgery Math Comment Spam Protection≤2.1Update to 2.2	CVE-2008-0205	—	Nov 23, 2007
Medium6.1	Cross-Site Scripting Peter's Random Anti-Spam Image≤1.0.6No patch available	CVE-2007-6677	—	Nov 12, 2007
Critical9.8	Remote File Inclusion BackUpWordPress<0.4.3Update to 0.4.3	CVE-2007-5800	—	Nov 1, 2007
Medium6.4	Cross-Site Scripting WordPress≤2.3Update to 2.3.1	CVE-2007-5710	—	Oct 26, 2007
High8.8	Cross-Site Request Forgery feedburner-feedsmith≤2.2Update to 2.3	CVE-2007-5229	—	Oct 4, 2007
Medium6.4	Cross-Site Scripting WordPress≤2.0.3Update to 2.0.4	CVE-2007-5106	—	Sep 21, 2007
Critical9.8	SQL Injection WordPress≤2.3.1Update to 2.3.2	CVE-2007-6318	—	Sep 8, 2007
High8.8	Remote Code Execution WordPress≤2.3.2Update to 2.3.3	CVE-2008-5695	—	Sep 8, 2007
Medium6.5	Improper Authorization Checks WordPress≤2.3.2Update to 2.3.3	CVE-2008-0664	—	Sep 8, 2007
Critical9.8	SQL Injection WordPress<2.2.3Update to 2.2.3	CVE-2007-4894	—	Sep 8, 2007
Medium5.3	Restriction Bypass WordPress≤2.2.2Update to 2.2.3	CVE-2008-2146	—	Sep 8, 2007
Medium6.1	Cross-Site Scripting WordPress MU≤1.0Update to 1.1.1	CVE-2007-4544	—	Aug 22, 2007
Medium6.1	Cross-Site Scripting Sirius≤1.0No patch available	CVE-2007-4480	—	Aug 17, 2007
Medium6.1	Cross-Site Scripting Blix≤0.9.1No patch available	CVE-2007-4481	—	Aug 17, 2007

Critical9.1
SQL injection
fgallery
≤2.4.1Update to 2.4.2
CVE-2008-0491Jan 30, 2008
Critical9.8
SQL Injection
AdServe
≤0.2Update to 0.3
CVE-2008-0507Jan 30, 2008
Critical9.8
SQL Injection
wp-cal
≤0.3No patch available
CVE-2008-0490Jan 27, 2008
Medium6.1
Cross-Site Request Forgery to Cross-Site Scripting
Dean's Permalinks Migration
≤1.0No patch available
CVE-2008-0508Jan 21, 2008
Critical9.8
Remote SQL Injection
wp-forum
≤1.7.4Update to 1.7.7
CVE-2008-0388Jan 19, 2008
High7.3
Authorization Bypass
SpamBam
≤2.1No patch available
CVE-2008-4616Jan 15, 2008
High7.5
CAPTCHA Bypass
Peter's Math Anti-Spam
≤0.1.6Update to 1.0.0
CVE-2008-7216Jan 15, 2008
Medium6.1
Authenticated (Admin+) Stored Cross-Site Scripting
WP-ContactForm
≤1.5No patch available
CVE-2008-0197Jan 13, 2008
Critical9.8
Arbitrary File Upload
wp-FileManager
≤1.2Update to 1.3
CVE-2008-0222Jan 6, 2008
High8.8
Cross-Site Request Forgery
WP-ContactForm
≤1.5.1No patch available
CVE-2008-0198Jan 3, 2008
Medium6.1
Reflected Cross-Site Scripting
Math Comment Spam Protection
≤2.1Update to 2.2
CVE-2008-0204Jan 3, 2008
Critical9.8
2.3.1 - Authorization Bypass
WordPress
1.5 – 2.3.1Update to 2.3.2
CVE-2007-6013Dec 29, 2007
Medium5.3
Full Path Disclosure
WordPress
≤2.4Update to 2.5
CVE-2008-0191Dec 16, 2007
High7.5
Directory Traversal
PictPress
≤0.91Update to 0.99
CVE-2007-6369Dec 5, 2007
High7.2
Cross-Site Scripting
Cryptographp
≤1.2No patch available
CVE-2008-0203Nov 28, 2007
High7.1
Cross-Site Scripting
Captcha!
≤2.5dUpdate to 2.6
CVE-2008-0206Nov 26, 2007
High8.8
Cross-Site Request Forgery
Math Comment Spam Protection
≤2.1Update to 2.2
CVE-2008-0205Nov 23, 2007
Medium6.1
Cross-Site Scripting
Peter's Random Anti-Spam Image
≤1.0.6No patch available
CVE-2007-6677Nov 12, 2007
Critical9.8
Remote File Inclusion
BackUpWordPress
<0.4.3Update to 0.4.3
CVE-2007-5800Nov 1, 2007
Medium6.4
Cross-Site Scripting
WordPress
≤2.3Update to 2.3.1
CVE-2007-5710Oct 26, 2007
High8.8
Cross-Site Request Forgery
feedburner-feedsmith
≤2.2Update to 2.3
CVE-2007-5229Oct 4, 2007
Medium6.4
Cross-Site Scripting
WordPress
≤2.0.3Update to 2.0.4
CVE-2007-5106Sep 21, 2007
Critical9.8
SQL Injection
WordPress
≤2.3.1Update to 2.3.2
CVE-2007-6318Sep 8, 2007
High8.8
Remote Code Execution
WordPress
≤2.3.2Update to 2.3.3
CVE-2008-5695Sep 8, 2007
Medium6.5
Improper Authorization Checks
WordPress
≤2.3.2Update to 2.3.3
CVE-2008-0664Sep 8, 2007
Critical9.8
SQL Injection
WordPress
<2.2.3Update to 2.2.3
CVE-2007-4894Sep 8, 2007
Medium5.3
Restriction Bypass
WordPress
≤2.2.2Update to 2.2.3
CVE-2008-2146Sep 8, 2007
Medium6.1
Cross-Site Scripting
WordPress MU
≤1.0Update to 1.1.1
CVE-2007-4544Aug 22, 2007
Medium6.1
Cross-Site Scripting
Sirius
≤1.0No patch available
CVE-2007-4480Aug 17, 2007
Medium6.1
Cross-Site Scripting
Blix
≤0.9.1No patch available
CVE-2007-4481Aug 17, 2007