CWE-918Vulnerability type
WordPress SSRF vulnerabilities (page 1267)
Features that fetch URLs on the server (previews, imports, webhooks) and can be pointed at internal services.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium5.4Reflected Cross-Site Scripting via calId Parameter
Advanced Booking Calendar
<1.6.7Update to 1.6.7
- Critical9.8Arbitrary File Upload
N5 Upload Form
≤1.0No patch available
- High7.5Local File Disclosure
Patreon WordPress
<1.7.0Update to 1.7.0
- High8.8Arbitrary File Upload
Easy Form Builder
≤1.0No patch available
- High8.8Authenticated SQL injection via shortcode
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
≤7.1.11Update to 7.1.12
- High8.8Cross-Site Request Forgery
Patreon WordPress
≤1.6.9Update to 1.7.0
- Critical9.6Reflected Cross-Site Scripting
Patreon WordPress
<1.7.2Update to 1.7.2
- Critical9.8Arbitrary File Upload
WP-Curriculo Vitae Free
≤6.3No patch available
- Medium5.3Information Exposure
AccessAlly
≤3.5.6Update to 3.5.7
- Critical9.6Reflected Cross-Site Scripting
Patreon WordPress
<1.7.2Update to 1.7.2
- High8.1Cross-Site Request Forgery
Patreon WordPress
<1.7.0Update to 1.7.0
- High8.1PHP Object Injection
Meta pixel for WordPress
≤2.2.2Update to 3.0.0
- High8.8Cross-site Request Forgery to Stored Cross-site Scripting and Settings Deletion via wp_ajax_(save|delete)_fbe_settings
Meta pixel for WordPress
3.0.0 – <3.0.4Update to 3.0.4
- Critical9.1Arbitrary File Upload
Ignition
<2.0.0Update to 2.0.0
- Critical9.8Improper Access Control & Privilege Escalation
Controlled Admin Access
<1.5.2Update to 1.5.2
- Medium6.12.9.7 - Reflected Cross Site Scripting
GiveWP – Donation Plugin and Fundraising Platform
2.4.0 – <2.10.0Update to 2.10.0
- Medium6.1DOM-based Cross-Site Scripting
Elementor Website Builder – more than just a page builder
0.1.0 – 3.4.7Update to 3.4.8
- Medium6.1Reflected Cross-Site Scripting
Bello - Directory & Listing
<1.6.0Update to 1.6.0
- Medium4.3Cross-Site Request Forgery Bypass
eCommerce Product Catalog
<2.9.44Update to 2.9.44
- Critical9.8Arbitrary File Upload to Remote Code Execution
WooCommerce Help Scout
≤2.9.1Update to 2.9.2
- Medium6.5Missing Authorization
Realteo
<1.2.4Update to 1.2.4
- Medium6.1Open Redirect
PhastPress
≤1.110Update to 1.111
- Medium5.4Authenticated (Admin+) Stored Cross-Site Scripting
WordPress Related Posts
≤3.6.4No patch available
- High7.3Missing Authorization
Kaswara Modern VC Addons
≤3.0.1No patch available
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via title_size
Elementor Website Builder – more than just a page builder
0.1.0 – 3.1.3Update to 3.1.4
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via title_html_tag
Elementor Website Builder – more than just a page builder
≤3.1.3Update to 3.1.4
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via html_tag
Elementor Website Builder – more than just a page builder
0.1.0 – 3.1.3Update to 3.1.4
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via title_size Parameter
Elementor Website Builder – more than just a page builder
<3.1.4Update to 3.1.4
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via html_tag
Elementor Website Builder – more than just a page builder
0.1.0 – 3.1.3Update to 3.1.4
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via header_size
Elementor Website Builder – more than just a page builder
0.1.0 – 3.1.3Update to 3.1.4