CVE Database
Synced from NVD, cross-referenced against CISA KEV and EPSS · ordered by last update
| CVE ID | Score | Description |
|---|---|---|
| 1mo ago | 6.5 | Subscriber Cross Site Scripting (XSS) in Contest Gallery <= 28.1.6 versions. |
| 1mo ago | 5.9 | Unauthenticated Bypass Vulnerability in Best Payments Plugin for WP <= 4.6.19 versions. |
| 1mo ago | 6.3 | Subscriber Broken Access Control in Classified Listing <= 5.3.9 versions. |
| 1mo ago | 6.5 | Unauthenticated Broken Access Control in Classified Listing <= 5.3.8 versions. |
| 1mo ago | 6.5 | Subscriber Broken Authentication in WP Full Stripe Free <= 8.4.1 versions. |
| 1mo ago | 6.5 | Subscriber Cross Site Scripting (XSS) in ProfilePress <= 4.16.13 versions. |
| 1mo ago | 5.3 | Unauthenticated Broken Authentication in Simple Cloudflare Turnstile <= 1.38.0 versions. |
| 1mo ago | 6.5 | Subscriber Sensitive Data Exposure in WPPizza <= 3.19.9 versions. |
| 1mo ago | 6.5 | Subscriber Broken Access Control in Amelia <= 2.2 versions. |
| 1mo ago | 6.5 | Subscriber Broken Access Control in myCred <= 3.0.3 versions. |
| 1mo ago | 6.5 | Subscriber Broken Access Control in Groundhogg < 4.4.1 versions. |
| 1mo ago | 6.3 | Subscriber Insecure Direct Object References (IDOR) in KiviCare <= 4.2.1 versions. |
| 1mo ago | 6.5 | Subscriber Sensitive Data Exposure in WP SMS <= 7.2.1 versions. |
| 1mo ago | 6.5 | Unauthenticated Broken Access Control in WPAdverts <= 2.3.0 versions. |
| 1mo ago | 6.5 | Subscriber Broken Access Control in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.9 versions. |
| 1mo ago | 6.5 | Unauthenticated Broken Access Control in Tutor LMS <= 3.9.7 versions. |
| 1mo ago | 6.4 | Subscriber Broken Access Control in Ultra Addons for WPForms <= 1.0.11 versions. |
| 1mo ago | 6.5 | Subscriber Broken Access Control in RepairBuddy <= 4.1132 versions. |
| 1mo ago | 6.5 | Subscriber Cross Site Scripting (XSS) in Shipment Tracker for Woocommerce <= 1.5.3.2 versions. |
| 1mo ago | 5.4 | Subscriber Arbitrary File Upload in WpStream < 4.11.2 versions. |
| 1mo ago | 6.5 | Unauthenticated Broken Access Control in Booking Activities <= 1.16.48.1 versions. |
| 1mo ago | 6.5 | Subscriber Broken Access Control in Motors < 1.4.107 versions. |
| 1mo ago | 6.5 | Subscriber Cross Site Scripting (XSS) in JupiterX Core <= 4.14.1 versions. |
| 1mo ago | 4.4 | Author Arbitrary File Download in Download Monitor <= 5.1.9 versions. |
| 1mo ago | 6.8 | Contributor Arbitrary File Deletion in Meta Box – WordPress Custom Fields Framework <= 5.11.1 versions. |
| 1mo ago | 6.3 | Unauthenticated Cross Site Scripting (XSS) in WP Google Review Slider <= 18.0 versions. |
| 1mo ago | 6.5 | Subscriber Broken Access Control in Rank Math SEO <= 1.0.271 versions. |
| 1mo ago | 5.3 | Unauthenticated Broken Access Control in Essential Addons for Elementor < 6.6.0 versions. |
| 1mo ago | 6.5 | Subscriber Broken Access Control in Bookify <= 1.1.1 versions. |
| 1mo ago | 6.3 | Subscriber Broken Access Control in bunny.net <= 2.3.6 versions. |