CWE-352Vulnerability type
WordPress CSRF vulnerabilities (page 1336)
Actions that skip nonce checks, letting an attacker trick a logged-in admin into changing settings or data.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
| Severity | Vulnerability | CVE | Installs | Published |
|---|---|---|---|---|
| Medium6.1 | Reflected Cross-Site Scripting | CVE-2015-9515 | — | |
| Medium6.1 | Reflected Cross-Site Scripting | CVE-2015-9529 | — | |
| Medium6.1 | Reflected Cross-Site Scripting | CVE-2015-9362 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2015-9373 | — | |
| Medium6.1 | Reflected Cross-Site Scripting | CVE-2015-9365 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2015-9520 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2015-9356 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2015-9536 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2015-9532 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2015-9513 | — | |
| Critical9.8 | SQL Injection | CVE-2015-3313 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2015-9511 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2015-9535 | — | |
| Medium6.1 | Reflected Cross-Site Scripting | CVE-2015-9378 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2015-9523 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2015-9525 | — | |
| Medium6.1 | Reflected Cross-Site Scripting | CVE-2015-9371 | — | |
| Medium6.1 | Reflected Cross-Site Scripting | CVE-2015-9372 | — | |
| Medium6.1 | Reflected Cross-Site Scripting | CVE-2015-9366 | — | |
| Medium6.1 | Cross-Sell and Upsell <= 1.1.2 - Reflected Cross-Site Scripting | CVE-2015-9510 | — | |
| Medium6.1 | Reflected Cross-Site Scripting | CVE-2015-9514 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2015-9355 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2015-9527 | — | |
| Medium6.1 | Reflected Cross-Site Scripting | CVE-2015-9377 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2015-9506 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2015-9531 | — | |
| Medium5.3 | Reflected Cross Site Scripting | CVE-2015-10098 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2015-9375 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2015-9518 | — | |
| Medium6.1 | Reflected Cross-Site Scripting | CVE-2015-10013 | — |
- Medium6.1Reflected Cross-Site Scripting
Easy Digital Downloads – htaccess Editor
1.0.0 – 1.0.0Update to 1.0.1
- Medium6.1Reflected Cross-Site Scripting
Easy Digital Downloads (EDD) Stripe
≤2.1.2Update to 2.1.3
- Medium6.1Reflected Cross-Site Scripting
Post Connector
<1.0.4Update to 1.0.4
- Medium6.1Cross-Site Scripting
PayPal Pro Add-on for iThemes Exchange
<1.1.0Update to 1.1.0
- Medium6.1Reflected Cross-Site Scripting
Authorize.net Add-on for iThemes Exchange
<1.1.0Update to 1.1.0
- Medium6.1Cross-Site Scripting
Easy Digital Downloads – Per Product Emails
<1.0.9Update to 1.0.9
- Medium6.1Cross-Site Scripting
WP-ViperGB
<1.3.16Update to 1.3.16
- Medium6.1Cross-Site Scripting
Twenty Twelve EDD
≤1.1Update to 1.1.1
- Medium6.1Cross-Site Scripting
Easy Digital Downloads (EDD) Digital Store
<1.3.3Update to 1.3.3
- Medium6.1Cross-Site Scripting
EDD Favorites
≤1.0.6Update to 1.0.7
- Critical9.8SQL Injection
Community Events
≤1.3Update to 1.4
- Medium6.1Cross-Site Scripting
Easy Digital Downloads – Conditional Success Redirects
<1.1.1Update to 1.1.1
- Medium6.1Cross-Site Scripting
Shoppette
<1.0.5Update to 1.0.5
- Medium6.1Reflected Cross-Site Scripting
Market
<5.1.27Update to 5.1.27
- Medium6.1Cross-Site Scripting
Recommended Products - EDD
≤1.2.3.2Update to 1.2.3.3
- Medium6.1Cross-Site Scripting
Easy Digital Downloads - Recurring Payments
≤2.3Update to 2.3.1
- Medium6.1Reflected Cross-Site Scripting
Manual Purchases Add-on for iThemes Exchange
<1.1.0Update to 1.1.0
- Medium6.1Reflected Cross-Site Scripting
Exchange Addon Membership
<1.3.0Update to 1.3.0
- Medium6.1Reflected Cross-Site Scripting
Exchange Addon Custom URL Tracking
<1.1.0Update to 1.1.0
- Medium6.1Cross-Sell and Upsell <= 1.1.2 - Reflected Cross-Site Scripting
Easy Digital Downloads - Cross-Sell and Upsell
≤1.1.2Update to 1.1.3
- Medium6.1Reflected Cross-Site Scripting
Easy Digital Downloads - Free Downloads
≤2.3.6Update to 2.3.7
- Medium6.1Cross-Site Scripting
Two Factor Authentication
<1.1.10Update to 1.1.10
- Medium6.1Cross-Site Scripting
Easy Digital Downloads – Simple Shipping
≤2.1.3Update to 2.1.4
- Medium6.1Reflected Cross-Site Scripting
BuilderChild-Depot
<5.0.30Update to 5.0.30
- Medium6.1Cross-Site Scripting
Easy Digital Downloads - Amazon S3
≤2.1.3Update to 2.1.4
- Medium6.1Cross-Site Scripting
Easy Digital Downloads - Wish Lists
≤1.1Update to 1.1.1
- Medium5.3Reflected Cross Site Scripting
Broken Link Checker
<1.10.6Update to 1.10.6
- Medium6.1Cross-Site Scripting
exchange-addon-table-rate-shipping
<1.1.0Update to 1.1.0
- Medium6.1Cross-Site Scripting
Easy Digital Downloads – Invoices
<1.0.4Update to 1.0.4
- Medium6.1Reflected Cross-Site Scripting
Taxonomy Switcher
≤1.0.3Update to 1.0.4