Database

WordPress Vulnerability Database (page 1460)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

WordPress Vulnerability Database (page 1460)
Severity	Vulnerability	CVE	Installs	Published
Medium6.1	Cross-Site Scripting Mingle Forum≤1.0.33Update to 1.0.33.2	—	—	May 15, 2012
Medium6.1	Cross-Site Scripting Sharebar≤1.2.1Update to 1.2.2	CVE-2012-6718	—	May 15, 2012
Medium6.1	Cross-Site Scripting Network Publisher≤5.0.1Update to 5.1	—	—	May 15, 2012
High7.1	Cross-Site Scripting WP Forum Server<1.7.5Update to 1.7.5	CVE-2012-6623	—	May 15, 2012
Medium6.1	Cross-Site Scripting EZPZ One Click Backup≤12.03.10No patch available	—	—	May 15, 2012
High7.2	SQL Injection WP Forum Server<1.7.4Update to 1.7.4	CVE-2012-6625	—	May 15, 2012
High7.2	Cross Site Scripting Dynamic Widgets≤1.5.1Update to 1.5.2	—	—	May 15, 2012
Medium6.1	Cross-Site Scripting Newsletter Manager<1.0.2Update to 1.0.2	CVE-2012-6628	—	May 15, 2012
Medium6.1	Cross-Site Scripting WP Statistics – Simple, privacy-friendly Google Analytics alternative≤2.2.4Update to 2.2.5	—	—	May 15, 2012
Medium6.1	Cross-Site Scripting via test_mail.php Newsletter Manager<1.0.2Update to 1.0.2	CVE-2012-6627	—	May 15, 2012
Medium6.1	Unauthenticated Cross-Site Scripting WP Survey And Quiz Tool≤2.9.2Update to 2.9.3	—	—	May 15, 2012
Medium6.1	Cross-Site Scripting Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps)≤2.3Update to 2.3.1	CVE-2012-2913	—	May 15, 2012
Medium6.1	Cross-Site Scripting SoundCloud Is Gold≤2.2Update to 2.2.1	CVE-2012-6624	—	May 15, 2012
Medium6.1	Cross-Site Scripting Sabre<1.2.2Update to 1.2.2	CVE-2012-2916	—	May 15, 2012
Medium6.1	Cross-Site Scripting GD Star Rating<1.9.17Update to 1.9.17	—	—	May 15, 2012
Critical9.8	SQL Injection Sharebar<1.2.2Update to 1.2.2	CVE-2012-6719	—	May 15, 2012
High7.1	Cross-Site Scripting PDF & Print Button Joliprint≤1.3.0Update to 1.3.1	—	—	May 15, 2012
Medium6.1	Authenticated (Admin+) Stored Cross-Site Scripting WP Forum Server≤1.7.3Update to 1.7.4	CVE-2012-6622	—	May 15, 2012
High8.8	Improper Access Control Media File Manager Advanced≤1.1.5No patch available	—	—	May 14, 2012
Medium6.1	Cross-Site Scripting WP-FaceThumb≤0.1Update to 0.2	CVE-2012-2371	—	May 13, 2012
Medium6.1	Cross-Site Scripting 2 Click Social Media Buttons<0.34Update to 0.34	CVE-2012-4273	—	May 11, 2012
Medium6.1	Reflected Cross-Site Scripting Custom Contact Forms<5.1.0.3Update to 5.1.0.3	—	—	May 11, 2012
Medium6.1	Reflected Cross-Site Scripting CataBlog<1.6.3Update to 1.6.3	—	—	May 11, 2012
Medium6.1	Multiple Cross-Site Scripting Kadence Security – Password, Two Factor Authentication, and Brute Force Protection≤3.2.4Update to 3.2.5	CVE-2012-4264	—	May 11, 2012
Medium6.1	2.2.4 - Cross-Site Scripting Bad Behavior<2.2.5Update to 2.0.47 or 2.2.5	CVE-2012-4271	—	May 11, 2012
Medium6.1	Reflected Cross-Site Scripting BulletProof Security<.47.1Update to .47.1	CVE-2012-4268	—	May 11, 2012
High7.2	Cross-Site Scripting Kadence Security – Password, Two Factor Authentication, and Brute Force Protection<3.2.5Update to 3.2.5	CVE-2012-4263	—	May 11, 2012
Medium6.1	Multiple Cross-Site Scripting 2 Click Social Media Buttons≤0.33Update to 0.34	CVE-2012-4272	—	May 11, 2012
Medium6.1	Cross-Site Scripting User Photo≤0.9.5Update to 0.9.5.2	CVE-2012-2920	—	May 9, 2012
Medium6.1	Cross-Site Scripting AJAX Auth – Fast Logins, 2FA, Redirects<3.0.4.1Update to 3.0.5	CVE-2012-4283	—	May 7, 2012

