CWE-918Vulnerability type
WordPress SSRF vulnerabilities (page 73)
Features that fetch URLs on the server (previews, imports, webhooks) and can be pointed at internal services.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- High7.2Unauthenticated Stored Cross-Site Scripting
click5 CRM add-on to Contact Form 7
≤1.0.4No patch available
- High7.2Unauthenticated Stored Cross-Site Scripting
click5 CRM add-on to Ninja Forms
≤1.0.1No patch available
- Medium4.3Missing Authorization to Settings Update
Directory Listings WordPress plugin – uListing
≤2.2.0No patch available
- Medium4.3Cross-Site Request Forgery
Dashboard Notes
≤1.0.3No patch available
- Medium4.3Authenticated (Author+) Insecure Direct Object Reference
Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More
≤1.16.1Update to 1.16.2
- Medium4.3Missing Authorization
Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More
≤1.16.1Update to 1.16.2
- High7.5Unauthenticated SQL Injection
Mobile builder
≤1.4.2No patch available
- Medium6.8Redux Framework <= 4.5.11 – Authenticated (Subscriber+) Privilege Escalation via Users Extension
Redux Framework
≤4.5.11Update to 4.5.13
- High7.3Unauthenticated Privilege Escalation
miniOrange OTP Login, Verification and SMS Notifications
≤5.5.7Update to 5.5.8
- High7.3Unauthenticated Privilege Escalation
Forminator Forms – Contact Form, Payment Form & Custom Form Builder
≤1.57.3Update to 1.58.0
- High7.2Unauthenticated Stored Cross-Site Scripting via 'content' Parameter
Ocean Pro Demos
≤1.5.4Update to 1.5.5
- High8.1Unauthenticated Local File Inclusion
Ozeum | Art Gallery and Museum Theme
≤1.3.0No patch available
- High8.1MegaOne Multipurpose WordPress Theme <= 2.8 - Unauthenticated Local File Inclusion
Flipmart - MegaOne Multipurpose WordPress Theme
≤2.8No patch available
- Medium6.1Reflected Cross-Site Scripting
Pin = Pinterest Style / Personal Masonry Blog / Front-end Submission
≤7.0No patch available
- High8.1Food & Wine Store WordPress Theme <= 3.20 - Unauthenticated PHP Object Injection
WineShop - Food & Wine Store WordPress Theme
≤3.20No patch available
- High8.1Unauthenticated PHP Object Injection
Equadio
≤1.1.4No patch available
- High8.1Unauthenticated PHP Object Injection
N7
≤2.21No patch available
- High8.1Unauthenticated PHP Object Injection
Invetex
≤2.18No patch available
- High8.1Unauthenticated PHP Object Injection
Law Office
≤3.20No patch available
- High8.8Authenticated (Contributor+) Arbitrary File Upload
Creator LMS – WordPress LMS Plugin for Coaches, Cohorts & Course Creators
≤1.2.21Update to 1.2.22
- Medium6.6Authenticated (Shop Manager+) PHP Object Injection
WPML Multilingual & Multicurrency for WooCommerce
≤5.5.8Update to 5.6.3
- High8.1Unauthenticated PHP Object Injection
AFFI – Affiliate Marketing for WooCommerce
≤1.0.10Update to 1.0.11
- High7.5Unauthenticated SQL Injection
Tickera – Sell Tickets & Manage Events
≤3.6.0.6Update to 3.6.0.7
- Medium5.3Missing Authorization
GIFT4U – Gift Cards All in One for Woo
≤1.1.3Update to 1.1.4
- Medium4.711.1.2 - Authenticated (Shop Manager+) Privilege Escalation
WooCommerce
9.8.0 – 11.1.2Update to 11.2.0
- Medium4.3Missing Authorization
Jetpack VideoPress
≤3.6Update to 3.7
- High8.1Unauthenticated PHP Object Injection
asia-garden
≤1.3.1No patch available
- Medium5.3Missing Authorization
Bayarcash WooCommerce
≤4.4.2Update to 4.4.3
- Medium6.6Authenticated (Editor+) PHP Object Injection
Super Video player – Fully Customizable Video Player with Playlist
≤1.8.14Update to 1.8.15
- Medium5.3Unauthenticated Information Exposure
WP Rollback – Rollback Plugins and Themes
≤3.1.2Update to 3.2.0