Database

WordPress Vulnerability Database (page 1444)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1444)
Severity	Vulnerability	CVE	Installs	Published
High7.1	Cross-Site Scripting GroupDocs.Comparison for Cloud<1.0.3Update to 1.0.3	—	—	Dec 3, 2013
Medium6.1	Cross-Site Scripting Bloog≤1.1Update to 1.2	CVE-2013-7129	—	Dec 2, 2013
Medium6.1	Reflected Cross-Site Scripting JS Multi Hotel≤2.2.1No patch available	CVE-2013-7419	—	Dec 1, 2013
Medium6.1	Cross Site Scripting Foloall versionsNo patch available	—	—	Nov 30, 2013
Medium6.1	Cross-Site Scripting optinfirexall versionsNo patch available	—	—	Nov 26, 2013
Medium6.1	Reflected Cross-Site Scripting amerisale-reall versionsNo patch available	—	—	Nov 26, 2013
Critical9.8	Arbitrary File Upload OptimizePress<1.6Update to 1.6	CVE-2013-7102	—	Nov 21, 2013
High8.8	Cross-Site Request Forgery Amplusall versionsNo patch available	—	—	Nov 17, 2013
High8.8	Cross-Site Request Forgery to Arbitrary File Upload Dimensionall versionsNo patch available	—	—	Nov 17, 2013
High8.8	Arbitrary File Upload Make A Statementall versionsNo patch available	—	—	Nov 17, 2013
High8.8	Cross-Site Request Forgery Euclid - Tech Corporate Multilingual WP Theme \| Businessall versionsNo patch available	—	—	Nov 17, 2013
High7.1	Cross-Site Scripting Timely All-in-One Events Calendar<1.10Update to 1.10	—	—	Nov 14, 2013
Critical9.8	Arbitrary File Upload Elemin<1.4.3Update to 1.4.3	CVE-2013-20002	—	Nov 13, 2013
Critical9.8	Arbitrary File Upload iThemes2<1.4.3Update to 1.4.3	—	—	Nov 13, 2013
High8.8	Cross-Site Request Forgery to Arbitrary File Upload Rockstar Themeall versionsNo patch available	—	—	Nov 13, 2013
High7.1	Cross-Site Request Forgery Crowdsignal Dashboard – Polls, Surveys & more<2.0.21Update to 2.0.21	—	—	Nov 6, 2013
Critical9.8	Premium WordPress Blog & Magazine Theme \| News / Editorial (All Versions) - Arbitrary File Upload Kernel - Premium WordPress Blog & Magazine Theme \| News / Editorialall versionsNo patch available	—	—	Nov 6, 2013
Critical9.8	Arbitrary File Upload Anthology≤1.4.4Update to 1.4.5	—	—	Nov 4, 2013
Medium6.1	Cross-Site Scripting Responsive Zoom In/Out Slider WordPress Pluginall versionsNo patch available	—	—	Nov 4, 2013
Critical9.8	Arbitrary File Upload Magnitudo - Powerful Business Themeall versionsNo patch available	—	—	Nov 4, 2013
Critical9.8	Arbitrary File Uploads chameleon<3.9Update to 3.9	—	—	Nov 2, 2013
Critical9.8	Arbitrary File Upload Amoveo Multipurpose Wordpress Theme≤2.0No patch available	—	—	Nov 2, 2013
Critical9.8	Arbitrary File Upload ThisWay≤1.7.0No patch available	—	—	Nov 1, 2013
Critical9.8	Arbitrary File Upload Think Responsive≤1.0No patch available	—	—	Nov 1, 2013
Critical9.8	Powerful WordPress Theme <= 1.3.2 - Arbitrary File Upload switchblade≤1.3.2No patch available	—	—	Nov 1, 2013
High7.5	Directory Traversal Floating Tweets≤1.0.1No patch available	—	—	Nov 1, 2013
Critical9.8	Arbitrary File Upload coldfusion<1.2Update to 1.2	—	—	Oct 31, 2013
Critical9.8	Arbitrary File Upload Right Nowall versionsNo patch available	—	—	Oct 31, 2013
Critical9.8	Arbitrary File Upload WordPress Checkoutall versionsNo patch available	—	—	Oct 31, 2013
Critical9.8	Arbitrary File Upload Ghostall versionsNo patch available	—	—	Oct 29, 2013

High7.1
Cross-Site Scripting
GroupDocs.Comparison for Cloud
<1.0.3Update to 1.0.3
49b466a2-9f6d-431f-8118-7522394d2eedDec 3, 2013
Medium6.1
Cross-Site Scripting
Bloog
≤1.1Update to 1.2
CVE-2013-7129Dec 2, 2013
Medium6.1
Reflected Cross-Site Scripting
JS Multi Hotel
≤2.2.1No patch available
CVE-2013-7419Dec 1, 2013
Medium6.1
Cross Site Scripting
