Database
WordPress Vulnerability Database (page 328)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium5.3Missing Authorization
DT - Directory WordPress Plugin
≤1.8No patch available
- Medium5.3Missing Authorization
Author Avatars List/Block
≤2.1.25No patch available
- High7.5Unauthenticated SQL Injection
Profile Builder Pro
<3.14.0Update to 3.14.0
- Medium5.3Missing Authorization
Rapid Car Check
≤2.1.2Update to 2.1.3
- High8.1Unauthenticated PHP Object Injection
Dentario - Dentist & Medical Elementor Template Kit
≤1.5No patch available
- Medium5.3Missing Authorization
Directory Pro
≤2.5.6No patch available
- Medium5.3Missing Authorization
Directorist: AI-Powered Business Directory, Listings & Classified Ads
≤8.5.10Update to 8.6.1
- Medium5.3Unauthenticated Sensitive Information Exposure
Woodmart
≤8.3.9Update to 8.4.0
- Medium5.3Missing Authorization
Forminator Forms – Contact Form, Payment Form & Custom Form Builder
≤1.50.2Update to 1.50.3
- Medium4.3Missing Authorization
Brizy – Page Builder
≤2.7.23Update to 2.7.24
- Medium5.3Unauthenticated Information Exposure
BSK PDF Manager
≤3.7.2Update to 3.8
- Medium4.3Missing Authorization
WPC Product Bundles for WooCommerce
≤8.4.5Update to 8.4.6
- Medium4.3Missing Authorization
WPC Smart Wishlist for WooCommerce
≤5.0.8Update to 5.0.9
- Medium5.3Missing Authorization
The Moneytizer
≤10.0.10No patch available
- Medium5.3Unauthenticated Email Relay
The Plus Addons for Elementor – Mega Menu, Header Footer, Post Grid, AI Widgets & Templates
≤6.4.7Update to 6.4.8
- Medium4.3Missing Authorization
Broadstreet
≤1.52.2Update to 1.53.2
- High7.5Authenticated (Contributor+) Local File Inclusion
Homeo - Real Estate WordPress Theme
≤1.2.59No patch available
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
Garden Gnome Package
≤2.5.1Update to 2.5.2
- High7.5Authenticated (Author+) Local File Inclusion
Sprout Invoices – Client Invoicing & Estimates
≤20.8.9Update to 20.8.10
- Medium5.3Missing Authorization
Diet Calorie Calculator
≤1.1.1No patch available
- Medium5.3Missing Authorization
linkPizza-Manager
≤5.5.5Update to 5.6.0
- High7.5Authenticated (Contributor+) Local File Inclusion
Freeio - Freelance Marketplace WordPress Theme
≤1.3.21No patch available
- High7.5Authenticated (Contributor+) Local File Inclusion
Organic Food - Farm & Food Business Eco WordPress
≤3.6.4No patch available
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Toocheke Companion
≤1.194Update to 1.195
- Medium5.3Missing Authorization
Studio99 WP Monitor
≤1.0.3Update to 1.0.4
- Medium5.3Missing Authorization
Image Slider by Ays- Responsive Slider and Carousel
≤2.7.1Update to 2.7.2
- Medium6.5Missing Authorization to Unauthenticated Form Deletion
weMail – Email Marketing, Newsletters Builder & Email Automations for WooCommerce
≤2.0.7Update to 2.0.8
- Critical9.8Unauthenticated Privilege Escalation
Wholesale Lead Capture Plugin for WooCommerce
≤2.0.3.1Update to 2.0.3.2
- Medium4.3Missing Authorization
PublishPress Capabilities: User Role Access Control, Admin Area Permissions
≤2.31.0Update to 2.32.0
- High7.2Authenticated (Shop Manager) Privilege Escalation
Wholesale Suite – B2B, Dynamic Pricing & WooCommerce Wholesale Prices
≤2.2.6Update to 2.2.7