Database

WordPress Vulnerability Database (page 1464)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

WordPress Vulnerability Database (page 1464)
Severity	Vulnerability	CVE	Installs	Published
Medium6.1	Cross-Site Scripting Antisnews≤1.09Update to 1.10	CVE-2011-3857	—	Sep 27, 2011
Medium6.1	Cross-Site Scripting Web Minimalist 200901≤1.1No patch available	CVE-2011-3861	—	Sep 27, 2011
Medium6.1	Cross-Site Scripting News≤0.1Update to 0.2	CVE-2011-3851	—	Sep 27, 2011
Medium6.1	Cross-Site Scripting ZenLite≤4.3Update to 4.4	CVE-2011-3854	—	Sep 27, 2011
High7.1	Cross-Site Scripting Hybrid<0.10Update to 0.10	CVE-2011-3853	—	Sep 27, 2011
Medium6.1	Cross-Site Scripting F8 Lite≤4.2.1Update to 4.2.2	CVE-2011-3855	—	Sep 27, 2011
Medium6.1	Cross-Site Scripting evolve<1.2.7Update to 1.2.7	CVE-2011-3852	—	Sep 27, 2011
Medium6.1	Reflected Cross-Site Scripting RedLine<1.66Update to 1.66	CVE-2011-3863	—	Sep 27, 2011
Critical9.8	SQL Injection Photocrati≤4.0Update to 4.1	CVE-2015-2216	—	Sep 23, 2011
Medium6.1	Cross-Site Scripting WP-RecentComments<2.0.7Update to 2.0.7	CVE-2012-1068	—	Sep 22, 2011
Critical9.8	SQL Injection WP-RecentComments≤2.0.7Update to 2.1	CVE-2012-1067	—	Sep 22, 2011
Critical9.8	Remote File Inclusion AllWebMenus WordPress Menu Plugin≤1.1.3Update to 1.1.4	CVE-2011-3981	—	Sep 19, 2011
Critical9.8	Remote File Inclusion Relocate Upload<0.20Update to 0.20	CVE-2012-1205	—	Sep 19, 2011
Critical9.8	Arbitrary File Upload Global Flash Gallery≤0.15.1Update to 0.15.2	—	—	Sep 8, 2011
Critical9.8	SQL Injection SCORM Cloud For WordPress<1.0.7Update to 1.0.7	CVE-2011-5216	—	Sep 7, 2011
High8.1	Simple Events <= 1.7.f - SQL Injection via eventid Eventify – Events, Lists and Calendar≤1.7.fUpdate to 1.7.g	—	—	Sep 7, 2011
Critical9.8	SQL Injection SearchAutocomplete<1.0.9Update to 1.0.9	—	—	Sep 1, 2011
Critical9.8	Remote File Download TimThumb<2.0Update to 2.0	CVE-2011-4106	—	Aug 1, 2011
Medium6.1	Cross-Site Scripting FV Flowplayer Video Player≤1.2.11Update to 1.2.12	CVE-2011-4568	—	Jul 22, 2011
Medium6.5	Reflected Cross-Site Scripting eShop<6.2.9Update to 6.2.9	—	—	Jul 20, 2011
High8.8	SQL Injection Social Slider<7.4.2Update to 7.4.2	CVE-2011-5286	—	Jul 20, 2011
Critical9.8	Code Injection WordPress Share Buttons Plugin – AddThis<2.2.0Update to 2.2.0	—	—	Jun 21, 2011
Medium5.3	Username Enumeration WordPress≤3.1.2Update to 3.1.3	CVE-2011-3126	—	May 25, 2011
High8.8	Arbitrary File Upload WordPress≤3.1.2Update to 3.1.3	CVE-2011-3129	—	May 25, 2011
High8.8	SQL Injection WordPress≤3.1.2Update to 3.1.3	CVE-2011-3130	—	May 25, 2011
Medium6.3	Security Hardening WordPress≤3.1.2Update to 3.1.3	CVE-2011-3125	—	May 25, 2011
Medium6.3	Media Related Security Issue WordPress≤3.1.2Update to 3.2	CVE-2011-3122	—	May 25, 2011
Medium4.3	Sensitive Information Disclosure WordPress≤3.1.2Update to 3.1.3	CVE-2011-3128	—	May 25, 2011
High7.1	Clickjacking WordPress≤3.1.2Update to 3.1.3	CVE-2011-3127	—	May 25, 2011
Critical9.8	Unauthenticated Remote Code Execution is-human≤1.4.2No patch available	CVE-2011-10033	—	May 16, 2011

