VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1421)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1421)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Reflected Cross-Site Scripting
Better Search – Relevant search results for WordPress≤1.3.4Update to 1.3.5
——
High7.5Directory Traversal
DB Backup<5.0Update to 5.0
CVE-2014-9119—
Medium6.5Authorization Bypass
WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content≤4.6.3Update to 4.6.4
——
Medium5.4Cross-Site Scripting
W3 Total Cache≤0.9.4Update to 0.9.4.1
CVE-2014-8724—
High8.8Cross-Site Request Forgery and Stored Cross-Site Scripting
Sliding Social Icons≤1.61No patch available
CVE-2014-9437—
Medium6.1Cross-Site Scripting
iTwitter≤0.04No patch available
CVE-2014-9336—
Critical9.8Remote Code Execution
Download Manager<2.7.5Update to 2.7.5
——
Medium6.1Reflected Cross-Site Scripting
WP Construction Mode≤1.91Update to 1.92
——
Medium6.1Cross-Site Request Forgery to Stored Cross-Site Scripting
Timed Popup WordPress Plugin≤1.3Update to 1.4
——
Medium6.1Cross-Site Scripting
wpCommentTwit≤0.5No patch available
CVE-2014-9340—
High8.8Multiple Cross-Site Request Forgery
spnbabble≤1.4.1No patch available
CVE-2014-9339—
Medium6.1Cross-Site Request Forgery
DandyID Services≤1.5.9No patch available
CVE-2014-9335—
Medium6.1Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Social AutoConnect≤4.0.5Update to 4.0.6
——
Medium6.1Cross-Site Scripting
Mikiurl Wordpress Eklentisi≤2.0No patch available
CVE-2014-9337—
Medium6.1Cross-Site Scripting
Our Team Showcase<1.3Update to 1.3
CVE-2014-9523—
High7.1Cross-Site Scripting
Easy Social Like Box – Popup – Sidebar Widget<2.8.3Update to 2.8.3
CVE-2014-9524—
High8.8Cross-Site Request Forgery
Lightbox Photo Gallery≤1.0No patch available
CVE-2014-9441—
Medium6.1Cross-Site Request Forgery
Timed Popup WordPress Plugin≤1.4No patch available
CVE-2014-9525—
High8.8Cross-Site Request Forgery to Stored Cross-Site Scripting
IP Ban≤1.2.3Update to 1.2.4
CVE-2014-9413—
Medium6.1Cross-Site Request Forgery to Cross-Site Scripting
WP-ViperGB≤1.3.10Update to 1.3.11
CVE-2014-9460—
High7.2Cross-Site Scripting
Simple visitor stat≤1.0No patch available
CVE-2014-9453—
Critical9.8Arbitrary File Upload
WP Symposium≤14.11Update to 15.1
CVE-2014-10021—
Medium4.3Cross-Site Request Forgery
W3 Total Cache≤0.9.4Update to 0.9.4.1
CVE-2014-9414—
Medium6.1Cross-Site Scripting
Simplelife≤1.2No patch available
CVE-2014-9395—
Medium6.3Cross-Site Request Forgery
twitter-liveblog≤1.1.2No patch available
CVE-2014-9398—
Medium6.1Cross-Site Scripting
AWP Classifieds≤3.3.1Update to 3.3.2
——
High8.8Cross-Site Request Forgery
TweetScribe≤1.1No patch available
CVE-2014-9399—
Medium6.1Cross-Site Request Forgery
yurl-retwitt≤1.4No patch available
CVE-2014-9341—
High8.8Cross-Site Request Forgery to Cross-Site Scripting
Twimp WP≤0.1No patch available
CVE-2014-9397—
Medium6.1Cross-Site Request Forgery
bird-feeder≤1.2.3No patch available
CVE-2014-9334—

Search VulnCrest Radar

Jump to

Are you sure?