Database

WordPress Vulnerability Database (page 1458)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

WordPress Vulnerability Database (page 1458)
Severity	Vulnerability	CVE	Installs	Published
Medium4.3	Cross-Site Request Forgery BestWebSoft's Twitter≤2.14Update to 2.15	CVE-2012-10015	—	Jul 24, 2012
Medium4.3	Cross-Site Request Forgery Portfolio Plugin≤2.04Update to 2.05	CVE-2012-10017	—	Jul 24, 2012
Medium6.1	Cross-Site Scripting Count per Day<3.2.3Update to 3.2.3	CVE-2012-6714	—	Jul 20, 2012
Medium5.3	Email Spoofing boldy<2.0Update to 2.0	—	—	Jul 15, 2012
Critical9.8	Directory Traversal A Page Flip Book<3.0Update to 3.0	CVE-2012-6652	—	Jul 10, 2012
Medium6.1	Reflected Cross-Site Scripting socialfit≤1.2.2No patch available	CVE-2012-20005	—	Jul 6, 2012
Medium6.1	Cross-Site Scripting Job Manager≤0.7.18Update to 0.7.19	CVE-2012-6713	—	Jun 28, 2012
Medium6.1	Cross-Site Request Forgery WP CleanFix≤3.0.1Update to 3.0.2	CVE-2013-2108	—	Jun 28, 2012
Medium4.3	Sensitive Information Disclosure WordPress<3.3.3Update to 3.3.3	CVE-2012-6635	—	Jun 27, 2012
Medium5.3	Sensitive Information Disclosure WordPress<3.3.3Update to 3.3.3	CVE-2012-6634	—	Jun 27, 2012
Medium6.5	Cross-Site Scripting WordPress<3.3.3Update to 3.3.3	CVE-2012-6633	—	Jun 27, 2012
Medium4.3	Information Disclosure WordPress≤3.4Update to 3.4.1	CVE-2012-3385	—	Jun 27, 2012
High8.8	Cross-Site Request Forgery WordPress≤3.4Update to 3.4.1	CVE-2012-3384	—	Jun 27, 2012
Critical9.8	Arbitrary File Upload Fancy Gallery - Wordpress plugin \| Galleries≤1.2.4No patch available	—	—	Jun 23, 2012
Critical9.8	Arbitrary File Upload AJAX Multi Upload≤1.1Update to 2.0	—	—	Jun 23, 2012
Critical9.8	Arbitrary File Upload FlipBook≤1.0No patch available	—	—	Jun 22, 2012
Low3.7	Informational < 6.8 - Weak Hashing Algorithm WordPress<6.8Update to 6.8	CVE-2012-6707	—	Jun 20, 2012
Critical9.8	SQL Injection Quick Chat<4.00Update to 4.00	CVE-2018-12534	—	Jun 18, 2012
Medium5.3	Directory Traversal Wp-ImageZoom<1.0.5Update to 1.0.5	—	—	Jun 18, 2012
Critical9.8	Arbitrary File Upload lim4wp≤1.1.1No patch available	—	—	Jun 18, 2012
Critical9.8	Arbitrary File Upload LB Mixed Slideshow for WordPress≤1.0No patch available	—	—	Jun 18, 2012
Critical9.8	Arbitrary File Upload Famousall versionsNo patch available	—	—	Jun 17, 2012
Medium6.1	Cross-Site Scripting Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery≤1.9.7Update to 1.9.8	—	—	Jun 14, 2012
Critical9.8	Arbitrary File Upload Evarisk≤5.1.5.4Update to 5.1.5.5	—	—	Jun 14, 2012
Critical9.8	Arbitrary File Upload Annonces≤1.2.0.1Update to 1.2.0.2	—	—	Jun 14, 2012
Critical9.8	Arbitrary File Upload Invit0r≤0.22No patch available	—	—	Jun 14, 2012
Critical9.8	Arbitrary File Upload Resume Submissions & Job Postings<2.5.2Update to 2.5.2	—	—	Jun 13, 2012
Critical9.8	Arbitrary File Upload Webcam Video Conference<4.51Update to 4.51	—	—	Jun 12, 2012
Critical9.8	Arbitrary File Upload Contus Video Gallery≤1.3No patch available	—	—	Jun 12, 2012
Critical9.8	Arbitrary File Upload HD FLV PLayer≤1.7Update to 1.8	CVE-2012-10011	—	Jun 12, 2012

