CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

The Interactive Human Anatomy with Clickable Body Parts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

5.5CVSS0.00201EPSS

Exploits0References2

Positive Technologies•added 2025/08/27 12:0 a.m.•8 views

PT-2025-34879 · Unknown · Diskover-Web

Name of the Vulnerable Software and Affected Versions: diskover-web version 2.3.0 Description: The application does not properly sanitize user-supplied input in several configuration fields within the administrative settings interface, leading to stored cross-site scripting XSS. Specifically, the...

5.6CVSS5.6AI score0.00224EPSS

Exploits1References3

OpenVAS•added 2025/08/21 12:0 a.m.•4 views

WordPress Quiz And Survey Master Plugin < 10.2.3 CSRF Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:expresstech:quizandsurveymaster"; if description...

4.3CVSS7.2AI score0.00124EPSS

Exploits0References1

Vulnrichment•added 2025/08/14 6:21 p.m.•4 views

CVE-2025-54717 WordPress WP Membership Plugin <= 1.6.3 - Settings Change Vulnerability

Missing Authorization vulnerability in e-plugins WP Membership allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Membership: from n/a through 1.6.3...

5.4CVSS7.1AI score0.00216EPSS

Exploits0References1

Vulnrichment•added 2025/08/14 6:0 a.m.•2 views

CVE-2025-6790 QSM < 10.2.3 - Template Creation via CSRF

The Quiz and Survey Master QSM WordPress plugin before 10.2.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

7AI score0.00124EPSS

Exploits0References1

CNNVD•added 2025/06/09 12:0 a.m.•8 views

WordPress plugin Newsletter security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

4.8CVSS5.7AI score0.0022EPSS

Exploits1References1