Database

WordPress Vulnerability Database (page 1437)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1437)
Severity	Vulnerability	CVE	Installs	Published
Medium6.1	Cross-Site Scripting WordPress Social Login≤2.1.5Update to 2.1.6	CVE-2014-4576	—	May 25, 2014
Medium6.1	Reflected Cross-Site Scripting EMC2 Custom Help Videos≤1.2No patch available	—	—	May 25, 2014
Medium6.1	Reflected Cross-Site Scripting Gmedia Photo Gallery≤0.9.3Update to 0.9.4	—	—	May 25, 2014
Critical9.8	Remote File Inclusion Podcasting Plugin by TSG≤3.0.4.1Update to 3.0.5	—	—	May 25, 2014
Medium6.1	Cross-Site Scripting proquoter≤1.0No patch available	CVE-2014-4545	—	May 25, 2014
Medium6.1	Cross-Site Scripting Social Connect≤0.10.1Update to 0.10.2	CVE-2014-4551	—	May 25, 2014
Medium6.1	Cross-Site Scripting Import Legacy Media≤0.1No patch available	CVE-2014-4535	—	May 25, 2014
Medium6.1	Cross-Site Scripting WP-Contact≤1.0No patch available	CVE-2014-4583	—	May 25, 2014
Medium6.1	Reflected Cross-Site Scripting dsSearchAgent: WordPress Edition<1.0-beta10No patch available	CVE-2014-4522	—	May 25, 2014
Medium6.1	Reflected Cross-Site Scripting ooorl≤1.0.0No patch available	CVE-2014-4542	—	May 25, 2014
Medium6.1	Cross-Site Scripting Style It≤1.0No patch available	CVE-2014-4555	—	May 25, 2014
Medium6.1	CBI Referral Manager <= 1.2.1 Cross-Site Scripting CBI Referral Manager≤1.2.1No patch available	CVE-2014-4517	—	May 25, 2014
Medium6.1	Cross-Site Scripting Bookshelf≤2.0.4No patch available	—	—	May 25, 2014
Medium6.1	Cross-Site Scripting swipe-hq-checkout-for-eshop≤3.7.0No patch available	CVE-2014-4556	—	May 25, 2014
Medium6.1	Cross-Site Scripting So Audible Cloud Music Player≤0.9No patch available	—	—	May 25, 2014
Medium6.1	Stored Cross-Site Scripting WP Ultimate Email Marketer≤1.1.0No patch available	CVE-2014-4600	—	May 25, 2014
Medium6.1	Cross-Site Scripting verwei.se – WordPress – Twitter≤1.0.2No patch available	CVE-2014-4566	—	May 25, 2014
High7.1	Cross-Site Scripting Toolpage≤1.6.1No patch available	CVE-2014-4560	—	May 25, 2014
Medium6.1	Reflected Cross-Site Scripting HTML5 Video Player with Playlist≤2.4.0No patch available	CVE-2014-4534	—	May 25, 2014
Medium6.1	Cross-Site Scripting GarageSale<1.2.3Update to 1.2.3	CVE-2014-4532	—	May 25, 2014
Medium6.4	Cross-Site Scripting shortcode-ninja≤1.4No patch available	CVE-2014-4550	—	May 25, 2014
Medium6.1	Reflected Cross-Site Scripting Soundslides≤2.1.0Update to 2.5.0	—	—	May 25, 2014
Medium6.1	Open Redirect GdeSlon Affiliate Shop≤1.5.5Update to 2.0	—	—	May 25, 2014
High7.1	Cross-Site Scripting GEO Redirector≤1.0.1No patch available	CVE-2014-4533	—	May 25, 2014
Medium6.1	Cross-Site Scripting WP-Business Directory≤1.0.2No patch available	CVE-2014-4599	—	May 25, 2014
Medium6.1	Reflected Cross-Site Scripting Movies≤0.6No patch available	CVE-2014-4539	—	May 25, 2014
Medium6.1	Reflected Cross-Site Scripting Secure HTML5 Video Player≤3.3Update to 3.4	—	—	May 25, 2014
Medium6.1	Cross-Site Scripting S3bubble Amazon S3 Media Streaming≤3.5.4No patch available	—	—	May 25, 2014
Medium6.1	Reflected Cross-Site Scripting Audio≤0.6.1No patch available	—	—	May 25, 2014
Medium6.1	Cross-Site Scripting 1g-music-share≤1.5.1No patch available	—	—	May 25, 2014

Medium6.1
Cross-Site Scripting
WordPress Social Login
≤2.1.5Update to 2.1.6
