VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 219)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,165 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 219)
SeverityVulnerabilityCVEInstallsPublished
Medium4.3Missing Authorization to Authenticated (Contributor+) Arbitrary Quiz Modification and Email Reroute via Leaked Nonce from /quiz/structure
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker≤11.1.4Update to 11.1.5
CVE-2026-9230—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Heading Widget 'Background Text' Parameter
RTMKit for Elementor – Modular Addons, Widgets, Templates, Icon Library, GSAP Animations, MCP & Store Ready≤2.0.7Update to 2.0.8
CVE-2026-8351—
High7.2Unauthenticated Stored Cross-Site Scripting via 'Website' Field
Comments – wpDiscuz≤7.6.56Update to 7.6.57
CVE-2026-9148—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Business Address Meta Fields
CM Business Directory – Optimise and showcase local business≤1.5.7Update to 1.5.8
CVE-2026-8892—
Medium5.5Authenticated (Administrator+) Server-Side Request Forgery via 'file_url' Parameter
WP Import Export Lite≤3.9.30Update to 3.9.31
CVE-2026-11397—
Medium5.3File Uploads <= 3.3.29 - Missing Authorization to Unauthenticated Log Disclosure and Deletion via debug-log/delete-all and debug-log/get-all REST Endpoints
Ninja Forms - File Uploads≤3.3.29Update to 3.3.30
CVE-2026-12557—
Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting via Non-HTML Custom Textarea Profile Field
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin≤2.11.4Update to 2.12.0
CVE-2026-8489—
Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting via 'content' Parameter
JSON API User≤4.1.0Update to 4.1.2
CVE-2026-9626—
Critical9.1Unauthenticated Arbitrary File Deletion
Printcart Store – Web to Print Product Designer for WooCommerce≤2.5.2Update to 2.5.3
CVE-2026-9725—
High7.5Unauthenticated Path Traversal to Arbitrary File Read via 'file' Parameter
AR for WooCommerce≤8.40Update to 8.41
CVE-2026-14352—
High7.2Unauthenticated Stored Cross-Site Scripting via 'real_val__' Parameter
NEX-Forms – Ultimate Forms Plugin for WordPress≤9.2.2Update to 9.2.3
CVE-2026-13040—
Medium4.9Authenticated (Administrator+) SQL Injection via 's' Parameter
WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode≤4.3.5Update to 4.3.6
CVE-2026-12920—
High7.5Unauthenticated Arbitrary File Read via 'file' Parameter
AR for WordPress≤8.40Update to 8.41
CVE-2026-14327—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'page_id' Shortcode Attribute
Reviews Widgets for Google, TripAdvisor, Yelp & Recommendations≤2.7.3Update to 2.8
CVE-2026-12154—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'connectorWidth' Block Attribute
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot≤2.3.0Update to 2.3.1
CVE-2026-12734—
Medium4.3Missing Authorization to Authenticated (Subscriber+) Data Migration via wedocs_migrate_betterdocs_to_wedocs AJAX Action
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot≤2.3.0Update to 2.3.1
CVE-2026-12729—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'sectionTitleTag' and 'articleTitleTag' Block Attributes
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot≤2.3.0Update to 2.3.1
CVE-2026-12731—
High8.1Authenticated (Author+) Arbitrary File Deletion via 'convert.path' in 'tiny_compress_images' Post Meta
TinyPNG Image Optimization – Image Compression JPEG & PNG | Convert to WebP & AVIF≤3.6.13Update to 3.6.14
CVE-2026-7311—
High7.5Authenticated (Contributor+) Local File Inclusion
TheGem Theme Elements≤5.11.1No patch available
CVE-2026-57804—
Medium5.3Missing Authorization
Sendcloud for WooCommerce: Automated Shipping, Branded Tracking & Returns≤1.0.31Update to 1.0.32
CVE-2026-57760—
Medium5.3Missing Authorization
Booking calendar, Appointment Booking System≤3.2.36No patch available
CVE-2026-57778—
High7.5Authenticated (Contributor+) Local File Inclusion
Billey - Creative Portfolio & Agency Elementor WordPress Theme≤2.1.8No patch available
CVE-2026-57790—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Speaker≤4.1.13No patch available
CVE-2026-57783—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Mosaic Gallery – Advanced Gallery≤1.2.0No patch available
CVE-2026-57755—
Medium6.5Authenticated (Contributor+) SQL Injection
WP EasyCart: Shopping Cart and eCommerce Store≤5.9.1Update to 5.9.2
CVE-2026-57765—
Medium4.3Authenticated (Subscriber+) Information Exposure
Tutor LMS – eLearning and online course solution≤3.9.13Update to 3.9.14
CVE-2026-14306—
Medium4.3Cross-Site Request Forgery
WPIDE – File Manager & Code Editor≤3.5.6Update to 3.5.7
CVE-2026-57766—
High7.5Agency Business Creative WordPress Theme <= 2.9.0 - Authenticated (Contributor+) Local File Inclusion
Brook - Agency Business Creative WordPress Theme≤2.9.0No patch available
CVE-2026-57791—
Medium5.3Missing Authorization
Fascinate≤1.1.5No patch available
CVE-2026-57779—
Medium4.3Cross-Site Request Forgery
Workscout Core≤1.7.08No patch available
CVE-2026-57786—

Search VulnCrest Radar

Jump to

Are you sure?