CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

401 matches found

Cvelist•added 2025/02/22 3:20 a.m.•38 views

CVE-2025-1509 Show Me The Cookies <= 1.0 - Unauthenticated Arbitrary Shortcode Execution

The The Show Me The Cookies plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.0. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible for...

7.3CVSS0.00604EPSS

SaveExploits0References2

RedhatCVE•added 2025/02/20 3:26 p.m.•6 views

CVE-2024-13689

The Uncode Core plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.9.1.6. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible for...

6.3CVSS7.3AI score0.00453EPSS

SaveExploits0References1

Vulnrichment•added 2025/02/20 9:21 a.m.•7 views

CVE-2024-13792 WooCommerce Food - Restaurant Menu & Food ordering <= 3.3.2 - Unauthenticated Arbitrary Shortcode Execution via ids

The WooCommerce Food - Restaurant Menu & Food ordering plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.3.2. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcod...

7.3CVSS7.4AI score0.00539EPSS

SaveExploits0References2

Cvelist•added 2025/02/20 9:21 a.m.•20 views

CVE-2024-13792 WooCommerce Food - Restaurant Menu & Food ordering <= 3.3.2 - Unauthenticated Arbitrary Shortcode Execution via ids

7.3CVSS0.00539EPSS

SaveExploits0References2

NVD•added 2025/02/18 3:15 p.m.•13 views

CVE-2024-13689

6.3CVSS0.00453EPSS

SaveExploits0References2

Cvelist•added 2025/02/18 2:22 p.m.•16 views

CVE-2024-13689 Uncode Core <= 2.9.1.6 - Authenticated (Subscriber+) Arbitrary Shortcode Execution in uncode_get_medias

6.3CVSS0.00453EPSS

SaveExploits0References2

OSV•added 2025/02/18 11:15 a.m.•8 views

CVE-2024-13797

The PressMart - Modern Elementor WooCommerce WordPress Theme theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.2.16. This is due to the software allowing users to execute an action that does not properly validate a value before running...

9.8CVSS7.6AI score0.00539EPSS

SaveExploits0References2

NVD•added 2025/02/18 11:15 a.m.•48 views

CVE-2024-13797

9.8CVSS0.00539EPSS

SaveExploits0References2

RedhatCVE•added 2025/02/15 7:23 a.m.•40 views

CVE-2024-13346

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 7.11.13. This is due to the software allowing users to execute an action that does not properly validate a value before running...

9.8CVSS9.6AI score0.02258EPSS

SaveExploits1References1

RedhatCVE•added 2025/02/15 7:22 a.m.•14 views

CVE-2024-13345

The Avada Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.11.13. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible for...

9.8CVSS9.6AI score0.00538EPSS

SaveExploits0References1

RedhatCVE•added 2025/02/14 8:56 a.m.•11 views

CVE-2024-13814

The The Global Gallery - WordPress Responsive Gallery plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 9.1.5. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode...

8.8CVSS9.4AI score0.00518EPSS

SaveExploits0References1

NVD•added 2025/02/13 7:15 a.m.•17 views

CVE-2024-13345

9.8CVSS0.00538EPSS

SaveExploits0References2

Cvelist•added 2025/02/13 6:58 a.m.•23 views

CVE-2024-13345 Avada Builder <= 3.11.13 - Unauthenticated Arbitrary Shortcode Execution

7.3CVSS0.00538EPSS

SaveExploits0References2

Vulnrichment•added 2025/02/13 6:58 a.m.•9 views

CVE-2024-13345 Avada Builder <= 3.11.13 - Unauthenticated Arbitrary Shortcode Execution

7.3CVSS7.6AI score0.00538EPSS

SaveExploits0References2

Cvelist•added 2025/02/13 6:58 a.m.•61 views

CVE-2024-13346 Avada Theme <= 7.11.13 - Unauthenticated Arbitrary Shortcode Execution

7.3CVSS0.02258EPSS

SaveExploits1References2

CVE•added 2025/02/13 6:58 a.m.•146 views

CVE-2024-13346

CVE-2024-13346 affects the Avada Theme for WordPress & WooCommerce (up to version 7.11.13). It enables unauthenticated arbitrary shortcode execution due to improper validation before do_shortcode, potentially allowing code execution via shortcodes. Public exploits exist (example exploit scripts) ...

9.8CVSS7.7AI score0.02258EPSS

SaveExploits1References2Affected Software1

Vulnrichment•added 2025/02/13 6:58 a.m.•12 views

CVE-2024-13346 Avada Theme <= 7.11.13 - Unauthenticated Arbitrary Shortcode Execution

7.3CVSS7.6AI score0.02258EPSS

SaveExploits1References2

NVD•added 2025/02/12 9:15 a.m.•9 views

CVE-2024-13814

8.8CVSS0.00518EPSS

SaveExploits0References3

Cvelist•added 2025/02/12 8:25 a.m.•21 views

CVE-2024-13814 Global Gallery - WordPress Responsive Gallery <= 9.1.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution

5.4CVSS0.00518EPSS

SaveExploits0References3

Patchstack•added 2025/02/11 10:31 p.m.•6 views

WordPress Global Gallery - WordPress Responsive Gallery plugin <= 9.1.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability

WordPress Global Gallery - WordPress Responsive Gallery plugin = 9.1.5 - Authenticated Subscriber+ Arbitrary Shortcode Execution vulnerability discovered by Lucio Sá in WordPress Plugin Global Gallery versions = 9.1.5...

8.8CVSS7.1AI score0.00518EPSS

SaveExploits0References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by