VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1406)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1406)
SeverityVulnerabilityCVEInstallsPublished
Medium4.3Cross-Site Request Forgery
WP-Stats<2.52Update to 2.52
CVE-2015-10001—
Medium6.1DOM Cross-Site Scripting
Salient | Creative Multipurpose & WooCommerce Theme≤4.9Update to 5.5.53
——
High8.8Cross-Site Scripting and SQL Injection
Copy or Move Comments<1.0.1Update to 1.0.1
——
Medium4.3Cross-Site Request Forgery
Users To CSV≤1.4.5No patch available
——
Medium6.1Cross-Site Scripting
Altos Connect≤1.3.0No patch available
CVE-2015-9444—
Medium6.1Cross-Site Scripting
WordPress Landing Pages≤1.8.7Update to 1.8.8
CVE-2015-10090—
High7.5Path Traversal
WordPress Renaming Tool by Vlajo≤1.0No patch available
CVE-2015-4703—
High8.6Directory Traversal
Zip Attachments≤1.5Update to 1.5.1
CVE-2015-4694—
High7.5PHP Object Injection
WooCommerce≤2.3.10Update to 2.3.11
——
Medium6.4Authenticated Stored Cross-Site Scripting
WordPress Share Buttons Plugin – AddThis<5.0.3Update to 5.0.3
——
High8.8Cross-Site Request Forgery
Erident Custom Login Page & Dashboard≤3.4.1Update to 3.5
——
Critical9.8Unauthenticated Local File Inclusion
robotcpa≤5No patch available
CVE-2015-9480—
Critical9.8Arbitrary File Upload
Frontend File Manager Plugin≤3.7Update to 3.8
——
Medium5.3Path Traversal to Arbitrary File Read
PayPal Currency Converter BASIC for WooCommerce≤1.3Update to 1.4
CVE-2015-5065—
Critical9.8Arbitrary File Upload
Aviary Image Editor Add-on For Gravity Forms≤3.0 (Beta r7)No patch available
CVE-2015-4455—
Critical9.8SQL Injection
Easy2Map<1.2.5Update to 1.2.5
CVE-2015-4614—
Medium6.5Directory Traversal
Easy2Map<1.2.5Update to 1.2.5
CVE-2015-4616—
Critical9.8SQL Injection
Easy2Map Photos≤1.0.9Update to 1.1.0
CVE-2015-4615—
Medium5.3Path Traversal
Easy2Map Photos≤1.0.9Update to 1.1.0
CVE-2015-4617—
Critical9.8SQL Injection
NewStatPress≤1.0.0Update to 1.0.1
CVE-2015-9315—
Medium6.1Cross-Site Scripting
Encrypted Contact Form<1.1Update to 1.1
CVE-2015-4010—
Critical9.8SQL Injection
Ultimate Product Catalog<3.1.3Update to 3.1.3
——
Critical9.8Directory Traversal
SE HTML5 Album Audio Player≤1.1.0No patch available
CVE-2015-4414—
Critical9.8Local File Inclusion
Really Simple Guest Post≤1.0.6Update to 1.0.7
——
Medium6.1Cross-Site Scripting
Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder≤2.9.18Update to 2.9.19
——
Critical9.8Local File Inclusion
ZM Ajax Login & Register<1.1.0Update to 1.1.0
CVE-2015-4153—
Critical9.8Multiple SQL Injection
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin≤1.5.15Update to 1.5.16
CVE-2015-4109—
Medium6.1Cross-Site Scripting
Events Manager – Calendar, Bookings, Tickets, Appointments and more!<5.5.7.1Update to 5.5.7.1
CVE-2015-9299—
Medium6.1Cross-Site Scripting
ZM Ajax Login & Register≤1.0.9Update to 1.1.0
CVE-2015-4465—
High8.8Cross-Site Request Forgery to Remote Code Execution
Codestyling Localization≤1.99.30No patch available
CVE-2015-4179—
  • Medium4.3
    Cross-Site Request Forgery