Medium6.1
Cross-Site Scripting
Antisnews
≤1.09Update to 1.10
CVE-2011-3857Sep 27, 2011
Medium6.1
Cross-Site Scripting
Web Minimalist 200901
≤1.1No patch available
CVE-2011-3861Sep 27, 2011
Medium6.1
Cross-Site Scripting
News
≤0.1Update to 0.2
CVE-2011-3851Sep 27, 2011
Medium6.1
Cross-Site Scripting
ZenLite
≤4.3Update to 4.4
CVE-2011-3854Sep 27, 2011
High7.1
Cross-Site Scripting
Hybrid
<0.10Update to 0.10
CVE-2011-3853Sep 27, 2011
Medium6.1
Cross-Site Scripting
F8 Lite
≤4.2.1Update to 4.2.2
CVE-2011-3855Sep 27, 2011
Medium6.1
Cross-Site Scripting
evolve
<1.2.7Update to 1.2.7
CVE-2011-3852Sep 27, 2011
Medium6.1
Reflected Cross-Site Scripting
RedLine
<1.66Update to 1.66
CVE-2011-3863Sep 27, 2011
Critical9.8
SQL Injection
Photocrati
≤4.0Update to 4.1
CVE-2015-2216Sep 23, 2011
Medium6.1
Cross-Site Scripting
WP-RecentComments
<2.0.7Update to 2.0.7
CVE-2012-1068Sep 22, 2011
Critical9.8
SQL Injection
WP-RecentComments
≤2.0.7Update to 2.1
CVE-2012-1067Sep 22, 2011
Critical9.8
Remote File Inclusion
AllWebMenus WordPress Menu Plugin
≤1.1.3Update to 1.1.4
CVE-2011-3981Sep 19, 2011
Critical9.8
Remote File Inclusion
Relocate Upload
<0.20Update to 0.20
CVE-2012-1205Sep 19, 2011
Critical9.8
Arbitrary File Upload
Global Flash Gallery
≤0.15.1Update to 0.15.2
4624d197-db90-41ee-a3d5-a83a0dbf6b7cSep 8, 2011
Critical9.8
SQL Injection
SCORM Cloud For WordPress
<1.0.7Update to 1.0.7
CVE-2011-5216Sep 7, 2011
High8.1
Simple Events <= 1.7.f - SQL Injection via eventid
Eventify – Events, Lists and Calendar
≤1.7.fUpdate to 1.7.g
65b8e9b3-6078-4a78-86f9-7251c1978199Sep 7, 2011
Critical9.8
SQL Injection
SearchAutocomplete
<1.0.9Update to 1.0.9
7867d651-dd15-4d91-a7ca-65f49cb94b65Sep 1, 2011
Critical9.8
Remote File Download
TimThumb
<2.0Update to 2.0
CVE-2011-4106Aug 1, 2011
Medium6.1
Cross-Site Scripting
FV Flowplayer Video Player
≤1.2.11Update to 1.2.12
CVE-2011-4568Jul 22, 2011
Medium6.5
Reflected Cross-Site Scripting
eShop
<6.2.9Update to 6.2.9
4838c2ad-87e0-4140-81bb-7d39d7a704dcJul 20, 2011
High8.8
SQL Injection
Social Slider
<7.4.2Update to 7.4.2
CVE-2011-5286Jul 20, 2011
Critical9.8
Code Injection
WordPress Share Buttons Plugin – AddThis
<2.2.0Update to 2.2.0
c466c0ff-d84b-4536-bea7-ada2a80aad15Jun 21, 2011
Medium5.3
Username Enumeration
WordPress
≤3.1.2Update to 3.1.3
CVE-2011-3126May 25, 2011
High8.8
Arbitrary File Upload
WordPress
≤3.1.2Update to 3.1.3
CVE-2011-3129May 25, 2011
High8.8
SQL Injection
WordPress
≤3.1.2Update to 3.1.3
CVE-2011-3130May 25, 2011
Medium6.3
Security Hardening
WordPress
≤3.1.2Update to 3.1.3
CVE-2011-3125May 25, 2011
Medium6.3
Media Related Security Issue
WordPress
≤3.1.2Update to 3.2
CVE-2011-3122May 25, 2011
Medium4.3
Sensitive Information Disclosure
WordPress
≤3.1.2Update to 3.1.3
CVE-2011-3128May 25, 2011
High7.1
Clickjacking
WordPress
≤3.1.2Update to 3.1.3
CVE-2011-3127May 25, 2011
Critical9.8
Unauthenticated Remote Code Execution
is-human
≤1.4.2No patch available
CVE-2011-10033May 16, 2011