Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (16333 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2016-1000271 1 Dthdevelopment 1 Dt Register 2024-11-21 N/A
Joomla extension DT Register version before 3.1.12 (Joomla 3.x) / 2.8.18 (Joomla 2.5) contains an SQL injection in "/index.php?controller=calendar&format=raw&cat[0]=SQLi&task=events". This attack appears to be exploitable if the attacker can reach the web server.
CVE-2015-9496 1 Freshmail 1 Freshmail-newsletter 2024-11-21 8.8 High
The freshmail-newsletter plugin before 1.6 for WordPress has shortcode.php SQL Injection via the 'FM_form id=' substring.
CVE-2015-9467 1 K-78 1 Broken Link Manager 2024-11-21 9.8 Critical
The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter.
CVE-2015-9466 1 Webtechideas 1 Wti Like Post 2024-11-21 9.8 Critical
The wti-like-post plugin before 1.4.3 for WordPress has WtiLikePostProcessVote SQL injection via the HTTP_CLIENT_IP, HTTP_X_FORWARDED_FOR, HTTP_X_FORWARDED, HTTP_FORWARDED_FOR, or HTTP_FORWARDED variable.
CVE-2015-9465 1 Yet Another Stars Rating Project 1 Yet Another Stars Rating 2024-11-21 8.8 High
The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasr_get_multi_set_values_and_field SQL injection via the set_id parameter.
CVE-2015-9462 1 Awesome Filterable Portfolio Project 1 Awesome Filterable Portfolio 2024-11-21 7.2 High
The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_category_page SQL injection via the cat_id parameter.
CVE-2015-9461 1 Brinidesigner 1 Awesome Filterable Portfolio 2024-11-21 7.2 High
The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_portfolio_item_page SQL injection via the item_id parameter.
CVE-2015-9460 1 Pinpoint 1 Pinpoint Booking System 2024-11-21 8.8 High
The booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL injection via the language parameter.
CVE-2015-9458 1 Seo Searchterms Tagging 2 Project 1 Seo Searchterms Tagging 2 2024-11-21 7.2 High
The searchterms-tagging-2 plugin through 1.535 for WordPress has SQL injection via the pk_stt2_db_get_popular_terms count parameter exploitable via CSRF.
CVE-2015-9454 1 Slidervilla 1 Smooth Slider 2024-11-21 8.8 High
The smooth-slider plugin before 2.7 for WordPress has SQL Injection via the wp-admin/admin.php?page=smooth-slider-admin current_slider_id parameter.
CVE-2015-9451 1 Sizmic 1 Plugmatter Optin Feature Box 2024-11-21 9.8 Critical
The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfb_mailchimp pmfb_tid parameter.
CVE-2015-9450 1 Sizmic 1 Plugmatter Optin Feature Box 2024-11-21 9.8 Critical
The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfb_cc pmfb_tid parameter.
CVE-2015-9449 1 Efficientscripts 1 Microblog Poster 2024-11-21 7.2 High
The microblog-poster plugin before 1.6.2 for WordPress has SQL Injection via the wp-admin/options-general.php?page=microblogposter.php account_id parameter.
CVE-2015-9448 1 Pressified 1 Sendpress 2024-11-21 8.8 High
The sendpress plugin before 1.2 for WordPress has SQL Injection via the wp-admin/admin.php?page=sp-queue listid parameter.
CVE-2015-9446 1 Unitegallery 1 Unite Gallery Lite 2024-11-21 8.8 High
The unite-gallery-lite plugin before 1.5 for WordPress has SQL injection via data[galleryID] to wp-admin/admin-ajax.php.
CVE-2015-9400 1 Typomedia 1 Wordpress Meta Robots 2024-11-21 8.8 High
The wordpress-meta-robots plugin through 2.1 for WordPress has wp-admin/post-new.php text SQL injection.
CVE-2015-9399 1 Trivetechnology 1 Wp-stats-dashboard 2024-11-21 7.2 High
The wp-stats-dashboard plugin through 2.9.4 for WordPress has admin/graph_trend.php type SQL injection.
CVE-2015-9398 1 Webmaster-source 1 Gocodes 2024-11-21 8.8 High
The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php gcid SQL injection.
CVE-2015-9395 1 Usersultra 1 Users Ultra Membership 2024-11-21 8.8 High
The users-ultra plugin before 1.5.64 for WordPress has SQL Injection via an ajax action.
CVE-2015-9353 1 Tri 1 Gigpress 2024-11-21 7.2 High
The gigpress plugin before 2.3.11 for WordPress has SQL injection in the admin area, a different vulnerability than CVE-2015-4066.