VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-79Vulnerability type

WordPress Cross-Site Scripting vulnerabilities (page 1335)

Stored and reflected XSS in plugin output: the most common WordPress vulnerability class, and a frequent path to admin takeover.

Severity
Signals
Software

41,172 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Cross-Site Scripting vulnerabilities (page 1335)
SeverityVulnerabilityCVEInstallsPublished
Medium4.3Cross-Site Request Forgery
WP Ultimate CSV Importer – WordPress CSV, XML & Excel Import Export≤3.7.2Update to 3.7.3
CVE-2015-10125—
Medium6.1Cross-Site Scripting
WeeklyNews<2.2.9Update to 2.2.9
CVE-2015-9504—
High8.8Cross-Site Request Forgery to Cross-Site Scripting
Ad Inserter – Ad Manager & AdSense Ads<1.5.3Update to 1.5.3
CVE-2015-9497—
High7.52.2.21 - Information Exposure
Slideshow2.2.8 – 2.2.21Update to 2.2.22
CVE-2015-3634—
Medium6.1Reflected Cross-Site Scripting
GF Windcave Free≤1.4.2Update to 1.4.3
CVE-2015-10117—
Medium6.1Multiple Cross-Site Scripting
TheCartPress eCommerce Shopping Cart≤1.5.3.6No patch available
CVE-2015-3300—
High7.5Sensitive Information Disclosure
TheCartPress eCommerce Shopping Cart≤1.5.3.6No patch available
CVE-2015-3302—
Medium4.9Directory Traversal
TheCartPress eCommerce Shopping Cart≤1.5.3.6No patch available
CVE-2015-3301—
Medium6.1Ultimate Newspaper Theme <= 1.3.3 - Cross-Site Scripting
Exquisite - Ultimate Newspaper Theme≤1.3.3No patch available
CVE-2015-9500—
High7.5HTTP Response Splitting
Smart External Link Click Monitor [Link Log]≤1.4Update to 2.0
CVE-2015-9345—
Medium6.1Reflected Cross-Site Scripting
Resend Welcome Email≤1.0.1Update to 1.0.2
CVE-2015-10078—
High8.8Cross-Site Request Forgery
WPS Hide Login<1.1Update to 1.1
CVE-2015-9498—
High7.2Cross-Site Scripting via Comments
WordPress≤4.2Update to 4.0.4 or 4.1.4 or 4.2.1
CVE-2015-3440—
Medium6.1Reflected Cross-Site Scripting
WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings<2.3.7Update to 2.3.7
CVE-2015-9305—
Medium6.1Reflected Cross-Site Scripting
WooSidebars Sidebar Manager Converter≤1.1.1Update to 1.1.2
CVE-2015-10115—
Medium6.1Reflected Cross-Site Scripting
Icons for Features≤1.0.0Update to 1.0.1
CVE-2015-10104—
Medium6.1Reflected Cross-Site Scripting
WooFramework Tweaks≤1.0.1Update to 1.0.2
CVE-2015-10113—
Medium6.1Reflected Cross-Site Scripting
WooFramework Branding≤1.0.1Update to 1.0.2
CVE-2015-10112—
Medium6.1Cross-Site Scripting
OptionTree≤2.5.3Update to 2.5.4
CVE-2015-9320—
Medium6.1Reflected Cross-Site Scripting
Mark User as Spammer≤1.0.1Update to 1.0.2
CVE-2015-10093—
Medium6.1Reflected Cross-Site Scripting
WooSidebars≤1.4.1Update to 1.4.2
CVE-2015-10114—
High7.1Cross-Site Scripting
WP-Spreadplugin<3.8.6.2Update to 3.8.6.2
CVE-2015-10132—
High7.2Cross-Site Scripting
WordPress≤4.1.1Update to 3.7.6 or 3.8.6 or 3.9.4 or 4.0.2 or 4.1.2
CVE-2015-3438—
Medium6.1Reflected Cross-Site Scripting
Shortcode Factory≤1.1Update to 1.1.1
CVE-2015-9321—
Medium6.1Cross-Site Scripting
Easy Digital Downloads – Simple Shipping≤2.1.3Update to 2.1.4
CVE-2015-9527—
Medium6.1Cross-Site Scripting
Recommended Products - EDD≤1.2.3.2Update to 1.2.3.3
CVE-2015-9523—
Medium6.1Reflected Cross-Site Scripting
BuilderChild-Depot<5.0.30Update to 5.0.30
CVE-2015-9377—
Medium6.1Reflected Cross-Site Scripting
Easy Digital Downloads – htaccess Editor1.0.0 – 1.0.0Update to 1.0.1
CVE-2015-9515—
Medium6.1Cross-Site Scripting
Twenty Twelve EDD≤1.1Update to 1.1.1
CVE-2015-9536—
Medium6.1Cross-Site Scripting
PayPal Pro Add-on for iThemes Exchange<1.1.0Update to 1.1.0
CVE-2015-9373—

Search VulnCrest Radar

Jump to

Are you sure?