Export limit exceeded: 10003 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 21745 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 21,745

Export CSV
CVE-2015-9467

The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter.

CVSS 3.1 · 9.8 Critical EPSS 2.4% KEV · Not listed
Vendors
K-78
Products
Broken Link Manager
CVE-2015-9466

The wti-like-post plugin before 1.4.3 for WordPress has WtiLikePostProcessVote SQL injection via the HTTP_CLIENT_IP, HTTP_X_FORWARDED_FOR, HTTP_X_FORWARDED, HTTP_FORWARDED_FOR, or HTTP_FORWARDED variable.

CVSS 3.1 · 9.8 Critical EPSS 2.4% KEV · Not listed
Vendors
Webtechideas
Products
Wti Like Post
CVE-2015-9460

The booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL injection via the language parameter.

CVSS 3.1 · 8.8 High EPSS 1.9% KEV · Not listed
Vendors
Pinpoint
Products
Pinpoint Booking System
CVE-2015-9454

The smooth-slider plugin before 2.7 for WordPress has SQL Injection via the wp-admin/admin.php?page=smooth-slider-admin current_slider_id parameter.

CVSS 3.1 · 8.8 High EPSS 1.9% KEV · Not listed
Vendors
Slidervilla
Products
Smooth Slider
CVE-2015-9451

The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfb_mailchimp pmfb_tid parameter.

CVSS 3.1 · 9.8 Critical EPSS 2.4% KEV · Not listed
Vendors
Sizmic
Products
Plugmatter Optin Feature Box
CVE-2015-9450

The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfb_cc pmfb_tid parameter.

CVSS 3.1 · 9.8 Critical EPSS 2.2% KEV · Not listed
Vendors
Sizmic
Products
Plugmatter Optin Feature Box
CVE-2015-9449

The microblog-poster plugin before 1.6.2 for WordPress has SQL Injection via the wp-admin/options-general.php?page=microblogposter.php account_id parameter.

CVSS 3.1 · 7.2 High EPSS 1.9% KEV · Not listed
Vendors
Efficientscripts
Products
Microblog Poster
CVE-2015-9448

The sendpress plugin before 1.2 for WordPress has SQL Injection via the wp-admin/admin.php?page=sp-queue listid parameter.

CVSS 3.1 · 8.8 High EPSS 1.9% KEV · Not listed
Vendors
Pressified
Products
Sendpress
CVE-2015-9353

The gigpress plugin before 2.3.11 for WordPress has SQL injection in the admin area, a different vulnerability than CVE-2015-4066.

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed
Vendors
Tri
Products
Gigpress
CVE-2015-9344

The link-log plugin before 2.1 for WordPress has SQL injection.

CVSS 3.0 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Perafox
Products
Link Log