CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

206 matches found

RedhatCVE•added 2026/01/09 10:32 a.m.•9 views

CVE-2017-18494

The custom-search-plugin plugin before 1.36 for WordPress has multiple XSS issues...

6.1CVSS6.2AI score0.014EPSS

Exploits1References1

RedhatCVE•added 2026/01/09 9:55 a.m.•17 views

CVE-2020-12104

The Import feature in the wp-advanced-search plugin 3.3.6 for WordPress is vulnerable to authenticated SQL injection via an uploaded .sql file. An attacker can use this to execute SQL commands without any validation...

8.8CVSS8.1AI score0.01602EPSS

Exploits0References1

CVE•added 2026/01/08 9:17 a.m.•23 views

CVE-2025-67930

CVE-2025-67930 : Reflected Cross-Site Scripting in the WordPress plugin eHive Search (formerly ehive-search) for versions

7.1CVSS6AI score0.0018EPSS

Exploits0References1

Patchstack•added 2026/01/06 10:13 a.m.•5 views

WordPress eHive Search plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Skalucy in WordPress Plugin eHive Search versions = 2.5.0...

6.1CVSS6.1AI score0.0018EPSS

Exploits0Affected Software1

Patchstack•added 2025/12/20 9:1 p.m.•5 views

WordPress WP SEO Search plugin <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by hhhai in WordPress Plugin WP SEO Search versions = 1.1...

4.3CVSS7AI score0.00133EPSS

Exploits0Affected Software1

NVD•added 2025/12/20 9:15 a.m.•5 views

CVE-2025-14298

The FiboSearch – Ajax Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's thegemtesearch shortcode in all versions up to, and including, 1.32.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...

5.4CVSS0.00266EPSS

Exploits0References5

Snyk•added 2025/12/15 11:39 a.m.•4 views

Improper Certificate Validation

Overview org.elasticsearch.plugin:x-pack-security is an Elasticsearch Expanded Pack Plugin - Security Affected versions of this package are vulnerable to Improper Certificate Validation via the PKI realm. An attacker can impersonate other users by presenting specially crafted client certificates...

7.6CVSS6.5AI score0.0016EPSS

Exploits0References2

Positive Technologies•added 2025/12/12 12:0 a.m.•6 views

PT-2025-50822

The BUKAZU Search widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'shortcode' parameter of the 'bukazu search' shortcode in all versions up to, and including, 3.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...

6.4CVSS5.1AI score0.00236EPSS

Exploits0References4

vulnersOsv•added 2025/10/16 4:42 p.m.•9 views

@avorati/strapi-plugin-preview (=1.0.1), @catchmexz/fedin-cms (>=5.30.1 <=5.30.2) +26 more potentially affected by CVE-2024-56143 via @strapi/core (>=5.0.0 <=5.5.1)

@strapi/core NPM version =5.0.0, =5.30.1, =1.0.0, =2.3.1, =2.0.2, =0.1.0, =2.0.0, =1.0.1, =5.0.0, =0.1.0, =0.2.0, =0.5.0 - cypherscan-strapi =0.1.1 - keycloak-auth-plugin =0.0.1 - my-shopify-app-backend =0.1.0 and more Source cves: CVE-2024-56143 Source advisory: SNYK:JS-STRAPICORE-13601313...

8.2CVSS5.7AI score0.00383EPSS

Exploits1