CWE-502Vulnerability type
WordPress PHP Object Injection vulnerabilities (page 145)
unserialize() on user input. Exploitable when a POP chain exists in WordPress, a plugin or a theme.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium5.3Missing Authorization
Booking for Appointments and Events Calendar – Amelia
<2.4.9Update to 2.4.9
- Medium4.3Authenticated (Subscriber+) Password-Protected Post Password Disclosure
Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor
<4.0.6Update to 4.0.6
- High8.8Authenticated (Custom Role+) Remote Code Execution
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)
<9.8.0Update to 9.8.0
- High7.2Unauthenticated Stored Cross-Site Scripting
Groundhogg — CRM, Newsletters, and Marketing Automation
<4.5.13Update to 4.5.13
- Medium5.6Unauthenticated Sensitive Information Exposure
Keep Backup Daily
≤2.1.3Update to 2.1.4
- Medium5.3Unauthenticated Email Content Injection
CatalogX Product Catalog, Product Enquiry & Quotes for WooCommerce
<6.1.3Update to 6.1.3
- Medium5.3Unauthenticated Authentication Bypass to Administrator Account Takeover via Multisite Identity Binding
Simple Membership
≤4.8.1Update to 4.8.2
- Medium5.3Unauthenticated Content Protection Bypass
Restrict User Access – Ultimate Membership & Content Protection
≤2.8Update to 2.8.1
- Medium5.3Missing Authorization to Unauthenticated Post Creation
User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission
≤4.3.10Update to 4.3.11
- Medium5.3Unauthenticated Unpublished Course Data Exposure
MasterStudy LMS WordPress Plugin – for Online Courses and Education
<3.7.46Update to 3.7.46
- Medium5.3Unauthenticated Unapproved Comment and Private Profile Data Disclosure
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
<2.13.0Update to 2.13.0
- Medium5.3Unauthenticated Limited File Upload
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
≤3.16.1Update to 3.16.2
- High7.2Authenticated (Administrator+) Remote Code Execution
WPvivid — Backup, Migration & Staging
<0.9.133Update to 0.9.133
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
SOGO Add Script to Individual Pages Header Footer
≤3.9No patch available
- Critical9.8Authentication Bypass to Account Takeover via Activation Token
MyHome Core
≤4.4.5Update to 4.4.6
- Critical9.8Unauthenticated Privilege Escalation via 'afreg_select_user_role' Parameter in Store API Checkout
Custom User Registration Fields for WooCommerce
≤2.2.3Update to 2.2.4
- High7.5Unauthenticated Authentication Bypass via X.509 Certificate Poisoning
SAML Single Sign On – SSO Login
≤5.4.6Update to 5.4.7
- Medium6.4Authenticated (Subscriber+) Server-Side Request Forgery
SmartAIPress
≤1.2.0No patch available
- Medium4.3Authenticated (Custom Role+) Insecure Direct Object Reference
MasterStudy LMS WordPress Plugin – for Online Courses and Education
<3.7.42Update to 3.7.42
- Medium6.6Authenticated (Administrator+) PHP Object Injection
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
<4.0.1Update to 4.0.1
- Medium4.3Cross-Site Request Forgery
Newsletters
<4.17Update to 4.17
- Medium4.9Authenticated (Administrator+) SQL Injection
WP Ultimate CSV Importer – WordPress CSV, XML & Excel Import Export
<9.0Update to 9.0
- Medium5.3Unauthenticated Information Exposure
HEL Online Classroom: AI-powered Online Classrooms
≤1.0.3No patch available
- Medium5.3Missing Authorization
Catfolders Document Gallery Pro
<2.0.7Update to 2.0.7
- Low2.7Missing Authorization
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings
<1.0.277Update to 1.0.277
- Medium4.32.4.8 - Missing Authorization
Booking for Appointments and Events Calendar – Amelia
1.2.32 – 2.4.8Update to 2.4.9
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
<4.0.1Update to 4.0.1
- High7.31.6.2 - Unauthenticated Booking Price Manipulation
Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress
1.5.6 – 1.6.2Update to 1.6.3
- High7.2Unauthenticated Stored Cross-Site Scripting
Tailored Tools
≤3.0.2Update to 3.0.3
- Medium6.1Reflected Cross-Site Scripting
GeotargetingWP
<3.5.6.2Update to 3.5.6.2