VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-79Vulnerability type

WordPress Cross-Site Scripting vulnerabilities (page 1315)

Stored and reflected XSS in plugin output: the most common WordPress vulnerability class, and a frequent path to admin takeover.

Severity
Signals
Software

41,172 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Cross-Site Scripting vulnerabilities (page 1315)
SeverityVulnerabilityCVEInstallsPublished
Critical9.8Arbitrary File Upload
webapp-builder≤2.0No patch available
CVE-2017-1002002—
Medium6.1Cross-Site Scripting via Cross-Site Request Forgery
Atahualpa≤3.7.24No patch available
CVE-2024-27948—
High8.8Cross-Site Request Forgery
Contact Form Manager≤1.4.3Update to 1.4.4
CVE-2017-20053—
Medium5.3Missing Authorization
How to Create an App for Android iPhone Easytouch≤3.0No patch available
CVE-2017-1002000—
High7.2Unauthenticated Stored Cross-Site Scripting
NewStatPress<1.2.5Update to 1.2.5
CVE-2017-18575—
Medium6.1Stored Cross-Site Scripting
Relevanssi – A Better Search<3.5.8Update to 3.5.8
CVE-2017-1000038—
Critical9.8Arbitrary File Upload
Wordpress Plugin Mobile App Native 3.03.0 – 3.0No patch available
CVE-2017-6104—
Medium6.1Cross-Site Scripting
Kama Click Counter≤3.4.9Update to 3.5.0
CVE-2017-18615—
High8.1Blind SQL Injection
Kama Click Counter≤3.4.9Update to 3.5.0
CVE-2017-18614—
Medium6.1Reflected Cross-Site Scripting
GD Rating System<2.1Update to 2.1
CVE-2017-18591—
High8.8Cross-Site Request Forgery
Democracy Poll≤5.3.6Update to 5.4
CVE-2017-18521—
Medium6.1Cross-Site Scripting
Democracy Poll<5.4Update to 5.4
CVE-2017-18520—
Medium6.1Cross-Site Scripting
Wordpress plugin AnyVar≤0.1.1No patch available
CVE-2017-6103—
Critical9.8Arbitrary File Upload
Fast Image Adder≤1.1Update to 1.2
CVE-2015-1000001—
Medium6.1Cross-Site Scripting
Time Sheets<1.5.2Update to 1.5.2
CVE-2017-18582—
High7.2SQL Injection via id parameter
Mail Masta≤1.0No patch available
CVE-2017-6573—
High7.2SQL Injection via id parameter
Mail Masta≤1.0No patch available
CVE-2017-6571—
High7.2SQL Injection via camp_id parameter
Mail Masta≤1.0No patch available
CVE-2017-6097—
High7.2SQL Injection via filter_list parameter
Mail Masta≤1.0No patch available
CVE-2017-6572—
Critical9.8SQL Injection via list_id parameter
Mail Masta≤1.0No patch available
CVE-2017-6095—
High7.2SQL Injection via list_id parameter
Mail Masta≤1.0No patch available
CVE-2017-6577—
High7.2SQL Injection via member_id parameter
Mail Masta≤1.0No patch available
CVE-2017-6575—
High7.2SQL Injection via id parameter
Mail Masta≤1.0No patch available
CVE-2017-6570—
High7.2SQL Injection via filter_list parameter
Mail Masta≤1.0No patch available
CVE-2017-6096—
High7.2SQL Injection via list_id parameter
Mail Masta≤1.0No patch available
CVE-2017-6098—
Medium6.1Reflected Cross-Site Scripting
Time Sheets<1.5.0Update to 1.5.0
CVE-2017-18581—
Medium6.1Authenticated (Admin+) Stored Cross-Site Scripting
Easy Table≤1.6Update to 1.7
CVE-2017-20108—
Medium6.4Cross-Site Scripting
Corner Ad<1.0.8Update to 1.0.8
CVE-2017-18579—
High8.1Authenticated Directory Traversal leading to Local File Inclusion
Posts in Page<1.3.0Update to 1.3.0
CVE-2017-18585—
High7.5Directory Traversal
Javo Spot - Multi Purpose Directory WordPress Theme<3.0.0Update to 3.0.0
CVE-2017-20287—

Search VulnCrest Radar

Jump to

Are you sure?