CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4427 matches found

EUVD•added 2025/10/04 3:32 a.m.•9 views

EUVD-2025-32422

The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorizedmodification of data due to a missing capability check on the getccorders and updateorderstatus functions in all versions up to, and including, 3.5.32. This makes it possible for authenticated attackers, with...

8.1CVSS4.8AI score0.00306EPSS

SaveExploits0References4

NVD•added 2025/10/04 3:15 a.m.•15 views

CVE-2025-9243

8.1CVSS0.00306EPSS

SaveExploits0References4

NVD•added 2025/10/04 3:15 a.m.•13 views

CVE-2025-8726

The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 9.0.11.006 due to insufficient input sanitization and output escaping in the wppauserupload function. This makes it possible for authenticated attackers, with Subscriber-level...

5.4CVSS0.0021EPSS

SaveExploits0References3

Positive Technologies•added 2025/10/04 12:00 a.m.•14 views

PT-2025-40617

Name of the Vulnerable Software and Affected Versions WP Photo Album Plus plugin for WordPress versions prior to 9.0.11.006 Description The WP Photo Album Plus plugin for WordPress is susceptible to Cross-Site Scripting due to inadequate input sanitization and output escaping within the wppa user...

5.4CVSS5.7AI score0.0021EPSS

SaveExploits0References6

Positive Technologies•added 2025/10/04 12:00 a.m.•10 views

PT-2025-40620

Name of the Vulnerable Software and Affected Versions WordPress Cost Calculator Builder plugin versions through 3.5.32 Description The Cost Calculator Builder plugin for WordPress has a flaw that allows unauthorized data modification. A missing capability check in the get cc orders and update ord...

8.1CVSS6.3AI score0.00306EPSS

SaveExploits0References6

EUVD•added 2025/10/03 8:07 p.m.•10 views

EUVD-2024-16898