Database
WordPress Vulnerability Database (page 202)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium4.3Missing Authorization
QuickCal
≤1.0.16No patch available
- Medium6.4Authenticated (Contributor+) Sever-Side Request Forgery
JetEngine
≤3.8.11Update to 3.8.12
- Medium5.3Missing Authorization
Ebook Store
≤6.19Update to 6.20
- Medium4.3Cross-Site Request Forgery
GiveWP – Donation Plugin and Fundraising Platform
≤4.16.3Update to 4.16.4
- Medium5.3Missing Authorization
WP Fast Total Search – The Power of Indexed Search
≤1.81.282Update to 1.81.284
- Medium5.3Unauthenticated Information Exposure
Ninja Tables – Responsive Table Builder for Data, Pricing & Product Tables
≤5.2.10Update to 5.2.11
- Medium5.3Job Board & Freelance Marketplace WordPress Theme <= 2.2.4 - Missing Authorization
Civi - Job Board & Freelance Marketplace WordPress Theme
≤2.2.4No patch available
- Medium6.6Authenticated (Administrator+) PHP Object Injection
Complianz GDPR/CCPA Cookie Consent Banner
≤7.5.1Update to 7.5.2
- High7.2Email Newsletter Plugin for WordPress <= 4.1.17 - Authenticated (Editor+) Arbitrary File Upload
Mailster WordPress Newsletter Plugin
≤4.1.17Update to 4.1.18
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Fluent Support – Helpdesk & Customer Support Ticket System
≤2.3.0Update to 2.3.1
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
HashThemes Demo Importer
≤1.4.3Update to 2.0
- Medium5.3Missing Authorization
PayU India
≤3.8.9Update to 3.9.0
- Medium5.3Missing Authorization
Ziina
≤1.2.21Update to 1.2.22
- Medium5.3Unauthenticated Information Exposure
Complianz GDPR/CCPA Cookie Consent Banner
≤7.5.1Update to 7.5.2
- Medium5.3Missing Authorization
Content Control – The Ultimate Content Restriction Solution! Restrict Content, Create Conditional Blocks & More
≤2.6.5No patch available
- High7.2Authenticated (Admin+) Arbitrary File Upload
Really Simple CSV Importer
≤1.3Update to 1.3.1
- Medium5.3Missing Authorization
Video Player for YouTube – Embed Videos Your Visitors Will Love to Watch
≤2.1.2Update to 2.1.3
- Medium5.3Missing Authorization
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy
≤3.6.7Update to 3.6.8
- Medium5.3Missing Authorization
Ditty – Responsive News Tickers, Sliders, and Lists
≤3.1.66Update to 3.1.67
- Medium4.3Missing Authorization
Participants Database
≤2.7.8.4Update to 2.7.8.5
- Medium5.3Unauthenticated Information Exposure
Ultimate Store Kit – Store Builder Addons for Elementor, WooCommerce Store Builder, EDD Store Builder
≤3.0.5Update to 3.0.7
- Medium4.3Missing Authorization
ListingPro Plugin
≤2.9.10No patch available
- Medium4.3Cross-Site Request Forgery
افزونه پرداخت امن زرینپال برای ووکامرس (ZarinPal for WooCommerce)
≤5.1.0Update to 5.1.1
- Medium5.3Missing Authorization
WP Go Maps – Google Map, OpenStreetMap, Leaflet & Store Locator
≤10.1.05Update to 10.1.06
- Medium4.3Cross-Site Request Forgery
WP Accessibility Helper (WAH)
≤0.6.6Update to 0.6.7
- Medium5.3Missing Authorization
photography
≤7.7.6No patch available
- High8.1Unauthenticated PHP Object Injection
Thrive Quiz Builder
≤10.9.3.0Update to 10.9.3.1
- Medium4.3Cross-Site Request Forgery
Avada Core
≤5.15.6Update to 5.15.7
- High7.2Authenticated (Custom+) Server-Side Request Forgery
JetBooking
≤4.1.2Update to 4.1.2.1
- Medium4.3Missing Authorization
ЮKassa для WooCommerce
≤2.16.1Update to 2.16.2