VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1447)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1447)
SeverityVulnerabilityCVEInstallsPublished
Critical9.8Arbitrary File Upload
Complete Gallery Manager for WordPress | Galleries<3.3.4Update to 3.3.4
CVE-2013-5962—
Medium5.3Denial of Service
RokStories≤1.25Update to 1.26
——
Critical9.8Arbitrary File Upload
Simple Dropbox Upload<1.8.8.1Update to 1.8.8.1
CVE-2013-5963—
Critical9.8SQL injection
Mukioplayer For WordPress≤1.6No patch available
——
Medium6.4HTML File Upload
WordPress≤3.6Update to 3.6.1
CVE-2013-5738—
Medium5.4Open Redirect
WordPress≤3.6Update to 3.6.1
CVE-2013-4339—
Medium6.4.swf and .exe File Upload
WordPress<3.6.1Update to 3.6.1
CVE-2013-5739—
Medium6.3Spoof Post Authorship
WordPress≤3.6Update to 3.6.1
CVE-2013-4340—
High8.8Deserialization
WordPress≤3.6Update to 3.6.1
CVE-2013-4338—
Medium6.1Cross-Site Scripting
Event Easy Calendar≤1.0.0No patch available
——
High8.8Multiple Cross-Site Request Forgery
Event Easy Calendar≤1.0No patch available
——
Medium6.1Cross-Site Scripting
Design Approval System≤3.6Update to 3.7
CVE-2013-5711—
Medium6.1Cross-Site Scripting
nextgen-smooth-gallery≤1.2No patch available
——
Critical9.8SQL Injection
Testimonial<2.3Update to 2.3
CVE-2013-5673—
High8.8Cross-Site Request Forgery
Testimonial<2.3Update to 2.3
CVE-2013-5672—
Critical9.8Multiple Vulnerabilities
Testimonial<2.3Update to 2.3
——
Medium6.1Reflected Cross-Site Scripting
Encrypted Blog≤0.0.6.2Update to 0.0.6.6
——
Medium6.1Open Redirect
Encrypted Blog≤0.0.6.2Update to 0.0.6.6
——
Medium6.1Cross-Site Scripting
silverOrchid≤1.5.0No patch available
——
Medium6.1Cross-Site Scripting
Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress≤3.34Update to 3.35
CVE-2013-7481—
Medium6.1Cross-Site Scripting
wp-simple-login-registration-plugin≤1.0.2Update to 1.0.3
——
Medium6.1Cross-Site Scripting
Post Gallery≤1.0.6No patch available
——
Medium6.1Reflected Cross-Site Scripting
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP≤4.25.3Update to 4.27
CVE-2013-5714—
Medium6.1Cross-Site Scripting
Webcam Video Conference≤3.1Update to 4.51
——
Medium6.1Cross-Site Scripting
BackWPup – WordPress Backup & Restore Plugin<3.0.13Update to 3.0.13
CVE-2013-4626—
Medium6.1Reflected Cross-Site Scripting
A Forms≤1.4.2Update to 1.4.3
CVE-2013-10020—
Medium4.7Cross-Site Request Forgery
ThinkIT WP Contact Form<0.3Update to 0.3
——
Medium6.1Cross-Site Scripting
ThinkIT WP Contact Form<0.3Update to 0.3
——
Medium6.1Cross-Site Scripting
Events Manager – Calendar, Bookings, Tickets, Appointments and more!<5.5Update to 5.5
CVE-2013-7478—
Medium6.1Cross-Site Scripting
Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress≤3.51Update to 3.52
CVE-2013-7475—
  • Critical9.8
    Arbitrary File Upload

