VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-79Vulnerability type

WordPress Cross-Site Scripting vulnerabilities (page 1252)

Stored and reflected XSS in plugin output: the most common WordPress vulnerability class, and a frequent path to admin takeover.

Severity
Signals
Software

41,182 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Cross-Site Scripting vulnerabilities (page 1252)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Reflected Cross-Site Scripting
Simple Behance Portfolio≤0.2No patch available
CVE-2021-34649—
Medium6.1Reflected Cross-Site Scripting
Plugmatter Pricing Table Lite ≤1.0.32No patch available
CVE-2021-34659—
Medium6.1Reflected Cross-Site Scripting
jQuery Tagline Rotator≤0.1.5No patch available
CVE-2021-34663—
Medium6.1Reflected Cross-Site Scripting
WP Fountain≤1.5.9No patch available
CVE-2021-34653—
Medium6.1Reflected Cross-Site Scripting
typofr≤0.11No patch available
CVE-2021-34657—
Medium6.1Reflected Cross-Site Scripting
Multiplayer Games≤3.7No patch available
CVE-2021-34644—
Medium6.1Reflected Cross-Site Scripting
Sidebar Adder 2≤2.0.0No patch available
CVE-2021-34666—
Medium6.1Reflected Cross-Site Scripting
2Way VideoCalls and Random Chat – HTML5 Webcam Videochat≤5.2.7Update to 5.2.8
CVE-2021-34656—
Medium6.1Smart Email Alerts <= 1.0.10 Reflected Cross-Site Scripting
Smart Email Alerts≤1.0.10No patch available
CVE-2021-34642—
Medium6.1Reflected Cross-Site Scripting
WP Songbook≤2.0.11No patch available
CVE-2021-34655—
Medium6.1Reflected Cross-Site Scripting
Scribble Maps≤1.2No patch available
CVE-2021-34651—
Medium6.1Reflected Cross-Site Scripting
WP SEO Tags≤2.2.7No patch available
CVE-2021-34665—
Medium6.1Reflected Cross-Site Scripting
Simple Popup Newsletter≤1.4.7No patch available
CVE-2021-34658—
Medium6.1Reflected Cross-Site Scripting
Securimage-WP-Fixed≤3.5.4No patch available
CVE-2021-34640—
High8.8Per Page Add To Head <= 1.4.3 Cross-Site Request Forgery to Stored Cross-Site Scripting
Per page add to head<1.4.4Update to 1.4.4
CVE-2021-24586—
Medium4.8Authenticated (Admin+) Stored Cross-Site Scripting
Per page add to head≤1.4.4No patch available
CVE-2021-24619—
Medium5.4Authenticated (Contributor+) Stored Cross-Site Scripting
PDF.js Viewer<2.0.2Update to 2.0.2
CVE-2021-24759—
Medium6.1Reflected Cross-Site Scripting
Software License Manager<4.4.8Update to 4.4.8
CVE-2021-24560—
Medium4.8Authenticated Stored Cross-Site Scripting
AddToAny Share Buttons<1.7.48Update to 1.7.48
CVE-2021-24616—
Medium5.5Cross-Site Scripting
Book appointment online≤1.38Update to 1.39
CVE-2021-24614—
Medium5.4Stored Cross-Site Scripting
Daily Prayer Time<2021.08.10Update to 2021.08.10
CVE-2021-24523—
Medium5.4Reflected Cross-Site Scripting
Custom Post View Generator≤0.4.6No patch available
CVE-2021-24605—
Medium5.4Authenticated Stored Cross-Site Scripting
WPFront Notification Bar≤2.0.0Update to 2.1.0
CVE-2021-24601—
High7.2Unauthenticated Cross-Site Scripting
ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content≤3.1.10Update to 3.1.11
CVE-2021-24522—
Medium5.4Authenticated Stored Cross-Site Scripting
AddToAny Share Buttons<1.7.46Update to 1.7.46
CVE-2021-24568—
Medium5.5Authenticated Stored Cross-Site Scripting
Form Builder | Create Responsive Contact Forms≤1.9.8.3Update to 1.9.8.4
CVE-2021-24513—
Medium5.5Admin+ Stored Cross-Site Scripting
Site Reviews<5.13.1Update to 5.13.1
CVE-2021-24603—
Medium6.1Cross-Site Scripting
Keyword Meta≤3.0Update to 3.1
CVE-2021-24611—
Medium4.8Authenticated (Admin+) Stored Cross-Site Scripting
Stop Spammers Classic<2021.18Update to 2021.18
CVE-2021-24517—
Medium6.1Reflected Cross-Site Scripting
Titan Frameworkall versionsNo patch available
CVE-2021-24435—

Search VulnCrest Radar

Jump to

Are you sure?