Database
WordPress Vulnerability Database (page 1382)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
- Medium6.4Stored Cross-Site Scripting
wp-appointment-schedule-booking-system
≤1.0No patch available
- High8.8Cross-Site Request Forgery to User Import and Cross-Site Scripting
Members Import
≤1.3Update to 1.4
- Medium5.0Server-Side Request Forgery
WordPress
<4.5Update to 4.5
- Medium6.1Cross-Site Scripting
Google Doc Embedder
<2.6.2Update to 2.6.2
- Medium5.3Sensitive Information Exposure via Diff Response
Kadence Security – Password, Two Factor Authentication, and Brute Force Protection
≤5.6.1Update to 5.6.2
- High8.8Cross-Site Request Forgery
Google Doc Embedder
≤2.6.1Update to 2.6.2
- High8.8Arbitrary File Upload
W3 Total Cache
≤0.9.4.1Update to 0.9.5
- Low3.7Security Token Bypass via Type Juggling
W3 Total Cache
≤0.9.4.1Update to 0.9.5
- Medium4.9Authenticated Arbitrary File Download
W3 Total Cache
≤0.9.4.1Update to 0.9.5
- High7.2Arbitrary Code Execution via settings import
W3 Total Cache
≤0.9.4.1Update to 0.9.5
- Medium6.1Cross-Site Scripting
Google Doc Embedder
<2.6.1Update to 2.6.1
- High7.5Insecure Direct Object Reference
WP Support Plus Responsive Ticket System
<7.1.0Update to 7.1.0
- Critical9.8Multipurpose WordPress Theme | WordPress < 1.8 - Arbitrary File Upload
Neosense - Multipurpose WordPress Theme | WordPress
<1.8Update to 1.8
- Critical9.8Arbitrary File Upload
PPOM – Product Addons & Custom Fields for WooCommerce
≤1.1Update to 2.0
- High8.8Cross-Site Request Forgery to Cross-Site Scripting
Podlove Podcast Publisher
<2.3.16Update to 2.3.16
- High8.8Multiple Cross-Site Request Forgery
Simple Membership
≤3.3.2Update to 3.3.3
- Medium6.4Stored Cross-Site Scripting
WP Frontend Profile
≤0.2.1Update to 0.2.2
- Critical9.8Privilege Escalation
WP Frontend Profile
≤0.2.1Update to 0.2.2
- Medium6.5SQL Injection
MailPoet Newsletters (Previous)
≤2.7.2Update to 2.7.3
- Medium6.5Reflected Cross-Site Scripting
MailPoet Newsletters (Previous)
≤2.7.2Update to 2.7.3
- Medium5.4Cross-Site Scripting
Gravity Forms
≤2.0.6.5Update to 2.0.7
- Medium4.8Authenticated Stored Cross-Site Scripting
WordPress
≤4.6Update to 3.7.16 or 3.8.16 or 3.9.14 or 4.0.13 or 4.1.13 or 4.2.10 or 4.3.6 or 4.4.5 or 4.5.4 or 4.6.1
- Medium6.5Authenticated Directory Traversal to Arbitrary File Access
WordPress
≤4.6Update to 3.7.16 or 3.8.16 or 3.9.14 or 4.0.13 or 4.1.13 or 4.2.10 or 4.3.6 or 4.4.5 or 4.5.4 or 4.6.1
- High8.8Cross-Site Request Forgery
Customer Engagement System – Popup Builder, Forms, CRM & Email Marketing Automation
<1.7.9Update to 1.7.9
- Medium6.4Authenticated Stored Cross-Site Scripting
Advanced ads Management by Inazo
<1.4Update to 1.4
- Medium6.1Reflected Cross-Site Scripting
Infusionsoft Gravity Forms Add-on
<1.5.12Update to 1.5.12
- High7.2Unauthenticated Stored Cross-Site Scripting
Connect Matomo – Analytics Dashboard for WordPress
≤1.0.10Update to 1.0.11
- High7.2Unauthenticated Stored Cross-Site Scripting
404 to 301 – Redirect Manager, 301 Redirection, 404 Error Logs & 404 Monitoring
≤2.3.0Update to 2.3.1
- Critical9.8Arbitrary File Upload/Read
CYSTEME Finder, the admin files explorer
<1.4Update to 1.4
- Critical9.8SQL Injection
Zero Spam for WordPress
≤2.1.1Update to 2.2.0