VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1441)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1441)
SeverityVulnerabilityCVEInstallsPublished
Critical9.8Arbitrary File Upload
Premium Gallery Managerall versionsNo patch available
——
Critical9.8Arbitrary File Upload
barclaycartall versionsNo patch available
——
Critical9.8SQL Injection
Welcart e-Commerce≤2.9.1Update to 2.9.2
CVE-2014-10017—
Medium6.1Cross-Site Scripting
Live Chat from ClickDesk – Live Chat – Help Desk Plugin for Websites≤4.3No patch available
——
Critical9.8Arbitrary File Upload
thecotton≤1.14No patch available
——
Medium6.1Cross-Site Scripting
Welcart e-Commerce≤2.11.1Update to 2.11.2
CVE-2014-10016—
High8.8Cross-Site Request Forgery
Google Analytics MU≤2.3.1Update to 2.4
——
Critical9.8Arbitrary File Upload
Sixteesall versionsNo patch available
——
Critical9.8Arbitrary File Upload
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP≤4.27.4Update to 4.29.5
CVE-2014-1905—
High7.5Fulle Path Disclosure
Activity Log – Monitor User and Agent Changes<2.0.4Update to 2.0.4
——
Critical9.8Arbitrary File Read/Deletion
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP<4.29.5Update to 4.29.5
CVE-2014-1907—
Medium5.3Full Path Disclosure
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP<4.29.5Update to 4.29.5
CVE-2014-1908—
Medium6.1Cross-Site Scripting
mTouch Quiz<3.0.7Update to 3.0.7
CVE-2014-100023—
Medium6.1Reflected Cross-Site Scripting
Widget Control Powered By Everyblock≤1.0.1No patch available
——
Medium6.1Reflected Cross-Site Scripting
Zedity – The Layout-Free Content Editor<2.5.1Update to 2.5.1
——
Medium5.3CAPTCHA Bypass
Contact Form 7<3.7.2Update to 3.7.2
CVE-2014-2265—
Critical9.8SQL Injection
mTouch Quiz<3.0.7Update to 3.0.7
CVE-2014-100022—
Medium6.1Cross-Site Scripting
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP≤4.29.6Update to 4.29.9
CVE-2014-2297—
Medium6.1Cross-Site Scripting
Thank You Counter Button≤1.9.3No patch available
CVE-2014-2315—
Critical9.8SQL Injection
Relevanssi – A Better Search≤3.3Update to 3.3.1
——
High7.1Cross-Site Scripting
MP3-jPlayer<1.8.8Update to 1.8.8
——
High8.8Cross-Site Request Forgery
User Domain Whitelist<1.5Update to 1.5
CVE-2014-10381—
Critical9.83.9.4 - SQL Injection
AdRotate Banner Manager3.9 – 3.9.4Update to 3.9.5
CVE-2014-1854—
Medium6.1Cross-Site Scripting
Connections Business Directory<0.7.9.4Update to 0.7.9.4
——
High7.5Path Traversal
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery≤2.0Update to 2.0.7
——
High8.8Cross-Site Request Forgery to Cross-Site Scripting
Subscribe To Comments Reloaded≤140129Update to 140219
CVE-2014-2274—
High7.1Cross-Site Scripting
Nextend Social Login and Register<1.5.1Update to 1.5.1
CVE-2014-8800—
Critical9.1SQL Injection
Search Everything<7.0.3Update to 7.0.3
CVE-2014-2316—
High8.8Cross-Site Request Forgery
Acunetix WP Security<4.0.5Update to 4.0.5
——
Medium6.1Reflected Cross-Site Scripting
All In One Slider≤1.2.20Update to 1.2.21
——
  • Critical9.8
    Arbitrary File Upload

