CWE-862Vulnerability type
WordPress Missing Authorization vulnerabilities (page 1258)
AJAX and REST handlers without capability checks, exposing privileged actions to subscribers or anonymous visitors.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- High8.8SQL Injection
Popup Like box – Page Plugin
≤3.5.2Update to 3.5.3
- High8.8Authenticated SQL Injection
Survey Maker by AYS
<1.5.6Update to 1.5.6
- High8.8Authenticated SQL Injection
Popup Box – Create Countdown, Coupon, Video, Contact Form Popups
<2.3.4Update to 2.3.4
- High8.8Blind SQL Injection
FAQ Builder AYS
≤1.3.5Update to 1.3.6
- High8.1Authorization Bypass
Workreap - Freelance Marketplace and Directory WordPress Theme
<2.2.2Update to 2.2.2
- High8.8Authenticated SQL Injection
Handsome Testimonials & Reviews
<2.1.1Update to 2.1.1
- High7.2SQL Injection
Secure Copy Content Protection and Content Locking
<2.6.7Update to 2.6.7
- High8.8SQL Injection
Image Slider by Ays- Responsive Slider and Carousel
<2.5.0Update to 2.5.0
- Critical9.83.1.3 - Unauthenticated Privilege Escalation
ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content
3.0.0 – 3.1.3Update to 3.1.4
- Critical9.83.1.3 - Arbitrary File Upload
ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content
3.0.0 – 3.1.3Update to 3.1.4
- Medium6.4Contributor+ Stored Cross-Site Scripting
YouTube Embed, Playlist and Popup by WpDevArt
<2.3.9Update to 2.3.9
- Critical9.83.1.3 - Unauthenticated Privilege Escalation
ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content
3.0.0 – 3.1.3Update to 3.1.4
- Critical9.83.1.3 - Unauthenticated Privilege Escalation
ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content
3.0.0 – 3.1.3Update to 3.1.4
- Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Bookshelf
≤2.0.4No patch available
- Medium4.3Cross-Site Request Forgery Bypass
Edwiser Bridge – WordPress Moodle Integration
≤2.0.6Update to 2.0.7
- Medium5.4Stored Cross-Site Scripting
Yada Wiki
<3.4.1Update to 3.4.1
- High7.2SQL Injection
Side Menu Lite – Sticky Floating Side Menu
≤2.1.1Update to 2.2.1
- Medium5.5Authenticated Stored Cross-Site Scripting
Tutor LMS – eLearning and online course solution
≤1.9.1Update to 1.9.2
- Medium6.1Cross-Site Request Forgery to Stored Cross-Site Scripting
Migrate Users
≤1.0.1No patch available
- Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Event Geek
≤2.5.2No patch available
- Medium6.4Stored Cross-Site Scripting
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress
≤1.0.6Update to 1.0.7
- Critical9.8Server-Side Request Forgery & Remote File Inclusion
Onair2: Radio Station WordPress Theme With Non-Stop Music Player
<3.9.9.2Update to 3.9.9.2
- Medium6.4Authenticated Stored Cross-Site Scripting
Steam Group Viewer
≤2.1No patch available
- Medium6.1Reflected Cross-Site Scripting via extension
W3 Total Cache
<2.1.4Update to 2.1.4
- Medium4.3Authenticated Insecure Direct Object Reference
User Profile Picture – Custom Local Avatars
<2.6.0Update to 2.6.0
- Medium6.1Reflected Cross-Site Scripting
Post Grid
≤2.1.7Update to 2.1.8
- Medium6.1Reflected Cross-site Scripting via id Parameter
Awesome Weather Widget
≤3.0.2No patch available
- Medium5.5Authenticated Stored Cross-Site Scripting
ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content
<3.1.8Update to 3.1.8
- Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Any Hostname
≤1.0.6No patch available
- Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
DrawBlog
≤0.90No patch available