VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1428)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1428)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Cross-Site Scripting
PDF & Print by BestWebSoft – WordPress Posts and Pages PDF Generator Plugin<1.7.5Update to 1.7.5
——
High8.8Cross-Site Request Forgery Protection Bypass
WordPress≤3.9.1Update to 3.7.4 or 3.8.4 or 3.9.2
CVE-2014-5204—
Medium5.3XML External Entity (XXE) Weakness
WordPress<3.9.2Update to 3.9.2
CVE-2014-2053—
Low3.8Authenticated Cross-Site Scripting via Avatar URL
WordPress≤3.9.1Update to 3.7.4 or 3.8.4 or 3.9.2
CVE-2014-5240—
Low2.7Denial of Service via XML
WordPress≤3.9.1Update to 3.7.4 or 3.8.4 or 3.9.2
CVE-2014-5265—
Medium6.1Cross-Site Scripting
WordPress Spreadsheet≤0.62No patch available
CVE-2014-8364—
Medium6.5Denial of Service via XML #2
WordPress≤3.9.1Update to 3.7.4 or 3.8.4 or 3.9.2
CVE-2014-5266—
High8.8Cross-Site Request Forgery to Authentication Takeover
WordPress≤3.9.1Update to 3.7.4 or 3.8.4 or 3.9.2
CVE-2014-9033—
High7.2Deserialization via Widgets
WordPress≤3.9.1Update to 3.7.4 or 3.8.4 or 3.9.2
CVE-2014-5203—
Medium6.5Brute Force of Cross-Site Request Forgery Tokens
WordPress≤3.9.1Update to 3.7.4 or 3.8.4 or 3.9.2
CVE-2014-5205—
Critical9.8SQL Injection
WordPress Spreadsheet≤0.62No patch available
CVE-2014-8363—
Critical9.8Arbitrary File Upload
Gmedia Photo Gallery<1.2.2Update to 1.2.2
——
Medium6.1Cross-Site Scripting
Events Manager Pro<2.2.9Update to 2.2.9
CVE-2013-1407—
High8.8SQL Injection
Mingle Forum≤1.0.32.1Update to 1.0.33
CVE-2012-5327—
Medium6.5Arbitrary File Upload
User Meta – User Profile Builder and User management plugin1.1.1 – 1.1.1Update to 1.1.2
——
Medium6.1Cross-Site Scripting
Alpine Photo Tile for Instagram<1.2.9Update to 1.2.9
——
Medium6.1Multiple Cross-Site Scripting
WP Super Cache≤1.3Update to 1.3.1
CVE-2013-2008—
Critical9.8SQL Injection
Yoast Duplicate Post≤2.5Update to 2.6
CVE-2014-10379—
Critical9.8SQL Injection
Global Flash Gallery≤0.15.1Update to 0.15.2
——
Medium6.1Unauthenticated Multiple Cross-Site Scripting
Media Library Categories≤1.1.1No patch available
CVE-2012-6630—
Medium6.1Reflected Cross-Site Scripting
Platinum SEO≤1.3.7Update to 1.3.8
CVE-2013-5918—
Medium6.1Cross-Site Scripting
XEN Carousel≤0.12.2No patch available
CVE-2014-4602—
Medium6.1Cross-Site Scripting
Adminimize≤1.7.21Update to 1.7.22
CVE-2011-4926—
High7.2Stored Cross-Site Scripting
Kadence Security – Password, Two Factor Authentication, and Brute Force Protection≤3.5.3Update to 3.5.4
——
High8.8Cross-Site Request Forgery
WP Activity Log<1.2.5Update to 1.2.5
CVE-2014-5072—
Medium6.1Cross-Site Scripting
Events Manager – Calendar, Bookings, Tickets, Appointments and more!<5.3.9Update to 5.3.9
CVE-2013-7479—
High7.1Multiple Cross-Site Scripting
Subscribe2 – Form, Email Subscribers & Newsletters<8.1Update to 8.1
——
Medium6.1Cross-Site Scripting
WP eCommerce≤3.8.9Update to 3.8.9.1
——
Critical9.8Arbitrary File Upload
Uploader≤1.0.4No patch available
——
Medium6.3Cross-Site Request Forgery
Cart66 Lite :: WordPress Ecommerce<1.5.1.15Update to 1.5.1.15
CVE-2013-5977—

Search VulnCrest Radar

Jump to

Are you sure?