VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1446)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1446)
SeverityVulnerabilityCVEInstallsPublished
High7.1Cross-Site Scripting
Quick Contact Form<6.1Update to 6.1
——
Medium6.4Stored Cross-Site Scripting
BP Group Documents≤1.2.1Update to 1.2.2
——
Medium5.4Path Traversal
BP Group Documents≤1.2.1Update to 1.2.2
——
High8.8Cross-Site Request Forgery
BP Group Documents≤1.2.1Update to 1.2.2
——
Medium5.5 Stored Cross-Site Scripting
BP Group Documents≤1.2Update to 1.2.2
——
Critical9.8Remote Code Execution
seo-watcher≤1.3.3No patch available
——
Critical9.8Arbitrary Code Execution
wp-slimstat-ex≤2.1.2No patch available
——
Medium6.1 Cross-Site Scripting
Sharebar≤1.4.2Update to 1.4.3
CVE-2013-3491—
Medium6.1Cross-Site Scripting
WP Ultimate Email Marketer≤1.2.0No patch available
CVE-2013-3263—
Medium6.1Cross-Site Scripting
Responsive Zoom In/Out Slider WordPress Pluginall versionsNo patch available
——
Critical9.8Authentication Bypass
WP Ultimate Email Marketer≤1.2.0No patch available
CVE-2013-3264—
Medium6.1Cross-Site Scripting
mb.miniAudioPlayer – an HTML5 audio player for your mp3 files<1.4.3Update to 1.4.3
——
Medium6.1Cross-Site Scripting
Custom Website Data<1.1Update to 1.1
——
Medium6.1Cross-Site Scripting
Bradesco Gateway≤2.0No patch available
CVE-2013-5916—
High7.2Cross-Site Scripting
Comment Attachment≤1.5.5No patch available
CVE-2013-6010—
Critical9.8SQL Injection
NOSpamPTI≤2.1No patch available
CVE-2013-5917—
High7.5Full Path Disclosure
RokIntroScroller≤1.8Update to 1.9
——
High7.5Denial of Service
RokIntroScroller≤1.8Update to 1.9
——
High7.3Abuse of Functionality
RokIntroScroller≤1.8Update to 1.9
——
Medium6.1Cross-Site Scripting
RokIntroScroller≤1.8Update to 1.9
——
Critical9.8Arbitrary File Upload
RokIntroScroller≤1.8Update to 1.9
——
Medium6.1Cross-Site Scripting
RokStories≤1.25Update to 1.26
——
Medium5.3Denial of Service
RokStories≤1.25Update to 1.26
——
High7.5Full Path Disclosure
RokStories≤1.25Update to 1.26
——
Critical9.1Denial of Service
RokNewsPager≤1.17Update to 1.18
——
Critical9.8Arbitrary File Upload
Complete Gallery Manager for WordPress | Galleries<3.3.4Update to 3.3.4
CVE-2013-5962—
Medium6.1Cross-Site Scripting
RokNewsPager≤1.17Update to 1.18
——
High7.3Abuse of Functionality
RokStories≤1.25Update to 1.26
——
Critical9.8Arbitrary File Upload
RokStories≤1.25Update to 1.26
——
Critical9.8Arbitrary File Upload
RokNewsPager≤1.17Update to 1.18
——
  • High7.1
    Cross-Site Scripting

