Vendor CVEs
WordPress
All CVEs
40,358 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2017-18518 | Med | 0.40 | 6.1 | 0.02 | Aug 20, 2019 | The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues. | ||
| CVE-2016-10895 | Med | 0.40 | 6.1 | 0.01 | Aug 20, 2019 | The option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or add_social_links AJAX request. | ||
| CVE-2016-10892 | Med | 0.40 | 6.1 | 0.01 | Aug 20, 2019 | The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues. | ||
| CVE-2015-9320 | Med | 0.40 | 6.1 | 0.01 | Aug 20, 2019 | The option-tree plugin before 2.5.4 for WordPress has XSS related to add_query_arg. | ||
| CVE-2015-9319 | Med | 0.40 | 6.1 | 0.01 | Aug 20, 2019 | The gregs-high-performance-seo plugin before 1.6.2 for WordPress has XSS in the context of an old browser. | ||
| CVE-2017-18568 | Med | 0.40 | 6.1 | 0.01 | Aug 20, 2019 | The my-wp-translate plugin before 1.0.4 for WordPress has XSS. | ||
| CVE-2017-18567 | Med | 0.40 | 6.1 | 0.01 | Aug 20, 2019 | The wp-all-import plugin before 3.4.6 for WordPress has XSS. | ||
| CVE-2017-18520 | Med | 0.40 | 6.1 | 0.01 | Aug 20, 2019 | The democracy-poll plugin before 5.4 for WordPress has XSS via update_l10n in admin/class.DemAdminInit.php. | ||
| CVE-2017-18517 | Med | 0.40 | 6.1 | 0.02 | Aug 20, 2019 | The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues. | ||
| CVE-2016-10913 | Med | 0.40 | 6.1 | 0.01 | Aug 20, 2019 | The wp-latest-posts plugin before 3.7.5 for WordPress has XSS. | ||
| CVE-2015-9329 | Med | 0.40 | 6.1 | 0.01 | Aug 20, 2019 | The wp-all-import plugin before 3.2.5 for WordPress has reflected XSS. | ||
| CVE-2015-9317 | Med | 0.40 | 6.1 | 0.01 | Aug 20, 2019 | The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages. | ||
| CVE-2019-15082 | Med | 0.40 | 6.1 | 0.01 | Aug 20, 2019 | The 360-product-rotation plugin before 1.4.8 for WordPress has reflected XSS. | ||
| CVE-2019-15116 | Med | 0.40 | 6.1 | 0.01 | Aug 16, 2019 | The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging. | ||
| CVE-2017-18542 | Med | 0.40 | 6.1 | 0.01 | Aug 16, 2019 | The zendesk-help-center plugin before 1.0.5 for WordPress has multiple XSS issues. | ||
| CVE-2017-18541 | Med | 0.40 | 6.1 | 0.01 | Aug 16, 2019 | The xo-security plugin before 1.5.3 for WordPress has XSS. | ||
| CVE-2019-14789 | Med | 0.40 | 6.1 | 0.02 | Aug 15, 2019 | The Custom 404 Pro plugin 3.2.8 for WordPress has XSS via the wp-admin/admin.php?page=c4p-main page parameter. | ||
| CVE-2019-14784 | Med | 0.40 | 6.1 | 0.01 | Aug 15, 2019 | The "CP Contact Form with PayPal" plugin before 1.2.98 for WordPress has XSS in CSS edition. | ||
| CVE-2019-14790 | Med | 0.40 | 6.1 | 0.01 | Aug 15, 2019 | The limb-gallery (aka Limb Gallery) plugin 1.4.0 for WordPress has XSS via the wp-admin/admin-ajax.php?action=grsGalleryAjax&grsAction=shortcode task parameter, | ||
| CVE-2016-10881 | Med | 0.40 | 6.1 | 0.01 | Aug 14, 2019 | The google-document-embedder plugin before 2.6.2 for WordPress has XSS. | ||
| CVE-2016-10880 | Med | 0.40 | 6.1 | 0.01 | Aug 14, 2019 | The google-document-embedder plugin before 2.6.1 for WordPress has XSS. | ||
| CVE-2015-9314 | Med | 0.40 | 6.1 | 0.01 | Aug 14, 2019 | The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header. | ||
| CVE-2015-9312 | Med | 0.40 | 6.1 | 0.02 | Aug 14, 2019 | The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element. | ||
| CVE-2015-9311 | Med | 0.40 | 6.1 | 0.01 | Aug 14, 2019 | The newstatpress plugin before 1.0.6 for WordPress has reflected XSS. | ||
| CVE-2017-18488 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues. | ||
| CVE-2017-18487 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The adsense-plugin (aka Google AdSense) plugin before 1.44 for WordPress has multiple XSS issues. | ||
| CVE-2016-10867 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The all-in-one-wp-security-and-firewall plugin before 4.0.6 for WordPress has XSS in settings pages. | ||
| CVE-2016-10866 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The all-in-one-wp-security-and-firewall plugin before 4.2.0 for WordPress has multiple XSS issues. | ||
| CVE-2018-20963 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The contact-form-to-email plugin before 1.2.66 for WordPress has XSS. | ||
| CVE-2017-18507 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS. | ||
| CVE-2017-18498 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The simple-job-board plugin before 2.4.4 for WordPress has reflected XSS via keyword search. | ||
| CVE-2017-18497 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The liveforms plugin before 3.4.0 for WordPress has XSS. | ||
| CVE-2017-18496 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues. | ||
| CVE-2017-18495 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The gravity-forms-sms-notifications plugin before 2.4.0 for WordPress has XSS. | ||
| CVE-2017-18494 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The custom-search-plugin plugin before 1.36 for WordPress has multiple XSS issues. | ||
| CVE-2017-18493 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The custom-admin-page plugin before 0.1.2 for WordPress has multiple XSS issues. | ||
| CVE-2017-18492 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues. | ||
| CVE-2017-18491 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues. | ||
| CVE-2017-18490 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues. | ||
| CVE-2017-18489 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The contact-form-7-sms-addon plugin before 2.4.0 for WordPress has XSS. | ||
| CVE-2016-10870 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The google-language-translator plugin before 5.0.06 for WordPress has XSS. | ||
| CVE-2016-10869 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The contact-form-plugin plugin before 4.0.2 for WordPress has XSS. | ||
