VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-269Vulnerability type

WordPress Privilege Escalation vulnerabilities (page 1344)

Bugs that let a low-privileged or anonymous user become an administrator, usually through registration or profile updates.

Severity
Signals
Software

41,172 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Privilege Escalation vulnerabilities (page 1344)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Cross-Site Scripting
Contact Form Clean and Simple<4.4.1Update to 4.4.1
CVE-2014-8955—
Medium6.1Reflected Cross-Site Scripting
Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder≤2.8.6Update to 2.8.7
CVE-2014-8815—
High7.2Missing Authorization
Smart Forms – when you need more than just a contact form≤2.1.0Update to 2.1.1
CVE-2014-8803—
Medium6.1Reflected Cross-Site Scripting
WP Photo Album Plus≤5.4.17Update to 5.4.18
CVE-2014-8814—
Critical9.83.11 - SQL Injection
Store Locator for WordPress with Google Maps – LotsOfLocales<3.12Update to 3.12
CVE-2014-8621—
Medium4.3Server-Side Request Forgery
BulletProof Security≤.51Update to .51.1
CVE-2014-8749—
Medium5.4Cross-Site Scripting
BulletProof Security<.51.1Update to .51.1
CVE-2014-7958—
High7.2Stored Cross-Site Scripting
Contact Bank – Contact Form Builder for WordPress≤2.0.69Update to 2.0.70
CVE-2014-8807—
Medium6.1JavaScript Injection
WP Support Plus Responsive Ticket System≤4.0Update to 4.1
CVE-2014-10391—
Medium6.12.6 - Cross-Site Scripting
post highlights2.0 – 2.6Update to 2.6.1
CVE-2014-8087—
High7.5Missing Authorization
Database Backup for WordPress≤2.2.4Update to 2.3.0
CVE-2014-10076—
Medium5.3Sensitive Data Exposure
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio<4.25Update to 4.25
CVE-2014-8491—
Medium6.1Reflected Cross-Site Scripting
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor≤2.0.2Update to 2.0.3
CVE-2014-8492—
Critical9.8SQL Injection
CP Multi View Events Calendar<1.0.2Update to 1.0.2
CVE-2014-8586—
Critical9.8Arbitrary File Upload
Creative Contact Form<1.0.0Update to 1.0.0
CVE-2014-8739—
High8.8Cross-Site Request Forgery
Featured Comments<1.2.5Update to 1.2.5
CVE-2014-10382—
Medium6.1Cross-Site Scripting
NEX-Forms Lite – WordPress Contact Form builder<3.4Update to 3.4
CVE-2014-7151—
High7.22.4 - Stored Cross-Site Scripting
Contact Form Integrated With Google Maps1.0 – 2.4Update to 2.5
CVE-2014-7238—
Medium6.1Reflected Cross-Site Scripting
Gallery Bank – WordPress Photo Gallery Plugin<3.0.70Update to 3.0.70
CVE-2014-8758—
High7.2Remote Code Execution
Backup, Restore and Migrate your sites with XCloner<3.1.2Update to 3.1.2
CVE-2014-8603—
Medium4.9Directory Traversal
Backup, Restore and Migrate your sites with XCloner<3.1.2Update to 3.1.2
CVE-2014-8606—
High7.5Improper Access Control to Information Disclosure
Backup, Restore and Migrate your sites with XCloner≤3.1.1Update to 3.1.2
CVE-2014-8605—
High7.2Sensitive Information Disclosure
Backup, Restore and Migrate your sites with XCloner<3.1.2Update to 3.1.2
CVE-2014-8607—
Medium6.1Stored Cross-Site Scripting
Easy Contact Form Solution<1.7Update to 1.7
CVE-2014-7240—
High7.5Sensitive Information Disclosure
Backup, Restore and Migrate your sites with XCloner<3.1.2Update to 3.1.2
CVE-2014-8604—
Medium6.1Cross-Site Scripting
cformsII≤13.1Update to 13.2
CVE-2014-10377—
High8.8Cross-Site Request Forgery
O2tweet≤0.0.4No patch available
CVE-2014-9338—
Medium6.1Cross-Site Scripting
cforms<10.5Update to 10.5
CVE-2014-10393—
Medium6.1Cross-Site Scripting
cforms≤10.1Update to 10.2
CVE-2014-10392—
Medium6.1Reflected Cross-Site Scripting
WP Go Maps – Google Map, OpenStreetMap, Leaflet & Store Locator<6.0.27Update to 6.0.27
CVE-2014-7182—

Search VulnCrest Radar

Jump to

Are you sure?