VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1430)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1430)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Unauthenticated Stored Cross-Site Scripting
Mail Subscribe List≤2.0.9Update to 2.1
CVE-2013-10026—
High8.8Cross-Site Request Forgery
Stream Video Player≤1.4.1No patch available
CVE-2013-2706—
High8.8Cross-Site Request Forgery
Disable Comments<1.0.4Update to 1.0.4
CVE-2014-2550—
Medium6.1Reflected Cross-Site Scripting
WP App Maker≤1.0.16.4No patch available
CVE-2014-4578—
Critical9.8SQL Injection
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio≤0.59Update to 0.60
——
Medium6.1Cross-Site Scripting
Count per Day≤3.1.1Update to 3.2
CVE-2012-3434—
Medium5.3Cross-Site Scripting
Adminimize<1.7.22Update to 1.7.22
CVE-2011-5128—
Critical9.8Remote Code Execution
WP-Filebase≤0.3.0.03Update to 0.3.0.04
——
Medium6.5Path Traversal
LayerSlider≤4.6.1Update to 5.2.0
——
Medium6.1Cross-Site Scripting
HK Exif Tags≤1.11Update to 1.12
CVE-2014-100007—
Medium6.1Reflected Cross-Site Scripting
Crowdsignal Dashboard – Polls, Surveys & more<2.0.24Update to 2.0.24
——
High8.8Cross-Site Request Forgery to Cross-Site Scripting
Contextual Related Posts≤1.8.6Update to 1.8.7
CVE-2013-2710—
Medium6.1Cross-Site Scripting
Yoast Duplicate Post≤2.6Update to 3.0
CVE-2014-10378—
Critical9.8Remote Code Execution
W3 Total Cache≤0.9.2.8Update to 0.9.2.9
CVE-2013-2010—
Medium6.1Reflected Cross-Site Scripting
DZS Video Gallery<7.95Update to 7.95
CVE-2014-3923—
High7.2SQL Injection
WP Easy Gallery – WordPress Gallery Plugin≤2.7Update to 2.7.1
——
High7.5Local File Inclusion
Tinymce Thumbnail Gallery≤1.0.7Update to 1.1.0
——
Medium6.1Cross-Site Scripting
Crowdsignal Dashboard – Polls, Surveys & more≤2.0.24Update to 2.0.25
CVE-2014-4856—
Medium6.1Multiple Cross-Site Scripting
Pie Register – User Registration, Profiles & Content Restriction≤1.30Update to 1.31
CVE-2013-4954—
High8.3Stored Cross-Site Scripting
Kadence Security – Password, Two Factor Authentication, and Brute Force Protection<3.6.4Update to 3.6.4
——
High7.2Cross-Site Request Forgery and Stored Cross-Site Scripting
simply-poll≤1.4.1No patch available
——
Critical9.8Local/Remote File Inclusion
SlideDeck 2 Lite Responsive Content Slider≤2.3.3Update to 2.3.5
CVE-2013-7483—
Critical9.1Path Disclosure and Denial of Service
Count per Day≤3.2.3Update to 3.2.4
——
Medium6.1Reflected Cross-Site Scripting
WP-reCAPTCHA≤3.1.3Update to 3.1.4
——
Medium6.1Cross-Site Scripting
WP Post to PDF≤2.3.1No patch available
——
Medium6.1Cross-Site Scripting
Download Manager≤2.2.2Update to 2.2.3
——
Medium6.1Reflected Cross-Site Scripting
DZS Video Gallery≤9.63Update to 9.64
——
High8.8Cross-Site Request Forgery
underConstruction<1.09Update to 1.09
CVE-2013-2699—
Medium6.1Cross-Site Scripting
Count per Day≤3.1Update to 3.1.1
CVE-2012-0895—
Medium6.1Cross-Site Scripting
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio≤2.71Update to 2.72
CVE-2013-3261—

Search VulnCrest Radar

Jump to

Are you sure?