CWE-89Vulnerability type
WordPress SQL Injection vulnerabilities (page 73)
Plugins that build database queries from request data without $wpdb->prepare(). Often unauthenticated and easy to automate.
How to prevent sql injection in WordPress pluginsThe VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- High7.2Unauthenticated Stored Cross-Site Scripting
click5 CRM add-on to Contact Form 7
≤1.0.4No patch available
- High7.2Unauthenticated Stored Cross-Site Scripting
click5 CRM add-on to Ninja Forms
≤1.0.1No patch available
- Medium4.3Missing Authorization to Settings Update
Directory Listings WordPress plugin – uListing
≤2.2.0No patch available
- Medium4.3Cross-Site Request Forgery
Dashboard Notes
≤1.0.3No patch available
- Medium4.3Authenticated (Author+) Insecure Direct Object Reference
Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More
≤1.16.1Update to 1.16.2
- Medium4.3Missing Authorization
Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More
≤1.16.1Update to 1.16.2
- High7.5Unauthenticated SQL Injection
Mobile builder
≤1.4.2No patch available
- Medium6.8Redux Framework <= 4.5.11 – Authenticated (Subscriber+) Privilege Escalation via Users Extension
Redux Framework
≤4.5.11Update to 4.5.13
- High7.3Unauthenticated Privilege Escalation
miniOrange OTP Login, Verification and SMS Notifications
≤5.5.7Update to 5.5.8
- High7.3Unauthenticated Privilege Escalation
Forminator Forms – Contact Form, Payment Form & Custom Form Builder
≤1.57.3Update to 1.58.0
- High7.2Unauthenticated Stored Cross-Site Scripting via 'content' Parameter
Ocean Pro Demos
≤1.5.4Update to 1.5.5
- High8.1Unauthenticated Local File Inclusion
Ozeum | Art Gallery and Museum Theme
≤1.3.0No patch available
- High8.1MegaOne Multipurpose WordPress Theme <= 2.8 - Unauthenticated Local File Inclusion
Flipmart - MegaOne Multipurpose WordPress Theme
≤2.8No patch available
- Medium6.1Reflected Cross-Site Scripting
Pin = Pinterest Style / Personal Masonry Blog / Front-end Submission
≤7.0No patch available
- High8.1Food & Wine Store WordPress Theme <= 3.20 - Unauthenticated PHP Object Injection
WineShop - Food & Wine Store WordPress Theme
≤3.20No patch available
- High8.1Unauthenticated PHP Object Injection
Equadio
≤1.1.4No patch available
- High8.1Unauthenticated PHP Object Injection
N7
≤2.21No patch available
- High8.1Unauthenticated PHP Object Injection
Invetex
≤2.18No patch available
- High8.1Unauthenticated PHP Object Injection
Law Office
≤3.20No patch available
- High8.8Authenticated (Contributor+) Arbitrary File Upload
Creator LMS – WordPress LMS Plugin for Coaches, Cohorts & Course Creators
≤1.2.21Update to 1.2.22
- Medium6.6Authenticated (Shop Manager+) PHP Object Injection
WPML Multilingual & Multicurrency for WooCommerce
≤5.5.8Update to 5.6.3
- High8.1Unauthenticated PHP Object Injection
AFFI – Affiliate Marketing for WooCommerce
≤1.0.10Update to 1.0.11
- High7.5Unauthenticated SQL Injection
Tickera – Sell Tickets & Manage Events
≤3.6.0.6Update to 3.6.0.7
- Medium5.3Missing Authorization
GIFT4U – Gift Cards All in One for Woo
≤1.1.3Update to 1.1.4
- Medium4.711.1.2 - Authenticated (Shop Manager+) Privilege Escalation
WooCommerce
9.8.0 – 11.1.2Update to 11.2.0
- Medium4.3Missing Authorization
Jetpack VideoPress
≤3.6Update to 3.7
- High8.1Unauthenticated PHP Object Injection
asia-garden
≤1.3.1No patch available
- Medium5.3Missing Authorization
Bayarcash WooCommerce
≤4.4.2Update to 4.4.3
- Medium6.6Authenticated (Editor+) PHP Object Injection
Super Video player – Fully Customizable Video Player with Playlist
≤1.8.14Update to 1.8.15
- Medium5.3Unauthenticated Information Exposure
WP Rollback – Rollback Plugins and Themes
≤3.1.2Update to 3.2.0