CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

187 matches found

Vulnrichment•added 2026/02/09 11:23 p.m.•3 views

CVE-2026-0845 WCFM - WooCommerce Frontend Manager <= 6.7.24 - Authenticated (Shop Manager+) Arbitrary Options Update

The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'WCFMSettingsController::processing' function in...

7.2CVSS5.7AI score0.00436EPSS

Exploits0References4

RedhatCVE•added 2026/01/15 6:21 a.m.•10 views

CVE-2026-0678

The Flat Shipping Rate by City for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the 'cities' parameter in all versions up to, and including, 1.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

4.9CVSS6.6AI score0.00263EPSS

Exploits0References1

Positive Technologies•added 2026/01/14 12:0 a.m.•12 views

PT-2026-2829

4.9CVSS6.6AI score0.00263EPSS

Exploits0References4

RedhatCVE•added 2025/12/22 2:35 a.m.•7 views

CVE-2025-14054

The WC Builder – WooCommerce Page Builder for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'headingcolor' parameter and multiple other styling parameters of the wpbforwpbakeryproductadditionalinformation shortcode in all versions up to, and including, 1.2.0 d...

4.4CVSS5AI score0.00203EPSS

Exploits0References1

NVD•added 2025/12/21 3:15 a.m.•6 views

CVE-2025-14054

4.4CVSS0.00203EPSS

Exploits0References4

CVE•added 2025/12/21 2:20 a.m.•17 views

CVE-2025-14054

CVE-2025-14054 concerns WC Builder – WooCommerce Page Builder for WPBakery (WordPress). The vulnerability is a Stored Cross-Site Scripting in the wpbforwpbakery_product_additional_information shortcode, triggered by the heading_color parameter (and other styling params). Affected products/version...

4.4CVSS4.7AI score0.00203EPSS

Exploits0References4