Database
WordPress Vulnerability Database (page 1381)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
- Medium6.1Cross-Site Scripting
Quotes Collection
<2.0.6Update to 2.0.6
- Medium6.1Cross-Site Request Forgery to Stored Cross-Site Scripting
Caldera Forms – More Than Contact Forms
≤1.4.1Update to 1.4.2
- High8.8Unauthenticated PHP Object Injection
YITH WooCommerce Compare
≤2.0.9Update to 2.1.0
- High7.1Reflected Cross-Site Scripting
Calendar
<1.3.8Update to 1.3.8
- Critical9.1Arbitrary File Deletion
Post Grid
≤2.0.12Update to 2.0.13
- Medium6.1Cross-Site Scripting
WassUp Real Time Analytics
<1.9.1Update to 1.9.1
- Medium6.1Stored Cross-Site Scripting
DW Question & Answer
<1.4.2.3Update to 1.4.2.3
- High8.6Server-Side Request Forgery leading to Host Information Disclosure
W3 Total Cache
≤0.9.4Update to 0.9.5
- High8.8Cross-Site Request Forgery
GoDaddy Email Marketing
<1.1.4Update to 1.1.4
- High8.8Cross-Site Request Forgery
WP Database Backup – Unlimited Database & Files Backup by Backup for WP
<4.3.6Update to 4.3.6
- Critical9.8Local File Inclusion
InPost Gallery
<2.1.2.1Update to 2.1.2.1
- Medium6.4Cross-Site Scripting
InPost Gallery
<2.1.2.1Update to 2.1.2.1
- Medium6.1Reflected Cross-Site Scripting
Pondol Carousel
≤1.0No patch available
- Medium6.1Reflected Cross-Site Scripting
Tera Charts
≤1.0No patch available
- High7.3Use of Vulnerable Component
OneLogin SAML SSO
≤2.4.2Update to 2.4.3
- Medium6.1Reflected Cross-Site Scripting
CM Tooltip Glossary
<3.3.5Update to 3.3.5
- Medium6.1Reflected Cross-Site Scripting
Simpel Reserveren 3
≤3.5.2No patch available
- Medium6.1Reflected Cross-Site Scripting via channel parameter
HDW WordPress Video Gallery
≤1.2No patch available
- Medium6.1Reflected Cross-Site Scripting via gid
PhotoXhibit
≤2.1.8No patch available
- Medium6.1Reflected Cross-Site Scripting
Tidio Gallery
≤1.1No patch available
- Medium6.1Reflected Cross-Site Scripting
E-Search
≤1.0No patch available
- Medium6.1Reflected Cross-Site Scripting via playlist parameter
HDW WordPress Video Gallery
≤1.2No patch available
- Medium6.1Reflected Cross-Site Scripting
indexisto
≤1.0.5No patch available
- High8.8Local/Remote File Inclusion
Simple Ads Manager
≤2.10.0.130No patch available
- Medium6.1Reflected Cross-Site Scripting
WHIZZ
<1.0.8Update to 1.0.8
- Critical9.8SQL Injection
Zotpress
<6.1.3Update to 6.1.3
- Medium6.4Stored Cross-Site Scripting
Kadence Security – Password, Two Factor Authentication, and Brute Force Protection
<5.6.2Update to 5.6.2
- Medium6.1Multiple Reflected Cross-Site Scripting
Appointment Calendar
≤2.7.4Update to 2.7.5
- Medium6.1Cross-Site Scripting
WP Editor
<1.2.6.3Update to 1.2.6.3
- Medium6.1Reflected Cross-Site Scripting
Portfolio Gallery – Photo Gallery
≤2.1.0Update to 2.1.11