VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1451)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1451)
SeverityVulnerabilityCVEInstallsPublished
Critical9.8SQL Injection
Finalistall versionsNo patch available
——
Critical9.8SQL Injection
Level Four Store Front≤8.1Update to 8.1.1
——
High8.8Cross-Site Request Forgery
MathJax-LaTeX<1.2Update to 1.2
——
Medium5.3Sensitive Information Disclosure
BackupBuddy<3.0Update to 3.0
CVE-2013-2744—
Critical9.8Authentication Bypass
BackupBuddy<3.0Update to 3.0
CVE-2013-2742—
Critical9.8Authentication Bypass
BackupBuddy<3.0Update to 3.0
CVE-2013-2743—
Critical9.8Authentication Bypass
BackupBuddy<3.0Update to 3.0
CVE-2013-2741—
Medium6.1Cross-Site Scripting
Felici - WordPress Magazine Theme | Blog / Magazine≤1.7No patch available
——
Medium6.1Cross-Site Scripting
FAQs Manager≤1.0No patch available
——
High7.2SQL Injection
FAQs Manager≤1.0No patch available
——
High8.8Cross-Site Request Forgery
FAQs Manager≤1.0No patch available
——
High8.8Cross-Site Request Forgery
Occasions≤1.1No patch available
——
Medium6.1Reflected Cross-Site Scripting
o2s gallery≤1.0Update to 1.1
——
Medium6.1Cross-Site Scripting
timelineoptinproall versionsNo patch available
——
Medium6.4Cross-Site Scripting
MailUp newsletter sign-up form<1.3.2Update to 1.3.2
CVE-2013-2640—
Medium6.1Cross-Site Scripting
MailUp newsletter sign-up form<1.3.3Update to 1.3.3
CVE-2013-0731—
High7.2SQL Injection
LeagueManager<3.8.1Update to 3.8.1
CVE-2013-1852—
Medium6.1Cross-Site Scripting via playerID
podpress≤8.8.10.17No patch available
CVE-2013-2714—
Medium6.4Stored Cross-Site Scripting
Terillion Reviews<1.2Update to 1.2
CVE-2013-2501—
Critical10.0SQL Injection
Timely All-in-One Events Calendar<1.10Update to 1.10
——
Medium6.1Cross-Site Scripting
Count per Day<3.2.6Update to 3.2.6
CVE-2013-7472—
Medium5.3Full Path Disclosure
Caulk Themeall versionsNo patch available
——
Medium6.1Multiple Cross-Site Scripting
Events Manager – Calendar, Bookings, Tickets, Appointments and more!≤5.3.6Update to 5.3.6.1
CVE-2013-7480—
Critical9.8Multiple Vulnerabilities
Google Alert and Twitter Plugin3.1.5 – 3.1.5No patch available
——
Critical9.8Arbitrary File Upload
Magn WP Drag And Drop Media Uploader≤1.2.0Update to 1.2.1
——
Critical9.8SQL Injection
Comment Rating≤2.9.32No patch available
——
Critical9.8SQL Injection
Mingle Forum≤1.0.33.3Update to 1.0.34
CVE-2013-0735—
High7.2Stored Cross-Site Scripting
Mingle Forum≤1.0.33.3Update to 1.0.34
CVE-2013-0734—
Medium6.1Cross-Site Scripting
Scarletall versionsNo patch available
——
Medium6.1Cross-Site Scripting
Smart Flv≤1.0No patch available
CVE-2013-1765—
  • Critical9.8
    SQL Injection

