CROWD-SOURCED
VULNERABILITIES DATABASE
Vulnerabilities Crowdsourced from WordPress security researchers and the amazing public databases of –
GamiPress (Arbitrary Shortcode Execution) < 7.1.6
PROTECTED
Classified Listing (Arbitrary Option Update) < 3.1.16
PROTECTED
Login using WordPress Users (Authenticated SQL Injection) < 1.15.7
PROTECTED
Blogger 301 Redirect (Unauthenticated SQL Injection)
PROTECTED
PostX (Arbitrary Plugin Installation/Activation) < 4.1.17
PROTECTED
3D FlipBook, PDF Viewer, PDF Embedder (Authenticated Arbitrary File Upload)
PROTECTED
PDF Generator Addon for Elementor Page Builder ( Unauthenticated Arbitrary File Download)
PROTECTED
Backup and Staging by WP Time Capsule (Arbitrary File Upload) < 1.22.22
PROTECTED
WP Activity Log (Cross-Site Scripting) < 5.2.2
PROTECTED
Tripetto (Unauthentiated Stored Cross Site Scripting )
PROTECTED
Really Simple Security < 9.1.2
PROTECTED
Chartify - WordPress Chart Plugin (Unauthenticated Local File Inclusion) < 2.9.6
PROTECTED
Migration, Backup, Staging - WPvivid (PHP Object Injection) < 0.9.108
PROTECTED
The FOX - Currency Switcher Professional for WooCommerce (Arbitrary Shortcode Execution) < 1.4.2.3
PROTECTED
MultiManager WP (Authentication Bypass) < 1.1.0
PROTECTED
Advanced Order Export For WooCommerce (PHP Object Injection) < 3.5.6
PROTECTED
GPX Viewer (Authenticated Arbitrary File Creation)
PROTECTED
WP Project Manager (Insecure Direct Object Reference to Unauthenticated Authorization Bypass) < 2.6.14
PROTECTED
WP Photo Album Plus (Arbitrary Shortcode Execution) < 8.9.01.001
PROTECTED
Debug Tool (Arbitrary File Creation)
PROTECTED
Crowdsourced Patches for Crowdsourced Vulnerabilities.
© 2025. All rights reserved.