CROWD-SOURCED
VULNERABILITIES DATABASE
Vulnerabilities Crowdsourced from WordPress security researchers and the amazing public databases of –
AutomatorWP (Reflected Cross-Site Scripting) < 5.1.0
PROTECTED
Super Backup & Clone (Arbitrary File Upload) < 2.4
PROTECTED
Print Science Designer (PHP Object Injection) < 1.3.153
PROTECTED
Ninja Forms (Cross-Site Scripting) < 3.8.20
PROTECTED
Grid Plus (Arbitrary Shortcode Execution)
PROTECTED
Opt-In Downloads (Arbitrary File Upload)
PROTECTED
de:branding (Arbitrary Options Update)
PROTECTED
HQ Rental Software (Cross-Site Request Forgery to Arbitrary Options Update)
PROTECTED
OAuth Single Sign On (Authentication Bypass)
PROTECTED
WP Courses LMS (Arbitrary User Meta Update) < 3.2.22
PROTECTED
Vayu Blocks (Arbitrary Plugin Installation/Activation) < 1.2.0
PROTECTED
Product Carousel Slider(Local File Inclusion) < 1.10.0
PROTECTED
Grid Plus (Arbitrary Shortcode Execution)
PROTECTED
RapidLoad (Missing Authorization to Authenticated) < 2.4.3
PROTECTED
Active Products Tables for WooCommerce (Unauthenticated Arbitrary Shortcode Execution) < 1.0.6.6
PROTECTED
Best WordPress Gallery Plugin (Authenticated Directory Traversal ) < 2.4.27
PROTECTED
WPForms (Missing Authorization to Authenticated) < 1.9.2.2
PROTECTED
Gallery (Authenticated PHP Object Injection)
PROTECTED
Verowa Connect - Unauthenticated SQL Injection < 3.0.2
PROTECTED
SV100 Companion - Arbitrary Options Update
PROTECTED
Crowdsourced Patches for Crowdsourced Vulnerabilities.
© 2025. All rights reserved.