Export limit exceeded: 365120 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found '/' (at char 34), (line:1, col:35)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (365120 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2022-41996 1 Theme-fusion 1 Avada 2025-02-20 8.8 High
Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada premium theme versions <= 7.8.1 on WordPress leading to arbitrary plugin installation/activation.
CVE-2021-36863 1 Expresstech 1 Quiz And Survey Master 2025-02-20 5.4 Medium
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 on WordPress.
CVE-2021-36864 1 Expresstech 1 Quiz And Survey Master 2025-02-20 3.4 Low
Auth. (editor+) Reflected Cross-Site Scripting (XSS) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 on WordPress.
CVE-2022-44576 1 Agenteasy Properties Project 1 Agenteasy Properties 2025-02-20 4.8 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in AgentEasy Properties plugin <= 1.0.4 on WordPress.
CVE-2022-44586 1 Am-hili Project 1 Am-hili 2025-02-20 4.8 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) in Ayoub Media AM-HiLi plugin <= 1.0 on WordPress.
CVE-2022-36428 1 Rockcontent 1 Rock Convert 2025-02-20 4.8 Medium
Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Stage Rock Convert plugin <= 2.11.0 on WordPress.
CVE-2022-40131 1 A3rev 1 Page View Count 2025-02-20 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in a3rev Software Page View Count plugin <= 2.5.5 on WordPress allows an attacker to reset the plugin settings.
CVE-2022-36404 1 Coleds 1 Simple Seo 2025-02-20 5.4 Medium
Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in David Cole Simple SEO (WordPress plugin) plugin <= 1.8.12 versions.
CVE-2022-44627 1 Coleds 1 Simple Seo 2025-02-20 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in David Cole Simple SEO plugin <= 1.8.12 on WordPress allows attackers to create or delete sitemaps.
CVE-2022-25952 1 Keywordrush 1 Content Egg 2025-02-20 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Keywordrush Content Egg plugin <= 5.4.0 on WordPress.
CVE-2022-43491 1 Algolplus 1 Advanced Dynamic Pricing For Woocommerce 2025-02-20 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 on WordPress leading to plugin settings import.
CVE-2022-43481 1 Rymera 1 Advanced Coupons 2025-02-20 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Advanced Coupons for WooCommerce Coupons plugin <= 4.5 on WordPress leading to notice dismissal.
CVE-2022-40128 1 Algolplus 1 Advanced Order Export For Woocommerce 2025-02-20 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Advanced Order Export For WooCommerce plugin <= 3.3.2 on WordPress leading to export file download.
CVE-2022-30545 1 5-anker 1 5 Anker Connect 2025-02-20 4.8 Medium
Auth. Reflected Cross-Site Scripting (XSS) vulnerability in 5 Anker Connect plugin <= 1.2.6 on WordPress.
CVE-2022-40223 1 Searchwp 1 Searchwp 2025-02-20 5.4 Medium
Nonce token leakage and missing authorization in SearchWP premium plugin <= 4.2.5 on WordPress leading to plugin settings change.
CVE-2022-40632 1 Gvectors 1 Wpforo Forum 2025-02-20 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team wpForo Forum plugin <= 2.0.5 on WordPress leading to topic deletion.
CVE-2022-27858 1 Activity Log Project 1 Activity Log 2025-02-20 7.4 High
CSV Injection vulnerability in Activity Log Team Activity Log <= 2.8.3 on WordPress.
CVE-2022-27855 1 Fatcatapps 1 Analytics Cat 2025-02-20 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Fatcat Apps Analytics Cat plugin <= 1.0.9 on WordPress allows Plugin Settings Change.
CVE-2022-38137 1 Analytify 1 Analytify - Google Analytics Dashboard 2025-02-20 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Analytify plugin <= 4.2.2 on WordPress.
CVE-2022-42494 1 Aioseo 1 All In One Seo 2025-02-20 3 Low
Server Side Request Forgery (SSRF) vulnerability in All in One SEO Pro plugin <= 4.2.5.1 on WordPress.