CWE-862Vulnerability type
WordPress Missing Authorization vulnerabilities (page 23)
AJAX and REST handlers without capability checks, exposing privileged actions to subscribers or anonymous visitors.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium5.4Unauthenticated Stored Cross-Site Scripting via RSS-linked article `<meta name="description">`
Content Pilot – Autoblogging & Affiliate Marketing Suite
≤2.2.4Update to 2.2.5
- Critical9.8Unauthenticated Remote Code Execution via 'id' Parameter Function Injection
Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker
≤4.1.1Update to 4.1.2
- Medium5.9Missing Authorization to Unauthenticated Sensitive Information Exposure via 'rel_tab' Parameter
WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps
≤5.5.88Update to 5.5.89
- High8.1Unauthenticated Authentication Bypass via Insufficient Email Verification in Social Login Callback
Wp Social Login and Register Social Counter
≤3.2.2Update to 3.2.3
- Critical9.8Unauthenticated Authentication Bypass via 'email' Parameter
Uncanny Toolkit for LearnDash
≤3.8.2Update to 3.8.3
- Medium6.5Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via /wp-admin/profile.php inline redux_<opt_name> JavaScript
Redux Framework
≤4.5.15Update to 4.5.16
- High8.8Unauthenticated Privilege Escalation via Mass Assignment to Mass Assignment via '/public/booking' Endpoint
Rox Appointment Booking – Event, Calendar & Appointment Scheduling
≤1.3.1Update to 1.3.2
- High7.2Unauthenticated Stored Cross-Site Scripting via Email Subject via wp_mail
WPO365 | MICROSOFT 365 GRAPH MAILER
≤6.2Update to 6.3
- Medium6.5Authenticated (Subscriber+) SQL Injection via order Parameter
WP2LEADS | WordPress und KlickTipp einfach verbinden – WooCommerce und KlickTipp einfach verbinden
≤3.5.6Update to 3.5.12
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Profile Field via %%archive_title%% Template Tag
SEOPress – AI SEO Plugin & On-site SEO
≤10.3Update to 10.4
- High7.2Unauthenticated Stored Cross-Site Scripting via Request Path (REQUEST_URI) in Traffic Log
Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning
≤22.3.2Update to 22.3.4
- Medium4.3Missing Authorization to Authenticated (Author+) Image Replacement
Perfect Images: Regenerate Thumbnails, Image Sizes, WebP & AVIF
≤7.2.0Update to 7.2.1
- High7.5Authenticated (Subscriber+) Sensitive Information Exposure to Privilege Escalation to Mail Log Viewer / Password-Reset Email Disclosure
Mail logging & Catcher
≤2.2.0Update to 2.3.0
- High7.5Unauthenticated SQL Injection via 'bwfan_cart_id' Parameter
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce
≤3.8.5.2Update to 3.8.6
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting via User Profile Website (user_url) Field
Discussion Board – WordPress Forum Plugin
≤2.6.0Update to 2.6.1
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting via 'degreetitle' Parameter
WP Job Portal – AI-Powered Recruitment System for Company or Job Board website
≤2.7.0Update to 2.7.1
- Medium4.3Missing Authorization to Authenticated (Custom+) ESP Credential Overwrite and Irreversible OAuth Token Deletion via 'hustle_provider_migrate_hubspot' (and sibling migrate_*) AJAX Action
Hustle – Email Marketing, Lead Generation, Optins, Popups
≤7.8.14.3Update to 7.8.14.4
- High7.2Unauthenticated Stored Cross-Site Scripting via Billing First Name / Last Name / Company / Customer Note fields at guest checkout
PDF Invoices & Packing Slips for WooCommerce
≤5.16.4Update to 5.16.5
- Medium5.3Unauthenticated Sensitive Information Exposure via Yearly-Reset Invoice Attachment Cache
PDF Invoices & Packing Slips for WooCommerce
≤5.16.5Update to 5.16.6
- Critical9.1Missing Authorization to Unauthenticated Arbitrary Calendar Note Deletion via wpbs_calendar_remove_note AJAX Action
WP Booking System – Booking Calendar
≤2.1.0.5Update to 2.1.0.6
- Medium6.1Reflected Cross-Site Scripting via 'wpf_fid' JSON Parameter
Product Filter for WooCommerce by WBW
≤3.4.6Update to 3.4.7
- Medium5.3Missing Authorization to Unauthenticated Information Disclosure via filterSettings[default_query] Parameter
Product Filter for WooCommerce by WBW
≤3.4.6Update to 3.4.7
- Medium5.4Unauthenticated File Deletion via 'wcpr_image_upload_id' Parameter
Revopic – Photo Reviews for WooCommerce
≤1.2.31Update to 1.2.32
- Medium6.1Unauthenticated Stored Cross-Site Scripting via Open Graph og:title Meta Tag
Webmention
≤5.10.1Update to 5.10.2
- Medium5.3Missing Authorization
FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution
≤3.2.6Update to 3.3.0
- Medium4.3Missing Authorization
Unlimited Elements for Elementor
≤2.0.26Update to 2.0.27
- Medium4.3Missing Authorization
Bookit — Booking & Appointment Calendar
≤2.6.0.6Update to 2.6.0.7
- Medium4.3Missing Authorization
Event Tickets and Registration
≤5.30.2Update to 5.30.3
- Medium4.3Missing Authorization
Booktics – Appointment Booking Calendar for Service Businesses
≤1.0.31Update to 1.0.32
- High7.5Authenticated (Contributor+) Local File Inclusion
Unlimited Elements for Elementor
≤2.0.26Update to 2.0.27