CVE Database
Synced from NVD, cross-referenced against CISA KEV and EPSS · ordered by last update
| CVE ID | Score | Description |
|---|---|---|
| 5d ago | 6.5 | Contributor Cross Site Scripting (XSS) in BetterDocs <= 4.6.2 versions. |
| 5d ago | 6.5 | Contributor Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.0 versions. |
| 5d ago | 5.4 | Unauthenticated Server Side Request Forgery (SSRF) in AffiliateX <= 2.3.5 versions. |
| 5d ago | 5.9 | Shop manager Cross Site Scripting (XSS) in Abandoned Cart Lite for WooCommerce <= 6.8.0 versions. |
| 5d ago | 6.8 | Editor Arbitrary File Deletion in Kirki <= 6.0.13 versions. |
| 5d ago | 6.5 | Unauthenticated Broken Access Control in Thrive Leads Version <= 10.9.2 versions. |
| 5d ago | 6.5 | Subscriber Sensitive Data Exposure in ЮKassa для WooCommerce <= 2.16.1 versions. |
| 5d ago | 6.5 | Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg <= 1.5.1 versions. |
| 5d ago | 6.5 | Subscriber Broken Access Control in FundEngine <= 1.7.8 versions. |
| 5d ago | 6.5 | Subscriber Cross Site Scripting (XSS) in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg <= 1.5.1 versions. |
| 5d ago | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Booking Calendar <= 11.4.2 versions. |
| 5d ago | 6.5 | Unauthenticated Broken Access Control in Events Made Easy <= 3.1.3 versions. |
| 5d ago | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Dynamic Pricing With Discount Rules for WooCommerce <= 4.5.11 versions. |
| 5d ago | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Product Feed Manager <= 7.6.1 versions. |
| 5d ago | 7.2 | Unauthenticated Server Side Request Forgery (SSRF) in 3D Flipbook PDF Viewer & Embedder <= 1.4.2 versions. |
| 5d ago | 8.5 | Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions. |
| 5d ago | 9.3 | Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions. |
| 5d ago | 9.3 | Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions. |
| 5d ago | 7.5 | Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking <= 1.0.0 versions. |
| 5d ago | 7.4 | Subscriber Broken Authentication in Hide My WP Ghost <= 7.0.06 versions. |
| 5d ago | 7.5 | Subscriber Insecure Direct Object References (IDOR) in Paid Member Subscriptions <= 3.0.7 versions. |
| 5d ago | 9.3 | Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions. |
| 5d ago | 7.6 | Administrator SQL Injection in Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.10.22 versions. |
| 5d ago | 7.5 | Unauthenticated Broken Access Control in CoCart – Headless ecommerce <= 4.8.4 versions. |
| 5d ago | 7.3 | Unauthenticated Broken Access Control in Thrive Product Manager <= 10.9.2 versions. |
| 5d ago | 7.5 | Unauthenticated Broken Access Control in Post My CF7 Form <= 6.2.0 versions. |
| 5d ago | 9.3 | Unauthenticated SQL Injection in Relevanssi Light <= 1.2.2 versions. |
| 5d ago | 7.5 | Unauthenticated Other Vulnerability Type in Booking and Rental Manager <= 2.7.2 versions. |
| 5d ago | 7.5 | Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks <= 2.10.0 versions. |
| 5d ago | 7.5 | Unauthenticated Broken Access Control in Stripe For WooCommerce <= 4.0.7 versions. |