Database
WordPress Vulnerability Database (page 1473)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
| Severity | Vulnerability | CVE | Installs | Published |
|---|---|---|---|---|
| Medium6.1 | Cross-Site Scripting | CVE-2004-1559 | — | |
| High8.8 | SQL Injection | CVE-2003-1598 | — | |
| Critical9.8 | Remote File Inclusion | CVE-2003-1599 | — |
- Medium6.1Cross-Site Scripting
WordPress
<1.2Update to 1.2
- High8.8SQL Injection
WordPress
<0.72Update to 0.72
- Critical9.8Remote File Inclusion
WordPress
≤0.70Update to 0.71