Export limit exceeded: 414493 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (414493 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2023-4811 | 1 Iptanus | 1 Wordpress File Upload | 2025-04-23 | 5.4 Medium |
| The WordPress File Upload WordPress plugin before 4.23.3 does not sanitise and escape some of its settings, which could allow high privilege users such as contributors to perform Stored Cross-Site Scripting attacks. | ||||
| CVE-2023-4805 | 1 Themeum | 1 Tutor Lms | 2025-04-23 | 5.4 Medium |
| The Tutor LMS WordPress plugin before 2.3.0 does not sanitise and escape some of its settings, which could allow users such as subscriber to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) | ||||
| CVE-2023-4795 | 1 Sazzadh | 1 Testimonial Slider Shortcode | 2025-04-23 | 5.4 Medium |
| The Testimonial Slider Shortcode WordPress plugin before 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin | ||||
| CVE-2023-4783 | 1 Hoosoft | 1 Magee Shortcodes | 2025-04-23 | 5.4 Medium |
| The Magee Shortcodes WordPress plugin through 2.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. | ||||
| CVE-2023-4691 | 1 Booking-wp-plugin | 1 Bookly | 2025-04-23 | 7.2 High |
| The WordPress Online Booking and Scheduling Plugin WordPress plugin before 22.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin | ||||
| CVE-2023-4687 | 1 Pagelayer | 1 Pagelayer | 2025-04-23 | 6.1 Medium |
| The Page Builder: Pagelayer WordPress plugin before 1.7.7 doesn't prevent unauthenticated attackers from updating a post's header or footer code on scheduled posts. | ||||
| CVE-2023-4666 | 1 10web | 1 Form Maker | 2025-04-23 | 9.8 Critical |
| The Form Maker by 10Web WordPress plugin before 1.15.20 does not validate signatures when creating them on the server from user input, allowing unauthenticated users to create arbitrary files and lead to RCE | ||||
| CVE-2023-4646 | 1 Sayandatta | 1 Simple Posts Ticker | 2025-04-23 | 5.4 Medium |
| The Simple Posts Ticker WordPress plugin before 1.1.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. | ||||
| CVE-2023-4643 | 1 Shortpixel | 1 Enable Media Replace | 2025-04-23 | 8.8 High |
| The Enable Media Replace WordPress plugin before 4.1.3 unserializes user input via the Remove Background feature, which could allow Author+ users to perform PHP Object Injection when a suitable gadget is present on the blog | ||||
| CVE-2023-4521 | 1 Mooveagency | 1 Import Xml And Rss Feeds | 2025-04-23 | 9.8 Critical |
| The Import XML and RSS Feeds WordPress plugin before 2.1.5 contains a web shell, allowing unauthenticated attackers to perform RCE. The plugin/vendor was not compromised and the files are the result of running a PoC for a previously reported issue (https://wpscan.com/vulnerability/d4220025-2272-4d5f-9703-4b2ac4a51c42) and not deleting the created files when releasing the new version. | ||||
| CVE-2023-4476 | 1 Plainware | 1 Locatoraid | 2025-04-23 | 6.1 Medium |
| The Locatoraid Store Locator WordPress plugin before 3.9.24 does not sanitise and escape the lpr-search parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. | ||||
| CVE-2023-4390 | 1 Ays-pro | 1 Popup Box | 2025-04-23 | 4.8 Medium |
| The Popup box WordPress plugin before 3.7.2 does not sanitize and escape some Popup fields, which could allow high-privilege users such as an administrator to inject arbitrary web scripts even when the unfiltered_html capability is disallowed (for example in a multisite setup). | ||||
| CVE-2023-4388 | 1 Myeventon | 1 Eventon | 2025-04-23 | 4.8 Medium |
| The EventON WordPress plugin before 2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) | ||||
| CVE-2023-4318 | 1 Wow-company | 1 Herd Effects | 2025-04-23 | 4.3 Medium |
| The Herd Effects WordPress plugin before 5.2.4 does not have CSRF when deleting its items, which could allow attackers to make logged in admins delete arbitrary effects via a CSRF attack | ||||
| CVE-2023-4314 | 1 Tms-outsource | 1 Wpdatatables | 2025-04-23 | 7.2 High |
| The wpDataTables WordPress plugin before 2.1.66 does not validate the "Serialized PHP array" input data before deserializing the data. This allows admins to deserialize arbitrary data which may lead to remote code execution if a suitable gadget chain is present on the server. This is impactful in environments where admin users should not be allowed to execute arbitrary code, such as multisite. | ||||
| CVE-2023-4307 | 1 Teknigar | 1 Lock User Account | 2025-04-23 | 4.3 Medium |
| The Lock User Account WordPress plugin through 1.0.3 does not have CSRF check when bulk locking and unlocking accounts, which could allow attackers to make logged in admins lock and unlock arbitrary users via a CSRF attack | ||||
| CVE-2023-4300 | 1 Mooveagency | 1 Import Xml And Rss Feeds | 2025-04-23 | 7.2 High |
| The Import XML and RSS Feeds WordPress plugin before 2.1.4 does not filter file extensions for uploaded files, allowing an attacker to upload a malicious PHP file, leading to Remote Code Execution. | ||||
| CVE-2023-4290 | 1 Mpembed | 1 Wp Matterport Shortcode | 2025-04-23 | 6.1 Medium |
| The WP Matterport Shortcode WordPress plugin before 2.1.7 does not escape the PHP_SELF server variable when outputting it in attributes, leading to Reflected Cross-Site Scripting issues which could be used against high privilege users such as admin | ||||
| CVE-2023-4289 | 1 Mpembed | 1 Wp Matterport Shortcode | 2025-04-23 | 5.4 Medium |
| The WP Matterport Shortcode WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks | ||||
| CVE-2023-4281 | 1 Activity Log Project | 1 Activity Log | 2025-04-23 | 5.3 Medium |
| This Activity Log WordPress plugin before 2.8.8 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic. | ||||