Database

WordPress Vulnerability Database (page 1383)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

WordPress Vulnerability Database (page 1383)
Severity	Vulnerability	CVE	Installs	Published
Critical9.8	Local File Inclusion Mail Masta≤1.0No patch available	CVE-2016-10956	—	Aug 23, 2016
Medium6.1	Multipurpose WordPress Theme (All Versions) - Reflected Cross-Site Scripting Akal - Multipurpose WordPress Themeall versionsNo patch available	CVE-2016-10957	—	Aug 22, 2016
Medium6.5	Denial of Service WordPress<4.6Update to 4.6	CVE-2016-6896	—	Aug 22, 2016
Medium5.5	Cross-Site Scripting CampTix Event Ticketing<1.5Update to 1.5	CVE-2016-10763	—	Aug 18, 2016
High8.8	Authenticated SQL Injection Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder<2.9.55.2Update to 2.9.55.2	—	—	Aug 16, 2016
High8.8	Cross-Site Request Forgery WordPress<4.6Update to 4.6	CVE-2016-6897	—	Aug 16, 2016
Medium4.3	Authorization Bypass WordPress<4.6Update to 4.6	CVE-2016-10148	—	Aug 16, 2016
Medium5.4	Reflected Cross-Site Scripting Google Maps≤2.1.3Update to 2.1.4	—	—	Aug 15, 2016
Medium6.1	Reflected Cross-Site Scripting Link Library<5.9.12.30Update to 5.9.12.30	—	—	Aug 15, 2016
Medium4.3	Cross-Site Request Forgery Email Users<4.8.4Update to 4.8.4	—	—	Aug 15, 2016
Critical9.8	Local File Inclusion Ajax Load More – Infinite Scroll, Load More, & Lazy Load<2.11.2Update to 2.11.2	—	—	Aug 15, 2016
High8.8	Cross-Site Request Forgery Photo Gallery by Supsystic – Image Gallery, Masonry, Albums & Lightbox<1.8.6Update to 1.8.6	CVE-2016-10918	—	Aug 15, 2016
Medium6.1	Cross-Site Scripting LoginWP (Formerly Peter's Login Redirect)<2.9.1Update to 2.9.1	CVE-2016-10925	—	Aug 11, 2016
Critical9.8	Unauthenticated PHP Object injection Ecwid by Lightspeed Ecommerce Shopping Cart≤4.4.3Update to 4.4.4	—	—	Aug 8, 2016
High8.8	Cross-Site Request Forgery Add From Server<3.3.2Update to 3.3.2	CVE-2016-10914	—	Aug 8, 2016
Medium6.3	Cross-Site Request Forgery FormBuilder≤1.07Update to 1.08	—	—	Aug 8, 2016
High8.3	Unauthenticated Stored Cross-Site Scripting Count per Day<3.5.5Update to 3.5.5	—	—	Aug 5, 2016
High8.8	SQL Injection WP Multiple Meta Box≤1.0.0Update to 1.1.0	—	—	Aug 4, 2016
Medium6.1	Stored Cross-Site Scripting Events Made Easy≤1.6.20Update to 1.6.21	—	—	Aug 4, 2016
High7.1	Reflected Cross-Site Scripting Count per Day<3.5.5Update to 3.5.5	—	—	Aug 4, 2016
Medium5.5	Admin+ Cross-Site Scripting SlideShare for WordPress by Yoast≤1.9.1Update to 1.9.2	—	—	Aug 4, 2016
Medium6.1	Reflected Cross-Site Scripting FormBuilder≤1.05Update to 1.06	CVE-2016-10910	—	Aug 4, 2016
High8.8	Cross-Site Request Forgery WP Database Backup – Unlimited Database & Files Backup by Backup for WP<4.3.3Update to 4.3.3	CVE-2016-10874	—	Aug 4, 2016
Medium6.1	Reflected Cross-Site Scripting Activity Log – Monitor User and Agent Changes<2.3.2Update to 2.3.3	CVE-2016-10890	—	Aug 3, 2016
Medium6.1	Cross-Site Scripting Activity Log – Monitor User and Agent Changes<2.3.3Update to 2.3.3	CVE-2016-10891	—	Aug 3, 2016
Medium6.1	Cross-Site Scripting WP Database Backup – Unlimited Database & Files Backup by Backup for WP<4.3.3Update to 4.3.3	CVE-2016-10873	—	Aug 3, 2016
High8.8	Remote Code Execution wsecure lite<2.4Update to 2.4	CVE-2016-10960	—	Aug 2, 2016
Medium5.4	Authenticated Stored Cross-Site Scripting Yoast SEO – Advanced SEO with real-time guidance and built-in AI<3.4.1Update to 3.4.1	CVE-2021-24153	—	Aug 2, 2016
Medium6.1	Cross-Site Scripting Uji Countdown≤2.0.6Update to 2.0.7	CVE-2016-10900	—	Aug 2, 2016
High8.8	Cross-Site Request Forgery leading to Cross-Site Scripting Booking Calendar<6.2.1Update to 6.2.1	—	—	Aug 1, 2016

