Export limit exceeded: 365159 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (365159 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2022-27846 | 1 Yooslider | 1 Yoo Slider | 2025-02-20 | 4.3 Medium |
| Cross-Site Request Forgery (CSRF) vulnerability in Yooslider Yoo Slider <= 2.0.0 on WordPress allows attackers to create or modify slider. | ||||
| CVE-2022-27848 | 1 Webnus | 1 Modern Events Calendar Lite | 2025-02-20 | 3.4 Low |
| Authenticated (admin+ user) Stored Cross-Site Scripting (XSS) in Modern Events Calendar Lite (WordPress plugin) <= 6.5.1 | ||||
| CVE-2022-27849 | 1 Plugin-planet | 1 Simple Ajax Chat | 2025-02-20 | 5.3 Medium |
| Sensitive Information Disclosure (sac-export.csv) in Simple Ajax Chat (WordPress plugin) <= 20220115 | ||||
| CVE-2022-27850 | 1 Plugin-planet | 1 Simple Ajax Chat | 2025-02-20 | 5.4 Medium |
| Cross-Site Request Forgery (CSRF) in Simple Ajax Chat (WordPress plugin) <= 20220115 allows an attacker to clear the chat log or delete a chat message. | ||||
| CVE-2022-27851 | 1 Dineshkarki | 1 Use Any Font | 2025-02-20 | 5.4 Medium |
| Cross-Site Request Forgery (CSRF) in Use Any Font (WordPress plugin) <= 6.1.7 allows an attacker to deactivate the API key. | ||||
| CVE-2022-23976 | 1 Accesspressthemes | 1 Access Demo Importer | 2025-02-20 | 8.1 High |
| Cross-Site Request Forgery (CSRF) in Access Demo Importer <= 1.0.7 on WordPress allows an attacker to reset all data (posts / pages / media). | ||||
| CVE-2022-23975 | 1 Accesspressthemes | 1 Access Demo Importer | 2025-02-20 | 6.5 Medium |
| Cross-Site Request Forgery (CSRF) in Access Demo Importer <= 1.0.7 on WordPress allows an attacker to activate any installed plugin. | ||||
| CVE-2022-27853 | 1 Contest-gallery | 1 Contest Gallery | 2025-02-20 | 4.8 Medium |
| Authenticated (author or higher role) Stored Cross-Site Scripting (XSS) in Contest Gallery (WordPress plugin) <= 13.1.0.9 | ||||
| CVE-2022-27862 | 1 Vikwp | 1 Vikbooking Hotel Booking Engine \& Property Management System Plugin | 2025-02-20 | 9.8 Critical |
| Arbitrary File Upload leading to RCE in E4J s.r.l. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 on WordPress allows attackers to upload and execute dangerous file types (e.g. PHP shell) via the signature upload on the booking form. | ||||
| CVE-2022-27863 | 1 Vikwp | 1 Vikbooking Hotel Booking Engine \& Property Management System Plugin | 2025-02-20 | 5.3 Medium |
| Sensitive Information Exposure in E4J s.r.l. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 on WordPress allows attackers to get the booking data by guessing / brute-forcing easy predictable booking IDs via search POST requests. | ||||
| CVE-2022-29417 | 1 Shortpixel | 1 Shortpixel Adaptive Images | 2025-02-20 | 4.3 Medium |
| Plugin Settings Update vulnerability in ShortPixel's ShortPixel Adaptive Images plugin <= 3.3.1 at WordPress allows an attacker with a low user role like a subscriber or higher to change the plugin settings. | ||||
| CVE-2022-29418 | 1 Night Mode Project | 1 Night Mode | 2025-02-20 | 4.8 Medium |
| Authenticated (admin user role) Persistent Cross-Site Scripting (XSS) in Mark Daniels Night Mode plugin <= 1.0.0 on WordPress via vulnerable parameters: &ntmode_page_setting[enable-me], &ntmode_page_setting[bg-color], &ntmode_page_setting[txt-color], &ntmode_page_setting[anc_color]. | ||||
| CVE-2022-29419 | 1 3xsocializer Project | 1 3xsocializer | 2025-02-20 | 6 Medium |
| SQL Injection (SQLi) vulnerability in Don Crowther's 3xSocializer plugin <= 0.98.22 at WordPress possible for users with a low role like a subscriber or higher. | ||||
| CVE-2021-36867 | 1 Psychological Tests \& Quizzes Project | 1 Psychological Tests \& Quizzes | 2025-02-20 | 5.4 Medium |
| Stored Cross-Site Scripting (XSS) vulnerability in Alexander Ustimenko's Psychological tests & quizzes plugin <= 0.21.19 on WordPress possible for users with contributor or higher user rights. | ||||
| CVE-2021-36895 | 1 Tripetto | 1 Tripetto | 2025-02-20 | 4.7 Medium |
| Unauthenticated Cross-Site Scripting (XSS) vulnerability in Tripetto's Tripetto plugin <= 5.1.4 on WordPress via SVG image upload. | ||||
| CVE-2022-27854 | 1 Psychological Tests \& Quizzes Project | 1 Psychological Tests \& Quizzes | 2025-02-20 | 5.4 Medium |
| Stored Cross-Site Scripting (XSS) vulnerability in Alexander Ustimenko's Psychological tests & quizzes plugin <= 0.21.19 on WordPress possible for users with contributor or higher role via &wpt_test_page_submit_button_caption parameter. | ||||
| CVE-2022-27860 | 1 Footer-text Project | 1 Footer-text | 2025-02-20 | 6.1 Medium |
| Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) in Shea Bunge's Footer Text plugin <= 2.0.3 on WordPress. | ||||
| CVE-2022-29415 | 1 Ravpage Project | 1 Ravpage | 2025-02-20 | 6.1 Medium |
| Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in Mati Skiba @ Rav Messer's Ravpage plugin <= 2.16 at WordPress. | ||||
| CVE-2022-29410 | 1 Hermit Project | 1 Hermit | 2025-02-20 | 7.4 High |
| Authenticated SQL Injection (SQLi) vulnerability in Mufeng's Hermit 音乐播放器 plugin <= 3.1.6 on WordPress allows attackers with Subscriber or higher user roles to execute SQLi attack via (&ids). | ||||
| CVE-2022-29413 | 1 Hermit Project | 1 Hermit | 2025-02-20 | 4.7 Medium |
| Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) in Mufeng's Hermit 音乐播放器 plugin <= 3.1.6 on WordPress via &title parameter. | ||||