CWE-918Vulnerability type
WordPress SSRF vulnerabilities (page 132)
Features that fetch URLs on the server (previews, imports, webhooks) and can be pointed at internal services.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- High7.2Authenticated (Admin+) Arbitrary File Upload
Rara One Click Demo Import
≤1.3.4Update to 1.3.5
- Medium4.3Missing Authorization
Advanced Customized Prompts
≤1.0.1No patch available
- Critical9.8Unauthenticated Arbitrary File Upload
Teddy Bear Customize Addon
≤1.0.5No patch available
- Medium6.5Authenticated (Import_contacts+) Path Traversal
Groundhogg — CRM, Newsletters, and Marketing Automation
≤4.7.1Update to 4.7.2
- High8.1Authenticated (Contributor+) Arbitrary File Deletion
Visualizer – Tables & Charts Manager with Built-in AI Generator
<4.0.6Update to 4.0.6
- Medium6.5Unauthenticated Arbitrary Shortcode Execution
Simple CAPTCHA with Cloudflare Turnstile
≤1.42.1Update to 1.42.3
- Medium6.43.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Sina Extension for Elementor
3.7.1 – 3.10.3Update to 3.10.4
- Medium5.3Unauthenticated Information Exposure
ZHBackup – Backup, Restore & Migration
≤2.4.2Update to 2.4.3
- Medium5.3Missing Authorization
Shirt Product Designer for WooCommerce
1.0.4 – 1.0.4No patch available
- Critical9.1Unauthenticated Arbitrary File Deletion
Advanced Product Fields Extended for WooCommerce
≤3.1.6Update to 3.1.7
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
Advanced Customized Prompts
≤1.0.1No patch available
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
Translate WordPress with GTranslate
<3.0.10Update to 3.0.10
- High8.8Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret
WP Plugin Hostgator
≤3.2.0Update to 3.2.1
- High8.8Authenticated (Subscriber+) Privilege Escalation to Admin via wp_ajax_yith_wcwtl_add_user
YITH WooCommerce Waitlist Premium
≤3.35.0Update to 3.36.0
- High7.2Unauthenticated Stored Cross-Site Scripting via 'wpl_user_preference' Parameter
WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode
≤4.4.1Update to 4.4.2
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute
Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
≤3.2.4Update to 3.2.5
- Medium6.5Authenticated (Administrator+) SQL Injection via 'feed' Parameter
WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping
≤2.23.7Update to 2.23.8
- High7.2Authenticated (Editor+) Privilege Escalation to Fresh-Install Default Capability Grant
PublishPress Capabilities: User Role Access Control, Admin Area Permissions
≤2.50.0Update to 2.50.1
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation via 'plugin' Parameter
Checkout Custom Fields Builder for WooCommerce
≤1.1.5Update to 1.1.6
- Medium5.3Missing Authorization to Unauthenticated Account Linking / Site Takeover via 'force_ic_connect' and 'apikey' Parameters
WP Compress – Instant Performance & Speed Optimization
≤7.22.01Update to 7.22.38
- High8.1Unauthenticated Authentication Bypass via Default '__token__' Fallback in REST Migration Endpoint
Next-Cart Store to WooCommerce Migration
≤3.9.8Update to 3.9.9
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Agreement Grant Token Deletion via disconnect_callback Function
ilGhera Reviso Exporter for WooCommerce
≤1.2.3Update to 1.2.4
- Medium5.3Missing Authorization to Unauthenticated Arbitrary Product Price Manipulation via 'wpfnl_load_payment' AJAX Action
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell
≤3.12.13Update to 3.13.0
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial via 'user_id' Parameter
Awesome Support – WordPress HelpDesk & Support Plugin
≤6.3.9Update to 6.4.0
- High7.2Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter
WPBot – AI ChatBot for WordPress & Growth Suite: SEO, AI Writer, Email Marketing, Social Media
≤8.7.3Update to 8.7.4
- Medium4.3Missing Authorization to Authenticated (Contributor+) Arbitrary Recipe Ownership Takeover and Unpublishing via '[wprm-recipe]' Shortcode
WP Recipe Maker
≤10.8.0Update to 10.8.1
- Medium5.4Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via notification-flow REST API Endpoint
Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce
≤4.1.17Update to 4.1.18
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting via 'first_name' Parameter
WP Crowdfunding
≤2.2.1Update to 2.2.2
- Medium4.9Authenticated (Shop Manager+) SQL Injection via 'wpneo_reward' Post Meta
WP Crowdfunding
≤2.2.1Update to 2.2.2
- Medium6.1Reflected Cross-Site Scripting via 'tab_group_section' Parameter
User Access Manager
≤2.3.18Update to 2.3.19