Export limit exceeded: 425880 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 10090 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425880 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 11140 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 11,140

Export CSV
CVE-2022-33198

WordPress Accordions plugin <= 2.0.2 - Unauthenticated WordPress Options Change vulnerability

Unauthenticated WordPress Options Change vulnerability in Biplob Adhikari's Accordions plugin <= 2.0.2 at WordPress.

CVSS 3.1 · 9.8 Critical EPSS 3.3% KEV · Not listed
Vendors
Oxilab
Products
Accordions
CVE-2022-34487

WordPress Shortcode Addons plugin <= 3.0.2 - Unauthenticated Arbitrary Option Update vulnerability

Unauthenticated Arbitrary Option Update vulnerability in biplob018's Shortcode Addons plugin <= 3.0.2 at WordPress.

CVSS 3.1 · 9.8 Critical EPSS 3.3% KEV · Not listed
Vendors
Oxilab
Products
Shortcode Addons
CVE-2022-27235

WordPress Social Share Buttons by Supsystic plugin <= 2.2.3 - Multiple Broken Access Control vulnerabilities

Multiple Broken Access Control vulnerabilities in Social Share Buttons by Supsystic plugin <= 2.2.3 at WordPress.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Supsystic
Products
Social Share Buttons
CVE-2022-33969

WordPress Flipbox plugin <= 2.6.0 - Authenticated WordPress Options Change vulnerability

Authenticated WordPress Options Change vulnerability in Biplob Adhikari's Flipbox plugin <= 2.6.0 at WordPress.

CVSS 3.1 · 7.2 High EPSS 1.3% KEV · Not listed
Vendors
Oxilab
Products
Flipbox
CVE-2022-33970

WordPress Shortcode Addons plugin <= 3.1.2 - Authenticated WordPress Options Change vulnerability

Authenticated WordPress Options Change vulnerability in Biplob018 Shortcode Addons plugin <= 3.1.2 at WordPress.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Oxilab
Products
Shortcode Addons
CVE-2022-25649

WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Multiple Improper Access Control vulnerabilities

Multiple Improper Access Control vulnerabilities in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress.

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed
Vendors
Storeapps
Products
Affiliate For Woocommerce
CVE-2022-34149

WordPress WP OAuth Server plugin <= 3.0.4 - Authentication Bypass vulnerability

Authentication Bypass vulnerability in miniOrange WP OAuth Server plugin <= 3.0.4 at WordPress.

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed
Vendors
Miniorange
Products
Wp Oauth Server
CVE-2022-35242

WordPress THE Leads Management System: 59sec LITE plugin <= 3.4.1 - Unauthenticated plugin settings change vulnerability

Unauthenticated plugin settings change vulnerability in 59sec THE Leads Management System: 59sec LITE plugin <= 3.4.1 at WordPress.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
59sec
Products
The Leads Management System\
CVE-2022-36425

WordPress Beaver Builder plugin <= 2.5.4.3 - Broken Access Control vulnerability

Broken Access Control vulnerability in Beaver Builder plugin <= 2.5.4.3 at WordPress.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Fastlinemedia
Products
Beaver Builder
CVE-2022-36427

WordPress About Rentals plugin <= 1.5 - Missing Access Control vulnerability

Missing Access Control vulnerability in About Rentals. Inc. About Rentals plugin <= 1.5 at WordPress.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
About-rentals Project
Products
About-rentals
CVE-2022-38070

WordPress Pop-up plugin <= 1.1.5 - Privilege Escalation vulnerability

Privilege Escalation (subscriber+) vulnerability in Pop-up plugin <= 1.1.5 at WordPress.

CVSS 3.1 · 5.4 Medium EPSS 1.0% KEV · Not listed
Vendors
Mypopups
Products
Pop-up
CVE-2022-38058

WordPress WP Shamsi plugin <= 4.1.1 - Authenticated Plugin Setting change vulnerability

Authenticated (subscriber+) Plugin Setting change vulnerability in WP Shamsi plugin <= 4.1.1 at WordPress.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Wpvar
Products
Wp Shamsi
CVE-2022-36793

WordPress WP Shop plugin <= 3.9.6 - Unauthenticated Plugin Settings Change & Data Deletion vulnerabilities

Unauthenticated Plugin Settings Change & Data Deletion vulnerabilities in WP Shop plugin <= 3.9.6 at WordPress.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Wp-shop
Products
Wp Shop
CVE-2022-38067

WordPress Event Calendar – Calendar plugin <= 1.4.6 - Unauthenticated Event Deletion vulnerability

Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin <= 1.4.6 at WordPress.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Total-soft
Products
Event Calendar
CVE-2022-38135

WordPress Photospace Gallery plugin <= 2.3.5 - Broken Access Control vulnerability

Broken Access Control vulnerability in Dean Oakley's Photospace Gallery plugin <= 2.3.5 at WordPress allows users with subscriber or higher role to change plugin settings.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Photospace Gallery Project
Products
Photospace Gallery
CVE-2022-35238

WordPress Awesome Filterable Portfolio plugin <= 1.9.7 - Unauthenticated Plugin Settings Change vulnerability

Unauthenticated Plugin Settings Change vulnerability in Awesome Filterable Portfolio plugin <= 1.9.7 at WordPress.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Brinidesigner
Products
Awesome Filterable Portfolio
CVE-2022-38134

WordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Authenticated Broken Access Control vulnerability

Authenticated (subscriber+) Broken Access Control vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at WordPress.

CVSS 3.1 · 4.3 Medium EPSS 1.0% KEV · Not listed
Vendors
Cusrev
Products
Customer Reviews For Woocommerce
CVE-2022-38104

WordPress Accordions plugin <= 2.0.3 - Auth. WordPress Options Change vulnerability

Auth. WordPress Options Change (siteurl, users_can_register, default_role, admin_email and new_admin_email) vulnerability in Biplob Adhikari's Accordions – Multiple Accordions or FAQs Builder plugin (versions <= 2.0.3 on WordPress.

CVSS 3.1 · 7.2 High EPSS 1.3% KEV · Not listed
Vendors
Oxilab
Products
Accordions
CVE-2022-41978

WordPress Zoho CRM Lead Magnet plugin <= 1.7.5.8 - Auth. Arbitrary Options Update vulnerability

Auth. (subscriber+) Arbitrary Options Update vulnerability in Zoho CRM Lead Magnet plugin <= 1.7.5.8 on WordPress.

CVSS 3.1 · 8.8 High EPSS 2.7% KEV · Not listed
Vendors
Zohocorp
Products
Zoho Crm Lead Magnet