Search vulnerabilities

Expected end of text, found ':' (at char 6), (line:1, col:7)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,775

CVE-2015-9365

Authorize.net Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Ithemes
Products
Authorize.net
CVE-2015-9364

2Checkout Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
2checkout
Products
Ithemes 2checkout
CVE-2015-9363

iThemes Exchange before 1.12.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Ithemes
Products
Exchange
CVE-2015-9362

The Post Connector plugin before 1.0.4 for WordPress has XSS via add_query_arg() and remove_query_arg().

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Never5
Products
Post Connector
CVE-2015-9361

The Related Posts plugin before 1.8.2 for WordPress has XSS via add_query_arg() and remove_query_arg().

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Never5
Products
Related Posts
CVE-2015-9360

The updraftplus plugin before 1.9.64 for WordPress has XSS via add_query_arg() and remove_query_arg().

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Updraftplus
Products
Updraftplus
CVE-2015-9359

The Jetpack plugin before 3.4.3 for WordPress has XSS via add_query_arg() and remove_query_arg().

CVSS 3.0 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Automattic
Products
Jetpack
CVE-2015-9356

The wp-vipergb plugin before 1.3.16 for WordPress has XSS via add_query_arg() and remove_query_arg(), a different issue than CVE-2014-9460.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Wp-vipergb Project
Products
Wp-vipergb
CVE-2015-9353

The gigpress plugin before 2.3.11 for WordPress has SQL injection in the admin area, a different vulnerability than CVE-2015-4066.

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed
Vendors
Tri
Products
Gigpress
CVE-2015-9351

The feed-them-social plugin before 1.7.0 for WordPress has possible shortcode execution in the Facebook Feeds load more button.

CVSS 3.0 · 9.8 Critical EPSS 2.8% KEV · Not listed
Vendors
Slickremix
Products
Feed Them Social
CVE-2015-9350

The feed-them-social plugin before 1.7.0 for WordPress has reflected XSS in the Facebook Feeds load more button.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Slickremix
Products
Feed Them Social
CVE-2015-9349

The ckeditor-for-wordpress plugin before 4.5.3.1 for WordPress has reflected XSS in the "built-in (old)" file browser.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Cksource
Products
Ckeditor
CVE-2015-9348

The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs.

CVSS 3.0 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Codepeople
Products
Sell Downloads
CVE-2015-9347

The wp-plotly plugin before 1.0.3 for WordPress has XSS by authors.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Plot
Products
Plotly