CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1713 matches found

NVD•added 2023/09/27 3:19 p.m.•30 views

CVE-2023-4423

The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 3.1.37.1 due to insufficient input sanitization and output escaping. This makes it possible f...

4.8CVSS4.4AI score0.00596EPSS

SaveExploits1References4

Prion•added 2023/09/27 3:19 p.m.•30 views

Cross site scripting

4.3CVSS4.8AI score0.00596EPSS

SaveExploits1References4Affected Software1

Vulnrichment•added 2023/09/27 3:03 a.m.•12 views

CVE-2023-4423 WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.37.1 - Authenticated (Admin+) Stored Cross-Site Scripting

4.4CVSS6.5AI score0.00596EPSS

SaveExploits1References4

Cvelist•added 2023/09/27 3:03 a.m.•40 views

CVE-2023-4423 WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.37.1 - Authenticated (Admin+) Stored Cross-Site Scripting

4.4CVSS4.9AI score0.00596EPSS

SaveExploits1References4

OSV•added 2023/09/27 3:03 a.m.•25 views

CVE-2023-4423 WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.37.1 - Authenticated (Admin+) Stored Cross-Site Scripting

4.4CVSS6.5AI score

SaveExploits0References6

Positive Technologies•added 2023/09/27 12:00 a.m.•22 views

PT-2023-29154 · WordPress · Wp Event Manager

Name of the Vulnerable Software and Affected Versions: The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress versions up to, and including, 3.1.37.1 Description: The issue is related to Stored Cross-Site Scripting via admin settings due to...

4.8CVSS5.1AI score0.00596EPSS

SaveExploits1References8

Rapid7 Vulnerability Database (full)•added 2023/09/27 12:00 a.m.•5 views

CVE-2023-4423: Improper Neutralization of Input During Web Page Generation

4.8CVSS6.2AI score0.00596EPSS

SaveExploits1References2

WPVulnDB•added 2023/09/27 12:00 a.m.•21 views

WP Event Manager < 3.1.38 - Admin+ Stored XSS

Description The plugin does not adequately sanitize and escape input in the admin settings. This flaw could lead to stored cross-site scripting attacks, specifically in multi-site installations or where unfilteredhtml has been disabled...

4.8CVSS5.5AI score0.00596EPSS

SaveExploits1References1Affected Software1

Prion•added 2023/09/11 8:15 p.m.•35 views

Cross site scripting

The tagDiv Composer WordPress plugin before 4.2, used as a companion by the Newspaper and Newsmag themes from tagDiv, does not validate and escape some settings, which could allow users with Admin privileges to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is...

4.3CVSS4.8AI score0.0044EPSS

SaveExploits2References1Affected Software1

OSV•added 2023/09/05 3:15 a.m.•15 views

CVE-2023-4636

The WordPress File Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

4.8CVSS5.9AI score0.00987EPSS

SaveExploits2References3

NVD•added 2023/09/05 3:15 a.m.•46 views

CVE-2023-4636

4.8CVSS4.3AI score0.00987EPSS

SaveExploits2References3

Prion•added 2023/09/05 3:15 a.m.•30 views

Cross site scripting

4.3CVSS4.8AI score0.00987EPSS

SaveExploits2References3Affected Software1

Cvelist•added 2023/09/05 2:25 a.m.•52 views

CVE-2023-4636 WordPress File Sharing Plugin <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting

4.4CVSS4.9AI score0.00987EPSS

SaveExploits2References3

Vulnrichment•added 2023/09/05 2:25 a.m.•12 views

CVE-2023-4636

4.4CVSS4.7AI score0.00987EPSS

SaveExploits2References3

Rapid7 Vulnerability Database (full)•added 2023/09/05 12:00 a.m.•5 views

CVE-2023-4636: Improper Neutralization of Input During Web Page Generation

4.8CVSS5.7AI score0.00987EPSS

SaveExploits2References2

Positive Technologies•added 2023/09/04 12:00 a.m.•16 views

PT-2023-29979 · WordPress · Wordpress File Sharing Plugin

Name of the Vulnerable Software and Affected Versions: WordPress File Sharing Plugin versions up to, and including, 2.0.3 Description: The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. This allows authenticated...

4.8CVSS5.3AI score0.00987EPSS

SaveExploits2References8

NVD•added 2023/08/31 6:15 a.m.•32 views

CVE-2023-4500

The Order Tracking Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the order status parameter in versions up to, and including, 3.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers admin or higher to inject...

4.8CVSS4.4AI score0.00345EPSS

SaveExploits0References2

NVD•added 2023/08/31 6:15 a.m.•30 views

CVE-2023-4160

The WooCommerce PDF Invoice Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.2.90 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-leve...

4.8CVSS4.4AI score0.00492EPSS

SaveExploits0References3

Prion•added 2023/08/31 6:15 a.m.•30 views

Cross site scripting

4.3CVSS4.8AI score0.00492EPSS

SaveExploits0References3Affected Software1

Prion•added 2023/08/31 6:15 a.m.•28 views

Cross site scripting

4.3CVSS4.8AI score0.00345EPSS

SaveExploits0References2Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by