Search vulnerabilities

Expected end of text, found ':' (at char 26), (line:1, col:27)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,948

CVE-2022-45806

WordPress Formidable Forms plugin <= 5.5.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Strategy11 Form Builder Team Formidable Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Formidable Forms: from n/a through 5.5.4.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Strategy11
Products
Formidable Forms
CVE-2022-45805

WordPress Paytm Payment Gateway Plugin <= 2.7.3 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Paytm Paytm Payment Gateway paytm-payments allows SQL Injection.This issue affects Paytm Payment Gateway: from n/a through 2.7.3.

CVSS 3.1 · 8.2 High EPSS 2.3% KEV · Not listed
Vendors
Paytm
Products
Payment Gateway
CVE-2022-45373

WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics allows SQL Injection.This issue affects Slimstat Analytics: from n/a through 5.0.4.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Wp-slimstat
Products
Slimstat Analytics
CVE-2022-45370

WordPress WordPress Comments Import & Export Plugin <= 2.3.1 is vulnerable to CSV Injection

Improper Neutralization of Formula Elements in a CSV File vulnerability in WebToffee WordPress Comments Import & Export.This issue affects WordPress Comments Import & Export: from n/a through 2.3.1.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Webtoffee
Products
Wordpress Comments Import And Export
CVE-2022-45360

WordPress Commenter Emails Plugin <= 2.6.1 is vulnerable to CSV Injection

Improper Neutralization of Formula Elements in a CSV File vulnerability in Scott Reilly Commenter Emails.This issue affects Commenter Emails: from n/a through 2.6.1.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Coffee2code
Products
Commenter Emails
CVE-2022-45357

WordPress 1003 Mortgage Application Plugin <= 1.75 is vulnerable to CSV Injection

Improper Neutralization of Formula Elements in a CSV File vulnerability in Lenderd 1003 Mortgage Application.This issue affects 1003 Mortgage Application: from n/a through 1.75.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Lenderd
Products
1003 Mortgage Application
CVE-2022-45350

WordPress Simple History Plugin <= 3.3.1 is vulnerable to CSV Injection

Improper Neutralization of Formula Elements in a CSV File vulnerability in Pär Thernström Simple History – user activity log, audit tool.This issue affects Simple History – user activity log, audit tool: from n/a through 3.3.1.

CVSS 3.1 · 3 Low EPSS < 1% KEV · Not listed
Vendors
Simple-history
Products
Simple History
CVE-2022-45348

WordPress amr users Plugin <= 4.59.4 is vulnerable to CSV Injection

Improper Neutralization of Formula Elements in a CSV File vulnerability in anmari amr users.This issue affects amr users: from n/a through 4.59.4.

CVSS 3.1 · 5.8 Medium EPSS < 1% KEV · Not listed
Vendors
Anmari
Products
Amr Users
CVE-2022-44738

WordPress Posts and Users Stats Plugin <= 1.1.3 is vulnerable to CSV Injection

Improper Neutralization of Formula Elements in a CSV File vulnerability in Patrick Robrecht Posts and Users Stats.This issue affects Posts and Users Stats: from n/a through 1.1.3.

CVSS 3.1 · 5.8 Medium EPSS < 1% KEV · Not listed
Vendors
Patrickrobrecht
Products
Posts And Users Stats
CVE-2022-44588

WordPress Cryptocurrency Widgets Pack Plugin <=1.8.1 is vulnerable to SQL Injection

Unauth. SQL Injection vulnerability in Cryptocurrency Widgets Pack Plugin <=1.8.1 on WordPress.

CVSS 3.1 · 9.9 Critical EPSS 2.4% KEV · Not listed
Vendors
Blocksera
Products
Cryptocurrency Widgets Pack
CVE-2022-44578

WordPress Owl Carousel plugin <= 0.5.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Pierre JEHAN Owl Carousel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Owl Carousel: from n/a through 0.5.3.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Pierre-jehan Wordpress
Products
Owl Carousel Wordpress
CVE-2022-43472

WordPress eRoom plugin <= 1.4.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in StylemixThemes eRoom – Zoom Meetings & Webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom – Zoom Meetings & Webinar: from n/a through 1.4.6.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2022-42882

WordPress Simple CSV/XLS Exporter Plugin <= 1.5.8 is vulnerable to CSV Injection

Improper Neutralization of Formula Elements in a CSV File vulnerability in Shambix Simple CSV/XLS Exporter.This issue affects Simple CSV/XLS Exporter: from n/a through 1.5.8.

CVSS 3.1 · 5.8 Medium EPSS < 1% KEV · Not listed
Vendors
Shambix
Products
Simple Csv\/xls Exporter
CVE-2022-41650

WordPress Custom Content by Country plugin <= 3.1.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Paul Custom Content by Country (by Shield Security) custom-content-by-country.This issue affects Custom Content by Country (by Shield Security): from n/a through 3.1.2.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Paul Wordpress
Products
Custom Content By Country (by Shield Security) Wordpress
CVE-2022-41616

WordPress Export Users Data CSV Plugin <= 2.1 is vulnerable to CSV Injection

Improper Neutralization of Formula Elements in a CSV File vulnerability in Kaushik Kalathiya Export Users Data CSV.This issue affects Export Users Data CSV: from n/a through 2.1.

CVSS 3.1 · 7.6 High EPSS 1.0% KEV · Not listed
Vendors
Kaushikkalathiya
Products
Export Users Data
CVE-2022-40219

WordPress FavIcon Switcher plugin <= 1.2.11 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in SedLex FavIcon Switcher plugin <= 1.2.11 at WordPress allows plugin settings change.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Sedlex
Products
Favicon-switcher
CVE-2022-40211

WordPress GiveWP plugin <= 2.25.1 - Cross Site Scripting (XSS) via render_dropdown vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GiveWP allows Stored XSS.This issue affects GiveWP: from n/a through 2.25.1.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Givewp
Products
Givewp
CVE-2022-38702

WordPress WP CSV Exporter Plugin <= 2.0 is vulnerable to CSV Injection

Improper Neutralization of Formula Elements in a CSV File vulnerability in Nakashima Masahiro WP CSV Exporter.This issue affects WP CSV Exporter: from n/a through 2.0.

CVSS 3.1 · 5.8 Medium EPSS < 1% KEV · Not listed
Vendors
Kigurumi
Products
Csv Exporter
CVE-2025-24153

Kernel Buffer Overflow Enables Root-Privileged Code Execution in macOS

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.3. An app with root privileges may be able to execute arbitrary code with kernel privileges.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Macos
CVE-2025-24115

Sandbox Path Traversal Allowing Unauthorized File Access

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to read files outside of its sandbox.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Macos