VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-862Vulnerability type

WordPress Missing Authorization vulnerabilities (page 1252)

AJAX and REST handlers without capability checks, exposing privileged actions to subscribers or anonymous visitors.

Severity
Signals
Software

41,182 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Missing Authorization vulnerabilities (page 1252)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Reflected Cross-Site Scripting
Simple Behance Portfolio≤0.2No patch available
CVE-2021-34649—
Medium6.1Reflected Cross-Site Scripting
Media Usage≤0.0.4No patch available
CVE-2021-34652—
Medium6.1Reflected Cross-Site Scripting
jQuery Tagline Rotator≤0.1.5No patch available
CVE-2021-34663—
Medium6.1Reflected Cross-Site Scripting
Calendar_plugin≤1.0No patch available
CVE-2021-34667—
Medium6.1Reflected Cross-Site Scripting
WP Songbook≤2.0.11No patch available
CVE-2021-34655—
Medium6.1Reflected Cross-Site Scripting
WP SEO Tags≤2.2.7No patch available
CVE-2021-34665—
Medium6.1Reflected Cross-Site Scripting
Simple Popup Newsletter≤1.4.7No patch available
CVE-2021-34658—
Medium6.1Reflected Cross-Site Scripting
2Way VideoCalls and Random Chat – HTML5 Webcam Videochat≤5.2.7Update to 5.2.8
CVE-2021-34656—
Medium6.1Reflected Cross-Site Scripting
typofr≤0.11No patch available
CVE-2021-34657—
Medium6.1Reflected Cross-Site Scripting
Scribble Maps≤1.2No patch available
CVE-2021-34651—
Medium6.1Smart Email Alerts <= 1.0.10 Reflected Cross-Site Scripting
Smart Email Alerts≤1.0.10No patch available
CVE-2021-34642—
Medium6.1Reflected Cross-Site Scripting
Multiplayer Games≤3.7No patch available
CVE-2021-34644—
Medium6.1Reflected Cross-Site Scripting
Sidebar Adder 2≤2.0.0No patch available
CVE-2021-34666—
Medium6.1Reflected Cross-Site Scripting
Securimage-WP-Fixed≤3.5.4No patch available
CVE-2021-34640—
High8.8Per Page Add To Head <= 1.4.3 Cross-Site Request Forgery to Stored Cross-Site Scripting
Per page add to head<1.4.4Update to 1.4.4
CVE-2021-24586—
Medium6.1Reflected Cross-Site Scripting
Software License Manager<4.4.8Update to 4.4.8
CVE-2021-24560—
Medium5.4Authenticated (Contributor+) Stored Cross-Site Scripting
PDF.js Viewer<2.0.2Update to 2.0.2
CVE-2021-24759—
Medium4.8Authenticated (Admin+) Stored Cross-Site Scripting
Per page add to head≤1.4.4No patch available
CVE-2021-24619—
Medium5.4Stored Cross-Site Scripting
Daily Prayer Time<2021.08.10Update to 2021.08.10
CVE-2021-24523—
Medium5.5Cross-Site Scripting
Book appointment online≤1.38Update to 1.39
CVE-2021-24614—
Medium5.4Reflected Cross-Site Scripting
Custom Post View Generator≤0.4.6No patch available
CVE-2021-24605—
Medium4.8Authenticated Stored Cross-Site Scripting
AddToAny Share Buttons<1.7.48Update to 1.7.48
CVE-2021-24616—
Medium5.4Authenticated Stored Cross-Site Scripting
WPFront Notification Bar≤2.0.0Update to 2.1.0
CVE-2021-24601—
Medium6.1Reflected Cross-Site Scripting
Titan Frameworkall versionsNo patch available
CVE-2021-24435—
Medium4.8Authenticated (Admin+) Stored Cross-Site Scripting
Stop Spammers Classic<2021.18Update to 2021.18
CVE-2021-24517—
Medium6.1Cross-Site Scripting
Keyword Meta≤3.0Update to 3.1
CVE-2021-24611—
Medium5.5Authenticated Stored Cross-Site Scripting
Form Builder | Create Responsive Contact Forms≤1.9.8.3Update to 1.9.8.4
CVE-2021-24513—
Medium5.4Authenticated Stored Cross-Site Scripting
AddToAny Share Buttons<1.7.46Update to 1.7.46
CVE-2021-24568—
Medium5.5Admin+ Stored Cross-Site Scripting
Site Reviews<5.13.1Update to 5.13.1
CVE-2021-24603—
High7.2Unauthenticated Cross-Site Scripting
ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content≤3.1.10Update to 3.1.11
CVE-2021-24522—

Search VulnCrest Radar

Jump to

Are you sure?