Database

WordPress Vulnerability Database (page 1440)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1440)
Severity	Vulnerability	CVE	Installs	Published
Medium4.3	Contributor Users Can Publish Posts WordPress≤3.8.1Update to 3.7.2 or 3.8.2	CVE-2014-0165	—	Apr 8, 2014
Medium6.5	Authentication Cookie Forgery WordPress≤3.8.1Update to 3.7.2 or 3.8.2	CVE-2014-0166	—	Apr 8, 2014
Medium6.3	Cross-Site Request Forgery Twitget<3.3.3Update to 3.3.3	CVE-2014-2559	—	Apr 8, 2014
High8.8	Cross-Site Request Forgery WP Customer Reviews<3.0.9Update to 3.0.9	CVE-2016-10902	—	Apr 4, 2014
Medium5.4	Cross-Site Request Forgery Backup, Restore and Migrate your sites with XCloner<3.1.1Update to 3.1.1	CVE-2014-2340	—	Apr 2, 2014
Medium6.1	Cross-Site Scripting JS Multi Hotel≤2.2.1No patch available	CVE-2014-100008	—	Mar 31, 2014
High8.8	Cross-Site Request Forgery to Arbitrary File Upload 5 Star Hotel≤1.0Update to 1.1	—	—	Mar 31, 2014
Medium5.3	Full Path Disclosure JS Multi Hotel≤2.2.1No patch available	CVE-2014-100009	—	Mar 31, 2014
High8.8	Cross-Site Request Forgery to Arbitrary File Upload Real Estate by Templaticall versionsNo patch available	—	—	Mar 31, 2014
Critical9.8	Arbitrary File Upload nightlifeall versionsNo patch available	—	—	Mar 31, 2014
High8.8	Cross-Site Request Forgery to Arbitrary File Upload Specialistall versionsNo patch available	—	—	Mar 31, 2014
Medium6.1	Reflected Cross-Site Scripting JS Multi Hotel≤2.2.1No patch available	—	—	Mar 29, 2014
Critical9.8	Local File Inclusion Ajax Pagination (twitter Style)≤1.1No patch available	CVE-2014-2674	—	Mar 28, 2014
Critical9.8	Arbitrary File Upload WP Business Intelligence Lite<1.3Update to 1.3	—	—	Mar 28, 2014
High8.8	Cross-Site Request Forgery GD Star Rating≤1.9.22No patch available	CVE-2014-2838	—	Mar 28, 2014
High7.2	Blind SQL Injection GD Star Rating≤1.9.22No patch available	CVE-2014-2839	—	Mar 28, 2014
Critical9.8	SQL Injection Leaflet Maps Marker Pro<1.5.8Update to 1.5.8	—	—	Mar 27, 2014
Medium6.1	Cross-Site Scripting Leaflet Maps Marker Pro<1.5.8Update to 1.5.8	—	—	Mar 27, 2014
High7.5	Arbitrary File Deletion Leaflet Maps Marker Pro<1.5.8Update to 1.5.8	—	—	Mar 27, 2014
Critical9.8	Arbitrary File Upload Leaflet Maps Marker Pro<1.5.8Update to 1.5.8	—	—	Mar 27, 2014
Medium6.1	Cross-Site Scripting Leaflet Maps Marker Pro<1.5.8Update to 1.5.8	—	—	Mar 26, 2014
Critical9.8	Arbitrary File Upload Leaflet Maps Marker Pro<1.5.8Update to 1.5.8	—	—	Mar 26, 2014
High7.5	Path Traversal Leaflet Maps Marker Pro<1.5.8Update to 1.5.8	—	—	Mar 26, 2014
Critical9.8	Arbitrary File Upload appius<1.1Update to 1.1	—	—	Mar 23, 2014
Critical9.8	Arbitrary File Upload Custom Background≤3.2.2.67929No patch available	—	—	Mar 23, 2014
Critical9.8	Arbitrary File Upload Felici - WordPress Magazine Theme \| Blog / Magazineall versionsNo patch available	—	—	Mar 22, 2014
Critical9.8	Arbitrary File Upload Vithyall versionsNo patch available	—	—	Mar 22, 2014
Medium6.1	Cross-Site Scripting World of Warcraft – Armory Table<0.2.6Update to 0.2.6	—	—	Mar 19, 2014
Medium6.1	Cross-Site Scripting Facebook Page Photo Gallery≤2.0.9No patch available	—	—	Mar 17, 2014
Critical9.8	Arbitrary File Upload Premium Gallery Managerall versionsNo patch available	—	—	Mar 6, 2014

Medium4.3
Contributor Users Can Publish Posts
WordPress
≤3.8.1Update to 3.7.2 or 3.8.2
CVE-2014-0165Apr 8, 2014
Medium6.5
Authentication Cookie Forgery
WordPress
≤3.8.1Update to 3.7.2 or 3.8.2
CVE-2014-0166Apr 8, 2014
Medium6.3
