VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-862Vulnerability type

WordPress Missing Authorization vulnerabilities (page 1353)

AJAX and REST handlers without capability checks, exposing privileged actions to subscribers or anonymous visitors.

Severity
Signals
Software

41,172 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Missing Authorization vulnerabilities (page 1353)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Cross-Site Scripting
WP-RSS-Spreadshirt-3DCube-Gallery≤1.3No patch available
CVE-2014-4553—
Medium6.1Reflected Cross-Site Scripting
Local Weather≤1.0No patch available
CVE-2014-4561—
Medium6.1Cross-Site Scripting
proquoter≤1.0No patch available
CVE-2014-4545—
Medium6.1Cross-Site Scripting
WP-Business Directory≤1.0.2No patch available
CVE-2014-4599—
Medium6.1CBI Referral Manager <= 1.2.1 Cross-Site Scripting
CBI Referral Manager≤1.2.1No patch available
CVE-2014-4517—
High7.1Cross-Site Scripting
GEO Redirector≤1.0.1No patch available
CVE-2014-4533—
Medium6.1Reflected Cross-Site Scripting
Movies≤0.6No patch available
CVE-2014-4539—
Medium6.1Reflected Cross-Site Scripting
Votecount For Balatarin≤0.1.1No patch available
CVE-2014-4572—
Medium6.1Cross-Site Scripting
WordPress Social Login≤2.1.5Update to 2.1.6
CVE-2014-4576—
Medium6.1Cross-Site Scripting
verwei.se – WordPress – Twitter≤1.0.2No patch available
CVE-2014-4566—
Medium6.1Cross-Site Scripting
Diverse Solutions IDX Real Estate Listings & MLS Search<2.1.1Update to 2.1.1
CVE-2014-4521—
Medium6.1Cross-Site Scripting
Pay Per Media Player≤1.24No patch available
CVE-2014-4543—
Medium6.1Cross-Site Scripting
GarageSale<1.2.3Update to 1.2.3
CVE-2014-4532—
Medium6.1Stored Cross-Site Scripting
WP Ultimate Email Marketer≤1.1.0No patch available
CVE-2014-4600—
Medium6.4Cross-Site Scripting
shortcode-ninja≤1.4No patch available
CVE-2014-4550—
High7.1Cross-Site Scripting
WooCommerce SagePay Direct Payment Gateway<0.1.6.7Update to 0.1.6.7
CVE-2014-4549—
Medium6.1Cross-Site Scripting
swipe-hq-checkout-for-eshop≤3.7.0No patch available
CVE-2014-4556—
High7.1Cross-Site Scripting
Toolpage≤1.6.1No patch available
CVE-2014-4560—
Medium6.1Reflected Cross-Site Scripting
WP-Planet≤0.1No patch available
CVE-2014-4592—
Medium6.1Cross-Site Scripting
Spotlight≤4.7No patch available
CVE-2014-4552—
Medium6.1Cross-Site Scripting
Infusionsoft Gravity Forms Add-on<1.5.7Update to 1.5.7
CVE-2014-4536—
Medium6.1Cross-Site Scripting
zeenshare≤1.0.1No patch available
CVE-2014-4606—
Medium6.1Multiple Cross-Site Scripting
WP e-Commerce Swipe plugin≤3.1.0No patch available
CVE-2014-4559—
Medium6.1Cross-Site Scripting
Conversion Ninjaall versionsNo patch available
CVE-2014-4017—
High8.8SQL Injection
Pinpoint Booking System – Legacy version<1.3Update to 1.3
CVE-2014-3210—
Medium6.13.9.001 - Cross-Site Scripting
iMember360is3.8.012 – <3.9.002Update to 3.9.002
CVE-2014-3842—
High8.8Cross-Site Request Forgery
Login rebuilder<1.2.0Update to 1.2.0
CVE-2014-3882—
High8.8Cross-Site Request Forgery
Photo Gallery by 10Web – Mobile-Friendly Image Gallery<1.2.42Update to 1.2.42
CVE-2015-9380—
Medium4.3Cross-Site Request Forgery
Search Everything<8.1.1Update to 8.1.1
CVE-2014-3843—
Medium4.3Cross-Site Request Forgery
TinyMCE Color Picker<1.2Update to 1.2
CVE-2014-3845—

Search VulnCrest Radar

Jump to

Are you sure?