CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

9735 matches found

NVD•added 2025/10/04 3:15 a.m.•14 views

CVE-2025-9243

The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorizedmodification of data due to a missing capability check on the getccorders and updateorderstatus functions in all versions up to, and including, 3.5.32. This makes it possible for authenticated attackers, with...

8.1CVSS0.00286EPSS

SaveExploits0References4

NVD•added 2025/10/04 3:15 a.m.•12 views

CVE-2025-8726

The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 9.0.11.006 due to insufficient input sanitization and output escaping in the wppauserupload function. This makes it possible for authenticated attackers, with Subscriber-level...

5.4CVSS0.00196EPSS

SaveExploits0References3

Cvelist•added 2025/10/04 2:24 a.m.•21 views

CVE-2025-9243 Cost Calculator Builder <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functions

8.1CVSS0.00286EPSS

SaveExploits0References4

Positive Technologies•added 2025/10/04 12:00 a.m.•14 views

PT-2025-40617

Name of the Vulnerable Software and Affected Versions WP Photo Album Plus plugin for WordPress versions prior to 9.0.11.006 Description The WP Photo Album Plus plugin for WordPress is susceptible to Cross-Site Scripting due to inadequate input sanitization and output escaping within the wppa user...

5.4CVSS5.7AI score0.00196EPSS

SaveExploits0References6

Positive Technologies•added 2025/10/04 12:00 a.m.•9 views

PT-2025-40620

Name of the Vulnerable Software and Affected Versions WordPress Cost Calculator Builder plugin versions through 3.5.32 Description The Cost Calculator Builder plugin for WordPress has a flaw that allows unauthorized data modification. A missing capability check in the get cc orders and update ord...

8.1CVSS6.3AI score0.00286EPSS

SaveExploits0References6