VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1438)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1438)
SeverityVulnerabilityCVEInstallsPublished
High7.1Cross-Site Scripting
WooCommerce SagePay Direct Payment Gateway<0.1.6.7Update to 0.1.6.7
CVE-2014-4549—
High7.1Cross-Site Scripting
Toolpage≤1.6.1No patch available
CVE-2014-4560—
Medium6.1Reflected Cross-Site Scripting
Soundslides≤2.1.0Update to 2.5.0
——
Medium6.4Cross-Site Scripting
shortcode-ninja≤1.4No patch available
CVE-2014-4550—
Medium6.1Cross-Site Scripting
Pay Per Media Player≤1.24No patch available
CVE-2014-4543—
Medium6.1Reflected Cross-Site Scripting
Kindeditor For WordPress≤1.3.7Update to 1.4
——
Medium6.1Cross-Site Scripting
Diverse Solutions IDX Real Estate Listings & MLS Search<2.1.1Update to 2.1.1
CVE-2014-4521—
Medium6.1Cross-Site Scripting
Spotlight≤4.7No patch available
CVE-2014-4552—
Medium6.1Open Redirect
GdeSlon Affiliate Shop≤1.5.5Update to 2.0
——
Medium6.1Cross-Site Scripting
zeenshare≤1.0.1No patch available
CVE-2014-4606—
Medium6.1Cross-Site Scripting
HTML5 jQuery Audio Player≤2.6.2No patch available
——
Medium6.1Cross-Site Scripting
swipe-hq-checkout-for-eshop≤3.7.0No patch available
CVE-2014-4556—
Medium6.1Cross-Site Scripting
Import Legacy Media≤0.1No patch available
CVE-2014-4535—
Medium6.1Reflected Cross-Site Scripting
EMC2 Custom Help Videos≤1.2No patch available
——
Medium6.1Cross-Site Scripting
Style It≤1.0No patch available
CVE-2014-4555—
Medium6.1Cross-Site Scripting
GarageSale<1.2.3Update to 1.2.3
CVE-2014-4532—
Medium6.1Reflected Cross-Site Scripting
Gmedia Photo Gallery≤0.9.3Update to 0.9.4
——
Medium6.1Cross-Site Scripting
Bookshelf≤2.0.4No patch available
——
Medium6.1Reflected Cross-Site Scripting
HTML5 Video Player with Playlist≤2.4.0No patch available
CVE-2014-4534—
Medium6.1Stored Cross-Site Scripting
WP Ultimate Email Marketer≤1.1.0No patch available
CVE-2014-4600—
Medium6.1Cross-Site Scripting
Social Connect≤0.10.1Update to 0.10.2
CVE-2014-4551—
Medium6.1Cross-Site Scripting
So Audible Cloud Music Player≤0.9No patch available
——
Medium6.1Cross-Site Scripting
Conversion Ninjaall versionsNo patch available
CVE-2014-4017—
High8.8SQL Injection
Pinpoint Booking System – Legacy version<1.3Update to 1.3
CVE-2014-3210—
High8.8Arbitrary File Upload
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery≤2.0.65Update to 2.0.66
——
High8.8Cross-Site Request Forgery
Login rebuilder<1.2.0Update to 1.2.0
CVE-2014-3882—
Medium6.13.9.001 - Cross-Site Scripting
iMember360is3.8.012 – <3.9.002Update to 3.9.002
CVE-2014-3842—
Medium6.1Cross-Site Scripting
Bonuspressxall versionsNo patch available
——
High8.8Cross-Site Request Forgery
Photo Gallery by 10Web – Mobile-Friendly Image Gallery<1.2.42Update to 1.2.42
CVE-2015-9380—
High7.5Information Disclosure
WP-Property – WordPress Powered Real Estate and Property Management<1.38.4Update to 1.38.4
——
  • High7.1
    Cross-Site Scripting

