CWE-502Vulnerability type
WordPress PHP Object Injection vulnerabilities (page 23)
unserialize() on user input. Exploitable when a POP chain exists in WordPress, a plugin or a theme.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium5.4Unauthenticated Stored Cross-Site Scripting via RSS-linked article `<meta name="description">`
Content Pilot – Autoblogging & Affiliate Marketing Suite
≤2.2.4Update to 2.2.5
- Critical9.8Unauthenticated Remote Code Execution via 'id' Parameter Function Injection
Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker
≤4.1.1Update to 4.1.2
- Medium5.9Missing Authorization to Unauthenticated Sensitive Information Exposure via 'rel_tab' Parameter
WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps
≤5.5.88Update to 5.5.89
- High8.1Unauthenticated Authentication Bypass via Insufficient Email Verification in Social Login Callback
Wp Social Login and Register Social Counter
≤3.2.2Update to 3.2.3
- Critical9.8Unauthenticated Authentication Bypass via 'email' Parameter
Uncanny Toolkit for LearnDash
≤3.8.2Update to 3.8.3
- Medium6.5Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via /wp-admin/profile.php inline redux_<opt_name> JavaScript
Redux Framework
≤4.5.15Update to 4.5.16
- High8.8Unauthenticated Privilege Escalation via Mass Assignment to Mass Assignment via '/public/booking' Endpoint
Rox Appointment Booking – Event, Calendar & Appointment Scheduling
≤1.3.1Update to 1.3.2
- High7.2Unauthenticated Stored Cross-Site Scripting via Email Subject via wp_mail
WPO365 | MICROSOFT 365 GRAPH MAILER
≤6.2Update to 6.3
- Medium6.5Authenticated (Subscriber+) SQL Injection via order Parameter
WP2LEADS | WordPress und KlickTipp einfach verbinden – WooCommerce und KlickTipp einfach verbinden
≤3.5.6Update to 3.5.12
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Profile Field via %%archive_title%% Template Tag
SEOPress – AI SEO Plugin & On-site SEO
≤10.3Update to 10.4
- High7.2Unauthenticated Stored Cross-Site Scripting via Request Path (REQUEST_URI) in Traffic Log
Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning
≤22.3.2Update to 22.3.4
- Medium4.3Missing Authorization to Authenticated (Author+) Image Replacement
Perfect Images: Regenerate Thumbnails, Image Sizes, WebP & AVIF
≤7.2.0Update to 7.2.1
- High7.5Authenticated (Subscriber+) Sensitive Information Exposure to Privilege Escalation to Mail Log Viewer / Password-Reset Email Disclosure
Mail logging & Catcher
≤2.2.0Update to 2.3.0
- High7.5Unauthenticated SQL Injection via 'bwfan_cart_id' Parameter
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce
≤3.8.5.2Update to 3.8.6
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting via User Profile Website (user_url) Field
Discussion Board – WordPress Forum Plugin
≤2.6.0Update to 2.6.1
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting via 'degreetitle' Parameter
WP Job Portal – AI-Powered Recruitment System for Company or Job Board website
≤2.7.0Update to 2.7.1
- Medium4.3Missing Authorization to Authenticated (Custom+) ESP Credential Overwrite and Irreversible OAuth Token Deletion via 'hustle_provider_migrate_hubspot' (and sibling migrate_*) AJAX Action
Hustle – Email Marketing, Lead Generation, Optins, Popups
≤7.8.14.3Update to 7.8.14.4
- High7.2Unauthenticated Stored Cross-Site Scripting via Billing First Name / Last Name / Company / Customer Note fields at guest checkout
PDF Invoices & Packing Slips for WooCommerce
≤5.16.4Update to 5.16.5
- Medium5.3Unauthenticated Sensitive Information Exposure via Yearly-Reset Invoice Attachment Cache
PDF Invoices & Packing Slips for WooCommerce
≤5.16.5Update to 5.16.6
- Critical9.1Missing Authorization to Unauthenticated Arbitrary Calendar Note Deletion via wpbs_calendar_remove_note AJAX Action
WP Booking System – Booking Calendar
≤2.1.0.5Update to 2.1.0.6
- Medium6.1Reflected Cross-Site Scripting via 'wpf_fid' JSON Parameter
Product Filter for WooCommerce by WBW
≤3.4.6Update to 3.4.7
- Medium5.3Missing Authorization to Unauthenticated Information Disclosure via filterSettings[default_query] Parameter
Product Filter for WooCommerce by WBW
≤3.4.6Update to 3.4.7
- Medium5.4Unauthenticated File Deletion via 'wcpr_image_upload_id' Parameter
Revopic – Photo Reviews for WooCommerce
≤1.2.31Update to 1.2.32
- Medium6.1Unauthenticated Stored Cross-Site Scripting via Open Graph og:title Meta Tag
Webmention
≤5.10.1Update to 5.10.2
- Medium5.3Missing Authorization
FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution
≤3.2.6Update to 3.3.0
- Medium4.3Missing Authorization
Unlimited Elements for Elementor
≤2.0.26Update to 2.0.27
- Medium4.3Missing Authorization
Bookit — Booking & Appointment Calendar
≤2.6.0.6Update to 2.6.0.7
- Medium4.3Missing Authorization
Event Tickets and Registration
≤5.30.2Update to 5.30.3
- Medium4.3Missing Authorization
Booktics – Appointment Booking Calendar for Service Businesses
≤1.0.31Update to 1.0.32
- High7.5Authenticated (Contributor+) Local File Inclusion
Unlimited Elements for Elementor
≤2.0.26Update to 2.0.27