VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

Database

WordPress Vulnerability Database (page 54)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

Severity
Signals
Software

44,153 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Vulnerability Database (page 54)
SeverityVulnerabilityCVEInstallsPublished
Medium4.3Authenticated (Contributor+) Insecure Direct Object Reference
Simply Schedule Appointments≤1.6.12.35Update to 1.6.12.37
CVE-2026-110381—
Medium4.3Missing Authorization
WordLift – AI powered SEO – Schema≤3.54.15Update to 3.54.17
CVE-2026-110891—
Medium4.3Missing Authorization
AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini≤3.8.3Update to 3.8.4
CVE-2026-110888—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
JetSmartFilters≤3.8.6Update to 3.8.6.1
CVE-2026-110890—
Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting via Order Notes
Premium Packages – Sell Digital Products Securely≤7.2.8Update to 7.3.0
CVE-2026-110664—
Medium5.3Missing Authorization
WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce≤4.7.5Update to 4.7.6
CVE-2026-110367—
High7.2Unauthenticated Stored Cross-Site Scripting via Comment Content via Simple HTML DOM Parser Noise-Key Restoration (mXSS)
WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice)≤1.1.9Update to 1.2.0
CVE-2026-97640—
Medium4.3Missing Authorization
Strong Testimonials≤3.3.12Update to 3.3.13
CVE-2026-110371—
Low2.7Authenticated (Administrator+) Sensitive Information Exposure in LIKE Wildcard in Personal Data Export Email
WP Mail Logging≤1.17.0Update to 1.17.1
CVE-2026-109401—
High8.8Authenticated (Custom+) Command Injection via 'value' Parameter (crop item) in update-photo AJAX Action
WP Photo Album Plus≤9.3.02.002Update to 9.3.02.003
CVE-2026-92115—
Medium4.3Missing Authorization to Authenticated (Contributor+) Arbitrary Map Publish/Unpublish/Delete via set_status() and bulk() REST Endpoints
WP Map Block – Google Maps, OpenStreetMap, Mapbox, Store & Shop Locator, Directory, Listings & Filters≤3.0.0Update to 3.1.0
CVE-2026-19798—
Medium5.3Unauthenticated Sensitive Information Exposure in 'woof_tm_data' Localized Script
HUSKY – Products Filter for WooCommerce Professional. MCP is onboard≤1.4.5Update to 1.4.6
CVE-2026-107646—
Medium4.9Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
WP Booking System – Booking Calendar≤2.1.0.1Update to 2.1.0.2
CVE-2026-111178—
Medium4.8Unauthenticated Privilege Escalation to 'group'/'setting'/'value' Parameters on comms Endpoint
WP Compress – Instant Performance & Speed Optimization≤7.25.00Update to 7.26.00
CVE-2026-104755—
Medium5.4Authenticated (Subscriber+) Arbitrary Shortcode Execution via display_name
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder≤5.2.8Update to 5.3.0
CVE-2026-15222—
Medium6.5Authenticated (Vendor+) SQL Injection via 'src_by[].val' Parameter via 'bt' Operator
Vitepos – Point of Sale (POS) for WooCommerce≤3.6.1Update to 3.6.2
CVE-2026-109414—
High7.2Unauthenticated Stored Cross-Site Scripting via File Upload
Ultra Addons for Contact Form 7≤3.5.54Update to 3.5.55
CVE-2026-103999—
Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting via Comment Content via unfiltered_html Grant to Customer Role
Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental≤3.0.1Update to 3.0.2
CVE-2026-97470—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute
Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental≤3.0.1Update to 3.0.2
CVE-2026-103480—
High8.0Authenticated (Subscriber+) Remote Code Execution via User Meta Serialized String Corruption
Search Regex≤3.5Update to 3.5.1
CVE-2026-104932—
Critical9.8Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter
Theme My Login≤7.2.1Update to 7.2.2
CVE-2026-89079—
High7.5Unauthenticated Limited File Write / Cache Poisoning via Query-string Parameter Traversal in Page-Cache Path
10Web Booster – Website speed optimization, Cache & Page Speed optimizer≤2.34.5Update to 2.34.8
CVE-2026-103896—
Medium6.5Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'guid' Parameter
Tainacan≤1.3.0Update to 1.4.0
CVE-2026-93767—
Critical9.8Unauthenticated Arbitrary File Upload via IMAP Email Attachment
ELEX WordPress HelpDesk & Customer Ticketing System≤3.3.7Update to 3.3.8
CVE-2026-103768—
Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting via SQL Chart Label (X-axis) via Stored User Field
SQL Chart Builder≤3.0.6Update to 3.0.7
CVE-2026-100158—
High7.2Unauthenticated Stored Cross-Site Scripting via Comment Content
Hide My WP Ghost – Security & Firewall≤7.0.12Update to 7.0.13
CVE-2026-89051—
Medium6.1Authenticated (Subscriber+) Reflected DOM-Based Cross-Site Scripting via 'redirect_url' Parameter
Tutor LMS – eLearning and online course solution≤4.0.8Update to 4.0.9
CVE-2026-88963—
Medium5.4Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'Biographical Info' User Meta
Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated≤4.11.1Update to 4.11.2
CVE-2026-104001—
High7.2Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Anchor href via Visual Inspector
SiteOrigin CSS≤1.6.7Update to 1.6.8
CVE-2026-111122—
High7.2Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Author URL via Inspector href Sink
SiteOrigin CSS≤1.6.7Update to 1.6.8
CVE-2026-107764—

Search VulnCrest Radar

Jump to

Are you sure?