VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-79Vulnerability type

WordPress Cross-Site Scripting vulnerabilities (page 1350)

Stored and reflected XSS in plugin output: the most common WordPress vulnerability class, and a frequent path to admin takeover.

Severity
Signals
Software

41,172 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Cross-Site Scripting vulnerabilities (page 1350)
SeverityVulnerabilityCVEInstallsPublished
Critical9.8SQL Injection
WORDPRESS VIDEO GALLERY<2.6Update to 2.6
CVE-2014-9097—
Medium5.3Information Disclosure
WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps<2.0.2Update to 2.0.2
CVE-2014-5337—
Medium6.1JavaScript Code Injection
3CX Free Live Chat, Calls & Messaging<4.1.0Update to 4.1.0
CVE-2014-10386—
Critical9.8Arbitrary Command Execution
WordPress Flash Uploader<3.1.3Update to 3.1.3
CVE-2014-5014—
Medium6.1Cross-Site Scripting
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor<1.1.66Update to 1.1.66
CVE-2014-10380—
High7.5Sensitive Information Disclosure
WP BackItUp Community Edition≤1.9Update to 1.9.1
CVE-2014-9012—
Medium6.1Cross-Site Scrpting
Compfight<1.5Update to 1.5
CVE-2014-8622—
Medium6.1Reflected Cross-Site Scripting
Compfight≤1.4Update to 1.5
CVE-2014-5202—
Medium6.1Reflected Cross-Site Scripting
Blogroll Fun – Show Last Post and Last Update Time<0.8.5Update to 0.8.5
CVE-2014-125132—
Medium6.1Cross-Site Scripting
WP Snap App≤1.5No patch available
CVE-2014-4596—
High7.1Cross-Site Scripting
yahoo-updates-for-wordpress≤1.0No patch available
CVE-2014-4603—
Medium6.1Multiple Cross-Site Scripting
wp-guestmap≤1.8No patch available
CVE-2014-4587—
Medium6.1Cross-Site Scripting
vn-calendar≤1.0No patch available
CVE-2014-4571—
High7.2Cross-Site Scripting
anyfont≤2.2.3No patch available
CVE-2014-4515—
Medium6.1Cross-Site Scripting
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP<4.27.4Update to 4.27.4
CVE-2014-4569—
High8.8Local File Inclusion
Theme My Login<6.3.10Update to 6.3.10
CVE-2014-5155—
High7.1Cross-Site Scripting
Random Banner<2.0Update to 2.0
CVE-2014-4847—
High7.1Cross-Site Scripting
Custom Banners<2.1Update to 2.1
CVE-2014-4724—
High8.8Cross-Site Request Forgery to Cross-Site Scripting
Blogstand Banner≤1.0No patch available
CVE-2014-4848—
High7.1Cross-Site Scripting
Easy Banners≤1.4No patch available
CVE-2014-4723—
High8.8Cross-Site Request Forgery
Simple Share Buttons Adder≤4.4Update to 4.5
CVE-2014-4717—
Critical9.8Remote Code Execution
Ajax Search Lite – Live Search & Filter<3.11Update to 3.11
CVE-2014-4663—
Medium6.1Reflected Cross-Site Scripting
Ruven Toolkit≤2.0No patch available
CVE-2014-4548—
Medium6.1Reflected Cross-Site Scripting
VideoWhisper Video Presentation≤3.25Update to 3.31
CVE-2014-4570—
High7.1Cross-Site Scripting
wp-tmkm-amazon<1.5.3Update to 1.5.3
CVE-2014-4598—
Medium6.1Cross-Site Scripting
wp-football≤1.1No patch available
CVE-2014-4586—
Medium6.1Cross-Site Scripting
Webcam/Screen/Mic Recorder for Video Comments and Forms≤1.55Update to 1.55.3
CVE-2014-4567—
Medium6.1Reflected Cross-Site Scripting
WordPress Responsive Preview<1.2Update to 1.2
CVE-2014-4594—
Medium6.1Cross-Site Scripting
Appointments Scheduler≤1.5No patch available
CVE-2014-4579—
Medium6.1Reflected Cross-Site Scripting
Webcam Microphone Screen Recorder – Media Capture≤1.55.4Update to 1.55.5
CVE-2014-4568—

Search VulnCrest Radar

Jump to

Are you sure?