VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-269Vulnerability type

WordPress Privilege Escalation vulnerabilities (page 1360)

Bugs that let a low-privileged or anonymous user become an administrator, usually through registration or profile updates.

Severity
Signals
Software

41,172 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Privilege Escalation vulnerabilities (page 1360)
SeverityVulnerabilityCVEInstallsPublished
High7.5Directory Traversal
Download Shortcode≤0.2.3Update to 1.0
CVE-2014-5465—
High8.8Cross-Site Request Forgery
Mingle Forum≤1.0.34Update to 1.0.35
CVE-2013-0736—
Medium5.4Missing Session Cookie Expiration
WordPress<4.0Update to 4.0
CVE-2012-5868—
Medium6.1Cross-Site Scripting
Welcart e-Commerce<1.2.2Update to 1.2.2
CVE-2012-5177—
High8.8Cross-Site Request Forgery
Welcart e-Commerce<1.2.2Update to 1.2.2
CVE-2012-5178—
Medium6.1Reflected Cross-Site Scripting
BuddyStream≤3.6.2Update to 3.6.3
CVE-2012-10007—
Medium6.1Cross-Site Scripting
Video Lead Form<0.6Update to 0.6
CVE-2012-6312—
Medium5.3Sensitive Information Disclosure
Simple Gmail Login<1.1.4Update to 1.1.4
CVE-2012-6313—
Medium6.1Cross-Site Scripting
Advanced Text Widget≤2.0.1Update to 2.0.2
CVE-2011-4618—
Medium6.1Cross-Site Scripting
Uk Cookie≤1.1No patch available
CVE-2012-5856—
Medium6.1Cross-Site Scripting
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery≤1.9.6Update to 1.9.7
CVE-2012-3414—
Critical9.8Unauthenticated SQL Injection
Cardoza AJAX Search<1.3Update to 1.3
CVE-2012-5853—
High7.3SQL Injection
All Video Gallery Plugin for WordPress<1.2Update to 1.2
CVE-2012-6653—
Medium6.1Cross Site Scripting via post_title parameter
Yoast SEO – Advanced SEO with real-time guidance and built-in AI≤2.1.1Update to 2.2
CVE-2012-6692—
High7.1Reflected Cross-Site Scripting
White Label CMS<1.5.1Update to 1.5.1
CVE-2012-5387—
High7.1Cross-Site Scripting
White Label CMS<1.5.1Update to 1.5.1
CVE-2012-5388—
Medium6.1Cross-Site Scripting
WHOIS≤1.4.2.4No patch available
CVE-2011-5193—
Medium6.1Cross-Site Scripting
MF Gig Calendar≤0.9.4.1Update to 0.9.5
CVE-2012-4242—
High7.5Information Disclosure via Arbitrary File Downloads
simple-download-button-shortcode1.0 – 1.0Update to 1.1
CVE-2012-10016—
High8.8Cross-Site Request Forgery
DVS Custom Notification≤1.0.1No patch available
CVE-2012-4921—
Medium6.3Missing Authorization Checks on create_post
WordPress<3.4.2Update to 3.4.2
CVE-2012-4421—
Low3.8Missing Authorization Checks
WordPress≤3.4.1Update to 3.4.2
CVE-2012-4422—
Medium6.4Cross-Site Scripting
WordPress≤3.4.1Update to 3.4.2
CVE-2012-3383—
Medium6.1Reflected Cross-Site Scripting
Download Monitor≤3.3.5.8Update to 3.3.5.9
CVE-2012-4768—
Medium6.1Multiple Cross-Site Scripting
quick-post-widget≤1.9.1No patch available
CVE-2012-4226—
Medium6.1Cross-Site Scripting
WP SimpleMail≤1.0.6No patch available
CVE-2012-2579—
High7.2Cross-Site Scripting
mini-mail-dashboard-widget<1.43Update to 1.43
CVE-2012-2583—
High7.2Cross-Site Scripting
Postie≤1.4.9Update to 1.4.10
CVE-2012-2580—
Medium6.1Cross-Site Scripting
ThreeWP Email Reflector<1.16Update to 1.16
CVE-2012-2572—
High7.5Directory Traversal
Vitamin<1.1.0Update to 1.1.0
CVE-2012-6651—

Search VulnCrest Radar

Jump to

Are you sure?