VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1435)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1435)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Reflected Cross-Site Scripting
VideoWhisper Video Presentation≤3.25Update to 3.31
CVE-2014-4570—
Medium6.1Reflected Cross-Site Scripting
WP Consultant≤1.0No patch available
CVE-2014-4582—
Medium6.1Reflected Cross-Site Scripting
Webcam Microphone Screen Recorder – Media Capture≤1.55.4Update to 1.55.5
CVE-2014-4568—
Medium6.1Reflected Cross-Site Scripting
WP-Picasa-Image≤1.0No patch available
CVE-2014-4591—
Medium6.1Cross-Site Scripting
Appointments Scheduler≤1.5No patch available
CVE-2014-4579—
Medium6.1Cross-Site Scripting
WikiPop≤2.0No patch available
CVE-2014-4575—
High7.5Directly Traversal/Arbitrary File Read
AdminOnlineall versionsNo patch available
——
Medium6.1Cross-Site Scripting
Member Approval≤131109No patch available
CVE-2014-3850—
Medium4.3Cross-Site Request Forgery leading to player deletion
JW Player for Flash & HTML5 Video<2.1.4Update to 2.1.4
CVE-2014-4030—
High7.5Arbitrary File Download
SCv1 Themeall versionsNo patch available
——
High8.8Cross-Site Request Forgery
Featured Comments<1.2.5Update to 1.2.5
CVE-2014-4163—
Medium6.1Reflected Cross-Site Scripting
Disqus Comment System<2.76Update to 2.76
CVE-2014-5345—
High7.2Open Redirection
Grimag≤1.1.0Update to 1.1.1
——
Critical9.8SQL Injection
Participants Database<1.5.4.9Update to 1.5.4.9
CVE-2014-3961—
Medium6.1Cross-Site Scripting
Popup Imagesall versionsNo patch available
——
Medium6.4Cross-Site Scripting
All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)≤2.1.5Update to 2.1.6
——
Medium6.3Missing Authorization
All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)≤2.1.5Update to 2.1.6
——
Medium4.3Privilege Escalation to Arbitrary Post Modification
All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)≤2.2.4.1Update to 2.2.5
——
High7.2Cross-Site Scripting
simple-popup-images≤1.0Update to 1.1
CVE-2014-3921—
High7.5Path Traversal
Cross-RSS≤1.7No patch available
CVE-2014-4941—
Medium5.3Sensitive Information Disclosure
WP EasyCart: Shopping Cart and eCommerce Store≤2.0.5Update to 2.0.6
CVE-2014-4942—
Medium6.1Cross-Site Scripting
Jigoshop Swipe plugin≤3.1.0No patch available
CVE-2014-4557—
Medium6.1Cross-Site Scripting
OMFG Mobile Pro≤1.1.26No patch available
CVE-2014-4541—
Medium6.1Reflected Cross-Site Scripting
ActiveHelper LiveHelp Live Chat<3.1.5Update to 3.1.5
CVE-2014-4513—
Medium6.1Cross-Site Scripting
Podcast Channels<0.21Update to 0.21
CVE-2014-4544—
Medium6.1Unauthenticated Cross-Site Scripting
Easy Career Openings≤0.4No patch available
CVE-2014-4523—
Medium6.1Cross-Site Scripting
zeList≤0.5.11.07No patch available
——
Medium6.1Cross-Site Scripting
Validated≤1.0.2Update to 2.0.0
CVE-2014-4564—
Medium6.1Cross-Site Scripting
Rezgo Online Booking<1.4.3Update to 1.4.3
CVE-2014-4546—
Medium6.1Reflected Cross-Site Scripting
Conversador≤2.61No patch available
CVE-2014-4519—

Search VulnCrest Radar

Jump to

Are you sure?