CROWD-SOURCED
VULNERABILITIES DATABASE
Vulnerabilities Crowdsourced from WordPress security researchers and the amazing public databases of –
Tiare Membership (Unauthenticated Privilege Escalation) < 1.3
PROTECTED
CIBELES AI (Arbitrary File Upload) < 1.10.9
PROTECTED
AI Feeds (Arbitrary File Upload) < 1.0.12
PROTECTED
EduKart Pro (Unauthenticated Privilege Escalation)
PROTECTED
ProjectList (Arbitrary File Upload)
PROTECTED
Simple User Registration (Stored Cross-Site Scripting) < 6.7
PROTECTED
S2B AI Assistant - ChatBot, ChatGPT, OpenAI, Content & Image Generator (Arbitrary File Upload) < 1.7.9
PROTECTED
ELEX WordPress HelpDesk & Customer Ticketing System (Arbitrary File Upload) < 3.3.2
PROTECTED
WPBookit (Stored Cross-Site Scripting) < 1.0.7
PROTECTED
WP AUDIO GALLERY (Arbitrary File Deletion)
PROTECTED
Realty Portal (Arbitrary Options Update)
PROTECTED
Flo Forms - Easy Drag & Drop Form Builder (Unauthenticated Stored Cross-Site Scripting via SVG Upload)
PROTECTED
Vitepos - Point of Sale (POS) for WooCommerce (Arbitrary File Upload to Remote Code Execution) < 3.3.1
PROTECTED
WP Directory Kit (Unauthenticated SQL Injection) < 1.4.4
PROTECTED
Community Events (Unauthenticated SQL Injection) < 1.5.5
PROTECTED
Chat Help - Click to Chat Button & Form (Sensitive Information Exposure) < 3.1.4
PROTECTED
Code Snippets (PHP Code Injection) < 3.9.2
PROTECTED
Giveaways and Contests by RafflePress - Get More Website Traffic, Email Subscribers, and Social Followers (Cross-Site Scripting) < 1.12.21
PROTECTED
Gravity Forms (Unauthenticated Arbitrary File Upload) < 2.9.22
PROTECTED
Pie Forms for WP (Unauthenticated Arbitrary File Upload)
PROTECTED
Crowdsourced Patches for Crowdsourced Vulnerabilities.
© 2026. All rights reserved.