Database

WordPress Vulnerability Database (page 1443)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1443)
Severity	Vulnerability	CVE	Installs	Published
High7.5	Arbitrary File Download Persuasion≤2.4Update to 2.5	—	—	Dec 17, 2013
High7.5	Arbitrary File Download Awake≤3.3Update to 3.4	—	—	Dec 17, 2013
Medium6.1	Cross-Site Scripting S3 Video Plugin≤0.982Update to 0.983	CVE-2013-7279	—	Dec 17, 2013
High7.5	Arbitrary File Deletion Modular≤2.4Update to 2.5	—	—	Dec 17, 2013
High7.5	Arbitrary File Download Myriad≤2.0Update to 2.1	—	—	Dec 17, 2013
Medium5.5	Cross-Site Scripting Gallery – Photo Albums Plugin<1.2.29Update to 1.2.29	—	—	Dec 17, 2013
High7.5	Arbitrary File Deletion Myriad≤2.0Update to 2.1	—	—	Dec 17, 2013
Critical9.1	Arbitrary File Deletion Method≤2.1Update to 2.2	—	—	Dec 17, 2013
Critical9.1	Arbitrary File Download DejaVu≤2.4Update to 2.5	—	—	Dec 17, 2013
High7.5	Arbitrary File Deletion InFocus≤3.3Update to 3.4	—	—	Dec 17, 2013
High7.5	Arbitrary File Download InFocus≤3.3Update to 3.4	—	—	Dec 17, 2013
High7.5	Arbitrary File Download Echelon≤2.4Update to 2.5	—	—	Dec 17, 2013
High7.5	Arbitrary File Deletion Awake≤3.3Update to 3.4	—	—	Dec 17, 2013
High7.5	Arbitrary File Download Elegance≤2.4Update to 2.5	—	—	Dec 17, 2013
High7.5	Arbitrary File Deletion Fusion≤2.1Update to 2.2	—	—	Dec 17, 2013
High7.5	Arbitrary File Deletion Construct≤1.4Update to 1.5	—	—	Dec 17, 2013
High7.5	Arbitrary File Deletion Elegance≤2.4Update to 2.5	—	—	Dec 17, 2013
High7.5	Arbitrary File Deletion Echelon≤2.4Update to 2.5	—	—	Dec 17, 2013
High8.8	Cross-Site Request Forgery to Denial of Service WordPress≤2.0.11Update to 2.1	CVE-2013-7233	—	Dec 17, 2013
High7.5	Arbitrary File Download Construct≤1.4Update to 1.5	—	—	Dec 17, 2013
High7.5	Arbitrary File Download Fusion≤2.1Update to 2.2	—	—	Dec 17, 2013
High7.5	Arbitrary File Deletion Persuasion≤2.4Update to 2.5	—	—	Dec 17, 2013
Medium6.1	Reflected Cross-Site Scripting WPRealty≤2.9.1No patch available	—	—	Dec 13, 2013
Medium6.1	Cross-Site Scripting ad-minister≤0.6No patch available	CVE-2013-6993	—	Dec 13, 2013
Medium6.1	Reflected Cross-Site Scripting SpiderVPlayer≤2.1No patch available	—	—	Dec 9, 2013
Critical9.8	SQL Injection FormCraft≤1.3.7Update to 1.3.8	CVE-2013-7187	—	Dec 8, 2013
High7.2	Stored Cross-Site Scripting Download Manager≤2.5.8Update to 2.5.9	CVE-2013-7319	—	Dec 8, 2013
Medium5.3	Cross-Site Scripting Download Manager≤2.5.8Update to 2.5.9	—	—	Dec 7, 2013
Critical9.8	Local File Inclusion Spicy Blogroll≤1.0.0No patch available	—	—	Dec 7, 2013
Critical9.8	SQL Injection Easy Career Openings≤0.4No patch available	—	—	Dec 6, 2013

High7.5
Arbitrary File Download
Persuasion
≤2.4Update to 2.5
c0377d27-0439-46d3-a02c-a693b1ed0bfdDec 17, 2013
High7.5
Arbitrary File Download
Awake
≤3.3Update to 3.4
e2510cee-d9d7-4b30-bf94-254a1dec9bd8Dec 17, 2013
Medium6.1
Cross-Site Scripting
S3 Video Plugin
≤0.982Update to 0.983
CVE-2013-7279Dec 17, 2013
High7.5
