WordPress Vulnerability Database

Vulnerability Database

WordPress Vulnerability Database

Hand curated, verified and enriched WordPress vulnerability information

Found a vulnerability that puts your sites at risk?

Software

Vulnerability

Type

Version

Published

Redirection for Contact Form 7

Medium Severity

5.4

WordPress Redirection for Contact Form 7 plugin <= 2.3.3 - Unauthenticated Arbitrary Nonce Generation vulnerability

Medium Severity

5.4

Plugin

<= 2.3.3

2021-04-20

Redirection for Contact Form 7

Medium Severity

5.4

WordPress Redirection for Contact Form 7 plugin <= 2.3.3 - Authenticated Arbitrary Plugin Installation vulnerability

Medium Severity

5.4

Plugin

<= 2.3.3

2021-04-20

Redirection for Contact Form 7

High Severity

7.5

WordPress Redirection for Contact Form 7 plugin <= 2.3.3 - Authenticated PHP Object Injection vulnerability

High Severity

7.5

Plugin

<= 2.3.3

2021-04-20

Redirection for Contact Form 7

Medium Severity

4.2

WordPress Redirection for Contact Form 7 plugin <= 2.3.3 - Authenticated Arbitrary Post Deletion vulnerability

Medium Severity

4.2

Plugin

<= 2.3.3

2021-04-20

Redirection for Contact Form 7

Medium Severity

WordPress Redirection for Contact Form 7 plugin <= 2.3.3 - Unprotected AJAX Actions vulnerability

Medium Severity

Plugin

<= 2.3.3

2021-04-20

Easy Digital Downloads

Medium Severity

6.5

WordPress Easy Digital Downloads plugin <= 2.10.2 - Cross-Site Request Forgery (CSRF) vulnerability

Medium Severity

6.5

Plugin

<= 2.10.2

2021-04-16

HT Slider Range for Amazon affiliates

High Severity

7.4

WordPress HT Slider Range for Amazon affiliates plugin <= 1.1.9 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

High Severity

7.4

Plugin

<= 1.1.9

2021-04-16

QIWI for WooCommerce

High Severity

7.4

WordPress QIWI for WooCommerce plugin <= 0.0.9 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

High Severity

7.4

Plugin

<= 0.0.9

2021-04-16

Teamleader CRM Forms

High Severity

7.4

WordPress Teamleader CRM Forms plugin <= 2.0.0 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

High Severity

7.4

Plugin

<= 2.0.0

2021-04-16

Invoicing with InvoiceXpress for WooCommerce

High Severity

7.4

WordPress Invoicing with InvoiceXpress for WooCommerce plugin <= 3.0.2 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

High Severity

7.4

Plugin

<= 3.0.2

2021-04-16

Shopello API

High Severity

7.4

WordPress Shopello API plugin <= 2.9.0 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

High Severity

7.4

Plugin

<= 2.9.0

2021-04-16

WordPress

Medium Severity

6.5

WordPress core 4.7-5.7 - XML External Entity (XXE) vulnerability

Medium Severity

6.5

WordPress

4.7-5.7

2021-04-15

WordPress

Medium Severity

5.3

WordPress core 4.7-5.7 - Sensitive Data Exposure vulnerability

Medium Severity

5.3

WordPress

4.7-5.7

2021-04-15

Sina Extension for Elementor

Medium Severity

6.4

WordPress Sina Extension for Elementor plugin <= 3.3.11 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Medium Severity

6.4

Plugin

<= 3.3.11

2021-04-13

Ultimate Addons for Elementor

Medium Severity

6.4

WordPress Ultimate Addons for Elementor premium plugin <= 1.29.2 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Medium Severity

6.4

Plugin

<= 1.29.2

2021-04-13

Elementor Addon Elements

Medium Severity

6.4

WordPress Elementor Addon Elements plugin <= 1.11.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Medium Severity

6.4

Plugin

<= 1.11.1

2021-04-13

Essential Addons for Elementor

Medium Severity

6.4

WordPress Essential Addons for Elementor plugin <= 4.5.3 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Medium Severity

6.4

Plugin

<= 4.5.3

2021-04-13

Elementor – Header, Footer & Blocks Template

Medium Severity

6.4

WordPress Elementor – Header, Footer & Blocks Template plugin <= 1.5.7 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Medium Severity

6.4

Plugin

<= 1.5.7

2021-04-13

Premium Addons for Elementor

Medium Severity

6.4

WordPress Premium Addons for Elementor plugin <= 4.2.7 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Medium Severity

6.4

Plugin

<= 4.2.7

2021-04-13

Elements kit Elementor addons

Medium Severity

6.4

WordPress Elements kit Elementor addons plugin <= 2.1.7 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Medium Severity

6.4

Plugin

<= 2.1.7

2021-04-13

1 2 3 4 5 ... 223 224 225

Vulnerability Database