CWE-434Vulnerability type
WordPress Arbitrary File Upload vulnerabilities (page 61)
Upload handlers that accept PHP files, the shortest route from a plugin bug to a webshell.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- High7.5Authenticated (Subscriber+) Privilege Escalation to Stale Foreign Role Cache
Membership & User Roles for WooCommerce (Automatic Role Changer)
≤20260828Update to 20261007
- High8.1Missing Authorization to Authenticated (Subscriber+) Arbitrary Listing Deletion via 'listing_id' Parameter
Directorist: AI-Powered Business Directory, Listings & Classified Ads
≤8.10.2.1Update to 8.10.3
- Medium5.3Unauthenticated Limited File Deletion via Injected 'attackcfdb7_file' Submission Field
Database Addon for Contact Form 7 – CFDB7
≤1.4.1Update to 1.4.2
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
Social Share Buttons
≤1.31No patch available
- Critical9.1Unauthenticated Arbitrary Shortcode Execution via REQUEST_URI via {url} Placeholder
Click to Chat – HoliThemes
≤4.44Update to 4.45
- High8.1Unauthenticated Local File Inclusion to Remote Code Execution via 'bps_directory' Cookie 'ajax_template' Value
BP Profile Search
≤5.9Update to 6.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
Booking Package
≤1.7.29Update to 1.7.30
- High7.5Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'mode=sendBooking' with nonexistent 'timeKey' and 'public=0'
Booking Package
≤1.7.29Update to 1.7.30
- High7.5Unauthenticated Privilege Escalation via Identity-Confused Log Re-execution to Account Takeover via Log Re-execution of Anonymous-Captured Field Data
Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation
≤2.10.6Update to 2.10.7
- High7.5Unauthenticated SQL Injection
Mang Board
≤2.4.4Update to 2.4.5
- Medium4.3Missing Authorization
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
≤5.2.8Update to 5.3.0
- Medium6.3Authenticated (Contributor+) Privilege Escalation
FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution
≤3.2.5Update to 3.2.6
- Medium5.3Unauthenticated Information Exposure
FluentCart – Online Store Builder & eCommerce Checkout
≤1.7.1Update to 1.8.0
- High7.3Unauthenticated Privilege Escalation
FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution
≤3.2.5Update to 3.2.6
- High7.2Unauthenticated Stored Cross-Site Scripting
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI
≤3.6.1Update to 3.6.2
- High7.5Unauthenticated SQL Injection
Booking for Appointments and Events Calendar – Amelia
≤2.4.10Update to 2.4.11
- High7.2Unauthenticated Stored Cross-Site Scripting
BSK PDF Manager
≤3.8.1No patch available
- High7.2Unauthenticated Stored Cross-Site Scripting
WP Crowdfunding
≤2.2.2No patch available
- High7.2Unauthenticated Stored Cross-Site Scripting
Chained Quiz
≤1.4.1Update to 1.4.2
- High7.2Unauthenticated Stored Cross-Site Scripting
Cincopa video and media plug-in
≤1.165No patch available
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
Podamibe Custom User Gravatar
≤1.0.8No patch available
- High7.2Unauthenticated Stored Cross-Site Scripting
Razorpay Payment Button Elementor Plugin
≤1.2.8No patch available
- High8.1Unauthenticated PHP Object Injection
GEO my WP
≤4.5.5.3Update to 4.5.5.4
- High7.2Unauthenticated Stored Cross-Site Scripting
Bitcoin Payments – Blockonomics
3.11.0 – 3.11.0No patch available
- High7.2Unauthenticated Stored Cross-Site Scripting
Video Gallery – YouTube Gallery, Playlist & Video Grid
≤4.1.0No patch available
- Medium4.3Missing Authorization
Visual Form Builder
≤3.1No patch available
- Medium5.3Missing Authorization
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
≤5.2.8Update to 5.3.0
- Medium5.3Unauthenticated Information Exposure
Subscribe to Comments
≤2.3.2Update to 2.3.3
- High7.3Unauthenticated Arbitrary Order Status Manipulation
Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit
≤5.5.2Update to 5.5.3
- High7.5Unauthenticated SQL Injection
WX Subscribe 微信支付付费订阅
≤1.2.1No patch available