CWE-434Vulnerability type
WordPress Arbitrary File Upload vulnerabilities (page 33)
Upload handlers that accept PHP files, the shortest route from a plugin bug to a webshell.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium5.33.1.0 - Missing Authorization
PayPlug for WooCommerce (Official)
2.8.0 – 3.1.0Update to 3.1.1
- Medium4.3Authenticated (Contributor+) Insecure Direct Object Reference
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
<2.8.195Update to 2.8.195
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
<2.8.196Update to 2.8.196
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
<2.8.196Update to 2.8.196
- Medium4.3Cross-Site Request Forgery
Media Library Assistant
<3.42Update to 3.42
- Medium6.45.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar
5.9 – 5.15Update to 5.16
- Medium4.3Missing Authorization
Royal MCP – Secure AI Connector for Claude, ChatGPT & any LLM via MCP
<1.5.10Update to 1.5.10
- Medium4.31.5.9 - Missing Authorization
Royal MCP – Secure AI Connector for Claude, ChatGPT & any LLM via MCP
1.4.38 – 1.5.9Update to 1.5.10
- Medium6.3Authenticated (Custom Role+) Privilege Escalation
GoSMTP – SMTP for WordPress
<1.2.5Update to 1.2.5
- Medium4.3Missing Authorization
Welcart e-Commerce
<2.12.6Update to 2.12.6
- Medium4.9Authenticated (Editor+) SQL Injection
Welcart e-Commerce
<2.12.6Update to 2.12.6
- Medium6.17.3.1 - Reflected Cross-Site Scripting
افزونه پیامک ووکامرس | Persian WooCommerce SMS
7.2.0 – 7.3.1Update to 7.3.2
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Copy Anything to Clipboard for WordPress – Copy Button, Copy Text & Copy Code
<5.5.5Update to 5.5.5
- Medium5.3Unauthenticated Information Exposure
Essential Addons for Elementor – Popular Elementor Templates & Widgets
<6.8.7Update to 6.8.7
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Page Builder by SiteOrigin
<2.38.0Update to 2.38.0
- Medium5.33.1.0 - Unauthenticated Insecure Direct Object Reference
PayPlug for WooCommerce (Official)
2.9.0 – 3.1.0Update to 3.1.1
- Medium5.31.7.1069 - Unauthenticated Information Exposure
Royal Addons for Elementor – Addons and Templates Kit for Elementor
1.3.81 – 1.7.1069Update to 1.7.1070
- Medium6.41.7.1069 - Authenticated (Contributor+) Stored Cross-Site Scripting
Royal Addons for Elementor – Addons and Templates Kit for Elementor
1.7.1037 – 1.7.1069Update to 1.7.1070
- Medium5.31.7.1069 - Missing Authorization
Royal Addons for Elementor – Addons and Templates Kit for Elementor
1.3.71 – 1.7.1069Update to 1.7.1070
- Medium4.31.7.1069 - Missing Authorization
Royal Addons for Elementor – Addons and Templates Kit for Elementor
1.3.68 – 1.7.1069Update to 1.7.1070
- Medium5.3Missing Authorization
Court Reservation – Tennis, Padel & Sports Court Booking
<1.12.4Update to 1.12.4
- Medium5.3Missing Authorization
Booking Package
<1.7.33Update to 1.7.33
- High7.2Unauthenticated Stored Cross-Site Scripting
Menu Cart for WooCommerce
<3.2.1Update to 3.2.1
- Medium4.9Authenticated (Editor+) SQL Injection
Thrive Automator
<11.2Update to 11.2
- Critical9.8Unauthenticated Arbitrary File Upload
Checkout Files Upload for WooCommerce
<2.4.0Update to 2.4.0
- Medium5.3Unauthenticated Insecure Direct Object Reference
Payconiq
≤1.0.4No patch available
- High8.1KEVPoC7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution
WordPress
≤7.1.3Update to 4.7.39 or 4.8.34 or 4.9.35 or 5.0.31 or 5.1.28 or 5.2.30 or 5.3.27 or 5.4.25 or 5.5.24 or 5.6.23 or 5.7.21 or 5.8.19 or 5.9.20 or 6.0.18 or 6.1.16 or 6.2.15 or 6.3.14 or 6.4.14 or 6.5.14 or 6.6.11 or 6.7.11 or 6.8.12 or 6.9.11 or 7.0.8 or 7.1.4
- Medium6.1Reflected Cross-Site Scripting via 'new_kb_config' Parameter
Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search
≤17.214.0Update to 17.311.0
- Medium4.3Missing Authorization to Authenticated (Author+) Post Content Modification via Media Replacement Workflow
Enable Media Replace
≤4.2.2Update to 4.2.3
- Critical9.8Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypass
Contact Manager
≤9.1.2Update to 9.1.3