VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1375)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

WordPress Vulnerability Database (page 1375)
SeverityVulnerabilityCVEInstallsPublished
High8.8Cross-Site Request Forgery
Twitter Cards Meta – Best Twitter Card Plugin for WordPress≤2.4.5Update to 2.5.0
CVE-2017-18504—
Medium6.1Cross-Site Scripting
Twitter Cards Meta – Best Twitter Card Plugin for WordPress<2.5.0Update to 2.5.0
CVE-2017-18503—
High8.31.44 - Unauthenticated PHP Object Injection
BlogVault Backup & Staging1.40 – 1.44Update to 1.45
——
Medium6.1Stored Cross-Site Scripting
WordPress Firewall 2≤1.3No patch available
——
Medium6.1All In One Schema Rich Snippets <= 1.4.4 - Cross-Site Scripting
Schema – All In One Schema Rich Snippets<1.5.0Update to 1.5.0
CVE-2018-20977—
Critical9.8SQL Injection via selectMulGallery
Image Gallery with Slideshow Plugin≤1.5.2No patch available
CVE-2017-1002015—
Critical9.8Blind SQL Injection via imgid
Image Gallery with Slideshow Plugin≤1.5.2No patch available
CVE-2017-1002013—
Critical9.8SQL Injection via gid
Image Gallery with Slideshow Plugin≤1.5.2No patch available
CVE-2017-1002012—
Medium5.4Stored Cross-Site Scripting
Image Gallery with Slideshow Plugin≤1.5.2No patch available
CVE-2017-1002011—
Critical9.8SQL Injection via gallery_name
Image Gallery with Slideshow Plugin≤1.5.2No patch available
CVE-2017-1002014—
High8.8Cross-Site Request Forgery
LayerSlider≤6.2.0Update to 6.2.1
——
High8.8Cross-Site Request Forgery to Stored Cross-Site Scripting
LayerSlider<6.2.1Update to 6.2.1
——
High8.2Open Proxy
filedownload≤1.4Update to 2.0
CVE-2015-1000002—
Medium6.1Reflected Cross-Site Scripting
YOP Poll<5.8.1Update to 5.8.1
CVE-2017-2127—
High8.8Cross-Site Request Forgery
Invite Anyone<1.3.16Update to 1.3.16
CVE-2017-18544—
High7.5Email Injection
Invite Anyone<1.3.16Update to 1.3.16
CVE-2017-18543—
High7.5Improper Input Validation
Invite Anyone≤1.3.15Update to 1.3.16
CVE-2017-18545—
Critical9.8SQL Injection
Search Everything≤8.1.6Update to 8.1.7
CVE-2017-18571—
Medium5.3Change of Email Invitation Content
Invite Anyone<1.3.15Update to 1.3.15
CVE-2017-6955—
Medium4.3Authorization Bypass
BuddyPress Docs<1.9.3Update to 1.9.3
CVE-2017-6954—
Critical9.8SQL Injection
Membership Simplified≤1.58No patch available
CVE-2017-1002009—
High8.3Unauthenticated PHP Objection Injection
Simple Ads Manager<2.10.0.130Update to 2.10.0.130
——
High8.8SQL Injection
Membership Simplified<1.58Update to 1.58
CVE-2017-1002010—
Critical9.8Arbitrary File Download
Membership Simplified≤1.58No patch available
CVE-2017-1002008—
High7.5Missing Authorization
DTracker≤1.5No patch available
CVE-2017-1002006—
Medium5.5Cross-Site Scripting
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor<2.5.8Update to 2.5.8
——
Critical9.8SQL Injection
PICA Photo Gallery≤1.0No patch available
CVE-2017-20247—
High7.2SQL Injection via subscriber_email parameter
Mail Masta≤1.0No patch available
CVE-2017-6578—
High7.5Authorization Bypass
DTracker≤1.5No patch available
CVE-2017-1002007—
Critical9.8SQL Injection
DTracker≤1.5No patch available
CVE-2017-1002004—

Search VulnCrest Radar

Jump to

Are you sure?