Database

WordPress Vulnerability Database (page 1449)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1449)
Severity	Vulnerability	CVE	Installs	Published
High7.5	Full Path Disclosure Exploit Scanner≤1.3.3Update to 1.3.4	—	—	May 29, 2013
Medium5.3	Full Path Dislcosure WordPress Exit Box Lite1.06 – 1.06Update to 1.10	CVE-2013-10030	—	May 28, 2013
Medium4.3	Cross-Site Request Forgery WordPress Exit Strategy≤1.55Update to 1.59	CVE-2013-10025	—	May 28, 2013
Medium4.3	Cross-Site Request Forgery WordPress Exit Box Lite≤1.06Update to 1.10	CVE-2013-10029	—	May 28, 2013
Medium5.3	Information Exposure WordPress Exit Strategy≤1.55Update to 1.59	CVE-2013-10024	—	May 28, 2013
Medium6.1	Cross-Site Scripting ADIF Log Search Widget≤1.0fNo patch available	—	—	May 27, 2013
Medium6.1	Cross-Site Scripting Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps)<3.5.4Update to 3.5.4	—	—	May 24, 2013
Critical9.8	SQL Injection Flagallery-skins≤1.1.5No patch available	—	—	May 22, 2013
Medium6.1	Cross-Site Scripting Social Sharing Toolkit<2.1.2Update to 2.1.2	CVE-2013-6280	—	May 22, 2013
Medium6.3	Cross-Site Request Forgery digg-digg<5.3.5Update to 5.3.5	CVE-2013-3258	—	May 21, 2013
High8.8	Remote Code Execution WP CleanFix<5.0.0Update to 5.0.0	CVE-2013-2109	—	May 18, 2013
Medium6.1	Cross-Site Scripting Criusall versionsNo patch available	—	—	May 16, 2013
Medium6.1	Cross-Site Scripting photolioall versionsNo patch available	—	—	May 16, 2013
Critical10.0	Multiple Vulnerabilities I LOVE IT!≤2.3Update to 2.4	—	—	May 16, 2013
Medium6.1	Cross-Site Scripting Sourceall versionsNo patch available	—	—	May 16, 2013
Medium6.1	Cross-Site Scripting Covert VideoPress Themeall versionsNo patch available	—	—	May 16, 2013
Medium6.1	Cross-Site Scripting SmartStart WP - Responsive HTML5 Theme \| Creative≤1.0.8No patch available	—	—	May 16, 2013
High8.8	Cross-Site Request Forgery Mail On Update<5.3.0Update to 5.3.0	CVE-2013-2107	—	May 16, 2013
Medium6.1	Reflected Cross-Site Scripting Debug Bar≤0.8Update to 0.8.1	CVE-2013-10021	—	May 15, 2013
Medium6.1	Cross-Site Scripting S3 Video Plugin<0.98Update to 0.98	—	—	May 15, 2013
Medium6.1	Reflected Cross-Site Scripting Newsletter – Send awesome emails from WordPress≤3.2.6Update to 3.2.7	—	—	May 14, 2013
Critical9.8	SQL Injection WORDPRESS VIDEO GALLERY<2.1Update to 2.1	CVE-2013-3478	—	May 14, 2013
Medium4.3	Cross-Site Request Forgery Related Posts<2.7.2Update to 2.7.2	CVE-2013-3257	—	May 14, 2013
Medium6.1	Cross-Site Scripting Search and Share≤0.9.3No patch available	—	—	May 12, 2013
Medium6.1	Reflected Cross-Site Scripting Securimage-WP<3.5.1Update to 3.5.1	—	—	May 11, 2013
High8.8	Cross-Site Request Forgery WP-PostViews<1.63Update to 1.63	CVE-2013-3252	—	May 8, 2013
High8.8	Cross-Site Request Forgery share-this≤7.0.5Update to 7.0.6	CVE-2013-3479	—	May 7, 2013
High8.8	Cross-Site Request Forgery Related Posts by Zemanta≤1.3.1Update to 1.3.2	CVE-2013-3477	—	May 7, 2013
Medium6.1	Cross-Site Scripting WP Photo Album Plus<5.0.3Update to 5.0.3	CVE-2013-3254	—	May 6, 2013
Medium6.3	Cross-Site Request Forgery AJAX Auth – Fast Logins, 2FA, Redirects<3.1Update to 3.1	CVE-2013-2707	—	May 6, 2013

High7.5
Full Path Disclosure
Exploit Scanner
≤1.3.3Update to 1.3.4
34618970-a4b6-456b-9d01-a09e7a977724May 29, 2013
Medium5.3
