CWE-22Vulnerability type
WordPress Path Traversal vulnerabilities (page 132)
File read or delete functions that accept ../ sequences, exposing wp-config.php or deleting critical files.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- High7.2Authenticated (Admin+) Arbitrary File Upload
Rara One Click Demo Import
≤1.3.4Update to 1.3.5
- Medium4.3Missing Authorization
Advanced Customized Prompts
≤1.0.1No patch available
- Critical9.8Unauthenticated Arbitrary File Upload
Teddy Bear Customize Addon
≤1.0.5No patch available
- Medium6.5Authenticated (Import_contacts+) Path Traversal
Groundhogg — CRM, Newsletters, and Marketing Automation
≤4.7.1Update to 4.7.2
- High8.1Authenticated (Contributor+) Arbitrary File Deletion
Visualizer – Tables & Charts Manager with Built-in AI Generator
<4.0.6Update to 4.0.6
- Medium6.5Unauthenticated Arbitrary Shortcode Execution
Simple CAPTCHA with Cloudflare Turnstile
≤1.42.1Update to 1.42.3
- Medium6.43.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Sina Extension for Elementor
3.7.1 – 3.10.3Update to 3.10.4
- Medium5.3Unauthenticated Information Exposure
ZHBackup – Backup, Restore & Migration
≤2.4.2Update to 2.4.3
- Medium5.3Missing Authorization
Shirt Product Designer for WooCommerce
1.0.4 – 1.0.4No patch available
- Critical9.1Unauthenticated Arbitrary File Deletion
Advanced Product Fields Extended for WooCommerce
≤3.1.6Update to 3.1.7
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
Advanced Customized Prompts
≤1.0.1No patch available
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
Translate WordPress with GTranslate
<3.0.10Update to 3.0.10
- High8.8Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret
WP Plugin Hostgator
≤3.2.0Update to 3.2.1
- High8.8Authenticated (Subscriber+) Privilege Escalation to Admin via wp_ajax_yith_wcwtl_add_user
YITH WooCommerce Waitlist Premium
≤3.35.0Update to 3.36.0
- High7.2Unauthenticated Stored Cross-Site Scripting via 'wpl_user_preference' Parameter
WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode
≤4.4.1Update to 4.4.2
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute
Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
≤3.2.4Update to 3.2.5
- Medium6.5Authenticated (Administrator+) SQL Injection via 'feed' Parameter
WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping
≤2.23.7Update to 2.23.8
- High7.2Authenticated (Editor+) Privilege Escalation to Fresh-Install Default Capability Grant
PublishPress Capabilities: User Role Access Control, Admin Area Permissions
≤2.50.0Update to 2.50.1
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation via 'plugin' Parameter
Checkout Custom Fields Builder for WooCommerce
≤1.1.5Update to 1.1.6
- Medium5.3Missing Authorization to Unauthenticated Account Linking / Site Takeover via 'force_ic_connect' and 'apikey' Parameters
WP Compress – Instant Performance & Speed Optimization
≤7.22.01Update to 7.22.38
- High8.1Unauthenticated Authentication Bypass via Default '__token__' Fallback in REST Migration Endpoint
Next-Cart Store to WooCommerce Migration
≤3.9.8Update to 3.9.9
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Agreement Grant Token Deletion via disconnect_callback Function
ilGhera Reviso Exporter for WooCommerce
≤1.2.3Update to 1.2.4
- Medium5.3Missing Authorization to Unauthenticated Arbitrary Product Price Manipulation via 'wpfnl_load_payment' AJAX Action
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell
≤3.12.13Update to 3.13.0
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial via 'user_id' Parameter
Awesome Support – WordPress HelpDesk & Support Plugin
≤6.3.9Update to 6.4.0
- High7.2Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter
WPBot – AI ChatBot for WordPress & Growth Suite: SEO, AI Writer, Email Marketing, Social Media
≤8.7.3Update to 8.7.4
- Medium4.3Missing Authorization to Authenticated (Contributor+) Arbitrary Recipe Ownership Takeover and Unpublishing via '[wprm-recipe]' Shortcode
WP Recipe Maker
≤10.8.0Update to 10.8.1
- Medium5.4Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via notification-flow REST API Endpoint
Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce
≤4.1.17Update to 4.1.18
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting via 'first_name' Parameter
WP Crowdfunding
≤2.2.1Update to 2.2.2
- Medium4.9Authenticated (Shop Manager+) SQL Injection via 'wpneo_reward' Post Meta
WP Crowdfunding
≤2.2.1Update to 2.2.2
- Medium6.1Reflected Cross-Site Scripting via 'tab_group_section' Parameter
User Access Manager
≤2.3.18Update to 2.3.19