Database

WordPress Vulnerability Database (page 1389)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

WordPress Vulnerability Database (page 1389)
Severity	Vulnerability	CVE	Installs	Published
High7.2	Stored Cross-Site Scripting Simple Photo Gallery<1.8.1Update to 1.8.1	—	—	Apr 28, 2016
Medium6.1	Multiple Cross-Site Scripting Sermon Browser≤0.45.15Update to 0.45.16	CVE-2016-10897	—	Apr 26, 2016
Medium6.1	Cross-Site Scripting GNUCommerce<0.5.7-betaUpdate to 0.5.7-beta	CVE-2016-10920	—	Apr 26, 2016
Medium4.7	Open Redirect The Events Calendar≤4.1.1Update to 4.1.1.1	—	—	Apr 25, 2016
High7.4	Missing Capabilities Check Kadence Security – Password, Two Factor Authentication, and Brute Force Protection<5.3.6Update to 5.3.6	—	—	Apr 25, 2016
Critical9.8	Arbitrary File Upload Tevolution<2.3.0Update to 2.3.0	CVE-2016-10995	—	Apr 23, 2016
Medium6.1	Reflected Cross-Site Scripting Echo Sign<1.2Update to 1.2	CVE-2016-10984	—	Apr 21, 2016
Medium6.1	Reflected Cross-Site Scripting Echo Sign<1.2Update to 1.2	CVE-2016-10985	—	Apr 21, 2016
Medium6.1	Cross-Site Scripting افزونه پیامک ووکامرس \| Persian WooCommerce SMS≤3.3.2Update to 3.3.3	CVE-2016-10987	—	Apr 21, 2016
Medium6.1	Cross-Site Scripting Easy Social Share Buttons for WordPress<3.5Update to 3.5	—	—	Apr 21, 2016
Medium6.1	Reflected Cross-Site Scripting Tweet Wheel<1.0.3.3Update to 1.0.3.3	CVE-2016-10986	—	Apr 21, 2016
Medium5.5	Cross-Site Scripting CM Ad Changer – A simple tool to control and optimize your site’s banners<1.7.6Update to 1.7.6	—	—	Apr 21, 2016
Medium6.1	Cross-Site Scripting Unlimited PopUps≤1.4.3Update to 1.4.4	—	—	Apr 21, 2016
Medium5.3	Insecure Backup/Logfile Generation Kadence Security – Password, Two Factor Authentication, and Brute Force Protection<5.3.1Update to 5.3.1	—	—	Apr 21, 2016
Medium6.1	Cross-Site Scripting Google SEO Pressor for Rich snippets<1.2.7Update to 1.2.7	—	—	Apr 21, 2016
Medium6.1	Cross-Site Scripting Translate WordPress – Google Language Translator<5.0.06Update to 5.0.06	CVE-2016-10870	—	Apr 18, 2016
Medium6.1	Stored Cross-Site Scripting Kento Post View Counter≤2.8No patch available	CVE-2016-10981	—	Apr 17, 2016
Medium5.4	Stored Cross-Site Scripting leenk.me<2.6.0Update to 2.6.0	CVE-2016-10988	—	Apr 17, 2016
Medium6.1	Reflected Cross-Site Scripting custom-metas≤1.5.1No patch available	—	—	Apr 17, 2016
Medium6.1	Cross-Site Scripting 10WebFAQ≤1.0.14Update to 1.0.17	—	—	Apr 17, 2016
High8.8	Cross-Site Request Forgery Kento Post View Counter≤2.8No patch available	CVE-2016-10982	—	Apr 17, 2016
Medium6.1	Reflected Cross-Site Scripting Kento Post View Counter≤2.8No patch available	CVE-2016-10980	—	Apr 16, 2016
High8.8	Cross-Site Request Forgery leenk.me≤2.5.0Update to 2.6.0	CVE-2016-10989	—	Apr 16, 2016
Medium6.1	Reflected Cross-Site Scripting WPSOLR – Elasticsearch and Solr search≤8.6Update to 8.7	CVE-2016-1000155	—	Apr 12, 2016
Medium6.1	Reflected Cross-Site Scripting Defa Online Image Protector Free Edition≤3.4No patch available	CVE-2016-1000129	—	Apr 12, 2016
Medium6.1	Reflected Cross-Site Scripting MW Font Changer<4.3Update to 4.3	CVE-2016-1000142	—	Apr 12, 2016
Medium6.1	Reflected Cross-Site Scripting S3 Video Plugin≤0.983No patch available	CVE-2016-1000148	—	Apr 12, 2016
Medium6.4	Cross-Site Scripting via Network Settings Page WordPress<4.5Update to 4.5	CVE-2016-6634	—	Apr 12, 2016
Medium6.1	Reflected Cross-Site Scripting Hero Maps Pro≤2.1.0Update to 2.2.0	CVE-2016-1000137	—	Apr 12, 2016
Critical9.8	Remote Code Execution Robo Gallery – Photo & Image Slider<2.0.15Update to 2.0.15	—	—	Apr 12, 2016

