Database

WordPress Vulnerability Database (page 1380)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

WordPress Vulnerability Database (page 1380)
Severity	Vulnerability	CVE	Installs	Published
Critical9.8	SQL Injection WA Form Builder≤1.1No patch available	—	—	Dec 5, 2016
Medium6.1	Cross-Site Scripting Responsive Lightbox & Gallery≤1.7.1Update to 1.7.2	CVE-2017-2243	—	Dec 1, 2016
Medium5.3	Local File Inclusion WP Vault≤0.8.6.6No patch available	CVE-2016-20064	—	Nov 30, 2016
Medium6.1	Cross-Site Request Forgery to Stored Cross-Site Scripting Insert Html Snippet<1.2.1Update to 1.2.1	—	—	Nov 29, 2016
Critical9.8	SQL Injection product-catalog-8≤1.2.0No patch available	CVE-2016-20065	—	Nov 28, 2016
Medium5.5	Responsive Photo Gallery < 2.0.6 - Authenticated Stored Cross-Site Scripting Image Gallery - Responsive Photo Gallery<2.0.6Update to 2.0.6	—	—	Nov 23, 2016
Critical9.8	Arbitrary File Upload Csv2WPeC Coupon≤1.1No patch available	CVE-2015-1000013	—	Nov 23, 2016
High8.8	Cross-Site Request Forgery Platform≤1.1.4No patch available	CVE-2016-10945	—	Nov 23, 2016
Critical9.8	SQL Injection Olimometer<2.57Update to 2.57	CVE-2016-10904	—	Nov 22, 2016
High8.8	Cross-Site Request Forgery Wp-D3<2.4.1Update to 2.4.1	CVE-2016-10946	—	Nov 21, 2016
Medium6.1	Reflected Cross-Site Scripting Vospari Forms<1.4Update to 1.4	CVE-2017-1000033	—	Nov 21, 2016
Medium6.4	Cross-Site Request Forgery to Stored Cross-Site Scripting Smash Balloon Social Photo Feed – Easy Social Feeds Plugin≤1.4.6.2Update to 1.4.7	—	—	Nov 19, 2016
High7.4	Authenticated Stored Cross-Site Scripting Shortcodes by Angie Makes<2.07Update to 2.07	—	—	Nov 19, 2016
High8.1	PHP Object Injection Post Indexer<3.0.6.2Update to 3.0.6.2	CVE-2016-10948	—	Nov 17, 2016
Critical9.8	SQL Injection BBS e-Franchise<1.1.4Update to 1.1.4	CVE-2016-20072	—	Nov 17, 2016
High8.8	SQL Injection Relevanssi Premium<1.14.6.1Update to 1.14.6.1	CVE-2016-10949	—	Nov 17, 2016
High7.2	Authenticated (Super Admin+) SQL Injection Post Indexer<3.0.6.2Update to 3.0.6.2	CVE-2016-10947	—	Nov 17, 2016
Critical9.8	Authenticated Local File Inclusion & SQL injection Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery≤2.1.56Update to 2.1.57	CVE-2016-10889	—	Nov 15, 2016
High7.5	Remote File Inclusion Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery≤2.1.56Update to 2.1.57	CVE-2016-6565	—	Nov 15, 2016
High8.8	Video Gallery and YouTube Gallery <= 2.0.3 - Cross-Site Request Forgery Gallery - Video Gallery and YouTube Gallery≤2.0.3Update to 2.0.4	—	—	Nov 13, 2016
High7.2	Stored Cross-Site Scripting lightbox<1.6.8Update to 1.6.8	—	—	Nov 13, 2016
High8.3	SQL Injection WP eCommerce<3.11.4Update to 3.11.4	—	—	Nov 12, 2016
Medium6.1	Reflected Cross-Site Scripting Check & Log Email – Easy Email Testing & Mail logging<0.5.2Update to 0.5.2	CVE-2016-10934	—	Nov 12, 2016
High7.2	Authenticated (Admin+) SQL Injection mini-cart≤1.00.1No patch available	—	—	Nov 11, 2016
Medium6.1	Reflected Cross-Site Scripting All-In-One Security (AIOS) – Security and Firewall<4.2.0Update to 4.2.0	CVE-2016-10866	—	Nov 11, 2016
Critical9.8	SQL Injection Answer My Question≤1.3No patch available	CVE-2016-20073	—	Nov 11, 2016
High8.8	SQL Injection Image Optimizer, Resizer and CDN – Sirv<1.3.2Update to 1.3.2	CVE-2016-10950	—	Nov 10, 2016
Medium6.4	Stored Cross-Site Scripting WP Go Maps – Google Map, OpenStreetMap, Leaflet & Store Locator≤6.3.14Update to 6.3.15	—	—	Nov 10, 2016
High7.2	SQL Injection FireStorm Shopping Cart eCommerce Plugin≤2.07.02No patch available	CVE-2016-10951	—	Nov 10, 2016
High7.2	Weak validation of Amazon SNS push messages W3 Total Cache≤0.9.4.1Update to 0.9.5	—	—	Nov 10, 2016

