VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1455)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 1455)
SeverityVulnerabilityCVEInstallsPublished
Critical9.8SQL Injection
Toolbox≤1.4No patch available
——
Medium6.1Cross-Site Scripting
Konzept - Fullscreen Portfolio WordPress Themeall versionsNo patch available
——
Medium6.1Cross-Site Scripting
Sparky≤1.0No patch available
——
Medium6.1Cross-Site Scripting
Predictive Search for WooCommerce≤1.0.5Update to 1.0.6
——
Critical9.8SQL Injection
CStar Design WordPress Theme≤4.9No patch available
——
Medium6.1Cross-Site Scripting
Video Lead Form<0.6Update to 0.6
CVE-2012-6312—
Critical9.8SQL Injection
Ads Box≤1.0No patch available
——
Medium5.3Sensitive Information Disclosure
Simple Gmail Login<1.1.4Update to 1.1.4
CVE-2012-6313—
Critical9.8SQL Injection
Malmonationall versionsNo patch available
——
Critical9.8Arbitrary File Upload
Zarzadzanie Kontemall versionsNo patch available
——
Critical9.8SQL Injection
Magazine Basicall versionsNo patch available
——
Critical9.8SQL Injection
Plg Novanaall versionsNo patch available
——
Medium6.1Cross-Site Scripting
MailPoet Newsletters (Previous)≤2.1.6Update to 2.1.7
——
Medium6.1Cross-Site Scripting
Advanced Text Widget≤2.0.1Update to 2.0.2
CVE-2011-4618—
Critical9.8SQL Injection
Facebook Survey Pro≤1.0No patch available
——
Medium6.1Cross-Site Scripting
post-views≤2.6.1.2Update to 2.6.1.3
——
Medium6.1Cross-Site Scripting
Uk Cookie≤1.1No patch available
CVE-2012-5856—
High7.3Missing Authorization Checks
WP-Filebase≤0.2.9.24Update to 0.2.9.25
——
Critical9.8Arbitrary File Upload
Image News Slider≤3.3Update to 3.4
——
Medium6.1Cross-Site Scripting
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery≤1.9.6Update to 1.9.7
CVE-2012-3414—
Critical9.8Unauthenticated SQL Injection
Cardoza AJAX Search<1.3Update to 1.3
CVE-2012-5853—
High7.2Cross-Site Scripting
Answer My Question<1.2Update to 1.2
——
High7.3SQL Injection
All Video Gallery Plugin for WordPress<1.2Update to 1.2
CVE-2012-6653—
Medium6.1Cross Site Scripting via post_title parameter
Yoast SEO – Advanced SEO with real-time guidance and built-in AI≤2.1.1Update to 2.2
CVE-2012-6692—
High8.8Cross-Site Request Forgery
FoxyPress≤0.4.9No patch available
——
High8.8SQL Injection
FoxyPress≤0.4.9No patch available
——
Medium6.1Cross-Site Scripting
FoxyPress≤0.4.2.6Update to 0.4.2.7
——
Medium6.1Open Redirect
FoxyPress≤0.4.2.7Update to 0.4.2.8
——
High7.2Arbitrary File Upload
FoxyPress≤0.4.2.5Update to 0.4.2.6
——
Medium6.1Cross-Site Scripting
Coronaall versionsNo patch available
——
  • Critical9.8
    SQL Injection

