Database
WordPress Vulnerability Database (page 320)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
UiCore Elements – Free widgets and templates for Elementor
≤1.3.13Update to 1.3.14
- Medium5.3Missing Authorization
Accept PayPal Payments using Contact Form 7
≤4.0.6Update to 4.0.7
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Astra Bulk Edit
≤1.2.10Update to 1.2.11
- Medium5.3Missing Authorization
MIPL Multistore Sync for WooCommerce. Sync Products, Stock and Orders.
≤1.4.4No patch available
- High7.5Authenticated (Contributor+) Local File Inclusion
Medilazar Core
<1.4.7Update to 1.4.7
- Medium5.3Missing Authorization
Payment Gateway Pix For GiveWP
≤2.2.3Update to 2.2.4
- High7.5Unauthenticated SQL Injection via coupon_code
Tutor LMS – eLearning and online course solution
≤3.9.6Update to 3.9.7
- High7.5Unauthenticated PHP Object Injection via Email Log Message Field
WP Mail Logging
≤1.15.0Update to 1.16
- High8.1Unauthenticated Local File Inclusion
Artrium - Creative Agency & Web Studio WP Theme
≤1.0.14No patch available
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Sprout Clients – CRM and Lead Management
≤3.2.2Update to 3.2.3
- High8.1Unauthenticated Local File Inclusion
Tiger Claw
≤1.1.14No patch available
- High8.1Unauthenticated Local File Inclusion
Miller | Personal Assistant & Administrative Services WordPress Theme
≤1.3.3No patch available
- Medium6.1Reflected Cross-Site Scripting
uberSlider_classic
≤2.5No patch available
- Medium6.5Authenticated (Contributor+) SQL Injection
WP EasyCart: Shopping Cart and eCommerce Store
≤5.8.13Update to 5.8.14
- Medium6.1Reflected Cross-Site Scripting
UberSlider - Layer Slider WordPress Plugin
≤2.3No patch available
- High8.1Unauthenticated Local File Inclusion
Run Gran
≤2.0No patch available
- High8.1Unauthenticated Local File Inclusion
Filmax | Cinema & Movie News Magazine WordPress Theme
≤1.1.11No patch available
- Medium6.1Reflected Cross-Site Scripting
UberSlider - Layer Slider WordPress Plugin
≤2.3No patch available
- High8.1Unauthenticated Local File Inclusion
Accalia | Dermatology Clinic & Cosmetology WordPress Theme + Elementor
≤1.4.3No patch available
- High8.1Unauthenticated Local File Inclusion
S.King | Personal Stylist and Fashion Blogger WordPress Theme
≤1.5.3No patch available
- High8.1Unauthenticated Local File Inclusion
Eject
≤2.17No patch available
- High8.1Unauthenticated Local File Inclusion
RexCoin - Cryptocurrency & Coin ICO WordPress
≤1.2.6No patch available
- Medium6.1Reflected Cross-Site Scripting
UberSlider - Layer Slider WordPress Plugin
≤2.3No patch available
- High8.1Unauthenticated Local File Inclusion
WealthCo
≤2.18No patch available
- High8.1Unauthenticated Local File Inclusion
LeGrand | Modern Business WordPress Theme
≤2.17No patch available
- High8.1Unauthenticated Local File Inclusion
Rythmo
≤1.3.4No patch available
- High8.1Unauthenticated Local File Inclusion
Le Truffe
≤1.1.7No patch available
- High8.1Unauthenticated Local File Inclusion
Ozisti | Augmented Reality WooCommerce Theme
≤1.1.10No patch available
- High8.1Unauthenticated Local File Inclusion
MCKinney's Politics
≤1.2.8No patch available
- Medium6.1Reflected Cross-Site Scripting
Porto
≤7.6.2No patch available