    WP-Stats

    <2.52Update to 2.52

    CVE-2015-10001

  • Medium6.1
    DOM Cross-Site Scripting

    Salient | Creative Multipurpose & WooCommerce Theme

    ≤4.9Update to 5.5.53

    39a74c20-42a2-4099-8e6c-9989a3ba081d

  • High8.8
    Cross-Site Scripting and SQL Injection

    Copy or Move Comments

    <1.0.1Update to 1.0.1

    eb32a095-7d2b-4a57-9d91-f79fb3486f9a

  • Medium4.3
    Cross-Site Request Forgery

    Users To CSV

    ≤1.4.5No patch available

    beadd35b-2bce-431e-8347-2d1a87d02f01

  • Medium6.1
    Cross-Site Scripting

    Altos Connect

    ≤1.3.0No patch available

    CVE-2015-9444

  • Medium6.1
    Cross-Site Scripting

    WordPress Landing Pages

    ≤1.8.7Update to 1.8.8

    CVE-2015-10090

  • High7.5
    Path Traversal

    WordPress Renaming Tool by Vlajo

    ≤1.0No patch available

    CVE-2015-4703

  • High8.6
    Directory Traversal

    Zip Attachments

    ≤1.5Update to 1.5.1

    CVE-2015-4694

  • High7.5
    PHP Object Injection

    WooCommerce

    ≤2.3.10Update to 2.3.11

    88b3a69d-2c94-48e6-b965-8a67b2fe42b2

  • Medium6.4
    Authenticated Stored Cross-Site Scripting

    WordPress Share Buttons Plugin – AddThis

    <5.0.3Update to 5.0.3

    a276d70d-3ad7-49e0-a25c-8089cdd581da

  • High8.8
    Cross-Site Request Forgery

    Erident Custom Login Page & Dashboard

    ≤3.4.1Update to 3.5

    3bed2531-1a7d-49d9-91c9-d9e7357e5613

  • Critical9.8
    Unauthenticated Local File Inclusion

    robotcpa

    ≤5No patch available

    CVE-2015-9480

  • Critical9.8
    Arbitrary File Upload

    Frontend File Manager Plugin

    ≤3.7Update to 3.8

    f2ed5e51-8783-4b7f-9177-c116bf0fad44

  • Medium5.3
    Path Traversal to Arbitrary File Read

    PayPal Currency Converter BASIC for WooCommerce

    ≤1.3Update to 1.4

    CVE-2015-5065

  • Critical9.8
    Arbitrary File Upload

    Aviary Image Editor Add-on For Gravity Forms

    ≤3.0 (Beta r7)No patch available

    CVE-2015-4455

  • Critical9.8
    SQL Injection

    Easy2Map

    <1.2.5Update to 1.2.5

    CVE-2015-4614

  • Medium6.5
    Directory Traversal

    Easy2Map

    <1.2.5Update to 1.2.5

    CVE-2015-4616

  • Critical9.8
    SQL Injection

    Easy2Map Photos

    ≤1.0.9Update to 1.1.0

    CVE-2015-4615

  • Medium5.3
    Path Traversal

    Easy2Map Photos

    ≤1.0.9Update to 1.1.0

    CVE-2015-4617

  • Critical9.8
    SQL Injection

    NewStatPress

    ≤1.0.0Update to 1.0.1

    CVE-2015-9315

  • Medium6.1
    Cross-Site Scripting

    Encrypted Contact Form

    <1.1Update to 1.1

    CVE-2015-4010

  • Critical9.8
    SQL Injection

    Ultimate Product Catalog

    <3.1.3Update to 3.1.3

    21930a4f-2f78-42c5-8ffa-2993333db2fe

  • Critical9.8
    Directory Traversal

    SE HTML5 Album Audio Player

    ≤1.1.0No patch available

    CVE-2015-4414

  • Critical9.8
    Local File Inclusion

    Really Simple Guest Post

    ≤1.0.6Update to 1.0.7

    259158f0-390a-458f-9d8e-262006c4c18d

  • Medium6.1
    Cross-Site Scripting

    Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder

    ≤2.9.18Update to 2.9.19

    69435cb6-9591-45bb-86e3-eaf1a9bc46f9

  • Critical9.8
    Local File Inclusion

    ZM Ajax Login & Register

    <1.1.0Update to 1.1.0

    CVE-2015-4153

  • Critical9.8
    Multiple SQL Injection

    Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin

    ≤1.5.15Update to 1.5.16

    CVE-2015-4109

  • Medium6.1
    Cross-Site Scripting

    Events Manager – Calendar, Bookings, Tickets, Appointments and more!

    <5.5.7.1Update to 5.5.7.1

    CVE-2015-9299

  • Medium6.1
    Cross-Site Scripting

    ZM Ajax Login & Register

    ≤1.0.9Update to 1.1.0

    CVE-2015-4465

  • High8.8
    Cross-Site Request Forgery to Remote Code Execution

    Codestyling Localization

    ≤1.99.30No patch available

    CVE-2015-4179

Search VulnCrest Radar

Jump to

Are you sure?