    Complete Gallery Manager for WordPress | Galleries

    <3.3.4Update to 3.3.4

    CVE-2013-5962

  • Medium5.3
    Denial of Service

    RokStories

    ≤1.25Update to 1.26

    1612b10d-1ee7-4ea1-93f3-bde2f1667e1b

  • Critical9.8
    Arbitrary File Upload

    Simple Dropbox Upload

    <1.8.8.1Update to 1.8.8.1

    CVE-2013-5963

  • Critical9.8
    SQL injection

    Mukioplayer For WordPress

    ≤1.6No patch available

    7bae3acf-bbb3-4b10-b46f-8086240a2f02

  • Medium6.4
    HTML File Upload

    WordPress

    ≤3.6Update to 3.6.1

    CVE-2013-5738

  • Medium5.4
    Open Redirect

    WordPress

    ≤3.6Update to 3.6.1

    CVE-2013-4339

  • Medium6.4
    .swf and .exe File Upload

    WordPress

    <3.6.1Update to 3.6.1

    CVE-2013-5739

  • Medium6.3
    Spoof Post Authorship

    WordPress

    ≤3.6Update to 3.6.1

    CVE-2013-4340

  • High8.8
    Deserialization

    WordPress

    ≤3.6Update to 3.6.1

    CVE-2013-4338

  • Medium6.1
    Cross-Site Scripting

    Event Easy Calendar

    ≤1.0.0No patch available

    7c911773-79f5-4d91-b0f9-a05bc17516b2

  • High8.8
    Multiple Cross-Site Request Forgery

    Event Easy Calendar

    ≤1.0No patch available

    a620810d-1b2a-4f2e-943c-aacc493f0c5b

  • Medium6.1
    Cross-Site Scripting

    Design Approval System

    ≤3.6Update to 3.7

    CVE-2013-5711

  • Medium6.1
    Cross-Site Scripting

    nextgen-smooth-gallery

    ≤1.2No patch available

    09870d90-80b1-4650-9b00-0dc005702aee

  • Critical9.8
    SQL Injection

    Testimonial

    <2.3Update to 2.3

    CVE-2013-5673

  • High8.8
    Cross-Site Request Forgery

    Testimonial

    <2.3Update to 2.3

    CVE-2013-5672

  • Critical9.8
    Multiple Vulnerabilities

    Testimonial

    <2.3Update to 2.3

    ee3548ca-423f-4e2f-b87b-366200b31777

  • Medium6.1
    Reflected Cross-Site Scripting

    Encrypted Blog

    ≤0.0.6.2Update to 0.0.6.6

    a309d8d3-bc1c-4301-8da9-ce7df7c2f76f

  • Medium6.1
    Open Redirect

    Encrypted Blog

    ≤0.0.6.2Update to 0.0.6.6

    33a26790-1fb8-4088-87dc-e026a28f205d

  • Medium6.1
    Cross-Site Scripting

    silverOrchid

    ≤1.5.0No patch available

    0ddc7488-4cc0-4e17-8c81-26cbcbe8bdae

  • Medium6.1
    Cross-Site Scripting

    Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress

    ≤3.34Update to 3.35

    CVE-2013-7481

  • Medium6.1
    Cross-Site Scripting

    wp-simple-login-registration-plugin

    ≤1.0.2Update to 1.0.3

    94dc8fc6-8212-4f83-a844-f08174531d3b

  • Medium6.1
    Cross-Site Scripting

    Post Gallery

    ≤1.0.6No patch available

    4b6021d2-cbfd-42d9-84d8-6db0f28828ff

  • Medium6.1
    Reflected Cross-Site Scripting

    Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP

    ≤4.25.3Update to 4.27

    CVE-2013-5714

  • Medium6.1
    Cross-Site Scripting

    Webcam Video Conference

    ≤3.1Update to 4.51

    96084352-cc53-45fc-a33f-2ebf470f81a7

  • Medium6.1
    Cross-Site Scripting

    BackWPup – WordPress Backup & Restore Plugin

    <3.0.13Update to 3.0.13

    CVE-2013-4626

  • Medium6.1
    Reflected Cross-Site Scripting

    A Forms

    ≤1.4.2Update to 1.4.3

    CVE-2013-10020

  • Medium4.7
    Cross-Site Request Forgery

    ThinkIT WP Contact Form

    <0.3Update to 0.3

    b3ea5e75-9b6a-4710-bb2c-458c2a924bb0

  • Medium6.1
    Cross-Site Scripting

    ThinkIT WP Contact Form

    <0.3Update to 0.3

    81062f13-98ed-4ba7-8725-35406ac71568

  • Medium6.1
    Cross-Site Scripting

    Events Manager – Calendar, Bookings, Tickets, Appointments and more!

    <5.5Update to 5.5

    CVE-2013-7478

  • Medium6.1
    Cross-Site Scripting

    Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress

    ≤3.51Update to 3.52

    CVE-2013-7475

Search VulnCrest Radar

Jump to

Are you sure?