VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-862Vulnerability type

WordPress Missing Authorization vulnerabilities (page 1313)

AJAX and REST handlers without capability checks, exposing privileged actions to subscribers or anonymous visitors.

Severity
Signals
Software

41,175 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Missing Authorization vulnerabilities (page 1313)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Reflected Cross-Site Scripting
Visitors Online by BestWebSoft<1.0.0Update to 1.0.0
CVE-2017-18537—
Medium6.1Multiple Cross-Site Scripting
Subscriber by BestWebSoft≤1.3.4Update to 1.3.5
CVE-2017-18502—
Medium6.1ReflectedCross-Site Scripting
Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress<3.96Update to 3.96
CVE-2015-9295—
Medium6.1Reflected Cross-Site Scripting
Updater by BestWebSoft≤1.34Update to 1.35
CVE-2017-18565—
Medium6.1Reflected Cross-Site Scripting
Custom Search by BestWebSoft – WordPress Custom Search Plugin≤1.35Update to 1.36
CVE-2017-18494—
Medium6.1Reflected Cross-Site Scripting
Custom Admin Page by BestWebSoft – Configurable WordPress Dashboard Pages Plugin≤0.1.1Update to 0.1.2
CVE-2017-18493—
Medium6.1Reflected Cross-Site Scripting
Contact Form Multi by BestWebSoft – Multiple Forms Plugin for Single WordPress Website<1.2.1Update to 1.2.1
CVE-2017-18490—
Medium6.1Multiple Cross-Site Scripting
SMTP by BestWebSoft≤1.0.9Update to 1.1.0
CVE-2017-18518—
Medium6.1Multiple Cross-Site Scripting
Social Login by BestWebSoft≤0.1Update to 0.2
CVE-2017-18501—
Medium6.1Cross-Site Scripting
Help Center by BestWebSoft≤1.0.4Update to 1.0.5
CVE-2017-18542—
Medium6.1 Multiple Cross-Site Scripting
Analytics by BestWebSoft – Google Analytics Dashboard and Statistic Plugin for WordPress≤1.7.0Update to 1.7.1
CVE-2017-18556—
Medium6.1Multiple Cross-Site Scripting
Pagination by BestWebSoft – Customizable WordPress Content Splitter and Navigation Plugin≤1.0.6Update to 1.0.7
CVE-2017-18527—
Medium6.1Cross-Site Scripting
User Role by BestWebSoft – Add and Customize Roles and Capabilities in WordPress≤1.5.5Update to 1.5.6
CVE-2017-18566—
Medium6.1Reflected Cross-Site Scripting
Maps by BestWebSoft≤1.3.5Update to 1.3.6
CVE-2017-18557—
Medium6.1Cross-Site Scripting
BestWebSoft's Twitter<2.55Update to 2.55
CVE-2017-18505—
Medium6.1Multiple Cross-Site Scripting
AdPush≤1.43Update to 1.44
CVE-2017-18487—
Medium6.1Reflected Cross-Site Scripting
Slideshow Gallery LITE≤1.6.5Update to 1.6.6
CVE-2018-17946—
Critical9.8SQL Injection
SpiderCalendar≤1.5.51Update to 1.5.52
CVE-2017-7719—
High8.8Cross-Site Request Forgery
WHIZZ≤1.1Update to 1.1.1
CVE-2017-8099—
Medium6.5Cross-Site Request Forgery
CopySafe Web Protection – Copy Protect Images<2.6Update to 2.6
CVE-2017-8100—
High8.8Cross-Site Request Forgery
Twitter Cards Meta – Best Twitter Card Plugin for WordPress≤2.4.5Update to 2.5.0
CVE-2017-18504—
Medium6.1Cross-Site Scripting
Twitter Cards Meta – Best Twitter Card Plugin for WordPress<2.5.0Update to 2.5.0
CVE-2017-18503—
Medium6.1All In One Schema Rich Snippets <= 1.4.4 - Cross-Site Scripting
Schema – All In One Schema Rich Snippets<1.5.0Update to 1.5.0
CVE-2018-20977—
Medium5.4Stored Cross-Site Scripting
Image Gallery with Slideshow Plugin≤1.5.2No patch available
CVE-2017-1002011—
Critical9.8Blind SQL Injection via imgid
Image Gallery with Slideshow Plugin≤1.5.2No patch available
CVE-2017-1002013—
Critical9.8SQL Injection via gid
Image Gallery with Slideshow Plugin≤1.5.2No patch available
CVE-2017-1002012—
Critical9.8SQL Injection via gallery_name
Image Gallery with Slideshow Plugin≤1.5.2No patch available
CVE-2017-1002014—
Critical9.8SQL Injection via selectMulGallery
Image Gallery with Slideshow Plugin≤1.5.2No patch available
CVE-2017-1002015—
High8.2Open Proxy
filedownload≤1.4Update to 2.0
CVE-2015-1000002—
Medium6.1Reflected Cross-Site Scripting
YOP Poll<5.8.1Update to 5.8.1
CVE-2017-2127—

Search VulnCrest Radar

Jump to

Are you sure?