Database

WordPress Vulnerability Database (page 1407)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1407)
Severity	Vulnerability	CVE	Installs	Published
Medium6.1	Reflected Cross-Site Scripting Simple Share Buttons Adder<6.0.1Update to 6.0.1	CVE-2015-9303	—	Jun 2, 2015
Critical9.8	SQL Injection LeagueManager<4.0.5Update to 4.0.5	—	—	Jun 2, 2015
Critical9.8	Arbitrary File Upload ZoomSounds - WordPress Wave Audio Player with Playlist<3.0Update to 3.0	CVE-2015-9471	—	Jun 1, 2015
Medium6.4	Authenticated Stored Cross-Site Scripting Social Media Share Buttons & Social Sharing Icons≤1.1.1.11Update to 1.1.1.12	—	—	May 30, 2015
Medium6.1	Cross-Site Request Forgery to Cross-Site Scripting wp-smiley≤1.4.1No patch available	CVE-2015-4140	—	May 29, 2015
Medium6.1	Open Redirect Wow Moodboard Lite≤1.1.1.1No patch available	CVE-2015-4070	—	May 29, 2015
Medium6.1	Cross-Site Scripting wp-smiley≤1.4.1No patch available	CVE-2015-4139	—	May 29, 2015
Critical9.8	SQL Injection WordPress Survey & Poll – Quiz, Survey and Poll Plugin for WordPress<1.2Update to 1.2	CVE-2015-2090	—	May 28, 2015
High8.8	SQL Injection Simple Retail Menus≤4.0.1Update to 4.1	CVE-2014-5183	—	May 28, 2015
Medium5.8	Open Proxy Gmedia Photo Gallery<1.6.5Update to 1.6.5	CVE-2015-4339	—	May 27, 2015
Medium6.1	Cross-Site Scripting Gmedia Photo Gallery≤1.6.4Update to 1.6.5	—	—	May 27, 2015
High7.5	Denial of Service Gmedia Photo Gallery<1.6.5Update to 1.6.5	—	—	May 27, 2015
Critical9.8	Local File Inclusion Gmedia Photo Gallery<1.6.5Update to 1.6.5	—	—	May 27, 2015
High8.8	SQL Injection GigPress<2.3.9Update to 2.3.9	CVE-2015-4066	—	May 26, 2015
Medium5.3	Email Information Exposure Easy Author Image≤1.5Update to 1.5.1	—	—	May 26, 2015
High8.8	Multiple Cross-Site Request Forgery WP Fastest Cache – WordPress Cache Plugin<0.8.3.5Update to 0.8.3.5	CVE-2015-4089	—	May 26, 2015
Medium6.1	Cross-Site Scripting Esplanade<1.1.5Update to 1.1.5	—	—	May 26, 2015
Low3.1	Cross-Site Request Forgery Anti-Malware Security and Brute-Force Firewall<4.15.23Update to 4.15.23	—	—	May 25, 2015
Medium6.1	Cross-Site Scripting Anti-Malware Security and Brute-Force Firewall<4.15.23Update to 4.15.23	—	—	May 25, 2015
Medium6.1	Reflected Cross-Site Scripting TFO Graphviz≤1.9Update to 1.10	CVE-2015-10131	—	May 25, 2015
High8.8	Authenticated SQL Injection WordPress Landing Pages<1.8.5Update to 1.8.5	CVE-2015-4064	—	May 25, 2015
High8.8	Authenticated SQL Injection NewStatPress≤0.9.8Update to 0.9.9	CVE-2015-4062	—	May 25, 2015
Medium5.4	Authenticated Cross-Site Scripting NewStatPress≤0.9.8Update to 0.9.9	CVE-2015-4063	—	May 25, 2015
High7.2	Stored Cross-Site Scripting NextScripts: Social Networks Auto-Poster<3.4.18Update to 3.4.18	—	—	May 25, 2015
High7.2	Stored Cross-Site Scripting Free counter≤1.1Update to 1.2	CVE-2015-4084	—	May 25, 2015
Medium6.5	Cross-Site Scripting WordPress Landing Pages<1.8.5Update to 1.8.5	CVE-2015-4065	—	May 25, 2015
Medium6.1	Cross-Site Scripting Events Manager – Calendar, Bookings, Tickets, Appointments and more!<5.5.7Update to 5.5.7	CVE-2015-9300	—	May 23, 2015
Medium6.1	Stored Cross-Site Scripting Church Admin<0.810Update to 0.810	CVE-2015-4127	—	May 22, 2015
Medium6.1	Reflecte Cross-Site Scripting woo-popup≤1.2.2Update to 1.3.0	CVE-2015-10095	—	May 21, 2015
High8.8	Privilege Escalation WP Membership≤1.2.3No patch available	CVE-2015-4038	—	May 21, 2015

Medium6.1
Reflected Cross-Site Scripting
Simple Share Buttons Adder
