Search

Search Results (360480 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-24392 1 I13websolution 1 Full Width Banner Slider Wp 2025-02-19 7.1 High
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Full Width Banner Slider Wp plugin <= 1.1.7 versions.
CVE-2023-23812 1 Enhanced Wp Contact Form Project 1 Enhanced Wp Contact Form 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Joost de Valk Enhanced WP Contact Form plugin <= 2.2.3 versions.
CVE-2022-47423 1 Wp-dtree Project 1 Wp-dtree 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ulf Benjaminsson WP-dTree plugin <= 4.4.5 versions.
CVE-2022-47606 1 Wp-cors Project 1 Wp-cors 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tim Stephenson WP-CORS plugin <= 0.2.1 versions.
CVE-2022-47587 1 Wp Search Analytics Project 1 Wp Search Analytics 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Cornel Raiu WP Search Analytics plugin <= 1.4.5 versions.
CVE-2023-22720 1 Wp Links Page Project 1 Wp Links Page 2025-02-19 6.5 Medium
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Robert Macchi WP Links Page plugin <= 4.9.3 versions.
CVE-2023-23674 1 Rvola 1 Wp Original Media Path 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in RVOLA WP Original Media Path plugin <= 2.4.0 versions.
CVE-2022-47157 1 Webhammer 1 Wp Custom Fields Search 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Don Benjamin WP Custom Fields Search plugin <= 1.2.34 versions.
CVE-2023-33211 1 Wp-matomo Integration Project 1 Wp-matomo Integration 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in André Bräkling WP-Matomo Integration (WP-Piwik) plugin <= 1.0.27 versions.
CVE-2023-23818 1 Aviplugins 1 Wp Register Profile With Shortcode 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Aviplugins.Com WP Register Profile With Shortcode plugin <= 3.5.7 versions.
CVE-2023-23819 1 Itemprop Wp For Serp\/seo Rich Snippets Project 1 Itemprop Wp For Serp\/seo Rich Snippets 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Rolands Umbrovskis itemprop WP for SERP/SEO Rich snippets plugin <= 3.5.201706131 versions.
CVE-2023-26537 1 Wp No External Links Project 1 Wp No External Links 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in nicolly WP No External Links plugin <= 1.0.2 versions.
CVE-2023-35775 1 Wp Backup Solutions Project 1 Wp Backup Solutions 2025-02-19 7.1 High
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Backup Solutions WP Backup Manager plugin <= 1.13.1 versions.
CVE-2023-35097 1 Dojo 1 Wp Affiliate Links 2025-02-19 7.1 High
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Internet Marketing Dojo WP Affiliate Links plugin <= 0.1.1 versions.
CVE-2023-35093 1 Stylemixthemes 1 Masterstudy Lms 2025-02-19 6.5 Medium
Broken Access Control vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin <= 3.0.8 versions allows any logged-in users, such as subscribers to view the "Orders" of the plugin and get the data related to the order like email, username, and more.
CVE-2023-26534 1 Onewebsite 1 Wp Repost 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in OneWebsite WP Repost plugin <= 0.1 versions.
CVE-2023-34170 1 Wpovernight 1 Download Quick\/bulk Order Form For Woocommerce 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Overnight Quick/Bulk Order Form for WooCommerce plugin <= 3.5.7 versions.
CVE-2023-28751 1 Wpmet 1 Wp Ultimate Review 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions.
CVE-2023-37391 1 Wpmobilepack 1 Wordpress Mobile Pack 2025-02-19 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in WPMobilePack.Com WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps plugin <= 3.4.1 versions.
CVE-2023-34185 1 Wordpress Nextgen Galleryview Project 1 Wordpress Nextgen Galleryview 2025-02-19 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in John Brien WordPress NextGen GalleryView plugin <= 0.5.5 versions.