Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2022-45357

WordPress 1003 Mortgage Application Plugin <= 1.75 is vulnerable to CSV Injection

Improper Neutralization of Formula Elements in a CSV File vulnerability in Lenderd 1003 Mortgage Application.This issue affects 1003 Mortgage Application: from n/a through 1.75.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Lenderd
Products
1003 Mortgage Application
CVE-2024-32581

WordPress Mortgage Calculators WP plugin <= 1.56 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lenderd Mortgage Calculators WP allows Stored XSS.This issue affects Mortgage Calculators WP: from n/a through 1.56.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Lenderd Wordpress
Products
Mortgage Calculators Wp Wordpress
CVE-2025-22592

WordPress 1003 Mortgage Application plugin <= 1.87 - Broken Access Control vulnerability

Missing Authorization vulnerability in 8blocks 1003 Mortgage Application 1003-mortgage-application allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects 1003 Mortgage Application: from n/a through <= 1.87.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Lenderd Wordpress
Products
1003 Mortgage Application Wordpress
CVE-2025-22591

WordPress 1003 Mortgage Application plugin <= 1.87 - Broken Access Control vulnerability

Missing Authorization vulnerability in 8blocks 1003 Mortgage Application 1003-mortgage-application allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 1003 Mortgage Application: from n/a through <= 1.87.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Lenderd Wordpress
Products
1003 Mortgage Application Wordpress
CVE-2021-24904

Mortgage Calculators WP < 1.56 - Admin+ Stored Cross-Site Scripting

The Mortgage Calculators WP WordPress plugin before 1.56 does not implement any sanitisation on the color setting of the background of a calculator, which could allow high privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

CVSS 3.1 · 4.8 Medium EPSS 5.1% KEV · Not listed
Vendors
Lenderd
Products
Mortgage Calculators Wp