| CVE-2016-10868 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The all-in-one-wp-security-and-firewall plugin before 4.0.5 for WordPress has XSS in the blacklist, file system, and file change detection settings pages. | ||
| CVE-2015-9302 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The simple-fields plugin before 1.4.11 for WordPress has XSS. | ||
| CVE-2015-9300 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The events-manager plugin before 5.5.7 for WordPress has multiple XSS issues. | ||
| CVE-2015-9299 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The events-manager plugin before 5.5.7.1 for WordPress has DOM XSS. | ||
| CVE-2015-9297 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The events-manager plugin before 5.6 for WordPress has XSS. | ||
| CVE-2015-9296 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The download-monitor plugin before 1.7.1 for WordPress has XSS related to add_query_arg. | ||
| CVE-2015-9295 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The contact-form-plugin plugin before 3.96 for WordPress has XSS. | ||
| CVE-2015-9294 | Med | 0.40 | 6.1 | 0.01 | Aug 13, 2019 | The all-in-one-wp-security-and-firewall plugin before 3.9.5 for WordPress has XSS in add_query_arg and remove_query_arg function instances. |
- risk 0.40cvss 6.1epss 0.02
The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or add_social_links AJAX request.
- risk 0.40cvss 6.1epss 0.01
The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The option-tree plugin before 2.5.4 for WordPress has XSS related to add_query_arg.
- risk 0.40cvss 6.1epss 0.01
The gregs-high-performance-seo plugin before 1.6.2 for WordPress has XSS in the context of an old browser.
- risk 0.40cvss 6.1epss 0.01
The my-wp-translate plugin before 1.0.4 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The wp-all-import plugin before 3.4.6 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The democracy-poll plugin before 5.4 for WordPress has XSS via update_l10n in admin/class.DemAdminInit.php.
- risk 0.40cvss 6.1epss 0.02
The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The wp-latest-posts plugin before 3.7.5 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The wp-all-import plugin before 3.2.5 for WordPress has reflected XSS.
- risk 0.40cvss 6.1epss 0.01
The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages.
- risk 0.40cvss 6.1epss 0.01
The 360-product-rotation plugin before 1.4.8 for WordPress has reflected XSS.
- risk 0.40cvss 6.1epss 0.01
The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging.
- risk 0.40cvss 6.1epss 0.01
The zendesk-help-center plugin before 1.0.5 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The xo-security plugin before 1.5.3 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.02
The Custom 404 Pro plugin 3.2.8 for WordPress has XSS via the wp-admin/admin.php?page=c4p-main page parameter.
- risk 0.40cvss 6.1epss 0.01
The "CP Contact Form with PayPal" plugin before 1.2.98 for WordPress has XSS in CSS edition.
- risk 0.40cvss 6.1epss 0.01
The limb-gallery (aka Limb Gallery) plugin 1.4.0 for WordPress has XSS via the wp-admin/admin-ajax.php?action=grsGalleryAjax&grsAction=shortcode task parameter,
- risk 0.40cvss 6.1epss 0.01
The google-document-embedder plugin before 2.6.2 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The google-document-embedder plugin before 2.6.1 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header.
- risk 0.40cvss 6.1epss 0.02
The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element.
- risk 0.40cvss 6.1epss 0.01
The newstatpress plugin before 1.0.6 for WordPress has reflected XSS.
- risk 0.40cvss 6.1epss 0.01
The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The adsense-plugin (aka Google AdSense) plugin before 1.44 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The all-in-one-wp-security-and-firewall plugin before 4.0.6 for WordPress has XSS in settings pages.
- risk 0.40cvss 6.1epss 0.01
The all-in-one-wp-security-and-firewall plugin before 4.2.0 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The contact-form-to-email plugin before 1.2.66 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The simple-job-board plugin before 2.4.4 for WordPress has reflected XSS via keyword search.
- risk 0.40cvss 6.1epss 0.01
The liveforms plugin before 3.4.0 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The gravity-forms-sms-notifications plugin before 2.4.0 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The custom-search-plugin plugin before 1.36 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The custom-admin-page plugin before 0.1.2 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The contact-form-7-sms-addon plugin before 2.4.0 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The google-language-translator plugin before 5.0.06 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The contact-form-plugin plugin before 4.0.2 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The all-in-one-wp-security-and-firewall plugin before 4.0.5 for WordPress has XSS in the blacklist, file system, and file change detection settings pages.
- risk 0.40cvss 6.1epss 0.01
The simple-fields plugin before 1.4.11 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The events-manager plugin before 5.5.7 for WordPress has multiple XSS issues.
- risk 0.40cvss 6.1epss 0.01
The events-manager plugin before 5.5.7.1 for WordPress has DOM XSS.
- risk 0.40cvss 6.1epss 0.01
The events-manager plugin before 5.6 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The download-monitor plugin before 1.7.1 for WordPress has XSS related to add_query_arg.
- risk 0.40cvss 6.1epss 0.01
The contact-form-plugin plugin before 3.96 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The all-in-one-wp-security-and-firewall plugin before 3.9.5 for WordPress has XSS in add_query_arg and remove_query_arg function instances.
Page 450 of 808