Database
WordPress Vulnerability Database (page 318)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- High8.1Unauthenticated Local File Inclusion
ConFix - Expo & Events WordPress Theme
≤1.013No patch available
- High8.8Authenticated (Contributor+) Remote Code Execution
Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets
≤4.1.3Update to 4.2.0
- High8.1Unauthenticated PHP Object Injection
Super Stage WP
≤1.0.1No patch available
- High8.1Unauthenticated Local File Inclusion
Justitia | Lawyer & Legal Adviser WordPress Theme
≤1.1.0No patch available
- Medium5.3Missing Authorization
VW Photography
≤1.3.8Update to 1.3.9
- High8.1Unauthenticated Local File Inclusion
Yottis
≤1.0.10No patch available
- Medium5.3Missing Authorization
Mailercloud – Integrate webforms and synchronize website contacts
≤1.0.7Update to 1.0.8
- High8.1Unauthenticated Local File Inclusion
Law Office
≤3.3.0No patch available
- High8.1Unauthenticated Local File Inclusion
Global Logistics
≤3.20No patch available
- Medium4.3Cross-Site Request Forgery
RT-Theme 18 Responsive WordPress Theme
≤2.5No patch available
- High8.1Unauthenticated Local File Inclusion
FlashMart - Multipurpose Sections Shopify Theme
≤2.0.15No patch available
- High8.1Unauthenticated Local File Inclusion
DroneX
≤1.1.12No patch available
- High8.1Life Coach & Business Coaching WordPress Theme <= 1.0.1 - Unauthenticated Local File Inclusion
Grit - Life Coach & Business Coaching WordPress Theme
≤1.0.1No patch available
- High8.1Doctor, Clinic & Medical WordPress <= 1.0.0 - Unauthenticated Local File Inclusion
Healer WordPress Themes, Plugins & Template Kits.
≤1.0.0No patch available
- High8.1Unauthenticated Local File Inclusion
EmojiNation
≤1.0.12No patch available
- High8.1Unauthenticated Local File Inclusion
Scientia | Public Library & Book Store Education WordPress Theme
≤1.2.4No patch available
- Medium6.4Authenticated (Subscriber+) Server-Side Request Forgery
Restaurant WordPress Theme | Ratatouille
≤1.2.6No patch available
- High8.1Unauthenticated Local File Inclusion
Kratz
≤1.0.12No patch available
- High8.1Unauthenticated Local File Inclusion
Helion | Personal Portfolio & Agency WordPress Theme
≤1.1.12No patch available
- Medium4.3Missing Authorization
Ultimate Addons for WPBakery
≤3.21.1Update to 3.21.2
- High8.1Business Startup Elementor Template Kit <= 1.0.16 - Unauthenticated Local File Inclusion
Vixus - Business Startup Elementor Template Kit
≤1.0.16No patch available
- High8.1Unauthenticated Local File Inclusion
OsTende
≤1.4.3No patch available
- Medium5.3Missing Authorization
AnyTrack Affiliate Link Manager
≤1.5.5No patch available
- Medium6.1Reflected Cross-Site Scripting
Wp EMember
≤10.2.2No patch available
- Medium5.3Missing Authorization
VW Fitness
≤4.3.4Update to 4.3.5
- High8.1Unauthenticated Local File Inclusion
Foodie
≤1.14No patch available
- Medium6.1Reflected Cross-Site Scripting
EventON (Pro) - WordPress Virtual Event Calendar Plugin
≤4.9.12No patch available
- High8.1Unauthenticated Local File Inclusion
Aldo
≤1.0.10No patch available
- High8.1Unauthenticated Local File Inclusion
Motorix
≤1.6No patch available
- Medium5.3Missing Authorization
WP Time Slots Booking Form
≤1.2.42Update to 1.2.43