CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1280 matches found

OSV•added 2025/02/20 10:15 a.m.•16 views

CVE-2024-13792

The WooCommerce Food - Restaurant Menu & Food ordering plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.3.2. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcod...

9.8CVSS7.6AI score0.00548EPSS

SaveExploits0References2

NVD•added 2025/02/20 10:15 a.m.•23 views

CVE-2024-13792

9.8CVSS0.00548EPSS

SaveExploits0References2

Cvelist•added 2025/02/20 9:21 a.m.•31 views

CVE-2024-13792 WooCommerce Food - Restaurant Menu & Food ordering <= 3.3.2 - Unauthenticated Arbitrary Shortcode Execution via ids

7.3CVSS0.00548EPSS

SaveExploits0References2

Vulnrichment•added 2025/02/20 9:21 a.m.•10 views

CVE-2024-13792 WooCommerce Food - Restaurant Menu & Food ordering <= 3.3.2 - Unauthenticated Arbitrary Shortcode Execution via ids

7.3CVSS7.4AI score0.00548EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2025/02/20 12:00 a.m.•5 views

CVE-2024-13792: Improper Control of Generation of Code

9.8CVSS6.3AI score0.00548EPSS

SaveExploits0References1

Positive Technologies•added 2025/02/20 12:00 a.m.•4 views

PT-2025-7390

Name of the Vulnerable Software and Affected Versions WooCommerce Food - Restaurant Menu & Food ordering plugin for WordPress versions up to, and including, 3.3.2 Description The issue is related to arbitrary shortcode execution due to the software allowing users to execute an action that does no...

9.8CVSS0.00548EPSS

SaveExploits0References8

Patchstack•added 2025/02/19 11:35 p.m.•17 views

WordPress WooCommerce Food - Restaurant Menu & Food ordering plugin <= 3.3.2 - Unauthenticated Arbitrary Shortcode Execution via ids vulnerability

WordPress WooCommerce Food - Restaurant Menu & Food ordering plugin = 3.3.2 - Unauthenticated Arbitrary Shortcode Execution via ids vulnerability discovered by Lucio Sá in WordPress Plugin WooCommerce Food - Restaurant Menu & Food ordering versions = 3.3.2...

9.8CVSS7.2AI score0.00548EPSS

SaveExploits0References1Affected Software1

NVD•added 2025/02/18 3:15 p.m.•20 views

CVE-2024-13689

The Uncode Core plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.9.1.6. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible for...

6.3CVSS0.00461EPSS

SaveExploits0References2

CVE•added 2025/02/18 2:22 p.m.•65 views

CVE-2024-13689

CVE-2024-13689 affects the Uncode Core WordPress plugin. Public details from Wordfence indicate the vulnerability is in Uncode Core

6.3CVSS7.5AI score0.00461EPSS

SaveExploits0References2

Cvelist•added 2025/02/18 2:22 p.m.•25 views

CVE-2024-13689 Uncode Core <= 2.9.1.6 - Authenticated (Subscriber+) Arbitrary Shortcode Execution in uncode_get_medias

6.3CVSS0.00461EPSS

SaveExploits0References2

Vulnrichment•added 2025/02/18 2:22 p.m.•14 views

CVE-2024-13689 Uncode Core <= 2.9.1.6 - Authenticated (Subscriber+) Arbitrary Shortcode Execution in uncode_get_medias

6.3CVSS7.3AI score0.00461EPSS

SaveExploits0References2

OSV•added 2025/02/18 11:15 a.m.•18 views

CVE-2024-13797

The PressMart - Modern Elementor WooCommerce WordPress Theme theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.2.16. This is due to the software allowing users to execute an action that does not properly validate a value before running...

9.8CVSS7.6AI score0.00548EPSS

SaveExploits0References2

NVD•added 2025/02/18 11:15 a.m.•54 views

CVE-2024-13797

9.8CVSS0.00548EPSS

SaveExploits0References2

CVE•added 2025/02/18 11:10 a.m.•67 views

CVE-2024-13797

CVE-2024-13797 refers to thePressMart theme for WordPress (Elementor/WooCommerce) where an unauthenticated user can trigger arbitrary shortcode execution due to improper validation before do_shortcode. Affected versions: up to 1.2.16. Impact per the document: arbitrary shortcode execution, enabli...

9.8CVSS7.7AI score0.00548EPSS

SaveExploits0References2Affected Software1

Vulnrichment•added 2025/02/18 11:10 a.m.•9 views

CVE-2024-13797 PressMart - Modern Elementor WooCommerce WordPress Theme <= 1.2.16 - Unauthenticated Arbitrary Shortcode Execution

7.3CVSS7.7AI score0.00548EPSS

SaveExploits0References2

Cvelist•added 2025/02/18 11:10 a.m.•51 views

CVE-2024-13797 PressMart - Modern Elementor WooCommerce WordPress Theme <= 1.2.16 - Unauthenticated Arbitrary Shortcode Execution

7.3CVSS0.00548EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2025/02/18 12:00 a.m.•8 views

CVE-2024-13689: Improper Control of Generation of Code

6.3CVSS6.3AI score0.00461EPSS

SaveExploits0References1

Positive Technologies•added 2025/02/18 12:00 a.m.•6 views

PT-2025-6613

Name of the Vulnerable Software and Affected Versions PressMart - Modern Elementor WooCommerce WordPress Theme versions 1.2.16 and earlier Description The issue allows unauthenticated attackers to execute arbitrary shortcodes due to the software permitting users to execute an action without...

9.8CVSS0.00548EPSS

SaveExploits0References9

Rapid7 Vulnerability Database (full)•added 2025/02/18 12:00 a.m.•5 views

CVE-2024-13797: Improper Control of Generation of Code

9.8CVSS6.3AI score0.00548EPSS

SaveExploits0References1

Patchstack•added 2025/02/17 10:27 p.m.•13 views

WordPress Uncode Core plugin <= 2.9.1.6 - Authenticated (Subscriber+) Arbitrary Shortcode Execution in uncode_get_medias vulnerability

Authenticated Subscriber+ Arbitrary Shortcode Execution in uncodegetmedias vulnerability discovered by mikemyers in WordPress Plugin Uncode Core versions = 2.9.1.6...

6.3CVSS7.1AI score0.00461EPSS

SaveExploits0References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by