Critical9.8
SQL Injection
WA Form Builder
≤1.1No patch available
59a645e4-2a23-4440-a463-fa197dfa20b2Dec 5, 2016
Medium6.1
Cross-Site Scripting
Responsive Lightbox & Gallery
≤1.7.1Update to 1.7.2
CVE-2017-2243Dec 1, 2016
Medium5.3
Local File Inclusion
WP Vault
≤0.8.6.6No patch available
CVE-2016-20064Nov 30, 2016
Medium6.1
Cross-Site Request Forgery to Stored Cross-Site Scripting
Insert Html Snippet
<1.2.1Update to 1.2.1
71aeca29-a9bd-42c0-8150-814b79e931faNov 29, 2016
Critical9.8
SQL Injection
product-catalog-8
≤1.2.0No patch available
CVE-2016-20065Nov 28, 2016
Medium5.5
Responsive Photo Gallery < 2.0.6 - Authenticated Stored Cross-Site Scripting
Image Gallery - Responsive Photo Gallery
<2.0.6Update to 2.0.6
d3b954e6-cf5d-4451-b770-777d116edd90Nov 23, 2016
Critical9.8
Arbitrary File Upload
Csv2WPeC Coupon
≤1.1No patch available
CVE-2015-1000013Nov 23, 2016
High8.8
Cross-Site Request Forgery
Platform
≤1.1.4No patch available
CVE-2016-10945Nov 23, 2016
Critical9.8
SQL Injection
Olimometer
<2.57Update to 2.57
CVE-2016-10904Nov 22, 2016
High8.8
Cross-Site Request Forgery
Wp-D3
<2.4.1Update to 2.4.1
CVE-2016-10946Nov 21, 2016
Medium6.1
Reflected Cross-Site Scripting
Vospari Forms
<1.4Update to 1.4
CVE-2017-1000033Nov 21, 2016
Medium6.4
Cross-Site Request Forgery to Stored Cross-Site Scripting
Smash Balloon Social Photo Feed – Easy Social Feeds Plugin
≤1.4.6.2Update to 1.4.7
062f5bc7-9d53-4a28-b603-9901ce2175d8Nov 19, 2016
High7.4
Authenticated Stored Cross-Site Scripting
Shortcodes by Angie Makes
<2.07Update to 2.07
9652575b-389c-42e3-800a-0f133e0c224bNov 19, 2016
High8.1
PHP Object Injection
Post Indexer
<3.0.6.2Update to 3.0.6.2
CVE-2016-10948Nov 17, 2016
Critical9.8
SQL Injection
BBS e-Franchise
<1.1.4Update to 1.1.4
CVE-2016-20072Nov 17, 2016
High8.8
SQL Injection
Relevanssi Premium
<1.14.6.1Update to 1.14.6.1
CVE-2016-10949Nov 17, 2016
High7.2
Authenticated (Super Admin+) SQL Injection
Post Indexer
<3.0.6.2Update to 3.0.6.2
CVE-2016-10947Nov 17, 2016
Critical9.8
Authenticated Local File Inclusion & SQL injection
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery
≤2.1.56Update to 2.1.57
CVE-2016-10889Nov 15, 2016
High7.5
Remote File Inclusion
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery
≤2.1.56Update to 2.1.57
CVE-2016-6565Nov 15, 2016
High8.8
Video Gallery and YouTube Gallery <= 2.0.3 - Cross-Site Request Forgery
Gallery - Video Gallery and YouTube Gallery
≤2.0.3Update to 2.0.4
02699ada-f4bf-45c4-89e8-018dfff40ac1Nov 13, 2016
High7.2
Stored Cross-Site Scripting
lightbox
<1.6.8Update to 1.6.8
e32a4038-0f67-48b3-80c9-94d279752c31Nov 13, 2016
High8.3
SQL Injection
WP eCommerce
<3.11.4Update to 3.11.4
3c43939f-c0c7-4388-80ae-44bdf67675c7Nov 12, 2016
Medium6.1
Reflected Cross-Site Scripting
Check & Log Email – Easy Email Testing & Mail logging
<0.5.2Update to 0.5.2
CVE-2016-10934Nov 12, 2016
High7.2
Authenticated (Admin+) SQL Injection
mini-cart
≤1.00.1No patch available
0448eb1c-1a4a-465e-aa30-e4af10d27560Nov 11, 2016
Medium6.1
Reflected Cross-Site Scripting
All-In-One Security (AIOS) – Security and Firewall
<4.2.0Update to 4.2.0
CVE-2016-10866Nov 11, 2016
Critical9.8
SQL Injection
Answer My Question
≤1.3No patch available
CVE-2016-20073Nov 11, 2016
High8.8
SQL Injection
Image Optimizer, Resizer and CDN – Sirv
<1.3.2Update to 1.3.2
CVE-2016-10950Nov 10, 2016
Medium6.4
Stored Cross-Site Scripting
WP Go Maps – Google Map, OpenStreetMap, Leaflet & Store Locator
≤6.3.14Update to 6.3.15
a739b805-e631-461e-802f-196e4117d403Nov 10, 2016
High7.2
SQL Injection
FireStorm Shopping Cart eCommerce Plugin
≤2.07.02No patch available
CVE-2016-10951Nov 10, 2016
High7.2
Weak validation of Amazon SNS push messages
W3 Total Cache
≤0.9.4.1Update to 0.9.5
9373c82d-15a8-495a-8290-1b85c096f7e5Nov 10, 2016