Arbitrary File Deletion
Modular
≤2.4Update to 2.5
e2422f54-244c-4e69-8174-ee462a861e98Dec 17, 2013
High7.5
Arbitrary File Download
Myriad
≤2.0Update to 2.1
640d36ac-7a25-437e-8b0a-8c5beceb14bfDec 17, 2013
Medium5.5
Cross-Site Scripting
Gallery – Photo Albums Plugin
<1.2.29Update to 1.2.29
6bf7a5c3-f30d-42d6-91f9-8eb11089a499Dec 17, 2013
High7.5
Arbitrary File Deletion
Myriad
≤2.0Update to 2.1
65c8ea6c-85f1-4e96-995f-57200819280eDec 17, 2013
Critical9.1
Arbitrary File Deletion
Method
≤2.1Update to 2.2
77db9906-ff6f-400c-bb02-8c64eb016a77Dec 17, 2013
Critical9.1
Arbitrary File Download
DejaVu
≤2.4Update to 2.5
2591af6b-e057-4c17-aeba-5c31efbae622Dec 17, 2013
High7.5
Arbitrary File Deletion
InFocus
≤3.3Update to 3.4
2480091f-2b5d-440c-9617-934d097b3a63Dec 17, 2013
High7.5
Arbitrary File Download
InFocus
≤3.3Update to 3.4
25cb57fb-4af5-4f12-a01c-7ffdd8f84219Dec 17, 2013
High7.5
Arbitrary File Download
Echelon
≤2.4Update to 2.5
4209eddd-47ac-4802-b309-e42e5907a0cdDec 17, 2013
High7.5
Arbitrary File Deletion
Awake
≤3.3Update to 3.4
498f7ece-e33a-4489-aeb9-1660abe0b4a5Dec 17, 2013
High7.5
Arbitrary File Download
Elegance
≤2.4Update to 2.5
14d84ad4-904b-4000-af82-b1b68c724aa2Dec 17, 2013
High7.5
Arbitrary File Deletion
Fusion
≤2.1Update to 2.2
1b5a4289-6228-4b77-9929-864b88c34dbeDec 17, 2013
High7.5
Arbitrary File Deletion
Construct
≤1.4Update to 1.5
5b9e037d-30bd-479b-9c4f-4c9082a04e08Dec 17, 2013
High7.5
Arbitrary File Deletion
Elegance
≤2.4Update to 2.5
58e84d8f-a091-493f-8e5d-52c1ad5afcdbDec 17, 2013
High7.5
Arbitrary File Deletion
Echelon
≤2.4Update to 2.5
f1060875-21dc-41fb-866a-940e6aeb3c22Dec 17, 2013
High8.8
Cross-Site Request Forgery to Denial of Service
WordPress
≤2.0.11Update to 2.1
CVE-2013-7233Dec 17, 2013
High7.5
Arbitrary File Download
Construct
≤1.4Update to 1.5
06dcb84f-8293-403d-a3f2-7c5bea7aaae3Dec 17, 2013
High7.5
Arbitrary File Download
Fusion
≤2.1Update to 2.2
f0ff2cb3-a385-4f5c-b555-b6a3dadfc458Dec 17, 2013
High7.5
Arbitrary File Deletion
Persuasion
≤2.4Update to 2.5
aab42989-b928-492f-a610-d2a5546751e0Dec 17, 2013
Medium6.1
Reflected Cross-Site Scripting
WPRealty
≤2.9.1No patch available
cf0798cd-bf1a-4c1c-82c5-e417b9983c77Dec 13, 2013
Medium6.1
Cross-Site Scripting
ad-minister
≤0.6No patch available
CVE-2013-6993Dec 13, 2013
Medium6.1
Reflected Cross-Site Scripting
SpiderVPlayer
≤2.1No patch available
776a0059-9e9a-454a-a325-2e3a0e133000Dec 9, 2013
Critical9.8
SQL Injection
FormCraft
≤1.3.7Update to 1.3.8
CVE-2013-7187Dec 8, 2013
High7.2
Stored Cross-Site Scripting
Download Manager
≤2.5.8Update to 2.5.9
CVE-2013-7319Dec 8, 2013
Medium5.3
Cross-Site Scripting
Download Manager
≤2.5.8Update to 2.5.9
bd7c442f-5c91-4c52-933a-8a6fb7adca8cDec 7, 2013
Critical9.8
Local File Inclusion
Spicy Blogroll
≤1.0.0No patch available
cb5d3d64-a465-4c26-9cf7-7acc7dab862aDec 7, 2013
Critical9.8
SQL Injection
Easy Career Openings
≤0.4No patch available
c97b31bc-75d6-40af-bf4a-714ea69d2c28Dec 6, 2013