Database
WordPress Vulnerability Database (page 1431)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Critical9.8Remote Code Execution
WP-Filebase
≤0.3.0.03Update to 0.3.0.04
- Medium6.1Cross-Site Scripting
1-flash-gallery
≤1.9.0No patch available
- Medium6.1Multiple Cross-Site Scripting
Events Manager – Calendar, Bookings, Tickets, Appointments and more!
≤5.5.1Update to 5.5.2
- Medium6.1Reflected Cross-Site Scripting
WP-reCAPTCHA
≤3.1.3Update to 3.1.4
- High7.2Cross-Site Request Forgery and Stored Cross-Site Scripting
simply-poll
≤1.4.1No patch available
- Medium6.1Cross-Site Scripting
Crowdsignal Dashboard – Polls, Surveys & more
≤2.0.24Update to 2.0.25
- Medium5.3Cross-Site Scripting
Adminimize
<1.7.22Update to 1.7.22
- Medium6.1Reflected Cross-Site Scripting
WPCB
≤2.4.8No patch available
- High7.5Local File Inclusion
Tinymce Thumbnail Gallery
≤1.0.7Update to 1.1.0
- Medium6.1Reflected Cross-Site Scripting
Crowdsignal Dashboard – Polls, Surveys & more
<2.0.24Update to 2.0.24
- High8.8Cross-Site Request Forgery
underConstruction
<1.09Update to 1.09
- Medium6.1Multiple Cross-Site Scripting
Pie Register – User Registration, Profiles & Content Restriction
≤1.30Update to 1.31
- Critical9.8Local/Remote File Inclusion
SlideDeck 2 Lite Responsive Content Slider
≤2.3.3Update to 2.3.5
- Medium6.5Path Traversal
LayerSlider
≤4.6.1Update to 5.2.0
- High7.3Unspecified Vulnerability
Image News Slider
≤3.2Update to 3.3
- High8.8Q and A <= 1.0.6.2 Cross-Site Request Forgery
Q and A
≤1.0.6.2No patch available
- Medium6.1Cross-Site Scripting
XEN Carousel
≤0.12.2No patch available
- Medium6.1Cross-Site Scripting
WP Easy Gallery – WordPress Gallery Plugin
≤1.7Update to 1.8
- Medium6.1Cross-Site Scripting
WP Symposium
≤11.11.26Update to 11.12.08
- High8.8SQL Injection
G-Lock Double Opt-in Manager
≤2.6.5No patch available
- Medium6.1Cross-Site Scripting
Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More
≤0.4.4Update to 0.4.5
- Medium6.1Cross-Site Scripting
WP-Banners-Lite
≤1.40No patch available
- Medium6.1Cross-Site Scripting
Alpine Photo Tile for Instagram
<1.2.9Update to 1.2.9
- Medium4.7Cross-Site Request Forgery
Simple Shopping Cart
<3.6Update to 3.6
- Medium6.1DOM Cross-Site Scripting
Image Slider
<1.1.7Update to 1.1.7
- Medium6.1Multiple Cross-Site Scripting
WP Super Cache
≤1.3Update to 1.3.1
- High7.2Stored Cross-Site Scripting
Kadence Security – Password, Two Factor Authentication, and Brute Force Protection
≤3.5.3Update to 3.5.4
- Medium6.1Cross-Site Scripting
Events Manager Pro
<2.2.9Update to 2.2.9
- High7.5Sensitive Information Disclosure
Email Newsletter
≤8.0Update to 9.0
- High8.8Cross-Site Request Forgery
WP Easy Gallery – WordPress Gallery Plugin
≤2.7Update to 2.7.1