Database

WordPress Vulnerability Database (page 1456)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

WordPress Vulnerability Database (page 1456)
Severity	Vulnerability	CVE	Installs	Published
Medium6.1	Cross-Site Scripting Brightboxall versionsNo patch available	—	—	Oct 29, 2012
Medium6.1	Cross-Site Scripting Coronaall versionsNo patch available	—	—	Oct 29, 2012
High7.1	Cross-Site Scripting Flashlight≤2.8.4No patch available	—	—	Oct 29, 2012
Medium6.1	Cross-Site Scripting Broadscopeall versionsNo patch available	—	—	Oct 29, 2012
Medium6.1	Cross-Site Scripting Upscaleall versionsNo patch available	—	—	Oct 29, 2012
Medium6.1	Cross-Site Scripting Exposeall versionsNo patch available	—	—	Oct 29, 2012
Medium6.1	Reflected Cross-Site Scripting Choicesall versionsNo patch available	—	—	Oct 29, 2012
Medium6.1	Cross-Site Scripting Coalitionall versionsNo patch available	—	—	Oct 29, 2012
Medium6.1	Cross-Site Scripting Eunoiaall versionsNo patch available	—	—	Oct 29, 2012
Medium6.1	Cross-Site Scripting Abundanceall versionsNo patch available	—	—	Oct 29, 2012
Medium6.1	Cross-Site Scripting Velvetall versionsNo patch available	—	—	Oct 29, 2012
Critical9.8	SQL Injections FireStorm Professional Real Estate Plugin≤2.06.03Update to 2.06.04	—	—	Oct 25, 2012
High7.5	Arbitrary File Read Cimy User Manager<1.4.4Update to 1.4.4	—	—	Oct 24, 2012
Critical9.8	Command Injection UnGallery<2.1.6Update to 2.1.6	—	—	Oct 23, 2012
High7.1	Reflected Cross-Site Scripting White Label CMS<1.5.1Update to 1.5.1	CVE-2012-5387	—	Oct 21, 2012
High7.1	Cross-Site Scripting White Label CMS<1.5.1Update to 1.5.1	CVE-2012-5388	—	Oct 21, 2012
Medium6.1	Reflected Cross-Site Scripting Wordfence Security – Firewall, Malware Scan, and Login Security<3.3.7Update to 3.3.7	—	—	Oct 19, 2012
Medium6.5	Firewall & Malware Scan <= 3.3.6 - Stored Cross-Site Scripting Wordfence Security – Firewall, Malware Scan, and Login Security≤3.3.6Update to 3.3.7	—	—	Oct 19, 2012
Medium6.1	Cross-Site Scripting and Sensitive Information Disclosure Slideshow≤2.1.12Update to 2.1.13	—	—	Oct 17, 2012
Critical9.8	Remote File Inclusion and Full Path Disclosure Social Discussions≤6.1.1Update to 6.1.2	—	—	Oct 17, 2012
Critical9.8	Remote File Inclusion Crayon Syntax Highlighter≤1.13Update to 1.14	—	—	Oct 15, 2012
Medium5.3	Arbitrary File Read Eshop Magic<0.2Update to 0.2	—	—	Oct 12, 2012
Medium6.1	Cross-Site Scripting Avanix - Responsive Business WordPress Theme≤1.2No patch available	—	—	Oct 8, 2012
Medium4.8	Cross-Site Scripting Social Hashtags≤3.0.0No patch available	—	—	Oct 2, 2012
Medium6.1	Reflected Cross-Site Scripting Salutation Responsive WordPress Theme<2.0Update to 2.0	—	—	Oct 2, 2012
High7.2	Multiple Vulnerabilities spider-calendar<1.1.3Update to 1.1.3	—	—	Oct 2, 2012
High7.1	Reflected Cross-Site Scripting Euniceall versionsNo patch available	—	—	Sep 29, 2012
Medium6.1	Cross-Site Scripting Paramountall versionsNo patch available	—	—	Sep 29, 2012
Medium6.1	Cross-Site Scripting TheAgencyall versionsNo patch available	—	—	Sep 29, 2012
Medium6.1	Cross-Site Scripting Briskall versionsNo patch available	—	—	Sep 29, 2012

