VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1412)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1412)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Reflected Cross-Site Scripting
Easy Canadian Sales Taxes Add-On for iThemes Exchange<1.1.0Update to 1.1.0
CVE-2015-9367—
Medium6.1Reflected Cross-Site Scripting
Jetpack – AI Agents & MCP, Security, Backup & Analytics<3.4.3Update to 3.4.3
CVE-2015-9359—
Medium6.1Reflected Cross-Site Scripting
Exchange Addon Invoices<1.4.0Update to 1.4.0
CVE-2015-9370—
Medium6.1Reflected Cross-Site Scripting
Yoast SEO – Advanced SEO with real-time guidance and built-in AI<2.1Update to 2.1
——
Medium6.1Reflected Cross-Site Scripting
GiveWP – Donation Plugin and Fundraising Platform<0.8.5Update to 0.8.5
——
Medium6.1Reflected Cross-Site Scripting
BuilderChild-Depot<5.0.30Update to 5.0.30
CVE-2015-9377—
Medium6.1Reflected Cross-Site Scripting
Easy Digital Downloads – htaccess Editor1.0.0 – 1.0.0Update to 1.0.1
CVE-2015-9515—
Medium6.1Cross-Site Scripting
Twenty Twelve EDD≤1.1Update to 1.1.1
CVE-2015-9536—
Critical9.8SQL Injection
Tune Library<1.5.5Update to 1.5.5
CVE-2015-3314—
Medium6.1Cross-Site Scripting
Easy Digital Downloads – PDF stamper≤1.0No patch available
CVE-2015-9519—
Medium6.1Cross-Site Scripting
WP-ViperGB<1.3.16Update to 1.3.16
CVE-2015-9356—
Medium6.1Cross-Site Scripting
Recommended Products - EDD≤1.2.3.2Update to 1.2.3.3
CVE-2015-9523—
Medium6.1Reflected Cross-Site Scripting
Easy Digital Downloads (EDD) Stripe≤2.1.2Update to 2.1.3
CVE-2015-9529—
Medium6.1Cross-Site Scripting
EDD Favorites≤1.0.6Update to 1.0.7
CVE-2015-9513—
High7.2Cross-Site Scripting
WPtouch – Make your WordPress Website Mobile-Friendly<3.7.6Update to 3.7.6
——
Medium6.1Reflected Cross-Site Scripting
All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)<2.2.6.2Update to 2.2.6.2
——
Medium6.1Reflected Cross-Site Scripting
Easy EU Value Added (VAT) Taxes Add-on<1.2.0Update to 1.2.0
CVE-2015-9368—
Medium6.1Cross-Site Scripting
Easy Digital Downloads – Recount Earnings<2.3.7Update to 2.3.7
CVE-2015-9524—
Critical9.8SQL Injection
Community Events≤1.3Update to 1.4
CVE-2015-3313—
Medium6.1Cross-Site Scripting
Easy Digital Downloads (EDD) Digital Store<1.3.3Update to 1.3.3
CVE-2015-9532—
Medium6.1Reflected Cross-Site Scripting
Social Count Plus≤3.0.2Update to 3.0.3
——
Medium6.1Cross-Site Scripting
PayPal Pro Add-on for iThemes Exchange<1.1.0Update to 1.1.0
CVE-2015-9373—
Medium6.1Reflected Cross-Site Scripting
Post Connector<1.0.4Update to 1.0.4
CVE-2015-9362—
Medium6.1Reflected Cross-Site Scripting
All-In-One Security (AIOS) – Security and Firewall<3.9.5Update to 3.9.5
CVE-2015-9294—
Medium6.1Cross-Site Scripting
Easy Digital Downloads – Per Product Emails<1.0.9Update to 1.0.9
CVE-2015-9520—
Medium5.4Cross-Site Scripting
Gravity Forms≤1.9.6Update to 1.9.7
——
Medium6.1Reflected Cross-Site Scripting
WP eCommerce≤3.9.2Update to 3.9.3
——
Medium6.1Cross-Site Scripting
Easy Digital Downloads - Wish Lists≤1.1Update to 1.1.1
CVE-2015-9531—
High7.1Cross-Site Scripting
P3 (Plugin Performance Profiler)<1.5.3.9Update to 1.5.3.9
——
Medium6.1Cross-Site Scripting
Two Factor Authentication<1.1.10Update to 1.1.10
CVE-2015-9355—
  • Medium6.1
    Reflected Cross-Site Scripting

