Database

WordPress Vulnerability Database (page 1461)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

WordPress Vulnerability Database (page 1461)
Severity	Vulnerability	CVE	Installs	Published
Medium6.1	Reflected Cross-Site Scripting Redirection<2.2.12Update to 2.2.12	CVE-2012-6717	—	May 4, 2012
High8.3	Cross-Site Scripting WPsc MijnPress≤0.0.1No patch available	—	—	Apr 30, 2012
Critical9.8	Remote Code Execution via Shortcodes Wootique≤1.3.1Update to 1.3.2	—	—	Apr 28, 2012
Medium6.1	Cross-Site Scripting zingiri-web-shop<2.4.2Update to 2.4.2	CVE-2012-6506	—	Apr 26, 2012
Medium5.3	Sensitive Information Disclosure ShareYourCart<1.7.1Update to 1.7.1	CVE-2012-4332	—	Apr 24, 2012
Medium6.1	Multiple Cross-Site Scripting Organizer≤1.2.1No patch available	CVE-2012-6511	—	Apr 23, 2012
High7.2	Cross-Site Scripting WordPress≤3.5.1Update to 3.5.2	CVE-2012-2399	—	Apr 21, 2012
Medium5.4	Cross-Site Scripting WordPress≤3.3.1Update to 3.3.2	CVE-2012-2404	—	Apr 21, 2012
Medium6.5	Same Origin Policy Bypass WordPress<3.3.2Update to 3.3.2	CVE-2012-2401	—	Apr 20, 2012
Medium5.4	Authorization Bypass WordPress≤3.3.1Update to 3.3.2	CVE-2012-2402	—	Apr 20, 2012
Medium6.4	Cross-Site Scripting WordPress≤3.3.1Update to 3.3.2	CVE-2012-2403	—	Apr 20, 2012
Medium5.4	Cross-Site Scripting WordPress≤3.3.1Update to 3.3.2	—	—	Apr 20, 2012
High7.2	Cross-Site Scripting WordPress≤3.3.1Update to 3.3.2	CVE-2012-2400	—	Apr 20, 2012
Critical9.8	Multiple Vulnerabilities zingiri-web-shop<2.4.0Update to 2.4.0	CVE-2012-4033	—	Apr 18, 2012
High7.5	Sensitive Information Disclosure Support Tickets Center≤3.0.3No patch available	—	—	Apr 16, 2012
High7.5	Path Disclosure Organizer≤1.2.1No patch available	CVE-2012-6512	—	Apr 14, 2012
High7.1	Cross-Site Scripting Timely All-in-One Events Calendar<1.6Update to 1.6	CVE-2012-1835	—	Apr 11, 2012
Critical9.8	Arbitrary File Upload WP Marketplace – Complete Shopping Cart / eCommerce Solution<1.2.2Update to 1.2.2	—	—	Apr 8, 2012
Critical9.8	Arbitrary File Upload Front-end Editor<2.3Update to 2.3	CVE-2012-10019	—	Apr 7, 2012
Medium6.1	Reflected Cross-Site Scripting Uploadify Integration≤0.9.7No patch available	—	—	Apr 6, 2012
Critical9.8	SQL Injection TagGator<1.33Update to 1.33	—	—	Apr 5, 2012
High7.2	Arbitrary File Upload AWP Classifieds<2.0Update to 2.0	CVE-2012-4874	—	Apr 3, 2012
Critical9.8	Arbitrary File Upload Dean's FCKEditor≤1.0.0No patch available	—	—	Mar 28, 2012
Medium6.1	Cross-Site Scripting WordPress Integrator≤1.32No patch available	CVE-2012-5913	—	Mar 28, 2012
Critical9.8	1.5-1.5.4 - SQL Injection BuddyPress1.5 – 1.5.4Update to 1.5.5	CVE-2012-2109	—	Mar 27, 2012
High7.1	Cross-Site Scripting Register Plus Redux≤4.3No patch available	—	—	Mar 27, 2012
Medium6.1	Cross-Site Scripting CMS Tree Page View – Reorder Pages with a Drag-and-Drop Tree<0.8.9Update to 0.8.9	CVE-2012-1834	—	Mar 26, 2012
Critical9.8	Arbitrary File Upload MoneyMastersall versionsNo patch available	—	—	Mar 26, 2012
High8.3	Server Side Request Forgery to Cross-Site Scirpting Mapplic Lite<1.0.1Update to 1.0.1	CVE-2012-10018	—	Mar 23, 2012
Medium6.1	Reflected Cross-Site Scripting IFrame Admin Pages≤0.1No patch available	—	—	Mar 15, 2012