Medium6.1
Cross-Site Scripting
Mingle Forum
≤1.0.33Update to 1.0.33.2
3c1814c7-1ca0-42e6-a819-7e258f34ecacMay 15, 2012
Medium6.1
Cross-Site Scripting
Sharebar
≤1.2.1Update to 1.2.2
CVE-2012-6718May 15, 2012
Medium6.1
Cross-Site Scripting
Network Publisher
≤5.0.1Update to 5.1
49bdd84a-05c0-4c7c-9d12-8a8eec91908dMay 15, 2012
High7.1
Cross-Site Scripting
WP Forum Server
<1.7.5Update to 1.7.5
CVE-2012-6623May 15, 2012
Medium6.1
Cross-Site Scripting
EZPZ One Click Backup
≤12.03.10No patch available
f4acd261-d924-46d5-8aef-49b026cba8caMay 15, 2012
High7.2
SQL Injection
WP Forum Server
<1.7.4Update to 1.7.4
CVE-2012-6625May 15, 2012
High7.2
Cross Site Scripting
Dynamic Widgets
≤1.5.1Update to 1.5.2
d3027edb-770a-43d8-8abe-e9d9a51f4ab3May 15, 2012
Medium6.1
Cross-Site Scripting
Newsletter Manager
<1.0.2Update to 1.0.2
CVE-2012-6628May 15, 2012
Medium6.1
Cross-Site Scripting
WP Statistics – Simple, privacy-friendly Google Analytics alternative
≤2.2.4Update to 2.2.5
f3a4aeb2-3929-4f6b-ac6e-bccc1c3bf0ddMay 15, 2012
Medium6.1
Cross-Site Scripting via test_mail.php
Newsletter Manager
<1.0.2Update to 1.0.2
CVE-2012-6627May 15, 2012
Medium6.1
Unauthenticated Cross-Site Scripting
WP Survey And Quiz Tool
≤2.9.2Update to 2.9.3
9a279832-64d8-4e0b-8eba-b7b89c80069dMay 15, 2012
Medium6.1
Cross-Site Scripting
Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps)
≤2.3Update to 2.3.1
CVE-2012-2913May 15, 2012
Medium6.1
Cross-Site Scripting
SoundCloud Is Gold
≤2.2Update to 2.2.1
CVE-2012-6624May 15, 2012
Medium6.1
Cross-Site Scripting
Sabre
<1.2.2Update to 1.2.2
CVE-2012-2916May 15, 2012
Medium6.1
Cross-Site Scripting
GD Star Rating
<1.9.17Update to 1.9.17
bf852d93-6d56-46a2-aebc-b222b1b73fb1May 15, 2012
Critical9.8
SQL Injection
Sharebar
<1.2.2Update to 1.2.2
CVE-2012-6719May 15, 2012
High7.1
Cross-Site Scripting
PDF & Print Button Joliprint
≤1.3.0Update to 1.3.1
150a6dda-84de-49b1-9a8a-fcc1e0ba73d1May 15, 2012
Medium6.1
Authenticated (Admin+) Stored Cross-Site Scripting
WP Forum Server
≤1.7.3Update to 1.7.4
CVE-2012-6622May 15, 2012
High8.8
Improper Access Control
Media File Manager Advanced
≤1.1.5No patch available
e4e6e410-5778-41f7-a259-daa506bfb161May 14, 2012
Medium6.1
Cross-Site Scripting
WP-FaceThumb
≤0.1Update to 0.2
CVE-2012-2371May 13, 2012
Medium6.1
Cross-Site Scripting
2 Click Social Media Buttons
<0.34Update to 0.34
CVE-2012-4273May 11, 2012
Medium6.1
Reflected Cross-Site Scripting
Custom Contact Forms
<5.1.0.3Update to 5.1.0.3
a5454bc2-0581-45bd-8dbc-5a2819202690May 11, 2012
Medium6.1
Reflected Cross-Site Scripting
CataBlog
<1.6.3Update to 1.6.3
b1d8a9b5-e833-4810-a13a-fd360752e711May 11, 2012
Medium6.1
Multiple Cross-Site Scripting
Kadence Security – Password, Two Factor Authentication, and Brute Force Protection
≤3.2.4Update to 3.2.5
CVE-2012-4264May 11, 2012
Medium6.1
2.2.4 - Cross-Site Scripting
Bad Behavior
<2.2.5Update to 2.0.47 or 2.2.5
CVE-2012-4271May 11, 2012
Medium6.1
Reflected Cross-Site Scripting
BulletProof Security
<.47.1Update to .47.1
CVE-2012-4268May 11, 2012
High7.2
Cross-Site Scripting
Kadence Security – Password, Two Factor Authentication, and Brute Force Protection
<3.2.5Update to 3.2.5
CVE-2012-4263May 11, 2012
Medium6.1
Multiple Cross-Site Scripting
2 Click Social Media Buttons
≤0.33Update to 0.34
CVE-2012-4272May 11, 2012
Medium6.1
Cross-Site Scripting
User Photo
≤0.9.5Update to 0.9.5.2
CVE-2012-2920May 9, 2012
Medium6.1
Cross-Site Scripting
AJAX Auth – Fast Logins, 2FA, Redirects
<3.0.4.1Update to 3.0.5
CVE-2012-4283May 7, 2012