Database
WordPress Vulnerability Database (page 1415)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium6.4Cross-Site Scripting via example.html
WordPress
≤4.2.1Update to 3.7.8 or 3.8.8 or 3.9.6 or 4.0.5 or 4.1.5 or 4.2.2
- Medium5.4Authenticated (Subscriber+) Cross-Site Scripting
Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic
<7.6.1.0Update to 7.6.1.0
- High7.5Arbitrary File Download
S3 Bubble Amazon S3 HTML5 Video with Adverts
≤2.0No patch available
- High7.2Cross Site Scripting
WP Super Cache
<1.4.3Update to 1.4.3
- Critical9.8SQL Injection
All-In-One Security (AIOS) – Security and Firewall
<3.9.1Update to 3.9.1
- High7.5Arbitrary File Download
Aspose Importer & Exporter (Discontinued)
≤2.0Update to 3.0
- Medium6.5Improper Access Control
WORDPRESS VIDEO GALLERY
all versionsNo patch available
- Critical10.0Multiple SQL Injections
Simple Ads Manager
<2.7.97Update to 2.7.97
- Medium5.3Information Disclosure
Simple Ads Manager
≤2.5.96Update to 2.5.97
- Critical9.8Arbitrary File Upload
PHP Event Calendar for WordPress
<1.5.1Update to 1.5.1
- High7.1Reflected Cross-Site Scripting
Favicon by RealFaviconGenerator
<1.2.13Update to 1.2.13
- Critical9.8Arbitrary File Upload
Simple Ads Manager
≤2.5.94Update to 2.5.96
- Critical9.8SQL Injection
WP Business Intelligence Lite
≤1.6.2Update to 1.6.3
- Medium5.3Information Disclosure
All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)
<2.2.6Update to 2.2.6
- Medium5.3Authorization Bypass
WordPress Leads
<1.6.3Update to 1.6.3
- Medium4.3Open Redirect
Newsletter – Send awesome emails from WordPress
≤3.8.2Update to 3.8.3
- Critical9.8Unrestricted File Upload leading to Remote Code Execuction
Webcam Video Conference
≤4.91.8Update to 4.91.9
- Critical9.8Arbitrary File Upload
VideoWhisper Video Presentation
≤4.1.4Update to 4.6.1
- High7.5Arbitrary File Download
Aspose.PDF Exporter
<2.0Update to 2.0
- High7.5Arbitrary File Download
Aspose.Words – Import and Export word documents
<2.0Update to 2.0
- High7.5Unauthenticated Arbitrary File Read
Aspose.Words – Import and Export word documents
≤1.0Update to 2.0
- Medium5.3Directory Traversal
Aspose Cloud eBook Generator (Discontinued)
≤1.0Update to 2.0
- High7.1Cross-Site Scripting
flashy
≤1.3No patch available
- High8.8Missing Authorization to Remote Code Execution
Ajax Search Lite – Live Search & Filter
<3.11Update to 3.11
- High8.8Cross-Site Request Forgery
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery
<2.0.77.3Update to 2.0.77.3
- Medium6.1Reflected Cross-Site Scripting
Ptengine – Heatmap Analytics
<1.0.2Update to 1.0.2
- High8.8Arbitrary File Upload
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery
<2.0.77.3Update to 2.0.77.3
- Critical9.8Arbitrary File Upload
InBoundio Marketing
<2.0.1Update to 2.0.1
- High8.8Cross-Site Request Forgery to Cross-Site Scripting
AB Google Map Travel (AB-MAP)
<4.0Update to 4.0
- High8.8Arbitrary File Download
WP Marketplace – Complete Shopping Cart / eCommerce Solution
<2.4.1Update to 2.4.1