Folo
all versionsNo patch available
dd8f348d-07ff-480d-bcc1-fb39aead1b1dNov 30, 2013
Medium6.1
Cross-Site Scripting
optinfirex
all versionsNo patch available
5a92945b-79ce-4bea-a1fc-0f03024f5f48Nov 26, 2013
Medium6.1
Reflected Cross-Site Scripting
amerisale-re
all versionsNo patch available
c8958931-36be-47b7-9262-3061cff9be22Nov 26, 2013
Critical9.8
Arbitrary File Upload
OptimizePress
<1.6Update to 1.6
CVE-2013-7102Nov 21, 2013
High8.8
Cross-Site Request Forgery
Amplus
all versionsNo patch available
c7bb055d-dd43-4c40-be30-325ecb6d7731Nov 17, 2013
High8.8
Cross-Site Request Forgery to Arbitrary File Upload
Dimension
all versionsNo patch available
301f455f-1ffe-485a-8473-8a31a0633a5fNov 17, 2013
High8.8
Arbitrary File Upload
Make A Statement
all versionsNo patch available
3ebc324a-4858-4502-b962-a4e26ca7445eNov 17, 2013
High8.8
Cross-Site Request Forgery
Euclid - Tech Corporate Multilingual WP Theme | Business
all versionsNo patch available
1281a4d8-fa77-45b4-b0b4-e3bed1b4a4eaNov 17, 2013
High7.1
Cross-Site Scripting
Timely All-in-One Events Calendar
<1.10Update to 1.10
cc8e2524-b77d-447e-aea9-0dfef33809f9Nov 14, 2013
Critical9.8
Arbitrary File Upload
Elemin
<1.4.3Update to 1.4.3
CVE-2013-20002Nov 13, 2013
Critical9.8
Arbitrary File Upload
iThemes2
<1.4.3Update to 1.4.3
878420ce-3a39-494d-9169-44220b2c3307Nov 13, 2013
High8.8
Cross-Site Request Forgery to Arbitrary File Upload
Rockstar Theme
all versionsNo patch available
6897a8fe-c32e-430a-847c-23d1add2355dNov 13, 2013
High7.1
Cross-Site Request Forgery
Crowdsignal Dashboard – Polls, Surveys & more
<2.0.21Update to 2.0.21
683e10af-5414-4959-9823-93e88e84bb1bNov 6, 2013
Critical9.8
Premium WordPress Blog & Magazine Theme | News / Editorial (All Versions) - Arbitrary File Upload
Kernel - Premium WordPress Blog & Magazine Theme | News / Editorial
all versionsNo patch available
45e0664a-385d-4879-acf6-46e837aaa03fNov 6, 2013
Critical9.8
Arbitrary File Upload
Anthology
≤1.4.4Update to 1.4.5
373b51f0-92ad-4c9e-87b9-96b4e57cc05dNov 4, 2013
Medium6.1
Cross-Site Scripting
Responsive Zoom In/Out Slider WordPress Plugin
all versionsNo patch available
63a456e3-5bae-4a4b-850f-b35134de4cfbNov 4, 2013
Critical9.8
Arbitrary File Upload
Magnitudo - Powerful Business Theme
all versionsNo patch available
f28dc553-32de-459e-a0e9-2fd428ef42a0Nov 4, 2013
Critical9.8
Arbitrary File Uploads
chameleon
<3.9Update to 3.9
403c881c-b687-4e7e-8e77-a55203cfde96Nov 2, 2013
Critical9.8
Arbitrary File Upload
Amoveo Multipurpose Wordpress Theme
≤2.0No patch available
a5706025-962f-47e2-8d1d-16bafd937c92Nov 2, 2013
Critical9.8
Arbitrary File Upload
ThisWay
≤1.7.0No patch available
ac1f9d9c-4d4e-4036-95b1-50d09b5cac7cNov 1, 2013
Critical9.8
Arbitrary File Upload
Think Responsive
≤1.0No patch available
33df72a5-d2bc-4af5-b5bc-f26d7249d238Nov 1, 2013
Critical9.8
Powerful WordPress Theme <= 1.3.2 - Arbitrary File Upload
switchblade
≤1.3.2No patch available
8114905a-f08c-425f-ae48-06302cfcb20aNov 1, 2013
High7.5
Directory Traversal
Floating Tweets
≤1.0.1No patch available
502cf45c-1350-4534-a806-6e248912ef6dNov 1, 2013
Critical9.8
Arbitrary File Upload
coldfusion
<1.2Update to 1.2
a4b71893-b0fd-476e-aa93-5f0b239e8301Oct 31, 2013
Critical9.8
Arbitrary File Upload
Right Now
all versionsNo patch available
407b8568-0b47-48d1-a006-2c42e7cfdec3Oct 31, 2013
Critical9.8
Arbitrary File Upload
WordPress Checkout
all versionsNo patch available
345834f2-e95e-4ea1-b171-1c3f4aa17e0eOct 31, 2013
Critical9.8
Arbitrary File Upload
Ghost
all versionsNo patch available
75699831-de38-4c3b-840d-82a04fc97048Oct 29, 2013