Database

WordPress Vulnerability Database (page 1405)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1405)
Severity	Vulnerability	CVE	Installs	Published
Critical9.8	SQL Injection WTI Like Post<1.4.3Update to 1.4.3	CVE-2015-9466	—	Jul 5, 2015
Medium6.1	Cross-Site Scripting Broken Link Manager≤0.4.5Update to 0.5.0	CVE-2015-9468	—	Jul 4, 2015
Critical9.8	SQL Injection Broken Link Manager<0.5.0Update to 0.5.0	CVE-2015-9467	—	Jul 4, 2015
High7.5	Denial of Service Simple Ads Manager<2.9.4.116Update to 2.9.4.116	—	—	Jul 2, 2015
High7.5	Directory Traversal MDC YouTube Downloader<2.1.1Update to 2.1.1	CVE-2015-5469	—	Jul 2, 2015
Critical9.8	Arbitrary File Upload Iptanus File Upload<3.0.0Update to 3.0.0	CVE-2015-9340	—	Jul 2, 2015
Critical9.1	Path Traversal Image Export≤1.1Update to 1.1.1	CVE-2015-5609	—	Jul 1, 2015
Critical9.8	Arbitrary File Upload Powerplay Gallery≤3.3No patch available	CVE-2015-5681	—	Jul 1, 2015
Critical9.8	Arbitrary File Upload Powerplay Gallery≤3.3No patch available	CVE-2015-5682	—	Jul 1, 2015
High7.2	Cross-Site Scripting WP-CopyProtect [Protect your blog posts]<3.1.0Update to 3.1.0	—	—	Jun 30, 2015
High7.2	Stored Cross-Site Scripting NewStatPress≤1.0.3Update to 1.0.4	CVE-2015-9314	—	Jun 30, 2015
Medium6.1	Cross-Site Scripting Broken Link Checker<1.10.9Update to 1.10.9	CVE-2015-5057	—	Jun 29, 2015
Medium6.1	Cross-Site Scripting WP Rollback – Rollback Plugins and Themes<1.2.3Update to 1.2.3	CVE-2015-9342	—	Jun 28, 2015
High8.8	Cross-Site Request Forgery WP Rollback – Rollback Plugins and Themes<1.2.3Update to 1.2.3	CVE-2015-9343	—	Jun 28, 2015
Critical9.8	SQL Injection Powerplay Gallery≤3.3No patch available	CVE-2015-5599	—	Jun 27, 2015
High7.5	Directory Traversal download-zip-attachments≤1.0No patch available	CVE-2015-4704	—	Jun 26, 2015
High8.8	Arbitrary Options Update Pont - Multipurpose Wordpress Theme \| Business≤1.5No patch available	CVE-2015-9475	—	Jun 26, 2015
High8.8	Fullscreen Photography Theme \| Portfolio <= 1.8.5 - Arbitrary Options Update Teardrop - Fullscreen Photography Theme \| Portfolio≤1.8.5Update to 1.8.6	CVE-2015-9476	—	Jun 26, 2015
High8.8	Arbitrary Options Update Vernissage - Photography WordPress Theme≤1.2.9Update to 1.3	CVE-2015-9477	—	Jun 26, 2015
High8.8	Fullscreen Portfolio & Blog HTML Theme <= 1.3.2 - Arbitrary Options Update Simpolio - Fullscreen Portfolio & Blog HTML Theme≤1.3.2No patch available	CVE-2015-9474	—	Jun 26, 2015
Medium6.1	Reflected Cross-Site Scripting NewStatPress≤1.0.6Update to 1.0.7	CVE-2015-9311	—	Jun 25, 2015
Critical9.8	Unauthenticated SQL Injection Email Newsletter≤20.15No patch available	CVE-2015-9334	—	Jun 25, 2015
Medium6.4	Stored Cross-Site Scripting WP Mobile Detector<3.3Update to 3.3	—	—	Jun 25, 2015
Medium6.1	Reflected Cross-Site Scripting Nextend Twitter Connect≤1.5.1Update to 1.5.2	CVE-2015-4557	—	Jun 24, 2015
Medium6.1	Reflected Cross-Site Scripting Nextend Social Login and Register<1.5.6Update to 1.5.6	CVE-2015-4413	—	Jun 24, 2015
High8.8	Cross-Site Request Forgery to Cross-Site Scripting WP Accurate Form Data≤1.2No patch available	CVE-2015-9443	—	Jun 21, 2015
High8.8	Cross-Site Request Forgery Analyticator<6.4.9.4Update to 6.4.9.4	CVE-2015-4697	—	Jun 19, 2015
High7.1	1.2.997 - Reflected Cross-Site Scripting Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin1.2.98 – 1.2.997Update to 1.3.0	—	—	Jun 18, 2015
Medium6.1	DOM-based Cross-Site Scripting salem≤1.5.5Update to 1.5.6	—	—	Jun 18, 2015
High8.8	Cross-Site Request Forgery to Stored Cross-Site Scripting Erident Custom Login Page & Dashboard≤3.4.1Update to 3.5	CVE-2015-9322	—	Jun 18, 2015

