VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1448)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1448)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Cross-Site Scripting
HMS Testimonials<2.0.11Update to 2.0.11
CVE-2013-4241—
High7.1Cross-Site Request Forgery
HMS Testimonials<2.0.11Update to 2.0.11
CVE-2013-4240—
Medium6.1Cross-Site Scripting
Usernoise modal feedback / contact form<3.7.9Update to 3.7.9
——
Medium6.1Reflected Cross-Site Scripting
Comment Extra Fields≤1.7No patch available
——
High7.2Cross-Site Scripting via sort Parameter
Download Monitor<3.3.6.2Update to 3.3.6.2
CVE-2013-5098—
Medium6.1Cross-Site Scripting via p Parameter
Download Monitor<3.3.6.2Update to 3.3.6.2
CVE-2013-3262—
Medium6.1Cross-Site Scripting
FlagEmall versionsNo patch available
——
Medium6.1Self-Reflected Cross-Site Scripting
WooCommerce≤2.0.12Update to 2.0.13
——
Medium6.1Reflected Cross-Site Scripting
Category Grid View Gallery≤2.3.1Update to 2.3.2
CVE-2013-4117—
Critical9.8SQL Injection
js-restaurantall versionsNo patch available
——
Medium6.1Reflected Cross-Site Scripting
Pinpoint Booking System – Legacy version≤1.3.1Update to 1.4
——
Medium6.1Cross-Site Scripting
BuddyPress Extended Friendship Request<1.0.2Update to 1.0.2
CVE-2013-4944—
Critical9.8Multiple Vulnerabilities
RokMicroNews≤1.5Update to 1.6
——
Medium6.1DOM Cross-Site Scripting
Xorbin Digital Flash Clock≤1.0No patch available
CVE-2013-4693—
High8.8Cross-Site Request Forgery
qTranslate≤2.5.39No patch available
CVE-2013-3251—
Medium4.6Content-Spoofing Attacks
WordPress≤3.5.1Update to 3.5.2
CVE-2013-2204—
Medium5.4XXE Injection
WordPress≤3.5.1Update to 3.5.2
CVE-2013-2202—
Medium6.4Cross-Site Scripting via Multiple Vectors
WordPress≤3.5.1Update to 3.5.2
CVE-2013-2201—
Medium6.4Cross-Site Scripting
WordPress≤3.5.1Update to 3.5.2
CVE-2013-2205—
Medium5.4 Server Side Request Forgery
WordPress≤3.5.1Update to 3.5.2
CVE-2013-2199—
Medium5.3Denial of Service via wp-postpass cookie
WordPress<3.5.2Update to 3.5.2
CVE-2013-2173—
Medium4.3Sensitive Information Disclosure
WordPress≤3.5.1Update to 3.5.2
CVE-2013-2203—
Medium6.3 Missing Authorization Checks
WordPress≤3.5.1Update to 3.5.2
CVE-2013-2200—
Critical10.0Multiple Vulnerabilities
Slash WPall versionsNo patch available
——
High8.8Cross-Site Request Forgery
Ultimate WordPress Auction<1.0.1Update to 1.0.1
——
Critical9.8Arbitrary File Upload
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery≤1.9.12Update to 1.9.13
CVE-2013-3684—
Medium6.1Reflected Cross-Site Scripting
JobRoller≤1.7.4No patch available
——
Medium6.1Cross-Site Scripting
Ambienceall versionsNo patch available
——
Medium5.4Missing Authorization Checks & Cross-Site Request Forgery
LightStart – Maintenance Mode, Coming Soon and Landing Page Builder<1.8.8Update to 1.8.8
CVE-2013-3250—
High7.5Full Path Disclosure
AntiVirus<1.1Update to 1.1
——

Search VulnCrest Radar

Jump to

Are you sure?