Search vulnerabilities

Expected end of text, found ':' (at char 25), (line:1, col:26)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,461

CVE-2015-9371

Manual Purchases Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Ithemes
Products
Manual Purchases
CVE-2015-9370

Invoices Add-on for iThemes Exchange before 1.4.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Ithemes
Products
Invoices
CVE-2015-9369

Easy US Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Ithemes
Products
Easy Us Sales Taxes
CVE-2015-9367

Easy Canadian Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Ithemes
Products
Easy Canadian Sales Taxes
CVE-2015-9366

Custom URL Tracking Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Ithemes
Products
Custom Url Tracking
CVE-2015-9365

Authorize.net Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Ithemes
Products
Authorize.net
CVE-2015-9364

2Checkout Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
2checkout
Products
Ithemes 2checkout
CVE-2015-9363

iThemes Exchange before 1.12.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Ithemes
Products
Exchange
CVE-2015-9362

The Post Connector plugin before 1.0.4 for WordPress has XSS via add_query_arg() and remove_query_arg().

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Never5
Products
Post Connector
CVE-2015-9361

The Related Posts plugin before 1.8.2 for WordPress has XSS via add_query_arg() and remove_query_arg().

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Never5
Products
Related Posts
CVE-2015-9360

The updraftplus plugin before 1.9.64 for WordPress has XSS via add_query_arg() and remove_query_arg().

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Updraftplus
Products
Updraftplus
CVE-2015-9359

The Jetpack plugin before 3.4.3 for WordPress has XSS via add_query_arg() and remove_query_arg().

CVSS 3.0 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Automattic
Products
Jetpack
CVE-2015-9356

The wp-vipergb plugin before 1.3.16 for WordPress has XSS via add_query_arg() and remove_query_arg(), a different issue than CVE-2014-9460.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Wp-vipergb Project
Products
Wp-vipergb
CVE-2015-9353

The gigpress plugin before 2.3.11 for WordPress has SQL injection in the admin area, a different vulnerability than CVE-2015-4066.

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed
Vendors
Tri
Products
Gigpress
CVE-2015-9351

The feed-them-social plugin before 1.7.0 for WordPress has possible shortcode execution in the Facebook Feeds load more button.

CVSS 3.0 · 9.8 Critical EPSS 2.8% KEV · Not listed
Vendors
Slickremix
Products
Feed Them Social