Database

WordPress Vulnerability Database (page 1384)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

WordPress Vulnerability Database (page 1384)
Severity	Vulnerability	CVE	Installs	Published
Medium6.1	Cross-Site Scripting WP Database Backup – Unlimited Database & Files Backup by Backup for WP<4.3.1Update to 4.3.1	CVE-2016-10875	—	Aug 1, 2016
Medium6.1	Unauthenticated Stored Cross-Site Scripting 3CX Free Live Chat, Calls & Messaging≤6.2.03Update to 6.2.04	CVE-2016-10879	—	Aug 1, 2016
High8.8	Cross-Site Request Forgery to Arbitrary File Upload Estatik Real Estate Plugin≤2.3.0Update to 2.3.1	CVE-2016-10959	—	Aug 1, 2016
Medium6.1	Reflected Cross-Site Scripting Contact Bank – Contact Form Builder for WordPress<2.1.23Update to 2.1.23	—	—	Aug 1, 2016
High8.8	Cross-Site Request Forgery leading to Cross-Site Scripting Booking Calendar<6.2.1Update to 6.2.1	—	—	Aug 1, 2016
Critical9.8	Unauthenticated Arbitrary File Upload Estatik Real Estate Plugin≤2.3.0Update to 2.3.1	CVE-2016-10958	—	Aug 1, 2016
Critical9.8	Arbitrary File Upload Adblock Blocker0.0.1 – 0.0.1No patch available	—	—	Aug 1, 2016
High7.2	Authenticated (Editor+) SQL Injection Booking Calendar<6.2.1Update to 6.2.1	—	—	Aug 1, 2016
High8.8	Cross-Site Request Forgery to SQL Injection Booking Calendar<6.2.1Update to 6.2.1	—	—	Aug 1, 2016
High7.4	Authenticated Stored Cross-Site Scripting Easy Testimonials<1.37Update to 1.37	—	—	Jul 31, 2016
Medium5.3	Captcha Bypass All-In-One Security (AIOS) – Security and Firewall≤4.1.2Update to 4.1.3	—	—	Jul 31, 2016
Medium6.1	Cross-Site Scripting via request_id W3 Total Cache≤0.9.4.1Update to 0.9.5	—	—	Jul 29, 2016
Medium6.1	Cross-Site Scripting WP-Polls≤2.73Update to 2.73.1	CVE-2016-10936	—	Jul 29, 2016
Medium6.1	Reflected Cross-Site Scripting Activity Log – Monitor User and Agent Changes<2.3.3Update to 2.3.3	—	—	Jul 29, 2016
Medium4.3	Sensitive Information Disclosure Simple History – Track, Log, and Audit WordPress Changes≤2.7.4Update to 2.7.5	—	—	Jul 28, 2016
Medium6.1	Cross-Site Scripting WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings<3.1.2Update to 3.1.2	CVE-2016-10878	—	Jul 27, 2016
Medium6.4	Stored Cross-Site Scripting Clicky for WordPress<1.6Update to 1.6	—	—	Jul 27, 2016
Medium6.1	Cross-Site Scripting Woo Custom Checkout Field<1.3.5Update to 1.3.5	—	—	Jul 26, 2016
Medium6.4	Stored Cross-Site Scripting via REST-API WooCommerce<2.6.4Update to 2.6.4	—	—	Jul 26, 2016
Medium5.3	Unauthenticated Settings Change Total Security≤3.4.0Update to 3.4.1	CVE-2016-10899	—	Jul 25, 2016
Medium6.1	Cross-Site Scripting Total Security<3.4.1Update to 3.4.1	CVE-2016-10898	—	Jul 25, 2016
High8.8	Authorization Bypass Stock Manager for WooCommerce≤1.0.7Update to 1.0.8	—	—	Jul 25, 2016
Medium6.1	Reflected Cross-Site Scripting Code Snippets<2.7.0Update to 2.7.0	—	—	Jul 24, 2016
High7.1	Reflected Cross-Site Scripting Contact Form Email<1.1.48Update to 1.1.48	—	—	Jul 24, 2016
Medium6.1	Reflected Cross-Site Scripting WP Mail<1.2Update to 1.2	CVE-2017-5942	—	Jul 23, 2016
High7.4	Authenticated Stored Cross-Site Scripting Lazy Load<0.6.1Update to 0.6.1	—	—	Jul 20, 2016
Medium6.1	Cross-Site Scripting Nofollow Links≤1.0.10Update to 1.0.11	CVE-2016-4833	—	Jul 20, 2016
Critical9.8	Unauthenticated Arbitrary Options Update Form Lightbox≤2.1No patch available	—	—	Jul 19, 2016
High8.8	Cross-Site Request Forgery Icegram Engage – Popups, Welcome Bars, Optins, Slide-Ins & Lead Generation for WordPress<1.9.19Update to 1.9.19	CVE-2016-10962	—	Jul 19, 2016
Medium6.4	Stored Cross-Site Scripting WooCommerce<2.6.3Update to 2.6.3	—	—	Jul 19, 2016