High7.2
Stored Cross-Site Scripting
Simple Photo Gallery
<1.8.1Update to 1.8.1
306fa8e1-b62f-4514-8463-e696d043f6f5Apr 28, 2016
Medium6.1
Multiple Cross-Site Scripting
Sermon Browser
≤0.45.15Update to 0.45.16
CVE-2016-10897Apr 26, 2016
Medium6.1
Cross-Site Scripting
GNUCommerce
<0.5.7-betaUpdate to 0.5.7-beta
CVE-2016-10920Apr 26, 2016
Medium4.7
Open Redirect
The Events Calendar
≤4.1.1Update to 4.1.1.1
9bb026a4-02b1-4422-8c78-9983c49df43eApr 25, 2016
High7.4
Missing Capabilities Check
Kadence Security – Password, Two Factor Authentication, and Brute Force Protection
<5.3.6Update to 5.3.6
246eea09-abe5-41e9-811e-5cddedbbe01eApr 25, 2016
Critical9.8
Arbitrary File Upload
Tevolution
<2.3.0Update to 2.3.0
CVE-2016-10995Apr 23, 2016
Medium6.1
Reflected Cross-Site Scripting
Echo Sign
<1.2Update to 1.2
CVE-2016-10984Apr 21, 2016
Medium6.1
Reflected Cross-Site Scripting
Echo Sign
<1.2Update to 1.2
CVE-2016-10985Apr 21, 2016
Medium6.1
Cross-Site Scripting
افزونه پیامک ووکامرس | Persian WooCommerce SMS
≤3.3.2Update to 3.3.3
CVE-2016-10987Apr 21, 2016
Medium6.1
Cross-Site Scripting
Easy Social Share Buttons for WordPress
<3.5Update to 3.5
f5a71d0a-e00f-4794-acc2-834334d5b336Apr 21, 2016
Medium6.1
Reflected Cross-Site Scripting
Tweet Wheel
<1.0.3.3Update to 1.0.3.3
CVE-2016-10986Apr 21, 2016
Medium5.5
Cross-Site Scripting
CM Ad Changer – A simple tool to control and optimize your site’s banners
<1.7.6Update to 1.7.6
fa181ff8-5324-4782-ad45-4a701ac63b8cApr 21, 2016
Medium6.1
Cross-Site Scripting
Unlimited PopUps
≤1.4.3Update to 1.4.4
61516b71-3346-4033-b55b-a35c5b4ca3dcApr 21, 2016
Medium5.3
Insecure Backup/Logfile Generation
Kadence Security – Password, Two Factor Authentication, and Brute Force Protection
<5.3.1Update to 5.3.1
32d0f709-192a-4d9f-bfe9-15c1be4c4b95Apr 21, 2016
Medium6.1
Cross-Site Scripting
Google SEO Pressor for Rich snippets
<1.2.7Update to 1.2.7
3ba98b0b-0772-4871-9892-c6354ceaf614Apr 21, 2016
Medium6.1
Cross-Site Scripting
Translate WordPress – Google Language Translator
<5.0.06Update to 5.0.06
CVE-2016-10870Apr 18, 2016
Medium6.1
Stored Cross-Site Scripting
Kento Post View Counter
≤2.8No patch available
CVE-2016-10981Apr 17, 2016
Medium5.4
Stored Cross-Site Scripting
leenk.me
<2.6.0Update to 2.6.0
CVE-2016-10988Apr 17, 2016
Medium6.1
Reflected Cross-Site Scripting
custom-metas
≤1.5.1No patch available
3f5413be-76b8-457c-9236-3ef760f46d40Apr 17, 2016
Medium6.1
Cross-Site Scripting
10WebFAQ
≤1.0.14Update to 1.0.17
bd879bd9-d195-4146-b9dc-3ba7252645deApr 17, 2016
High8.8
Cross-Site Request Forgery
Kento Post View Counter
≤2.8No patch available
CVE-2016-10982Apr 17, 2016
Medium6.1
Reflected Cross-Site Scripting
Kento Post View Counter
≤2.8No patch available
CVE-2016-10980Apr 16, 2016
High8.8
Cross-Site Request Forgery
leenk.me
≤2.5.0Update to 2.6.0
CVE-2016-10989Apr 16, 2016
Medium6.1
Reflected Cross-Site Scripting
WPSOLR – Elasticsearch and Solr search
≤8.6Update to 8.7
CVE-2016-1000155Apr 12, 2016
Medium6.1
Reflected Cross-Site Scripting
Defa Online Image Protector Free Edition
≤3.4No patch available
CVE-2016-1000129Apr 12, 2016
Medium6.1
Reflected Cross-Site Scripting
MW Font Changer
<4.3Update to 4.3
CVE-2016-1000142Apr 12, 2016
Medium6.1
Reflected Cross-Site Scripting
S3 Video Plugin
≤0.983No patch available
CVE-2016-1000148Apr 12, 2016
Medium6.4
Cross-Site Scripting via Network Settings Page
WordPress
<4.5Update to 4.5
CVE-2016-6634Apr 12, 2016
Medium6.1
Reflected Cross-Site Scripting
Hero Maps Pro
≤2.1.0Update to 2.2.0
CVE-2016-1000137Apr 12, 2016
Critical9.8
Remote Code Execution
Robo Gallery – Photo & Image Slider
<2.0.15Update to 2.0.15
abdd6aaa-830e-4a79-acfb-93dc4a26f599Apr 12, 2016