blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

CVEs stored22,605
Affected records46,308
Newest source updateNovember 9, 2026
CVE-2020-12104 May 5, 2020
The Import feature in the wp-advanced-search plugin 3.3.6 for WordPress is vulnerable to authenticated SQL injection via an uploaded .sql file. An attacker can use this to execute SQL commands without any validation. Full details
HIGH 8.8
CVE-2020-11030 April 30, 2020
In affected versions of WordPress, a special payload can be crafted that can lead to scripts getting executed within the search block of the block editor. This requires an authenticated user with the ability… Full details
MEDIUM 5.4
CVE-2020-11029 April 30, 2020
In affected versions of WordPress, a vulnerability in the stats() method of class-wp-object-cache.php can be exploited to execute cross-site scripting (XSS) attacks. This has been patched in version 5.4.1, along with all the previously… Full details
MEDIUM 6.1
CVE-2020-11028 April 30, 2020
In affected versions of WordPress, some private posts, which were previously public, can result in unauthenticated disclosure under a specific set of conditions. This has been patched in version 5.4.1, along with all the… Full details
HIGH 7.5
CVE-2020-11027 April 30, 2020
In affected versions of WordPress, a password reset link emailed to a user does not expire upon changing the user password. Access would be needed to the email account of the user by a… Full details
HIGH 8.1
CVE-2020-11026 April 30, 2020
In affected versions of WordPress, files with a specially crafted name when uploaded to the Media section can lead to script execution upon accessing the file. This requires an authenticated user with privileges to… Full details
MEDIUM 5.4
CVE-2020-11025 April 30, 2020
In affected versions of WordPress, a cross-site scripting (XSS) vulnerability in the navigation section of Customizer allows JavaScript code to be executed. Exploitation requires an authenticated user. This has been patched in version 5.4.1,… Full details
MEDIUM 5.4
CVE-2020-6010 April 30, 2020
LearnPress Wordpress plugin version prior and including 3.2.6.7 is vulnerable to SQL Injection Full details
HIGH 8.8
CVE-2020-12462 April 29, 2020
The ninja-forms plugin before 3.4.24.2 for WordPress allows CSRF with resultant XSS. Full details
MEDIUM 6.1
CVE-2020-12070 April 24, 2020
The Advanced Woo Search plugin version through 1.99 for Wordpress suffers from a sensitive information disclosure vulnerability in every ajax search request via the sql field to includes/class-aws-search.php. Full details
HIGH 7.5
CVE-2020-12054 April 23, 2020
The Catch Breadcrumb plugin before 1.5.4 for WordPress allows Reflected XSS via the s parameter (a search query). Also affected are 16 themes (if the plugin is enabled) by the same author: Alchemist and… Full details
MEDIUM 6.1
CVE-2020-12077 April 23, 2020
The mappress-google-maps-for-wordpress plugin before 2.53.9 for WordPress does not correctly implement AJAX functions with nonces (or capability checks), leading to remote code execution. Full details
HIGH 8.8
CVE-2020-12076 April 23, 2020
The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions. One consequence of this is stored XSS. Full details
HIGH 8.8
CVE-2020-12075 April 23, 2020
The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks capability checks for AJAX actions. Full details
HIGH 8.8
CVE-2020-12074 April 23, 2020
The users-customers-import-export-for-wp-woocommerce plugin before 1.3.9 for WordPress allows subscribers to import administrative accounts via CSV. Full details
HIGH 8.8
CVE-2020-12073 April 23, 2020
The responsive-add-ons plugin before 2.2.7 for WordPress has incorrect access control for wp-admin/admin-ajax.php?action= requests. Full details
HIGH 8.8
CVE-2020-11930 April 20, 2020
The GTranslate plugin before 2.8.52 for WordPress has Reflected XSS via a crafted link. This requires use of the hreflang tags feature within a sub-domain or sub-directory paid option. Full details
MEDIUM 6.1
CVE-2020-11928 April 20, 2020
In the media-library-assistant plugin before 2.82 for WordPress, Remote Code Execution can occur via the tax_query, meta_query, or date_query parameter in mla_gallery via an admin. Full details
CRITICAL 9.8
CVE-2020-11738 April 13, 2020
The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file parameter to duplicator_download or duplicator_init. Full details
HIGH 7.5
CVE-2020-11673 April 13, 2020
An issue was discovered in the Responsive Poll through 1.3.4 for Wordpress. It allows an unauthenticated user to manipulate polls, e.g., delete, clone, or view a hidden poll. This is due to the usage… Full details
CRITICAL 9.8
CVE-2020-11732 April 13, 2020
The Media Library Assistant plugin before 2.82 for Wordpress suffers from a Local File Inclusion vulnerability in mla_gallery link=download. Full details
HIGH 7.5
CVE-2020-11731 April 13, 2020
The Media Library Assistant plugin before 2.82 for Wordpress suffers from multiple XSS vulnerabilities in all Settings/Media Library Assistant tabs, which allow remote authenticated users to execute arbitrary JavaScript. Full details
MEDIUM 6.1
CVE-2020-11509 April 7, 2020
An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows remote attackers to upload page templates containing arbitrary JavaScript via the c37_wpl_import_template admin-post action (which will execute in an… Full details
MEDIUM 6.1
CVE-2020-11508 April 7, 2020
An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows logged-in users with minimal permissions to create or replace existing pages with a malicious page containing arbitrary JavaScript via… Full details
MEDIUM 5.4
CVE-2020-9514 April 7, 2020
An issue was discovered in the IMPress for IDX Broker plugin before 2.6.2 for WordPress. wrappers.php allows a logged-in user (with the Subscriber role) to permanently delete arbitrary posts and pages, create new posts… Full details
