CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

33004 matches found

Patchstack•added 2025/10/03 11:25 p.m.•13 views

WordPress Unify plugin <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via unify_checkout Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via unifycheckout Shortcode vulnerability discovered by Peter Thaleikis in WordPress Plugin Unify versions = 3.4.7...

6.4CVSS5.5AI score0.00283EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2025/10/03 11:17 p.m.•13 views

WordPress Backup Bolt plugin <= 1.4.1 - Authenticated (Admin+) Arbitrary File Download vulnerability

Authenticated Admin+ Arbitrary File Download vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Backup Bolt versions = 1.4.1...

3.8CVSS6.8AI score0.0029EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2025/10/03 11:16 p.m.•12 views

WordPress Ultimate Viral Quiz plugin <= 1.0 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by Nabil Irawan in WordPress Plugin Ultimate Viral Quiz versions = 1.0...

4.3CVSS6.8AI score0.00124EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2025/10/03 11:13 p.m.•9 views

WordPress X Addons for Elementor plugin <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Youtube Video ID Field vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Youtube Video ID Field vulnerability discovered by zer0gh0st in WordPress Plugin X Addons for Elementor versions = 1.0.16...

6.4CVSS5.5AI score0.00225EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2025/10/03 10:57 p.m.•12 views

WordPress Notification Bar plugin <= 2.2 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Nabil Irawan in WordPress Plugin Notification Bar versions = 2.2...

4.3CVSS6.8AI score0.00124EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2025/10/03 10:56 p.m.•9 views

WordPress Smart Docs plugin <= 1.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Smart Docs versions = 1.1.1...

5.5CVSS5.5AI score0.00201EPSS

SaveExploits0References1Affected Software1