CWE-269Vulnerability type
WordPress Privilege Escalation vulnerabilities (page 76)
Bugs that let a low-privileged or anonymous user become an administrator, usually through registration or profile updates.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- High8.1Unauthenticated PHP Object Injection
Kalles - Clean, Versatile, Responsive Shopify Theme - RTL support
≤1.1.7.1No patch available
- High8.1Unauthenticated Local File Inclusion
Backhoe - Construction Equipment Rentals WordPress Theme
≤2.0No patch available
- High8.1Unauthenticated Local File Inclusion
Kaven - Business One Page WordPress Theme
≤1.2No patch available
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Zotpress
≤7.4.4Update to 7.4.5
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Gallery PhotoBlocks
≤1.3.5Update to 1.3.6
- Medium4.3Cross-Site Request Forgery
Forminator Forms – Contact Form, Payment Form & Custom Form Builder
≤1.57.3Update to 1.58.0
- Medium4.3Missing Authorization
Visual Composer Website Builder
≤45.16.3Update to 45.16.4
- Medium5.3Unauthenticated Information Exposure
Booking Package
≤1.7.29Update to 1.7.30
- Medium5.3Unauthenticated Information Exposure
Accept PayPal Payments using Contact Form 7
≤4.0.6Update to 4.0.7
- Medium5.3Missing Authorization
Accept PayPal Payments using Contact Form 7
≤4.0.6Update to 4.0.7
- Medium4.3Missing Authorization
Portfolio Filter Gallery – Photo Gallery
≤2.2.0Update to 2.2.1
- Medium5.3Missing Authorization
Event Tickets and Registration
≤5.30.0.1Update to 5.30.0.2
- Medium5.3Unauthenticated Information Exposure
Booking Calendar
<11.8Update to 11.8
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Robo Gallery – Photo & Image Slider
≤5.1.6Update to 5.2.6
- Medium5.3Missing Authorization
YITH WooCommerce Product Bundles
≤2.29.0Update to 2.30.0
- Medium4.3Authenticated (Custom Role+) Insecure Direct Object Reference
Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress
<5.6.5Update to 5.6.5
- Low2.711.8.2 - Authenticated (Editor+) Information Exposure
Booking Calendar
10.15 – 11.8.2Update to 11.8.3
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
WP Store Locator
≤3.0.3Update to 3.1.0
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings
≤1.0.279Update to 1.0.280
- High7.2Authenticated (Administrator+) Arbitrary File Upload
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings
≤1.0.279Update to 1.0.280
- High7.2Unauthenticated Stored Cross-Site Scripting
GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AI
<2.34.14Update to 2.34.14
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF
≤6.5.6Update to 6.6.0
- High8.1One Page Resume WordPress Theme <= 1.0 - Unauthenticated Local File Inclusion
Fabius - One Page Resume WordPress Theme
≤1.0No patch available
- Medium5.3Unauthenticated Unauthorized Account Activation
Contest Gallery Commerce – Upload, Vote & Sell with PayPal & Stripe
≤33.0.0Update to 33.0.1
- Medium5.3Unauthenticated Information Exposure
Track Orders for WooCommerce – Multi Carrier WooCommerce Shipping
<1.2.7Update to 1.2.7
- Medium4.3Authenticated (Subscriber+) Insecure Direct Object Reference
Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments
<2.8.0Update to 2.8.0
- Medium4.3Missing Authorization
Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments
<2.8.0Update to 2.8.0
- Medium4.3Missing Authorization
Grocery Shopping Store
≤1.3.5Update to 1.3.6
- High7.54.2.18 - Unauthenticated SQL Injection
LTL Freight Quotes – ODFL Edition
4.2.11 – 4.2.18Update to 4.2.19
- High7.2Unauthenticated Stored Cross-Site Scripting
LTL Freight Quotes – ODFL Edition
≤4.2.18Update to 4.2.19