VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-89Vulnerability type

WordPress SQL Injection vulnerabilities (page 1335)

Plugins that build database queries from request data without $wpdb->prepare(). Often unauthenticated and easy to automate.

How to prevent sql injection in WordPress plugins
Severity
Signals
Software

41,172 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress SQL Injection vulnerabilities (page 1335)
SeverityVulnerabilityCVEInstallsPublished
Medium4.3Cross-Site Request Forgery
WP Ultimate CSV Importer – WordPress CSV, XML & Excel Import Export≤3.7.2Update to 3.7.3
CVE-2015-10125—
Medium6.1Cross-Site Scripting
WeeklyNews<2.2.9Update to 2.2.9
CVE-2015-9504—
High8.8Cross-Site Request Forgery to Cross-Site Scripting
Ad Inserter – Ad Manager & AdSense Ads<1.5.3Update to 1.5.3
CVE-2015-9497—
High7.52.2.21 - Information Exposure
Slideshow2.2.8 – 2.2.21Update to 2.2.22
CVE-2015-3634—
Medium6.1Reflected Cross-Site Scripting
GF Windcave Free≤1.4.2Update to 1.4.3
CVE-2015-10117—
Medium4.9Directory Traversal
TheCartPress eCommerce Shopping Cart≤1.5.3.6No patch available
CVE-2015-3301—
High7.5Sensitive Information Disclosure
TheCartPress eCommerce Shopping Cart≤1.5.3.6No patch available
CVE-2015-3302—
Medium6.1Multiple Cross-Site Scripting
TheCartPress eCommerce Shopping Cart≤1.5.3.6No patch available
CVE-2015-3300—
High7.5HTTP Response Splitting
Smart External Link Click Monitor [Link Log]≤1.4Update to 2.0
CVE-2015-9345—
Medium6.1Ultimate Newspaper Theme <= 1.3.3 - Cross-Site Scripting
Exquisite - Ultimate Newspaper Theme≤1.3.3No patch available
CVE-2015-9500—
Medium6.1Reflected Cross-Site Scripting
Resend Welcome Email≤1.0.1Update to 1.0.2
CVE-2015-10078—
High8.8Cross-Site Request Forgery
WPS Hide Login<1.1Update to 1.1
CVE-2015-9498—
High7.2Cross-Site Scripting via Comments
WordPress≤4.2Update to 4.0.4 or 4.1.4 or 4.2.1
CVE-2015-3440—
Medium6.1Reflected Cross-Site Scripting
WP Maps – Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings<2.3.7Update to 2.3.7
CVE-2015-9305—
Medium6.1Reflected Cross-Site Scripting
WooSidebars≤1.4.1Update to 1.4.2
CVE-2015-10114—
Medium6.1Reflected Cross-Site Scripting
Mark User as Spammer≤1.0.1Update to 1.0.2
CVE-2015-10093—
Medium6.1Reflected Cross-Site Scripting
WooFramework Branding≤1.0.1Update to 1.0.2
CVE-2015-10112—
Medium6.1Cross-Site Scripting
OptionTree≤2.5.3Update to 2.5.4
CVE-2015-9320—
Medium6.1Reflected Cross-Site Scripting
Icons for Features≤1.0.0Update to 1.0.1
CVE-2015-10104—
Medium6.1Reflected Cross-Site Scripting
WooFramework Tweaks≤1.0.1Update to 1.0.2
CVE-2015-10113—
Medium6.1Reflected Cross-Site Scripting
WooSidebars Sidebar Manager Converter≤1.1.1Update to 1.1.2
CVE-2015-10115—
High7.1Cross-Site Scripting
WP-Spreadplugin<3.8.6.2Update to 3.8.6.2
CVE-2015-10132—
High7.2Cross-Site Scripting
WordPress≤4.1.1Update to 3.7.6 or 3.8.6 or 3.9.4 or 4.0.2 or 4.1.2
CVE-2015-3438—
Medium6.1Reflected Cross-Site Scripting
Shortcode Factory≤1.1Update to 1.1.1
CVE-2015-9321—
Medium6.1Reflected Cross-Site Scripting
Taxonomy Switcher≤1.0.3Update to 1.0.4
CVE-2015-10013—
Medium6.1Reflected Cross-Site Scripting
Easy Canadian Sales Taxes Add-On for iThemes Exchange<1.1.0Update to 1.1.0
CVE-2015-9367—
Medium6.1Reflected Cross-Site Scripting
Related Posts≤1.8.1Update to 1.8.2
CVE-2015-9361—
Medium6.1Cross-Site Scripting
Easy Digital Downloads – Invoices<1.0.4Update to 1.0.4
CVE-2015-9518—
Medium6.1Quota < 1.2.5 - Cross-Site Scripting
Easy Digital Downloads - Quota<1.2.5Update to 1.2.5
CVE-2015-9534—
Medium6.1Reflected Cross-Site Scripting
Stripe Add-on for iThemes Exchange<1.2.0Update to 1.2.0
CVE-2015-9374—

Search VulnCrest Radar

Jump to

Are you sure?