Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

3960 matches found

CVE
CVE•added 2022/11/29 8:39 p.m.•83 views

CVE-2022-3361

The CVE-2022-3361 entry concerns the WordPress Ultimate Member plugin (versions up to 2.5.0). The vulnerability is a directory traversal flaw caused by insufficient validation of the template attribute in shortcodes, allowing an attacker with administrative privileges to supply traversal sequence...

4.3CVSS5.4AI score0.02484EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD•added 2022/11/29 12:00 a.m.•8 views

WordPress plugin Ultimate Member 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A remote code execution...

7.2CVSS8.4AI score0.02735EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies•added 2022/11/29 12:00 a.m.•4 views

PT-2022-21873 · WordPress · Ultimate Member

Name of the Vulnerable Software and Affected Versions: The Ultimate Member plugin for WordPress versions up to, and including, 2.5.0 Description: The issue allows for Remote Code Execution via the get option value from callback function, which accepts user-supplied input and passes it through cal...

7.2CVSS7.2AI score0.0278EPSS
SaveExploits2References10
Positive Technologies
Positive Technologies•added 2022/11/29 12:00 a.m.•3 views

PT-2022-21874 · WordPress · Ultimate Member

Name of the Vulnerable Software and Affected Versions: The Ultimate Member plugin for WordPress versions up to, and including, 2.5.0 Description: The issue allows for Remote Code Execution via the populate dropdown options function, which accepts user-supplied input and passes it through call use...

7.2CVSS7.2AI score0.0278EPSS
SaveExploits2References8
CNNVD
CNNVD•added 2022/11/29 12:00 a.m.•9 views

WordPress plugin Ultimate Member 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A remote code execution...

7.2CVSS8.6AI score0.0278EPSS
SaveExploits1References5
CNNVD
CNNVD•added 2022/11/29 12:00 a.m.•10 views

WordPress plugin Ultimate Member 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A directory traversal...

4.3CVSS6.8AI score0.02484EPSS
SaveExploits1References5
NVD
NVD•added 2022/11/18 11:15 p.m.•22 views

CVE-2022-42459

Auth. WordPress Options Change vulnerability in Image Hover Effects Ultimate plugin = 9.7.1 on WordPress...

7.2CVSS0.00798EPSS
SaveExploits0References2
Prion
Prion•added 2022/11/18 11:15 p.m.•21 views

Code injection

Auth. WordPress Options Change vulnerability in Image Hover Effects Ultimate plugin = 9.7.1 on WordPress...

5.8CVSS6.9AI score0.00798EPSS
SaveExploits0References2Affected Software1
CVE
CVE•added 2022/11/18 10:17 p.m.•81 views

CVE-2022-42459

CVE-2022-42459 affects the WordPress Image Hover Effects Ultimate plugin (versions

7.2CVSS7AI score0.00798EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD•added 2022/11/18 12:00 a.m.•10 views

WordPress plugin Image Hover Effects Ultimate 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.2CVSS7.1AI score0.00798EPSS
SaveExploits0References3
OSV
OSV•added 2022/11/17 11:15 p.m.•8 views

CVE-2022-36357

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webpsilon ULTIMATE TABLES plugin = 1.6.5 versions...

6.1CVSS5.8AI score0.00406EPSS
SaveExploits0References1
NVD
NVD•added 2022/11/17 11:15 p.m.•42 views

CVE-2022-36357

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webpsilon ULTIMATE TABLES plugin = 1.6.5 versions...

6.1CVSS0.00406EPSS
SaveExploits0References1
Prion
Prion•added 2022/11/17 11:15 p.m.•15 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webpsilon ULTIMATE TABLES plugin = 1.6.5 versions...

5.8CVSS6AI score0.00406EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment•added 2022/11/17 10:06 p.m.•8 views

CVE-2022-36357 WordPress ULTIMATE TABLES plugin <= 1.6.5 - Unauth. Reflected Cross-Site Scripting (XSS) vulnerability

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webpsilon ULTIMATE TABLES plugin = 1.6.5 versions...

6.1CVSS6AI score0.00406EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2022/11/17 10:06 p.m.•48 views

CVE-2022-36357 WordPress ULTIMATE TABLES plugin <= 1.6.5 - Unauth. Reflected Cross-Site Scripting (XSS) vulnerability

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webpsilon ULTIMATE TABLES plugin = 1.6.5 versions...

6.1CVSS6.1AI score0.00406EPSS
SaveExploits0References1
CVE
CVE•added 2022/11/17 10:06 p.m.•68 views

CVE-2022-36357

CVE-2022-36357 : An unauthenticated, reflected Cross-Site Scripting (XSS) vulnerability exists in the Webpsilon ULTIMATE TABLES WordPress plugin up to version 1.6.5. The issue stems from inadequate sanitization/escaping of parameters before output, enabling reflected XSS. Affected software: WordP...

6.1CVSS6AI score0.00406EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2022/11/17 12:00 a.m.•24 views

WordPress ULTIMATE TABLES plugin <= 1.6.5 - Unauth. Reflected Cross-Site Scripting (XSS) vulnerability

Unauth. Reflected Cross-Site Scripting XSS vulnerability discovered by Tien Nguyen Anh Patchstack Alliance in WordPress ULTIMATE TABLES plugin versions = 1.6.5. Solution No patched version is available. No reply from the vendor...

6.1CVSS2.9AI score0.00406EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies•added 2022/11/17 12:00 a.m.•10 views

PT-2022-23327 · WordPress · Ultimate Tables

Name of the Vulnerable Software and Affected Versions: ULTIMATE TABLES plugin versions = 1.6.5 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability affects the ULTIMATE TABLES plugin on WordPress, allowing for reflected cross-site...

6.1CVSS5.9AI score0.00406EPSS
SaveExploits0References4
CNNVD
CNNVD•added 2022/11/17 12:00 a.m.•28 views

WordPress plugin ULTIMATE TABLES 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

6.1CVSS5.9AI score0.00406EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB•added 2022/11/17 12:00 a.m.•14 views

Ultimate Tables <= 1.6.5 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting...

6.1CVSS1.7AI score0.00406EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder