VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-98Vulnerability type

WordPress Local File Inclusion vulnerabilities (page 1353)

Template or module loaders that include attacker-chosen files, often leading to code execution.

Severity
Signals
Software

41,172 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Local File Inclusion vulnerabilities (page 1353)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Cross-Site Scripting
WP-Business Directory≤1.0.2No patch available
CVE-2014-4599—
Medium6.1CBI Referral Manager <= 1.2.1 Cross-Site Scripting
CBI Referral Manager≤1.2.1No patch available
CVE-2014-4517—
Medium6.1Cross-Site Scripting
Infusionsoft Gravity Forms Add-on<1.5.7Update to 1.5.7
CVE-2014-4536—
Medium6.1Cross-Site Scripting
zeenshare≤1.0.1No patch available
CVE-2014-4606—
Medium6.1Multiple Cross-Site Scripting
WP e-Commerce Swipe plugin≤3.1.0No patch available
CVE-2014-4559—
Medium6.1Cross-Site Scripting
Spotlight≤4.7No patch available
CVE-2014-4552—
Medium6.1Reflected Cross-Site Scripting
Votecount For Balatarin≤0.1.1No patch available
CVE-2014-4572—
Medium6.1Reflected Cross-Site Scripting
WP-Planet≤0.1No patch available
CVE-2014-4592—
Medium6.1Stored Cross-Site Scripting
WP Ultimate Email Marketer≤1.1.0No patch available
CVE-2014-4600—
Medium6.1Cross-Site Scripting
Diverse Solutions IDX Real Estate Listings & MLS Search<2.1.1Update to 2.1.1
CVE-2014-4521—
Medium6.1Cross-Site Scripting
Pay Per Media Player≤1.24No patch available
CVE-2014-4543—
High7.1Cross-Site Scripting
Toolpage≤1.6.1No patch available
CVE-2014-4560—
Medium6.1Cross-Site Scripting
swipe-hq-checkout-for-eshop≤3.7.0No patch available
CVE-2014-4556—
Medium6.4Cross-Site Scripting
shortcode-ninja≤1.4No patch available
CVE-2014-4550—
Medium6.1Cross-Site Scripting
verwei.se – WordPress – Twitter≤1.0.2No patch available
CVE-2014-4566—
High7.1Cross-Site Scripting
WooCommerce SagePay Direct Payment Gateway<0.1.6.7Update to 0.1.6.7
CVE-2014-4549—
Medium6.1Cross-Site Scripting
GarageSale<1.2.3Update to 1.2.3
CVE-2014-4532—
Medium6.1Cross-Site Scripting
Import Legacy Media≤0.1No patch available
CVE-2014-4535—
Medium6.1Cross-Site Scripting
Social Connect≤0.10.1Update to 0.10.2
CVE-2014-4551—
Medium6.1Reflected Cross-Site Scripting
ooorl≤1.0.0No patch available
CVE-2014-4542—
Medium6.1Cross-Site Scripting
WP-Contact≤1.0No patch available
CVE-2014-4583—
Medium6.1Cross-Site Scripting
Style It≤1.0No patch available
CVE-2014-4555—
Medium6.1Reflected Cross-Site Scripting
HTML5 Video Player with Playlist≤2.4.0No patch available
CVE-2014-4534—
Medium6.1Cross-Site Scripting
Conversion Ninjaall versionsNo patch available
CVE-2014-4017—
High8.8SQL Injection
Pinpoint Booking System – Legacy version<1.3Update to 1.3
CVE-2014-3210—
High8.8Cross-Site Request Forgery
Login rebuilder<1.2.0Update to 1.2.0
CVE-2014-3882—
Medium6.13.9.001 - Cross-Site Scripting
iMember360is3.8.012 – <3.9.002Update to 3.9.002
CVE-2014-3842—
High8.8Cross-Site Request Forgery
Photo Gallery by 10Web – Mobile-Friendly Image Gallery<1.2.42Update to 1.2.42
CVE-2015-9380—
Medium4.3Cross-Site Request Forgery
Search Everything<8.1.1Update to 8.1.1
CVE-2014-3843—
Medium4.3Cross-Site Request Forgery
TinyMCE Color Picker<1.2Update to 1.2
CVE-2014-3845—

Search VulnCrest Radar

Jump to

Are you sure?