<6.0.1Update to 6.0.1
CVE-2015-9303Jun 2, 2015
Critical9.8
SQL Injection
LeagueManager
<4.0.5Update to 4.0.5
a6213e09-8a97-44cf-85ef-83179d79206cJun 2, 2015
Critical9.8
Arbitrary File Upload
ZoomSounds - WordPress Wave Audio Player with Playlist
<3.0Update to 3.0
CVE-2015-9471Jun 1, 2015
Medium6.4
Authenticated Stored Cross-Site Scripting
Social Media Share Buttons & Social Sharing Icons
≤1.1.1.11Update to 1.1.1.12
c0d79ae1-e9e4-4798-aa29-519b80759be6May 30, 2015
Medium6.1
Cross-Site Request Forgery to Cross-Site Scripting
wp-smiley
≤1.4.1No patch available
CVE-2015-4140May 29, 2015
Medium6.1
Open Redirect
Wow Moodboard Lite
≤1.1.1.1No patch available
CVE-2015-4070May 29, 2015
Medium6.1
Cross-Site Scripting
wp-smiley
≤1.4.1No patch available
CVE-2015-4139May 29, 2015
Critical9.8
SQL Injection
WordPress Survey & Poll – Quiz, Survey and Poll Plugin for WordPress
<1.2Update to 1.2
CVE-2015-2090May 28, 2015
High8.8
SQL Injection
Simple Retail Menus
≤4.0.1Update to 4.1
CVE-2014-5183May 28, 2015
Medium5.8
Open Proxy
Gmedia Photo Gallery
<1.6.5Update to 1.6.5
CVE-2015-4339May 27, 2015
Medium6.1
Cross-Site Scripting
Gmedia Photo Gallery
≤1.6.4Update to 1.6.5
0ad0eed1-777a-432b-a190-b8a7ed10d71aMay 27, 2015
High7.5
Denial of Service
Gmedia Photo Gallery
<1.6.5Update to 1.6.5
a161bd23-0b82-49ef-b3cc-a117823ec8a7May 27, 2015
Critical9.8
Local File Inclusion
Gmedia Photo Gallery
<1.6.5Update to 1.6.5
adb4644c-6ef6-4899-b0f1-2629ffacd19cMay 27, 2015
High8.8
SQL Injection
GigPress
<2.3.9Update to 2.3.9
CVE-2015-4066May 26, 2015
Medium5.3
Email Information Exposure
Easy Author Image
≤1.5Update to 1.5.1
5ec6211b-783b-4375-972b-adcaf9f9f526May 26, 2015
High8.8
Multiple Cross-Site Request Forgery
WP Fastest Cache – WordPress Cache Plugin
<0.8.3.5Update to 0.8.3.5
CVE-2015-4089May 26, 2015
Medium6.1
Cross-Site Scripting
Esplanade
<1.1.5Update to 1.1.5
395ff912-dad7-4dff-8bc4-bc58ecc96a90May 26, 2015
Low3.1
Cross-Site Request Forgery
Anti-Malware Security and Brute-Force Firewall
<4.15.23Update to 4.15.23
14ccd915-a513-45a4-84d3-b2b1fb893f1cMay 25, 2015
Medium6.1
Cross-Site Scripting
Anti-Malware Security and Brute-Force Firewall
<4.15.23Update to 4.15.23
3408bdfd-6337-4c26-b0f2-377375d0e52cMay 25, 2015
Medium6.1
Reflected Cross-Site Scripting
TFO Graphviz
≤1.9Update to 1.10
CVE-2015-10131May 25, 2015
High8.8
Authenticated SQL Injection
WordPress Landing Pages
<1.8.5Update to 1.8.5
CVE-2015-4064May 25, 2015
High8.8
Authenticated SQL Injection
NewStatPress
≤0.9.8Update to 0.9.9
CVE-2015-4062May 25, 2015
Medium5.4
Authenticated Cross-Site Scripting
NewStatPress
≤0.9.8Update to 0.9.9
CVE-2015-4063May 25, 2015
High7.2
Stored Cross-Site Scripting
NextScripts: Social Networks Auto-Poster
<3.4.18Update to 3.4.18
9d2df49d-0276-403d-9fe8-00fdf7262818May 25, 2015
High7.2
Stored Cross-Site Scripting
Free counter
≤1.1Update to 1.2
CVE-2015-4084May 25, 2015
Medium6.5
Cross-Site Scripting
WordPress Landing Pages
<1.8.5Update to 1.8.5
CVE-2015-4065May 25, 2015
Medium6.1
Cross-Site Scripting
Events Manager – Calendar, Bookings, Tickets, Appointments and more!
<5.5.7Update to 5.5.7
CVE-2015-9300May 23, 2015
Medium6.1
Stored Cross-Site Scripting
Church Admin
<0.810Update to 0.810
CVE-2015-4127May 22, 2015
Medium6.1
Reflecte Cross-Site Scripting
woo-popup
≤1.2.2Update to 1.3.0
CVE-2015-10095May 21, 2015
High8.8
Privilege Escalation
WP Membership
≤1.2.3No patch available
CVE-2015-4038May 21, 2015