Database
WordPress Vulnerability Database (page 1399)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium6.1Reflected Cross-Site Scripting
WP Page Widget
<2.8Update to 2.8
- Medium5.4Cross-Site Scripting
GoCodes
≤1.3.5No patch available
- Medium6.3Cross-Site Request Forgery
Multicons
<3.0Update to 3.0
- High7.5Arbitrary File Read
multi-plugin-installer
<1.2.0Update to 1.2.0
- Medium4.7Cross-Site Scripting
Analyticator
<6.4.9.6Update to 6.4.9.6
- Medium6.1Reflected Cross-Site Scripting
Portfolio Gallery – Photo Gallery
≤1.5.7Update to 1.5.9
- Medium5.3Stored Cross-Site Scripting
FV Flowplayer Video Player
≤6.0.3.3Update to 6.0.3.4
- Medium6.1Reflected Cross-Site Scripting
GigPress
≤2.3.10Update to 2.3.11
- High7.2SQL Injection
GigPress
<2.3.11Update to 2.3.11
- Medium6.1Reflected Cross-Site Scripting
Manual Image Crop
<1.11Update to 1.11
- High7.4Cross-Site Request Forgery to Stored Cross-Site Scripting
Easy Coming Soon
<1.8.2Update to 1.8.2
- Medium6.1Reflected Cross-Site Scripting
iQ Block Country
<1.1.20Update to 1.1.20
- Medium6.1Cross-Site Request Forgery to Cross-Site Scripting
Googmonify
≤0.5.1No patch available
- Critical9.8Blind SQL Injection
DukaPress
≤2.5.9Update to 2.5.9.1
- High8.8Cross-Site Request Forgery
WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings
<2.3.10Update to 2.3.10
- Medium6.1Reflected Cross-Site Scripting
qTranslate X
<3.4.4Update to 3.4.4
- Medium6.4Stored Cross-Site Scripting
Social Media Widget by Acurax
≤2.2Update to 2.3
- Medium6.1Reflected Cross-Site Scripting
WP Crontrol
<1.3Update to 1.3
- High8.8SQL Injection
Gallery Bank – WordPress Photo Gallery Plugin
<3.0.330Update to 3.0.330
- Medium5.4Cross-Site Scripting
Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates – WPLP Legal Pages
<1.1Update to 1.1
- Medium6.1Reflected Cross-Site Scripting
SEO Redirection Plugin – 301 Redirect Manager
<2.9Update to 2.9
- High8.8Cross-Site Request Forgery
WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings
<2.3.10Update to 2.3.10
- High8.8Cross-Site Request Forgery
WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings
<2.3.10Update to 2.3.10
- High7.2Stored Cross-Site Scripting
Crazy Bone
<0.6.0Update to 0.6.0
- Medium6.1Cross-Site Scripting
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
≤1.3.17Update to 1.3.18
- Medium6.1Reflected Cross-Site Scripting
Alpine Photo Tile for Instagram
<1.2.7.6Update to 1.2.7.6
- High8.8Responsive Touch Slider <= 2.5.1 - Authenticated Blind SQL Injection
Master Slider – Responsive Touch Slider
<2.5.2Update to 2.5.2
- Medium6.1Cross-Site Scripting
MDC Private Message
≤1.0.1No patch available
- Medium6.1Reflected Cross-Site Scripting
Slideshow Gallery LITE
<1.5.3.4Update to 1.5.3.4
- High8.8Cross-Site Request Forgery to Arbitrary File Upload
Slideshow Gallery LITE
≤1.5.3.1Update to 1.5.3.2