VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-79Vulnerability type

WordPress Cross-Site Scripting vulnerabilities (page 1247)

Stored and reflected XSS in plugin output: the most common WordPress vulnerability class, and a frequent path to admin takeover.

Severity
Signals
Software

41,182 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Cross-Site Scripting vulnerabilities (page 1247)
SeverityVulnerabilityCVEInstallsPublished
Medium6.4Cross-Site Scripting
Appointment Hour Booking – Booking Calendar<1.3.17Update to 1.3.17
CVE-2021-24712—
Medium6.4Authenticated Stored Cross-Site Scripting
Easy Accordion – AI-Powered FAQ & Accordion Blocks, Product FAQ≤2.0.21Update to 2.0.22
CVE-2021-24576—
Medium6.1Reflected Cross-Site Scripting
Post Title Counter≤1.1No patch available
CVE-2021-38326—
Medium6.1Reflected Cross-Site Scripting
Integration of Moneybird for WooCommerce≤2.1.2No patch available
CVE-2021-38349—
Medium6.1<= 1.4 - Reflected Cross-Site Scripting
Yet Another bol.com Plugin≤1.4No patch available
CVE-2021-38330—
Medium6.1Reflected Cross-Site Scripting
SMS OVH≤0.1No patch available
CVE-2021-38357—
Medium6.1Reflected Cross-Site Scripting
WordPress Simple Shop≤1.2No patch available
CVE-2021-38340—
Medium6.1Reflected Cross-Site Scripting
WordPress InviteBox Plugin≤1.4.1No patch available
CVE-2021-38359—
Medium6.1Reflected Cross-Site Scripting
RSVPmaker Excel≤1.1No patch available
CVE-2021-38337—
Medium6.1Reflected Cross-Site Scripting
Advanced Search≤1.1.2Update to 1.1.3
CVE-2021-38348—
High8.3Local File Inclusion
wp-publications≤0.0Update to 1.1
CVE-2021-38360—
Medium6.1Reflected Cross-Site Scripting
Custom Website Data≤2.2No patch available
CVE-2021-38347—
Medium6.1Reflected Cross-Site Scripting
GNU-Mailman Integration≤1.0.6No patch available
CVE-2021-38354—
Medium6.1YouTube Video Inserter <= 1.2.1.0 Reflected Cross-Site Scripting
YouTube Video Inserter≤1.2.1.0No patch available
CVE-2021-38327—
Medium6.1Reflected Cross-Site Scripting
WP-T-Wap≤1.13.2No patch available
CVE-2021-38331—
Medium6.1Reflected Cross-Site Scripting
Notices≤6.1No patch available
CVE-2021-38328—
Medium6.1DJ EmailPublish <= 1.7.2 Reflected Cross-Site Scripting
DJ EmailPublish≤1.7.2No patch available
CVE-2021-38329—
Medium6.1Reflected Cross-Site Scripting
spideranalyse≤0.0.1No patch available
CVE-2021-38350—
Medium6.1Reflected Cross-Site Scripting
OSD Subscribe≤1.2.3No patch available
CVE-2021-38351—
Medium6.1On Page SEO + Whatsapp Chat Button <= 1.0.1 Reflected Cross-Site Scripting
On Page SEO + Social Live Chat≤1.0.1Update to 1.0.2
CVE-2021-38332—
Medium6.1Reflected Cross-Site Scripting
Woocommerce Payment Gateway per Category≤2.0.10No patch available
CVE-2021-38341—
Medium6.1LoDash Update
WordPress<5.8.1Update to 5.4.7 or 5.5.6 or 5.6.5 or 5.7.3 or 5.8.1
CVE-2020-8203—
Medium6.1MoolaMojo <= 0.7.4.1 Reflected Cross-Site Scripting
MoolaMojo≤0.7.4.1No patch available
CVE-2021-38358—
Medium6.1Reflected Cross-Site Scripting
Bug Library≤2.0.3Update to 2.0.4
CVE-2021-38355—
Medium6.1Reflected Cross-Site Scripting
Border Loading Bar≤1.0.1No patch available
CVE-2021-38338—
Medium6.1Feedify – Web Push Notifications <= 2.1.8 Reflected Cross-Site Scripting
Feedify – Web Push Notifications≤2.1.8Update to 2.1.9
CVE-2021-38352—
Medium6.1Reflected Cross-Site Scripting
Edit Comments XT≤1.0No patch available
CVE-2021-38336—
Medium6.1Reflected Cross-Site Scripting
Wise Agent Lead Forms≤2.0Update to 3.0
CVE-2021-38335—
Medium6.1Reflected Cross-Site Scripting
Simple Matted Thumbnails≤1.01No patch available
CVE-2021-38339—
Medium6.8Block Editor Authorization Bypass
WordPress5.8 beta 1 – 5.8 beta 1Update to 5.8
CVE-2021-39203—

Search VulnCrest Radar

Jump to

Are you sure?