VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-918Vulnerability type

WordPress SSRF vulnerabilities (page 1353)

Features that fetch URLs on the server (previews, imports, webhooks) and can be pointed at internal services.

Severity
Signals
Software

41,172 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress SSRF vulnerabilities (page 1353)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Reflected Cross-Site Scripting
ooorl≤1.0.0No patch available
CVE-2014-4542—
High7.1Cross-Site Scripting
WooCommerce SagePay Direct Payment Gateway<0.1.6.7Update to 0.1.6.7
CVE-2014-4549—
Medium6.1Cross-Site Scripting
swipe-hq-checkout-for-eshop≤3.7.0No patch available
CVE-2014-4556—
Medium6.1Cross-Site Scripting
Pay Per Media Player≤1.24No patch available
CVE-2014-4543—
Medium6.1Cross-Site Scripting
Diverse Solutions IDX Real Estate Listings & MLS Search<2.1.1Update to 2.1.1
CVE-2014-4521—
Medium6.1Cross-Site Scripting
zeenshare≤1.0.1No patch available
CVE-2014-4606—
Medium6.1Cross-Site Scripting
Spotlight≤4.7No patch available
CVE-2014-4552—
Medium6.1Cross-Site Scripting
Infusionsoft Gravity Forms Add-on<1.5.7Update to 1.5.7
CVE-2014-4536—
Medium6.1Cross-Site Scripting
Style It≤1.0No patch available
CVE-2014-4555—
Medium6.1Cross-Site Scripting
Social Connect≤0.10.1Update to 0.10.2
CVE-2014-4551—
Medium6.4Cross-Site Scripting
shortcode-ninja≤1.4No patch available
CVE-2014-4550—
Medium6.1Stored Cross-Site Scripting
WP Ultimate Email Marketer≤1.1.0No patch available
CVE-2014-4600—
Medium6.1Cross-Site Scripting
GarageSale<1.2.3Update to 1.2.3
CVE-2014-4532—
Medium6.1Reflected Cross-Site Scripting
HTML5 Video Player with Playlist≤2.4.0No patch available
CVE-2014-4534—
High7.1Cross-Site Scripting
Toolpage≤1.6.1No patch available
CVE-2014-4560—
Medium6.1Cross-Site Scripting
verwei.se – WordPress – Twitter≤1.0.2No patch available
CVE-2014-4566—
Medium6.1Cross-Site Scripting
Import Legacy Media≤0.1No patch available
CVE-2014-4535—
Medium6.1Reflected Cross-Site Scripting
WP-Planet≤0.1No patch available
CVE-2014-4592—
Medium6.1Reflected Cross-Site Scripting
Votecount For Balatarin≤0.1.1No patch available
CVE-2014-4572—
Medium6.1Cross-Site Scripting
WP-Business Directory≤1.0.2No patch available
CVE-2014-4599—
High7.1Cross-Site Scripting
GEO Redirector≤1.0.1No patch available
CVE-2014-4533—
Medium6.1Multiple Cross-Site Scripting
WP e-Commerce Swipe plugin≤3.1.0No patch available
CVE-2014-4559—
Medium6.1Cross-Site Scripting
WP-RSS-Spreadshirt-3DCube-Gallery≤1.3No patch available
CVE-2014-4553—
Medium6.1Cross-Site Scripting
Conversion Ninjaall versionsNo patch available
CVE-2014-4017—
High8.8SQL Injection
Pinpoint Booking System – Legacy version<1.3Update to 1.3
CVE-2014-3210—
Medium6.13.9.001 - Cross-Site Scripting
iMember360is3.8.012 – <3.9.002Update to 3.9.002
CVE-2014-3842—
High8.8Cross-Site Request Forgery
Login rebuilder<1.2.0Update to 1.2.0
CVE-2014-3882—
High8.8Cross-Site Request Forgery
Photo Gallery by 10Web – Mobile-Friendly Image Gallery<1.2.42Update to 1.2.42
CVE-2015-9380—
Medium4.3Cross-Site Request Forgery
Search Everything<8.1.1Update to 8.1.1
CVE-2014-3843—
Medium4.3Cross-Site Request Forgery
TinyMCE Color Picker<1.2Update to 1.2
CVE-2014-3845—

Search VulnCrest Radar

Jump to

Are you sure?