WordPress Vulnerability Database

Wordfence Intelligence   >   Vulnerability Database
WordPress Core
WordPress Plugins
WordPress Themes

Search All Vulnerabilities

Tip: You can search by CVE ID, software name or slug, or the researcher name. Expand to read about more advanced search options.

If you want to perform more advanced lookups, you can use keywords to further refine your search.

For example, woocommerce researcher:"chloe chamberland" would search for any vulnerabilities discovered by Chloe Chamberland in software that has WooCommerce in the title.

Keywords are added in keyword:value format. If the value contains spaces, you must enclose it in quotation marks.

You can use the following keywords to add criteria to your search:

title
Searches through the title of each vulnerability for matches.
date
Returns vulnerabilities by publication date. Use YYYY-MM-DD, YYYY-MM or YYYY format.
cvss-rating
Use low, medium, high or critical to limit the search to vulnerabilities with the specified rating.
researcher
Returns vulnerabilities credited to researchers containing the given text.
software
Returns vulnerabilities discovered in software containing the given text.
software-slug
Returns vulnerabilities discovered in software exactly matching the given slug.
software-type
Use plugin, theme or core to limit the search to the specified type of software.
By selecting “Search” you acknowledge that you have read and agree to the Wordfence Intelligence Terms and Conditions.

