Database
WordPress Vulnerability Database (page 1419)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Critical9.8Arbitrary Shortcode Execution
Feed Them Social – Social Media Feeds, Video, and Photo Galleries
≤1.6.9Update to 1.7.0
- High8.6Authorization Bypass
Revive Social – Social Media Auto Post and Scheduling Automation Plugin
<8.0.0Update to 8.0.0
- High7.2Stored Cross-Site Scripting
Incoming Links
<0.9.10bUpdate to 0.9.10b
- Medium6.1Cross-Site Scripting
Banner Effect Header
<1.2.8Update to 1.2.8
- Medium6.1Cross-Site Scripting
WooCommerce
<2.2.11Update to 2.2.11
- Medium4.3Open Redirect
WPtouch – Make your WordPress Website Mobile-Friendly
<3.7Update to 3.7
- Medium6.1Cross-Site Scripting
PowerPress Podcasting plugin by Blubrry
≤6.0.0Update to 6.0.1
- Medium5.4Authenticated Cross-Site Scripting
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
<1.2.11Update to 1.2.11
- Medium4.3Missing Authorization
Feedweb
≤3.0.10Update to 3.0.11
- Medium6.1Cross-Site Scripting
Geo Mashup
<1.8.3Update to 1.8.3
- Medium6.1Reflected Cross-Site Scripting
Cart66 Lite :: WordPress Ecommerce
<1.5.5Update to 1.5.5
- Medium5.4Cross-Site Scripting
Google Doc Embedder
<2.5.19Update to 2.5.19
- High7.1Cross-Site Scripting
WDSocialWidgets
<1.0.11Update to 1.0.11
- Medium6.1Cross-Site Request Forgery and Cross-Site Scripting
acobot
≤2.0No patch available
- High7.5File Disclosure
RedSteel
all versionsNo patch available
- High8.8Authenticated SQL Injection via asc_or_desc Parameter
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
<1.2.11Update to 1.2.11
- Critical9.8Arbitrary File Upload
Iptanus File Upload
≤2.4.6Update to 2.5.0
- Medium6.4Authorization Bypass
Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress
≤3.82Update to 3.83
- Critical9.8Missing Authorization to Unauthenticated Arbitrary Options Update
Platform
<1.4.4Update to 1.4.4
- Critical9.8Missing Authorization
Pagelines
<1.4.6Update to 1.4.6
- High7.5Directory Traversal
Pixabay Images
≤2.3Update to 2.4
- Critical9.8Authentication Bypass to Arbitrary File Upload
Pixabay Images
≤2.0Update to 2.4
- High8.8Arbitrary File Upload
Pixabay Images
≤2.3Update to 2.4
- Medium6.1Cross-Site Scripting
Pixabay Images
<2.4Update to 2.4
- Critical9.8Arbitrary File Upload
Holding Pattern
≤0.6No patch available
- Medium5.3Email Injection
Store Locator Plus® for WordPress
<4.2.27Update to 4.2.27
- High7.3Missing Authorization
Pie Register – User Registration, Profiles & Content Restriction
≤2.0.13Update to 2.0.14
- High7.5Directory Traversal
GI-Media Library
<3.0Update to 3.0
- Medium4.8Authenticated Stored Cross-Site Scripting
Simple Security
≤1.1.5Update to 1.1.6
- Critical9.8Local File Inclusion
CIP4 Folder Download Widget
<1.11Update to 1.11