CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

222 matches found

patchstack•added 2026/03/23 7:10 p.m.•9 views

WordPress Quentn WP plugin <= 1.2.12 - Unauthenticated SQL Injection via 'qntn_wp_access' Cookie vulnerability

Unauthenticated SQL Injection via 'qntnwpaccess' Cookie vulnerability discovered by Nabil Irawan - Heroes Cyber Security in WordPress Plugin Quentn WP versions = 1.2.12...

7.5CVSS5.9AI score0.00364EPSS

Exploits0References1Affected Software1

patchstack•added 2026/03/20 5:55 p.m.•7 views

WordPress WP Terms Popup plugin <= 2.10.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin WP Terms Popup versions = 2.10.0...

7.5CVSS5.8AI score0.00287EPSS

Exploits0Affected Software1

patchstack•added 2026/03/20 5:27 p.m.•5 views

WordPress Petitioner plugin <= 0.7.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Petitioner versions = 0.7.3...

6.5CVSS5.8AI score0.00226EPSS

Exploits0Affected Software1

patchstack•added 2026/03/18 1:5 p.m.•7 views

WordPress WPVulnerability plugin <= 4.2.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin WPVulnerability versions = 4.2.1...

6.5CVSS5.8AI score0.00363EPSS

Exploits0Affected Software1

patchstack•added 2026/03/18 12:44 p.m.•8 views

WordPress Nexa Blocks plugin <= 1.1.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Nabil Irawan in WordPress Plugin Nexa Blocks versions = 1.1.1...

9.8CVSS5.8AI score0.00375EPSS

Exploits0Affected Software1

patchstack•added 2026/03/18 12:28 p.m.•5 views

WordPress Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.2.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms versions = 1.2.2...

6.5CVSS5.8AI score0.00315EPSS

Exploits0Affected Software1

patchstack•added 2026/03/17 10:34 a.m.•7 views

WordPress avalex plugin <= 3.1.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin avalex versions = 3.1.3...

6.5CVSS5.8AI score0.00242EPSS

Exploits0Affected Software1

patchstack•added 2026/03/16 3:28 p.m.•8 views

WordPress WP EasyPay plugin <= 4.2.11 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin WP EasyPay versions = 4.2.11...

5.4CVSS5.8AI score0.00173EPSS

Exploits0Affected Software1

patchstack•added 2026/03/08 8:48 a.m.•13 views

WordPress Atarim plugin <= 4.3.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Atarim versions = 4.3.2...

4.3CVSS5.8AI score0.00159EPSS

Exploits0Affected Software1

patchstack•added 2026/03/03 12:24 p.m.•6 views

WordPress WordPress CTA plugin <= 2.1.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin WordPress CTA versions = 2.1.2...

6.5CVSS5.8AI score0.00318EPSS

Exploits0Affected Software1

patchstack•added 2026/03/03 7:38 a.m.•8 views

WordPress All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login plugin <= 2.2.5 - Authentication Bypass vulnerability

Authentication Bypass vulnerability discovered by Nabil Irawan - Heroes Cyber Security in WordPress Plugin All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login versions = 2.2.5...

9.8CVSS5.9AI score0.00856EPSS

Exploits0References1Affected Software1

patchstack•added 2026/03/02 11:45 a.m.•9 views

WordPress VW School Education theme <= 1.4.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Theme VW School Education versions = 1.4.6...

5.3CVSS5.8AI score0.00243EPSS

Exploits0Affected Software1

patchstack•added 2026/03/02 11:42 a.m.•8 views

WordPress VW Photography theme <= 1.3.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Theme VW Photography versions = 1.3.8...

5.3CVSS5.8AI score0.00243EPSS

Exploits0Affected Software1

patchstack•added 2026/03/02 11:41 a.m.•7 views

WordPress VW Pet Shop theme <= 1.4.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Theme VW Pet Shop versions = 1.4.7...

5.3CVSS5.8AI score0.00233EPSS

Exploits0Affected Software1

patchstack•added 2026/03/02 11:38 a.m.•5 views

WordPress VW Fitness theme <= 4.3.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Theme VW Fitness versions = 4.3.4...

5.3CVSS5.8AI score0.00233EPSS

Exploits0Affected Software1

patchstack•added 2026/03/01 9:9 a.m.•8 views

WordPress VW Education Lite plugin <= 2.2.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin VW Education Lite versions = 2.2.0...

5.3CVSS5.8AI score0.00243EPSS

Exploits0Affected Software1

patchstack•added 2026/02/27 8:40 p.m.•7 views

WordPress Sprout Clients plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Plugin Sprout Clients versions = 3.2.2...

6.5CVSS5.8AI score0.00161EPSS

Exploits0Affected Software1

patchstack•added 2026/02/26 7:23 a.m.•6 views

WordPress EM Cost Calculator plugin <= 2.3.1 - Unauthenticated Stored Cross-Site Scripting via 'customer_name' vulnerability

Unauthenticated Stored Cross-Site Scripting via 'customername' vulnerability discovered by Nabil Irawan - Heroes Cyber Security in WordPress Plugin Cost Calculator Pro versions = 2.3.1...

6.1CVSS5.3AI score0.00215EPSS

Exploits0References1Affected Software1

patchstack•added 2026/02/25 7:46 p.m.•6 views

WordPress Pochipp plugin < 1.18.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Pochipp versions 1.18.9...

5.4CVSS5.8AI score0.00172EPSS

Exploits0Affected Software1

patchstack•added 2026/02/25 7:41 p.m.•22 views

WordPress PDF Poster plugin <= 2.4.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin PDF Poster versions = 2.4.0...

5.4CVSS5.8AI score0.00218EPSS

Exploits0Affected Software1