CWE-434Vulnerability type
WordPress Arbitrary File Upload vulnerabilities (page 89)
Upload handlers that accept PHP files, the shortest route from a plugin bug to a webshell.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- High7.5Authenticated (Author+) PHP Object Injection
WP Spell Check
≤12.1Update to 12.2
- High7.5Authenticated (Contributor+) PHP Object Injection
Simple Event Planner
≤1.5.7Update to 1.5.8
- High7.5Authenticated (Custom Role+) PHP Object Injection
Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers
≤3.7.1Update to 3.7.2
- High7.5Authenticated (Custom Role+) PHP Object Injection
Export All Posts, Products, Orders & Users | WP Ultimate Exporter | WordPress CSV Export
≤3.0Update to 3.1
- Medium6.6Authenticated (Shop Manager+) PHP Object Injection
Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce
≤13.5.7Update to 13.5.8
- Medium4.3Missing Authorization
Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more
≤3.0.2Update to 3.1.0
- High7.5Unauthenticated SQL Injection
WP BASE Booking of Appointments, Services and Events
≤6.4.0Update to 6.5.0
- High7.5Authenticated (Contributor+) PHP Object Injection
Advanced Post Manager
≤4.5.5Update to 4.5.6
- Medium4.3Authenticated (Subscriber+) Information Exposure
RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress
≤4.1226Update to 4.1227
- Medium5.3Unauthenticated Insecure Direct Object Reference
Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & Inbox
≤2.2.23Update to 2.2.24
- Medium5.3Unauthenticated Insecure Direct Object Reference
Hyve Lite – AI Chatbot Trained on WordPress Posts, Pages, Products & More with ChatGPT
≤2.0.2Update to 2.0.3
- Medium5.3Unauthenticated Information Exposure
Five Star Restaurant Reservations – WordPress Booking Plugin
≤2.7.24Update to 2.8.0
- Medium5.3Missing Authorization
Timetics – Appointment Booking Calendar & Scheduling
≤1.0.63Update to 1.0.64
- Medium6.1Reflected Cross-Site Scripting
Revopic – Photo Reviews for WooCommerce
≤1.2.30Update to 1.2.31
- High7.3Unauthenticated Privilege Escalation
WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory
≤2.9.20Update to 2.9.21
- Medium4.3Missing Authorization
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP
≤1.2.74Update to 1.2.76
- Medium6.4Authenticated (Customer+) Stored Cross-Site Scripting
RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress
≤4.1225Update to 4.1227
- Medium5.3Missing Authorization
Lookzy LookBook for WooCommerce
≤1.1.14Update to 1.1.15
- Medium5.3Missing Authorization
Fast Courier – Shipping & Freight
≤5.2.3No patch available
- Medium5.3Unauthenticated Cart Data Manipulation
BuildKit – Product Builder for WooCommerce – Custom PC Builder
≤1.0.28Update to 1.0.29
- High7.5Unauthenticated SQL Injection
EduAdmin Booking
<6.0.0Update to 6.0.0
- High7.2Unauthenticated Stored Cross-Site Scripting
Welcart e-Commerce
≤2.12.3Update to 2.12.4
- High7.5Unauthenticated SQL Injection
Ajax Search Pro
≤4.29.1Update to 4.29.2
- Medium6.5Authenticated (Subscriber+) SQL Injection
tagDiv Opt-In Builder
≤1.7.6Update to 1.7.7
- High7.2Unauthenticated Stored Cross-Site Scripting
Media Library Assistant
≤3.41Update to 3.42
- High7.2Unauthenticated Stored Cross-Site Scripting
Search in Place
≤1.5.5Update to 1.5.6
- High7.2Unauthenticated Stored Cross-Site Scripting
ShopBuilder – WooCommerce Builder For Elementor
≤3.4.1Update to 3.4.2
- High7.2Unauthenticated Stored Cross-Site Scripting
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP
≤1.2.73Update to 1.2.74
- High7.2Unauthenticated Stored Cross-Site Scripting
BlockStrap Page Builder – Bootstrap Blocks
≤0.1.58Update to 0.1.59
- High7.2Unauthenticated Stored Cross-Site Scripting
Betheme
≤28.5.8No patch available