blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

CVEs stored22,605
Affected records46,308
Newest source updateNovember 9, 2026
CVE-2021-3120 February 22, 2021
An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote code execution on the operating system in the security context of… Full details
CRITICAL 9.8
CVE-2020-29171 February 10, 2021
Cross-site scripting (XSS) vulnerability in admin/wp-security-blacklist-menu.php in the Tips and Tricks HQ All In One WP Security & Firewall (all-in-one-wp-security-and-firewall) plugin before 4.4.6 for WordPress. Full details
MEDIUM 6.1
CVE-2020-35943 February 9, 2021
A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload. (It is possible to bypass CSRF protection by simply not including a nonce parameter.) Full details
MEDIUM 6.5
CVE-2020-35942 February 9, 2021
A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload and Local File Inclusion via settings modification, leading to Remote Code Execution and XSS. (It is… Full details
HIGH 8.8
CVE-2020-28707 January 19, 2021
The Stockdio Historical Chart plugin before 2.8.1 for WordPress is affected by Cross Site Scripting (XSS) via stockdio_chart_historical-wp.js in wp-content/plugins/stockdio-historical-chart/assets/ because the origin of a postMessage() event is not validated. The stockdio_eventer function listens… Full details
MEDIUM 6.1
CVE-2020-35749 January 15, 2021
Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjb_file parameter to wp-admin/post.php. Full details
HIGH 7.7
CVE-2020-35748 January 15, 2021
Cross-site scripting (XSS) vulnerability in models/list-table.php in the FV Flowplayer Video Player plugin before 7.4.37.727 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the fv_wp_fvvideoplayer_src JSON field in… Full details
MEDIUM 5.4
CVE-2021-3133 January 12, 2021
The Elementor Contact Form DB plugin before 1.6 for WordPress allows CSRF via backend admin pages. Full details
MEDIUM 6.5
CVE-2020-36176 January 6, 2021
The iThemes Security (formerly Better WP Security) plugin before 7.7.0 for WordPress does not enforce a new-password requirement for an existing account until the second login occurs. Full details
HIGH 7.5
CVE-2020-36175 January 6, 2021
The Ninja Forms plugin before 3.4.27.1 for WordPress allows attackers to bypass validation via the email field. Full details
MEDIUM 5.3
CVE-2020-36174 January 6, 2021
The Ninja Forms plugin before 3.4.27.1 for WordPress allows CSRF via services integration. Full details
MEDIUM 6.5
CVE-2020-36173 January 6, 2021
The Ninja Forms plugin before 3.4.28 for WordPress lacks escaping for submissions-table fields. Full details
MEDIUM 5.3
CVE-2020-36172 January 6, 2021
The Advanced Custom Fields plugin before 5.8.12 for WordPress mishandles the escaping of strings in Select2 dropdowns, potentially leading to XSS. Full details
MEDIUM 6.1
CVE-2020-36171 January 6, 2021
The Elementor Website Builder plugin before 3.0.14 for WordPress does not properly restrict SVG uploads. Full details
MEDIUM 6.1
CVE-2012-10001 January 6, 2021
The Limit Login Attempts plugin before 1.7.1 for WordPress does not clear auth cookies upon a lockout, which might make it easier for remote attackers to conduct brute-force authentication attempts. Full details
CRITICAL 9.8
CVE-2020-36170 January 6, 2021
The Ultimate Member plugin before 2.1.13 for WordPress mishandles hidden name="timestamp" fields in forms. Full details
MEDIUM 5.3
CVE-2020-36157 January 4, 2021
An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Roles. Due to the lack of filtering on the role parameter that could be supplied… Full details
CRITICAL 9.8
CVE-2020-36156 January 4, 2021
An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Authenticated Privilege Escalation via Profile Update. Any user with wp-admin access to the profile.php page could supply the parameter um-role… Full details
HIGH 8.8
CVE-2020-36155 January 4, 2021
An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Meta. An attacker could supply an array parameter for sensitive metadata, such as the wp_capabilities… Full details
CRITICAL 9.8
CVE-2020-35951 January 1, 2021
An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It allows users to delete arbitrary files such as wp-config.php file, which could effectively take a site offline and… Full details
CRITICAL 9.9
CVE-2020-35950 January 1, 2021
An issue was discovered in the XCloner Backup and Restore plugin before 4.2.153 for WordPress. It allows CSRF (via almost any endpoint). Full details
HIGH 8.8
CVE-2020-35949 January 1, 2021
An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It made it possible for unauthenticated attackers to upload arbitrary files and achieve remote code execution. If a quiz… Full details
CRITICAL 9.8
CVE-2020-35948 January 1, 2021
An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated attackers the ability to modify arbitrary files, including PHP files. Doing so would allow an attacker… Full details
HIGH 8.8
CVE-2020-35947 January 1, 2021
An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. Nearly all of the AJAX action endpoints lacked permission checks, allowing these actions to be executed by anyone authenticated on the site.… Full details
HIGH 7.4
CVE-2020-35946 January 1, 2021
An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS. Full details
MEDIUM 5.4
CVE-2020-35945 January 1, 2021
An issue was discovered in the Divi Builder plugin, Divi theme, and Divi Extra theme before 4.5.3 for WordPress. Authenticated attackers, with contributor-level or above capabilities, can upload arbitrary files, including .php files. This… Full details
HIGH 8.8
CVE-2020-35944 January 1, 2021
An issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. The pagelayer_settings_page function is vulnerable to CSRF, which can lead to XSS. Full details
HIGH 8.8
