CROWD-SOURCED
VULNERABILITIES DATABASE
Vulnerabilities Crowdsourced from WordPress security researchers and the amazing public databases of –
Image Optimizer, Resizer and CDN - Sirv (Arbritary Option Deletion) < 7.3.1
PROTECTED
Clone (PHP Object Injection) < 2.4.7
PROTECTED
WooCommerce Product Table Lite (Arbitrary Shortcode Execution) < 3.8.7
PROTECTED
My Contador lesr (Missing Authorization) < 2.1
PROTECTED
WPB Popup for Contact Form 7 (Arbitrary Shortcode Execution) < 1.7.6
PROTECTED
GamiPress (Arbitrary Shortcode Execution) < 7.1.6
PROTECTED
Classified Listing (Arbitrary Option Update) < 3.1.16
PROTECTED
Login using WordPress Users (Authenticated SQL Injection) < 1.15.7
PROTECTED
Blogger 301 Redirect (Unauthenticated SQL Injection)
PROTECTED
PostX (Arbitrary Plugin Installation/Activation) < 4.1.17
PROTECTED
3D FlipBook, PDF Viewer, PDF Embedder (Authenticated Arbitrary File Upload)
PROTECTED
PDF Generator Addon for Elementor Page Builder ( Unauthenticated Arbitrary File Download)
PROTECTED
Backup and Staging by WP Time Capsule (Arbitrary File Upload) < 1.22.22
PROTECTED
WP Activity Log (Cross-Site Scripting) < 5.2.2
PROTECTED
Tripetto (Unauthentiated Stored Cross Site Scripting )
PROTECTED
Really Simple Security < 9.1.2
PROTECTED
Chartify - WordPress Chart Plugin (Unauthenticated Local File Inclusion) < 2.9.6
PROTECTED
Migration, Backup, Staging - WPvivid (PHP Object Injection) < 0.9.108
PROTECTED
The FOX - Currency Switcher Professional for WooCommerce (Arbitrary Shortcode Execution) < 1.4.2.3
PROTECTED
MultiManager WP (Authentication Bypass) < 1.1.0
PROTECTED
Crowdsourced Patches for Crowdsourced Vulnerabilities.
© 2026. All rights reserved.