Medium6.1
Cross-Site Scripting
WP Database Backup – Unlimited Database & Files Backup by Backup for WP
<4.3.1Update to 4.3.1
CVE-2016-10875Aug 1, 2016
Medium6.1
Unauthenticated Stored Cross-Site Scripting
3CX Free Live Chat, Calls & Messaging
≤6.2.03Update to 6.2.04
CVE-2016-10879Aug 1, 2016
High8.8
Cross-Site Request Forgery to Arbitrary File Upload
Estatik Real Estate Plugin
≤2.3.0Update to 2.3.1
CVE-2016-10959Aug 1, 2016
Medium6.1
Reflected Cross-Site Scripting
Contact Bank – Contact Form Builder for WordPress
<2.1.23Update to 2.1.23
6278c70a-7b25-45f0-bc64-ecb231e1bf55Aug 1, 2016
High8.8
Cross-Site Request Forgery leading to Cross-Site Scripting
Booking Calendar
<6.2.1Update to 6.2.1
6f36d866-aa94-478b-8b62-0906bc95e413Aug 1, 2016
Critical9.8
Unauthenticated Arbitrary File Upload
Estatik Real Estate Plugin
≤2.3.0Update to 2.3.1
CVE-2016-10958Aug 1, 2016
Critical9.8
Arbitrary File Upload
Adblock Blocker
0.0.1 – 0.0.1No patch available
b0302a75-217f-4be9-876e-10ede3e3c20dAug 1, 2016
High7.2
Authenticated (Editor+) SQL Injection
Booking Calendar
<6.2.1Update to 6.2.1
ef9d256b-9156-4172-8892-29a26beddb71Aug 1, 2016
High8.8
Cross-Site Request Forgery to SQL Injection
Booking Calendar
<6.2.1Update to 6.2.1
e865324e-a2a2-40fb-8c6a-a89317b59c8cAug 1, 2016
High7.4
Authenticated Stored Cross-Site Scripting
Easy Testimonials
<1.37Update to 1.37
ff9cfa56-e178-4de7-9e6b-e0a520153eb2Jul 31, 2016
Medium5.3
Captcha Bypass
All-In-One Security (AIOS) – Security and Firewall
≤4.1.2Update to 4.1.3
352a0c8a-22a6-44d9-917c-5fb37569d143Jul 31, 2016
Medium6.1
Cross-Site Scripting via request_id
W3 Total Cache
≤0.9.4.1Update to 0.9.5
3b8282a2-8265-4fa0-b137-6272b9e44fc3Jul 29, 2016
Medium6.1
Cross-Site Scripting
WP-Polls
≤2.73Update to 2.73.1
CVE-2016-10936Jul 29, 2016
Medium6.1
Reflected Cross-Site Scripting
Activity Log – Monitor User and Agent Changes
<2.3.3Update to 2.3.3
633a9cbf-451d-4fd1-822b-ef8966ff9a1aJul 29, 2016
Medium4.3
Sensitive Information Disclosure
Simple History – Track, Log, and Audit WordPress Changes
≤2.7.4Update to 2.7.5
62e01d59-e649-4b84-993b-9faf28a24274Jul 28, 2016
Medium6.1
Cross-Site Scripting
WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings
<3.1.2Update to 3.1.2
CVE-2016-10878Jul 27, 2016
Medium6.4
Stored Cross-Site Scripting
Clicky for WordPress
<1.6Update to 1.6
42d56d6a-365a-4fa2-977f-a1328e0ec1b3Jul 27, 2016
Medium6.1
Cross-Site Scripting
Woo Custom Checkout Field
<1.3.5Update to 1.3.5
cae1e984-95b2-4b76-b6b3-563dc3104a72Jul 26, 2016
Medium6.4
Stored Cross-Site Scripting via REST-API
WooCommerce
<2.6.4Update to 2.6.4
e10a95e3-e834-4f84-85c1-4a1ffad41b5bJul 26, 2016
Medium5.3
Unauthenticated Settings Change
Total Security
≤3.4.0Update to 3.4.1
CVE-2016-10899Jul 25, 2016
Medium6.1
Cross-Site Scripting
Total Security
<3.4.1Update to 3.4.1
CVE-2016-10898Jul 25, 2016
High8.8
Authorization Bypass
Stock Manager for WooCommerce
≤1.0.7Update to 1.0.8
2ae70225-3597-463b-907c-d2a3a7bcecb4Jul 25, 2016
Medium6.1
Reflected Cross-Site Scripting
Code Snippets
<2.7.0Update to 2.7.0
fd0c3965-6b35-46a8-8cf0-6726cdb03c8fJul 24, 2016
High7.1
Reflected Cross-Site Scripting
Contact Form Email
<1.1.48Update to 1.1.48
c77295f3-0a37-4fa8-a375-b4bd3dc55945Jul 24, 2016
Medium6.1
Reflected Cross-Site Scripting
WP Mail
<1.2Update to 1.2
CVE-2017-5942Jul 23, 2016
High7.4
Authenticated Stored Cross-Site Scripting
Lazy Load
<0.6.1Update to 0.6.1
06187bf0-7e3b-49c0-9f34-3d717e8d8eceJul 20, 2016
Medium6.1
Cross-Site Scripting
Nofollow Links
≤1.0.10Update to 1.0.11
CVE-2016-4833Jul 20, 2016
Critical9.8
Unauthenticated Arbitrary Options Update
Form Lightbox
≤2.1No patch available
c63048ad-3d37-402e-8e61-415d2d6caa69Jul 19, 2016
High8.8
Cross-Site Request Forgery
Icegram Engage – Popups, Welcome Bars, Optins, Slide-Ins & Lead Generation for WordPress
<1.9.19Update to 1.9.19
CVE-2016-10962Jul 19, 2016
Medium6.4
Stored Cross-Site Scripting
WooCommerce
<2.6.3Update to 2.6.3
1e5e16c9-53d2-4fdd-8370-920b22f52033Jul 19, 2016