VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1434)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1434)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Reflected Cross-Site Scripting
Blogroll Fun – Show Last Post and Last Update Time<0.8.5Update to 0.8.5
CVE-2014-125132—
Medium6.1Reflected Cross-Site Scripting
Google Maps in Posts≤1.5.3No patch available
——
Medium6.1Reflected Cross-Site Scripting
ImmoPress≤0.0.4No patch available
——
Medium6.1Open Redirect
Daily Inspiration Generator≤2.0No patch available
——
Critical9.8Remote Code Execution
User Avatar≤1.4.12No patch available
——
High7.1Cross-Site Scripting
yahoo-updates-for-wordpress≤1.0No patch available
CVE-2014-4603—
Medium6.1Multiple Cross-Site Scripting
wp-guestmap≤1.8No patch available
CVE-2014-4587—
Medium6.1Cross-Site Scripting
vn-calendar≤1.0No patch available
CVE-2014-4571—
High7.2Cross-Site Scripting
anyfont≤2.2.3No patch available
CVE-2014-4515—
Medium6.1Cross-Site Scripting
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP<4.27.4Update to 4.27.4
CVE-2014-4569—
High8.8Local File Inclusion
Theme My Login<6.3.10Update to 6.3.10
CVE-2014-5155—
High7.1Cross-Site Scripting
Random Banner<2.0Update to 2.0
CVE-2014-4847—
High8.8Cross-Site Request Forgery to Cross-Site Scripting
Blogstand Banner≤1.0No patch available
CVE-2014-4848—
High7.1Cross-Site Scripting
Custom Banners<2.1Update to 2.1
CVE-2014-4724—
High7.1Cross-Site Scripting
Easy Banners≤1.4No patch available
CVE-2014-4723—
High8.8Cross-Site Request Forgery
Simple Share Buttons Adder≤4.4Update to 4.5
CVE-2014-4717—
High8.1Cross-Site Request Forgery
Simple Share Buttons Adder<4.5Update to 4.5
——
Critical9.8Remote Code Execution
Ajax Search Lite – Live Search & Filter<3.11Update to 3.11
CVE-2014-4663—
Critical9.8 Remote Code Execution
Disqus Comment System<2.76Update to 2.76
——
Medium6.1Cross-Site Scripting
Wu-Rating≤1.0 12319No patch available
CVE-2014-4601—
Medium6.1Cross-Site Scripting
WP BlipBot≤3.0.9No patch available
CVE-2014-4580—
High7.1Cross-Site Scripting
WP Microblogs≤0.4.0No patch available
CVE-2014-4590—
Medium6.1Multiple Cross-Site Scripting
wp-restful≤0.1No patch available
CVE-2014-4595—
Medium6.1Cross-Site Scripting
WP-FaceThumb≤1.0No patch available
CVE-2014-4585—
High7.1Cross-Site Scripting
Walk Score Plugin≤0.5.5No patch available
CVE-2014-4573—
Medium6.1Cross-Site Scripting
wp-football≤1.1No patch available
CVE-2014-4586—
Medium6.1Reflected Cross-Site Scripting
WordPress Responsive Preview<1.2Update to 1.2
CVE-2014-4594—
Medium6.1Cross-Site Scripting
Webcam/Screen/Mic Recorder for Video Comments and Forms≤1.55Update to 1.55.3
CVE-2014-4567—
Medium6.1Reflected Cross-Site Scripting
VideoWhisper Video Presentation≤3.25Update to 3.31
CVE-2014-4570—
High7.1Cross-Site Scripting
wp-tmkm-amazon<1.5.3Update to 1.5.3
CVE-2014-4598—

Search VulnCrest Radar

Jump to

Are you sure?