WordPress Vulnerability Database

Vulnerability Database

WordPress Vulnerability Database

Hand curated, verified and enriched WordPress vulnerability information

Found a vulnerability that puts your sites at risk?

Software

Vulnerability

Type

Version

Published

WordPress Related Posts

Medium Severity

6.9

WordPress Related Posts plugin <= 3.6.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Medium Severity

6.9

Plugin

<= 3.6.4

2021-03-19

BuddyPress

High Severity

7.6

WordPress BuddyPress plugin <= 7.2.0 - Privilege Escalation vulnerability

High Severity

7.6

Plugin

<= 7.2.0

2021-03-17

Elementor Website Builder

Medium Severity

6.4

WordPress Elementor Website Builder plugin <= 3.1.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Medium Severity

6.4

Plugin

<= 3.1.1

2021-03-17

WP Super Cache

High Severity

7.2

WordPress WP Super Cache plugin <= 1.7.1 - Authenticated Remote Code Execution (RCE) vulnerability

High Severity

7.2

Plugin

<= 1.7.1

2021-03-16

wpDataTables

High Severity

8.1

WordPress wpDataTables plugin <= 3.4.1 - Multiple SQL Injection (SQLi) vulnerabilities

High Severity

8.1

Plugin

<= 3.4.1

2021-03-16

Flo Forms

WordPress Flo Forms plugin <= 1.0.35 - Authenticated Options Change & Stored Cross-Site Scripting (XSS) vulnerability

Plugin

<= 1.0.35

2021-03-16

Tutor LMS

WordPress Tutor LMS plugin <= 1.7.6 - Multiple Blind/Time-based SQL Injection (SQLi) vulnerabilities

Plugin

<= 1.7.6

2021-03-15

Tutor LMS

WordPress Tutor LMS plugin <= 1.8.2 - Multiple Union SQL Injection (SQLi) vulnerabilities

Plugin

<= 1.8.2

2021-03-15

Tutor LMS

WordPress Tutor LMS plugin <= 1.7.6 - Unprotected AJAX Action to Privilege Escalation vulnerability

Plugin

<= 1.7.6

2021-03-15

Five Star Restaurant Menu

WordPress Five Star Restaurant Menu plugin <= 2.2.0 - Unauthenticated Remote Code Execution (RCE) vulnerability

Plugin

<= 2.2.0

2021-03-10

Database Backups

Medium Severity

6.1

WordPress Database Backups plugin <= 1.2.2.6 - Cross-Site Request Forgery (CSRF) vulnerability leading to backup download

Medium Severity

6.1

Plugin

<= 1.2.2.6

2021-03-10

Super Interactive Maps

Medium Severity

6.5

WordPress Super Interactive Maps premium plugin <= 2.1 - Unauthenticated SQL Injection (SQLi) vulnerability

Medium Severity

6.5

Plugin

<= 2.1

2021-03-08

Super Store Finder

Medium Severity

6.5

WordPress Super Store Finder premium plugin <= 6.3 - Unauthenticated SQL Injection (SQLi) vulnerability

Medium Severity

6.5

Plugin

<= 6.3

2021-03-08

The Plus Addons for Elementor

WordPress The Plus Addons for Elementor premium plugin <= 4.1.6 - Privilege Escalation vulnerability

Plugin

<= 4.1.6

2021-03-08

WooCommerce Upload Files

WordPress WooCommerce Upload Files premium plugin <= 59.3 - Unauthenticated Arbitrary File Upload vulnerability

Plugin

<= 59.3

2021-03-04

WP Hotel Booking

WordPress WP Hotel Booking plugin <= 1.10.2 - Unauthenticated Remote Code Execution (RCE) via Arbitrary Object Deserialisation vulnerability

Plugin

<= 1.10.2

2021-03-03

User Profile Picture

WordPress User Profile Picture plugin <= 2.4.0 - Sensitive Information Disclosure vulnerability

Plugin

<= 2.4.0

2021-03-03

Forminator

WordPress Forminator plugin <= 1.14.8 - Cross-Site Request Forgery (CSRF) vulnerability

Plugin

<= 1.14.8

2021-03-01

Dokan

WordPress Dokan plugin <= 3.2.0 - Cross-Site Request Forgery (CSRF) vulnerability

Plugin

<= 3.2.0

2021-03-01

WP ERP

Medium Severity

5.4

WordPress WP ERP plugin <= 1.7.4 - Cross-Site Request Forgery (CSRF) vulnerability

Medium Severity

5.4

Plugin

<= 1.7.4

2021-03-01

2 3 4 5 6 ... 219 220 221

Vulnerability Database