CWE-89Vulnerability type
WordPress SQL Injection vulnerabilities (page 1258)
Plugins that build database queries from request data without $wpdb->prepare(). Often unauthenticated and easy to automate.
How to prevent sql injection in WordPress pluginsThe VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Low2.7Server-Side Request Forgery
RSVPMaker
<8.7.3Update to 8.7.4
- High8.8Blind SQL Injection
FAQ Builder AYS
≤1.3.5Update to 1.3.6
- High7.2SQL Injection
Secure Copy Content Protection and Content Locking
<2.6.7Update to 2.6.7
- High8.1Authorization Bypass
Workreap - Freelance Marketplace and Directory WordPress Theme
<2.2.2Update to 2.2.2
- High8.8SQL Injection
Image Slider by Ays- Responsive Slider and Carousel
<2.5.0Update to 2.5.0
- High8.8Authenticated SQL Injection
Handsome Testimonials & Reviews
<2.1.1Update to 2.1.1
- High8.8Authenticated SQL Injection
Survey Maker by AYS
<1.5.6Update to 1.5.6
- High8.8Authenticated SQL Injection
Popup Box – Create Countdown, Coupon, Video, Contact Form Popups
<2.3.4Update to 2.3.4
- Critical9.83.1.3 - Arbitrary File Upload
ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content
3.0.0 – 3.1.3Update to 3.1.4
- Critical9.83.1.3 - Unauthenticated Privilege Escalation
ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content
3.0.0 – 3.1.3Update to 3.1.4
- Medium6.4Contributor+ Stored Cross-Site Scripting
YouTube Embed, Playlist and Popup by WpDevArt
<2.3.9Update to 2.3.9
- Medium6.1Reflected Cross-Site Scripting via extension
W3 Total Cache
<2.1.4Update to 2.1.4
- Medium6.4Authenticated Stored Cross-Site Scripting
Steam Group Viewer
≤2.1No patch available
- Critical9.8Server-Side Request Forgery & Remote File Inclusion
Onair2: Radio Station WordPress Theme With Non-Stop Music Player
<3.9.9.2Update to 3.9.9.2
- Medium6.4Stored Cross-Site Scripting
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress
≤1.0.6Update to 1.0.7
- Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Event Geek
≤2.5.2No patch available
- Medium6.1Cross-Site Request Forgery to Stored Cross-Site Scripting
Migrate Users
≤1.0.1No patch available
- High7.2Reflected Cross-Site Scripting via extension
W3 Total Cache
0.5 – 2.1.4Update to 2.1.5
- Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
DrawBlog
≤0.90No patch available
- Medium6.1Reflected Cross-Site Scripting
Post Grid
≤2.1.7Update to 2.1.8
- Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Any Hostname
≤1.0.6No patch available
- Medium5.5Authenticated Stored Cross-Site Scripting
ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content
<3.1.8Update to 3.1.8
- Medium4.3Authenticated Insecure Direct Object Reference
User Profile Picture – Custom Local Avatars
<2.6.0Update to 2.6.0
- Medium6.1Reflected Cross-site Scripting via id Parameter
Awesome Weather Widget
≤3.0.2No patch available
- Critical9.83.1.3 - Unauthenticated Privilege Escalation
ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content
3.0.0 – 3.1.3Update to 3.1.4
- Medium5.4Stored Cross-Site Scripting
Yada Wiki
<3.4.1Update to 3.4.1
- Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
Bookshelf
≤2.0.4No patch available
- High7.2SQL Injection
Side Menu Lite – Sticky Floating Side Menu
≤2.1.1Update to 2.2.1
- Critical9.83.1.3 - Unauthenticated Privilege Escalation
ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content
3.0.0 – 3.1.3Update to 3.1.4
- Medium5.5Authenticated Stored Cross-Site Scripting
Tutor LMS – eLearning and online course solution
≤1.9.1Update to 1.9.2