    Finalist

    all versionsNo patch available

    b10a4561-1724-4e98-bff2-ca5416b217dc

  • Critical9.8
    SQL Injection

    Level Four Store Front

    ≤8.1Update to 8.1.1

    848f3b21-fb44-45c4-944e-7c4c62448ffc

  • High8.8
    Cross-Site Request Forgery

    MathJax-LaTeX

    <1.2Update to 1.2

    10c1402d-613d-4d72-b488-c0af2bee4d59

  • Medium5.3
    Sensitive Information Disclosure

    BackupBuddy

    <3.0Update to 3.0

    CVE-2013-2744

  • Critical9.8
    Authentication Bypass

    BackupBuddy

    <3.0Update to 3.0

    CVE-2013-2742

  • Critical9.8
    Authentication Bypass

    BackupBuddy

    <3.0Update to 3.0

    CVE-2013-2743

  • Critical9.8
    Authentication Bypass

    BackupBuddy

    <3.0Update to 3.0

    CVE-2013-2741

  • Medium6.1
    Cross-Site Scripting

    Felici - WordPress Magazine Theme | Blog / Magazine

    ≤1.7No patch available

    983b4fac-cf27-4156-85a0-e4db90aee327

  • Medium6.1
    Cross-Site Scripting

    FAQs Manager

    ≤1.0No patch available

    6c0c6cb5-2cc7-4790-9338-11211974d5fb

  • High7.2
    SQL Injection

    FAQs Manager

    ≤1.0No patch available

    1ad2b168-5874-4b0f-8710-d9ed9afc54bf

  • High8.8
    Cross-Site Request Forgery

    FAQs Manager

    ≤1.0No patch available

    51634a0c-f979-403b-80b0-8e3a65e7ad35

  • High8.8
    Cross-Site Request Forgery

    Occasions

    ≤1.1No patch available

    f77cc1ed-d30e-4651-af23-29d34d76dc92

  • Medium6.1
    Reflected Cross-Site Scripting

    o2s gallery

    ≤1.0Update to 1.1

    f20b79cd-4393-4c96-ac78-139ac7c11144

  • Medium6.1
    Cross-Site Scripting

    timelineoptinpro

    all versionsNo patch available

    f1de8404-5c7b-48d7-ab7f-7f99b309ee43

  • Medium6.4
    Cross-Site Scripting

    MailUp newsletter sign-up form

    <1.3.2Update to 1.3.2

    CVE-2013-2640

  • Medium6.1
    Cross-Site Scripting

    MailUp newsletter sign-up form

    <1.3.3Update to 1.3.3

    CVE-2013-0731

  • High7.2
    SQL Injection

    LeagueManager

    <3.8.1Update to 3.8.1

    CVE-2013-1852

  • Medium6.1
    Cross-Site Scripting via playerID

    podpress

    ≤8.8.10.17No patch available

    CVE-2013-2714

  • Medium6.4
    Stored Cross-Site Scripting

    Terillion Reviews

    <1.2Update to 1.2

    CVE-2013-2501

  • Critical10.0
    SQL Injection

    Timely All-in-One Events Calendar

    <1.10Update to 1.10

    f23d80ae-a686-4e89-a8c0-648289521c58

  • Medium6.1
    Cross-Site Scripting

    Count per Day

    <3.2.6Update to 3.2.6

    CVE-2013-7472

  • Medium5.3
    Full Path Disclosure

    Caulk Theme

    all versionsNo patch available

    2d8ae431-04cd-49e4-a5ea-ea7b1263c836

  • Medium6.1
    Multiple Cross-Site Scripting

    Events Manager – Calendar, Bookings, Tickets, Appointments and more!

    ≤5.3.6Update to 5.3.6.1

    CVE-2013-7480

  • Critical9.8
    Multiple Vulnerabilities

    Google Alert and Twitter Plugin

    3.1.5 – 3.1.5No patch available

    181e41d6-1599-4229-ace8-0bdb5735858f

  • Critical9.8
    Arbitrary File Upload

    Magn WP Drag And Drop Media Uploader

    ≤1.2.0Update to 1.2.1

    0b238414-b8fa-4251-8ad4-1bb693b90a27

  • Critical9.8
    SQL Injection

    Comment Rating

    ≤2.9.32No patch available

    05ea5a3c-084a-458f-b0b1-8a9b82e4656a

  • Critical9.8
    SQL Injection

    Mingle Forum

    ≤1.0.33.3Update to 1.0.34

    CVE-2013-0735

  • High7.2
    Stored Cross-Site Scripting

    Mingle Forum

    ≤1.0.33.3Update to 1.0.34

    CVE-2013-0734

  • Medium6.1
    Cross-Site Scripting

    Scarlet

    all versionsNo patch available

    f6d24786-676b-478a-ad9a-5c3f5ca3e85b

  • Medium6.1
    Cross-Site Scripting

    Smart Flv

    ≤1.0No patch available

    CVE-2013-1765

Search VulnCrest Radar

Jump to

Are you sure?