CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

23 matches found

NVD•added 2026/10/20 9:17 p.m.•11 views

CVE-2012-20003

Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the unsanitized 'key' parameter in iframe.php. Attackers can craft GET requests to /wp-content/plugins/custom-tables/iframe.php...

6.1CVSS0.00269EPSS

SaveExploits0References6

Cvelist•added 2026/10/20 8:31 p.m.•31 views

CVE-2012-20003 Custom Tables WordPress Plugin < 3.4.6 Reflected XSS via iframe.php

6.1CVSS0.00269EPSS

SaveExploits0References6

Vulnrichment•added 2026/10/20 8:31 p.m.•7 views

CVE-2012-20003 Custom Tables WordPress Plugin < 3.4.6 Reflected XSS via iframe.php

6.1CVSS5.9AI score0.00269EPSS

SaveExploits0References6

EUVD•added 2026/10/20 8:31 p.m.•13 views

EUVD-2012-6611

6.1CVSS5.9AI score0.00269EPSS

SaveExploits0References6

CVE•added 2026/10/20 8:31 p.m.•31 views

CVE-2012-20003

The Custom Tables plugin for WordPress (versions before 3.4.6 ) is vulnerable to a reflected cross-site scripting (XSS) vulnerability. The root cause is the lack of sanitization on the 'key' parameter within the iframe.php component. An unauthenticated attacker can craft a GET request to /wp-cont...

6.1CVSS5.9AI score0.00269EPSS

SaveIn wildExploits0References6

VulnCheck KEV•added 2026/10/20 12:00 a.m.•10 views

VulnCheck KEV: CVE-2012-20003

6.1CVSS5.9AI score0.00269EPSS

SaveIn wildExploits0References2

Rapid7 Vulnerability Database (full)•added 2026/10/20 12:00 a.m.•3 views

CVE-2012-20003: Improper Neutralization of Input During Web Page Generation

6.1CVSS5.9AI score0.00269EPSS

SaveExploits0References2

Positive Technologies•added 2026/10/20 12:00 a.m.•12 views

PT-2026-118672

Name of the Vulnerable Software and Affected Versions Custom Tables plugin for WordPress versions prior to 3.4.6 Description A reflected cross-site scripting issue exists that allows unauthenticated attackers to inject scripts into victims' browsers to steal cookies. This occurs via the unsanitiz...

6.1CVSS5.6AI score0.00269EPSS

SaveExploits0References8

CNNVD•added 2026/10/19 4:00 p.m.•8 views

WordPress Custom Tables: Cross-site Scripting Vulnerabilities

Versions of WordPress Custom Tables prior to 3.4.6 contained a cross-site scripting vulnerability. This vulnerability stemmed from the uncleaned key parameter in the iframe.php file. It could lead to reflective XSS attacks. Unauthenticated attackers could construct GET requests to execute scripts...

6.1CVSS5.8AI score0.00269EPSS

SaveExploits0References6

CVE•added 2026/08/29 6:00 a.m.•53 views

CVE-2026-16061

The Rest Routes WordPress plugin (versions prior to 5.5.6 ) is vulnerable to an unauthenticated SQL injection attack. The root cause is the lack of proper sanitization and validation of a value taken from the URL of a public REST route before it is used in a SQL query. This specific vulnerability...

8.6CVSS5.9AI score0.00445EPSS

SaveExploits0References1

Vulnrichment•added 2026/08/29 6:00 a.m.•23 views

CVE-2026-16061 Rest Routes <= 5.5.5 - Unauthenticated SQLi via custom-tables/tables/{table_name}

The Rest Routes WordPress plugin through 5.5.5 does not sanitize and validate a value taken from the URL of one of its public REST routes before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks...

5.9AI score0.00445EPSS

SaveExploits0References1

KittySploit•added 2026/07/28 11:27 a.m.•8 views

WordPress Custom Tables 3.4.4 - Cross-Site Scripting Detection

WordPress Custom Tables 3.4.4 plugin contains a cross-site scripting vulnerability via the key parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Custom Tables 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

5.7AI score

SaveExploits0References3

RedhatCVE•added 2026/01/21 3:27 p.m.•31 views

CVE-2025-15043

The The Events Calendar plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'startmigration', 'cancelmigration', and 'revertmigration' functions in all versions up to, and including, 6.15.13. This makes it possible for authenticated attackers, with...

5.4CVSS5.5AI score0.00219EPSS

SaveExploits0References1

NVD•added 2026/01/20 3:16 p.m.•23 views

CVE-2025-15043

5.4CVSS0.00219EPSS

SaveExploits0References2

attackerkb•added 2026/01/20 2:26 p.m.•13 views

CVE-2025-15043

5.4CVSS5.3AI score0.00219EPSS

SaveExploits0References3

Cvelist•added 2026/01/20 2:26 p.m.•48 views

CVE-2025-15043 The Events Calendar <= 6.15.13 - Missing Authorization to Authenticated (Subscriber+) Data Migration Control

5.4CVSS0.00219EPSS

SaveExploits0References2

Vulnrichment•added 2026/01/20 2:26 p.m.•31 views

CVE-2025-15043 The Events Calendar <= 6.15.13 - Missing Authorization to Authenticated (Subscriber+) Data Migration Control

5.4CVSS5.8AI score0.00219EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2026/01/20 12:00 a.m.•8 views

CVE-2025-15043: Missing Authorization

5.4CVSS5.8AI score0.00219EPSS

SaveExploits0References1

WPVulnDB•added 2014/08/01 10:59 a.m.•13 views

Custom Tables 3.4.4 - iframe.php key Parameter XSS

The custom-tables WordPress plugin was affected by an iframe.php key Parameter XSS security vulnerability...

2.2AI score

SaveExploits0Affected Software1

zdt•added 2012/07/06 12:00 a.m.•28 views

Wordpress Plugins - custom tables XSS Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

7.1AI score

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by