blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

CVEs stored22,604
Affected records46,307
Newest source updateNovember 9, 2026
CVE-2017-18570 August 22, 2019
The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download Entries. Full details
CRITICAL 9.8
CVE-2016-10921 August 22, 2019
The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection. Full details
CRITICAL 9.8
CVE-2016-10919 August 22, 2019
The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the wassupURI::add_siteurl method, a different vulnerability than CVE-2012-2633. Full details
MEDIUM 6.1
CVE-2016-10917 August 22, 2019
The search-everything plugin before 8.1.6 for WordPress has SQL injection related to empty search strings, a different vulnerability than CVE-2014-2316. Full details
CRITICAL 9.8
CVE-2016-10916 August 22, 2019
The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319. Full details
CRITICAL 9.8
CVE-2015-9335 August 22, 2019
The limit-attempts plugin before 1.1.1 for WordPress has SQL injection during IP address handling. Full details
CRITICAL 9.8
CVE-2013-7480 August 22, 2019
The events-manager plugin before 5.3.6.1 for WordPress has XSS via the booking form and admin areas. Full details
MEDIUM 6.1
CVE-2013-7479 August 22, 2019
The events-manager plugin before 5.3.9 for WordPress has XSS in the search form field. Full details
MEDIUM 6.1
CVE-2013-7478 August 22, 2019
The events-manager plugin before 5.5 for WordPress has XSS via EM_Ticket::get_post. Full details
MEDIUM 6.1
CVE-2013-7477 August 22, 2019
The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form. Full details
MEDIUM 6.1
CVE-2012-6716 August 22, 2019
The events-manager plugin before 5.1.7 for WordPress has XSS via JSON call links. Full details
MEDIUM 6.1
CVE-2009-5158 August 22, 2019
The google-analyticator plugin before 5.2.1 for WordPress has insufficient HTML sanitization for Google Analytics API text. Full details
MEDIUM 6.1
CVE-2018-20977 August 21, 2019
The all-in-one-schemaorg-rich-snippets plugin before 1.5.0 for WordPress has XSS on the settings page. Full details
MEDIUM 6.1
CVE-2017-18562 August 21, 2019
The error-log-viewer plugin before 1.0.6 for WordPress has multiple XSS issues. Full details
MEDIUM 6.1
CVE-2017-18521 August 21, 2019
The democracy-poll plugin before 5.4 for WordPress has CSRF via wp-admin/options-general.php?page=democracy-poll&subpage=l10n. Full details
HIGH 8.8
CVE-2017-18516 August 21, 2019
The bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues. Full details
MEDIUM 6.1
CVE-2012-6714 August 21, 2019
The count-per-day plugin before 3.2.3 for WordPress has XSS via search words. Full details
MEDIUM 6.1
CVE-2017-18563 August 21, 2019
The rsvp plugin before 2.3.8 for WordPress has persistent XSS via the note field on the attendee-list screen. Full details
MEDIUM 6.1
CVE-2016-10911 August 21, 2019
The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues. Full details
MEDIUM 6.1
CVE-2016-10910 August 21, 2019
The formbuilder plugin before 1.06 for WordPress has multiple XSS issues. Full details
MEDIUM 6.1
CVE-2015-9327 August 21, 2019
The flickr-justified-gallery plugin before 3.4.0 for WordPress has XSS. Full details
MEDIUM 6.1
CVE-2014-10380 August 21, 2019
The profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms. Full details
MEDIUM 6.1
CVE-2012-6715 August 21, 2019
The formbuilder plugin before 0.9.1 for WordPress has XSS via a Referer header. Full details
MEDIUM 6.1
CVE-2019-15111 August 21, 2019
The wp-front-end-profile plugin before 0.2.2 for WordPress has a privilege escalation issue. Full details
CRITICAL 9.8
CVE-2017-18558 August 21, 2019
The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues. Full details
MEDIUM 6.1
CVE-2017-18557 August 21, 2019
The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues. Full details
MEDIUM 6.1
CVE-2017-18556 August 21, 2019
The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues. Full details
MEDIUM 6.1