VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1420)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1420)
SeverityVulnerabilityCVEInstallsPublished
Critical9.8Local File Inclusion
CIP4 Folder Download Widget<1.11Update to 1.11
——
Critical9.8Unauthenticated Blind SQL Injection via order_by Parameter
Photo Gallery by 10Web – Mobile-Friendly Image Gallery<1.2.8Update to 1.2.8
CVE-2015-1055—
Medium6.1Cross-Site Scripting
Pods – Custom Content Types and Fields≤2.4.3Update to 2.5
CVE-2014-7956—
Critical9.6Multiple Cross-Site Request Forgery
Pods – Custom Content Types and Fields≤2.4.3Update to 2.5
CVE-2014-7957—
Medium6.1Reflected Cross Site Scripting
Custom Sidebars – Dynamic Sidebar Classic Widget Area Manager<2.1.0.2Update to 2.1.0.2
——
Medium6.1Reflected Cross-Site Scripting
Greg's High Performance SEO<1.6.2Update to 1.6.2
CVE-2015-9319—
High8.8Arbitrary File Upload
WP EasyCart: Shopping Cart and eCommerce Store<3.0.16Update to 3.0.16
CVE-2014-9308—
Medium6.1Cross-Site Scripting
Slideoptinproxall versionsNo patch available
——
Medium6.1Cross-Site Scripting
SlimStat Analytics – Real-Time Stats, Heatmaps & Ecommerce<3.9.3Update to 3.9.3
CVE-2015-1204—
Medium6.1Cross-Site Scripting
MP3-jPlayer≤1.8.11Update to 1.8.12
——
Medium6.1Cross-Site Request Forgery to Cross-Site Scripting
simpleflickr≤3.0.3No patch available
CVE-2014-9396—
Medium6.1Cross-Site Scripting
Relevanssi – A Better Search<3.3.8Update to 3.3.8
CVE-2014-9443—
Medium6.1Cross-Site Request Forgery to Cross-Site Scripting
SEO Friendly Images≤3.0.4Update to 3.0.5
——
High8.8Cross-Site Request Forgery
Banner Effect Header<1.2.8Update to 1.2.8
CVE-2015-0920—
Medium6.5WordPress Ecommerce < 1.5.4 - Directory Traversal to Arbitrary File Disclosure
Cart66 Lite :: WordPress Ecommerce<1.5.4Update to 1.5.4
CVE-2014-9461—
Critical9.8Arbitrary File Upload
cformsII<14.8Update to 14.8
CVE-2014-9473—
High7.5Arbitrary File Read
Sell Downloads≤1.0.1Update to 1.0.2
CVE-2014-9511—
Medium6.1Cross-Site Scripting
Frontend Uploader<0.9.4Update to 0.9.4
CVE-2014-9444—
Medium6.1Cross-Site Scripting
Dewplayer≤1.2No patch available
——
Medium6.1Reflected Cross-Site Scripting
wordpress-backup-to-dropbox<4.1Update to 4.1
CVE-2014-9310—
High8.8SQL Injection
Cart66 Lite :: WordPress Ecommerce<1.5.4Update to 1.5.4
CVE-2014-9442—
High8.8Cross-Site Request Forgery to Cross-Site Scripting
wp-unique-article-header-image≤1.0No patch available
CVE-2014-9400—
High8.8Cross-Site Request Forgery to Stored Cross-Site Scripting
PWGRandom≤1.11No patch available
CVE-2014-9394—
Medium6.1Cross-Site Request Forgery
PictoBrowser≤0.3.1No patch available
CVE-2014-9392—
High8.8Cross-Site Request Forgery to Cross-Site Scripting
Post to Twitter≤0.7No patch available
CVE-2014-9393—
High8.8Cross-Site Request Forgery leading to Cross-Site Scripting
wp-limit-posts-automatically≤0.7No patch available
CVE-2014-9401—
High8.8Cross-Site Request Forgery
gSlideShow≤0.1No patch available
CVE-2014-9391—
High7.5Directory Traversal
Slider Revolution≤4.1.4Update to 4.2
CVE-2014-9734—
High7.2Authenticated (Admin+) SQL Injection
NextGEN Gallery Voting<2.7.6Update to 2.7.6
——
High7.2Cross-Site Scripting
Slider Revolution≤4.2.2Update to 4.2.3
CVE-2015-5151—

Search VulnCrest Radar

Jump to

Are you sure?