Database

WordPress Vulnerability Database (page 1433)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1433)
Severity	Vulnerability	CVE	Installs	Published
Medium5.3	Information Disclosure WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps<2.0.2Update to 2.0.2	CVE-2014-5337	—	Jul 24, 2014
Medium5.4	Cross-Site Scripting WORDPRESS VIDEO GALLERY≤2.5Update to 2.6	CVE-2014-9098	—	Jul 24, 2014
Medium6.1	JavaScript Code Injection 3CX Free Live Chat, Calls & Messaging<4.1.0Update to 4.1.0	CVE-2014-10386	—	Jul 20, 2014
Critical9.8	Arbitrary Command Execution WordPress Flash Uploader<3.1.3Update to 3.1.3	CVE-2014-5014	—	Jul 18, 2014
High7.5	Sensitive Information Disclosure WP BackItUp Community Edition≤1.9Update to 1.9.1	CVE-2014-9012	—	Jul 16, 2014
Medium6.1	Cross-Site Scripting User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor<1.1.66Update to 1.1.66	CVE-2014-10380	—	Jul 16, 2014
High8.8	Potential Cross-Site Request Forgery Bypass WP REST API (WP API)≤1.1Update to 1.1.1	—	—	Jul 10, 2014
Medium6.1	Cross-Site Scrpting Compfight<1.5Update to 1.5	CVE-2014-8622	—	Jul 10, 2014
Medium6.1	Reflected Cross-Site Scripting Compfight≤1.4Update to 1.5	CVE-2014-5202	—	Jul 10, 2014
Medium6.1	Cross-Site Scripting Keyring≤1.5Update to 1.5.1	—	—	Jul 7, 2014
Medium6.1	Reflected Cross-Site Scripting Google Maps in Posts≤1.5.3No patch available	—	—	Jul 7, 2014
Medium6.1	Reflected Cross-Site Scripting ImmoPress≤0.0.4No patch available	—	—	Jul 7, 2014
Medium6.1	Reflected Cross-Site Scripting mywebcounter≤1.1No patch available	—	—	Jul 7, 2014
Medium6.1	Reflected Cross-Site Scripting Hunk External Links≤3.0.5No patch available	—	—	Jul 7, 2014
Medium6.1	Reflected Cross-Site Scripting Filtre de surveillance gouvernemental≤1.1No patch available	—	—	Jul 7, 2014
Medium6.1	Reflected Cross-Site Scripting Animal Captcha≤1.6.2No patch available	—	—	Jul 7, 2014
Medium6.1	Reflected Cross-Site Scripting CAPTCHA in Thai≤1.1No patch available	—	—	Jul 7, 2014
Medium6.1	Reflected Cross-Site Scripting Google Map Generator≤1.3.1No patch available	—	—	Jul 7, 2014
Medium6.1	Reflected Cross-Site Scripting Community Lite Video Chat≤1.4.1Update to 1.4.2	—	—	Jul 7, 2014
Medium6.1	Cross-Site Scripting WP Snap App≤1.5No patch available	CVE-2014-4596	—	Jul 7, 2014
Medium6.1	Reflected Cross-Site Scripting ClickSold IDX≤1.48Update to 1.49	—	—	Jul 7, 2014
Medium6.1	Reflected Cross-Site Scripting Fancy Cats≤1.1No patch available	—	—	Jul 7, 2014
Medium6.1	Reflected Cross-Site Scripting Manage Calameo Publications by Athlon≤1.1.0Update to 1.1.1	—	—	Jul 7, 2014
Medium6.1	Reflected Cross-Site Scripting Clipta Video Informer≤1.0No patch available	—	—	Jul 7, 2014
Medium6.1	Reflected Cross-Site Scripting Fixedly Media Gallery≤1.3.1No patch available	—	—	Jul 7, 2014
Medium6.1	Reflected Cross-Site Scripting Contentboxes≤1.1No patch available	—	—	Jul 7, 2014
Medium6.1	Reflected Cross-Site Scripting Daily Inspiration Generator≤2.0No patch available	—	—	Jul 7, 2014
Medium6.1	Reflected Cross-Site Scripting Blogroll Fun – Show Last Post and Last Update Time<0.8.5Update to 0.8.5	CVE-2014-125132	—	Jul 7, 2014
Medium6.1	Reflected Cross-Site Scripting GB Team Stats≤1.5.1No patch available	—	—	Jul 7, 2014
Medium6.1	Open Redirect Daily Inspiration Generator≤2.0No patch available	—	—	Jul 7, 2014

Medium5.3
Information Disclosure
WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps
<2.0.2Update to 2.0.2
CVE-2014-5337Jul 24, 2014
Medium5.4
Cross-Site Scripting
WORDPRESS VIDEO GALLERY
≤2.5Update to 2.6
CVE-2014-9098Jul 24, 2014