Full Path Dislcosure
WordPress Exit Box Lite
1.06 – 1.06Update to 1.10
CVE-2013-10030May 28, 2013
Medium4.3
Cross-Site Request Forgery
WordPress Exit Strategy
≤1.55Update to 1.59
CVE-2013-10025May 28, 2013
Medium4.3
Cross-Site Request Forgery
WordPress Exit Box Lite
≤1.06Update to 1.10
CVE-2013-10029May 28, 2013
Medium5.3
Information Exposure
WordPress Exit Strategy
≤1.55Update to 1.59
CVE-2013-10024May 28, 2013
Medium6.1
Cross-Site Scripting
ADIF Log Search Widget
≤1.0fNo patch available
067ce322-9d37-4d90-92f3-ca5ada591797May 27, 2013
Medium6.1
Cross-Site Scripting
Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps)
<3.5.4Update to 3.5.4
6f1856bc-6d57-416e-86e9-9114bbbe5c8dMay 24, 2013
Critical9.8
SQL Injection
Flagallery-skins
≤1.1.5No patch available
1decdfd8-a2e8-49af-ade8-01d19814b6fbMay 22, 2013
Medium6.1
Cross-Site Scripting
Social Sharing Toolkit
<2.1.2Update to 2.1.2
CVE-2013-6280May 22, 2013
Medium6.3
Cross-Site Request Forgery
digg-digg
<5.3.5Update to 5.3.5
CVE-2013-3258May 21, 2013
High8.8
Remote Code Execution
WP CleanFix
<5.0.0Update to 5.0.0
CVE-2013-2109May 18, 2013
Medium6.1
Cross-Site Scripting
Crius
all versionsNo patch available
35896489-e48c-40f6-8815-9af759e58b44May 16, 2013
Medium6.1
Cross-Site Scripting
photolio
all versionsNo patch available
3e477f41-8765-472a-b48b-d381cf7de5c6May 16, 2013
Critical10.0
Multiple Vulnerabilities
I LOVE IT!
≤2.3Update to 2.4
b8205bfe-4586-42e9-b4f7-e46947396b6bMay 16, 2013
Medium6.1
Cross-Site Scripting
Source
all versionsNo patch available
a7ae4294-3f20-4f97-ae74-858121280c01May 16, 2013
Medium6.1
Cross-Site Scripting
Covert VideoPress Theme
all versionsNo patch available
e6481a6e-5875-44d8-9b24-594fb73e8942May 16, 2013
Medium6.1
Cross-Site Scripting
SmartStart WP - Responsive HTML5 Theme | Creative
≤1.0.8No patch available
76b0c41c-c825-4ac2-8a7f-4b1a54f21f0bMay 16, 2013
High8.8
Cross-Site Request Forgery
Mail On Update
<5.3.0Update to 5.3.0
CVE-2013-2107May 16, 2013
Medium6.1
Reflected Cross-Site Scripting
Debug Bar
≤0.8Update to 0.8.1
CVE-2013-10021May 15, 2013
Medium6.1
Cross-Site Scripting
S3 Video Plugin
<0.98Update to 0.98
d3ec7d23-4386-470f-955e-631f461e290bMay 15, 2013
Medium6.1
Reflected Cross-Site Scripting
Newsletter – Send awesome emails from WordPress
≤3.2.6Update to 3.2.7
b4c6930a-b413-4acc-a0a4-9940bb8474ccMay 14, 2013
Critical9.8
SQL Injection
WORDPRESS VIDEO GALLERY
<2.1Update to 2.1
CVE-2013-3478May 14, 2013
Medium4.3
Cross-Site Request Forgery
Related Posts
<2.7.2Update to 2.7.2
CVE-2013-3257May 14, 2013
Medium6.1
Cross-Site Scripting
Search and Share
≤0.9.3No patch available
a5381944-f12c-41e6-be47-bd258da5600bMay 12, 2013
Medium6.1
Reflected Cross-Site Scripting
Securimage-WP
<3.5.1Update to 3.5.1
22faab6d-a63f-4052-b7c6-92e11e4ca723May 11, 2013
High8.8
Cross-Site Request Forgery
WP-PostViews
<1.63Update to 1.63
CVE-2013-3252May 8, 2013
High8.8
Cross-Site Request Forgery
share-this
≤7.0.5Update to 7.0.6
CVE-2013-3479May 7, 2013
High8.8
Cross-Site Request Forgery
Related Posts by Zemanta
≤1.3.1Update to 1.3.2
CVE-2013-3477May 7, 2013
Medium6.1
Cross-Site Scripting
WP Photo Album Plus
<5.0.3Update to 5.0.3
CVE-2013-3254May 6, 2013
Medium6.3
Cross-Site Request Forgery
AJAX Auth – Fast Logins, 2FA, Redirects
<3.1Update to 3.1
CVE-2013-2707May 6, 2013