Skip to contentStellarwp vulnerabilities
Newest
- kadence wp gutenberg blocks by kadence blocks, kadencewp gutenberg blocks with ai +1 moreWordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.2.25 - Server Side Request Forgery (SSRF) vulnerabilityCVE-2024-248886.4 Medium
- kadence wp gutenberg blocks by kadence blocks, kadencewp gutenberg blocks with ai +1 moreWordPress Kadence Blocks plugin <= 3.2.19 - Server Side Request Forgery (SSRF) vulnerabilityCVE-2024-235007.7 High
- givewpWordPress Give plugin <= 3.4.2 - PHP Object Injection vulnerabilityCVE-2024-302298.0 High
- givewpWordPress Give plugin <= 3.3.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-279877.1 High
- kadencewp gutenberg blocks with ai, stellarwp kadence blocks — page builder toolkit for gutenberg editor +1 moreGutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.23 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-15416.4 Medium
- liquidweb event tickets, stellarwp event tickets and registration +1 moreEvent Tickets and Registration <= 5.8.1 - Missing AuthorizationCVE-2024-10534.3 Medium
- givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 moreWordPress GiveWP Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS)CVE-2023-514156.5 Medium
- stellarwp the events calendarThe Events Calendar <= 6.2.8.2 - Unauthenticated Sensitive Information ExposureCVE-2023-65575.3 Medium
- learndash, stellarwp learndash lms +1 moreLearnDash LMS <= 4.10.2 - Sensitive Information Exposure via APICVE-2024-1208Public exploit5.3 Medium
- learndash, stellarwp learndash lms +1 moreLearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignmentsCVE-2024-1209Public exploit5.3 Medium
- learndash, stellarwp learndash lms +1 moreLearnDash LMS <= 4.10.1 - Sensitive Information Exposure via APICVE-2024-12105.3 Medium
- givewpGiveWP < 2.24.1 - Unauthenticated SQLiCVE-2023-02249.8 Critical
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin deactivationCVE-2023-42475.4 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin installationCVE-2023-42464.3 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP <= 2.33.3 - Cross-Site Request Forgery to Stripe Integration DeletionCVE-2023-42485.4 Medium
- stellarwp booking calendar | appointment booking | bookit, stylemixthemes bookit +1 moreWordPress BookIt Plugin <= 2.4.3 is vulnerable to SQL InjectionCVE-2023-508527.6 High
- givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 moreWordPress GiveWP Plugin <= 2.25.3 is vulnerable to PHP Object InjectionCVE-2023-325137.5 High
- stellarwp the events calendarThe Events Calendar < 6.2.8.1 - Unauthenticated Arbitrary Password Protected Post ReadCVE-2023-62037.5 High
- givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 moreWordPress GiveWP Plugin <= 2.25.1 is vulnerable to Server Side Request Forgery (SSRF)CVE-2022-403125.5 Medium
- liquidweb restrict content, stellarwp membership plugin – restrict content +1 moreWordPress Restrict Content Plugin <= 3.2.7 is vulnerable to Sensitive Data ExposureCVE-2023-47668Public exploit5.3 Medium
- givewpWordPress GiveWP Plugin <= 2.25.1 is vulnerable to CSV InjectionCVE-2023-227194.7 Medium
- kadence wp woocommerce email designer, kadencewp kadence woocommerce email designer +1 moreWordPress Kadence WooCommerce Email Designer Plugin <= 1.5.11 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-471864.3 Medium
- learndash, learndash lms, stellarwp learndash lms +2 moreWordPress LearnDash LMS Plugin <= 4.5.3 is vulnerable to SQL InjectionCVE-2023-287778.5 High
- learndash, stellarwp learndash lms +1 moreLearnDash LMS <= 4.6.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password ChangeCVE-2023-31058.8 High
- stylemixthemes bookit, stellarwp bookit — booking & appointment calendar +1 moreBookIt <= 2.3.7 - Authentication BypassCVE-2023-28349.8 Critical
- givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 moreWordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-254505.4 Medium
- givewpWordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Scripting (XSS)CVE-2023-236686.5 Medium
- ithemes wpcompleteWordPress WPComplete Plugin <= 2.9.4 is vulnerable to Cross Site Scripting (XSS)CVE-2022-458257.1 High
- givewpGiveWP < 2.24.0 - Contributor+ Stored XSSCVE-2022-44485.4 Medium
- kadencewp kadence woocommerce email designerKadence WooCommerce Email Designer < 1.5.7 - Admin+ PHP Objection InjectionCVE-2022-33357.2 High
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP < 2.21.3 - DoS via CSRFCVE-2022-22606.5 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP < 2.21.3 - Admin+ Stored Cross-Site ScriptingCVE-2022-22154.8 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 2.20.2 - Sensitive Information DisclosureCVE-2022-21175.3 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGive < 2.17.3 - Reflected Cross-Site Scripting via Import ToolCVE-2022-02526.1 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGive < 2.17.3 - Reflected Cross-Site Scripting via Donation Forms DashboardCVE-2021-251006.1 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGive < 2.17.3 - Unauthenticated Reflected Cross-Site ScriptingCVE-2021-250996.1 Medium
- stellarwp event ticketsEvent Tickets < 5.2.2 - Open RedirectCVE-2021-250286.1 Medium
- learndash, stellarwp learndash lms +1 moreLearnDash < 2.5.4 - Unauthenticated Arbitrary File UploadCVE-2018-250197.5 High
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP < 2.12.0 - Authenticated Stored XSSCVE-2021-245244.8 Medium
- givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 moreGive WP < 2.10.4 - Authenticated Stored Cross-Site Scripting (XSS)CVE-2021-243154.8 Medium
- givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 moreGiveWP < 2.10.0 - Reflected Cross Site Scripting (XSS)CVE-2021-242136.1 Medium
- stellarwp the events calendarThe the-events-calendar plugin before 4.8.2 for WordPress has XSS via the tribe_paged URL parameter.CVE-2019-151096.1 Medium