Medium6.1
JavaScript Code Injection
3CX Free Live Chat, Calls & Messaging
<4.1.0Update to 4.1.0
CVE-2014-10386Jul 20, 2014
Critical9.8
Arbitrary Command Execution
WordPress Flash Uploader
<3.1.3Update to 3.1.3
CVE-2014-5014Jul 18, 2014
High7.5
Sensitive Information Disclosure
WP BackItUp Community Edition
≤1.9Update to 1.9.1
CVE-2014-9012Jul 16, 2014
Medium6.1
Cross-Site Scripting
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
<1.1.66Update to 1.1.66
CVE-2014-10380Jul 16, 2014
High8.8
Potential Cross-Site Request Forgery Bypass
WP REST API (WP API)
≤1.1Update to 1.1.1
ec5fa360-6fff-46f5-8221-4b28a6db3e73Jul 10, 2014
Medium6.1
Cross-Site Scrpting
Compfight
<1.5Update to 1.5
CVE-2014-8622Jul 10, 2014
Medium6.1
Reflected Cross-Site Scripting
Compfight
≤1.4Update to 1.5
CVE-2014-5202Jul 10, 2014
Medium6.1
Cross-Site Scripting
Keyring
≤1.5Update to 1.5.1
e60de5d9-34f8-4068-b656-11b2b6cb36d4Jul 7, 2014
Medium6.1
Reflected Cross-Site Scripting
Google Maps in Posts
≤1.5.3No patch available
f5a827b1-7f66-4a24-9e31-c3f3e36b4772Jul 7, 2014
Medium6.1
Reflected Cross-Site Scripting
ImmoPress
≤0.0.4No patch available
f7b6b59a-366f-4fa6-9e54-01372d6cea8cJul 7, 2014
Medium6.1
Reflected Cross-Site Scripting
mywebcounter
≤1.1No patch available
5734bd3b-b1cd-4376-b481-a9ad120016f6Jul 7, 2014
Medium6.1
Reflected Cross-Site Scripting
Hunk External Links
≤3.0.5No patch available
8303c84f-8065-4394-a692-29cb72bada0aJul 7, 2014
Medium6.1
Reflected Cross-Site Scripting
Filtre de surveillance gouvernemental
≤1.1No patch available
86616f56-74cb-4ceb-95ce-fbd4a3842eddJul 7, 2014
Medium6.1
Reflected Cross-Site Scripting
Animal Captcha
≤1.6.2No patch available
80a627a5-6b76-4525-a76a-ac96986bd21bJul 7, 2014
Medium6.1
Reflected Cross-Site Scripting
CAPTCHA in Thai
≤1.1No patch available
81f4f8e8-cac3-4865-a686-212f6c7f7b65Jul 7, 2014
Medium6.1
Reflected Cross-Site Scripting
Google Map Generator
≤1.3.1No patch available
71130bae-d871-43b5-81cd-b8459c8db316Jul 7, 2014
Medium6.1
Reflected Cross-Site Scripting
Community Lite Video Chat
≤1.4.1Update to 1.4.2
5c830689-70bd-42cc-a385-fe8552f342a0Jul 7, 2014
Medium6.1
Cross-Site Scripting
WP Snap App
≤1.5No patch available
CVE-2014-4596Jul 7, 2014
Medium6.1
Reflected Cross-Site Scripting
ClickSold IDX
≤1.48Update to 1.49
676cb664-dd9d-4b6e-80d6-c2afb2298541Jul 7, 2014
Medium6.1
Reflected Cross-Site Scripting
Fancy Cats
≤1.1No patch available
5872a69d-3314-4900-8f7b-bcbd8787a9feJul 7, 2014
Medium6.1
Reflected Cross-Site Scripting
Manage Calameo Publications by Athlon
≤1.1.0Update to 1.1.1
cf2f2474-50d6-46da-a97c-731edb514ae5Jul 7, 2014
Medium6.1
Reflected Cross-Site Scripting
Clipta Video Informer
≤1.0No patch available
a2ac27b5-88d5-43d5-a4bb-c2948ffc50f0Jul 7, 2014
Medium6.1
Reflected Cross-Site Scripting
Fixedly Media Gallery
≤1.3.1No patch available
97cdcc23-4f63-4976-bc47-805d5dbbee09Jul 7, 2014
Medium6.1
Reflected Cross-Site Scripting
Contentboxes
≤1.1No patch available
9b1329b6-ae1f-4a46-8435-5023c5c130f5Jul 7, 2014
Medium6.1
Reflected Cross-Site Scripting
Daily Inspiration Generator
≤2.0No patch available
bc56fe18-f0f4-4f7b-96c2-40d376e0fd74Jul 7, 2014
Medium6.1
Reflected Cross-Site Scripting
Blogroll Fun – Show Last Post and Last Update Time
<0.8.5Update to 0.8.5
CVE-2014-125132Jul 7, 2014
Medium6.1
Reflected Cross-Site Scripting
GB Team Stats
≤1.5.1No patch available
1bad3803-77c3-4c9f-906c-ba5b1886c997Jul 7, 2014
Medium6.1
Open Redirect
Daily Inspiration Generator
≤2.0No patch available
03733eb8-63c7-4798-9d87-e80a6112da6eJul 7, 2014