Database
WordPress Vulnerability Database (page 1469)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
| Severity | Vulnerability | CVE | Installs | Published |
|---|---|---|---|---|
| Critical9.8 | 1.4.3 - SQL Injection | CVE-2008-0520 | — | |
| Critical9.1 | SQL injection | CVE-2008-0491 | — | |
| Critical9.8 | SQL Injection | CVE-2008-0507 | — | |
| Critical9.8 | SQL Injection | CVE-2008-0490 | — | |
| Medium6.1 | Cross-Site Request Forgery to Cross-Site Scripting | CVE-2008-0508 | — | |
| Critical9.8 | Remote SQL Injection | CVE-2008-0388 | — | |
| High7.3 | Authorization Bypass | CVE-2008-4616 | — | |
| High7.5 | CAPTCHA Bypass | CVE-2008-7216 | — | |
| Medium6.1 | Authenticated (Admin+) Stored Cross-Site Scripting | CVE-2008-0197 | — | |
| Critical9.8 | Arbitrary File Upload | CVE-2008-0222 | — | |
| High8.8 | Cross-Site Request Forgery | CVE-2008-0198 | — | |
| Medium6.1 | Reflected Cross-Site Scripting | CVE-2008-0204 | — | |
| Critical9.8 | 2.3.1 - Authorization Bypass | CVE-2007-6013 | — | |
| Medium5.3 | Full Path Disclosure | CVE-2008-0191 | — | |
| High7.5 | Directory Traversal | CVE-2007-6369 | — | |
| High7.2 | Cross-Site Scripting | CVE-2008-0203 | — | |
| High7.1 | Cross-Site Scripting | CVE-2008-0206 | — | |
| High8.8 | Cross-Site Request Forgery | CVE-2008-0205 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2007-6677 | — | |
| Critical9.8 | Remote File Inclusion | CVE-2007-5800 | — | |
| Medium6.4 | Cross-Site Scripting | CVE-2007-5710 | — | |
| High8.8 | Cross-Site Request Forgery | CVE-2007-5229 | — | |
| Medium6.4 | Cross-Site Scripting | CVE-2007-5106 | — | |
| Medium5.3 | Restriction Bypass | CVE-2008-2146 | — | |
| Medium6.5 | Improper Authorization Checks | CVE-2008-0664 | — | |
| High8.8 | Remote Code Execution | CVE-2008-5695 | — | |
| Critical9.8 | SQL Injection | CVE-2007-4894 | — | |
| Critical9.8 | SQL Injection | CVE-2007-6318 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2007-4544 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2007-4480 | — |
- Critical9.81.4.3 - SQL Injection
WassUp Real Time Analytics
1.4 – 1.4.3Update to 1.4.4
- Critical9.1SQL injection
fgallery
≤2.4.1Update to 2.4.2
- Critical9.8SQL Injection
AdServe
≤0.2Update to 0.3
- Critical9.8SQL Injection
wp-cal
≤0.3No patch available
- Medium6.1Cross-Site Request Forgery to Cross-Site Scripting
Dean's Permalinks Migration
≤1.0No patch available
- Critical9.8Remote SQL Injection
wp-forum
≤1.7.4Update to 1.7.7
- High7.3Authorization Bypass
SpamBam
≤2.1No patch available
- High7.5CAPTCHA Bypass
Peter's Math Anti-Spam
≤0.1.6Update to 1.0.0
- Medium6.1Authenticated (Admin+) Stored Cross-Site Scripting
WP-ContactForm
≤1.5No patch available
- Critical9.8Arbitrary File Upload
wp-FileManager
≤1.2Update to 1.3
- High8.8Cross-Site Request Forgery
WP-ContactForm
≤1.5.1No patch available
- Medium6.1Reflected Cross-Site Scripting
Math Comment Spam Protection
≤2.1Update to 2.2
- Critical9.82.3.1 - Authorization Bypass
WordPress
1.5 – 2.3.1Update to 2.3.2
- Medium5.3Full Path Disclosure
WordPress
≤2.4Update to 2.5
- High7.5Directory Traversal
PictPress
≤0.91Update to 0.99
- High7.2Cross-Site Scripting
Cryptographp
≤1.2No patch available
- High7.1Cross-Site Scripting
Captcha!
≤2.5dUpdate to 2.6
- High8.8Cross-Site Request Forgery
Math Comment Spam Protection
≤2.1Update to 2.2
- Medium6.1Cross-Site Scripting
Peter's Random Anti-Spam Image
≤1.0.6No patch available
- Critical9.8Remote File Inclusion
BackUpWordPress
<0.4.3Update to 0.4.3
- Medium6.4Cross-Site Scripting
WordPress
≤2.3Update to 2.3.1
- High8.8Cross-Site Request Forgery
feedburner-feedsmith
≤2.2Update to 2.3
- Medium6.4Cross-Site Scripting
WordPress
≤2.0.3Update to 2.0.4
- Medium5.3Restriction Bypass
WordPress
≤2.2.2Update to 2.2.3
- Medium6.5Improper Authorization Checks
WordPress
≤2.3.2Update to 2.3.3
- High8.8Remote Code Execution
WordPress
≤2.3.2Update to 2.3.3
- Critical9.8SQL Injection
WordPress
<2.2.3Update to 2.2.3
- Critical9.8SQL Injection
WordPress
≤2.3.1Update to 2.3.2
- Medium6.1Cross-Site Scripting
WordPress MU
≤1.0Update to 1.1.1
- Medium6.1Cross-Site Scripting
Sirius
≤1.0No patch available