Critical9.8
SQL Injection
WTI Like Post
<1.4.3Update to 1.4.3
CVE-2015-9466Jul 5, 2015
Medium6.1
Cross-Site Scripting
Broken Link Manager
≤0.4.5Update to 0.5.0
CVE-2015-9468Jul 4, 2015
Critical9.8
SQL Injection
Broken Link Manager
<0.5.0Update to 0.5.0
CVE-2015-9467Jul 4, 2015
High7.5
Denial of Service
Simple Ads Manager
<2.9.4.116Update to 2.9.4.116
964601d5-8460-41c5-9791-ff9e3af964e3Jul 2, 2015
High7.5
Directory Traversal
MDC YouTube Downloader
<2.1.1Update to 2.1.1
CVE-2015-5469Jul 2, 2015
Critical9.8
Arbitrary File Upload
Iptanus File Upload
<3.0.0Update to 3.0.0
CVE-2015-9340Jul 2, 2015
Critical9.1
Path Traversal
Image Export
≤1.1Update to 1.1.1
CVE-2015-5609Jul 1, 2015
Critical9.8
Arbitrary File Upload
Powerplay Gallery
≤3.3No patch available
CVE-2015-5681Jul 1, 2015
Critical9.8
Arbitrary File Upload
Powerplay Gallery
≤3.3No patch available
CVE-2015-5682Jul 1, 2015
High7.2
Cross-Site Scripting
WP-CopyProtect [Protect your blog posts]
<3.1.0Update to 3.1.0
1f34302c-b08c-4542-9aa9-c66fe1f0288dJun 30, 2015
High7.2
Stored Cross-Site Scripting
NewStatPress
≤1.0.3Update to 1.0.4
CVE-2015-9314Jun 30, 2015
Medium6.1
Cross-Site Scripting
Broken Link Checker
<1.10.9Update to 1.10.9
CVE-2015-5057Jun 29, 2015
Medium6.1
Cross-Site Scripting
WP Rollback – Rollback Plugins and Themes
<1.2.3Update to 1.2.3
CVE-2015-9342Jun 28, 2015
High8.8
Cross-Site Request Forgery
WP Rollback – Rollback Plugins and Themes
<1.2.3Update to 1.2.3
CVE-2015-9343Jun 28, 2015
Critical9.8
SQL Injection
Powerplay Gallery
≤3.3No patch available
CVE-2015-5599Jun 27, 2015
High7.5
Directory Traversal
download-zip-attachments
≤1.0No patch available
CVE-2015-4704Jun 26, 2015
High8.8
Arbitrary Options Update
Pont - Multipurpose Wordpress Theme | Business
≤1.5No patch available
CVE-2015-9475Jun 26, 2015
High8.8
Fullscreen Photography Theme | Portfolio <= 1.8.5 - Arbitrary Options Update
Teardrop - Fullscreen Photography Theme | Portfolio
≤1.8.5Update to 1.8.6
CVE-2015-9476Jun 26, 2015
High8.8
Arbitrary Options Update
Vernissage - Photography WordPress Theme
≤1.2.9Update to 1.3
CVE-2015-9477Jun 26, 2015
High8.8
Fullscreen Portfolio & Blog HTML Theme <= 1.3.2 - Arbitrary Options Update
Simpolio - Fullscreen Portfolio & Blog HTML Theme
≤1.3.2No patch available
CVE-2015-9474Jun 26, 2015
Medium6.1
Reflected Cross-Site Scripting
NewStatPress
≤1.0.6Update to 1.0.7
CVE-2015-9311Jun 25, 2015
Critical9.8
Unauthenticated SQL Injection
Email Newsletter
≤20.15No patch available
CVE-2015-9334Jun 25, 2015
Medium6.4
Stored Cross-Site Scripting
WP Mobile Detector
<3.3Update to 3.3
b2f16704-6c96-4ff1-b1b1-75c4f16df039Jun 25, 2015
Medium6.1
Reflected Cross-Site Scripting
Nextend Twitter Connect
≤1.5.1Update to 1.5.2
CVE-2015-4557Jun 24, 2015
Medium6.1
Reflected Cross-Site Scripting
Nextend Social Login and Register
<1.5.6Update to 1.5.6
CVE-2015-4413Jun 24, 2015
High8.8
Cross-Site Request Forgery to Cross-Site Scripting
WP Accurate Form Data
≤1.2No patch available
CVE-2015-9443Jun 21, 2015
High8.8
Cross-Site Request Forgery
Analyticator
<6.4.9.4Update to 6.4.9.4
CVE-2015-4697Jun 19, 2015
High7.1
1.2.997 - Reflected Cross-Site Scripting
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
1.2.98 – 1.2.997Update to 1.3.0
461d5d5a-7bc2-4855-bc40-0edb9c538c33Jun 18, 2015
Medium6.1
DOM-based Cross-Site Scripting
salem
≤1.5.5Update to 1.5.6
c6b95cc2-c40b-40db-abd2-d66978cf55d1Jun 18, 2015
High8.8
Cross-Site Request Forgery to Stored Cross-Site Scripting
Erident Custom Login Page & Dashboard
≤3.4.1Update to 3.5
CVE-2015-9322Jun 18, 2015