CWE-502Vulnerability type
WordPress PHP Object Injection vulnerabilities (page 1268)
unserialize() on user input. Exploitable when a POP chain exists in WordPress, a plugin or a theme.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- High8.1Improper Access Control leading to Table Data Deletion
wpDataTables (Premium)
<3.4.2Update to 3.4.2
- Medium6.5Blind SQL Injection via length Parameter
wpDataTables (Premium)
<3.4.2Update to 3.4.2
- High7.2Authenticated (Admin+) Remote Code Execution
WP Super Cache
<1.7.2Update to 1.7.2
- High8.1Improper Access Control leading to Table Permission Takeover
wpDataTables (Premium)
<3.4.2Update to 3.4.2
- Medium6.4Options Change to Stored Cross-Site Scripting
Flo Forms – Easy Drag & Drop Form Builder
≤1.0.35Update to 1.0.36
- High8.8Privilege Escalation via REST API
BuddyPress
5.0.0 – 7.2.0Update to 7.2.1
- Medium6.5Blind SQL Injection via start Parameter
wpDataTables (Premium)
<3.4.2Update to 3.4.2
- Medium6.1301 Redirect Manager <= 6.3 - Reflected Cross-Site Scripting
SEO Redirection Plugin – 301 Redirect Manager
≤6.3Update to 6.4
- Medium6.5SQL Injection via tutor_quiz_builder_get_question_form
Tutor LMS – eLearning and online course solution
≤1.8.2Update to 1.8.3
- High8.8Unprotected AJAX including Privilege Escalation
Tutor LMS – eLearning and online course solution
<1.7.7Update to 1.7.7
- Medium6.5SQL Injection
Tutor LMS – eLearning and online course solution
<1.7.7Update to 1.7.7
- Medium6.5SQL Injection
Tutor LMS – eLearning and online course solution
<1.7.7Update to 1.7.7
- Medium5.4Reflected Cross-Site Scripting
Related Posts for WordPress
≤2.0.3Update to 2.0.4
- High8.8SQL Injection via tutor_quiz_builder_get_answers_by_question
Tutor LMS – eLearning and online course solution
≤1.8.2Update to 1.8.3
- High8.8SQL Injection via tutor_answering_quiz_question/get_answer_by_id
Tutor LMS – eLearning and online course solution
<1.8.3Update to 1.8.3
- Medium6.1Reflected Cross-Site Scripting
Social Slider Feed – Social Media Feed & Gallery Widgets
<1.8.5Update to 1.8.5
- High8.8Cross-Site Request Forgery to Cross-Site Scripting
VM Backups
≤1.0No patch available
- Medium4.3Cross-Site Request Forgery
VM Backups
≤1.0No patch available
- Medium6.1Unauthenticated Stored Cross-Site Scripting
JH 404 Logger
≤1.1No patch available
- High8.1Cross-Site Request Forgery
Database Backups
≤1.2.2.6No patch available
- Critical9.8Authentication Bypass
The Plus Addons for Elementor Page Builder Pro
<4.1.7Update to 4.1.7
- High7.5Unauthenticated Blind SQL Injection
Anti-Spam, Spam FireWall by CleanTalk
≤5.153.3Update to 5.153.4
- High8.8Authenticated SQL Injection
Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
<2.5.6Update to 2.5.6
- Critical9.8Arbitrary File Upload
WooCommerce Upload Files
<59.4Update to 59.4
- Medium6.5Sensitive Information Disclosure
User Profile Picture
<2.5.0Update to 2.5.0
- Medium6.1Reflected Cross-Site Scripting
Advanced Order Export For WooCommerce
≤3.1.7Update to 3.1.8
- Medium4.3Cross-Site Request Forgery Bypass
Better Search – Relevant search results for WordPress
≤2.5.2Update to 2.5.3
- Medium4.3Cross-Site Request Forgery Bypass
Post SMTP – Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
≤2.0.20Update to 2.0.21
- High8.8Cross-Site Request Forgery to Settings Import
Better Search – Relevant search results for WordPress
<2.5.3Update to 2.5.3
- Medium5.4Cross-Site Request Forgery Bypass
Forminator Forms – Contact Form, Payment Form & Custom Form Builder
<1.13.5Update to 1.13.5