Lucene search
+L

505 matches found

CNNVD
CNNVD
added 2025/03/15 12:00 a.m.14 views

WordPress plugin GiveWP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.5CVSS8.4AI score0.00609EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/03/15 12:00 a.m.9 views

WordPress plugin WP01 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.5CVSS8.6AI score0.00341EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/03/15 12:00 a.m.8 views

WordPress plugin WPSchoolPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.8CVSS8.6AI score0.00355EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/03/15 12:00 a.m.10 views

WordPress plugin WPSchoolPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.4CVSS8.6AI score0.00293EPSS
SaveExploits0References4
CVE
CVE
added 2025/03/14 11:15 a.m.61 views

CVE-2024-12810

CVE-2024-12810 applies to the JobCareer WordPress Theme (

8.8CVSS8.4AI score0.00328EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2025/03/14 6:15 a.m.7 views

CVE-2025-2289

The Zegen - Church WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX endpoints in all versions up to, and including, 1.1.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to impor...

8.8CVSS7.3AI score0.00275EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/14 12:00 a.m.8 views

WordPress plugin SoundRise Music 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS8.6AI score0.00349EPSS
SaveExploits0References4
OSV
OSV
added 2025/03/08 1:15 p.m.10 views

CVE-2024-10326

The RomethemeKit For Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveoptions and resetwidgets functions in all versions up to, and including, 1.5.3. This makes it possible for authenticated attackers, with...

4.3CVSS5.8AI score0.00347EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/03/08 12:00 a.m.12 views

WordPress plugin Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

5.4CVSS8.5AI score0.00229EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/03/08 12:00 a.m.11 views

WordPress plugin RomethemeKit For Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.5AI score0.00347EPSS
SaveExploits0References5
OSV
OSV
added 2025/03/07 2:15 a.m.8 views

CVE-2024-13526

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability checks on the exportsubmittionattendees function in all versions up to, and including, 4.0.7.3. This makes it possible for authenticated attackers,...

4.3CVSS5.8AI score0.00284EPSS
SaveExploits0References2
CVE
CVE
added 2025/03/05 9:21 a.m.66 views

CVE-2025-0954

CVE-2025-0954 affects the WordPress plugin “WP Online Contract”. The vulnerability is a missing capability check in json_import() and json_export() across all versions up to 5.1.4, allowing unauthenticated attackers to import/export the plugin’s settings. Public sources in the provided documents ...

6.5CVSS7AI score0.00252EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/04 12:00 a.m.10 views

WordPress plugin VW Storefront 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

4.3CVSS8.6AI score0.00286EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/03/01 12:00 a.m.7 views

WordPress plugin Booking Calendar and Notification 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A security vulnerability...

6.5CVSS8.1AI score0.00341EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/02/28 12:00 a.m.10 views

WordPress plugin Cardealer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.8CVSS8.1AI score0.00564EPSS
SaveExploits0References5
OSV
OSV
added 2025/02/19 9:15 a.m.7 views

CVE-2024-13364

The Raptive Ads plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the siteadsfilesreset and clsfilereset functions in all versions up to, and including, 3.6.3. This makes it possible for unauthenticated attackers to reset the ad and cls files...

5.3CVSS7.3AI score0.00457EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/02/11 12:00 a.m.12 views

PT-2025-6170 · WordPress · Zox News - Professional Wordpress News & Magazine Theme

Name of the Vulnerable Software and Affected Versions: Zox News - Professional WordPress News & Magazine Theme plugin for WordPress versions up to and including 3.17.0 Description: The vulnerability can lead to privilege escalation and denial of service conditions due to missing capability checks...

8.8CVSS9.5AI score0.00628EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
added 2025/02/06 4:22 a.m.16 views

CVE-2021-4355

The Welcart e-Commerce plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the downloadorderdetaillist, changeorderlist, and downloadmemberlist functions called via admininit hooks in versions up to, and including, 2.2.7. This makes it possible for...

7.5CVSS6.7AI score0.00806EPSS
SaveExploits1References1
NVD
NVD
added 2025/02/01 1:15 p.m.17 views

CVE-2024-13775

The WooCommerce Support Ticket System plugin for WordPress is vulnerable to unauthorized access and loss of data due to missing capability checks on the 'ajaxdeletemessage', 'ajaxgetcustomerspartiallist', and 'ajaxgetadminslist' functions in all versions up to, and including, 17.8. This makes it...

5.4CVSS0.00236EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/02/01 12:00 a.m.15 views

WordPress plugin RapidLoad 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

4.3CVSS8.6AI score0.00291EPSS
SaveExploits0References2
Rows per page
Query Builder