VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 1457)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

WordPress Vulnerability Database (page 1457)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Cross-Site Scripting
Daisho≤4.2No patch available
——
Medium6.1Cross-Site Scripting
Blazeall versionsNo patch available
——
High7.1Reflected Cross-Site Scripting
Euniceall versionsNo patch available
——
Medium6.1Cross-Site Scripting
Shapelessall versionsNo patch available
——
Medium6.1Cross-Site Scripting
Explicitall versionsNo patch available
——
Medium6.1Reflected Cross-Site Scripting
Essence<1.1Update to 1.1
——
Medium6.1Cross-Site Scripting
WHOIS≤1.4.2.4No patch available
CVE-2011-5193—
Medium6.1Cross-Site Scripting
MF Gig Calendar≤0.9.4.1Update to 0.9.5
CVE-2012-4242—
High7.5Information Disclosure via Arbitrary File Downloads
simple-download-button-shortcode1.0 – 1.0Update to 1.1
CVE-2012-10016—
Medium6.1Cross-Site Request Forgery to Stored Cross-Site Scripting
WP-TopBar≤4.02Update to 4.03
——
High8.8Cross-Site Request Forgery
DVS Custom Notification≤1.0.1No patch available
CVE-2012-4921—
Medium6.3Missing Authorization Checks on create_post
WordPress<3.4.2Update to 3.4.2
CVE-2012-4421—
Low3.8Missing Authorization Checks
WordPress≤3.4.1Update to 3.4.2
CVE-2012-4422—
Medium6.4Cross-Site Scripting
WordPress≤3.4.1Update to 3.4.2
CVE-2012-3383—
Medium6.1Reflected Cross-Site Scripting
Download Monitor≤3.3.5.8Update to 3.3.5.9
CVE-2012-4768—
Critical9.8Arbitrary File Upload
TDO Mini Forms≤0.13.9No patch available
——
High8.8Missing Authorization Checks
Media File Renamer: Rename Images & Files for SEO (AI-Powered)≤5.2.5Update to 5.2.6
——
High7.1Reflected Cross-Site Scripting
Floating Tweets≤1.0.1No patch available
——
Critical9.8Arbitrary File Upload
Monsters Editor for WP Super Edit≤1.1No patch available
——
Critical9.8Arbitrary File Upload
Rich Widget≤0.2.4No patch available
——
Critical9.8Arbitrary File Upload
sem-wysiwyg≤1.0No patch available
——
Medium6.5Cross-Site Scripting
Kadence Security – Password, Two Factor Authentication, and Brute Force Protection<3.4.4Update to 3.4.4
——
Medium6.1Multiple Cross-Site Scripting
quick-post-widget≤1.9.1No patch available
CVE-2012-4226—
High7.2Cross-Site Scripting
mini-mail-dashboard-widget<1.43Update to 1.43
CVE-2012-2583—
Medium6.1Cross-Site Scripting
ThreeWP Email Reflector<1.16Update to 1.16
CVE-2012-2572—
Medium6.1Cross-Site Scripting
WP SimpleMail≤1.0.6No patch available
CVE-2012-2579—
High7.2Cross-Site Scripting
Postie≤1.4.9Update to 1.4.10
CVE-2012-2580—
High7.5Directory Traversal
Vitamin<1.1.0Update to 1.1.0
CVE-2012-6651—
Medium6.1Reflected Cross-Site Scripting
Backend Localization1.6.1 – 1.6.1Update to 2.0
CVE-2012-10013—
Medium6.1Reflected Cross-Site Scripting
Backend Localization≤2.0Update to 2.0.1
CVE-2012-10014—

Search VulnCrest Radar

Jump to

Are you sure?