WordPress participants-database has 3 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2014-3961 | SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5.4.9 for WordPress allows remote attackers | high | 7.5 | <=1.5.4.8 or =1.5.4 or =1.5.4.1 or =1.5.4.2 or =1.5.4.3 or =1.5.4.4 or =1.5.4.5 or =1.5.4.6 or =1.5.4.7 | – |
| CVE-2017-14126 | The Participants Database plugin before 1.7.5.10 for WordPress has XSS. | medium | 6.1 | =1.7.5.10 | – |
| CVE-2020-8596 | participants-database.php in the Participants Database plugin 1.9.5.5 and previous versions for WordPress has a time-based SQL injection vul | high | 7.5 | <=1.9.5.5 | – |
Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden wordpress /var/www/html
Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.
Install docs How findings are ranked