Vendor CVEs
WordPress
All CVEs
40,360 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2017-18535 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The smokesignal plugin before 1.2.7 for WordPress has XSS. | ||
| CVE-2017-18525 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The megamenu plugin before 2.4 for WordPress has XSS. | ||
| CVE-2017-18516 | Med | 0.40 | 6.1 | 0.02 | Aug 21, 2019 | The bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues. | ||
| CVE-2014-10378 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The duplicate-post plugin before 2.6 for WordPress has XSS. | ||
| CVE-2014-10377 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The cforms2 plugin before 13.2 for WordPress has XSS in lib_ajax.php. | ||
| CVE-2012-6714 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The count-per-day plugin before 3.2.3 for WordPress has XSS via search words. | ||
| CVE-2017-18564 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The sender plugin before 1.2.1 for WordPress has multiple XSS issues. | ||
| CVE-2017-18563 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The rsvp plugin before 2.3.8 for WordPress has persistent XSS via the note field on the attendee-list screen. | ||
| CVE-2016-10912 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The universal-analytics plugin before 1.3.1 for WordPress has XSS. | ||
| CVE-2016-10911 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues. | ||
| CVE-2016-10910 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The formbuilder plugin before 1.06 for WordPress has multiple XSS issues. | ||
| CVE-2015-9328 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The profile-builder plugin before 2.2.5 for WordPress has XSS. | ||
| CVE-2015-9327 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The flickr-justified-gallery plugin before 3.4.0 for WordPress has XSS. | ||
| CVE-2014-10380 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms. | ||
| CVE-2012-6715 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The formbuilder plugin before 0.9.1 for WordPress has XSS via a Referer header. | ||
| CVE-2019-15112 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The wp-slimstat plugin before 4.8.1 for WordPress has XSS. | ||
| CVE-2019-15110 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The wp-front-end-profile plugin before 0.2.2 for WordPress has XSS. | ||
| CVE-2017-18565 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The updater plugin before 1.35 for WordPress has multiple XSS issues. | ||
| CVE-2017-18560 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The content-audit plugin before 1.9.2 for WordPress has XSS. | ||
| CVE-2017-18558 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues. | ||
| CVE-2017-18557 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues. | ||
| CVE-2017-18556 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues. | ||
| CVE-2017-18555 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The booking-sms plugin before 1.1.0 for WordPress has XSS. | ||
| CVE-2017-18554 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The analytics-tracker plugin before 1.1.1 for WordPress has XSS via a search event. | ||
| CVE-2017-18553 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The ad-buttons plugin before 2.3.2 for WordPress has XSS. | ||
| CVE-2016-10908 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS. | ||
| CVE-2016-10901 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The wp-customer-reviews plugin before 3.0.9 for WordPress has XSS in the admin tools. | ||
| CVE-2016-10900 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The uji-countdown plugin before 2.0.7 for WordPress has XSS. | ||
| CVE-2019-15109 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The the-events-calendar plugin before 4.8.2 for WordPress has XSS via the tribe_paged URL parameter. | ||
| CVE-2017-18540 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The weblibrarian plugin before 3.4.8.7 for WordPress has XSS via front-end short codes. | ||
| CVE-2017-18539 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The weblibrarian plugin before 3.4.8.6 for WordPress has XSS via front-end short codes. | ||
| CVE-2017-18538 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The weblibrarian plugin before 3.4.8.5 for WordPress has XSS via front-end short codes. | ||
| CVE-2017-18537 | Med | 0.40 | 6.1 | 0.02 | Aug 21, 2019 | The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues. | ||
| CVE-2017-18536 | Med | 0.40 | 6.1 | 0.02 | Aug 21, 2019 | The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS. | ||
| CVE-2017-18534 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The share-on-diaspora plugin before 0.7.2 for WordPress has reflected XSS in share URL parameters. | ||
| CVE-2016-10898 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The total-security plugin before 3.4.1 for WordPress has XSS. | ||
| CVE-2016-10897 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The sermon-browser plugin before 0.45.16 for WordPress has multiple XSS issues. | ||
| CVE-2016-10896 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The seo-redirection plugin before 4.3 for WordPress has stored XSS. | ||
| CVE-2015-9321 | Med | 0.40 | 6.1 | 0.01 | Aug 21, 2019 | The shortcode-factory plugin before 1.1.1 for WordPress has XSS via add_query_arg. | ||
| CVE-2018-20978 | Med | 0.40 | 6.1 | 0.01 | Aug 20, 2019 | The wp-all-import plugin before 3.4.7 for WordPress has XSS. | ||