Medium4.3
Cross-Site Request Forgery
BestWebSoft's Twitter
≤2.14Update to 2.15
CVE-2012-10015Jul 24, 2012
Medium4.3
Cross-Site Request Forgery
Portfolio Plugin
≤2.04Update to 2.05
CVE-2012-10017Jul 24, 2012
Medium6.1
Cross-Site Scripting
Count per Day
<3.2.3Update to 3.2.3
CVE-2012-6714Jul 20, 2012
Medium5.3
Email Spoofing
boldy
<2.0Update to 2.0
07bccf56-99b2-42e6-93ab-606af65e6cacJul 15, 2012
Critical9.8
Directory Traversal
A Page Flip Book
<3.0Update to 3.0
CVE-2012-6652Jul 10, 2012
Medium6.1
Reflected Cross-Site Scripting
socialfit
≤1.2.2No patch available
CVE-2012-20005Jul 6, 2012
Medium6.1
Cross-Site Scripting
Job Manager
≤0.7.18Update to 0.7.19
CVE-2012-6713Jun 28, 2012
Medium6.1
Cross-Site Request Forgery
WP CleanFix
≤3.0.1Update to 3.0.2
CVE-2013-2108Jun 28, 2012
Medium4.3
Sensitive Information Disclosure
WordPress
<3.3.3Update to 3.3.3
CVE-2012-6635Jun 27, 2012
Medium5.3
Sensitive Information Disclosure
WordPress
<3.3.3Update to 3.3.3
CVE-2012-6634Jun 27, 2012
Medium6.5
Cross-Site Scripting
WordPress
<3.3.3Update to 3.3.3
CVE-2012-6633Jun 27, 2012
Medium4.3
Information Disclosure
WordPress
≤3.4Update to 3.4.1
CVE-2012-3385Jun 27, 2012
High8.8
Cross-Site Request Forgery
WordPress
≤3.4Update to 3.4.1
CVE-2012-3384Jun 27, 2012
Critical9.8
Arbitrary File Upload
Fancy Gallery - Wordpress plugin | Galleries
≤1.2.4No patch available
25627b5c-958c-45ad-8450-8dfccdfdac31Jun 23, 2012
Critical9.8
Arbitrary File Upload
AJAX Multi Upload
≤1.1Update to 2.0
8f20734d-4105-401b-992a-b47d049f70f4Jun 23, 2012
Critical9.8
Arbitrary File Upload
FlipBook
≤1.0No patch available
589fa6f2-fa60-4bdc-9692-50d5591ceb93Jun 22, 2012
Low3.7
Informational < 6.8 - Weak Hashing Algorithm
WordPress
<6.8Update to 6.8
CVE-2012-6707Jun 20, 2012
Critical9.8
SQL Injection
Quick Chat
<4.00Update to 4.00
CVE-2018-12534Jun 18, 2012
Medium5.3
Directory Traversal
Wp-ImageZoom
<1.0.5Update to 1.0.5
eea99e1e-63c9-4021-80a0-1ed732b58ca9Jun 18, 2012
Critical9.8
Arbitrary File Upload
lim4wp
≤1.1.1No patch available
fca11e5b-2b6c-42f0-baf3-4ee023535f83Jun 18, 2012
Critical9.8
Arbitrary File Upload
LB Mixed Slideshow for WordPress
≤1.0No patch available
18557f4a-05b2-4cb4-afef-19c5c63c37a4Jun 18, 2012
Critical9.8
Arbitrary File Upload
Famous
all versionsNo patch available
a25528b1-28e0-4ac7-a7ab-2568b8349990Jun 17, 2012
Medium6.1
Cross-Site Scripting
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery
≤1.9.7Update to 1.9.8
4ecf04a7-1f3c-41d6-a86b-282f020de088Jun 14, 2012
Critical9.8
Arbitrary File Upload
Evarisk
≤5.1.5.4Update to 5.1.5.5
aff4f695-3c3b-48ee-8de1-674b588f332fJun 14, 2012
Critical9.8
Arbitrary File Upload
Annonces
≤1.2.0.1Update to 1.2.0.2
f821e1e2-9114-4b24-bd87-18ab49aa446eJun 14, 2012
Critical9.8
Arbitrary File Upload
Invit0r
≤0.22No patch available
66a6569b-88ec-42d8-8396-6e62f1c51b24Jun 14, 2012
Critical9.8
Arbitrary File Upload
Resume Submissions & Job Postings
<2.5.2Update to 2.5.2
50537e01-834e-4247-a80f-daa114eedcf1Jun 13, 2012
Critical9.8
Arbitrary File Upload
Webcam Video Conference
<4.51Update to 4.51
6a4d5a40-2ec0-468e-bafb-a713629f6006Jun 12, 2012
Critical9.8
Arbitrary File Upload
Contus Video Gallery
≤1.3No patch available
6b443610-416c-41d6-9449-9e20f719af06Jun 12, 2012
Critical9.8
Arbitrary File Upload
HD FLV PLayer
≤1.7Update to 1.8
CVE-2012-10011Jun 12, 2012