Database
WordPress Vulnerability Database (page 1465)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
| Severity | Vulnerability | CVE | Installs | Published |
|---|---|---|---|---|
| Critical9.8 | SQL Injection | — | — | |
| Medium4.3 | Incorrect Authorization for Contributor-level users | CVE-2011-1762 | — | |
| Medium6.3 | Incorrect Authorization Checks | CVE-2011-5270 | — | |
| Medium6.1 | Cross-Site Scripting | — | — | |
| Medium6.1 | Cross-Site Scripting | — | — | |
| Medium6.4 | Cross-Site Scripting | CVE-2011-4956 | — | |
| High7.5 | Denial of Service | CVE-2011-4957 | — | |
| High7.5 | Path Traversal | CVE-2011-1669 | — | |
| Critical9.8 | Remote File Inclusion | CVE-2011-4342 | — | |
| Medium6.1 | Multiple Cross-Site Scripting | CVE-2011-5304 | — | |
| High8.8 | Multiple Cross-Site Request Forgery | CVE-2011-0759 | — | |
| High7.1 | Cross-Site Request Forgery | CVE-2011-0760 | — | |
| High7.5 | Directory Traversal | CVE-2011-5208 | — | |
| High7.1 | Cross-Site Scripting | — | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2011-5307 | — | |
| Medium6.1 | Cross-Site Scripting | — | — | |
| Medium5.3 | Full Path Disclosure | — | — | |
| Critical9.8 | SQL Injection | CVE-2011-1047 | — | |
| Critical9.8 | Arbitrary File Upload | CVE-2011-10041 | — | |
| High8.8 | Arbitrary File Upload | CVE-2013-1916 | — | |
| Critical9.8 | SQL Injection | CVE-2011-5308 | — | |
| Medium4.3 | Improper Authorization to Information Disclosure | CVE-2011-0701 | — | |
| High7.5 | Sensitive Information Disclosure | CVE-2011-3818 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2011-0740 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2011-0641 | — | |
| Medium5.4 | Missing Authorization | CVE-2010-5296 | — | |
| Medium6.4 | Cross-Site Scripting | CVE-2010-4536 | — | |
| High7.1 | Cross-Site Scripting | CVE-2010-4277 | — | |
| Medium5.3 | CAPTCHA Bypass | — | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2010-4747 | — |
- Critical9.8SQL Injection
Sermon Browser
<0.43.6Update to 0.43.6
- Medium4.3Incorrect Authorization for Contributor-level users
WordPress
≤3.1.1Update to 3.1.2
- Medium6.3Incorrect Authorization Checks
WordPress
<3.0.6Update to 3.0.6
- Medium6.1Cross-Site Scripting
Sermon Browser
<0.43.6Update to 0.43.6
- Medium6.1Cross-Site Scripting
SocialGrid
≤2.4No patch available
- Medium6.4Cross-Site Scripting
WordPress
≤3.1Update to 3.1.1
- High7.5Denial of Service
WordPress
<3.1.1Update to 3.1.1
- High7.5Path Traversal
WP Custom Pages
≤0.5.0.1No patch available
- Critical9.8Remote File Inclusion
BackWPup – WordPress Backup & Restore Plugin
≤1.7.1Update to 1.7.2
- Medium6.1Multiple Cross-Site Scripting
SodaHead Polls
<2.0.4Update to 2.0.4
- High8.8Multiple Cross-Site Request Forgery
WP-reCAPTCHA
≤2.9.8.2Update to 3.0
- High7.1Cross-Site Request Forgery
WP Related Posts
<1.1Update to 1.1
- High7.5Directory Traversal
BackWPup – WordPress Backup & Restore Plugin
<1.4.1Update to 1.4.1
- High7.1Cross-Site Scripting
SimpleDark
≤1.2.11No patch available
- Medium6.1Cross-Site Scripting
photosmash-galleries
<1.0.5Update to 1.0.5
- Medium6.1Cross-Site Scripting
GD Star Rating
≤1.9.22No patch available
- Medium5.3Full Path Disclosure
Starbox Voting
≤2.0.4No patch available
- Critical9.8SQL Injection
WP Forum Server
≤1.6.5Update to 1.6.6
- Critical9.8Arbitrary File Upload
Uploadify
≤1.0No patch available
- High8.8Arbitrary File Upload
User Photo
≤0.9.4Update to 0.9.5
- Critical9.8SQL Injection
CDN Vote
<0.4.2Update to 0.4.2
- Medium4.3Improper Authorization to Information Disclosure
WordPress
≤3.0.4Update to 3.0.5
- High7.5Sensitive Information Disclosure
WordPress
≤3.0.4Update to 3.0 or 3.0.5
- Medium6.1Cross-Site Scripting
RSS Feed Reader
≤0.1No patch available
- Medium6.1Cross-Site Scripting
StatPressCN
≤1.9.0Update to 1.9.1
- Medium5.4Missing Authorization
WordPress
<3.0.2Update to 3.0.2
- Medium6.4Cross-Site Scripting
WordPress
≤3.0.3Update to 3.0.4
- High7.1Cross-Site Scripting
Embedded Video
≤4.1No patch available
- Medium5.3CAPTCHA Bypass
cformsII
≤14.10.1Update to 14.11
- Medium6.1Cross-Site Scripting
WordPress Processing Embed
≤0.5.1No patch available