CWE-918Vulnerability type
WordPress SSRF vulnerabilities (page 129)
Features that fetch URLs on the server (previews, imports, webhooks) and can be pointed at internal services.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
CoolClock
<4.3.8Update to 4.3.8
- Medium6.31.1.2 - Authenticated (Contributor+) Privilege Escalation
Registration Form for WooCommerce
1.1.0 – 1.1.2Update to 1.1.3
- High7.2Unauthenticated Open Redirect
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
<5.2.8Update to 5.2.8
- Medium5.3Unauthenticated Information Exposure
Contact Form to Chat Apps | Click to Chat to Order – FormyChat
≤2.15.7Update to 2.15.8
- Medium5.3Missing Authorization
Passster – Password Protect Pages and Content
≤4.3.13Update to 4.3.14
- Medium4.9Authenticated (Editor+) SQL Injection
Booking for Appointments and Events Calendar – Amelia
≤2.4.9Update to 2.4.10
- Medium4.9Authenticated (Editor+) SQL Injection
Sky Addons for Elementor – 160+ Widgets, GSAP Animations, Templates & Theme Builder
≤3.8.4Update to 3.8.5
- Medium6.3Authenticated (Subscriber+) Privilege Escalation
SMS Alert – SMS Notifications & OTP Login, COD Verification, Abandoned Cart Recovery
≤3.9.9Update to 4.0.0
- High8.1Unauthenticated PHP Object Injection
ThemeREX Addons
<2.45.0Update to 2.45.0
- High8.1Unauthenticated PHP Object Injection
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI
≤3.6.0Update to 3.6.1
- Medium5.3Unauthenticated Information Exposure
ElasticPress
≤5.3.4Update to 5.3.5
- High8.8Authenticated (Subscriber+) Privilege Escalation via Mass Assignment in Sub-Account Creation
MemberPress Corporate Accounts
≤1.5.39Update to 1.6.0
- Medium4.3Insecure Direct Object Reference to Notifications Deletion
BuddyPress
≤14.3.3Update to 14.3.4
- High7.2Unauthenticated Stored Cross-Site Scripting via 'comment' Parameter
Kirki – Freeform Page Builder, Website Builder & Customizer
≤6.2.0Update to 6.2.1
- Medium5.3Missing Authorization
Booktics – Appointment Booking Calendar for Service Businesses
≤1.0.23Update to 1.0.24
- Medium6.1Reflected Cross-Site Scripting
HUSKY – Products Filter for WooCommerce Professional. MCP is onboard
≤1.4.3Update to 1.4.3.1
- Medium6.1Reflected Cross-Site Scripting
Unlimited Elements for Elementor
≤2.0.16Update to 2.0.17
- Medium6.1Reflected Cross-Site Scripting
WP-Members Membership Plugin
≤3.5.6Update to 3.5.7
- Medium6.1Reflected Cross-Site Scripting
Themify – WooCommerce Product Filter
≤1.5.5Update to 1.5.6
- High7.2Unauthenticated Stored Cross-Site Scripting
Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner…
≤2.10.2Update to 2.10.3
- High7.2Unauthenticated Stored Cross-Site Scripting
Simple Ajax Chat – Add a Fast, Secure Chat Box
≤20260811Update to 20260827
- High7.2Unauthenticated Stored Cross-Site Scripting
WP Photo Album Plus
≤9.2.08.003Update to 9.2.10.001
- High7.5Unauthenticated SQL Injection
Unlimited Elements for Elementor
≤2.0.16Update to 2.0.17
- High7.5Unauthenticated SQL Injection
Sticky Chat Widget – Floating Chat Icons, Contact Form, Call, Click to Chat, Email & Message Buttons
≤1.4.2Update to 1.4.3
- Medium6.1Reflected Cross-Site Scripting
Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty
≤3.5.9Update to 3.6.0
- Medium6.1Reflected Cross-Site Scripting
Relevanssi – A Better Search
≤4.28.1Update to 4.28.2
- High8.1Authenticated (Subscriber+) Arbitrary File Deletion
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP
≤1.2.70Update to 1.2.71
- Medium5.3Unauthenticated Authentication Bypass via Brute Force
OTP Login & Register Woocommerce
≤2.7.2Update to 2.7.3
- Medium6.5Authenticated (Subscriber+) Insecure Direct Object Reference to Sensitive Order Information Disclosure
PDF Builder for WooCommerce. Create invoices,packing slips and more
≤2.0.8Update to 2.0.9
- Critical9.8Unauthenticated Arbitrary File Upload
MIPL Checkout Fields Manager for WooCommerce – Customize, Organize & Group Checkout Fields.
≤1.2.2Update to 1.2.3