CWE-434Vulnerability type
WordPress Arbitrary File Upload vulnerabilities (page 1287)
Upload handlers that accept PHP files, the shortest route from a plugin bug to a webshell.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- High7.5Unauthenticated Arbitrary File Deletion
ARforms
≤3.7.1Update to 4.0
- Medium6.1Cross-Site Scripting
LIQUID SPEECH BALLOON
<1.0.7Update to 1.0.7
- High8.0Authenticated (Admin+) SQL Injection
Contact Form Widget – Responsive Contact Form, Query Form & Form Builder
≤1.3.8Update to 1.3.9
- Medium5.5Authenticated (Admin+) Cross-Site Scripting
Client Dash
≤2.2.0No patch available
- High7.2Missing Authorization to Stored Cross-Site Scripting
ShopWP
≤2.0.4Update to 2.0.5
- Medium6.1Unauthenticated Stored Cross-Site Scripting
Download Plugins and Themes in ZIP from Dashboard
<1.6.0Update to 1.6.0
- Critical9.8Unauthenticated SQL Injection
Event Expresso Free
≤3.1.37.12Update to 3.1.37.14 or 3.1.37.14L
- Critical9.3Server-Side Request Forgery
Visualizer – Tables & Charts Manager with Built-in AI Generator
≤3.3.0Update to 3.3.1
- Medium6.1Stored Cross-Site Scripting
Visualizer – Tables & Charts Manager with Built-in AI Generator
≤3.3.0Update to 3.3.1
- High7.5Authorization Bypass
GiveWP – Donation Plugin and Fundraising Platform
≤2.5.4Update to 2.5.5
- Medium5.5Authenticated Stored Cross-Site Scripting
Firelight Lightbox
≤1.8.17Update to 1.8.18
- Medium6.1Real Estate WordPress Theme < 4.2 - Cross-Site Scripting
Zoner - Real Estate WordPress Theme
<4.2Update to 4.2
- High7.2Stored Cross-Site Scripting
Rich Reviews by Starfish
≤1.7.4Update to 1.8.0
- High7.2Stored Cross Site Scripting
DELUCKS SEO
≤2.1.7Update to 2.1.8
- Medium6.1Stored Cross-Site Scripting
Motors – Car Dealership & Classified Listings Plugin
<1.4.1Update to 1.4.1
- Medium6.5Unauthenticated Settings Import/Export
Motors – Car Dealership & Classified Listings Plugin
<1.4.1Update to 1.4.1
- Medium6.1Cross-Site Scripting
Ultimate FAQ Accordion Plugin
<1.8.25Update to 1.8.25
- Critical9.1Unauthenticated Options Import/Export
Ultimate FAQ Accordion Plugin
<1.8.25Update to 1.8.25
- High7.4CSV Injection
Export Users to CSV
<1.4Update to 1.4
- Medium6.4Authenticated Cross-Site Scripting
Woody Code Snippets – Insert PHP, CSS, JS, and Header/Footer Scripts
<2.2.9Update to 2.2.9
- Medium5.3Information Disclosure
Easy!Appointments
≤1.3.2Update to 1.4.0
- Medium6.1Cross-Site Scripting
Checklist
≤1.1.8Update to 1.1.9
- Medium6.1Stored Cross-Site Scripting
SlickQuiz
≤1.3.7.1No patch available
- Medium6.1Cross-Site Scripting via RCCWP_CreateCustomFieldPage.php custom-field-css parameter
Magic Fields
≤1.7.1Update to 1.7.2
- Medium6.1Cross-Site Scripting via custom-write-panel-id Parameter
Magic Fields
≤1.7.1Update to 1.7.2
- High8.8Authenticated SQL Injection
SlickQuiz
≤1.3.7.1No patch available
- Medium6.1Cross-Site Scripting via RCCWP_CreateCustomFieldPage.php custom-group-id parameter
Magic Fields
≤1.7.1Update to 1.7.2
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
WP Server Log Viewer
≤1.0No patch available
- Critical9.8Stored Cross-Site Scripting via Import
LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes
<3.35.0Update to 3.35.0
- Critical9.8Unauthenticated Arbitrary File Read
Access Governance for WordPress (aka AAM)
<5.9.9Update to 5.9.9