Search Results (346329 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-34170 1 Wpovernight 1 Download Quick\/bulk Order Form For Woocommerce 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Overnight Quick/Bulk Order Form for WooCommerce plugin <= 3.5.7 versions.
CVE-2023-28751 1 Wpmet 1 Wp Ultimate Review 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions.
CVE-2023-37391 1 Wpmobilepack 1 Wordpress Mobile Pack 2025-02-19 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in WPMobilePack.Com WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps plugin <= 3.4.1 versions.
CVE-2023-34185 1 Wordpress Nextgen Galleryview Project 1 Wordpress Nextgen Galleryview 2025-02-19 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in John Brien WordPress NextGen GalleryView plugin <= 0.5.5 versions.
CVE-2023-34029 1 Disable Wordpress Update Notifications And Auto-update Email Notifications Project 1 Disable Wordpress Update Notifications And Auto-update Email Notifications 2025-02-19 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Prem Tiwari Disable WordPress Update Notifications and auto-update Email Notifications plugin <= 2.3.3 versions.
CVE-2023-37968 1 Faboba 1 Falang 2025-02-19 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Faboba Falang multilanguage for WordPress plugin <= 1.3.39 versions.
CVE-2023-37980 1 Custom Field For Wp Job Manager Project 1 Custom Field For Wp Job Manager 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gravity Master Custom Field For WP Job Manager plugin <= 1.1 versions.
CVE-2023-36678 1 Wp-buy 1 Wp Content Copy Protection \& No Right Click 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP-buy WP Content Copy Protection & No Right Click plugin <= 3.5.5 versions.
CVE-2023-36692 1 Wp-cirrus Project 1 Wp-cirrus 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Christian Kramer & Hendrik Thole WP-Cirrus plugin <= 0.6.11 versions.
CVE-2023-27416 1 Decondigital 1 Decon Wp Sms 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Decon Digital Decon WP SMS plugin <= 1.1 versions.
CVE-2023-24409 1 I13websolution 1 Wp Responsive Tabs Horizontal Vertical And Accordion Tabs 2025-02-19 7.1 High
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution WP Responsive Tabs horizontal vertical and accordion Tabs plugin <= 1.1.15 versions.
CVE-2023-28934 1 Paymentsplugin 1 Wp Full Stripe Free 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mammothology WP Full Stripe Free plugin <= 1.6.1 versions.
CVE-2023-23828 1 Swas 1 Wp Category Post List 2025-02-19 6.5 Medium
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Swashata WP Category Post List Widget plugin <= 2.0.3 versions.
CVE-2023-28690 1 Marcosteinbrecher 1 Wp Browserupdate 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Steinbrecher WP BrowserUpdate plugin <= 4.5 versions.
CVE-2023-31094 1 Wptrio 1 Stock Sync For Woocommerce 2025-02-19 7.1 High
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Lauri Karisola / WP Trio Stock Sync for WooCommerce plugin <= 2.4.0 versions.
CVE-2023-32106 1 Fahad Mahmood 1 Wp Docs 2025-02-19 7.1 High
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Fahad Mahmood WP Docs plugin <= 1.9.9 versions.
CVE-2023-32518 1 Wpplugins 1 Wp Chinese Conversion 2025-02-19 7.1 High
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ono Oogami WP Chinese Conversion plugin <= 1.1.16 versions.
CVE-2023-32742 1 Veronalabs 1 Wp Sms 2025-02-19 7.1 High
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in VeronaLabs WP SMS plugin <= 6.1.4 versions.
CVE-2023-25462 1 Antonioandrade 1 Wp Htaccess Control 2025-02-19 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP htaccess Control plugin <= 3.5.1 versions.
CVE-2023-33320 1 Wp-hijri Project 1 Wp-hijri 2025-02-19 7.1 High
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Mohammad I. Okfie WP-Hijri plugin <= 1.5.1 versions.