VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1453)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1453)
SeverityVulnerabilityCVEInstallsPublished
High7.5Denial of Service and Abuse of Functionality
Chocolate WP – Responsive Photography Theme | Photographyall versionsNo patch available
——
Critical9.8Arbitrary File Upload
Chocolate WP – Responsive Photography Theme | Photographyall versionsNo patch available
——
Medium6.4Stored Cross-Site Scripting
WordPress<3.5.1Update to 3.5.1
CVE-2013-0236—
Medium6.1Cross-Site Scripting
Chocolate WP – Responsive Photography Theme | Photographyall versionsNo patch available
——
Medium5.3Full Path Disclosure
Chocolate WP – Responsive Photography Theme | Photographyall versionsNo patch available
——
Critical9.8Remote File Inclusion
Chocolate WP – Responsive Photography Theme | Photographyall versionsNo patch available
——
Medium6.4Cross-Site Scripting
WordPress≤3.5Update to 3.5.1
CVE-2013-0237—
Critical9.8SQL Injection
WordPress Poll≤34.05Update to 34.06
CVE-2013-1400—
Critical9.8SQL Injection
WordPress Poll≤34.05Update to 34.06
CVE-2013-1401—
High8.8Cross-Site Request Forgery
Developer Formatter<2013.0.1.41Update to 2013.0.1.41
——
Critical9.8Arbitrary File Upload
File Uploader≤1.1No patch available
——
Medium5.3Full Path Disclosure
Ripe HD FLV≤1.1No patch available
——
Critical9.8SQL Injection
Ripe HD FLV≤1.1No patch available
——
High7.5Directory Traversal
Forums<1.4.4Update to 1.4.4
CVE-2012-4920—
High7.2Authenticated (Admin+) PHP Code Injection
Google XML Sitemaps Generator≤3.2.8Update to 3.2.9
——
High7.5Directory Traversal
Google Doc Embedder<2.5.4Update to 2.5.4
CVE-2012-4915—
High7.5Full Path Disclosure
Spam Free WordPress≤1.9.3Update to 2.0
——
High7.5Sensitive Information Disclosure
OpenInviter for WordPress≤1.7.0No patch available
——
Medium5.3IP Protection Bypass
Spam Free WordPress≤1.9.3Update to 2.0
——
Critical9.8Arbitrary File Upload
Lightspeed≤1.1.2No patch available
——
Critical9.8Arbitrary File Upload
Eptonic≤1.4No patch available
——
Critical9.8Arbitrary File Upload
Nuance≤1.2No patch available
——
Low3.8Remote Code Execution via Remote File Inclusion
Advanced Custom Fields (ACF®)≤3.5.1Update to 3.5.2
CVE-2012-10025—
Critical9.8Arbitrary File Upload
Xerte Online≤0.35Update to 0.36
——
Critical9.8Arbitrary File Upload
Level Four Store Front<8.1.15Update to 8.1.15
——
High7.5Directory Traversal
Download Shortcode≤0.2.3Update to 1.0
CVE-2014-5465—
Critical9.8Arbitrary File Upload
ReFlex Gallery » WordPress Photo Gallery<3.1.4Update to 3.1.4
——
High8.8Cross-Site Request Forgery
Mingle Forum≤1.0.34Update to 1.0.35
CVE-2013-0736—
High8.8Cross-Site Request Forgery
Sahifa≤2.4.0Update to 3.0.0
——
Medium5.3Full Path Disclosure
Sahifa≤2.4.0Update to 3.0.0
——
  • High7.5
    Denial of Service and Abuse of Functionality

