Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (323571 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2015-9494 1 Indieweb Post Kinds Project 1 Indieweb Post Kinds 2024-11-21 6.1 Medium
The indieweb-post-kinds plugin before 1.3.1.1 for WordPress has XSS via the genericons/example.html anchor identifier.
CVE-2015-9493 1 Nlb-creationst 1 My Wish List 2024-11-21 6.1 Medium
The my-wish-list plugin before 1.4.2 for WordPress has multiple XSS issues.
CVE-2015-9492 1 Smartit Premium Responsive Project 1 Smartit Premium Responsive 2024-11-21 7.5 High
The ThemeMakers SmartIT Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVE-2015-9491 1 Blessing Premium Responsive Project 1 Blessing Premium Responsive 2024-11-21 7.5 High
The ThemeMakers Blessing Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVE-2015-9490 1 Gamestheme Premium Project 1 Gamestheme Premium 2024-11-21 7.5 High
The ThemeMakers GamesTheme Premium theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVE-2015-9489 1 Goodnex Premium Responsive Project 1 Goodnex Premium Responsive 2024-11-21 7.5 High
The ThemeMakers Goodnex Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVE-2015-9488 1 Almera Responsive Portfolio Site Template Project 1 Almera Responsive Portfolio Site Template 2024-11-21 7.5 High
The ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVE-2015-9487 1 Almera Responsive Portfolio Project 1 Almera Responsive Portfolio 2024-11-21 7.5 High
The ThemeMakers Almera Responsive Portfolio theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVE-2015-9486 1 Axioma Premium Responsive Project 1 Axioma Premium Responsive 2024-11-21 7.5 High
The ThemeMakers Axioma Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVE-2015-9485 1 Accio Responsive Onepage Parallax Site Template Project 1 Accio Responsive Onepage Parallax Site Template 2024-11-21 7.5 High
The ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVE-2015-9484 1 Accio One Page Parallax Responsive Theme Project 1 Accio One Page Parallax Responsive Theme 2024-11-21 7.5 High
The ThemeMakers Accio One Page Parallax Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVE-2015-9483 1 Invento \/ Architecture Building Agency Template Project 1 Invento \/ Architecture Building Agency Template 2024-11-21 7.5 High
The ThemeMakers Invento Responsive Gallery/Architecture Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVE-2015-9482 1 Car Dealer \/ Auto Dealer Responsive Project 1 Car Dealer \/ Auto Dealer Responsive 2024-11-21 7.5 High
The ThemeMakers Car Dealer / Auto Dealer Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVE-2015-9481 1 Diplomat \| Political Project 1 Diplomat \| Political 2024-11-21 7.5 High
The ThemeMakers Diplomat | Political theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVE-2015-9480 1 Robot-cpa 1 Robotcpa 2024-11-21 7.5 High
The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter.
CVE-2015-9479 1 Advancedcustomfields 1 Acf Fronted Display 2024-11-21 9.8 Critical
The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php.
CVE-2015-9478 1 No-margin-for-error 1 Prettyphoto 2024-11-21 6.1 Medium
prettyPhoto before 3.1.6 has js/jquery.prettyPhoto.js XSS.
CVE-2015-9477 1 Vernissage Project 1 Vernissage 2024-11-21 8.8 High
The Vernissage theme 1.2.8 for WordPress has insufficient restrictions on option updates.
CVE-2015-9476 1 Teardrop Project 1 Teardrop 2024-11-21 8.8 High
The Teardrop theme 1.8.1 for WordPress has insufficient restrictions on option updates.
CVE-2015-9475 1 Pont Project 1 Pont 2024-11-21 8.8 High
The Pont theme 1.5 for WordPress has insufficient restrictions on option updates.