VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1385)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

WordPress Vulnerability Database (page 1385)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Multiple Reflected Cross-Site Scripting
Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder<2.9.52Update to 2.9.52
——
Medium6.4Stored Cross-Site Scripting
WooCommerce<2.6.3Update to 2.6.3
——
High8.8Multiple Blind Authenticated SQL Injections
SpiderVPlayer<1.5.18Update to 1.5.18
——
Medium6.1Cross-Site Scripting
dwnldr≤1.0Update to 1.01
CVE-2016-10964—
Medium6.1Reflected Cross-Site Scripting
Woo Email Control<1.02Update to 1.02
——
Medium6.1Cross-Site Scripting
Master Slider – Responsive Touch Slider<2.8.0Update to 2.8.0
——
Critical9.8Arbitrary File Upload
Frontend File Manager Plugin<4.0Update to 4.0
CVE-2016-15042—
Medium5.8CSV Injection
CampTix Event Ticketing<1.5Update to 1.5
CVE-2016-10762—
Medium6.1Cross-Site Scripting
WebberZone Top 10 — Popular Posts<2.3.1Update to 2.3.1
——
Medium6.1Reflected Cross-Site Scripting
Simple Membership<3.2.9Update to 3.2.9
——
Medium6.1Cross-Site Scripting
Google Forms<0.85Update to 0.85
——
High7.1Reflected Cross-Site Scripting
wp-noexternallinks<3.5.16Update to 3.5.16
——
High8.8Local File Inclusion
WP Fastest Cache – WordPress Cache Plugin≤0.8.5.9Update to 0.8.6.0
——
Medium4.7Cross-Site Scripting
bbPress≤2.5.9Update to 2.5.10
——
Medium6.4Authenticated Stored Cross-Site Scripting
Table Field Add-on for ACF and SCF<1.1.13Update to 1.1.13
——
Medium6.1Reflected Cross-Site Scripting
Email Users<4.8.3Update to 4.8.3
——
High7.2Unauthenticated Stored Cross-Site Scripting
All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)<2.3.8Update to 2.3.8
——
Critical9.1Local File Inclusion
Easy Forms for Mailchimp<6.1Update to 6.1
——
Medium6.1Cross-Site Scripting
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor<2.4.2Update to 2.4.2
CVE-2016-10911—
High8.8Arbitrary File Upload
WP Job Manager<1.26.2Update to 1.26.2
——
High7.3Missing Authorization Checks
GEO Plugin by Squirrly SEO<6.1.5Update to 6.1.5
——
Critical9.8SQL Injection
Photo Gallery by Ays – Responsive Image Gallery<1.0.1Update to 1.0.1
CVE-2016-10921—
High7.5Directory Traversal
GEO Plugin by Squirrly SEO<6.1.5Update to 6.1.5
——
Critical9.1Local File Inclusion
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin<1.3.65Update to 1.3.65
——
High7.2Unauthenticated Cross-Site Scripting
WP-EMail≤2.67.2Update to 2.67.3
——
High8.8Privilege Escalation
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor<2.4.1Update to 2.4.1
——
Critical9.8Unauthenticated Arbitrary File Upload
BePro Listings≤2.2.0020Update to 2.2.0021
——
Medium4.3Authenticated Information Disclosure
LightStart – Maintenance Mode, Coming Soon and Landing Page Builder<2.0.7Update to 2.0.7
CVE-2018-20154—
Medium5.4Missing Authorization
LightStart – Maintenance Mode, Coming Soon and Landing Page Builder<2.0.7Update to 2.0.7
CVE-2018-20155—
Medium6.1Reflected Cross-Site Scripting
Real3D Flipbook≤1.0.0No patch available
CVE-2016-10967—
  • Medium6.1
    Multiple Reflected Cross-Site Scripting

    Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder

    <2.9.52Update to 2.9.52

    e01532bb-3011-4efe-b072-d0df5708f8e9

  • Medium6.4
    Stored Cross-Site Scripting

    WooCommerce

    <2.6.3Update to 2.6.3

    1e5e16c9-53d2-4fdd-8370-920b22f52033

  • High8.8
    Multiple Blind Authenticated SQL Injections

    SpiderVPlayer

    <1.5.18Update to 1.5.18

    0caf1660-b85e-46e1-9270-a8e14c6bbf52

  • Medium6.1
    Cross-Site Scripting

    dwnldr

    ≤1.0Update to 1.01

    CVE-2016-10964

  • Medium6.1
    Reflected Cross-Site Scripting

    Woo Email Control

    <1.02Update to 1.02

    66a2a159-5748-49bd-9204-e85e1c6729df

  • Medium6.1
    Cross-Site Scripting

    Master Slider – Responsive Touch Slider

    <2.8.0Update to 2.8.0

    ae8a316f-a9ad-451a-9892-cf5068072a78

  • Critical9.8
    Arbitrary File Upload

    Frontend File Manager Plugin

    <4.0Update to 4.0

    CVE-2016-15042

  • Medium5.8
    CSV Injection

    CampTix Event Ticketing

    <1.5Update to 1.5

    CVE-2016-10762

  • Medium6.1
    Cross-Site Scripting

    WebberZone Top 10 — Popular Posts

    <2.3.1Update to 2.3.1

    81437db2-252e-4031-884e-34112bc7b179

  • Medium6.1
    Reflected Cross-Site Scripting

    Simple Membership

    <3.2.9Update to 3.2.9

    95c2038f-c4f9-472a-92ab-59ee395bda3d

  • Medium6.1
    Cross-Site Scripting

    Google Forms

    <0.85Update to 0.85

    5394623b-e9ee-4047-bfe3-d7f6374993cd

  • High7.1
    Reflected Cross-Site Scripting

    wp-noexternallinks

    <3.5.16Update to 3.5.16

    fc91cae0-6d54-43f3-8c0e-d1f972573d13

  • High8.8
    Local File Inclusion

    WP Fastest Cache – WordPress Cache Plugin

    ≤0.8.5.9Update to 0.8.6.0

    e8fe4aa7-13e6-48ec-afec-2888edd999f5

  • Medium4.7
    Cross-Site Scripting

    bbPress

    ≤2.5.9Update to 2.5.10

    0ec8a72e-0153-4c2b-bdda-c6474cc2aadb

  • Medium6.4
    Authenticated Stored Cross-Site Scripting

    Table Field Add-on for ACF and SCF

    <1.1.13Update to 1.1.13

    f19c84c7-9b27-48b0-b648-b5681eff1371

  • Medium6.1
    Reflected Cross-Site Scripting

    Email Users

    <4.8.3Update to 4.8.3

    25c44a00-da56-41f8-bd4f-c15bede6da58

  • High7.2
    Unauthenticated Stored Cross-Site Scripting

    All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)

    <2.3.8Update to 2.3.8

    c490e344-66da-4176-bd93-7e07a491bfa9

  • Critical9.1
    Local File Inclusion

    Easy Forms for Mailchimp

    <6.1Update to 6.1

    d4bbb00b-4baf-4dc1-85ab-3ca3d59eaf33

  • Medium6.1
    Cross-Site Scripting

    User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor

    <2.4.2Update to 2.4.2

    CVE-2016-10911

  • High8.8
    Arbitrary File Upload

    WP Job Manager

    <1.26.2Update to 1.26.2

    d8029737-f3ad-4025-948a-ba0298c0869d

  • High7.3
    Missing Authorization Checks

    GEO Plugin by Squirrly SEO

    <6.1.5Update to 6.1.5

    0747b104-5be6-44eb-b62c-0026f810573c

  • Critical9.8
    SQL Injection

    Photo Gallery by Ays – Responsive Image Gallery

    <1.0.1Update to 1.0.1

    CVE-2016-10921

  • High7.5
    Directory Traversal

    GEO Plugin by Squirrly SEO

    <6.1.5Update to 6.1.5

    1a46da16-2442-45cf-858f-0681b1106cc2

  • Critical9.1
    Local File Inclusion

    Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

    <1.3.65Update to 1.3.65

    cc046b72-692a-4980-90ad-26c8fc2a131a

  • High7.2
    Unauthenticated Cross-Site Scripting

    WP-EMail

    ≤2.67.2Update to 2.67.3

    4ebbe9a4-3769-4e05-9377-907b43e3fe10

  • High8.8
    Privilege Escalation

    User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor

    <2.4.1Update to 2.4.1

    2caed42f-fb5b-488a-af15-f5ad3d82a68c

  • Critical9.8
    Unauthenticated Arbitrary File Upload

    BePro Listings

    ≤2.2.0020Update to 2.2.0021

    bf88e79b-262e-4fee-9cef-85d96d300972

  • Medium4.3
    Authenticated Information Disclosure

    LightStart – Maintenance Mode, Coming Soon and Landing Page Builder

    <2.0.7Update to 2.0.7

    CVE-2018-20154

  • Medium5.4
    Missing Authorization

    LightStart – Maintenance Mode, Coming Soon and Landing Page Builder

    <2.0.7Update to 2.0.7

    CVE-2018-20155

  • Medium6.1
    Reflected Cross-Site Scripting

    Real3D Flipbook

    ≤1.0.0No patch available

    CVE-2016-10967

Search VulnCrest Radar

Jump to

Are you sure?