Database
WordPress Vulnerability Database (page 1402)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium5.5Authenticated (Admin+) Cross-Site Scripting
Content Grabber
≤1.0No patch available
- Medium6.1Reflected Cross-Site Scripting
Database Sync
<0.5Update to 0.5
- Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Admin Pack by SITE CASEIRO
≤1.1No patch available
- Medium6.1Cross-Site Scripting
qTranslate
≤2.5.39No patch available
- Medium6.1Cross-Site Scripting
The Holiday Calendar
<1.11.3Update to 1.11.3
- Critical9.8SQL Injection
Email Before Download
≤3.4Update to 3.4.1
- Medium5.3Cross-Site Scripting
Hide My WP - Amazing Security Plugin for WordPress!
<4.52Update to 4.52
- Medium6.1Reflected Cross-Site Scripting
Flickr Justified Gallery
<3.4.0Update to 3.4.0
- Medium6.1Reflected Cross-Site Scripting
Clean Login
≤1.5Update to 1.5.1
- High8.8Cross-Site Request Forgery & Authenticated SQL Injection
Unite Gallery Lite
≤1.4.6Update to 1.5
- High8.8SQL Injection
Unite Gallery Lite
<1.5Update to 1.5
- High7.2Cross-Site Request Forgery and SQL Injection
Unite Gallery Lite
<1.5Update to 1.5
- High7.2Open Redirect
Music Store – WordPress eCommerce
<1.0.15Update to 1.0.15
- High8.8Authenticated SQL Injection
SendPress Newsletters
<1.2Update to 1.2
- Medium6.1Cross-Site Scripting
SendPress Newsletters
≤1.1.7.21Update to 1.2
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
WordPress
≤4.2.2Update to 3.7.9 or 3.8.9 or 3.9.7 or 4.0.6 or 4.1.6 or 4.2.3
- Medium6.5Authorization Bypass
WordPress
≤4.2.2Update to 3.7.9 or 3.8.9 or 3.9.7 or 4.0.6 or 4.1.6 or 4.2.3
- High8.8Authenticated SQL Injection
Responsive Slider – Image Slider – Slideshow for WordPress
<2.8.7Update to 2.8.7
- High7.2Authenticated Blind SQL Injection
Microblog Poster – Auto Publish on Social Media
<1.6.2Update to 1.6.2
- High7.2SQL Injection
Easy Social Icons
≤1.2.3.1Update to 1.2.4
- Medium6.1Multiple Cross-Site Scripting
Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
<1.8.4.3Update to 1.8.4.3
- Medium6.1Cross-Site Scripting
SlimStat Analytics – Real-Time Stats, Heatmaps & Ecommerce
<4.1.6.1Update to 4.1.6.1
- High7.2Cross-Site Request Forgery
Count per Day
<3.4.1Update to 3.4.1
- Medium6.3Cross-Site Request Forgery
Portfolio Plugin
<1.05Update to 1.05
- High7.3Unspecified Vulnerabilities
Social Media Share Buttons & Social Sharing Icons
≤1.2.1Update to 1.2.2
- High7.5Arbitrary File Download
wptf-image-gallery
≤1.0.3No patch available
- High7.5Sensitive Information Exposure
WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps
<2.1.3Update to 2.1.3
- High8.8Multiple SQL Injections
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
<4.4.4Update to 4.4.4
- Critical9.8SQL Injection
Plugmatter Optin Feature Box
<2.0.14Update to 2.0.14
- Critical9.8SQL Injection
NEX-Forms – Ultimate Forms Plugin for WordPress
<4.6.1Update to 4.6.1