ThreatPress

WordPress Vulnerability Database

Daily updated database of WordPress plugins, themes and WordPress core vulnerabilities. Our R&D team monitors a large number of sources to add new vulnerabilities to the database on daily basis.

All WordPress Vulnerabilities

Please use the search to find what you're looking for

Product Title Disclosure Date
Ajax Gallery WordPress Ajax Gallery Plugin <= 3.0 - SQL Injection 2011-08-18
Forum WordPress Forum Plugin <= 1.7.8 - SQL Injection 2011-08-18
DS FAQ WordPress DS FAQ Plugin <= 1.3.2 - SQL Injection 2011-08-18
WP Stats Dashboard WordPress WP Stats Dashboard Plugin 2.6.5.1 - Multiple Cross Site Scripting Vulnerabilities 2011-08-17
Fast Secure Contact WordPress Fast Secure Contact Form 3.0.3.1 - Cross Site Scripting 2011-08-17
OdiHost Newsletter WordPress OdiHost Newsletter Plugin <= 1.0 - SQL Injection 2011-08-17
Easy Contact Form Lite WordPress Easy Contact Form Lite Plugin <= 1.0.7 - SQL Injection 2011-08-17
Symposium WordPress Symposium Plugin <= 0.64 - SQL Injection 2011-08-17
Contus HD FLV Player WordPress Contus HD FLV Player Plugin <= 1.3 - SQL Injection 2011-08-17
File Groups WordPress File Groups Plugin <= 1.1.2 - SQL Injection 2011-08-17
IP-Logger WordPress IP Logger Plugin <= 3.0 - SQL Injection 2011-08-16
WordPress WordPress <= 3.1.2 - SQL Injection 2011-08-10
WordPress WordPress <= 3.1.2 - Arbitrary File Upload vulnerability 2011-08-10
WordPress WordPress <= 3.1.2 - Multiple vulnerabilities 2011-08-10
WordPress WordPress <= 3.1.2 - Clickjacking Attacks 2011-08-10
WordPress WordPress <= 3.1.2 - Multiple Unspecified Remote vulnerabilities 2011-08-10
WordPress WordPress <= 3.1.2 - Unspecified vulnerability #1 2011-08-10
WordPress WordPress <= 3.1.2 - Unspecified vulnerability #2 2011-08-10
eShop WordPress eShop Plugin 6.2.8 - Multiple Cross Site Scripting Vulnerabilities 2011-08-10
Media Library WordPress Media Library Categories Plugin <= 1.0.6 - SQL Injection 2011-08-06