CWE-502Vulnerability type
WordPress PHP Object Injection vulnerabilities (page 129)
unserialize() on user input. Exploitable when a POP chain exists in WordPress, a plugin or a theme.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
CoolClock
<4.3.8Update to 4.3.8
- Medium6.31.1.2 - Authenticated (Contributor+) Privilege Escalation
Registration Form for WooCommerce
1.1.0 – 1.1.2Update to 1.1.3
- High7.2Unauthenticated Open Redirect
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
<5.2.8Update to 5.2.8
- Medium5.3Unauthenticated Information Exposure
Contact Form to Chat Apps | Click to Chat to Order – FormyChat
≤2.15.7Update to 2.15.8
- Medium5.3Missing Authorization
Passster – Password Protect Pages and Content
≤4.3.13Update to 4.3.14
- Medium4.9Authenticated (Editor+) SQL Injection
Booking for Appointments and Events Calendar – Amelia
≤2.4.9Update to 2.4.10
- Medium4.9Authenticated (Editor+) SQL Injection
Sky Addons for Elementor – 160+ Widgets, GSAP Animations, Templates & Theme Builder
≤3.8.4Update to 3.8.5
- Medium6.3Authenticated (Subscriber+) Privilege Escalation
SMS Alert – SMS Notifications & OTP Login, COD Verification, Abandoned Cart Recovery
≤3.9.9Update to 4.0.0
- High8.1Unauthenticated PHP Object Injection
ThemeREX Addons
<2.45.0Update to 2.45.0
- High8.1Unauthenticated PHP Object Injection
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI
≤3.6.0Update to 3.6.1
- Medium5.3Unauthenticated Information Exposure
ElasticPress
≤5.3.4Update to 5.3.5
- High8.8Authenticated (Subscriber+) Privilege Escalation via Mass Assignment in Sub-Account Creation
MemberPress Corporate Accounts
≤1.5.39Update to 1.6.0
- Medium4.3Insecure Direct Object Reference to Notifications Deletion
BuddyPress
≤14.3.3Update to 14.3.4
- High7.2Unauthenticated Stored Cross-Site Scripting via 'comment' Parameter
Kirki – Freeform Page Builder, Website Builder & Customizer
≤6.2.0Update to 6.2.1
- Medium5.3Missing Authorization
Booktics – Appointment Booking Calendar for Service Businesses
≤1.0.23Update to 1.0.24
- Medium6.1Reflected Cross-Site Scripting
HUSKY – Products Filter for WooCommerce Professional. MCP is onboard
≤1.4.3Update to 1.4.3.1
- Medium6.1Reflected Cross-Site Scripting
Unlimited Elements for Elementor
≤2.0.16Update to 2.0.17
- Medium6.1Reflected Cross-Site Scripting
WP-Members Membership Plugin
≤3.5.6Update to 3.5.7
- Medium6.1Reflected Cross-Site Scripting
Themify – WooCommerce Product Filter
≤1.5.5Update to 1.5.6
- High7.2Unauthenticated Stored Cross-Site Scripting
Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner…
≤2.10.2Update to 2.10.3
- High7.2Unauthenticated Stored Cross-Site Scripting
Simple Ajax Chat – Add a Fast, Secure Chat Box
≤20260811Update to 20260827
- High7.2Unauthenticated Stored Cross-Site Scripting
WP Photo Album Plus
≤9.2.08.003Update to 9.2.10.001
- High7.5Unauthenticated SQL Injection
Unlimited Elements for Elementor
≤2.0.16Update to 2.0.17
- High7.5Unauthenticated SQL Injection
Sticky Chat Widget – Floating Chat Icons, Contact Form, Call, Click to Chat, Email & Message Buttons
≤1.4.2Update to 1.4.3
- Medium6.1Reflected Cross-Site Scripting
Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty
≤3.5.9Update to 3.6.0
- Medium6.1Reflected Cross-Site Scripting
Relevanssi – A Better Search
≤4.28.1Update to 4.28.2
- High8.1Authenticated (Subscriber+) Arbitrary File Deletion
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP
≤1.2.70Update to 1.2.71
- Medium5.3Unauthenticated Authentication Bypass via Brute Force
OTP Login & Register Woocommerce
≤2.7.2Update to 2.7.3
- Medium6.5Authenticated (Subscriber+) Insecure Direct Object Reference to Sensitive Order Information Disclosure
PDF Builder for WooCommerce. Create invoices,packing slips and more
≤2.0.8Update to 2.0.9
- Critical9.8Unauthenticated Arbitrary File Upload
MIPL Checkout Fields Manager for WooCommerce – Customize, Organize & Group Checkout Fields.
≤1.2.2Update to 1.2.3