CVE-2014-4576May 25, 2014
Medium6.1
Reflected Cross-Site Scripting
EMC2 Custom Help Videos
≤1.2No patch available
fa9bf653-5932-4a7b-a004-4d4b21c034a1May 25, 2014
Medium6.1
Reflected Cross-Site Scripting
Gmedia Photo Gallery
≤0.9.3Update to 0.9.4
f787e299-21f8-4662-935a-ff1e25c7d275May 25, 2014
Critical9.8
Remote File Inclusion
Podcasting Plugin by TSG
≤3.0.4.1Update to 3.0.5
13b4efa1-3f52-476c-80fe-b36ccb62a24bMay 25, 2014
Medium6.1
Cross-Site Scripting
proquoter
≤1.0No patch available
CVE-2014-4545May 25, 2014
Medium6.1
Cross-Site Scripting
Social Connect
≤0.10.1Update to 0.10.2
CVE-2014-4551May 25, 2014
Medium6.1
Cross-Site Scripting
Import Legacy Media
≤0.1No patch available
CVE-2014-4535May 25, 2014
Medium6.1
Cross-Site Scripting
WP-Contact
≤1.0No patch available
CVE-2014-4583May 25, 2014
Medium6.1
Reflected Cross-Site Scripting
dsSearchAgent: WordPress Edition
<1.0-beta10No patch available
CVE-2014-4522May 25, 2014
Medium6.1
Reflected Cross-Site Scripting
ooorl
≤1.0.0No patch available
CVE-2014-4542May 25, 2014
Medium6.1
Cross-Site Scripting
Style It
≤1.0No patch available
CVE-2014-4555May 25, 2014
Medium6.1
CBI Referral Manager <= 1.2.1 Cross-Site Scripting
CBI Referral Manager
≤1.2.1No patch available
CVE-2014-4517May 25, 2014
Medium6.1
Cross-Site Scripting
Bookshelf
≤2.0.4No patch available
d6a1a2c2-e754-43e5-84b5-579a805c8d71May 25, 2014
Medium6.1
Cross-Site Scripting
swipe-hq-checkout-for-eshop
≤3.7.0No patch available
CVE-2014-4556May 25, 2014
Medium6.1
Cross-Site Scripting
So Audible Cloud Music Player
≤0.9No patch available
e252f833-3b0c-44df-969d-aff9314133b7May 25, 2014
Medium6.1
Stored Cross-Site Scripting
WP Ultimate Email Marketer
≤1.1.0No patch available
CVE-2014-4600May 25, 2014
Medium6.1
Cross-Site Scripting
verwei.se – WordPress – Twitter
≤1.0.2No patch available
CVE-2014-4566May 25, 2014
High7.1
Cross-Site Scripting
Toolpage
≤1.6.1No patch available
CVE-2014-4560May 25, 2014
Medium6.1
Reflected Cross-Site Scripting
HTML5 Video Player with Playlist
≤2.4.0No patch available
CVE-2014-4534May 25, 2014
Medium6.1
Cross-Site Scripting
GarageSale
<1.2.3Update to 1.2.3
CVE-2014-4532May 25, 2014
Medium6.4
Cross-Site Scripting
shortcode-ninja
≤1.4No patch available
CVE-2014-4550May 25, 2014
Medium6.1
Reflected Cross-Site Scripting
Soundslides
≤2.1.0Update to 2.5.0
c5bf1c8c-97b0-412c-aa26-88fd7bbe7c8cMay 25, 2014
Medium6.1
Open Redirect
GdeSlon Affiliate Shop
≤1.5.5Update to 2.0
b6e26846-9fcf-4078-9b45-660463ec5b04May 25, 2014
High7.1
Cross-Site Scripting
GEO Redirector
≤1.0.1No patch available
CVE-2014-4533May 25, 2014
Medium6.1
Cross-Site Scripting
WP-Business Directory
≤1.0.2No patch available
CVE-2014-4599May 25, 2014
Medium6.1
Reflected Cross-Site Scripting
Movies
≤0.6No patch available
CVE-2014-4539May 25, 2014
Medium6.1
Reflected Cross-Site Scripting
Secure HTML5 Video Player
≤3.3Update to 3.4
4d2b8bc2-68c2-40aa-b8b0-a0584549f303May 25, 2014
Medium6.1
Cross-Site Scripting
S3bubble Amazon S3 Media Streaming
≤3.5.4No patch available
340a46e5-b15d-4f0c-8b7e-51f7de7741b5May 25, 2014
Medium6.1
Reflected Cross-Site Scripting
Audio
≤0.6.1No patch available
65329e2c-0ce2-4033-93a8-ba52ae3774c1May 25, 2014
Medium6.1
Cross-Site Scripting
1g-music-share
≤1.5.1No patch available
3c64120f-254f-4deb-93bc-d24e366631edMay 25, 2014