Skip to contentNotfound vulnerabilities
Newest
- notfound essential wp real estateEssential WP Real Estate <= 1.1.3 - Missing Authorization to Arbitrary Post/Page DeletionCVE-2024-133185.3 Medium
- fs-code fs posterWordPress FS Poster plugin <= 6.5.8 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-372374.3 Medium
- moonheart g web pro store locatorG Web Pro Store Locator <= 2.1 - Reflected Cross-Site ScriptingCVE-2024-116826.1 Medium
- chenyenming ui slider filter by priceWordPress Ui Slider Filter By Price plugin <= 1.1 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-544195.4 Medium
- codehandling youtube video gridWordPress Youtube Video Grid plugin <= 1.9 - CSRF to Settings Change vulnerabilityCVE-2024-544086.5 Medium
- genetech pie register premium, genetechsolutions pie register +1 moreWordPress Pie Register Premium plugin < 3.8.3.3 - Broken Access Control vulnerabilityCVE-2024-523915.3 Medium
- genetech pie register premium, genetechsolutions pie register +1 moreWordPress Pie Register Premium plugin < 3.8.3.3 - Arbitrary File Upload vulnerabilityCVE-2024-5382210.0 Critical
- notfound galleryGallery <= 1.3 - Authenticated (Contributor+) PHP Object InjectionCVE-2024-115018.8 High
- genetech pie register premiumWordPress Pie Register Premium plugin < 3.8.3.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-538217.1 High
- homejunction spatialmatch idxWordPress SpatialMatch IDX plugin <= 3.0.9 - CSRF to Stored XSS vulnerabilityCVE-2024-537817.1 High
- cmsaccount photo video storeWordPress Photo Video Store plugin <= 21.07 - CSRF to Cross Site Scripting (XSS) vulnerabilityCVE-2024-537827.1 High
- notfound wp find your nearestWordPress WP Find Your Nearest plugin <= 0.3.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-537576.5 Medium
- notfound pixobe cartography, pixobe cartography +1 moreWordPress Pixobe Cartography plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-537676.5 Medium
- mark o'donnell team rostersWordPress Team Rosters plugin <= 4.8.2 - PHP Object Injection vulnerabilityCVE-2024-524399.8 Critical
- notfound storelyWordPress Storely theme <= 14.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-517946.5 Medium
- axelkeller gpx viewer, devfarm wp gpx maps +1 moreGPX Viewer <= 2.2.9 - Authenticated (Subscriber+) Arbitrary File CreationCVE-2024-10629Public exploit8.8 High
- andsonsdesign wp-contest, notfound wp contest +1 moreWordPress WP Contest plugin <= 1.0.0 - SQL Injection vulnerabilityCVE-2024-518378.5 High
- micahblu rsvp meWordPress RSVP ME plugin <= 1.9.9 - SQL Injection vulnerabilityCVE-2024-505448.5 High
- notfound easy galleryWordPress Easy Gallery plugin <= 1.4 - SQL Injection vulnerabilityCVE-2024-515708.5 High
- helloprintWordPress Helloprint plugin <= 2.0.4 - Arbitrary File Upload vulnerabilityCVE-2024-5052510.0 Critical
- micahblu rsvp me, micah blu rvsp me +1 moreWordPress RSVP ME plugin <= 1.9.9 - SQL Injection vulnerabilityCVE-2024-50491Public exploit9.3 Critical
- danish ali malik top bar – popups – by wpoptin, sajidjaved top bar-popups-by wpoptin +1 moreWordPress WPOptin plugin <= 2.0.1 - Local File Inclusion vulnerabilityCVE-2024-476457.5 High
- notfound bridge coreBridge Core <= 3.3 - Missing Authorization to Authenticated (Subscriber+) Demo ImportCVE-2024-98605.4 Medium
- notfound bridge coreBridge Core <= 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-92926.4 Medium
- notfound mobile, rocketchat rocket.chat +1 moreThe E2EE password entropy generated by Rocket.Chat Mobile prior to version 4.5.1 is insufficient,...CVE-2024-420276.7 Medium
- notfound galleryImproper access control vulnerability in Samsung Gallery prior to version 14.5.04.4 allows...CVE-2024-208274.6 Medium
- foxskav easy betWordPress Easy Bet Plugin <= 1.0.2 is vulnerable to SQL InjectionCVE-2023-310925.5 Medium
- notfound bridge coreWordPress Bridge Core Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)CVE-2023-403337.1 High
- notfound galleryImproper authentication in LocalProvier of Gallery prior to version 14.5.01.2 allows attacker to...CVE-2023-307255.1 Medium
- notfound galleryImproper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows...CVE-2023-307244.0 Medium
- apptivo business site crm, notfound apptivo business site crm +1 moreWordPress Apptivo Business Site CRM Plugin <= 3.0.12 is vulnerable to Cross Site Scripting (XSS)CVE-2022-445824.8 Medium
- ad inserter project inserter, notfound ad inserter pro, spacetime ad inserter – ad manager & adsense ads +2 moreAd Inserter < 2.7.12 - Reflected Cross-Site ScriptingCVE-2022-09016.1 Medium
- ad inserter pro project inserter pro, ad inserter project inserter, notfound ad inserter pro +1 more +3 moreAd Inserter < 2.7.10 - Reflected Cross-Site ScriptingCVE-2022-02886.1 Medium
- catch plugins generate child theme, catch themes demo import themes demo import, catchplugins catch scroll progress bar +15 more +17 moreMultiple Plugins from CatchThemes - Unauthorised Plugin's Setting ChangeCVE-2021-247525.7 Medium
- notfound galleryIntent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute...CVE-2021-253794.0 Medium
- gallery plugin authors galleryGallery Plugin1.4 for WordPress has a Remote File Include VulnerabilityCVE-2012-49199.8 Critical
- modx revolution, modx revolution gallery +1 moreMODX Revolution Gallery 1.7.0 is affected by: CWE-434: Unrestricted Upload of File with Dangerous...CVE-2019-10101237.5 High
- bestweblayout portfolio, bestwebsoft captcha, car rental +51 more +53 moreCross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version...CVE-2017-21716.1 Medium