    Chocolate WP – Responsive Photography Theme | Photography

    all versionsNo patch available

    a644ac90-6cc4-495c-b880-4ebbc237bb57

  • Critical9.8
    Arbitrary File Upload

    Chocolate WP – Responsive Photography Theme | Photography

    all versionsNo patch available

    a537f82c-5139-439e-817f-7fd0ece958bd

  • Medium6.4
    Stored Cross-Site Scripting

    WordPress

    <3.5.1Update to 3.5.1

    CVE-2013-0236

  • Medium6.1
    Cross-Site Scripting

    Chocolate WP – Responsive Photography Theme | Photography

    all versionsNo patch available

    06fee60a-e96c-49ce-9007-0d402ef46d72

  • Medium5.3
    Full Path Disclosure

    Chocolate WP – Responsive Photography Theme | Photography

    all versionsNo patch available

    4c5dd7a4-0e9c-4e1e-8385-2e76b7b9b02e

  • Critical9.8
    Remote File Inclusion

    Chocolate WP – Responsive Photography Theme | Photography

    all versionsNo patch available

    f0e77557-f377-4752-bc5b-ec00f2520150

  • Medium6.4
    Cross-Site Scripting

    WordPress

    ≤3.5Update to 3.5.1

    CVE-2013-0237

  • Critical9.8
    SQL Injection

    WordPress Poll

    ≤34.05Update to 34.06

    CVE-2013-1400

  • Critical9.8
    SQL Injection

    WordPress Poll

    ≤34.05Update to 34.06

    CVE-2013-1401

  • High8.8
    Cross-Site Request Forgery

    Developer Formatter

    <2013.0.1.41Update to 2013.0.1.41

    938be2d0-1e56-42d5-874e-574e78a44932

  • Critical9.8
    Arbitrary File Upload

    File Uploader

    ≤1.1No patch available

    9ae5b5f1-77a7-4626-a9b5-6f146c32a6db

  • Medium5.3
    Full Path Disclosure

    Ripe HD FLV

    ≤1.1No patch available

    28a7b80c-8282-4f5c-b442-d6bce9fda25d

  • Critical9.8
    SQL Injection

    Ripe HD FLV

    ≤1.1No patch available

    cf159a11-9490-4f79-a62d-c279cfe26108

  • High7.5
    Directory Traversal

    Forums

    <1.4.4Update to 1.4.4

    CVE-2012-4920

  • High7.2
    Authenticated (Admin+) PHP Code Injection

    Google XML Sitemaps Generator

    ≤3.2.8Update to 3.2.9

    874130f0-7dc9-49fe-a7b0-e0be432799bd

  • High7.5
    Directory Traversal

    Google Doc Embedder

    <2.5.4Update to 2.5.4

    CVE-2012-4915

  • High7.5
    Full Path Disclosure

    Spam Free WordPress

    ≤1.9.3Update to 2.0

    8a5bcf8f-9aa0-4a78-b3a8-21571700ea8b

  • High7.5
    Sensitive Information Disclosure

    OpenInviter for WordPress

    ≤1.7.0No patch available

    031c2a61-3547-4c33-8ab8-c52585c8066a

  • Medium5.3
    IP Protection Bypass

    Spam Free WordPress

    ≤1.9.3Update to 2.0

    7f7a8ee7-af69-4aff-abf7-6d69d920fe61

  • Critical9.8
    Arbitrary File Upload

    Lightspeed

    ≤1.1.2No patch available

    89620065-b961-49c9-a662-bee300b5da72

  • Critical9.8
    Arbitrary File Upload

    Eptonic

    ≤1.4No patch available

    e87d7ca0-6fa3-4ca3-b308-d47e1e2e6566

  • Critical9.8
    Arbitrary File Upload

    Nuance

    ≤1.2No patch available

    06e90f64-f64e-4871-9106-1d7af02f13d2

  • Low3.8
    Remote Code Execution via Remote File Inclusion

    Advanced Custom Fields (ACF®)

    ≤3.5.1Update to 3.5.2

    CVE-2012-10025

  • Critical9.8
    Arbitrary File Upload

    Xerte Online

    ≤0.35Update to 0.36

    0b4b0cd0-dcc2-4790-8aeb-a304088dea3c

  • Critical9.8
    Arbitrary File Upload

    Level Four Store Front

    <8.1.15Update to 8.1.15

    d0ace3b6-7941-43c6-b636-8f7b9d51da3e

  • High7.5
    Directory Traversal

    Download Shortcode

    ≤0.2.3Update to 1.0

    CVE-2014-5465

  • Critical9.8
    Arbitrary File Upload

    ReFlex Gallery » WordPress Photo Gallery

    <3.1.4Update to 3.1.4

    fe17abd8-9ee2-4b9c-a30b-68d95e341722

  • High8.8
    Cross-Site Request Forgery

    Mingle Forum

    ≤1.0.34Update to 1.0.35

    CVE-2013-0736

  • High8.8
    Cross-Site Request Forgery

    Sahifa

    ≤2.4.0Update to 3.0.0

    9382d94c-3767-4d05-ada7-2857713b9e3a

  • Medium5.3
    Full Path Disclosure

    Sahifa

    ≤2.4.0Update to 3.0.0

    f125a9d4-7399-47ae-9b5d-4cfe12c4c177

Search VulnCrest Radar

Jump to

Are you sure?