CWE-200Vulnerability type
WordPress Information Exposure vulnerabilities (page 1308)
Debug logs, backups and exports left reachable without authentication.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
| Severity | Vulnerability | CVE | Installs | Published |
|---|---|---|---|---|
| Medium6.1 | Cross-Site Scripting | CVE-2017-18531 | — | |
| High8.8 | Cross-Site Request Forgery | CVE-2017-18510 | — | |
| Critical9.8 | Custom Registration Forms <= 3.7.9.2 - PHP Object Injection RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login<3.7.9.3Update to 3.7.9.3 | CVE-2017-20208 | — | |
| Critical9.8 | Unauthenticated PHP Object Injection | CVE-2017-20207 | — | |
| Critical9.8 | Unauthenticated PHP Object Injection | CVE-2017-20206 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2017-18506 | — | |
| Medium6.5 | Authenticated Directory Traversal | CVE-2017-18586 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2017-14751 | — | |
| High8.8 | Church Management System for Wordpress Theme < 13-07-2019 - SQL Injection | CVE-2017-14845 | — | |
| High8.8 | Authenticated (Student+) SQL Injection | CVE-2017-14843 | — | |
| High8.8 | SQL Injection | CVE-2017-14846 | — | |
| Critical9.8 | SQL Injection | CVE-2017-14507 | — | |
| Medium6.1 | Cross-Site Request Forgery to Cross-Site Scripting | CVE-2017-18560 | — | |
| High8.8 | Apartment Management System for wordpress Theme < 17-07-2019 - SQL Injection | CVE-2017-14847 | — | |
| High8.8 | Authenticated SQL Injection | CVE-2017-14842 | — | |
| High8.8 | Wordpress Gym Management System (Unknown Version) - SQL Injection | CVE-2017-14844 | — | |
| Critical9.8 | SQL Injection | CVE-2017-14125 | — | |
| Medium5.3 | Directory Traversal | CVE-2017-15079 | — | |
| Critical9.8 | Authentication Bypass | CVE-2017-14766 | — | |
| Medium6.1 | Reflected Cross-Site Scripting | CVE-2017-14622 | — | |
| Low3.5 | Open Redirect in Admin Dashboard WordPress≤4.8.1Update to 3.7.22 or 3.8.22 or 3.9.20 or 4.0.19 or 4.1.19 or 4.2.16 or 4.3.12 or 4.4.11 or 4.5.10 or 4.6.7 or 4.7.6 or 4.8.2 | CVE-2017-14725 | — | |
| Medium4.3 | Directory Traversal during unzip WordPress≤4.8.1Update to 3.7.22 or 3.8.22 or 3.9.20 or 4.0.19 or 4.1.19 or 4.2.16 or 4.3.12 or 4.4.11 or 4.5.10 or 4.6.7 or 4.7.6 or 4.8.2 | CVE-2017-14719 | — | |
| Medium6.4 | Cross-Site Scripting via Template Name WordPress≤4.8.1Update to 3.7.22 or 3.8.22 or 3.9.20 or 4.0.19 or 4.1.19 or 4.2.16 or 4.3.12 or 4.4.11 or 4.5.10 or 4.6.7 or 4.7.6 or 4.8.2 | CVE-2017-14720 | — | |
| Medium6.4 | Cross-Site Scripting via Shortcodes WordPress≤4.8.1Update to 3.7.22 or 3.8.22 or 3.9.20 or 4.0.19 or 4.1.19 or 4.2.16 or 4.3.12 or 4.4.11 or 4.5.10 or 4.6.7 or 4.7.6 or 4.8.2 | CVE-2017-14726 | — | |
| Medium6.4 | Cross-Site Scripting in oEmbed WordPress≤4.8.1Update to 3.7.22 or 3.8.22 or 3.9.20 or 4.0.19 or 4.1.19 or 4.2.16 or 4.3.12 or 4.4.11 or 4.5.10 or 4.6.7 or 4.7.6 or 4.8.2 | CVE-2017-14724 | — | |
| Medium4.9 | Directory Traversal via Customizer WordPress≤4.8.1Update to 3.7.22 or 3.8.22 or 3.9.20 or 4.0.19 or 4.1.19 or 4.2.16 or 4.3.12 or 4.4.11 or 4.5.10 or 4.6.7 or 4.7.6 or 4.8.2 | CVE-2017-14722 | — | |
| Medium6.4 | Cross-Site Scripting via Javascript: and Data: URLs WordPress≤4.8.1Update to 3.7.22 or 3.8.22 or 3.9.20 or 4.0.19 or 4.1.19 or 4.2.16 or 4.3.12 or 4.4.11 or 4.5.10 or 4.6.7 or 4.7.6 or 4.8.2 | CVE-2017-14718 | — | |
| Critical9.8 | SQL Injection via Mishandled Placeholders WordPress≤4.8.1Update to 3.7.22 or 3.8.22 or 3.9.20 or 4.0.19 or 4.1.19 or 4.2.16 or 4.3.12 or 4.4.11 or 4.5.10 or 4.6.7 or 4.7.6 or 4.8.2 | CVE-2017-14723 | — | |
| Medium5.5 | Stored Cross-Site Scripting via Plugin Names WordPress≤4.8.1Update to 3.7.22 or 3.8.22 or 3.9.20 or 4.0.19 or 4.1.19 or 4.2.16 or 4.3.12 or 4.4.11 or 4.5.10 or 4.6.7 or 4.7.6 or 4.8.2 | CVE-2017-14721 | — | |
| Critical9.8 | PHP Object Injection | CVE-2017-18583 | — |
