CROWD-SOURCED
VULNERABILITIES DATABASE
Vulnerabilities Crowdsourced from WordPress security researchers and the amazing public databases of –
Spirit Framework (Privilege Escalation) < 1.2.15
PROTECTED
AP Background (Arbitrary File Upload) < 3.8.3
PROTECTED
TextBuilder (Cross-Site Request Forgery to Privilege Escalation) < 1.2.0
PROTECTED
RestroPress - Online Food Ordering System (Unauthenticated Information Exposure to Authentication Bypass) < 3.1.9.2
PROTECTED
JoomSport (Local File Inclusion) < 5.7.4
PROTECTED
WP Dispatcher (SQL Injection via Shortcode)
PROTECTED
Appy Pie Connect for WooCommerce (Missing Authorization to Unauthenticated Privilege Escalation) < 1.1.3
PROTECTED
WPRecovery (Unauthenticated SQL Injection)
PROTECTED
Copypress Rest API (Unauthenticated Remote Code Execution) < 1.2.1
PROTECTED
Tiny Bootstrap Elements Light (Unauthenticated Local File Inclusion)
PROTECTED
Bei Fen - WordPress Backup Plugin (Local File Inclusion)
PROTECTED
AffiliateWP (Unauthenticated SQL Injection) < 2.29.0
PROTECTED
HidePost (Cross-Site Request Forgery)
PROTECTED
Sync Feedly (Cross-Site Request Forgery to Sync Trigger)
PROTECTED
Professional Contact Form (Cross-Site Request Forgery to Test Email Sending)
PROTECTED
WP Statistics (Unauthenticated Stored Cross-Site Scripting) < 14.15.5
PROTECTED
cForms - Light speed fast Form Builder (Cross-Site Request Forgery)
PROTECTED
WP-DownloadManager (Arbitrary File Upload) < 1.69
PROTECTED
Featured Image from URL (FIFU) (Unauthenticated Information Exposure via Log File) < 5.2.8
PROTECTED
Featured Image from URL (FIFU) (SQL Injection) < 5.2.8
PROTECTED
Crowdsourced Patches for Crowdsourced Vulnerabilities.
© 2026. All rights reserved.