VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1429)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1429)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Cross-Site Scripting
Events Manager Pro<2.2.9Update to 2.2.9
CVE-2013-1407—
High7.2SQL Injection
WP Easy Gallery – WordPress Gallery Plugin≤2.7Update to 2.7.1
——
High7.1Multiple Cross-Site Scripting
Subscribe2 – Form, Email Subscribers & Newsletters<8.1Update to 8.1
——
Critical9.8SQL Injection
Global Flash Gallery≤0.15.1Update to 0.15.2
——
Medium6.5Arbitrary File Upload
User Meta – User Profile Builder and User management plugin1.1.1 – 1.1.1Update to 1.1.2
——
Medium6.1Cross-Site Scripting
WP eCommerce≤3.8.9Update to 3.8.9.1
——
High7.2Stored Cross-Site Scripting
Kadence Security – Password, Two Factor Authentication, and Brute Force Protection≤3.5.3Update to 3.5.4
——
Critical9.8Remote Code Execution
WP Super Cache<1.3.2Update to 1.3.2
CVE-2013-2011—
Medium6.1Cross-Site Scripting
Download Manager≤2.2.2Update to 2.2.3
——
Medium6.5Missing Authorization
Yoast SEO – Advanced SEO with real-time guidance and built-in AI≤1.4.6Update to 1.4.7
——
Medium6.1Cross-Site Scripting
Count per Day≤3.1Update to 3.1.1
CVE-2012-0895—
Medium6.1Multiple Cross-Site Scripting
Events Manager – Calendar, Bookings, Tickets, Appointments and more!≤5.5.1Update to 5.5.2
CVE-2013-7477—
Critical9.8Arbitrary File Upload
Contact Form 7≤3.5.2Update to 3.5.3
——
Critical9.1Path Disclosure and Denial of Service
Count per Day≤3.2.3Update to 3.2.4
——
Medium6.1Cross-Site Scripting
Yoast Duplicate Post≤2.6Update to 3.0
CVE-2014-10378—
Medium6.1Reflected Cross-Site Scripting
DZS Video Gallery≤9.63Update to 9.64
——
High7.5Local File Inclusion
Tinymce Thumbnail Gallery≤1.0.7Update to 1.1.0
——
Medium6.1Cross-Site Scripting
Crowdsignal Dashboard – Polls, Surveys & more≤2.0.24Update to 2.0.25
CVE-2014-4856—
Medium6.5Path Traversal
LayerSlider≤4.6.1Update to 5.2.0
——
High8.8Cross-Site Request Forgery
underConstruction<1.09Update to 1.09
CVE-2013-2699—
Medium5.3Captcha Bypass
Captcha≤3.8.1Update to 3.8.2
——
Medium6.1Cross-Site Scripting
WP Post to PDF≤2.3.1No patch available
——
Critical9.8Local/Remote File Inclusion
SlideDeck 2 Lite Responsive Content Slider≤2.3.3Update to 2.3.5
CVE-2013-7483—
Critical9.8Remote Code Execution
W3 Total Cache≤0.9.2.8Update to 0.9.2.9
CVE-2013-2010—
High8.8Cross-Site Request Forgery
sexybookmarks≤6.1.4.0Update to 6.1.5.0
CVE-2013-3256—
High7.3Unspecified Vulnerabilities
SS Quiz≤1.12.2Update to 2.0
——
Medium6.1Reflected Cross-Site Scripting
DZS Video Gallery<7.95Update to 7.95
CVE-2014-3923—
High7.2SQL Injection
WP Easy Gallery – WordPress Gallery Plugin≤2.7Update to 2.7.1
——
Medium6.1Cross-Site Scripting
1-flash-gallery≤1.9.0No patch available
——
Medium5.3Cross-Site Scripting
Adminimize<1.7.22Update to 1.7.22
CVE-2011-5128—
  • Medium6.1
    Cross-Site Scripting

    Events Manager Pro

    <2.2.9Update to 2.2.9

    CVE-2013-1407

  • High7.2
    SQL Injection

    WP Easy Gallery – WordPress Gallery Plugin

    ≤2.7Update to 2.7.1

    1e223e0e-959f-498e-8c0e-daae36bd28cb

  • High7.1
    Multiple Cross-Site Scripting

    Subscribe2 – Form, Email Subscribers & Newsletters

    <8.1Update to 8.1

    10a54a3b-db6d-45c5-9280-7042ccc17ccd

  • Critical9.8
    SQL Injection

    Global Flash Gallery

    ≤0.15.1Update to 0.15.2

    08c14611-c785-484d-9fdf-7d71c39f63df

  • Medium6.5
    Arbitrary File Upload

    User Meta – User Profile Builder and User management plugin

    1.1.1 – 1.1.1Update to 1.1.2

    08bebfbd-08f4-45d9-9570-46f5c848afca

  • Medium6.1
    Cross-Site Scripting

    WP eCommerce

    ≤3.8.9Update to 3.8.9.1

    0753e172-3ff7-42a9-8651-d12573406d11

  • High7.2
    Stored Cross-Site Scripting

    Kadence Security – Password, Two Factor Authentication, and Brute Force Protection