- Medium6.1Cross-Site Scripting
Raygun
≤1.8.2Update to 1.8.3
- High8.8Cross-Site Request Forgery
Custom Sidebars – Dynamic Sidebar Classic Widget Area Manager
≤3.0.9Update to 3.1.0
- Critical9.8Custom Registration Forms <= 3.7.9.2 - PHP Object Injection
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
<3.7.9.3Update to 3.7.9.3
- Critical9.8Unauthenticated PHP Object Injection
Flickr Gallery
<1.5.3Update to 1.5.3
- Critical9.8Unauthenticated PHP Object Injection
Appointments
<2.2.2Update to 2.2.2
- Medium6.1Cross-Site Scripting
PDF Invoices & Packing Slips for WooCommerce
<2.0.13Update to 2.0.13
- Medium6.5Authenticated Directory Traversal
Insert Pages
<3.2.4Update to 3.2.4
- Medium6.1Cross-Site Scripting
WP Jobs
<1.7Update to 1.7
- High8.8Church Management System for Wordpress Theme < 13-07-2019 - SQL Injection
WPCHURCH - Church Management System for Wordpress
<13-07-2019Update to 13-07-2019
- High8.8Authenticated (Student+) SQL Injection
School Management System for Wordpress
all versionsNo patch available
- High8.8SQL Injection
Hospital Management System for Wordpress
≤08-03-2018Update to 22-05-2018
- Critical9.8SQL Injection
content_timeline
≤4.4.2Update to 4.4.3
- Medium6.1Cross-Site Request Forgery to Cross-Site Scripting
Content Audit
≤1.9.1Update to 1.9.2
- High8.8Apartment Management System for wordpress Theme < 17-07-2019 - SQL Injection
WPAMS - Apartment Management System for wordpress
<17-07-2019Update to 17-07-2019
- High8.8Authenticated SQL Injection
SMSmaster – Multipurpose SMS Gateway for Wordpress
all versionsNo patch available
- High8.8Wordpress Gym Management System (Unknown Version) - SQL Injection
WPGYM - Wordpress Gym Management System
all versionsNo patch available
- Critical9.8SQL Injection
Gallery – Image and Video Gallery with Thumbnails
<1.2.1Update to 1.2.1
- Medium5.3Directory Traversal
Smush – Image Optimization, Compression, Lazy Load, WebP & CDN
≤2.7.5Update to 2.7.6
- Critical9.8Authentication Bypass
Student Result or Employee Database
≤1.6.3Update to 1.6.4
- Medium6.1Reflected Cross-Site Scripting
2kb Amazon Affiliates Store
<2.1.1Update to 2.1.1
- Low3.5Open Redirect in Admin Dashboard
WordPress
≤4.8.1Update to 3.7.22 or 3.8.22 or 3.9.20 or 4.0.19 or 4.1.19 or 4.2.16 or 4.3.12 or 4.4.11 or 4.5.10 or 4.6.7 or 4.7.6 or 4.8.2
- Medium4.3Directory Traversal during unzip
WordPress
≤4.8.1Update to 3.7.22 or 3.8.22 or 3.9.20 or 4.0.19 or 4.1.19 or 4.2.16 or 4.3.12 or 4.4.11 or 4.5.10 or 4.6.7 or 4.7.6 or 4.8.2
- Medium6.4Cross-Site Scripting via Template Name
WordPress
≤4.8.1Update to 3.7.22 or 3.8.22 or 3.9.20 or 4.0.19 or 4.1.19 or 4.2.16 or 4.3.12 or 4.4.11 or 4.5.10 or 4.6.7 or 4.7.6 or 4.8.2
- Medium6.4Cross-Site Scripting via Shortcodes
WordPress
≤4.8.1Update to 3.7.22 or 3.8.22 or 3.9.20 or 4.0.19 or 4.1.19 or 4.2.16 or 4.3.12 or 4.4.11 or 4.5.10 or 4.6.7 or 4.7.6 or 4.8.2
- Medium6.4Cross-Site Scripting in oEmbed
WordPress
≤4.8.1Update to 3.7.22 or 3.8.22 or 3.9.20 or 4.0.19 or 4.1.19 or 4.2.16 or 4.3.12 or 4.4.11 or 4.5.10 or 4.6.7 or 4.7.6 or 4.8.2
- Medium4.9Directory Traversal via Customizer
WordPress
≤4.8.1Update to 3.7.22 or 3.8.22 or 3.9.20 or 4.0.19 or 4.1.19 or 4.2.16 or 4.3.12 or 4.4.11 or 4.5.10 or 4.6.7 or 4.7.6 or 4.8.2
- Medium6.4Cross-Site Scripting via Javascript: and Data: URLs
WordPress
≤4.8.1Update to 3.7.22 or 3.8.22 or 3.9.20 or 4.0.19 or 4.1.19 or 4.2.16 or 4.3.12 or 4.4.11 or 4.5.10 or 4.6.7 or 4.7.6 or 4.8.2
- Critical9.8SQL Injection via Mishandled Placeholders
WordPress
≤4.8.1Update to 3.7.22 or 3.8.22 or 3.9.20 or 4.0.19 or 4.1.19 or 4.2.16 or 4.3.12 or 4.4.11 or 4.5.10 or 4.6.7 or 4.7.6 or 4.8.2
- Medium5.5Stored Cross-Site Scripting via Plugin Names
WordPress
≤4.8.1Update to 3.7.22 or 3.8.22 or 3.9.20 or 4.0.19 or 4.1.19 or 4.2.16 or 4.3.12 or 4.4.11 or 4.5.10 or 4.6.7 or 4.7.6 or 4.8.2
- Critical9.8PHP Object Injection
Post Pay Counter
<2.731Update to 2.731