VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-269Vulnerability type

WordPress Privilege Escalation vulnerabilities (page 1252)

Bugs that let a low-privileged or anonymous user become an administrator, usually through registration or profile updates.

Severity
Signals
Software

41,182 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Privilege Escalation vulnerabilities (page 1252)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Reflected Cross-Site Scripting
Calendar_plugin≤1.0No patch available
CVE-2021-34667—
Medium6.1Reflected Cross-Site Scripting
Scout bazar≤1.3.3Update to 1.3.4
CVE-2021-34643—
Medium6.1Reflected Cross-Site Scripting
jQuery Tagline Rotator≤0.1.5No patch available
CVE-2021-34663—
Medium6.1Reflected Cross-Site Scripting
WP Fountain≤1.5.9No patch available
CVE-2021-34653—
Medium6.1Reflected Cross-Site Scripting
typofr≤0.11No patch available
CVE-2021-34657—
Medium6.1Reflected Cross-Site Scripting
Multiplayer Games≤3.7No patch available
CVE-2021-34644—
Medium6.1Reflected Cross-Site Scripting
Sidebar Adder 2≤2.0.0No patch available
CVE-2021-34666—
Medium6.1Reflected Cross-Site Scripting
WP Songbook≤2.0.11No patch available
CVE-2021-34655—
Medium6.1Reflected Cross-Site Scripting
2Way VideoCalls and Random Chat – HTML5 Webcam Videochat≤5.2.7Update to 5.2.8
CVE-2021-34656—
Medium6.1Smart Email Alerts <= 1.0.10 Reflected Cross-Site Scripting
Smart Email Alerts≤1.0.10No patch available
CVE-2021-34642—
Medium6.1Reflected Cross-Site Scripting
Scribble Maps≤1.2No patch available
CVE-2021-34651—
Medium6.1Reflected Cross-Site Scripting
WP SEO Tags≤2.2.7No patch available
CVE-2021-34665—
Medium6.1Reflected Cross-Site Scripting
Simple Popup Newsletter≤1.4.7No patch available
CVE-2021-34658—
Medium6.1Reflected Cross-Site Scripting
Securimage-WP-Fixed≤3.5.4No patch available
CVE-2021-34640—
Medium5.4Authenticated (Contributor+) Stored Cross-Site Scripting
PDF.js Viewer<2.0.2Update to 2.0.2
CVE-2021-24759—
High8.8Per Page Add To Head <= 1.4.3 Cross-Site Request Forgery to Stored Cross-Site Scripting
Per page add to head<1.4.4Update to 1.4.4
CVE-2021-24586—
Medium4.8Authenticated (Admin+) Stored Cross-Site Scripting
Per page add to head≤1.4.4No patch available
CVE-2021-24619—
Medium6.1Reflected Cross-Site Scripting
Software License Manager<4.4.8Update to 4.4.8
CVE-2021-24560—
Medium4.8Authenticated Stored Cross-Site Scripting
AddToAny Share Buttons<1.7.48Update to 1.7.48
CVE-2021-24616—
Medium5.5Cross-Site Scripting
Book appointment online≤1.38Update to 1.39
CVE-2021-24614—
Medium5.4Stored Cross-Site Scripting
Daily Prayer Time<2021.08.10Update to 2021.08.10
CVE-2021-24523—
Medium5.4Reflected Cross-Site Scripting
Custom Post View Generator≤0.4.6No patch available
CVE-2021-24605—
High7.2Unauthenticated Cross-Site Scripting
ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content≤3.1.10Update to 3.1.11
CVE-2021-24522—
Medium5.4Authenticated Stored Cross-Site Scripting
WPFront Notification Bar≤2.0.0Update to 2.1.0
CVE-2021-24601—
Medium5.4Authenticated Stored Cross-Site Scripting
AddToAny Share Buttons<1.7.46Update to 1.7.46
CVE-2021-24568—
Medium6.1Reflected Cross-Site Scripting
Titan Frameworkall versionsNo patch available
CVE-2021-24435—
Medium6.1Cross-Site Scripting
Keyword Meta≤3.0Update to 3.1
CVE-2021-24611—
Medium5.5Admin+ Stored Cross-Site Scripting
Site Reviews<5.13.1Update to 5.13.1
CVE-2021-24603—
Medium4.8Authenticated (Admin+) Stored Cross-Site Scripting
Stop Spammers Classic<2021.18Update to 2021.18
CVE-2021-24517—
Medium5.5Authenticated Stored Cross-Site Scripting
Form Builder | Create Responsive Contact Forms≤1.9.8.3Update to 1.9.8.4
CVE-2021-24513—

Search VulnCrest Radar

Jump to

Are you sure?