    ≤3.5.3Update to 3.5.4

    1ec45848-33b1-4088-ba06-9a12d291120e

  • Critical9.8
    Remote Code Execution

    WP Super Cache

    <1.3.2Update to 1.3.2

    CVE-2013-2011

  • Medium6.1
    Cross-Site Scripting

    Download Manager

    ≤2.2.2Update to 2.2.3

    6a6390d2-58cd-468e-9936-e16954e2d3ee

  • Medium6.5
    Missing Authorization

    Yoast SEO – Advanced SEO with real-time guidance and built-in AI

    ≤1.4.6Update to 1.4.7

    7d33594b-e7b7-4685-97c1-37a2fecc1b8a

  • Medium6.1
    Cross-Site Scripting

    Count per Day

    ≤3.1Update to 3.1.1

    CVE-2012-0895

  • Medium6.1
    Multiple Cross-Site Scripting

    Events Manager – Calendar, Bookings, Tickets, Appointments and more!

    ≤5.5.1Update to 5.5.2

    CVE-2013-7477

  • Critical9.8
    Arbitrary File Upload

    Contact Form 7

    ≤3.5.2Update to 3.5.3

    92298f2d-aced-4177-b6e8-36e153e9c930

  • Critical9.1
    Path Disclosure and Denial of Service

    Count per Day

    ≤3.2.3Update to 3.2.4

    7612b680-fb4a-4c5a-aa46-fb3473da78b4

  • Medium6.1
    Cross-Site Scripting

    Yoast Duplicate Post

    ≤2.6Update to 3.0

    CVE-2014-10378

  • Medium6.1
    Reflected Cross-Site Scripting

    DZS Video Gallery

    ≤9.63Update to 9.64

    6a09e351-8326-4b31-bba5-5da34b417843

  • High7.5
    Local File Inclusion

    Tinymce Thumbnail Gallery

    ≤1.0.7Update to 1.1.0

    78914fef-6ab4-49b8-8c67-3a634759194c

  • Medium6.1
    Cross-Site Scripting

    Crowdsignal Dashboard – Polls, Surveys & more

    ≤2.0.24Update to 2.0.25

    CVE-2014-4856

  • Medium6.5
    Path Traversal

    LayerSlider

    ≤4.6.1Update to 5.2.0

    7801d3e1-90aa-434d-ae3d-9f19670280c0

  • High8.8
    Cross-Site Request Forgery

    underConstruction

    <1.09Update to 1.09

    CVE-2013-2699

  • Medium5.3
    Captcha Bypass

    Captcha

    ≤3.8.1Update to 3.8.2

    a3c5d4ed-7a17-4158-b039-322f729dbdde

  • Medium6.1
    Cross-Site Scripting

    WP Post to PDF

    ≤2.3.1No patch available

    8f24743c-3894-40a8-9128-7d04bc2c8345

  • Critical9.8
    Local/Remote File Inclusion

    SlideDeck 2 Lite Responsive Content Slider

    ≤2.3.3Update to 2.3.5

    CVE-2013-7483

  • Critical9.8
    Remote Code Execution

    W3 Total Cache

    ≤0.9.2.8Update to 0.9.2.9

    CVE-2013-2010

  • High8.8
    Cross-Site Request Forgery

    sexybookmarks

    ≤6.1.4.0Update to 6.1.5.0

    CVE-2013-3256

  • High7.3
    Unspecified Vulnerabilities

    SS Quiz

    ≤1.12.2Update to 2.0

    6b08105d-711e-49ea-a0bc-7179eb021300

  • Medium6.1
    Reflected Cross-Site Scripting

    DZS Video Gallery

    <7.95Update to 7.95

    CVE-2014-3923

  • High7.2
    SQL Injection

    WP Easy Gallery – WordPress Gallery Plugin

    ≤2.7Update to 2.7.1

    73e4b097-a33b-47c4-8899-f14e2858a1d0

  • Medium6.1
    Cross-Site Scripting

    1-flash-gallery

    ≤1.9.0No patch available

    8fea93d2-c1a5-416d-90d4-92304d8dc41f

  • Medium5.3
    Cross-Site Scripting

    Adminimize

    <1.7.22Update to 1.7.22

    CVE-2011-5128

Search VulnCrest Radar

Jump to

Are you sure?