VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-200Vulnerability type

WordPress Information Exposure vulnerabilities (page 1313)

Debug logs, backups and exports left reachable without authentication.

Severity
Signals
Software

41,175 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Information Exposure vulnerabilities (page 1313)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Cross-Site Scripting
User Role by BestWebSoft – Add and Customize Roles and Capabilities in WordPress≤1.5.5Update to 1.5.6
CVE-2017-18566—
Medium6.1Reflected Cross-Site Scripting
Maps by BestWebSoft≤1.3.5Update to 1.3.6
CVE-2017-18557—
Medium6.1Multiple Cross-Site Scripting
AdPush≤1.43Update to 1.44
CVE-2017-18487—
Medium6.1Reflected Cross-Site Scripting
Custom Search by BestWebSoft – WordPress Custom Search Plugin≤1.35Update to 1.36
CVE-2017-18494—
Medium6.1Multiple Cross-Site Scripting
Subscriber by BestWebSoft≤1.3.4Update to 1.3.5
CVE-2017-18502—
Medium6.1Reflected Cross-Site Scripting
Custom Admin Page by BestWebSoft – Configurable WordPress Dashboard Pages Plugin≤0.1.1Update to 0.1.2
CVE-2017-18493—
Medium6.1Reflected Cross-Site Scripting
Updater by BestWebSoft≤1.34Update to 1.35
CVE-2017-18565—
Medium6.1Reflected Cross-Site Scripting
Contact Form Multi by BestWebSoft – Multiple Forms Plugin for Single WordPress Website<1.2.1Update to 1.2.1
CVE-2017-18490—
Medium6.1Reflected Cross-Site Scripting
Visitors Online by BestWebSoft<1.0.0Update to 1.0.0
CVE-2017-18537—
Medium6.1Multiple Cross-Site Scripting
Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress≤1.5.6Update to 1.5.7
CVE-2017-18492—
Medium6.1ReflectedCross-Site Scripting
Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress<3.96Update to 3.96
CVE-2015-9295—
Medium6.1Reflected Cross-Site Scripting
BestWebSoft’s Pinterest≤1.0.4Update to 1.0.5
CVE-2017-18517—
Medium6.1Reflected Cross-Site Scripting
Testimonials by BestWebSoft≤0.1.8Update to 0.1.9
CVE-2017-18558—
Medium6.1Reflected Cross-Site Scripting
Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress<4.0.6Update to 4.0.6
CVE-2017-18491—
Medium6.1Cross-Site Scripting
Help Center by BestWebSoft≤1.0.4Update to 1.0.5
CVE-2017-18542—
Medium6.1 Multiple Cross-Site Scripting
Analytics by BestWebSoft – Google Analytics Dashboard and Statistic Plugin for WordPress≤1.7.0Update to 1.7.1
CVE-2017-18556—
Critical9.8SQL Injection
SpiderCalendar≤1.5.51Update to 1.5.52
CVE-2017-7719—
Medium6.1Reflected Cross-Site Scripting
Slideshow Gallery LITE≤1.6.5Update to 1.6.6
CVE-2018-17946—
High8.8Cross-Site Request Forgery
WHIZZ≤1.1Update to 1.1.1
CVE-2017-8099—
Medium6.5Cross-Site Request Forgery
CopySafe Web Protection – Copy Protect Images<2.6Update to 2.6
CVE-2017-8100—
Medium6.1Cross-Site Scripting
Twitter Cards Meta – Best Twitter Card Plugin for WordPress<2.5.0Update to 2.5.0
CVE-2017-18503—
High8.8Cross-Site Request Forgery
Twitter Cards Meta – Best Twitter Card Plugin for WordPress≤2.4.5Update to 2.5.0
CVE-2017-18504—
Medium6.1All In One Schema Rich Snippets <= 1.4.4 - Cross-Site Scripting
Schema – All In One Schema Rich Snippets<1.5.0Update to 1.5.0
CVE-2018-20977—
Critical9.8SQL Injection via gallery_name
Image Gallery with Slideshow Plugin≤1.5.2No patch available
CVE-2017-1002014—
Medium5.4Stored Cross-Site Scripting
Image Gallery with Slideshow Plugin≤1.5.2No patch available
CVE-2017-1002011—
Critical9.8SQL Injection via gid
Image Gallery with Slideshow Plugin≤1.5.2No patch available
CVE-2017-1002012—
Critical9.8Blind SQL Injection via imgid
Image Gallery with Slideshow Plugin≤1.5.2No patch available
CVE-2017-1002013—
Critical9.8SQL Injection via selectMulGallery
Image Gallery with Slideshow Plugin≤1.5.2No patch available
CVE-2017-1002015—
High8.2Open Proxy
filedownload≤1.4Update to 2.0
CVE-2015-1000002—
Medium6.1Reflected Cross-Site Scripting
YOP Poll<5.8.1Update to 5.8.1
CVE-2017-2127—

Search VulnCrest Radar

Jump to

Are you sure?