VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-918Vulnerability type

WordPress SSRF vulnerabilities (page 1347)

Features that fetch URLs on the server (previews, imports, webhooks) and can be pointed at internal services.

Severity
Signals
Software

41,172 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress SSRF vulnerabilities (page 1347)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Cross-Site Scripting
WordPress Spreadsheet≤0.62No patch available
CVE-2014-8364—
High7.2Deserialization via Widgets
WordPress≤3.9.1Update to 3.7.4 or 3.8.4 or 3.9.2
CVE-2014-5203—
Low3.8Authenticated Cross-Site Scripting via Avatar URL
WordPress≤3.9.1Update to 3.7.4 or 3.8.4 or 3.9.2
CVE-2014-5240—
Medium6.5Denial of Service via XML #2
WordPress≤3.9.1Update to 3.7.4 or 3.8.4 or 3.9.2
CVE-2014-5266—
Medium6.5Brute Force of Cross-Site Request Forgery Tokens
WordPress≤3.9.1Update to 3.7.4 or 3.8.4 or 3.9.2
CVE-2014-5205—
High8.8Cross-Site Request Forgery to Authentication Takeover
WordPress≤3.9.1Update to 3.7.4 or 3.8.4 or 3.9.2
CVE-2014-9033—
Medium5.3XML External Entity (XXE) Weakness
WordPress<3.9.2Update to 3.9.2
CVE-2014-2053—
Medium6.3Cross-Site Request Forgery
Cart66 Lite :: WordPress Ecommerce<1.5.1.15Update to 1.5.1.15
CVE-2013-5977—
Critical9.8Remote File Inclusion
WP-Table≤1.43Update to 1.44
CVE-2007-2484—
Critical9.9Authenticated SQL Injection
BSK PDF Manager<1.5Update to 1.5
CVE-2014-4944—
High7.3Unspecified Vulnerability
Image News Slider≤3.2Update to 3.3
CVE-2012-4327—
Medium6.1Cross-Site Scripting
WP Symposium≤11.11.26Update to 11.12.08
CVE-2011-3841—
Critical9.8Arbitrary File Upload
WordPress Font Uploader≤1.3Update to 1.3.1
CVE-2012-3814—
Medium6.1DOM Cross-Site Scripting
Image Slider<1.1.7Update to 1.1.7
CVE-2013-6837—
Medium6.1Cross-Site Scripting
Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider≤2.5Update to 2.6
CVE-2014-4846—
Medium6.1Cross-Site Scripting
Events Manager Pro<2.2.9Update to 2.2.9
CVE-2013-1407—
Medium6.1Cross-Site Scripting
XEN Carousel≤0.12.2No patch available
CVE-2014-4602—
Medium6.1Unauthenticated Multiple Cross-Site Scripting
Media Library Categories≤1.1.1No patch available
CVE-2012-6630—
Critical9.8SQL Injection
Yoast Duplicate Post≤2.5Update to 2.6
CVE-2014-10379—
High7.1Cross-Site Scripting
WP Symposium<13.04Update to 13.04
CVE-2013-2695—
High8.8Cross-Site Request Forgery
WP Activity Log<1.2.5Update to 1.2.5
CVE-2014-5072—
Medium6.1Cross-Site Scripting
Adminimize≤1.7.21Update to 1.7.22
CVE-2011-4926—
Medium6.1Multiple Cross-Site Scripting
WP Super Cache≤1.3Update to 1.3.1
CVE-2013-2008—
Medium6.1Cross-Site Scripting
wp-media-player≤0.8No patch available
CVE-2014-4589—
Medium6.1Cross-Site Scripting
Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More≤0.4.4Update to 0.4.5
CVE-2013-46251M+
Critical9.8Unrestricted File Upload
gravity-file-ajax-upload-free≤1.1No patch available
CVE-2014-4972—
High7.1Cross-Site Request Forgery to Stored Cross-Site Scripting
Quick Page/Post Redirect Plugin<5.0.5Update to 5.0.5
CVE-2014-2598—
High7.1Cross-Site Scripting
Polylang<1.5.2Update to 1.5.2
CVE-2014-4855—
Critical9.8Arbitrary File Upload
MailPoet Newsletters (Previous)≤2.6.6Update to 2.6.7
CVE-2014-4725—
Critical9.8Local/Remote File Inclusion
SlideDeck 2 Lite Responsive Content Slider≤2.3.3Update to 2.3.5
CVE-2013-7483—

Search VulnCrest Radar

Jump to

Are you sure?