VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-22Vulnerability type

WordPress Path Traversal vulnerabilities (page 1348)

File read or delete functions that accept ../ sequences, exposing wp-config.php or deleting critical files.

Severity
Signals
Software

41,172 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Path Traversal vulnerabilities (page 1348)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Reflected Cross-Site Scripting
custom-tables≤3.4.4No patch available
CVE-2012-20003—
Medium6.1Reflected Cross Site Scripting
WHOIS≤1.4.2.2Update to 1.4.2.3
CVE-2011-5194—
Medium5.3Information Disclosure
Portable phpMyAdmin≤1.4.1No patch available
CVE-2013-4454—
Medium6.1Open Redirection
WP Symposium≤13.04Update to 13.05
CVE-2013-2694—
Medium6.3Cross-Site Request Forgery
WordPress Content Slide≤1.4.2No patch available
CVE-2013-2708—
High8.8Cross-Site Request Forgery
Stream Video Player≤1.4.1No patch available
CVE-2013-2706—
High8.8Cross-Site Request Forgery
Xhanch – My Twitter≤2.7.6Update to 2.7.7
CVE-2013-3253—
High7.2Stored Cross-Site Scripting
PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links<1.6.3Update to 1.6.3
CVE-2013-1636—
Medium6.1Cross-Site Scripting via Search Parameter
All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)≤2.0.3Update to 2.0.3.1
CVE-2013-5988—
High7.1Cross-Site Scripting
Polylang<1.5.2Update to 1.5.2
CVE-2014-4855—
Medium6.1Cross-Site scripting
Hot Files: File Sharing and Download Manager Plugin≤1.0.0No patch available
CVE-2014-4588—
Medium6.1Reflected Cross-Site Scripting
Redirection<2.2.9Update to 2.2.9
CVE-2011-5329—
Medium6.1Cross-Site Scripting
Count per Day≤3.1.1Update to 3.2
CVE-2012-3434—
Medium6.4Stored Cross-Site Scripting
BuddyPress≤1.9.1Update to 1.9.2
CVE-2014-1888—
Medium6.1Cross-Site Scripting
Crowdsignal Dashboard – Polls, Surveys & more≤2.0.24Update to 2.0.25
CVE-2014-4856—
Medium6.1Unauthenticated Stored Cross-Site Scripting
Mail Subscribe List≤2.0.9Update to 2.1
CVE-2013-10026—
Medium6.1Cross-Site Scripting
WP-Table Reloaded≤1.9.3Update to 1.9.4
CVE-2013-1463—
Medium6.1Reflected Cross-Site Scripting
WP App Maker≤1.0.16.4No patch available
CVE-2014-4578—
Medium5.3Cross-Site Scripting
Adminimize<1.7.22Update to 1.7.22
CVE-2011-5128—
Critical9.8Local/Remote File Inclusion
SlideDeck 2 Lite Responsive Content Slider≤2.3.3Update to 2.3.5
CVE-2013-7483—
Medium6.1Multiple Cross-Site Scripting
Events Manager – Calendar, Bookings, Tickets, Appointments and more!≤5.5.1Update to 5.5.2
CVE-2013-7477—
Medium6.1Reflected Cross-Site Scripting
WPCB≤2.4.8No patch available
CVE-2014-4581—
High8.8Cross-Site Request Forgery
sexybookmarks≤6.1.4.0Update to 6.1.5.0
CVE-2013-3256—
Medium6.1Cross-Site Scripting
WP Construction Mode≤1.8Update to 1.9
CVE-2014-4854—
Medium6.1Cross-Site Scripting
HK Exif Tags≤1.11Update to 1.12
CVE-2014-100007—
Medium6.1Cross-Site Scripting
Tweet Blender≤4.0.1Update to 4.0.2
CVE-2013-6342—
High8.8Cross-Site Request Forgery
underConstruction<1.09Update to 1.09
CVE-2013-2699—
Critical9.8Remote Code Execution
WP Super Cache<1.3.2Update to 1.3.2
CVE-2013-2011—
High8.8Cross-Site Request Forgery to Cross-Site Scripting
Contextual Related Posts≤1.8.6Update to 1.8.7
CVE-2013-2710—
Critical9.8Arbitrary File Upload
MailPoet Newsletters (Previous)≤2.6.6Update to 2.6.7
CVE-2014-4725—

Search VulnCrest Radar

Jump to

Are you sure?