WordPress Vulnerability Database

Vulnerability Database

WordPress Vulnerability Database

Hand curated, verified and enriched WordPress vulnerability information

Software

Vulnerability

Type

Version

Published

Quotes Collection

Low Severity

3.8

SQL Injection (SQLi) vulnerability

Low Severity

3.8

Plugin

<= 2.5.2

2021-11-15

StopBadBots

High Severity

7.3

Unauthenticated SQL Injection (SQLi) vulnerability

High Severity

7.3

Plugin

<= 6.66

2021-11-15

Temporary Login Without Password

Medium Severity

5.4

Unauthorized Plugin's Settings Update vulnerability

Medium Severity

5.4

Plugin

<= 1.7.0

2021-11-15

All-in-One Video Gallery

Medium Severity

4.9

inOne Video Gallery plugin <= 2.4.9 Local File Inclusion (LFI) vulnerability

Medium Severity

4.9

Plugin

<= 2.4.9

2021-11-15

Pixel Cat

Medium Severity

4.8

Stored CrossSite Scripting (XSS) vulnerability

Medium Severity

4.8

Plugin

<= 2.6.2

2021-11-15

Pixel Cat

Medium Severity

6.1

CrossSite Request Forgery (CSRF) vulnerability leading to Stored CrossSite Scripting (XSS)

Medium Severity

6.1

Plugin

<= 2.6.1

2021-11-15

ToTop Link

Medium Severity

5.9

Unauthenticated PHP Object Injection vulnerability

Medium Severity

5.9

Plugin

<= 1.7.1

2021-11-15

User meta shortcodes

Medium Severity

4.9

Unauthorized Arbitrary User Metadata Access vulnerability

Medium Severity

4.9

Plugin

<= 0.5

2021-11-15

Mediamatic – Media Library Folders

Medium Severity

6.3

SQL Injection (SQLi) vulnerability

Medium Severity

6.3

Plugin

<= 2.7

2021-11-15

WP System Log

Medium Severity

6.5

Unauthenticated Stored CrossSite Scripting (XSS) vulnerability

Medium Severity

6.5

Plugin

<= 1.0.20

2021-11-15

SEO Booster

Medium Severity

5.5

SQL Injection (SQLi) vulnerability

Medium Severity

5.5

Plugin

<= 3.7

2021-11-15

NEX-Forms – Ultimate Form Builder

Medium Severity

4.8

Forms – Ultimate Form Builder plugin <= 7.9.4 Multiple Stored CrossSite Scripting (XSS) vulnerabilities

Medium Severity

4.8

Plugin

<= 7.9.4

2021-11-15

Inspirational Quote Rotator

Medium Severity

4.8

Stored CrossSite Scripting (XSS) vulnerability

Medium Severity

4.8

Plugin

<= 1.0.0

2021-11-15

Single Post Exporter

Low Severity

3.7

CrossSite Request Forgery (CSRF) vulnerability leading to Plugin Settings Update

Low Severity

3.7

Plugin

<= 1.1.1

2021-11-15

Flex Local Fonts

Medium Severity

4.8

Stored CrossSiteScripting (XSS) vulnerability

Medium Severity

4.8

Plugin

<= 1.0.0

2021-11-15

WP Admin Logo Changer

Medium Severity

4.3

CrossSite Request Forgery (CSRF) vulnerability leading to Plugin Settings Update

Medium Severity

4.3

Plugin

<= 1.0

2021-11-15

Contact Form Advanced Database

Medium Severity

5.4

Unauthorized AJAX Calls vulnerability

Medium Severity

5.4

Plugin

<= 1.0.8

2021-11-15

Shiny Buttons

Medium Severity

6.1

Unauthenticated Stored CrossSite Scripting (XSS) vulnerability

Medium Severity

6.1

Plugin

<= 1.1.0

2021-11-15

Filter Portfolio Gallery

Medium Severity

5.4

Arbitrary Gallery Deletion via CrossSite Request Forgery (CSRF) vulnerability

Medium Severity

5.4

Plugin

<= 1.5

2021-11-15

Wp Limits

Medium Severity

4.3

CrossSite Request Forgery (CSRF) vulnerability leading to Plugin Settings Update

Medium Severity

4.3

Plugin

<= 1.0

2021-11-15

Newer entries Older entries

Vulnerability Database