MEDIUM 6.5
CVE-2020-11516 April 7, 2020
Stored XSS in the Contact Form 7 Datepicker plugin through 2.6.0 for WordPress allows authenticated attackers with minimal permissions to save arbitrary JavaScript to the plugin's settings via the unprotected wp_ajax_cf7dp_save_settings AJAX action and… Full details
MEDIUM 5.4
CVE-2020-11515 April 7, 2020
The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to create new URIs (that redirect to an external web site) via the unsecured rankmath/v1/updateRedirection REST API endpoint. In other words, this… Full details
MEDIUM 6.1
CVE-2020-11514 April 7, 2020
The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to update arbitrary WordPress metadata, including the ability to escalate or revoke administrative privileges for existing users via the unsecured rankmath/v1/updateMeta REST… Full details
CRITICAL 9.8
CVE-2020-11512 April 7, 2020
Stored XSS in the IMPress for IDX Broker WordPress plugin before 2.6.2 allows authenticated attackers with minimal (subscriber-level) permissions to save arbitrary JavaScript in the plugin's settings panel via the idx_update_recaptcha_key AJAX action and… Full details
MEDIUM 5.4
CVE-2020-11548 April 5, 2020
The Search Meter plugin through 2.13.2 for WordPress allows user input introduced in the search bar to be any formula. The attacker could achieve remote code execution via CSV injection if a wp-admin/index.php?page=search-meter Export… Full details
CRITICAL 9.8
CVE-2019-17231 April 3, 2020
includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues. Full details
MEDIUM 6.1
CVE-2019-17230 April 3, 2020
includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes. Full details
MEDIUM 5.3
CVE-2020-6009 April 1, 2020
LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection. Full details
CRITICAL 9.8
CVE-2020-7948 April 1, 2020
An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress. A user can perform an insecure direct object reference. Full details
HIGH 8.8
CVE-2020-7947 April 1, 2020
An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress. It has numerous fields that can contain data that is pulled from different sources. One issue with this is that… Full details
CRITICAL 9.8
CVE-2020-6753 April 1, 2020
The Login by Auth0 plugin before 4.0.0 for WordPress allows stored XSS on multiple pages, a different issue than CVE-2020-5392. Full details
MEDIUM 6.1
CVE-2020-5392 April 1, 2020
A stored cross-site scripting (XSS) vulnerability exists in the Auth0 plugin before 4.0.0 for WordPress via the settings page. Full details
MEDIUM 6.1
CVE-2020-5391 April 1, 2020
Cross-site request forgery (CSRF) vulnerabilities exist in the Auth0 plugin before 4.0.0 for WordPress via the domain field. Full details
HIGH 8.8
CVE-2020-6008 March 31, 2020
LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution Full details
CRITICAL 9.8
CVE-2020-10817 March 27, 2020
The custom-searchable-data-entry-system (aka Custom Searchable Data Entry System) plugin through 1.7.1 for WordPress allows SQL Injection. NOTE: this product is discontinued. Full details
HIGH 8.8
CVE-2020-10385 March 24, 2020
A stored cross-site scripting (XSS) vulnerability exists in the WPForms Contact Form (aka wpforms-lite) plugin before 1.5.9 for WordPress. Full details
MEDIUM 5.4
CVE-2020-9392 March 23, 2020
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. Because there is no permission check on the ImportJSONTable, createFromTpl, and getJSONExportTable endpoints, unauthenticated users can retrieve pricing table information, create new… Full details
HIGH 7.3
CVE-2019-13463 March 20, 2020
An XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin before 7.3.5 for WordPress allows remote attackers to inject arbitrary web script or HTML, because esc_html is not called for the "echo get_the_title()"… Full details
MEDIUM 6.1
CVE-2019-12498 March 20, 2020
The WP Live Chat Support plugin before 8.0.33 for WordPress accepts certain REST API calls without invoking the wplc_api_permission_check protection mechanism. Full details
CRITICAL 9.8
CVE-2018-18576 March 17, 2020
The Hustle (aka wordpress-popup) plugin through 6.0.5 for WordPress allows Directory Traversal to obtain a directory listing via the views/admin/dashboard/ URI. Full details
MEDIUM 5.3
CVE-2020-7916 March 16, 2020
be_teacher in class-lp-admin-ajax.php in the LearnPress plugin 3.2.6.5 and earlier for WordPress allows any registered user to assign itself the teacher role via the wp-admin/admin-ajax.php?action=learnpress_be_teacher URI without any additional permission checks. Therefore, any user… Full details
MEDIUM 6.5
CVE-2020-10568 March 14, 2020
The sitepress-multilingual-cms (WPML) plugin before 4.3.7-b.2 for WordPress has CSRF due to a loose comparison. This leads to remote code execution in includes/class-wp-installer.php via a series of requests that leverage unintended comparisons of integers… Full details
HIGH 8.8
CVE-2020-10564 March 13, 2020
An issue was discovered in the File Upload plugin before 4.13.0 for WordPress. A directory traversal can lead to remote code execution by uploading a crafted txt file into the lib directory, because of… Full details
CRITICAL 9.8
CVE-2020-10196 March 13, 2020
An XSS vulnerability in the popup-builder plugin before 3.64.1 for WordPress allows remote attackers to inject arbitrary JavaScript into existing popups via an unsecured ajax action in com/classes/Ajax.php. It is possible for an unauthenticated… Full details
MEDIUM 6.1
CVE-2020-10195 March 13, 2020
The popup-builder plugin before 3.64.1 for WordPress allows information disclosure and settings modification, leading to in-scope privilege escalation via admin-post actions to com/classes/Actions.php. By sending a POST request to wp-admin/admin-post.php, an authenticated attacker with… Full details
MEDIUM 6.3