VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-22Vulnerability type

WordPress Path Traversal vulnerabilities (page 1252)

File read or delete functions that accept ../ sequences, exposing wp-config.php or deleting critical files.

Severity
Signals
Software

41,182 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Path Traversal vulnerabilities (page 1252)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Reflected Cross-Site Scripting
jQuery Tagline Rotator≤0.1.5No patch available
CVE-2021-34663—
Medium6.1Reflected Cross-Site Scripting
Media Usage≤0.0.4No patch available
CVE-2021-34652—
Medium6.1Reflected Cross-Site Scripting
Simple Behance Portfolio≤0.2No patch available
CVE-2021-34649—
Medium6.1Reflected Cross-Site Scripting
Calendar_plugin≤1.0No patch available
CVE-2021-34667—
Medium6.1Reflected Cross-Site Scripting
WP SEO Tags≤2.2.7No patch available
CVE-2021-34665—
Medium6.1Reflected Cross-Site Scripting
WP Songbook≤2.0.11No patch available
CVE-2021-34655—
Medium6.1Reflected Cross-Site Scripting
Simple Popup Newsletter≤1.4.7No patch available
CVE-2021-34658—
Medium6.1Reflected Cross-Site Scripting
2Way VideoCalls and Random Chat – HTML5 Webcam Videochat≤5.2.7Update to 5.2.8
CVE-2021-34656—
Medium6.1Smart Email Alerts <= 1.0.10 Reflected Cross-Site Scripting
Smart Email Alerts≤1.0.10No patch available
CVE-2021-34642—
Medium6.1Reflected Cross-Site Scripting
Scribble Maps≤1.2No patch available
CVE-2021-34651—
Medium6.1Reflected Cross-Site Scripting
typofr≤0.11No patch available
CVE-2021-34657—
Medium6.1Reflected Cross-Site Scripting
Multiplayer Games≤3.7No patch available
CVE-2021-34644—
Medium6.1Reflected Cross-Site Scripting
Sidebar Adder 2≤2.0.0No patch available
CVE-2021-34666—
Medium6.1Reflected Cross-Site Scripting
Securimage-WP-Fixed≤3.5.4No patch available
CVE-2021-34640—
Medium6.1Reflected Cross-Site Scripting
Software License Manager<4.4.8Update to 4.4.8
CVE-2021-24560—
Medium4.8Authenticated (Admin+) Stored Cross-Site Scripting
Per page add to head≤1.4.4No patch available
CVE-2021-24619—
Medium5.4Authenticated (Contributor+) Stored Cross-Site Scripting
PDF.js Viewer<2.0.2Update to 2.0.2
CVE-2021-24759—
High8.8Per Page Add To Head <= 1.4.3 Cross-Site Request Forgery to Stored Cross-Site Scripting
Per page add to head<1.4.4Update to 1.4.4
CVE-2021-24586—
Medium5.4Stored Cross-Site Scripting
Daily Prayer Time<2021.08.10Update to 2021.08.10
CVE-2021-24523—
Medium5.4Reflected Cross-Site Scripting
Custom Post View Generator≤0.4.6No patch available
CVE-2021-24605—
Medium4.8Authenticated Stored Cross-Site Scripting
AddToAny Share Buttons<1.7.48Update to 1.7.48
CVE-2021-24616—
Medium5.5Cross-Site Scripting
Book appointment online≤1.38Update to 1.39
CVE-2021-24614—
Medium5.4Authenticated Stored Cross-Site Scripting
WPFront Notification Bar≤2.0.0Update to 2.1.0
CVE-2021-24601—
Medium5.4Authenticated Stored Cross-Site Scripting
AddToAny Share Buttons<1.7.46Update to 1.7.46
CVE-2021-24568—
Medium5.5Admin+ Stored Cross-Site Scripting
Site Reviews<5.13.1Update to 5.13.1
CVE-2021-24603—
Medium6.1Cross-Site Scripting
Keyword Meta≤3.0Update to 3.1
CVE-2021-24611—
High7.2Unauthenticated Cross-Site Scripting
ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content≤3.1.10Update to 3.1.11
CVE-2021-24522—
Medium5.5Authenticated Stored Cross-Site Scripting
Form Builder | Create Responsive Contact Forms≤1.9.8.3Update to 1.9.8.4
CVE-2021-24513—
Medium4.8Authenticated (Admin+) Stored Cross-Site Scripting
Stop Spammers Classic<2021.18Update to 2021.18
CVE-2021-24517—
Medium6.1Reflected Cross-Site Scripting
Titan Frameworkall versionsNo patch available
CVE-2021-24435—

Search VulnCrest Radar

Jump to

Are you sure?