VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1386)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

WordPress Vulnerability Database (page 1386)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Reflected Cross-Site Scripting via bookId parameter
Real3D Flipbook<2.9Update to 2.9
——
High7.5File Upload to User Controlled Location
Real3D Flipbook≤1.0.0No patch available
CVE-2016-10966—
High7.5Arbitrary File Upload
Advanced AJAX Page Loader<2.7.7Update to 2.7.7
CVE-2016-10929—
Critical9.1Directory Traversal
Real3D Flipbook≤1.0.0No patch available
CVE-2016-10965—
Medium4.1Directory Traversal via Uploads
Real3D Flipbook<2.9Update to 2.9
——
High7.1Reflected Cross-Site Scripting
WangGuard<1.7.2Update to 1.7.2
——
Critical10.0Unauthenticated Arbitrary File or Directory Delete
Real3D Flipbook<2.9Update to 2.9
——
Medium5.4Cross-Site Scripting
WordPress Landing Pages<2.2.5Update to 2.2.5
——
High8.8SQL Injection
FormBuilder<1.08Update to 1.08
——
High7.2Stored Cross-Site Scripting
All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)<2.3.7Update to 2.3.7
——
Medium6.1Cross-Site Scripting
ColorWay≤3.4.1Update to 3.4.2
CVE-2016-10961—
Medium6.1Cross-Site Scripting
Store Locator Plus® for WordPress<4.5.11Update to 4.5.12
——
Critical9.8Authentication Bypass
MemberSonic Lite Membership Site Plugin≤1.2Update to 1.302
CVE-2016-10971—
Medium6.1Cross-Site Scripting via a ticket excerpt.
SupportFlow<0.7Update to 0.7
CVE-2016-10970—
Medium5.4Arbitrary Options Deletion
Social Media Share Buttons & Social Sharing Icons≤1.5.1Update to 1.5.2
——
High7.12.4.3 - Reflected Cross-Site Scripting
WP Activity Log1.5 – 2.4.3Update to 2.4.4
——
Medium6.1Reflected Cross-Site Scripting
Welcart e-Commerce<1.8.3Update to 1.8.3
CVE-2016-4826—
High8.1Object Injection
Welcart e-Commerce<1.8.3Update to 1.8.3
CVE-2016-4825—
Critical9.8Authentication Bypass
Welcart e-Commerce≤1.8.2Update to 1.8.3
CVE-2016-4828—
Medium6.1Cross-Site Scripting
Welcart e-Commerce≤1.8.2Update to 1.8.3
CVE-2016-4827—
Critical9.8Arbitrary File Upload
Iptanus File Upload<3.9.0Update to 3.9.0
——
Medium5.5Authenticated Stored Cross-Site Scripting
WordPress File Monitor≤2.3.3No patch available
——
Critical9.8Remote File Upload
contus-video-comments≤1.0No patch available
CVE-2016-1000112—
High8.8Unrestricted AJAX Actions allowing Privilege Escalation
Access Governance for WordPress (aka AAM)<3.2.2Update to 3.2.2
——
High8.8Privilege Escalation
Community by PeepSo – Download from PeepSo.com≤1.6.0Update to 1.6.1
CVE-2016-10968—
Medium6.1Cross-Site Scripting
Jetpack – AI Agents & MCP, Security, Backup & Analytics<4.0.4Update to 4.0.4
CVE-2016-10705—
High7.2Stored Cross-Site Scripting via discussion ticket title
SupportFlow≤0.6Update to 0.7
CVE-2016-10969—
Medium6.1Cross-Site Scripting
Ray Enterprise Translation≤1.1.8Update to 1.1.9
——
Medium5.3Password Change via Stolen Cookie
WordPress≤4.5.2Update to 3.7.15 or 3.8.15 or 3.9.13 or 4.0.12 or 4.1.12 or 4.2.9 or 4.3.5 or 4.4.4 or 4.5.3
CVE-2016-5838—
Medium6.4Cross-Site Scripting via Attachment Name #2
WordPress≤4.5.2Update to 3.7.15 or 3.8.15 or 3.9.13 or 4.0.12 or 4.1.12 or 4.2.9 or 4.3.5 or 4.4.4 or 4.5.3
CVE-2016-5833—

Search VulnCrest Radar

Jump to

Are you sure?