    WooCommerce SagePay Direct Payment Gateway

    <0.1.6.7Update to 0.1.6.7

    CVE-2014-4549

  • High7.1
    Cross-Site Scripting

    Toolpage

    ≤1.6.1No patch available

    CVE-2014-4560

  • Medium6.1
    Reflected Cross-Site Scripting

    Soundslides

    ≤2.1.0Update to 2.5.0

    c5bf1c8c-97b0-412c-aa26-88fd7bbe7c8c

  • Medium6.4
    Cross-Site Scripting

    shortcode-ninja

    ≤1.4No patch available

    CVE-2014-4550

  • Medium6.1
    Cross-Site Scripting

    Pay Per Media Player

    ≤1.24No patch available

    CVE-2014-4543

  • Medium6.1
    Reflected Cross-Site Scripting

    Kindeditor For WordPress

    ≤1.3.7Update to 1.4

    a5205717-af90-4d55-b812-38ded2b0f700

  • Medium6.1
    Cross-Site Scripting

    Diverse Solutions IDX Real Estate Listings & MLS Search

    <2.1.1Update to 2.1.1

    CVE-2014-4521

  • Medium6.1
    Cross-Site Scripting

    Spotlight

    ≤4.7No patch available

    CVE-2014-4552

  • Medium6.1
    Open Redirect

    GdeSlon Affiliate Shop

    ≤1.5.5Update to 2.0

    b6e26846-9fcf-4078-9b45-660463ec5b04

  • Medium6.1
    Cross-Site Scripting

    zeenshare

    ≤1.0.1No patch available

    CVE-2014-4606

  • Medium6.1
    Cross-Site Scripting

    HTML5 jQuery Audio Player

    ≤2.6.2No patch available

    a0365d52-8817-4b69-9df3-ac4c5bb6f4f3

  • Medium6.1
    Cross-Site Scripting

    swipe-hq-checkout-for-eshop

    ≤3.7.0No patch available

    CVE-2014-4556

  • Medium6.1
    Cross-Site Scripting

    Import Legacy Media

    ≤0.1No patch available

    CVE-2014-4535

  • Medium6.1
    Reflected Cross-Site Scripting

    EMC2 Custom Help Videos

    ≤1.2No patch available

    fa9bf653-5932-4a7b-a004-4d4b21c034a1

  • Medium6.1
    Cross-Site Scripting

    Style It

    ≤1.0No patch available

    CVE-2014-4555

  • Medium6.1
    Cross-Site Scripting

    GarageSale

    <1.2.3Update to 1.2.3

    CVE-2014-4532

  • Medium6.1
    Reflected Cross-Site Scripting

    Gmedia Photo Gallery

    ≤0.9.3Update to 0.9.4

    f787e299-21f8-4662-935a-ff1e25c7d275

  • Medium6.1
    Cross-Site Scripting

    Bookshelf

    ≤2.0.4No patch available

    d6a1a2c2-e754-43e5-84b5-579a805c8d71

  • Medium6.1
    Reflected Cross-Site Scripting

    HTML5 Video Player with Playlist

    ≤2.4.0No patch available

    CVE-2014-4534

  • Medium6.1
    Stored Cross-Site Scripting

    WP Ultimate Email Marketer

    ≤1.1.0No patch available

    CVE-2014-4600

  • Medium6.1
    Cross-Site Scripting

    Social Connect

    ≤0.10.1Update to 0.10.2

    CVE-2014-4551

  • Medium6.1
    Cross-Site Scripting

    So Audible Cloud Music Player

    ≤0.9No patch available

    e252f833-3b0c-44df-969d-aff9314133b7

  • Medium6.1
    Cross-Site Scripting

    Conversion Ninja

    all versionsNo patch available

    CVE-2014-4017

  • High8.8
    SQL Injection

    Pinpoint Booking System – Legacy version

    <1.3Update to 1.3

    CVE-2014-3210

  • High8.8
    Arbitrary File Upload

    Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

    ≤2.0.65Update to 2.0.66

    47fb0513-bebe-4e09-9402-d7e174ee92ce

  • High8.8
    Cross-Site Request Forgery

    Login rebuilder

    <1.2.0Update to 1.2.0

    CVE-2014-3882

  • Medium6.1
    3.9.001 - Cross-Site Scripting

    iMember360is

    3.8.012 – <3.9.002Update to 3.9.002

    CVE-2014-3842

  • Medium6.1
    Cross-Site Scripting

    Bonuspressx

    all versionsNo patch available

    7e0b9dd4-d882-4f56-9f6b-2f2955690a05

  • High8.8
    Cross-Site Request Forgery

    Photo Gallery by 10Web – Mobile-Friendly Image Gallery

    <1.2.42Update to 1.2.42

    CVE-2015-9380

  • High7.5
    Information Disclosure

    WP-Property – WordPress Powered Real Estate and Property Management

    <1.38.4Update to 1.38.4

    83460136-5a51-4c11-a695-ea2b2d60d68f

Search VulnCrest Radar

Jump to

Are you sure?