Live intelligence from CISA KEV, NVD, and WPScan — updated daily. Check if your plugins and themes have known CVEs.
39,652 vulnerabilities found (page 258 of 1587)
| CVE ID | Plugin / Theme | Severity | CVSS | Description | Fixed In | Source |
|---|---|---|---|---|---|---|
| 42dcc302-b543-42c7-99fa-605f017beb1a | < 1.4.0 |
HIGH | 8.1 | The LC Wizard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check in the ghl-wi… | — | wordfence |
| 426ea88f-bdd4-4da6-88c2-db82df9e01e5 | < 2.6.2 |
HIGH | 8.1 | An issue was discovered in the IMPress for IDX Broker plugin before 2.6.2 for WordPress. wrappers.php allows a logged-in… | — | wordfence |
| 418747c5-1c18-46e4-b15c-4815e7397cf2 | < 20.8.8 |
HIGH | 8.1 | The Client Invoicing by Sprout Invoices plugin for WordPress is vulnerable to PHP Object Injection in versions up to, an… | — | wordfence |
| 4169b390-0972-4aa9-ae04-f5f67afe15ef | < 1.5.2 |
HIGH | 8.1 | The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to arbitrary file deletion … | — | wordfence |
| 4111e878-d68e-461f-94b8-fb85ddf33914 | HIGH | 8.1 | The Femme theme for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.3.11. This makes… | — | wordfence | |
| 40ec1ec5-9a8a-431b-bf6b-d7f23157403a | HIGH | 8.1 | The Craftis - Handcraft & Artisan Elementor Template Kit theme for WordPress is vulnerable to Local File Inclusion in ve… | — | wordfence | |
| 40c1ff8f-5498-4542-ad3d-e0d44ebc62ce | < 1.4 |
HIGH | 8.1 | The Gracey theme for WordPress is vulnerable to PHP Object Injection in versions up to 1.4 via deserialization of untrus… | — | wordfence |
| 3ff73a18-cb00-4e35-afcf-d1a0ae586a4c | HIGH | 8.1 | The Dermatology Clinic theme for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.4.3… | — | wordfence | |
| 3fc4793e-cda0-475e-8cab-411f19c46594 | HIGH | 8.1 | The A-Mart theme for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.0.2. This makes… | — | wordfence | |
| 3f1770dc-e473-438c-9732-b51cff57c796 | HIGH | 8.1 | The Renewal theme for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.2.2. This make… | — | wordfence | |
| 3eb67a46-49de-40c2-bbac-87f662f98d16 | HIGH | 8.1 | The Verdure - Organic Tea Shop WordPress Theme theme for WordPress is vulnerable to Local File Inclusion in versions up … | — | wordfence | |
| 3eb3533c-e33c-41db-b9cf-e9d71a0a5588 | HIGH | 8.1 | The Catalog Importer, Scraper & Crawler plugin for WordPress is vulnerable to PHP code injection in all versions up to, … | — | wordfence | |
| 3eb1f22d-e729-41c6-9235-47aa19da2fff | HIGH | 8.1 | The Good Homes theme for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.3.13. This … | — | wordfence | |
| 3e5a7741-d8be-400e-ac00-138034580d6e | HIGH | 8.1 | The Right Way theme for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 4.0. This make… | — | wordfence | |
| 3e21b550-e1c5-4e23-9999-16c837353da9 | < 2.5.3 |
HIGH | 8.1 | The Database Backup for WordPress plugin for WordPress is vulnerable to unauthorized arbitrary file read and deletion in… | — | wordfence |
| 3de5c591-89ea-4289-a874-239864bcc886 | HIGH | 8.1 | The Pinevale theme for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.0.14. This ma… | — | wordfence | |
| 3dc3b715-23eb-4cb9-8f44-1d3134c560ec | < 1.3.56 |
HIGH | 8.1 | The Royal Elementor Addons plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and inclu… | — | wordfence |
| 3d94ffdb-d5e1-4125-b499-5e47f9f67069 | HIGH | 8.1 | The Zuut theme for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.4.2 via deseriali… | — | wordfence | |
| 3d7b5b50-ea6e-4f9e-bd7b-7682469c63b9 | < 7.1.6 |
HIGH | 8.1 | The Total processing card payments for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions … | — | wordfence |
| 3d68d666-a304-49d2-95d7-b3eb780657c3 | < 1.2.11 |
HIGH | 8.1 | The Filr β Secure document library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient f… | — | wordfence |
| 3ce9752d-da9c-4605-8444-21c9668a8cbd | HIGH | 8.1 | The Prider theme for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.1.3.1. This mak… | — | wordfence | |
| 3cbef3f3-d85a-43a2-b208-73381b801649 | HIGH | 8.1 | The Invetex theme for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.18. This makes… | — | wordfence | |
| 3c98bb53-9f7e-4ab3-9676-e3dbfb4a0519 | < 1.7.0 |
HIGH | 8.1 | The WP Delicious β Recipe Plugin for Food Bloggers (formerly Delicious Recipes) plugin for WordPress is vulnerable to … | — | wordfence |
| 3c6f5ed6-9f73-4da8-8fa0-992d818acc47 | < 1.3 |
HIGH | 8.1 | The Ashtanga theme for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.2 via deseria… | — | wordfence |
| 3c1db6c6-06fa-467d-8c63-24430a81c241 | < 2.6 |
HIGH | 8.1 | The Savory theme for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.5. This makes i… | — | wordfence |
EzyAudit AI automatically detects your installed plugins and checks them against this database — in seconds.
Scan My Website →