Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (20782 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2019-15645 1 Zoho 1 Salesiq 2024-11-21 N/A
The zoho-salesiq plugin before 1.0.9 for WordPress has CSRF.
CVE-2019-15644 1 Zoho 1 Salesiq 2024-11-21 N/A
The zoho-salesiq plugin before 1.0.9 for WordPress has stored XSS.
CVE-2019-15643 1 Etoilewebdesign 1 Ultimate Faq 2024-11-21 N/A
The ultimate-faqs plugin before 1.8.22 for WordPress has XSS.
CVE-2019-15331 1 Wpsupportplus 1 Wp Support Plus Responsive Ticket System 2024-11-21 N/A
The wp-support-plus-responsive-ticket-system plugin before 9.1.2 for WordPress has HTML injection.
CVE-2019-15330 1 Webp Express Project 1 Webp Express 2024-11-21 N/A
The webp-express plugin before 0.14.11 for WordPress has insufficient protection against arbitrary file reading.
CVE-2019-15329 1 Codection 1 Import Users From Csv With Meta 2024-11-21 N/A
The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF.
CVE-2019-15328 1 Codection 1 Import Users From Csv With Meta 2024-11-21 N/A
The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS.
CVE-2019-15327 1 Codection 1 Import Users From Csv With Meta 2024-11-21 N/A
The import-users-from-csv-with-meta plugin before 1.14.1.3 for WordPress has XSS via imported data.
CVE-2019-15326 1 Codection 1 Import Users From Csv With Meta 2024-11-21 N/A
The import-users-from-csv-with-meta plugin before 1.14.2.1 for WordPress has directory traversal.
CVE-2019-15324 1 Ad Inserter Project 1 Ad Inserter 2024-11-21 N/A
The ad-inserter plugin before 2.4.22 for WordPress has remote code execution.
CVE-2019-15323 1 Ad Inserter Project 1 Ad Inserter 2024-11-21 7.5 High
The ad-inserter plugin before 2.4.20 for WordPress has path traversal.
CVE-2019-15322 1 Wpmadeasy 1 Shortcode Factory 2024-11-21 N/A
The shortcode-factory plugin before 2.8 for WordPress has Local File Inclusion.
CVE-2019-15321 1 Optiontree Project 1 Optiontree 2024-11-21 N/A
The option-tree plugin before 2.7.3 for WordPress has Object Injection because serialized classes are mishandled.
CVE-2019-15320 1 Optiontree Project 1 Optiontree 2024-11-21 N/A
The option-tree plugin before 2.7.3 for WordPress has Object Injection because the + character is mishandled.
CVE-2019-15319 1 Optiontree Project 1 Optiontree 2024-11-21 N/A
The option-tree plugin before 2.7.0 for WordPress has Object Injection by leveraging a valid nonce.
CVE-2019-15318 1 Yikesinc 1 Easy Forms For Mailchimp 2024-11-21 N/A
The yikes-inc-easy-mailchimp-extender plugin before 6.5.3 for WordPress has code injection via the admin input field.
CVE-2019-15317 1 Givewp 1 Givewp 2024-11-21 N/A
The give plugin before 2.4.7 for WordPress has XSS via a donor name.
CVE-2019-15238 1 Cformsii Project 1 Cformsii 2024-11-21 N/A
The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field.
CVE-2019-15115 1 Profilepress 1 Loginwp 2024-11-21 N/A
The peters-login-redirect plugin before 2.9.2 for WordPress has CSRF.
CVE-2019-15114 1 Ncrafts 1 Formcraft 2024-11-21 N/A
The formcraft-form-builder plugin before 1.2.2 for WordPress has CSRF.