    Toolbox

    ≤1.4No patch available

    8dfa65cb-3d16-471a-8464-b71510d65fd5

  • Medium6.1
    Cross-Site Scripting

    Konzept - Fullscreen Portfolio WordPress Theme

    all versionsNo patch available

    6dd6e04c-bac4-49c3-a934-7d3f43767684

  • Medium6.1
    Cross-Site Scripting

    Sparky

    ≤1.0No patch available

    0d50eda3-20d8-436b-968c-9d8eeccaa0c9

  • Medium6.1
    Cross-Site Scripting

    Predictive Search for WooCommerce

    ≤1.0.5Update to 1.0.6

    0c0c698e-a5c2-473c-8dfb-31745b7d7c38

  • Critical9.8
    SQL Injection

    CStar Design WordPress Theme

    ≤4.9No patch available

    64e125c7-3f1e-43ed-8655-e0fbb95bc84b

  • Medium6.1
    Cross-Site Scripting

    Video Lead Form

    <0.6Update to 0.6

    CVE-2012-6312

  • Critical9.8
    SQL Injection

    Ads Box

    ≤1.0No patch available

    3ea52e59-d81c-4a3f-953e-34f8214c01d8

  • Medium5.3
    Sensitive Information Disclosure

    Simple Gmail Login

    <1.1.4Update to 1.1.4

    CVE-2012-6313

  • Critical9.8
    SQL Injection

    Malmonation

    all versionsNo patch available

    851daaab-4509-4a1e-b0bb-f9eda2b801c6

  • Critical9.8
    Arbitrary File Upload

    Zarzadzanie Kontem

    all versionsNo patch available

    580f5cd1-2cda-4e8e-81b5-36ce39ebd907

  • Critical9.8
    SQL Injection

    Magazine Basic

    all versionsNo patch available

    d07b5377-ce5f-4faa-ac72-78f5175913c3

  • Critical9.8
    SQL Injection

    Plg Novana

    all versionsNo patch available

    ae12f71d-0f53-4942-83a7-856633e665ca

  • Medium6.1
    Cross-Site Scripting

    MailPoet Newsletters (Previous)

    ≤2.1.6Update to 2.1.7

    401f5d57-ce3d-46c1-bfa9-c8fab99a7e31

  • Medium6.1
    Cross-Site Scripting

    Advanced Text Widget

    ≤2.0.1Update to 2.0.2

    CVE-2011-4618

  • Critical9.8
    SQL Injection

    Facebook Survey Pro

    ≤1.0No patch available

    187df8e0-80f0-4805-823b-80627b76db2a

  • Medium6.1
    Cross-Site Scripting

    post-views

    ≤2.6.1.2Update to 2.6.1.3

    f618911f-fd03-41ec-a0e1-dba4aa7178ab

  • Medium6.1
    Cross-Site Scripting

    Uk Cookie

    ≤1.1No patch available

    CVE-2012-5856

  • High7.3
    Missing Authorization Checks

    WP-Filebase

    ≤0.2.9.24Update to 0.2.9.25

    eebfa8de-8a20-4fac-b43a-f7ae674d9184

  • Critical9.8
    Arbitrary File Upload

    Image News Slider

    ≤3.3Update to 3.4

    2971547d-39da-46f1-b62c-1918042ae654

  • Medium6.1
    Cross-Site Scripting

    Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

    ≤1.9.6Update to 1.9.7

    CVE-2012-3414

  • Critical9.8
    Unauthenticated SQL Injection

    Cardoza AJAX Search

    <1.3Update to 1.3

    CVE-2012-5853

  • High7.2
    Cross-Site Scripting

    Answer My Question

    <1.2Update to 1.2

    f9f17c2b-ca63-4f71-af0f-7bce09ebeb9f

  • High7.3
    SQL Injection

    All Video Gallery Plugin for WordPress

    <1.2Update to 1.2

    CVE-2012-6653

  • Medium6.1
    Cross Site Scripting via post_title parameter

    Yoast SEO – Advanced SEO with real-time guidance and built-in AI

    ≤2.1.1Update to 2.2

    CVE-2012-6692

  • High8.8
    Cross-Site Request Forgery

    FoxyPress

    ≤0.4.9No patch available

    398ebe7e-b0a7-47d8-b2f2-61973182f520

  • High8.8
    SQL Injection

    FoxyPress

    ≤0.4.9No patch available

    4301666c-98a5-4028-978f-f50e5b8f4a6a

  • Medium6.1
    Cross-Site Scripting

    FoxyPress

    ≤0.4.2.6Update to 0.4.2.7

    8da0b944-aa60-489b-8622-44b325fcd242

  • Medium6.1
    Open Redirect

    FoxyPress

    ≤0.4.2.7Update to 0.4.2.8

    d4325e51-5d57-4763-a6c4-29c67330bdbd

  • High7.2
    Arbitrary File Upload

    FoxyPress

    ≤0.4.2.5Update to 0.4.2.6

    d759d7ab-74d5-4195-9258-7281f49b5132

  • Medium6.1
    Cross-Site Scripting

    Corona

    all versionsNo patch available

    cf2d14ff-d02a-4bed-9604-ff2489d4bef9

Search VulnCrest Radar

Jump to

Are you sure?