CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

11378 matches found

RedhatCVE•added 2025/10/04 11:53 a.m.•18 views

CVE-2025-9198

The Wp cycle text announcement plugin for WordPress is vulnerable to SQL Injection via the 'cycle-text' shortcode in all versions up to, and including, 8.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

6.5CVSS6.6AI score0.00319EPSS

SaveExploits0References1

CVE•added 2025/10/04 3:33 a.m.•21 views

CVE-2025-10383

CVE-2025-10383 : The WordPress plugin “Contest Gallery – Upload, Vote & Sell with PayPal and Stripe” is affected by a stored cross-site scripting vulnerability in multiple form fields. Affected versions are all up to and including 27.0.2. Attack scenario: authenticated attackers with author-level...

6.4CVSS4.8AI score0.00232EPSS

SaveExploits0References7

EUVD•added 2025/10/04 3:32 a.m.•9 views

EUVD-2025-32418

The Majestic Before After Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'beforelabel' and 'afterlabel' parameters in versions less than, or equal to, 2.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

5.4CVSS4.8AI score0.0018EPSS

SaveExploits0References3

Cvelist•added 2025/10/04 2:24 a.m.•16 views

CVE-2025-9030 Majestic Before After Image <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

5.4CVSS0.0018EPSS

SaveExploits0References2

Patchstack•added 2025/10/03 10:17 p.m.•12 views

WordPress WP Dispatcher plugin <= 1.2.0 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by Craig Webb in WordPress Plugin WP Dispatcher versions = 1.2.0...

7.5CVSS7AI score0.00477EPSS

SaveExploits0References1Affected Software1

EUVD•added 2025/10/03 8:07 p.m.•7 views

EUVD-2021-8869