Cross-Site Request Forgery
Twitget
<3.3.3Update to 3.3.3
CVE-2014-2559Apr 8, 2014
High8.8
Cross-Site Request Forgery
WP Customer Reviews
<3.0.9Update to 3.0.9
CVE-2016-10902Apr 4, 2014
Medium5.4
Cross-Site Request Forgery
Backup, Restore and Migrate your sites with XCloner
<3.1.1Update to 3.1.1
CVE-2014-2340Apr 2, 2014
Medium6.1
Cross-Site Scripting
JS Multi Hotel
≤2.2.1No patch available
CVE-2014-100008Mar 31, 2014
High8.8
Cross-Site Request Forgery to Arbitrary File Upload
5 Star Hotel
≤1.0Update to 1.1
b2cea890-b131-47cd-9050-a484fb1895f6Mar 31, 2014
Medium5.3
Full Path Disclosure
JS Multi Hotel
≤2.2.1No patch available
CVE-2014-100009Mar 31, 2014
High8.8
Cross-Site Request Forgery to Arbitrary File Upload
Real Estate by Templatic
all versionsNo patch available
1523db36-fdc6-4a9d-bb2c-d9b28668a3fcMar 31, 2014
Critical9.8
Arbitrary File Upload
nightlife
all versionsNo patch available
2513a199-30a8-45a9-80b3-1f6e51534c88Mar 31, 2014
High8.8
Cross-Site Request Forgery to Arbitrary File Upload
Specialist
all versionsNo patch available
ea2d4716-2ae1-45ca-a4b2-4edb4a89d7b4Mar 31, 2014
Medium6.1
Reflected Cross-Site Scripting
JS Multi Hotel
≤2.2.1No patch available
aac382a7-0548-4c5a-b82b-f173ff449d23Mar 29, 2014
Critical9.8
Local File Inclusion
Ajax Pagination (twitter Style)
≤1.1No patch available
CVE-2014-2674Mar 28, 2014
Critical9.8
Arbitrary File Upload
WP Business Intelligence Lite
<1.3Update to 1.3
ee8ad691-b598-4eeb-b8a7-645c3bd968ffMar 28, 2014
High8.8
Cross-Site Request Forgery
GD Star Rating
≤1.9.22No patch available
CVE-2014-2838Mar 28, 2014
High7.2
Blind SQL Injection
GD Star Rating
≤1.9.22No patch available
CVE-2014-2839Mar 28, 2014
Critical9.8
SQL Injection
Leaflet Maps Marker Pro
<1.5.8Update to 1.5.8
11349bc4-b432-4225-82a4-30bc9d0057f9Mar 27, 2014
Medium6.1
Cross-Site Scripting
Leaflet Maps Marker Pro
<1.5.8Update to 1.5.8
11c7abc5-1a41-4eab-b603-064baf978dddMar 27, 2014
High7.5
Arbitrary File Deletion
Leaflet Maps Marker Pro
<1.5.8Update to 1.5.8
68b4ef1f-93cc-4fbd-9713-9cbc6ad59f5eMar 27, 2014
Critical9.8
Arbitrary File Upload
Leaflet Maps Marker Pro
<1.5.8Update to 1.5.8
da95e282-54b9-4296-99f3-9187c04dcaacMar 27, 2014
Medium6.1
Cross-Site Scripting
Leaflet Maps Marker Pro
<1.5.8Update to 1.5.8
389a4e32-81c4-4060-b210-b6ca6beeaf48Mar 26, 2014
Critical9.8
Arbitrary File Upload
Leaflet Maps Marker Pro
<1.5.8Update to 1.5.8
66969472-4b3c-4d56-b761-523ea854e3dbMar 26, 2014
High7.5
Path Traversal
Leaflet Maps Marker Pro
<1.5.8Update to 1.5.8
875b15a1-c747-4a74-a77e-d541f92468a3Mar 26, 2014
Critical9.8
Arbitrary File Upload
appius
<1.1Update to 1.1
efbea599-3d04-42d2-9b91-6b68210d8b01Mar 23, 2014
Critical9.8
Arbitrary File Upload
Custom Background
≤3.2.2.67929No patch available
b65cdbe0-e258-4bb5-9a36-cbf57b75ce77Mar 23, 2014
Critical9.8
Arbitrary File Upload
Felici - WordPress Magazine Theme | Blog / Magazine
all versionsNo patch available
7a44873c-5f14-4ff5-85ed-a6575aaa9347Mar 22, 2014
Critical9.8
Arbitrary File Upload
Vithy
all versionsNo patch available
20077e55-fe75-49c7-ba3f-ccd683a3f722Mar 22, 2014
Medium6.1
Cross-Site Scripting
World of Warcraft – Armory Table
<0.2.6Update to 0.2.6
983c603b-b9bb-4942-b554-345535886aeaMar 19, 2014
Medium6.1
Cross-Site Scripting
Facebook Page Photo Gallery
≤2.0.9No patch available
4f23bec2-6079-41f6-99c1-80b0b47797ceMar 17, 2014
Critical9.8
Arbitrary File Upload
Premium Gallery Manager
all versionsNo patch available
c274a9b2-c95e-4898-afa4-d6e2f6006f91Mar 6, 2014