    Quick Contact Form

    <6.1Update to 6.1

    d951e6b4-986a-400a-ab28-066a4ea5cbca

  • Medium6.4
    Stored Cross-Site Scripting

    BP Group Documents

    ≤1.2.1Update to 1.2.2

    db761098-e76a-4be8-8b3d-ec964ecbc01c

  • Medium5.4
    Path Traversal

    BP Group Documents

    ≤1.2.1Update to 1.2.2

    4d7b8570-96d2-46dc-983c-3933c3fd74cb

  • High8.8
    Cross-Site Request Forgery

    BP Group Documents

    ≤1.2.1Update to 1.2.2

    8714f5cc-56c7-4976-b021-956883a2bc73

  • Medium5.5
    Stored Cross-Site Scripting

    BP Group Documents

    ≤1.2Update to 1.2.2

    eb299b03-a176-43b3-beca-944c32a5af49

  • Critical9.8
    Remote Code Execution

    seo-watcher

    ≤1.3.3No patch available

    eec34b6a-aae7-4267-accd-96ebc6b71dd3

  • Critical9.8
    Arbitrary Code Execution

    wp-slimstat-ex

    ≤2.1.2No patch available

    ef104a10-9e47-420b-aba9-71095870bf4f

  • Medium6.1
    Cross-Site Scripting

    Sharebar

    ≤1.4.2Update to 1.4.3

    CVE-2013-3491

  • Medium6.1
    Cross-Site Scripting

    WP Ultimate Email Marketer

    ≤1.2.0No patch available

    CVE-2013-3263

  • Medium6.1
    Cross-Site Scripting

    Responsive Zoom In/Out Slider WordPress Plugin

    all versionsNo patch available

    d3fb6a84-2339-4d5c-a88a-f8e08a940840

  • Critical9.8
    Authentication Bypass

    WP Ultimate Email Marketer

    ≤1.2.0No patch available

    CVE-2013-3264

  • Medium6.1
    Cross-Site Scripting

    mb.miniAudioPlayer – an HTML5 audio player for your mp3 files

    <1.4.3Update to 1.4.3

    979bb48d-6dbf-4bb2-90f3-573797ff23f7

  • Medium6.1
    Cross-Site Scripting

    Custom Website Data

    <1.1Update to 1.1

    f60fef0e-5b2d-4672-ab3d-21e4b6708f4a

  • Medium6.1
    Cross-Site Scripting

    Bradesco Gateway

    ≤2.0No patch available

    CVE-2013-5916

  • High7.2
    Cross-Site Scripting

    Comment Attachment

    ≤1.5.5No patch available

    CVE-2013-6010

  • Critical9.8
    SQL Injection

    NOSpamPTI

    ≤2.1No patch available

    CVE-2013-5917

  • High7.5
    Full Path Disclosure

    RokIntroScroller

    ≤1.8Update to 1.9

    5900d571-dc97-4c81-8ff3-7d7350b4c89f

  • High7.5
    Denial of Service

    RokIntroScroller

    ≤1.8Update to 1.9

    99fa7f41-f3ac-435c-af1b-4a965291de37

  • High7.3
    Abuse of Functionality

    RokIntroScroller

    ≤1.8Update to 1.9

    a3a402f4-3b4d-4397-807b-c5f1c33d52aa

  • Medium6.1
    Cross-Site Scripting

    RokIntroScroller

    ≤1.8Update to 1.9

    13fb725f-cb16-49e3-b545-14266538c604

  • Critical9.8
    Arbitrary File Upload

    RokIntroScroller

    ≤1.8Update to 1.9

    205a3e43-8ac6-4a0d-86d3-bb433a992e3d

  • Medium6.1
    Cross-Site Scripting

    RokStories

    ≤1.25Update to 1.26

    4517bd04-20ce-4686-a933-d34464a5b691

  • Medium5.3
    Denial of Service

    RokStories

    ≤1.25Update to 1.26

    1612b10d-1ee7-4ea1-93f3-bde2f1667e1b

  • High7.5
    Full Path Disclosure

    RokStories

    ≤1.25Update to 1.26

    2240b2d3-b4cc-445f-b207-0ccbd527a0f3

  • Critical9.1
    Denial of Service

    RokNewsPager

    ≤1.17Update to 1.18

    386eea84-0b86-46c8-99a2-c73696ae09be

  • Critical9.8
    Arbitrary File Upload

    Complete Gallery Manager for WordPress | Galleries

    <3.3.4Update to 3.3.4

    CVE-2013-5962

  • Medium6.1
    Cross-Site Scripting

    RokNewsPager

    ≤1.17Update to 1.18

    92ae6f51-a6cb-46ce-b45b-ca4f12f5a67f

  • High7.3
    Abuse of Functionality

    RokStories

    ≤1.25Update to 1.26

    9b8b5363-2450-42b5-8295-78ced3682b14

  • Critical9.8
    Arbitrary File Upload

    RokStories

    ≤1.25Update to 1.26

    d73ca391-97a3-4701-8429-e73f5914e65e

  • Critical9.8
    Arbitrary File Upload

    RokNewsPager

    ≤1.17Update to 1.18

    57a81776-643d-4057-9d81-b79ad396cced

Search VulnCrest Radar

Jump to

Are you sure?