Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 111

Export CSV
CVE-2016-10706

The Jetpack plugin before 4.0.3 for WordPress has XSS via a crafted Vimeo link.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Automattic
Products
Jetpack
CVE-2016-10705

The Jetpack plugin before 4.0.4 for WordPress has XSS via the Likes module.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Automattic
Products
Jetpack
CVE-2015-9359

The Jetpack plugin before 3.4.3 for WordPress has XSS via add_query_arg() and remove_query_arg().

CVSS 3.0 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Automattic
Products
Jetpack
CVE-2013-2011

WordPress W3 Super Cache Plugin before 1.3.2 contains a PHP code-execution vulnerability which could allow remote attackers to inject arbitrary code. This issue exists because of an incomplete fix for CVE-2013-2009.

CVSS 3.1 · 8.8 High EPSS 7.1% KEV · Not listed
Vendors
Automattic
Products
W3 Super Cache
CVE-2024-43949

WordPress GHActivity plugin <= 2.0.0-alpha - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Automattic GHActivity allows Stored XSS.This issue affects GHActivity: from n/a through 2.0.0-alpha.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Automattic
Products
Ghacitivity Ghactivity