Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 11,140

Export CSV
CVE-2022-33198

WordPress Accordions plugin <= 2.0.2 - Unauthenticated WordPress Options Change vulnerability

Unauthenticated WordPress Options Change vulnerability in Biplob Adhikari's Accordions plugin <= 2.0.2 at WordPress.

CVSS 3.1 · 9.8 Critical EPSS 3.3% KEV · Not listed
Vendors
Oxilab
Products
Accordions
CVE-2022-34487

WordPress Shortcode Addons plugin <= 3.0.2 - Unauthenticated Arbitrary Option Update vulnerability

Unauthenticated Arbitrary Option Update vulnerability in biplob018's Shortcode Addons plugin <= 3.0.2 at WordPress.

CVSS 3.1 · 9.8 Critical EPSS 3.3% KEV · Not listed
Vendors
Oxilab
Products
Shortcode Addons
CVE-2022-27235

WordPress Social Share Buttons by Supsystic plugin <= 2.2.3 - Multiple Broken Access Control vulnerabilities

Multiple Broken Access Control vulnerabilities in Social Share Buttons by Supsystic plugin <= 2.2.3 at WordPress.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Supsystic
Products
Social Share Buttons
CVE-2022-33969

WordPress Flipbox plugin <= 2.6.0 - Authenticated WordPress Options Change vulnerability

Authenticated WordPress Options Change vulnerability in Biplob Adhikari's Flipbox plugin <= 2.6.0 at WordPress.

CVSS 3.1 · 7.2 High EPSS 1.3% KEV · Not listed
Vendors
Oxilab
Products
Flipbox
CVE-2022-33970

WordPress Shortcode Addons plugin <= 3.1.2 - Authenticated WordPress Options Change vulnerability

Authenticated WordPress Options Change vulnerability in Biplob018 Shortcode Addons plugin <= 3.1.2 at WordPress.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Oxilab
Products
Shortcode Addons
CVE-2022-25649

WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Multiple Improper Access Control vulnerabilities

Multiple Improper Access Control vulnerabilities in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress.

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed
Vendors
Storeapps
Products
Affiliate For Woocommerce
CVE-2022-34149

WordPress WP OAuth Server plugin <= 3.0.4 - Authentication Bypass vulnerability

Authentication Bypass vulnerability in miniOrange WP OAuth Server plugin <= 3.0.4 at WordPress.

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed
Vendors
Miniorange
Products
Wp Oauth Server
CVE-2022-35242

WordPress THE Leads Management System: 59sec LITE plugin <= 3.4.1 - Unauthenticated plugin settings change vulnerability

Unauthenticated plugin settings change vulnerability in 59sec THE Leads Management System: 59sec LITE plugin <= 3.4.1 at WordPress.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
59sec
Products
The Leads Management System\
CVE-2022-36425

WordPress Beaver Builder plugin <= 2.5.4.3 - Broken Access Control vulnerability

Broken Access Control vulnerability in Beaver Builder plugin <= 2.5.4.3 at WordPress.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Fastlinemedia
Products
Beaver Builder
CVE-2022-36427

WordPress About Rentals plugin <= 1.5 - Missing Access Control vulnerability

Missing Access Control vulnerability in About Rentals. Inc. About Rentals plugin <= 1.5 at WordPress.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
About-rentals Project
Products
About-rentals
CVE-2022-38070

WordPress Pop-up plugin <= 1.1.5 - Privilege Escalation vulnerability

Privilege Escalation (subscriber+) vulnerability in Pop-up plugin <= 1.1.5 at WordPress.

CVSS 3.1 · 5.4 Medium EPSS 1.0% KEV · Not listed
Vendors
Mypopups
Products
Pop-up
CVE-2022-38058

WordPress WP Shamsi plugin <= 4.1.1 - Authenticated Plugin Setting change vulnerability

Authenticated (subscriber+) Plugin Setting change vulnerability in WP Shamsi plugin <= 4.1.1 at WordPress.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Wpvar
Products
Wp Shamsi
CVE-2022-36793

WordPress WP Shop plugin <= 3.9.6 - Unauthenticated Plugin Settings Change & Data Deletion vulnerabilities

Unauthenticated Plugin Settings Change & Data Deletion vulnerabilities in WP Shop plugin <= 3.9.6 at WordPress.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Wp-shop
Products
Wp Shop
CVE-2022-38067

WordPress Event Calendar – Calendar plugin <= 1.4.6 - Unauthenticated Event Deletion vulnerability

Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin <= 1.4.6 at WordPress.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Total-soft
Products
Event Calendar
CVE-2022-38135

WordPress Photospace Gallery plugin <= 2.3.5 - Broken Access Control vulnerability

Broken Access Control vulnerability in Dean Oakley's Photospace Gallery plugin <= 2.3.5 at WordPress allows users with subscriber or higher role to change plugin settings.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Photospace Gallery Project
Products
Photospace Gallery
CVE-2022-35238

WordPress Awesome Filterable Portfolio plugin <= 1.9.7 - Unauthenticated Plugin Settings Change vulnerability

Unauthenticated Plugin Settings Change vulnerability in Awesome Filterable Portfolio plugin <= 1.9.7 at WordPress.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Brinidesigner
Products
Awesome Filterable Portfolio
CVE-2022-38134

WordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Authenticated Broken Access Control vulnerability

Authenticated (subscriber+) Broken Access Control vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at WordPress.

CVSS 3.1 · 4.3 Medium EPSS 1.0% KEV · Not listed
Vendors
Cusrev
Products
Customer Reviews For Woocommerce
CVE-2022-38104

WordPress Accordions plugin <= 2.0.3 - Auth. WordPress Options Change vulnerability

Auth. WordPress Options Change (siteurl, users_can_register, default_role, admin_email and new_admin_email) vulnerability in Biplob Adhikari's Accordions – Multiple Accordions or FAQs Builder plugin (versions <= 2.0.3 on WordPress.

CVSS 3.1 · 7.2 High EPSS 1.3% KEV · Not listed
Vendors
Oxilab
Products
Accordions
CVE-2022-41978

WordPress Zoho CRM Lead Magnet plugin <= 1.7.5.8 - Auth. Arbitrary Options Update vulnerability

Auth. (subscriber+) Arbitrary Options Update vulnerability in Zoho CRM Lead Magnet plugin <= 1.7.5.8 on WordPress.

CVSS 3.1 · 8.8 High EPSS 2.7% KEV · Not listed
Vendors
Zohocorp
Products
Zoho Crm Lead Magnet