    Premium Gallery Manager

    all versionsNo patch available

    c274a9b2-c95e-4898-afa4-d6e2f6006f91

  • Critical9.8
    Arbitrary File Upload

    barclaycart

    all versionsNo patch available

    d84ad258-8a0c-44b2-9897-03ad214e8493

  • Critical9.8
    SQL Injection

    Welcart e-Commerce

    ≤2.9.1Update to 2.9.2

    CVE-2014-10017

  • Medium6.1
    Cross-Site Scripting

    Live Chat from ClickDesk – Live Chat – Help Desk Plugin for Websites

    ≤4.3No patch available

    860ce27b-749d-497f-9038-7e035cb3fe1d

  • Critical9.8
    Arbitrary File Upload

    thecotton

    ≤1.14No patch available

    bb979c91-6795-4365-a61b-2cf67a9c8223

  • Medium6.1
    Cross-Site Scripting

    Welcart e-Commerce

    ≤2.11.1Update to 2.11.2

    CVE-2014-10016

  • High8.8
    Cross-Site Request Forgery

    Google Analytics MU

    ≤2.3.1Update to 2.4

    66f71de2-055d-42f0-9eb1-145c64f44d5b

  • Critical9.8
    Arbitrary File Upload

    Sixtees

    all versionsNo patch available

    3a325371-e531-4cd9-bc39-d1b8f40a728f

  • Critical9.8
    Arbitrary File Upload

    Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP

    ≤4.27.4Update to 4.29.5

    CVE-2014-1905

  • High7.5
    Fulle Path Disclosure

    Activity Log – Monitor User and Agent Changes

    <2.0.4Update to 2.0.4

    97677968-9231-4a6b-ad81-ddb9eb9791dd

  • Critical9.8
    Arbitrary File Read/Deletion

    Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP

    <4.29.5Update to 4.29.5

    CVE-2014-1907

  • Medium5.3
    Full Path Disclosure

    Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP

    <4.29.5Update to 4.29.5

    CVE-2014-1908

  • Medium6.1
    Cross-Site Scripting

    mTouch Quiz

    <3.0.7Update to 3.0.7

    CVE-2014-100023

  • Medium6.1
    Reflected Cross-Site Scripting

    Widget Control Powered By Everyblock

    ≤1.0.1No patch available

    b802b6bf-e70f-47ab-a72d-35f6341920eb

  • Medium6.1
    Reflected Cross-Site Scripting

    Zedity – The Layout-Free Content Editor

    <2.5.1Update to 2.5.1

    aa3ff74a-a38e-4cb3-b0b8-99fb16185f42

  • Medium5.3
    CAPTCHA Bypass

    Contact Form 7

    <3.7.2Update to 3.7.2

    CVE-2014-2265

  • Critical9.8
    SQL Injection

    mTouch Quiz

    <3.0.7Update to 3.0.7

    CVE-2014-100022

  • Medium6.1
    Cross-Site Scripting

    Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP

    ≤4.29.6Update to 4.29.9

    CVE-2014-2297

  • Medium6.1
    Cross-Site Scripting

    Thank You Counter Button

    ≤1.9.3No patch available

    CVE-2014-2315

  • Critical9.8
    SQL Injection

    Relevanssi – A Better Search

    ≤3.3Update to 3.3.1

    4b8d057b-1909-46d4-8e0a-d5c7c9f7001c

  • High7.1
    Cross-Site Scripting

    MP3-jPlayer

    <1.8.8Update to 1.8.8

    52383075-2d39-4fd9-8319-15a5354ff25f

  • High8.8
    Cross-Site Request Forgery

    User Domain Whitelist

    <1.5Update to 1.5

    CVE-2014-10381

  • Critical9.8
    3.9.4 - SQL Injection

    AdRotate Banner Manager

    3.9 – 3.9.4Update to 3.9.5

    CVE-2014-1854

  • Medium6.1
    Cross-Site Scripting

    Connections Business Directory

    <0.7.9.4Update to 0.7.9.4

    ce96dab2-70ab-4925-8323-daf65d61c81a

  • High7.5
    Path Traversal

    Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

    ≤2.0Update to 2.0.7

    cb855743-1d08-4e21-a23c-a4ffba615f57

  • High8.8
    Cross-Site Request Forgery to Cross-Site Scripting

    Subscribe To Comments Reloaded

    ≤140129Update to 140219

    CVE-2014-2274

  • High7.1
    Cross-Site Scripting

    Nextend Social Login and Register

    <1.5.1Update to 1.5.1

    CVE-2014-8800

  • Critical9.1
    SQL Injection

    Search Everything

    <7.0.3Update to 7.0.3

    CVE-2014-2316

  • High8.8
    Cross-Site Request Forgery

    Acunetix WP Security

    <4.0.5Update to 4.0.5

    3368e4b4-9876-447b-acb4-3648e83ed997

  • Medium6.1
    Reflected Cross-Site Scripting

    All In One Slider

    ≤1.2.20Update to 1.2.21

    bdb7e239-75c4-480e-a283-dc2354fe3375

Search VulnCrest Radar

Jump to

Are you sure?