Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1280 matches found

Patchstack
Patchstack•added 2025/02/17 10:24 p.m.•14 views

WordPress PressMart theme <= 1.2.16 - Unauthenticated Arbitrary Shortcode Execution vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by Lucio Sá in WordPress Theme PressMart versions = 1.2.16...

9.8CVSS7.1AI score0.00548EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE•added 2025/02/15 7:23 a.m.•47 views

CVE-2024-13346

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 7.11.13. This is due to the software allowing users to execute an action that does not properly validate a value before running...

9.8CVSS9.6AI score0.02297EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE•added 2025/02/15 7:22 a.m.•21 views

CVE-2024-13345

The Avada Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.11.13. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible for...

9.8CVSS9.6AI score0.00547EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2025/02/14 8:56 a.m.•16 views

CVE-2024-13814

The The Global Gallery - WordPress Responsive Gallery plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 9.1.5. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode...

8.8CVSS9.4AI score0.00527EPSS
SaveExploits0References1
OSV
OSV•added 2025/02/13 7:15 a.m.•18 views

CVE-2024-13346

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 7.11.13. This is due to the software allowing users to execute an action that does not properly validate a value before running...

9.8CVSS7.6AI score0.02297EPSS
SaveExploits1References2
NVD
NVD•added 2025/02/13 7:15 a.m.•64 views

CVE-2024-13346

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 7.11.13. This is due to the software allowing users to execute an action that does not properly validate a value before running...

9.8CVSS0.02297EPSS
SaveExploits1References2
NVD
NVD•added 2025/02/13 7:15 a.m.•28 views

CVE-2024-13345

The Avada Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.11.13. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible for...

9.8CVSS0.00547EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment•added 2025/02/13 6:58 a.m.•10 views

CVE-2024-13345 Avada Builder <= 3.11.13 - Unauthenticated Arbitrary Shortcode Execution

The Avada Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.11.13. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible for...

7.3CVSS7.6AI score0.00547EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2025/02/13 6:58 a.m.•38 views

CVE-2024-13345 Avada Builder <= 3.11.13 - Unauthenticated Arbitrary Shortcode Execution

The Avada Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.11.13. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible for...

7.3CVSS0.00547EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2025/02/13 6:58 a.m.•84 views

CVE-2024-13346 Avada Theme <= 7.11.13 - Unauthenticated Arbitrary Shortcode Execution

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 7.11.13. This is due to the software allowing users to execute an action that does not properly validate a value before running...

7.3CVSS0.02297EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment•added 2025/02/13 6:58 a.m.•14 views

CVE-2024-13346 Avada Theme <= 7.11.13 - Unauthenticated Arbitrary Shortcode Execution

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 7.11.13. This is due to the software allowing users to execute an action that does not properly validate a value before running...

7.3CVSS7.6AI score0.02297EPSS
SaveExploits1References2
CVE
CVE•added 2025/02/13 6:58 a.m.•201 views

CVE-2024-13346

CVE-2024-13346 affects the Avada Theme for WordPress & WooCommerce (up to version 7.11.13). It enables unauthenticated arbitrary shortcode execution due to improper validation before do_shortcode, potentially allowing code execution via shortcodes. Public exploits exist (example exploit scripts) ...

9.8CVSS8.5AI score0.02297EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2025/02/13 12:00 a.m.•4 views

CVE-2024-13345: Improper Control of Generation of Code

The Avada Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.11.13. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible for...

9.8CVSS6.3AI score0.00547EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2025/02/13 12:00 a.m.•18 views

PT-2025-6541 · WordPress · Avada Builder

Name of the Vulnerable Software and Affected Versions: Avada Builder plugin for WordPress versions up to, and including, 3.11.13 Description: The Avada Builder plugin for WordPress is vulnerable to arbitrary shortcode execution. This is due to the software allowing users to execute an action that...

9.8CVSS9.9AI score0.00547EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2025/02/13 12:00 a.m.•4 views

CVE-2024-13346: Improper Control of Generation of Code

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 7.11.13. This is due to the software allowing users to execute an action that does not properly validate a value before running...

9.8CVSS6.3AI score0.02297EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies•added 2025/02/13 12:00 a.m.•7 views

PT-2025-6542

Name of the Vulnerable Software and Affected Versions Avada | Website Builder For WordPress & WooCommerce theme for WordPress versions up to, and including, 7.11.13 Description The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary shortcode...

9.8CVSS0.02297EPSS
SaveExploits1References12
Patchstack
Patchstack•added 2025/02/12 9:18 p.m.•15 views

WordPress Fusion Builder plugin <= 3.11.13 - Unauthenticated Arbitrary Shortcode Execution vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by mikemyers in WordPress Plugin Fusion Builder versions = 3.11.13...

9.8CVSS7.1AI score0.00547EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2025/02/12 9:17 p.m.•16 views

WordPress Avada theme <= 7.11.13 - Unauthenticated Arbitrary Shortcode Execution vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by mikemyers in WordPress Theme Avada versions = 7.11.13...

9.8CVSS7.1AI score0.02297EPSS
SaveExploits1References1Affected Software1
OSV
OSV•added 2025/02/12 9:15 a.m.•11 views

CVE-2024-13814

The The Global Gallery - WordPress Responsive Gallery plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 9.1.5. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode...

8.8CVSS7.6AI score0.00527EPSS
SaveExploits0References3
NVD
NVD•added 2025/02/12 9:15 a.m.•13 views

CVE-2024-13814

The The Global Gallery - WordPress Responsive Gallery plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 9.1.5. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode...

8.8CVSS0.00527EPSS
SaveExploits0References3
Rows per page
Query Builder