Database
WordPress Vulnerability Database (page 54)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium5.3Missing Authorization
WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce
≤4.7.5Update to 4.7.6
- High7.2Unauthenticated Stored Cross-Site Scripting via Comment Content via Simple HTML DOM Parser Noise-Key Restoration (mXSS)
WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice)
≤1.1.9Update to 1.2.0
- Medium4.3Missing Authorization
Strong Testimonials
≤3.3.12Update to 3.3.13
- Low2.7Authenticated (Administrator+) Sensitive Information Exposure in LIKE Wildcard in Personal Data Export Email
WP Mail Logging
≤1.17.0Update to 1.17.1
- High8.8Authenticated (Custom+) Command Injection via 'value' Parameter (crop item) in update-photo AJAX Action
WP Photo Album Plus
≤9.3.02.002Update to 9.3.02.003
- Medium4.3Missing Authorization to Authenticated (Contributor+) Arbitrary Map Publish/Unpublish/Delete via set_status() and bulk() REST Endpoints
WP Map Block – Google Maps, OpenStreetMap, Mapbox, Store & Shop Locator, Directory, Listings & Filters
≤3.0.0Update to 3.1.0
- Medium5.3Unauthenticated Sensitive Information Exposure in 'woof_tm_data' Localized Script
HUSKY – Products Filter for WooCommerce Professional. MCP is onboard
≤1.4.5Update to 1.4.6
- Medium4.9Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
WP Booking System – Booking Calendar
≤2.1.0.1Update to 2.1.0.2
- Medium4.8Unauthenticated Privilege Escalation to 'group'/'setting'/'value' Parameters on comms Endpoint
WP Compress – Instant Performance & Speed Optimization
≤7.25.00Update to 7.26.00
- Medium5.4Authenticated (Subscriber+) Arbitrary Shortcode Execution via display_name
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
≤5.2.8Update to 5.3.0
- Medium6.5Authenticated (Vendor+) SQL Injection via 'src_by[].val' Parameter via 'bt' Operator
Vitepos – Point of Sale (POS) for WooCommerce
≤3.6.1Update to 3.6.2
- High7.2Unauthenticated Stored Cross-Site Scripting via File Upload
Ultra Addons for Contact Form 7
≤3.5.54Update to 3.5.55
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting via Comment Content via unfiltered_html Grant to Customer Role
Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental
≤3.0.1Update to 3.0.2
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute
Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental
≤3.0.1Update to 3.0.2
- High8.0Authenticated (Subscriber+) Remote Code Execution via User Meta Serialized String Corruption
Search Regex
≤3.5Update to 3.5.1
- Critical9.8Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter
Theme My Login
≤7.2.1Update to 7.2.2
- High7.5Unauthenticated Limited File Write / Cache Poisoning via Query-string Parameter Traversal in Page-Cache Path
10Web Booster – Website speed optimization, Cache & Page Speed optimizer
≤2.34.5Update to 2.34.8
- Medium6.5Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'guid' Parameter
Tainacan
≤1.3.0Update to 1.4.0
- Critical9.8Unauthenticated Arbitrary File Upload via IMAP Email Attachment
ELEX WordPress HelpDesk & Customer Ticketing System
≤3.3.7Update to 3.3.8
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting via SQL Chart Label (X-axis) via Stored User Field
SQL Chart Builder
≤3.0.6Update to 3.0.7
- High7.2Unauthenticated Stored Cross-Site Scripting via Comment Content
Hide My WP Ghost – Security & Firewall
≤7.0.12Update to 7.0.13
- Medium6.1Authenticated (Subscriber+) Reflected DOM-Based Cross-Site Scripting via 'redirect_url' Parameter
Tutor LMS – eLearning and online course solution
≤4.0.8Update to 4.0.9
- Medium5.4Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'Biographical Info' User Meta
Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated
≤4.11.1Update to 4.11.2
- High7.2Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Anchor href via Visual Inspector
SiteOrigin CSS
≤1.6.7Update to 1.6.8
- High7.2Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Author URL via Inspector href Sink
SiteOrigin CSS
≤1.6.7Update to 1.6.8
- Medium5.3Sensitive Information Exposure via W3TC_DYNAMIC_SECURITY Constant
Lightweight Cookie Notice – Cookie Banner for Cookie Consent
≤1.19Update to 1.20
- High7.2Unauthenticated Stored Cross-Site Scripting via 'saswp_review_text' Parameter
Schema & Structured Data for WP & AMP
≤1.67Update to 1.68
- Medium6.1Reflected Cross-Site Scripting
PAYCOMET for WooCommerce
≤5.45Update to 5.46
- High7.2Unauthenticated Stored Cross-Site Scripting via Custom Checkout Field (Html/File Type) via Public Booking AJAX
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas
≤10.31.9Update to 10.31.10
- High7.2Unauthenticated Stored Cross-Site Scripting via 'status' Parameter via /wp-json/ssa/v1/appointments/{id}
Simply Schedule Appointments
≤1.6.12.35Update to 1.6.12.37