VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-502Vulnerability type

WordPress PHP Object Injection vulnerabilities (page 1313)

unserialize() on user input. Exploitable when a POP chain exists in WordPress, a plugin or a theme.

Severity
Signals
Software

41,175 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress PHP Object Injection vulnerabilities (page 1313)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Multiple Cross-Site Scripting
Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress≤1.5.6Update to 1.5.7
CVE-2017-18492—
Medium6.1Cross-Site Scripting
User Role by BestWebSoft – Add and Customize Roles and Capabilities in WordPress≤1.5.5Update to 1.5.6
CVE-2017-18566—
Medium6.1Reflected Cross-Site Scripting
Maps by BestWebSoft≤1.3.5Update to 1.3.6
CVE-2017-18557—
Medium6.1Cross-Site Scripting
BestWebSoft's Twitter<2.55Update to 2.55
CVE-2017-18505—
Medium6.1Multiple Cross-Site Scripting
SMTP by BestWebSoft≤1.0.9Update to 1.1.0
CVE-2017-18518—
Medium6.1Multiple Cross-Site Scripting
Pagination by BestWebSoft – Customizable WordPress Content Splitter and Navigation Plugin≤1.0.6Update to 1.0.7
CVE-2017-18527—
Medium6.1Multiple Cross-Site Scripting
Social Login by BestWebSoft≤0.1Update to 0.2
CVE-2017-18501—
Medium6.1Reflected Cross-Site Scripting
Contact Form Multi by BestWebSoft – Multiple Forms Plugin for Single WordPress Website<1.2.1Update to 1.2.1
CVE-2017-18490—
Medium6.1Multiple Cross-Site Scripting
Subscriber by BestWebSoft≤1.3.4Update to 1.3.5
CVE-2017-18502—
Medium6.1Reflected Cross-Site Scripting
Custom Search by BestWebSoft – WordPress Custom Search Plugin≤1.35Update to 1.36
CVE-2017-18494—
Medium6.1Reflected Cross-Site Scripting
Updater by BestWebSoft≤1.34Update to 1.35
CVE-2017-18565—
Medium6.1Multiple Cross-Site Scripting
AdPush≤1.43Update to 1.44
CVE-2017-18487—
Medium6.1Reflected Cross-Site Scripting
Custom Admin Page by BestWebSoft – Configurable WordPress Dashboard Pages Plugin≤0.1.1Update to 0.1.2
CVE-2017-18493—
Medium6.1Reflected Cross-Site Scripting
Visitors Online by BestWebSoft<1.0.0Update to 1.0.0
CVE-2017-18537—
Medium6.1 Multiple Cross-Site Scripting
Analytics by BestWebSoft – Google Analytics Dashboard and Statistic Plugin for WordPress≤1.7.0Update to 1.7.1
CVE-2017-18556—
Medium6.1Cross-Site Scripting
Help Center by BestWebSoft≤1.0.4Update to 1.0.5
CVE-2017-18542—
Critical9.8SQL Injection
SpiderCalendar≤1.5.51Update to 1.5.52
CVE-2017-7719—
Medium6.1Reflected Cross-Site Scripting
Slideshow Gallery LITE≤1.6.5Update to 1.6.6
CVE-2018-17946—
Medium6.5Cross-Site Request Forgery
CopySafe Web Protection – Copy Protect Images<2.6Update to 2.6
CVE-2017-8100—
High8.8Cross-Site Request Forgery
WHIZZ≤1.1Update to 1.1.1
CVE-2017-8099—
Medium6.1Cross-Site Scripting
Twitter Cards Meta – Best Twitter Card Plugin for WordPress<2.5.0Update to 2.5.0
CVE-2017-18503—
High8.8Cross-Site Request Forgery
Twitter Cards Meta – Best Twitter Card Plugin for WordPress≤2.4.5Update to 2.5.0
CVE-2017-18504—
Medium6.1All In One Schema Rich Snippets <= 1.4.4 - Cross-Site Scripting
Schema – All In One Schema Rich Snippets<1.5.0Update to 1.5.0
CVE-2018-20977—
Medium5.4Stored Cross-Site Scripting
Image Gallery with Slideshow Plugin≤1.5.2No patch available
CVE-2017-1002011—
Critical9.8SQL Injection via gid
Image Gallery with Slideshow Plugin≤1.5.2No patch available
CVE-2017-1002012—
Critical9.8Blind SQL Injection via imgid
Image Gallery with Slideshow Plugin≤1.5.2No patch available
CVE-2017-1002013—
Critical9.8SQL Injection via selectMulGallery
Image Gallery with Slideshow Plugin≤1.5.2No patch available
CVE-2017-1002015—
Critical9.8SQL Injection via gallery_name
Image Gallery with Slideshow Plugin≤1.5.2No patch available
CVE-2017-1002014—
High8.2Open Proxy
filedownload≤1.4Update to 2.0
CVE-2015-1000002—
Medium6.1Reflected Cross-Site Scripting
YOP Poll<5.8.1Update to 5.8.1
CVE-2017-2127—

Search VulnCrest Radar

Jump to

Are you sure?