Medium6.1
Reflected Cross-Site Scripting
Redirection
<2.2.12Update to 2.2.12
CVE-2012-6717May 4, 2012
High8.3
Cross-Site Scripting
WPsc MijnPress
≤0.0.1No patch available
83bd221e-7d01-4cba-8577-ce0a69e4a75cApr 30, 2012
Critical9.8
Remote Code Execution via Shortcodes
Wootique
≤1.3.1Update to 1.3.2
0728e7ac-2091-41de-90a0-e231c4b99ab0Apr 28, 2012
Medium6.1
Cross-Site Scripting
zingiri-web-shop
<2.4.2Update to 2.4.2
CVE-2012-6506Apr 26, 2012
Medium5.3
Sensitive Information Disclosure
ShareYourCart
<1.7.1Update to 1.7.1
CVE-2012-4332Apr 24, 2012
Medium6.1
Multiple Cross-Site Scripting
Organizer
≤1.2.1No patch available
CVE-2012-6511Apr 23, 2012
High7.2
Cross-Site Scripting
WordPress
≤3.5.1Update to 3.5.2
CVE-2012-2399Apr 21, 2012
Medium5.4
Cross-Site Scripting
WordPress
≤3.3.1Update to 3.3.2
CVE-2012-2404Apr 21, 2012
Medium6.5
Same Origin Policy Bypass
WordPress
<3.3.2Update to 3.3.2
CVE-2012-2401Apr 20, 2012
Medium5.4
Authorization Bypass
WordPress
≤3.3.1Update to 3.3.2
CVE-2012-2402Apr 20, 2012
Medium6.4
Cross-Site Scripting
WordPress
≤3.3.1Update to 3.3.2
CVE-2012-2403Apr 20, 2012
Medium5.4
Cross-Site Scripting
WordPress
≤3.3.1Update to 3.3.2
87333eee-36ae-4272-b300-7352eb133745Apr 20, 2012
High7.2
Cross-Site Scripting
WordPress
≤3.3.1Update to 3.3.2
CVE-2012-2400Apr 20, 2012
Critical9.8
Multiple Vulnerabilities
zingiri-web-shop
<2.4.0Update to 2.4.0
CVE-2012-4033Apr 18, 2012
High7.5
Sensitive Information Disclosure
Support Tickets Center
≤3.0.3No patch available
f004c401-6b71-413c-bbbd-229b6ddfffe4Apr 16, 2012
High7.5
Path Disclosure
Organizer
≤1.2.1No patch available
CVE-2012-6512Apr 14, 2012
High7.1
Cross-Site Scripting
Timely All-in-One Events Calendar
<1.6Update to 1.6
CVE-2012-1835Apr 11, 2012
Critical9.8
Arbitrary File Upload
WP Marketplace – Complete Shopping Cart / eCommerce Solution
<1.2.2Update to 1.2.2
d257d0e0-7e42-49d5-83c6-f5c44f2e15fcApr 8, 2012
Critical9.8
Arbitrary File Upload
Front-end Editor
<2.3Update to 2.3
CVE-2012-10019Apr 7, 2012
Medium6.1
Reflected Cross-Site Scripting
Uploadify Integration
≤0.9.7No patch available
e8fa1f97-72f6-4e84-bee4-0d3f7e16eb96Apr 6, 2012
Critical9.8
SQL Injection
TagGator
<1.33Update to 1.33
21e4b1fe-993b-4898-a523-e0a858c30a38Apr 5, 2012
High7.2
Arbitrary File Upload
AWP Classifieds
<2.0Update to 2.0
CVE-2012-4874Apr 3, 2012
Critical9.8
Arbitrary File Upload
Dean's FCKEditor
≤1.0.0No patch available
b4080bb7-9197-4c93-bcb1-cf7b5833771aMar 28, 2012
Medium6.1
Cross-Site Scripting
WordPress Integrator
≤1.32No patch available
CVE-2012-5913Mar 28, 2012
Critical9.8
1.5-1.5.4 - SQL Injection
BuddyPress
1.5 – 1.5.4Update to 1.5.5
CVE-2012-2109Mar 27, 2012
High7.1
Cross-Site Scripting
Register Plus Redux
≤4.3No patch available
3fc5e9b3-a121-40f0-a7e8-32979254f52eMar 27, 2012
Medium6.1
Cross-Site Scripting
CMS Tree Page View – Reorder Pages with a Drag-and-Drop Tree
<0.8.9Update to 0.8.9
CVE-2012-1834Mar 26, 2012
Critical9.8
Arbitrary File Upload
MoneyMasters
all versionsNo patch available
978d1747-fbcf-4c08-9563-49041f225120Mar 26, 2012
High8.3
Server Side Request Forgery to Cross-Site Scirpting
Mapplic Lite
<1.0.1Update to 1.0.1
CVE-2012-10018Mar 23, 2012
Medium6.1
Reflected Cross-Site Scripting
IFrame Admin Pages
≤0.1No patch available
8a48f82a-761b-4b7a-a51e-0f9c780e0306Mar 15, 2012