Medium6.1
Cross-Site Scripting
Brightbox
all versionsNo patch available
a193392a-ef6d-4232-a8c9-c980bd369d5eOct 29, 2012
Medium6.1
Cross-Site Scripting
Corona
all versionsNo patch available
cf2d14ff-d02a-4bed-9604-ff2489d4bef9Oct 29, 2012
High7.1
Cross-Site Scripting
Flashlight
≤2.8.4No patch available
b722bf4e-1e04-4d80-b359-7d43596751a8Oct 29, 2012
Medium6.1
Cross-Site Scripting
Broadscope
all versionsNo patch available
af59102e-f029-4c7d-95ee-16b9dcef4827Oct 29, 2012
Medium6.1
Cross-Site Scripting
Upscale
all versionsNo patch available
afb3e2f8-ba44-48fc-9882-d9bcd39676eeOct 29, 2012
Medium6.1
Cross-Site Scripting
Expose
all versionsNo patch available
76ac20e0-c4d1-40ad-8f15-70aad547f08fOct 29, 2012
Medium6.1
Reflected Cross-Site Scripting
Choices
all versionsNo patch available
7921c896-dca4-460d-90dc-458eb0d82334Oct 29, 2012
Medium6.1
Cross-Site Scripting
Coalition
all versionsNo patch available
6b06667f-cda1-4177-b168-c7d26a0cd815Oct 29, 2012
Medium6.1
Cross-Site Scripting
Eunoia
all versionsNo patch available
69903c2e-749a-4a7d-99a2-b63c26d4170aOct 29, 2012
Medium6.1
Cross-Site Scripting
Abundance
all versionsNo patch available
5294f427-738c-444e-acf6-abc452629f64Oct 29, 2012
Medium6.1
Cross-Site Scripting
Velvet
all versionsNo patch available
5569ec0f-eeb6-433f-bb49-336abae2a29aOct 29, 2012
Critical9.8
SQL Injections
FireStorm Professional Real Estate Plugin
≤2.06.03Update to 2.06.04
854e5d70-f42f-48c4-b1bb-687610f86cfbOct 25, 2012
High7.5
Arbitrary File Read
Cimy User Manager
<1.4.4Update to 1.4.4
469bf5c9-984e-4107-a8a2-da744a78b8b2Oct 24, 2012
Critical9.8
Command Injection
UnGallery
<2.1.6Update to 2.1.6
5875a4c2-a309-41fb-8845-2935511ec6c0Oct 23, 2012
High7.1
Reflected Cross-Site Scripting
White Label CMS
<1.5.1Update to 1.5.1
CVE-2012-5387Oct 21, 2012
High7.1
Cross-Site Scripting
White Label CMS
<1.5.1Update to 1.5.1
CVE-2012-5388Oct 21, 2012
Medium6.1
Reflected Cross-Site Scripting
Wordfence Security – Firewall, Malware Scan, and Login Security
<3.3.7Update to 3.3.7
bdc39e21-f39c-4581-895a-04e352e9b383Oct 19, 2012
Medium6.5
Firewall & Malware Scan <= 3.3.6 - Stored Cross-Site Scripting
Wordfence Security – Firewall, Malware Scan, and Login Security
≤3.3.6Update to 3.3.7
93f9862f-745f-44d5-ac49-f8d2d19b35edOct 19, 2012
Medium6.1
Cross-Site Scripting and Sensitive Information Disclosure
Slideshow
≤2.1.12Update to 2.1.13
25762427-8d31-4fef-8b93-1065d15cd918Oct 17, 2012
Critical9.8
Remote File Inclusion and Full Path Disclosure
Social Discussions
≤6.1.1Update to 6.1.2
f5b28fc2-4551-46dc-baa4-29ff19a1bf77Oct 17, 2012
Critical9.8
Remote File Inclusion
Crayon Syntax Highlighter
≤1.13Update to 1.14
eff47e59-9a2c-424f-b138-47fcf554c06bOct 15, 2012
Medium5.3
Arbitrary File Read
Eshop Magic
<0.2Update to 0.2
a2363a40-b627-44da-af8e-98821685c3eaOct 12, 2012
Medium6.1
Cross-Site Scripting
Avanix - Responsive Business WordPress Theme
≤1.2No patch available
a923c84e-3641-45ec-970e-faea803897bfOct 8, 2012
Medium4.8
Cross-Site Scripting
Social Hashtags
≤3.0.0No patch available
959ece75-b7a6-4729-abe8-1df9398d95f4Oct 2, 2012
Medium6.1
Reflected Cross-Site Scripting
Salutation Responsive WordPress Theme
<2.0Update to 2.0
f88eaf82-e5de-43e2-b998-4a6d33be65acOct 2, 2012
High7.2
Multiple Vulnerabilities
spider-calendar
<1.1.3Update to 1.1.3
22cb2bc4-ddf1-4e23-af1c-4f59ff88e9e1Oct 2, 2012
High7.1
Reflected Cross-Site Scripting
Eunice
all versionsNo patch available
45323807-c347-44ac-bf22-11b4feda02e6Sep 29, 2012
Medium6.1
Cross-Site Scripting
Paramount
all versionsNo patch available
346cc9af-6a1b-444c-9483-94f940cd18adSep 29, 2012
Medium6.1
Cross-Site Scripting
TheAgency
all versionsNo patch available
2ee837fd-a41e-44f2-81e8-258a7d8547bdSep 29, 2012
Medium6.1
Cross-Site Scripting
Brisk
all versionsNo patch available
ebf9760d-b7c2-43c7-bfb0-dde96de3dcb9Sep 29, 2012