VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-502Vulnerability type

WordPress PHP Object Injection vulnerabilities (page 1350)

unserialize() on user input. Exploitable when a POP chain exists in WordPress, a plugin or a theme.

Severity
Signals
Software

41,172 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress PHP Object Injection vulnerabilities (page 1350)
SeverityVulnerabilityCVEInstallsPublished
Medium5.4Cross-Site Scripting
WORDPRESS VIDEO GALLERY≤2.5Update to 2.6
CVE-2014-9098—
Medium5.3Information Disclosure
WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps<2.0.2Update to 2.0.2
CVE-2014-5337—
Medium6.1JavaScript Code Injection
3CX Free Live Chat, Calls & Messaging<4.1.0Update to 4.1.0
CVE-2014-10386—
Critical9.8Arbitrary Command Execution
WordPress Flash Uploader<3.1.3Update to 3.1.3
CVE-2014-5014—
High7.5Sensitive Information Disclosure
WP BackItUp Community Edition≤1.9Update to 1.9.1
CVE-2014-9012—
Medium6.1Cross-Site Scripting
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor<1.1.66Update to 1.1.66
CVE-2014-10380—
Medium6.1Reflected Cross-Site Scripting
Compfight≤1.4Update to 1.5
CVE-2014-5202—
Medium6.1Cross-Site Scrpting
Compfight<1.5Update to 1.5
CVE-2014-8622—
Medium6.1Reflected Cross-Site Scripting
Blogroll Fun – Show Last Post and Last Update Time<0.8.5Update to 0.8.5
CVE-2014-125132—
Medium6.1Cross-Site Scripting
WP Snap App≤1.5No patch available
CVE-2014-4596—
Medium6.1Multiple Cross-Site Scripting
wp-guestmap≤1.8No patch available
CVE-2014-4587—
High7.1Cross-Site Scripting
yahoo-updates-for-wordpress≤1.0No patch available
CVE-2014-4603—
Medium6.1Cross-Site Scripting
vn-calendar≤1.0No patch available
CVE-2014-4571—
High7.2Cross-Site Scripting
anyfont≤2.2.3No patch available
CVE-2014-4515—
Medium6.1Cross-Site Scripting
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP<4.27.4Update to 4.27.4
CVE-2014-4569—
High8.8Local File Inclusion
Theme My Login<6.3.10Update to 6.3.10
CVE-2014-5155—
High7.1Cross-Site Scripting
Custom Banners<2.1Update to 2.1
CVE-2014-4724—
High8.8Cross-Site Request Forgery to Cross-Site Scripting
Blogstand Banner≤1.0No patch available
CVE-2014-4848—
High7.1Cross-Site Scripting
Random Banner<2.0Update to 2.0
CVE-2014-4847—
High7.1Cross-Site Scripting
Easy Banners≤1.4No patch available
CVE-2014-4723—
High8.8Cross-Site Request Forgery
Simple Share Buttons Adder≤4.4Update to 4.5
CVE-2014-4717—
Critical9.8Remote Code Execution
Ajax Search Lite – Live Search & Filter<3.11Update to 3.11
CVE-2014-4663—
High7.1Cross-Site Scripting
Walk Score Plugin≤0.5.5No patch available
CVE-2014-4573—
Medium6.1Multiple Cross-Site Scripting
wp-restful≤0.1No patch available
CVE-2014-4595—
Medium6.1Cross-Site Scripting
WP-FaceThumb≤1.0No patch available
CVE-2014-4585—
Medium6.1Cross-Site Scripting
Wu-Rating≤1.0 12319No patch available
CVE-2014-4601—
Medium6.1Reflected Cross-Site Scripting
Webcam Microphone Screen Recorder – Media Capture≤1.55.4Update to 1.55.5
CVE-2014-4568—
Medium6.1Reflected Cross-Site Scripting
WP Consultant≤1.0No patch available
CVE-2014-4582—
Medium6.1Cross-Site Scripting
WikiPop≤2.0No patch available
CVE-2014-4575—
Medium6.1Reflected Cross-Site Scripting
WP-Picasa-Image≤1.0No patch available
CVE-2014-4591—

Search VulnCrest Radar

Jump to

Are you sure?