Critical9.8
Local File Inclusion
Mail Masta
≤1.0No patch available
CVE-2016-10956Aug 23, 2016
Medium6.1
Multipurpose WordPress Theme (All Versions) - Reflected Cross-Site Scripting
Akal - Multipurpose WordPress Theme
all versionsNo patch available
CVE-2016-10957Aug 22, 2016
Medium6.5
Denial of Service
WordPress
<4.6Update to 4.6
CVE-2016-6896Aug 22, 2016
Medium5.5
Cross-Site Scripting
CampTix Event Ticketing
<1.5Update to 1.5
CVE-2016-10763Aug 18, 2016
High8.8
Authenticated SQL Injection
Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder
<2.9.55.2Update to 2.9.55.2
89a44d42-a110-4f55-ad27-2be4ccb41a16Aug 16, 2016
High8.8
Cross-Site Request Forgery
WordPress
<4.6Update to 4.6
CVE-2016-6897Aug 16, 2016
Medium4.3
Authorization Bypass
WordPress
<4.6Update to 4.6
CVE-2016-10148Aug 16, 2016
Medium5.4
Reflected Cross-Site Scripting
Google Maps
≤2.1.3Update to 2.1.4
7cc96e83-28d9-4c6e-876f-23f1836ffd74Aug 15, 2016
Medium6.1
Reflected Cross-Site Scripting
Link Library
<5.9.12.30Update to 5.9.12.30
4e30c4fd-91fd-4f05-85fa-73e445de3c6eAug 15, 2016
Medium4.3
Cross-Site Request Forgery
Email Users
<4.8.4Update to 4.8.4
77f0c100-1e33-4f18-80df-ed607faba5f7Aug 15, 2016
Critical9.8
Local File Inclusion
Ajax Load More – Infinite Scroll, Load More, & Lazy Load
<2.11.2Update to 2.11.2
c1bb3ab9-afbb-40e7-967a-45f737777dcfAug 15, 2016
High8.8
Cross-Site Request Forgery
Photo Gallery by Supsystic – Image Gallery, Masonry, Albums & Lightbox
<1.8.6Update to 1.8.6
CVE-2016-10918Aug 15, 2016
Medium6.1
Cross-Site Scripting
LoginWP (Formerly Peter's Login Redirect)
<2.9.1Update to 2.9.1
CVE-2016-10925Aug 11, 2016
Critical9.8
Unauthenticated PHP Object injection
Ecwid by Lightspeed Ecommerce Shopping Cart
≤4.4.3Update to 4.4.4
af5a58d1-946a-451b-bc8b-a397345ae89aAug 8, 2016
High8.8
Cross-Site Request Forgery
Add From Server
<3.3.2Update to 3.3.2
CVE-2016-10914Aug 8, 2016
Medium6.3
Cross-Site Request Forgery
FormBuilder
≤1.07Update to 1.08
7ae1d155-deb4-4847-858b-37b5cd9ac1c5Aug 8, 2016
High8.3
Unauthenticated Stored Cross-Site Scripting
Count per Day
<3.5.5Update to 3.5.5
ffa90aae-c512-4e7f-a041-e3e41cb8a1d8Aug 5, 2016
High8.8
SQL Injection
WP Multiple Meta Box
≤1.0.0Update to 1.1.0
f7b24a89-816d-4021-b8de-d1ca14ce3cb9Aug 4, 2016
Medium6.1
Stored Cross-Site Scripting
Events Made Easy
≤1.6.20Update to 1.6.21
deba9cd0-2c7e-4789-8499-977c694aba8bAug 4, 2016
High7.1
Reflected Cross-Site Scripting
Count per Day
<3.5.5Update to 3.5.5
d2ea39fb-5adc-4666-95da-b25024ca32d6Aug 4, 2016
Medium5.5
Admin+ Cross-Site Scripting
SlideShare for WordPress by Yoast
≤1.9.1Update to 1.9.2
78f3e63b-1d60-47bb-9366-dbdd81d6ed19Aug 4, 2016
Medium6.1
Reflected Cross-Site Scripting
FormBuilder
≤1.05Update to 1.06
CVE-2016-10910Aug 4, 2016
High8.8
Cross-Site Request Forgery
WP Database Backup – Unlimited Database & Files Backup by Backup for WP
<4.3.3Update to 4.3.3
CVE-2016-10874Aug 4, 2016
Medium6.1
Reflected Cross-Site Scripting
Activity Log – Monitor User and Agent Changes
<2.3.2Update to 2.3.3
CVE-2016-10890Aug 3, 2016
Medium6.1
Cross-Site Scripting
Activity Log – Monitor User and Agent Changes
<2.3.3Update to 2.3.3
CVE-2016-10891Aug 3, 2016
Medium6.1
Cross-Site Scripting
WP Database Backup – Unlimited Database & Files Backup by Backup for WP
<4.3.3Update to 4.3.3
CVE-2016-10873Aug 3, 2016
High8.8
Remote Code Execution
wsecure lite
<2.4Update to 2.4
CVE-2016-10960Aug 2, 2016
Medium5.4
Authenticated Stored Cross-Site Scripting
Yoast SEO – Advanced SEO with real-time guidance and built-in AI
<3.4.1Update to 3.4.1
CVE-2021-24153Aug 2, 2016
Medium6.1
Cross-Site Scripting
Uji Countdown
≤2.0.6Update to 2.0.7
CVE-2016-10900Aug 2, 2016
High8.8
Cross-Site Request Forgery leading to Cross-Site Scripting
Booking Calendar
<6.2.1Update to 6.2.1
6f36d866-aa94-478b-8b62-0906bc95e413Aug 1, 2016