    Easy Canadian Sales Taxes Add-On for iThemes Exchange

    <1.1.0Update to 1.1.0

    CVE-2015-9367

  • Medium6.1
    Reflected Cross-Site Scripting

    Jetpack – AI Agents & MCP, Security, Backup & Analytics

    <3.4.3Update to 3.4.3

    CVE-2015-9359

  • Medium6.1
    Reflected Cross-Site Scripting

    Exchange Addon Invoices

    <1.4.0Update to 1.4.0

    CVE-2015-9370

  • Medium6.1
    Reflected Cross-Site Scripting

    Yoast SEO – Advanced SEO with real-time guidance and built-in AI

    <2.1Update to 2.1

    2fe34989-493c-4883-a1ca-454262919202

  • Medium6.1
    Reflected Cross-Site Scripting

    GiveWP – Donation Plugin and Fundraising Platform

    <0.8.5Update to 0.8.5

    40f79195-23e7-4091-9dcb-8b787f0606f4

  • Medium6.1
    Reflected Cross-Site Scripting

    BuilderChild-Depot

    <5.0.30Update to 5.0.30

    CVE-2015-9377

  • Medium6.1
    Reflected Cross-Site Scripting

    Easy Digital Downloads – htaccess Editor

    1.0.0 – 1.0.0Update to 1.0.1

    CVE-2015-9515

  • Medium6.1
    Cross-Site Scripting

    Twenty Twelve EDD

    ≤1.1Update to 1.1.1

    CVE-2015-9536

  • Critical9.8
    SQL Injection

    Tune Library

    <1.5.5Update to 1.5.5

    CVE-2015-3314

  • Medium6.1
    Cross-Site Scripting

    Easy Digital Downloads – PDF stamper

    ≤1.0No patch available

    CVE-2015-9519

  • Medium6.1
    Cross-Site Scripting

    WP-ViperGB

    <1.3.16Update to 1.3.16

    CVE-2015-9356

  • Medium6.1
    Cross-Site Scripting

    Recommended Products - EDD

    ≤1.2.3.2Update to 1.2.3.3

    CVE-2015-9523

  • Medium6.1
    Reflected Cross-Site Scripting

    Easy Digital Downloads (EDD) Stripe

    ≤2.1.2Update to 2.1.3

    CVE-2015-9529

  • Medium6.1
    Cross-Site Scripting

    EDD Favorites

    ≤1.0.6Update to 1.0.7

    CVE-2015-9513

  • High7.2
    Cross-Site Scripting

    WPtouch – Make your WordPress Website Mobile-Friendly

    <3.7.6Update to 3.7.6

    26e7c3fa-7ae7-4343-8494-2955cb755c6d

  • Medium6.1
    Reflected Cross-Site Scripting

    All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)

    <2.2.6.2Update to 2.2.6.2

    03ddef11-04cb-4639-afb0-f123b339b9ae

  • Medium6.1
    Reflected Cross-Site Scripting

    Easy EU Value Added (VAT) Taxes Add-on

    <1.2.0Update to 1.2.0

    CVE-2015-9368

  • Medium6.1
    Cross-Site Scripting

    Easy Digital Downloads – Recount Earnings

    <2.3.7Update to 2.3.7

    CVE-2015-9524

  • Critical9.8
    SQL Injection

    Community Events

    ≤1.3Update to 1.4

    CVE-2015-3313

  • Medium6.1
    Cross-Site Scripting

    Easy Digital Downloads (EDD) Digital Store

    <1.3.3Update to 1.3.3

    CVE-2015-9532

  • Medium6.1
    Reflected Cross-Site Scripting

    Social Count Plus

    ≤3.0.2Update to 3.0.3

    35d69a35-ec19-474a-a09b-0200bfa9e1db

  • Medium6.1
    Cross-Site Scripting

    PayPal Pro Add-on for iThemes Exchange

    <1.1.0Update to 1.1.0

    CVE-2015-9373

  • Medium6.1
    Reflected Cross-Site Scripting

    Post Connector

    <1.0.4Update to 1.0.4

    CVE-2015-9362

  • Medium6.1
    Reflected Cross-Site Scripting

    All-In-One Security (AIOS) – Security and Firewall

    <3.9.5Update to 3.9.5

    CVE-2015-9294

  • Medium6.1
    Cross-Site Scripting

    Easy Digital Downloads – Per Product Emails

    <1.0.9Update to 1.0.9

    CVE-2015-9520

  • Medium5.4
    Cross-Site Scripting

    Gravity Forms

    ≤1.9.6Update to 1.9.7

    f2448450-9d0e-42bc-bfdb-66861b2f212c

  • Medium6.1
    Reflected Cross-Site Scripting

    WP eCommerce

    ≤3.9.2Update to 3.9.3

    ed0860db-0e1f-4929-90d5-ff2766ba71ad

  • Medium6.1
    Cross-Site Scripting

    Easy Digital Downloads - Wish Lists

    ≤1.1Update to 1.1.1

    CVE-2015-9531

  • High7.1
    Cross-Site Scripting

    P3 (Plugin Performance Profiler)

    <1.5.3.9Update to 1.5.3.9

    de918177-5901-40ed-a936-c212cdcf940d

  • Medium6.1
    Cross-Site Scripting

    Two Factor Authentication

    <1.1.10Update to 1.1.10

    CVE-2015-9355

Search VulnCrest Radar

Jump to

Are you sure?