CWE-918Vulnerability type
WordPress SSRF vulnerabilities (page 61)
Features that fetch URLs on the server (previews, imports, webhooks) and can be pointed at internal services.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- High7.5Authenticated (Subscriber+) Privilege Escalation to Stale Foreign Role Cache
Membership & User Roles for WooCommerce (Automatic Role Changer)
≤20260828Update to 20261007
- High8.1Missing Authorization to Authenticated (Subscriber+) Arbitrary Listing Deletion via 'listing_id' Parameter
Directorist: AI-Powered Business Directory, Listings & Classified Ads
≤8.10.2.1Update to 8.10.3
- Medium5.3Unauthenticated Limited File Deletion via Injected 'attackcfdb7_file' Submission Field
Database Addon for Contact Form 7 – CFDB7
≤1.4.1Update to 1.4.2
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
Social Share Buttons
≤1.31No patch available
- Critical9.1Unauthenticated Arbitrary Shortcode Execution via REQUEST_URI via {url} Placeholder
Click to Chat – HoliThemes
≤4.44Update to 4.45
- High8.1Unauthenticated Local File Inclusion to Remote Code Execution via 'bps_directory' Cookie 'ajax_template' Value
BP Profile Search
≤5.9Update to 6.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
Booking Package
≤1.7.29Update to 1.7.30
- High7.5Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'mode=sendBooking' with nonexistent 'timeKey' and 'public=0'
Booking Package
≤1.7.29Update to 1.7.30
- High7.5Unauthenticated Privilege Escalation via Identity-Confused Log Re-execution to Account Takeover via Log Re-execution of Anonymous-Captured Field Data
Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation
≤2.10.6Update to 2.10.7
- High7.5Unauthenticated SQL Injection
Mang Board
≤2.4.4Update to 2.4.5
- Medium4.3Missing Authorization
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
≤5.2.8Update to 5.3.0
- Medium6.3Authenticated (Contributor+) Privilege Escalation
FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution
≤3.2.5Update to 3.2.6
- Medium5.3Unauthenticated Information Exposure
FluentCart – Online Store Builder & eCommerce Checkout
≤1.7.1Update to 1.8.0
- High7.3Unauthenticated Privilege Escalation
FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution
≤3.2.5Update to 3.2.6
- High7.2Unauthenticated Stored Cross-Site Scripting
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI
≤3.6.1Update to 3.6.2
- High7.5Unauthenticated SQL Injection
Booking for Appointments and Events Calendar – Amelia
≤2.4.10Update to 2.4.11
- High7.2Unauthenticated Stored Cross-Site Scripting
BSK PDF Manager
≤3.8.1No patch available
- High7.2Unauthenticated Stored Cross-Site Scripting
WP Crowdfunding
≤2.2.2No patch available
- High7.2Unauthenticated Stored Cross-Site Scripting
Chained Quiz
≤1.4.1Update to 1.4.2
- High7.2Unauthenticated Stored Cross-Site Scripting
Cincopa video and media plug-in
≤1.165No patch available
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
Podamibe Custom User Gravatar
≤1.0.8No patch available
- High7.2Unauthenticated Stored Cross-Site Scripting
Razorpay Payment Button Elementor Plugin
≤1.2.8No patch available
- High8.1Unauthenticated PHP Object Injection
GEO my WP
≤4.5.5.3Update to 4.5.5.4
- High7.2Unauthenticated Stored Cross-Site Scripting
Bitcoin Payments – Blockonomics
3.11.0 – 3.11.0No patch available
- High7.2Unauthenticated Stored Cross-Site Scripting
Video Gallery – YouTube Gallery, Playlist & Video Grid
≤4.1.0No patch available
- Medium4.3Missing Authorization
Visual Form Builder
≤3.1No patch available
- Medium5.3Missing Authorization
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
≤5.2.8Update to 5.3.0
- Medium5.3Unauthenticated Information Exposure
Subscribe to Comments
≤2.3.2Update to 2.3.3
- High7.3Unauthenticated Arbitrary Order Status Manipulation
Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit
≤5.5.2Update to 5.5.3
- High7.5Unauthenticated SQL Injection
WX Subscribe 微信支付付费订阅
≤1.2.1No patch available