Database

WordPress Vulnerability Database (page 1413)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1413)
Severity	Vulnerability	CVE	Installs	Published
Medium6.1	Reflected Cross-Site Scripting My Calendar – Accessible Event Manager<2.3.10Update to 2.3.10	—	—	Apr 20, 2015
Medium6.1	Cross-Site Scripting Shoppette<1.0.5Update to 1.0.5	CVE-2015-9535	—	Apr 20, 2015
Medium6.1	Reflected Cross-Site Scripting Post Connector<1.0.4Update to 1.0.4	—	—	Apr 20, 2015
Medium6.1	Reflected Cross-Site Scripting Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder<2.9.11Update to 2.9.11	—	—	Apr 20, 2015
Medium6.1	Reflected Cross-Site Scripting Easy Digital Downloads – Pushover notifications≤1.2.8Update to 1.2.9	CVE-2015-9521	—	Apr 20, 2015
High7.1	Cross-Site Scripting P3 (Plugin Performance Profiler)<1.5.3.9Update to 1.5.3.9	—	—	Apr 20, 2015
Medium6.1	Cross-Site Scripting Easy Digital Downloads - Recurring Payments≤2.3Update to 2.3.1	CVE-2015-9525	—	Apr 20, 2015
Medium6.1	Reflected Cross-Site Scripting Easy Digital Downloads - QR Codes≤1.1.0Update to 1.1.1	CVE-2015-9522	—	Apr 20, 2015
Medium6.1	Reflected Cross-Site Scripting Exchange Addon Membership<1.3.0Update to 1.3.0	CVE-2015-9372	—	Apr 20, 2015
Medium5.4	Cross-Site Scripting Gravity Forms≤1.9.6Update to 1.9.7	—	—	Apr 20, 2015
Medium6.1	Reflected Cross-Site Scripting Manual Purchases Add-on for iThemes Exchange<1.1.0Update to 1.1.0	CVE-2015-9371	—	Apr 20, 2015
Medium6.1	Reflected Cross-Site Scripting Easy Digital Downloads - Free Downloads≤2.3.6Update to 2.3.7	CVE-2015-9514	—	Apr 20, 2015
Medium6.1	Reflected Cross-Site Scripting WP eCommerce≤3.9.2Update to 3.9.3	—	—	Apr 20, 2015
Medium6.1	Reflected Cross-Site Scripting Market<5.1.27Update to 5.1.27	CVE-2015-9378	—	Apr 20, 2015
Medium6.1	Cross-Site Scripting Easy Digital Downloads - Wish Lists≤1.1Update to 1.1.1	CVE-2015-9531	—	Apr 20, 2015
Medium6.1	Cross-Site Scripting ithemes-exchange<1.12.0Update to 1.12.0	CVE-2015-9363	—	Apr 20, 2015
Medium6.1	Reflected Cross-Site Scripting Related Posts≤1.8.1Update to 1.8.2	CVE-2015-9361	—	Apr 20, 2015
High7.2	Cross-Site Scripting MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)≤5.3.3Update to 5.4	—	—	Apr 20, 2015
Medium6.1	Cross-Site Scripting Easy Digital Downloads – Software Licensing<3.2.3Update to 3.2.3	CVE-2015-9528	—	Apr 20, 2015
Medium6.1	Quota < 1.2.5 - Cross-Site Scripting Easy Digital Downloads - Quota<1.2.5Update to 1.2.5	CVE-2015-9534	—	Apr 20, 2015
Medium6.1	Reflected Cross-Site Scripting Download Monitor<1.7.1Update to 1.7.1	CVE-2015-9296	—	Apr 20, 2015
Medium6.1	Reflected Cross-Site Scripting Download Monitor≤1.7.0Update to 1.6.5 or 1.7.1	—	—	Apr 20, 2015
Medium6.1	Cross-Site Scripting Easy Digital Downloads – Invoices<1.0.4Update to 1.0.4	CVE-2015-9518	—	Apr 20, 2015
Medium6.1	Cross-Site Scripting Lattice<1.1.5Update to 1.1.5	CVE-2015-9533	—	Apr 20, 2015
Medium6.1	Reflected Cross-Site Scripting Stripe Add-on for iThemes Exchange<1.2.0Update to 1.2.0	CVE-2015-9374	—	Apr 20, 2015
Medium6.1	Reflected Cross-Site Scripting Taxonomy Switcher≤1.0.3Update to 1.0.4	CVE-2015-10013	—	Apr 20, 2015
Medium6.1	Reflected Cross-Site Scripting Jetpack – AI Agents & MCP, Security, Backup & Analytics<3.4.3Update to 3.4.3	CVE-2015-9359	—	Apr 20, 2015
Medium6.1	Cross-Site Scripting UpdraftPlus Premium≤1.9.6.3Update to 1.9.6.4	—	—	Apr 20, 2015
Medium6.1	Reflected Cross-Site Scripting Age Verify≤0.2.8Update to 0.2.9	—	—	Apr 20, 2015
Medium6.1	Reflected Cross-Site Scripting Easy Canadian Sales Taxes Add-On for iThemes Exchange<1.1.0Update to 1.1.0	CVE-2015-9367	—	Apr 20, 2015

Medium6.1
Reflected Cross-Site Scripting
My Calendar – Accessible Event Manager
