blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

CVEs stored22,604
Affected records46,307
Newest source updateNovember 9, 2026
CVE-2016-10884 August 14, 2019
The simple-membership plugin before 3.3.3 for WordPress has multiple CSRF issues. Full details
HIGH 8.8
CVE-2016-10883 August 14, 2019
The simple-add-pages-or-posts plugin before 1.7 for WordPress has CSRF for deleting users. Full details
MEDIUM 6.5
CVE-2015-9310 August 14, 2019
The all-in-one-wp-security-and-firewall plugin before 3.9.1 for WordPress has multiple SQL injection issues. Full details
CRITICAL 9.8
CVE-2015-9309 August 14, 2019
The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit category feature. Full details
HIGH 8.8
CVE-2015-9308 August 14, 2019
The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit map feature. Full details
HIGH 8.8
CVE-2015-9307 August 14, 2019
The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit location feature. Full details
HIGH 8.8
CVE-2013-7476 August 14, 2019
The simple-fields plugin before 1.2 for WordPress has CSRF in the admin interface. Full details
HIGH 8.8
CVE-2019-15025 August 14, 2019
The ninja-forms plugin before 3.3.21.2 for WordPress has SQL injection in the search filter on the submissions page. Full details
CRITICAL 9.8
CVE-2017-18514 August 14, 2019
The simple-login-log plugin before 1.1.2 for WordPress has SQL injection. Full details
CRITICAL 9.8
CVE-2016-10889 August 14, 2019
The nextgen-gallery plugin before 2.1.57 for WordPress has SQL injection via a gallery name. Full details
CRITICAL 9.8
CVE-2015-9316 August 14, 2019
The wp-fastest-cache plugin before 0.8.4.9 for WordPress has SQL injection in wp-admin/admin-ajax.php?action=wpfc_wppolls_ajax_request via the poll_id parameter. Full details
CRITICAL 9.8
CVE-2015-9315 August 14, 2019
The newstatpress plugin before 1.0.1 for WordPress has SQL injection. Full details
CRITICAL 9.8
CVE-2015-9314 August 14, 2019
The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header. Full details
MEDIUM 6.1
CVE-2015-9313 August 14, 2019
The newstatpress plugin before 1.0.5 for WordPress has SQL injection related to an IMG element. Full details
CRITICAL 9.8
CVE-2015-9312 August 14, 2019
The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element. Full details
MEDIUM 6.1
CVE-2015-9311 August 14, 2019
The newstatpress plugin before 1.0.6 for WordPress has reflected XSS. Full details
MEDIUM 6.1
CVE-2017-18515 August 14, 2019
The wp-statistics plugin before 12.0.8 for WordPress has SQL injection. Full details
CRITICAL 9.8
CVE-2017-18488 August 13, 2019
The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues. Full details
MEDIUM 6.1
CVE-2017-18487 August 13, 2019
The adsense-plugin (aka Google AdSense) plugin before 1.44 for WordPress has multiple XSS issues. Full details
MEDIUM 6.1
CVE-2016-10867 August 13, 2019
The all-in-one-wp-security-and-firewall plugin before 4.0.6 for WordPress has XSS in settings pages. Full details
MEDIUM 6.1
CVE-2016-10866 August 13, 2019
The all-in-one-wp-security-and-firewall plugin before 4.2.0 for WordPress has multiple XSS issues. Full details
MEDIUM 6.1
CVE-2017-18498 August 13, 2019
The simple-job-board plugin before 2.4.4 for WordPress has reflected XSS via keyword search. Full details
MEDIUM 6.1
CVE-2017-18495 August 13, 2019
The gravity-forms-sms-notifications plugin before 2.4.0 for WordPress has XSS. Full details
MEDIUM 6.1
CVE-2017-18494 August 13, 2019
The custom-search-plugin plugin before 1.36 for WordPress has multiple XSS issues. Full details
MEDIUM 6.1
CVE-2017-18493 August 13, 2019
The custom-admin-page plugin before 0.1.2 for WordPress has multiple XSS issues. Full details
MEDIUM 6.1
CVE-2017-18492 August 13, 2019
The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues. Full details
MEDIUM 6.1
CVE-2017-18491 August 13, 2019
The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues. Full details
MEDIUM 6.1
CVE-2017-18490 August 13, 2019
The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues. Full details
MEDIUM 6.1
CVE-2016-10871 August 13, 2019
The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page. Full details
MEDIUM 6.1
CVE-2016-10870 August 13, 2019
The google-language-translator plugin before 5.0.06 for WordPress has XSS. Full details
MEDIUM 6.1
CVE-2016-10868 August 13, 2019
The all-in-one-wp-security-and-firewall plugin before 4.0.5 for WordPress has XSS in the blacklist, file system, and file change detection settings pages. Full details
MEDIUM 6.1
CVE-2015-9300 August 13, 2019
The events-manager plugin before 5.5.7 for WordPress has multiple XSS issues. Full details
MEDIUM 6.1
CVE-2015-9298 August 13, 2019
The events-manager plugin before 5.6 for WordPress has code injection. Full details
CRITICAL 9.8
CVE-2015-9296 August 13, 2019
The download-monitor plugin before 1.7.1 for WordPress has XSS related to add_query_arg. Full details
MEDIUM 6.1
CVE-2015-9294 August 13, 2019
The all-in-one-wp-security-and-firewall plugin before 3.9.5 for WordPress has XSS in add_query_arg and remove_query_arg function instances. Full details
MEDIUM 6.1