Database
WordPress Vulnerability Database (page 260)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- High8.1Food Blog Elementor Pro Template Kit <= 1.0 - Unauthenticated Local File Inclusion
Especio - Food Blog Elementor Pro Template Kit
≤1.0No patch available
- Medium4.3Creative Minimal Landing Page Builder for Digital Startup Design Studio Agency in Marketing <= 1.6.6 - Missing Authorization
Genemy - Creative Minimal Landing Page Builder for Digital Startup Design Studio Agency in Marketing
≤1.6.6No patch available
- High8.1Unauthenticated Local File Inclusion
AirSupply | Conditioning Company and Heating Services WordPress Theme + RTL
≤2.0.0No patch available
- Medium5.3Unauthenticated Information Exposure
SePay Gateway
≤1.1.20Update to 1.1.21
- Medium4.3Missing Authorization
RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress
≤4.1121Update to 4.1125
- High8.1Unauthenticated Local File Inclusion
Preservation
≤1.10No patch available
- High8.1Unauthenticated Local File Inclusion
LuxMed | Medicine & Healthcare Doctor WordPress Theme
≤1.2.2No patch available
- Critical9.1A Complete Car Dealer HTML Wire-Frame <= 3.7 - Unauthenticated Arbitrary File Deletion
CarZone - A Complete Car Dealer HTML Wire-Frame
≤3.7No patch available
- High8.1Unauthenticated Local File Inclusion
Fortius
≤2.3.0No patch available
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Geo Mashup
≤1.13.18Update to 1.13.19
- High8.1Unauthenticated Local File Inclusion
Dom
≤1.24No patch available
- High8.1Unauthenticated Local File Inclusion
Imba
≤1.5.0No patch available
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Animation Addons – Elementor Addons, GSAP Animations, Elementor V4 Atomic Widgets & Elementor Templates
≤2.6.3Update to 2.6.4
- High8.1Unauthenticated Local File Inclusion
Iona - Handmade & Crafts Shop WordPress Theme
≤1.0.8No patch available
- Medium6.5Authenticated (Contributor+) SQL Injection
Unlimited Elements for Elementor
≤2.0.8Update to 2.0.9
- High8.1Unauthenticated Local File Inclusion
Food Drop | Meal Ordering & Delivery Mobile App WordPress Theme
≤1.3No patch available
- High7.2Unauthenticated Stored Cross-Site Scripting
Qreatix – Interactive Portfolio WordPress Theme
≤1.9.4No patch available
- High8.1Unauthenticated Local File Inclusion
Dazzle - Manufacturing & Factory Elementor Pro template Kit
≤1.0.0No patch available
- High8.1Unauthenticated Local File Inclusion
Gat
≤1.16No patch available
- High8.1Unauthenticated Local File Inclusion
Wanium - A Elegant Multi-Concept Theme
≤1.9.8No patch available
- High8.1Handmade Store WordPress Theme <= 1.12 - Unauthenticated Local File Inclusion
Crafti - Handmade Store WordPress Theme
≤1.12No patch available
- Medium6.5WordPress Events Calendar <= 2.7.2 - Authenticated (Subscriber+) SQL Injection
Events Schedule - WordPress Events Calendar Plugin
≤2.7.2No patch available
- Medium5.3Missing Authorization
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams
≤7.3.23Update to 7.3.24
- Medium4.3Missing Authorization
Woocommerce Envato Affiliates
≤1.2.1No patch available
- High8.1Unauthenticated Local File Inclusion
Modernee
≤1.6.0No patch available
- High7.5Booking for Small Businesses WordPress <= 3.1.3 - Authenticated (Subscriber+) PHP Object Injection
Entrepreneur - Booking for Small Businesses WordPress Theme
≤3.1.3No patch available
- High8.1Internet & IPTV Provider Elementor Template Kit <= 1.2.10 - Unauthenticated Local File Inclusion
MaxiNet - Internet & IPTV Provider Elementor Template Kit
≤1.2.10No patch available
- High8.1Unauthenticated Local File Inclusion
Planty
≤1.14.0No patch available
- Medium4.3Missing Authorization
Appointment Booking Plugin for WooCommerce | Online Booking Calendar & Service Manager
≤1.2.9Update to 1.3.0
- High7.5Authenticated (Contributor+) Local File Inclusion
sw_core
≤1.7.18No patch available