<2.3.10Update to 2.3.10
d8a56a1c-6af0-47e6-906c-bb3eb1440eb9Apr 20, 2015
Medium6.1
Cross-Site Scripting
Shoppette
<1.0.5Update to 1.0.5
CVE-2015-9535Apr 20, 2015
Medium6.1
Reflected Cross-Site Scripting
Post Connector
<1.0.4Update to 1.0.4
c3d7728f-7c25-4505-8db3-b67a5c17a439Apr 20, 2015
Medium6.1
Reflected Cross-Site Scripting
Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder
<2.9.11Update to 2.9.11
dba01dc2-c73b-461a-bcbd-86daa0bf0ad0Apr 20, 2015
Medium6.1
Reflected Cross-Site Scripting
Easy Digital Downloads – Pushover notifications
≤1.2.8Update to 1.2.9
CVE-2015-9521Apr 20, 2015
High7.1
Cross-Site Scripting
P3 (Plugin Performance Profiler)
<1.5.3.9Update to 1.5.3.9
de918177-5901-40ed-a936-c212cdcf940dApr 20, 2015
Medium6.1
Cross-Site Scripting
Easy Digital Downloads - Recurring Payments
≤2.3Update to 2.3.1
CVE-2015-9525Apr 20, 2015
Medium6.1
Reflected Cross-Site Scripting
Easy Digital Downloads - QR Codes
≤1.1.0Update to 1.1.1
CVE-2015-9522Apr 20, 2015
Medium6.1
Reflected Cross-Site Scripting
Exchange Addon Membership
<1.3.0Update to 1.3.0
CVE-2015-9372Apr 20, 2015
Medium5.4
Cross-Site Scripting
Gravity Forms
≤1.9.6Update to 1.9.7
f2448450-9d0e-42bc-bfdb-66861b2f212cApr 20, 2015
Medium6.1
Reflected Cross-Site Scripting
Manual Purchases Add-on for iThemes Exchange
<1.1.0Update to 1.1.0
CVE-2015-9371Apr 20, 2015
Medium6.1
Reflected Cross-Site Scripting
Easy Digital Downloads - Free Downloads
≤2.3.6Update to 2.3.7
CVE-2015-9514Apr 20, 2015
Medium6.1
Reflected Cross-Site Scripting
WP eCommerce
≤3.9.2Update to 3.9.3
ed0860db-0e1f-4929-90d5-ff2766ba71adApr 20, 2015
Medium6.1
Reflected Cross-Site Scripting
Market
<5.1.27Update to 5.1.27
CVE-2015-9378Apr 20, 2015
Medium6.1
Cross-Site Scripting
Easy Digital Downloads - Wish Lists
≤1.1Update to 1.1.1
CVE-2015-9531Apr 20, 2015
Medium6.1
Cross-Site Scripting
ithemes-exchange
<1.12.0Update to 1.12.0
CVE-2015-9363Apr 20, 2015
Medium6.1
Reflected Cross-Site Scripting
Related Posts
≤1.8.1Update to 1.8.2
CVE-2015-9361Apr 20, 2015
High7.2
Cross-Site Scripting
MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)
≤5.3.3Update to 5.4
9c40773d-3a2f-46b6-861e-608d662250daApr 20, 2015
Medium6.1
Cross-Site Scripting
Easy Digital Downloads – Software Licensing
<3.2.3Update to 3.2.3
CVE-2015-9528Apr 20, 2015
Medium6.1
Quota < 1.2.5 - Cross-Site Scripting
Easy Digital Downloads - Quota
<1.2.5Update to 1.2.5
CVE-2015-9534Apr 20, 2015
Medium6.1
Reflected Cross-Site Scripting
Download Monitor
<1.7.1Update to 1.7.1
CVE-2015-9296Apr 20, 2015
Medium6.1
Reflected Cross-Site Scripting
Download Monitor
≤1.7.0Update to 1.6.5 or 1.7.1
93cb6d59-6654-4ce1-b65f-0e162ae58bacApr 20, 2015
Medium6.1
Cross-Site Scripting
Easy Digital Downloads – Invoices
<1.0.4Update to 1.0.4
CVE-2015-9518Apr 20, 2015
Medium6.1
Cross-Site Scripting
Lattice
<1.1.5Update to 1.1.5
CVE-2015-9533Apr 20, 2015
Medium6.1
Reflected Cross-Site Scripting
Stripe Add-on for iThemes Exchange
<1.2.0Update to 1.2.0
CVE-2015-9374Apr 20, 2015
Medium6.1
Reflected Cross-Site Scripting
Taxonomy Switcher
≤1.0.3Update to 1.0.4
CVE-2015-10013Apr 20, 2015
Medium6.1
Reflected Cross-Site Scripting
Jetpack – AI Agents & MCP, Security, Backup & Analytics
<3.4.3Update to 3.4.3
CVE-2015-9359Apr 20, 2015
Medium6.1
Cross-Site Scripting
UpdraftPlus Premium
≤1.9.6.3Update to 1.9.6.4
800a06f3-8a5b-4ba1-ad16-3d3a214f372fApr 20, 2015
Medium6.1
Reflected Cross-Site Scripting
Age Verify
≤0.2.8Update to 0.2.9
78f08c2b-c6e4-431e-bbbd-5dd082b29195Apr 20, 2015
Medium6.1
Reflected Cross-Site Scripting
Easy Canadian Sales Taxes Add-On for iThemes Exchange
<1.1.0Update to 1.1.0
CVE-2015-9367Apr 20, 2015