CWE-89Vulnerability type
WordPress SQL Injection vulnerabilities (page 120)
Plugins that build database queries from request data without $wpdb->prepare(). Often unauthenticated and easy to automate.
How to prevent sql injection in WordPress pluginsThe VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Medium4.9Authenticated (Administrator+) SQL Injection
MoreConvert Wishlist for WooCommerce
≤1.9.21Update to 2.0.0
- Medium5.3Missing Authorization to Unauthenticated Private/Draft/Password-Protected Listings Exposure
Motors – Car Dealership & Classified Listings Plugin
≤1.4.120Update to 1.4.121
- Medium5.32.1.6 - Unauthenticated Information Exposure
MgoSync – European dropshipping and suppliers
2.1.5 – 2.1.6Update to 2.1.7
- Medium6.4Authenticated (Contributor+) Server-Side Request Forgery via 'src' Attribute of <img> Tags
Auto Upload Images
≤3.3.2Update to 3.4.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'buttoncolor' Shortcode Attribute
Custom Twitter Feeds – A Tweets Widget or X Feed Widget
≤2.8.0Update to 2.9.0
- Medium5.3Unauthenticated Sensitive Information Exposure in Public Frontend Inline Script
GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AI
≤2.34.6Update to 2.34.7
- Medium5.3Missing Authorization
Botiga Pro
≤1.6.4Update to 1.6.5
- High8.8Authenticated (Subscriber+) Arbitrary File Upload via Media Import
Use-your-Drive | Google Drive plugin for WordPress
2.0 – 3.8.3Update to 3.9.0
- Medium5.3Missing Authorization
Mailchimp for WooCommerce
≤6.1.0Update to 6.1.1
- Medium4.3Authenticated (Hydra Host+) Insecure Direct Object Reference
Hydra Booking — Appointment Scheduling & Booking Calendar
≤1.2.3Update to 1.2.4
- Medium4.3Authenticated (Hydra Host+) Insecure Direct Object Reference
Hydra Booking — Appointment Scheduling & Booking Calendar
≤1.2.2Update to 1.2.3
- Medium5.3Unauthenticated Payment Bypass
Payment Gateway for PayPal on WooCommerce
≤9.2.0Update to 9.2.1
- Medium5.3Missing Authorization
WPGraphQL Smart Cache
≤2.3.1Update to 2.3.2
- Medium5.3Unauthenticated Insecure Direct Object Reference
Online Scheduling and Appointment Booking System – Bookly
≤28.1Update to 28.2
- Medium4.3Missing Authorization
Checkout Field Manager (Checkout Manager) for WooCommerce
≤7.9.6Update to 7.9.7
- High7.3Social Login <= 1.5.9 - Unauthenticated Privilege Escalation
UsersWP – Social Login
≤1.5.9Update to 1.5.10
- High7.2Unauthenticated Stored Cross-Site Scripting
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
≤2.13.0Update to 2.13.1
- Medium4.3Missing Authorization
Unbounce Landing Pages
≤1.1.4Update to 1.1.5
- Critical9.83.5.50 - Unauthenticated Arbitrary File Upload
Ultra Addons for Contact Form 7
3.2.4 – 3.5.50Update to 3.5.51
- Medium5.3Unauthenticated Payment Bypass
SUMIT Payment Gateway for WooCommerce
≤3.0.0Update to 4.0.0
- Medium6.1Reflected Cross-Site Scripting
Estatik Real Estate Plugin
≤4.3.4Update to 4.3.5
- Medium4.7Authenticated (Admin+) Privilege Escalation
WP Import Export Lite
≤3.9.34Update to 3.9.35
- Medium6.5Authenticated (Administrator+) Arbitrary File Deletion
JetFormBuilder — Dynamic Blocks Form Builder
≤3.6.5.2Update to 3.6.5.3
- High7.2Unauthenticated Stored Cross-Site Scripting via wpautop() Blockquote Handling
WordPress
≤7.1Update to 6.6.8 or 6.7.8 or 6.8.9 or 6.9.8 or 7.0.5 or 7.1.1
- Medium5.3Missing Authorization
Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit
≤5.4.6Update to 5.4.7
- Medium4.3Authenticated (Hydra Host+) Insecure Direct Object Reference
Hydra Booking — Appointment Scheduling & Booking Calendar
≤1.2.1Update to 1.2.2
- Medium5.3Missing Authorization
Secure Custom Fields
≤6.9.3Update to 6.9.4
- High7.5Unauthenticated SQL Injection
VikRentItems Flexible Rental Management System
≤1.2.3Update to 1.2.4
- Medium4.3Authenticated (Subscriber+) Insecure Direct Object Reference
Checkout Field Manager (Checkout Manager) for WooCommerce
≤7.9.6Update to 7.9.7
- Medium5.3Unauthenticated Email Verification Bypass
FluentAuth – Login Security, Two-Factor Authentication, Passkeys & Social Login
≤2.1.2Update to 3.0.0