CVE-2020-35939 January 1, 2021
PHP Object injection vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticated attackers to inject arbitrary PHP objects due to insecure unserialization of data supplied in a remotely hosted crafted… Full details
HIGH 8.8
CVE-2020-35938 January 1, 2021
PHP Object injection vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to inject arbitrary PHP objects due to insecure unserialization of data supplied in a remotely hosted crafted… Full details
HIGH 8.8
CVE-2020-35937 January 1, 2021
Stored Cross-Site Scripting (XSS) vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticated attackers to import layouts including JavaScript supplied via a remotely hosted crafted payload in the source parameter… Full details
HIGH 8
CVE-2020-35936 January 1, 2021
Stored Cross-Site Scripting (XSS) vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to import layouts including JavaScript supplied via a remotely hosted crafted payload in the source parameter… Full details
HIGH 8
CVE-2020-35935 January 1, 2021
The Advanced Access Manager plugin before 6.6.2 for WordPress allows privilege escalation on profile updates via the aam_user_roles POST parameter if Multiple Role support is enabled. (The mechanism for deciding whether a user was… Full details
HIGH 8.8
CVE-2020-35934 January 1, 2021
The Advanced Access Manager plugin before 6.6.2 for WordPress displays the unfiltered user object (including all metadata) upon login via the REST API (aam/v1/authenticate or aam/v2/authenticate). This is a security problem if this object… Full details
MEDIUM 4.3
CVE-2020-35933 January 1, 2021
A Reflected Authenticated Cross-Site Scripting (XSS) vulnerability in the Newsletter plugin before 6.8.2 for WordPress allows remote attackers to trick a victim into submitting a tnpc_render AJAX request containing either JavaScript in an options… Full details
MEDIUM 6.5
CVE-2020-35932 January 1, 2021
Insecure Deserialization in the Newsletter plugin before 6.8.2 for WordPress allows authenticated remote attackers with minimal privileges (such as subscribers) to use the tpnc_render AJAX action to inject arbitrary PHP objects via the options[inline_edits]… Full details
HIGH 8.8
CVE-2020-35773 December 29, 2020
The site-offline plugin before 1.4.4 for WordPress lacks certain wp_create_nonce and wp_verify_nonce calls, aka CSRF. Full details
HIGH 8.8
CVE-2020-29156 December 27, 2020
The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the order_id parameter in a fetch_order_status action. Full details
MEDIUM 5.3
CVE-2020-29172 December 26, 2020
A cross-site scripting (XSS) vulnerability in the LiteSpeed Cache plugin before 3.6.1 for WordPress can be exploited via the Server IP setting. Full details
MEDIUM 6.1
CVE-2020-35590 December 21, 2020
LimitLoginAttempts.php in the limit-login-attempts-reloaded plugin before 2.17.4 for WordPress allows a bypass of (per IP address) rate limits because the X-Forwarded-For header can be forged. When the plugin is configured to accept an arbitrary… Full details
CRITICAL 9.8
CVE-2020-35589 December 21, 2020
The limit-login-attempts-reloaded plugin before 2.17.4 for WordPress allows wp-admin/options-general.php?page=limit-login-attempts&tab= XSS. A malicious user can cause an administrator user to supply dangerous content to the vulnerable page, which is then reflected back to the user… Full details
MEDIUM 5.4
CVE-2020-35489 December 17, 2020
The contact-form-7 (aka Contact Form 7) plugin before 5.3.2 for WordPress allows Unrestricted File Upload and remote code execution because a filename may contain special characters. Full details
CRITICAL 10
CVE-2020-29304 December 14, 2020
A cross-site scripting (XSS) vulnerability exists in the SabaiApps WordPress Directories Pro plugin version 1.3.45 and previous, allows attackers who have convinced a site administrator to import a specially crafted CSV file to inject… Full details
MEDIUM 6.1
CVE-2020-29303 December 14, 2020
A cross-site scripting (XSS) vulnerability in the SabaiApp Directories Pro plugin 1.3.45 for WordPress allows remote attackers to inject arbitrary web script or HTML via a POST to /wp-admin/admin.php?page=drts/directories&q=%2F with _drts_form_build_id parameter containing the… Full details
MEDIUM 6.1
CVE-2020-35235 December 14, 2020
vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder code without proper access control. Thus, any authenticated user can run the elFinder upload command to achieve remote code execution. NOTE: This vulnerability… Full details
HIGH 8.8
CVE-2020-35234 December 14, 2020
The easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover, as exploited in the wild in December 2020. If an attacker can list the wp-content/plugins/easy-wp-smtp/ directory, then they can discover a log file… Full details
HIGH 7.5
CVE-2020-35135 December 11, 2020
The ultimate-category-excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF. Full details
HIGH 8.8
CVE-2020-14207 December 8, 2020
The DiveBook plugin 1.1.4 for WordPress was prone to a SQL injection within divelog.php, allowing unauthenticated users to retrieve data from the database via the divelog.php filter_diver parameter. Full details
MEDIUM 5.3
CVE-2020-14206 December 8, 2020
The DiveBook plugin 1.1.4 for WordPress is prone to unauthenticated XSS within the filter function (via an arbitrary parameter). Full details
MEDIUM 6.1
CVE-2020-14205 December 8, 2020
The DiveBook plugin 1.1.4 for WordPress is prone to improper access control in the Log Dive form because it fails to perform authorization checks. An attacker may leverage this issue to manipulate the integrity… Full details
MEDIUM 5.3
CVE-2020-29395 November 30, 2020
The EventON plugin through 3.0.5 for WordPress allows addons/?q= XSS via the search field. Full details
MEDIUM 6.1