| CVE-2017-18566 | Med | 0.40 | 6.1 | 0.01 | Aug 20, 2019 | The user-role plugin before 1.5.6 for WordPress has multiple XSS issues. | ||
| CVE-2017-18533 | Med | 0.40 | 6.1 | 0.01 | Aug 20, 2019 | The rimons-twitter-widget plugin before 1.3 for WordPress has XSS. | ||
| CVE-2017-18532 | Med | 0.40 | 6.1 | 0.01 | Aug 20, 2019 | The realty plugin before 1.1.0 for WordPress has multiple XSS issues. | ||
| CVE-2017-18530 | Med | 0.40 | 6.1 | 0.01 | Aug 20, 2019 | The rating-bws plugin before 0.2 for WordPress has multiple XSS issues. | ||
| CVE-2017-18529 | Med | 0.40 | 6.1 | 0.02 | Aug 20, 2019 | The promobar plugin before 1.1.1 for WordPress has multiple XSS issues. | ||
| CVE-2017-18528 | Med | 0.40 | 6.1 | 0.02 | Aug 20, 2019 | The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues. | ||
| CVE-2017-18527 | Med | 0.40 | 6.1 | 0.02 | Aug 20, 2019 | The pagination plugin before 1.0.7 for WordPress has multiple XSS issues. | ||
| CVE-2017-18526 | Med | 0.40 | 6.1 | 0.01 | Aug 20, 2019 | The moreads-se plugin before 1.4.7 for WordPress has XSS. | ||
| CVE-2017-18524 | Med | 0.40 | 6.1 | 0.01 | Aug 20, 2019 | The football-pool plugin before 2.6.5 for WordPress has multiple XSS issues. | ||
| CVE-2017-18522 | Med | 0.40 | 6.1 | 0.01 | Aug 20, 2019 | The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book. |
- risk 0.40cvss 6.1epss 0.01
The smokesignal plugin before 1.2.7 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The megamenu plugin before 2.4 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.02
The bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The duplicate-post plugin before 2.6 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The cforms2 plugin before 13.2 for WordPress has XSS in lib_ajax.php.
- risk 0.40cvss 6.1epss 0.01
The count-per-day plugin before 3.2.3 for WordPress has XSS via search words.
- risk 0.40cvss 6.1epss 0.01
The sender plugin before 1.2.1 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The rsvp plugin before 2.3.8 for WordPress has persistent XSS via the note field on the attendee-list screen.
- risk 0.40cvss 6.1epss 0.01
The universal-analytics plugin before 1.3.1 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The formbuilder plugin before 1.06 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The profile-builder plugin before 2.2.5 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The flickr-justified-gallery plugin before 3.4.0 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms.
- risk 0.40cvss 6.1epss 0.01
The formbuilder plugin before 0.9.1 for WordPress has XSS via a Referer header.
- risk 0.40cvss 6.1epss 0.01
The wp-slimstat plugin before 4.8.1 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The wp-front-end-profile plugin before 0.2.2 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The updater plugin before 1.35 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The content-audit plugin before 1.9.2 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The booking-sms plugin before 1.1.0 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The analytics-tracker plugin before 1.1.1 for WordPress has XSS via a search event.
- risk 0.40cvss 6.1epss 0.01
The ad-buttons plugin before 2.3.2 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The wp-customer-reviews plugin before 3.0.9 for WordPress has XSS in the admin tools.
- risk 0.40cvss 6.1epss 0.01
The uji-countdown plugin before 2.0.7 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The the-events-calendar plugin before 4.8.2 for WordPress has XSS via the tribe_paged URL parameter.
- risk 0.40cvss 6.1epss 0.01
The weblibrarian plugin before 3.4.8.7 for WordPress has XSS via front-end short codes.
- risk 0.40cvss 6.1epss 0.01
The weblibrarian plugin before 3.4.8.6 for WordPress has XSS via front-end short codes.
- risk 0.40cvss 6.1epss 0.01
The weblibrarian plugin before 3.4.8.5 for WordPress has XSS via front-end short codes.
- risk 0.40cvss 6.1epss 0.02
The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.02
The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The share-on-diaspora plugin before 0.7.2 for WordPress has reflected XSS in share URL parameters.
- risk 0.40cvss 6.1epss 0.01
The total-security plugin before 3.4.1 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The sermon-browser plugin before 0.45.16 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The seo-redirection plugin before 4.3 for WordPress has stored XSS.
- risk 0.40cvss 6.1epss 0.01
The shortcode-factory plugin before 1.1.1 for WordPress has XSS via add_query_arg.
- risk 0.40cvss 6.1epss 0.01
The wp-all-import plugin before 3.4.7 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The user-role plugin before 1.5.6 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The rimons-twitter-widget plugin before 1.3 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The realty plugin before 1.1.0 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The rating-bws plugin before 0.2 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.02
The promobar plugin before 1.1.1 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.02
The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.02
The pagination plugin before 1.0.7 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The moreads-se plugin before 1.4.7 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The football-pool plugin before 2.6.5 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book.
Page 449 of 808