Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (373578 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-47143 1 Themeisle 1 Multiple Page Generator 2025-01-13 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Themeisle Multiple Page Generator Plugin – MPG plugin <= 3.3.9 versions.
CVE-2023-25709 1 Plainware 1 Locatoraid 2025-01-13 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Plainware Locatoraid Store Locator plugin <= 3.9.11 versions.
CVE-2023-25708 1 Rextheme 1 Wp Vr 2025-01-13 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Rextheme WP VR – 360 Panorama and Virtual Tour Builder For WordPress plugin <= 8.2.7 versions.
CVE-2022-47427 1 My Calendar Project 1 My Calendar 2025-01-13 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Calendar plugin <= 3.3.24.1 versions.
CVE-2022-44580 1 Richplugins 1 Plugin For Google Reviews 2025-01-13 9.1 Critical
SQL Injection (SQLi) vulnerability in RichPlugins Plugin for Google Reviews plugin <= 2.2.3 versions.
CVE-2022-38456 1 Ajax Search Project 1 Ajax Search 2025-01-13 4.3 Medium
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ernest Marcinko Ajax Search Lite plugin <= 4.10.3 versions.
CVE-2022-37402 1 Afsanalytics 1 Afs Analytics 2025-01-13 4.8 Medium
Stored Cross-site Scripting (XSS) vulnerability in AFS Analytics plugin <= 4.18 versions.
CVE-2022-38971 1 Themekraft 1 Post Form Registration Form Profile Form For User Profiles And Content Forms 2025-01-13 4.7 Medium
Stored Cross-Site Scripting (XSS) vulnerability in ThemeKraft Post Form – Registration Form – Profile Form for User Profiles and Content Forms for User Submissions plugin <= 2.7.5 versions.
CVE-2022-40699 1 Yasr - Yet Another Stars Rating Project 1 Yasr - Yet Another Stars Rating 2025-01-13 5.4 Medium
Cross-Site Scripting (XSS) vulnerability in Dario Curvino Yasr – Yet Another Stars Rating plugin <= 3.1.2 versions.
CVE-2022-41554 1 Slideshow Se Project 1 Slideshow Se 2025-01-13 4.8 Medium
Stored Cross-Site Scripting (XSS) vulnerability in John West Slideshow SE plugin <= 2.5.5 versions.
CVE-2022-43461 1 Slideshow Se Project 1 Slideshow Se 2025-01-13 4.8 Medium
Stored Cross-Site Scripting (XSS) vulnerability in John West Slideshow SE plugin <= 2.5.5 versions.
CVE-2022-45817 1 Gc Testimonials Project 1 Gc Testimonials 2025-01-13 5.4 Medium
Cross-Site Scripting (XSS) vulnerability in Erin Garscadden GC Testimonials plugin <= 1.3.2 versions.
CVE-2022-46854 1 Obox 1 Launchpad - Coming Soon \& Maintenance Mode Plugin 2025-01-13 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Obox Themes Launchpad – Coming Soon & Maintenance Mode plugin <= 1.0.13 versions.
CVE-2022-46867 1 Universal Star Rating Project 1 Universal Star Rating 2025-01-13 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Chasil Universal Star Rating plugin <= 2.1.0 version.
CVE-2023-25795 1 Wp-master 1 Feed Changer \& Remover 2025-01-13 5.9 Medium
Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in WP-master.Ir Feed Changer & Remover plugin <= 0.2 versions.
CVE-2023-25794 1 Nooz Project 1 Nooz 2025-01-13 5.9 Medium
Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Mighty Digital Nooz plugin <= 1.6.0 versions.
CVE-2024-24377 1 Idocv 1 Idocview 2025-01-13 9.8 Critical
An issue in idocv v.14.1.3_20231228 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script.
CVE-2023-51931 1 Alanclarke 1 Urlite 2025-01-13 7.5 High
An issue in alanclarke URLite v.3.1.0 allows an attacker to cause a denial of service (DoS) via a crafted payload to the parsing function.
CVE-2024-25415 1 Phoenixcart 1 Ce Phoenix Cart 2025-01-13 7.2 High
A remote code execution (RCE) vulnerability in /admin/define_language.php of CE Phoenix v1.0.8.20 allows attackers to execute arbitrary PHP code via injecting a crafted payload into the file english.php.
CVE-2024-51728 2025-01-13 N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2024. Notes: none.