Database
WordPress Vulnerability Database (page 41)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium4.39.0.2 - Authenticated (Contributor+) Insecure Direct Object Reference
WPVR – 360 Panorama viewer and Virtual Tour Builder for WordPress
8.3.0 – 9.0.2Update to 9.0.3
- Medium4.39.1.2 - Missing Authorization
WPVR – 360 Panorama viewer and Virtual Tour Builder for WordPress
8.5.55 – 9.1.2Update to 9.1.3
- High7.2Unauthenticated Stored Cross-Site Scripting
LiteSpeed Cache
<7.9.2Update to 7.9.2
- High7.2Unauthenticated Stored Cross-Site Scripting
LiteSpeed Cache
<7.9.2Update to 7.9.2
- High7.24.8.1 - Authenticated (Editor+) Arbitrary File Upload
Depicter — Popup & Slider Builder
4.0.5 – 4.8.1Update to 4.8.2
- Medium5.3Missing Authorization
Popup Builder – Create highly converting, mobile friendly marketing popups.
<4.4.6Update to 4.4.6
- Low2.7Missing Authorization
Download Monitor
<5.3.5Update to 5.3.5
- Medium4.3Missing Authorization
GiveWP – Donation Plugin and Fundraising Platform
≤4.19.0.0Update to 4.19.0.1
- Medium4.3Missing Authorization
GiveWP – Donation Plugin and Fundraising Platform
≤4.19.0.0Update to 4.19.0.1
- Medium5.3Unauthenticated Donation Amount Restriction Bypass
GiveWP – Donation Plugin and Fundraising Platform
≤4.19.0.0Update to 4.19.0.1
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
<4.0.5Update to 4.0.5
- Low2.7Missing Authorization
Essential Addons for Elementor – Popular Elementor Templates & Widgets
<6.8.7Update to 6.8.7
- Medium5.3Unauthenticated Payment Bypass
WP Stripe Checkout
≤1.2.2.61Update to 1.2.2.62
- Medium6.3Authenticated (Custom Role+) Privilege Escalation
HIPAA Forms
<3.3.2Update to 3.3.2
- Medium5.3Unauthenticated Payment Bypass
OPay Payment Gateway for WooCommerce
≤2.5.5No patch available
- Medium5.3Unauthenticated Payment Bypass
Payment Gateway – nexi Alpha Bank for WooCommerce
<2.2.1Update to 2.2.1
- Medium5.3Missing Authorization
CCAvenue Payment Gateway for WooCommerce
≤3.1No patch available
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
Contact Form by Supsystic – Drag & Drop Form Builder with Templates & Form Statistics
≤1.7.0Update to 1.8.0
- Medium4.39.0.2 - Authenticated (Contributor+) Insecure Direct Object Reference
WPVR – 360 Panorama viewer and Virtual Tour Builder for WordPress
9.0.0 – 9.0.2Update to 9.0.3
- Low2.7Missing Authorization
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
<4.0.5Update to 4.0.5
- Medium6.4Authenticated (Give Worker+) Stored Cross-Site Scripting
GiveWP – Donation Plugin and Fundraising Platform
≤4.19.0.0Update to 4.19.0.1
- Medium6.5Authenticated (Give Manager+) Path Traversal
GiveWP – Donation Plugin and Fundraising Platform
≤4.19.0.0Update to 4.19.0.1
- Medium5.3Unauthenticated Information Exposure
GiveWP – Donation Plugin and Fundraising Platform
≤4.19.0.0Update to 4.19.0.1
- Low2.7Missing Authorization
Speed Optimizer – The All-In-One Performance-Boosting Plugin
<7.8.5Update to 7.8.5
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
Speed Optimizer – The All-In-One Performance-Boosting Plugin
<7.8.5Update to 7.8.5
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
Essential Addons for Elementor – Popular Elementor Templates & Widgets
<6.8.7Update to 6.8.7
- High7.2Unauthenticated Stored Cross-Site Scripting
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
<3.2.8Update to 3.2.8
- Medium5.3Missing Authorization
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
<3.2.8Update to 3.2.8
- Medium5.33.2.7 - Missing Authorization
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
3.1.1 – 3.2.7Update to 3.2.8
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
<3.2.8Update to 3.2.8