Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (20782 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2019-15113 1 Codeermeneer 1 Companion Sitemap Generator 2024-11-21 N/A
The companion-sitemap-generator plugin before 3.7.0 for WordPress has CSRF.
CVE-2019-15112 1 Wp-slimstat 1 Slimstat Analytics 2024-11-21 6.1 Medium
The wp-slimstat plugin before 4.8.1 for WordPress has XSS.
CVE-2019-15111 1 Wp Front End Profile Project 1 Wp Front End Profile 2024-11-21 N/A
The wp-front-end-profile plugin before 0.2.2 for WordPress has a privilege escalation issue.
CVE-2019-15110 1 Wp Front End Profile Project 1 Wp Front End Profile 2024-11-21 N/A
The wp-front-end-profile plugin before 0.2.2 for WordPress has XSS.
CVE-2019-15109 1 Stellarwp 1 The Events Calendar 2024-11-21 N/A
The the-events-calendar plugin before 4.8.2 for WordPress has XSS via the tribe_paged URL parameter.
CVE-2019-15092 1 Webtoffee 1 Import Export Wordpress Users 2024-11-21 N/A
The webtoffee "WordPress Users & WooCommerce Customers Import Export" plugin 1.3.0 for WordPress allows CSV injection in the user_url, display_name, first_name, and last_name columns in an exported CSV file created by the WF_CustomerImpExpCsv_Exporter class.
CVE-2019-15082 1 Yofla 1 360 Product Rotation 2024-11-21 N/A
The 360-product-rotation plugin before 1.4.8 for WordPress has reflected XSS.
CVE-2019-15025 1 Ninjaforms 1 Ninjaforms 2024-11-21 N/A
The ninja-forms plugin before 3.3.21.2 for WordPress has SQL injection in the search filter on the submissions page.
CVE-2019-14979 1 Woocommerce 1 Paypal Checkout Payment Gateway 2024-11-21 N/A
cgi-bin/webscr?cmd=_cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.17 for WordPress allows Parameter Tampering in an amount parameter (such as amount_1), as demonstrated by purchasing an item for lower than the intended price. NOTE: The plugin author states it is true that the amount can be manipulated in the PayPal payment flow. However, the amount is validated against the WooCommerce order total before completing the order, and if it doesn’t match then the order will be left in an “On Hold” state
CVE-2019-14978 1 Woocommerce 1 Payu India Payment Gateway 2024-11-21 N/A
/payu/icpcheckout/ in the WooCommerce PayU India Payment Gateway plugin 2.1.1 for WordPress allows Parameter Tampering in the purchaseQuantity=1 parameter, as demonstrated by purchasing an item for lower than the intended price.
CVE-2019-14950 1 3cx 1 Live Chat 2024-11-21 N/A
The wp-live-chat-support plugin before 8.0.27 for WordPress has XSS via the GDPR page.
CVE-2019-14949 1 Wpseeds 1 Wp Database Backup 2024-11-21 6.1 Medium
The wp-database-backup plugin before 5.1.2 for WordPress has XSS.
CVE-2019-14948 1 Najeebmedia 1 Ppom For Woocommerce 2024-11-21 5.4 Medium
The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure.
CVE-2019-14947 1 Ultimatemember 1 Ultimate Member 2024-11-21 N/A
The ultimate-member plugin before 2.0.52 for WordPress has XSS during an account upgrade.
CVE-2019-14946 1 Ultimatemember 1 Ultimate Member 2024-11-21 N/A
The ultimate-member plugin before 2.0.52 for WordPress has XSS related to UM Roles create and edit operations.
CVE-2019-14945 1 Ultimatemember 1 Ultimate Member 2024-11-21 N/A
The ultimate-member plugin before 2.0.54 for WordPress has XSS.
CVE-2019-14936 1 Easyappointments 1 Easy\!appointments 2024-11-21 5.3 Medium
Easy!Appointments 1.3.2 plugin for WordPress allows Sensitive Information Disclosure (Username and Password Hash).
CVE-2019-14801 1 Foliovision 1 Fv Flowplayer Video Player 2024-11-21 N/A
The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows email subscription SQL injection.
CVE-2019-14800 1 Foliovision 1 Fv Flowplayer Video Player 2024-11-21 N/A
The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows guests to obtain the email subscription list in CSV format via the wp-admin/admin-post.php?page=fvplayer&fv-email-export=1 URI.
CVE-2019-14799 1 Foliovision 1 Fv Flowplayer Video Player 2024-11-21 6.1 Medium
The FV Flowplayer Video Player plugin before 7.3.14.727 for WordPress allows email subscription XSS.