Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
wordpress wordpress 3.4.1 vulnerabilities and exploits
(subscribe to this query)
6.5
CVSSv3
CVE-2023-37391
Cross-Site Request Forgery (CSRF) vulnerability in WPMobilePack.Com WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps plugin <= 3.4.1 versions.
Wpmobilepack Wordpress Mobile Pack
8.8
CVSSv3
CVE-2017-9418
SQL injection vulnerability in the WP-Testimonials plugin 3.4.1 for WordPress allows an authenticated user to execute arbitrary SQL commands via the testid parameter to wp-admin/admin.php.
Goldplugins Testimonials Plugin Easy Testimonials 3.4.1
1 EDB exploit
NA
CVE-2011-3850
Cross-site scripting (XSS) vulnerability in the Atahualpa theme prior to 3.6.8 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the s parameter.
Bytesforall Atahualpa
Bytesforall Atahualpa 2.0
Bytesforall Atahualpa 2.01
Bytesforall Atahualpa 2.2
Bytesforall Atahualpa 2.21
Bytesforall Atahualpa 3.1
Bytesforall Atahualpa 3.1.1
Bytesforall Atahualpa 3.1.2
Bytesforall Atahualpa 3.1.3
Bytesforall Atahualpa 3.1.4
Bytesforall Atahualpa 3.1.5
Bytesforall Atahualpa 3.1.6
Bytesforall Atahualpa 3.1.8
Bytesforall Atahualpa 3.1.9
Bytesforall Atahualpa 3.2
Bytesforall Atahualpa 3.4
Bytesforall Atahualpa 3.4.01
Bytesforall Atahualpa 3.4.1
Bytesforall Atahualpa 3.4.3
Bytesforall Atahualpa 3.4.4
Bytesforall Atahualpa 3.4.5
Bytesforall Atahualpa 3.4.6
1 EDB exploit
7.2
CVSSv3
CVE-2015-5533
SQL injection vulnerability in counter-options.php in the Count Per Day plugin prior to 3.4.1 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the cpd_keep_month parameter to wp-admin/options-general.php. NOTE: this can be leveraged u...
Count Per Day Project Count Per Day
1 EDB exploit
NA
CVE-2013-1852
SQL injection vulnerability in leaguemanager.php in the LeagueManager plugin prior to 3.8.1 for WordPress allows remote malicious users to execute arbitrary SQL commands via the league_id parameter in the leaguemanager-export page to wp-admin/admin.php.
Kolja Schleich Leaguemanager
Kolja Schleich Leaguemanager 3.7
Kolja Schleich Leaguemanager 3.6.9
Kolja Schleich Leaguemanager 3.5.2
Kolja Schleich Leaguemanager 3.5.1
Kolja Schleich Leaguemanager 3.5
Kolja Schleich Leaguemanager 3.4.2
Kolja Schleich Leaguemanager 3.1.7
Kolja Schleich Leaguemanager 3.1.6
Kolja Schleich Leaguemanager 3.1.5
Kolja Schleich Leaguemanager 3.1.4
Kolja Schleich Leaguemanager 2.9
Kolja Schleich Leaguemanager 2.8
Kolja Schleich Leaguemanager 2.7.1
Kolja Schleich Leaguemanager 2.1
Kolja Schleich Leaguemanager 2.0
Kolja Schleich Leaguemanager 1.5
Kolja Schleich Leaguemanager 1.4.2
Kolja Schleich Leaguemanager 3.6.7
Kolja Schleich Leaguemanager 3.6.5
Kolja Schleich Leaguemanager 3.6
Kolja Schleich Leaguemanager 3.5.5
1 EDB exploit
1 Github repository
NA
CVE-2010-4403
The Register Plus plugin 3.5.1 and previous versions for WordPress allows remote malicious users to obtain sensitive information via a direct request to (1) dash_widget.php and (2) register-plus.php, which reveals the installation path in an error message.
Devbits Register-plus 3.4
Devbits Register-plus 3.3
Devbits Register-plus 2.7
Devbits Register-plus 2.6
Devbits Register-plus 1.2
Devbits Register-plus 1.1
Devbits Register-plus 3.5
Devbits Register-plus 3.4.1
Devbits Register-plus 3.0
Devbits Register-plus 2.9
Devbits Register-plus 2.8
Devbits Register-plus 2.1
Devbits Register-plus 2.0
Devbits Register-plus 3.2
Devbits Register-plus 3.1
Devbits Register-plus 2.5
Devbits Register-plus 2.4
Devbits Register-plus
Devbits Register-plus 3.0.2
Devbits Register-plus 3.0.1
Devbits Register-plus 2.3
Devbits Register-plus 2.2
NA
CVE-2010-4402
Multiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Register Plus plugin 3.5.1 and previous versions for WordPress allow remote malicious users to inject arbitrary web script or HTML via the (1) firstname, (2) lastname, (3) website, (4) aim, (5) yahoo, (6) ...
Devbits Register-plus 3.4.1
Devbits Register-plus 3.4
Devbits Register-plus 2.8
Devbits Register-plus 2.7
Devbits Register-plus 2.0
Devbits Register-plus 1.2
Devbits Register-plus
Devbits Register-plus 3.5
Devbits Register-plus 3.0.1
Devbits Register-plus 3.0
Devbits Register-plus 2.9
Devbits Register-plus 2.2
Devbits Register-plus 2.1
Devbits Register-plus 3.3
Devbits Register-plus 3.2
Devbits Register-plus 2.6
Devbits Register-plus 2.5
Devbits Register-plus 1.1
Devbits Register-plus 3.1
Devbits Register-plus 3.0.2
Devbits Register-plus 2.4
Devbits Register-plus 2.3
6.1
CVSSv3
CVE-2016-10898
The total-security plugin prior to 3.4.1 for WordPress has XSS.
Fabrix Total Security
5.3
CVSSv3
CVE-2016-10899
The total-security plugin prior to 3.4.1 for WordPress has a settings-change vulnerability.
Fabrix Total Security
5.3
CVSSv3
CVE-2022-35242
Unauthenticated plugin settings change vulnerability in 59sec THE Leads Management System: 59sec LITE plugin <= 3.4.1 at WordPress.
59sec The Leads Management System\\ 59sec Lite
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-24955
man-in-the-middle
dos
CVE-2024-2818
CVE-2024-30584
CVE-2024-31134
camera
CVE-2023-45866
CVE-2024-30585
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
NEXT »