VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-79Vulnerability type

WordPress Cross-Site Scripting vulnerabilities (page 1353)

Stored and reflected XSS in plugin output: the most common WordPress vulnerability class, and a frequent path to admin takeover.

Severity
Signals
Software

41,172 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Cross-Site Scripting vulnerabilities (page 1353)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Cross-Site Scripting
proquoter≤1.0No patch available
CVE-2014-4545—
Medium6.1Cross-Site Scripting
WP-RSS-Spreadshirt-3DCube-Gallery≤1.3No patch available
CVE-2014-4553—
Medium6.1Cross-Site Scripting
WP-Business Directory≤1.0.2No patch available
CVE-2014-4599—
Medium6.1Multiple Cross-Site Scripting
WP e-Commerce Swipe plugin≤3.1.0No patch available
CVE-2014-4559—
Medium6.1Cross-Site Scripting
zeenshare≤1.0.1No patch available
CVE-2014-4606—
Medium6.1Cross-Site Scripting
Spotlight≤4.7No patch available
CVE-2014-4552—
Medium6.1Cross-Site Scripting
Infusionsoft Gravity Forms Add-on<1.5.7Update to 1.5.7
CVE-2014-4536—
Medium6.1Reflected Cross-Site Scripting
WP-Planet≤0.1No patch available
CVE-2014-4592—
Medium6.1Cross-Site Scripting
Diverse Solutions IDX Real Estate Listings & MLS Search<2.1.1Update to 2.1.1
CVE-2014-4521—
Medium6.1Cross-Site Scripting
GarageSale<1.2.3Update to 1.2.3
CVE-2014-4532—
Medium6.1Cross-Site Scripting
Pay Per Media Player≤1.24No patch available
CVE-2014-4543—
Medium6.4Cross-Site Scripting
shortcode-ninja≤1.4No patch available
CVE-2014-4550—
Medium6.1Cross-Site Scripting
verwei.se – WordPress – Twitter≤1.0.2No patch available
CVE-2014-4566—
Medium6.1Cross-Site Scripting
swipe-hq-checkout-for-eshop≤3.7.0No patch available
CVE-2014-4556—
High7.1Cross-Site Scripting
Toolpage≤1.6.1No patch available
CVE-2014-4560—
Medium6.1Stored Cross-Site Scripting
WP Ultimate Email Marketer≤1.1.0No patch available
CVE-2014-4600—
High7.1Cross-Site Scripting
WooCommerce SagePay Direct Payment Gateway<0.1.6.7Update to 0.1.6.7
CVE-2014-4549—
Medium6.1Cross-Site Scripting
Social Connect≤0.10.1Update to 0.10.2
CVE-2014-4551—
Medium6.1Reflected Cross-Site Scripting
ooorl≤1.0.0No patch available
CVE-2014-4542—
Medium6.1Cross-Site Scripting
WP-Contact≤1.0No patch available
CVE-2014-4583—
Medium6.1Cross-Site Scripting
Import Legacy Media≤0.1No patch available
CVE-2014-4535—
Medium6.1Reflected Cross-Site Scripting
HTML5 Video Player with Playlist≤2.4.0No patch available
CVE-2014-4534—
Medium6.1Cross-Site Scripting
Style It≤1.0No patch available
CVE-2014-4555—
Medium6.1Cross-Site Scripting
Conversion Ninjaall versionsNo patch available
CVE-2014-4017—
High8.8SQL Injection
Pinpoint Booking System – Legacy version<1.3Update to 1.3
CVE-2014-3210—
High8.8Cross-Site Request Forgery
Login rebuilder<1.2.0Update to 1.2.0
CVE-2014-3882—
Medium6.13.9.001 - Cross-Site Scripting
iMember360is3.8.012 – <3.9.002Update to 3.9.002
CVE-2014-3842—
High8.8Cross-Site Request Forgery
Photo Gallery by 10Web – Mobile-Friendly Image Gallery<1.2.42Update to 1.2.42
CVE-2015-9380—
Medium4.3Cross-Site Request Forgery
Search Everything<8.1.1Update to 8.1.1
CVE-2014-3843—
Medium4.3Cross-Site Request Forgery
TinyMCE Color Picker<1.2Update to 1.2
CVE-2014-3845—

Search VulnCrest Radar

Jump to

Are you sure?