All Vulnerabilities

Submit Vulnerability
iThemes Security < 3.2.5 - Cross-Site Scripting
7.2
CVE-2012-4263
May 11, 2012
Researcher: SiNA Rabbani
BulletProof Security < .47.1 - Reflected Cross-Site Scripting
6.1
CVE-2012-4268
May 11, 2012
Researcher: SiNA Rabbani
2 Click Social Media Buttons <= 0.33 - Multiple Cross-Site Scripting
6.1
CVE-2012-4272
May 11, 2012
Researcher: SiNA Rabbani
WP-FaceThumb < 0.2 - Cross-Site Scripting
6.1
CVE-2012-2371
May 13, 2012
Researcher: Avram Marius Gabriel (d3v1l)
Media File Manager Advanced <= 1.1.5 - Improper Access Control
8.8
CVE ID Unknown
May 14, 2012
Researcher: Evex
Newsletter Manager < 1.0.2 - Cross-Site Scripting
6.1
CVE-2012-6628
May 15, 2012
Researchers: Heine Pedersen, Torben Jensen
WP Forum Server < 1.7.4 - SQL Injection
7.2
CVE-2012-6625
May 15, 2012
Researchers: Heine Pedersen, Torben Jensen
Dynamic Widgets <= 1.5.1 - Cross Site Scripting
7.2
CVE ID Unknown
May 15, 2012
Researchers: Heine Pedersen, Torben Jensen
Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) < 2.3.1 - Cross-Site Scripting
6.1
CVE-2012-2913
May 15, 2012
Researchers: Heine Pedersen, Torben Jensen
Survey And Quiz Tool <= 2.9.2 - Unauthenticated Cross-Site Scripting
6.1
CVE ID Unknown
May 15, 2012
Researchers: Heine Pedersen, Torben Jensen
Sabre < 1.2.2 - Cross-Site Scripting
6.1
CVE-2012-2916
May 15, 2012
Researchers: Heine Pedersen, Torben Jensen
GD Star Rating < 1.9.17 - Cross-Site Scripting
6.1
CVE ID Unknown
May 15, 2012
Researchers: Heine Pedersen, Torben Jensen
WP Statistics <= 2.2.4 - Cross-Site Scripting
6.1
CVE ID Unknown
May 15, 2012
Researchers: Heine Pedersen, Torben Jensen
EZPZ One Click Backup <= 12.03.10 - Cross-Site Scripting
6.1
CVE ID Unknown
May 15, 2012
Researchers: Heine Pedersen, Torben Jensen
Network Publisher <= 5.0.1 - Cross-Site Scripting
6.1
CVE ID Unknown
May 15, 2012
Researchers: Heine Pedersen, Torben Jensen
WP Forum Server <= 1.7.3 - Authenticated (Admin+) Stored Cross-Site Scripting
6.1
CVE-2012-6622
May 15, 2012
Researchers: Heine Pedersen, Torben Jensen
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio <= 1.72 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
May 15, 2012
Researchers: Heine Pedersen, Torben Jensen
Mingle Forum <= 1.0.33 - Cross-Site Scripting
6.1
CVE ID Unknown
May 15, 2012
Researchers: Heine Pedersen, Torben Jensen
Sharebar <= 1.2.1 - SQL Injection
9.8
CVE-2012-6719
May 15, 2012
Researchers: Heine Pedersen, Torben Jensen
PDF & Print Button Joliprint <= 1.3.0 - Cross-Site Scripting
7.1
CVE ID Unknown
May 15, 2012
Researchers: Heine Pedersen, Torben Jensen
Title CVE ID CVSS Researchers Date
iThemes Security < 3.2.5 - Cross-Site Scripting CVE-2012-4263 7.2 SiNA Rabbani May 11, 2012
BulletProof Security < .47.1 - Reflected Cross-Site Scripting CVE-2012-4268 6.1 SiNA Rabbani May 11, 2012
2 Click Social Media Buttons <= 0.33 - Multiple Cross-Site Scripting CVE-2012-4272 6.1 SiNA Rabbani May 11, 2012
WP-FaceThumb < 0.2 - Cross-Site Scripting CVE-2012-2371 6.1 Avram Marius Gabriel (d3v1l) May 13, 2012
Media File Manager Advanced <= 1.1.5 - Improper Access Control 8.8 Evex May 14, 2012
Newsletter Manager < 1.0.2 - Cross-Site Scripting CVE-2012-6628 6.1 Heine Pedersen, Torben Jensen May 15, 2012
WP Forum Server < 1.7.4 - SQL Injection CVE-2012-6625 7.2 Heine Pedersen, Torben Jensen May 15, 2012
Dynamic Widgets <= 1.5.1 - Cross Site Scripting 7.2 Heine Pedersen, Torben Jensen May 15, 2012
Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) < 2.3.1 - Cross-Site Scripting CVE-2012-2913 6.1 Heine Pedersen, Torben Jensen May 15, 2012
Survey And Quiz Tool <= 2.9.2 - Unauthenticated Cross-Site Scripting 6.1 Heine Pedersen, Torben Jensen May 15, 2012
Sabre < 1.2.2 - Cross-Site Scripting CVE-2012-2916 6.1 Heine Pedersen, Torben Jensen May 15, 2012
GD Star Rating < 1.9.17 - Cross-Site Scripting 6.1 Heine Pedersen, Torben Jensen May 15, 2012
WP Statistics <= 2.2.4 - Cross-Site Scripting 6.1 Heine Pedersen, Torben Jensen May 15, 2012
EZPZ One Click Backup <= 12.03.10 - Cross-Site Scripting 6.1 Heine Pedersen, Torben Jensen May 15, 2012
Network Publisher <= 5.0.1 - Cross-Site Scripting 6.1 Heine Pedersen, Torben Jensen May 15, 2012
WP Forum Server <= 1.7.3 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2012-6622 6.1 Heine Pedersen, Torben Jensen May 15, 2012
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio <= 1.72 - Reflected Cross-Site Scripting 6.1 Heine Pedersen, Torben Jensen May 15, 2012
Mingle Forum <= 1.0.33 - Cross-Site Scripting 6.1 Heine Pedersen, Torben Jensen May 15, 2012
Sharebar <= 1.2.1 - SQL Injection CVE-2012-6719 9.8 Heine Pedersen, Torben Jensen May 15, 2012
PDF & Print Button Joliprint <= 1.3.0 - Cross-Site Scripting 7.1 Heine Pedersen, Torben Jensen May 15, 2012
Submit Vulnerability

Researcher Hall of Fame (Past 30 days)

View All
Rank Name
Vulnerabilities since Sep 10, 2026
Vulns
1 Ananda Dhakal 171
2 Wordfence PRISM 68
3 Intrudify 46
4 Artus KG 36
5 Karthik Ramakrishnan 34
6 Jakub Herman 33
7 nh4tvd 32
8 Rafie Muhammad 19
9 daroo 19
10 Francisco José Ramírez Vicente 18
11 JunHee CHO 18
12 Pablo González Pérez 18
13 Iñigo Sánchez Enciso 18
14 neurotx 18
15 Erwan LR 18
16 Peter Tang 16
17 Supakiad S. (m3ez) 16
18 Naoki Kawahigashi 15
19 vuxvinh 15
20 Kuba 15

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation