Export limit exceeded: 30000 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 51987 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 51,987

Export CSV
CVE-2015-9414

The wp-symposium plugin through 15.8.1 for WordPress has XSS via the wp-content/plugins/wp-symposium/get_album_item.php?size parameter.

CVSS 3.1 · 6.1 Medium EPSS 3.6% KEV · Not listed
Vendors
Wpsymposiumpro
Products
Wp-symposium
CVE-2015-9410

The Blubrry PowerPress Podcasting plugin 6.0.4 for WordPress has XSS via the tab parameter.

CVSS 3.1 · 5.4 Medium EPSS 1.2% KEV · Not listed
Vendors
Blubrry
Products
Powerpress
CVE-2015-9396

The auto-thickbox-plus plugin through 1.9 for WordPress has wp-content/plugins/auto-thickbox-plus/download.min.php?file= XSS.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Attosoft
Products
Auto Thickbox Plus
CVE-2015-9391

The yawpp plugin through 1.2.2 for WordPress has XSS via the field1 parameter.

CVSS 3.1 · 6.1 Medium EPSS 1.3% KEV · Not listed
Vendors
Ostenta
Products
Yawpp
CVE-2015-9378

iThemes Builder Theme Market before 5.1.27 for WordPress has XSS via add_query_arg() and remove_query_arg().

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Ithemes
Products
Builder Theme Market