VYPR
← WordPress

Vendor CVEs

WordPress

All CVEs

40,172 total · sorted by risk
  • CVE-2023-45068MedOct 12, 2023
    Supsystic
    Contact Form
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Contact Form by Supsystic plugin <= 1.7.27 versions.

  • CVE-2023-45060MedOct 12, 2023
    Fla Shop
    Interactive World Map
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Fla-shop.Com Interactive World Map plugin <= 3.2.0 versions.

  • CVE-2023-45048MedOct 12, 2023
    Repuso
    Repuso
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Repuso Social proof testimonials and reviews by Repuso plugin <= 5.00 versions.

  • CVE-2023-5470MedOct 12, 2023
    WordPress
    Etsy Shop
    risk 0.35cvss 6.4epss 0.01

    The Etsy Shop plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'etsy-shop' shortcode in versions up to, and including, 3.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated…

  • CVE-2023-44997MedOct 11, 2023
    Nitinrathod
    Wp Forms Puzzle Captcha
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Nitin Rathod WP Forms Puzzle Captcha plugin <= 4.1 versions.

  • CVE-2023-44996MedOct 10, 2023
    Nareshparmar827
    Post View Count
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Naresh Parmar Post View Count plugin <= 1.8.2 versions.

  • CVE-2023-44995MedOct 10, 2023
    Wpdoctor
    Woocommerce Login Redirect
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in WP Doctor WooCommerce Login Redirect plugin <= 2.2.4 versions.

  • CVE-2023-44475MedOct 10, 2023
    Michael Simpson
    Add Shortcodes Actions And Filters
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Michael Simpson Add Shortcodes Actions And Filters plugin <= 2.0.9 versions.

  • CVE-2023-44470MedOct 10, 2023
    Kvvaradha
    Kv Tinymce Editor Add Fonts
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Kvvaradha Kv TinyMCE Editor Add Fonts plugin <= 1.1 versions.

  • CVE-2023-41854MedOct 10, 2023
    Wpcentral
    Wpcentral
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Softaculous Ltd. WpCentral plugin <= 1.5.7 versions.

  • CVE-2023-41670MedOct 9, 2023
    Palasthotel
    Use Memcached
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Palasthotel (in person: Edward Bock) Use Memcached plugin <= 1.0.4 versions.

  • CVE-2023-41668MedOct 9, 2023
    Leadster
    Leadster
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Leadster plugin <= 1.1.2 versions.

  • CVE-2023-44473MedOct 9, 2023
    Dublue
    Table Of Contents Plus
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Michael Tran Table of Contents Plus plugin <= 2302 versions.

  • CVE-2023-44236MedOct 9, 2023
    Devnath Verma
    Wp Captcha
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Devnath verma WP Captcha plugin <= 2.0.0 versions.

  • CVE-2023-44233MedOct 6, 2023
    Fooplugins
    Foogallery
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in FooPlugins Best WordPress Gallery Plugin – FooGallery plugin <= 2.2.44 versions.

  • CVE-2023-41950MedOct 6, 2023
    Laposta
    Laposta Signup Basic
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Laposta - Roel Bousardt Laposta Signup Basic plugin <= 1.4.1 versions.

  • CVE-2023-41801MedOct 6, 2023
    Strategy11
    Awp Classifieds
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in AWP Classifieds Team Ad Directory & Listings by AWP Classifieds plugin <= 4.3 versions.

  • CVE-2023-41732MedOct 6, 2023
    Codepeople
    Cp Blocks
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in CodePeople CP Blocks plugin <= 1.0.20 versions.

  • CVE-2023-41659MedOct 6, 2023
    Bdwm
    Responsive Gallery Grid
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Jules Colle, BDWM Responsive Gallery Grid plugin <= 2.3.10 versions.

  • CVE-2023-41654MedOct 6, 2023
    Heiglandreas
    Authldap
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Andreas Heigl authLdap plugin <= 2.5.8 versions.

  • CVE-2023-29235MedOct 6, 2023
    Fugu
    Maintenance Switch
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Fugu Maintenance Switch plugin <= 1.5.2 versions.

  • CVE-2023-27615MedOct 6, 2023
    Dipakgajjar
    Wp Super Minify
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Dipak C. Gajjar WP Super Minify plugin <= 1.5.1 versions.

  • CVE-2023-27448MedOct 6, 2023
    MakeStories Team
    MakeStories (for Google Web Stories)
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in MakeStories Team MakeStories (for Google Web Stories) plugin <= 2.8.0 versions.

  • CVE-2023-25033MedOct 6, 2023
    Sumo
    Social Share Boost
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Sumo Social Share Boost plugin <= 4.5 versions.

  • CVE-2023-40561MedOct 4, 2023
    Thedotstore
    Enhanced Ecommerce Google Analytics For Woocommerce
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Enhanced Ecommerce Google Analytics for WooCommerce plugin <= 3.7.1 versions.

  • CVE-2023-27433MedOct 4, 2023
    Yasglobal
    Make Paths Relative
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in YAS Global Team Make Paths Relative allows Cross Site Request Forgery.This issue affects Make Paths Relative: from n/a through 1.3.0.

  • CVE-2023-5291MedOct 4, 2023
    WordPress
    Blog Filter
    risk 0.35cvss 6.4epss 0.01

    The Blog Filter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'AWL-BlogFilter' shortcode in versions up to, and including, 1.5.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for…

  • CVE-2023-41693MedOct 3, 2023
    Edward Plainview
    Mycryptocheckout
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in edward_plainview MyCryptoCheckout plugin <= 2.125 versions.

  • CVE-2023-40558MedOct 3, 2023
    Emarketdesign
    Youtube Video Gallery
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in eMarket Design YouTube Video Gallery by YouTube Showcase plugin <= 3.3.5 versions.

  • CVE-2023-32091MedOct 3, 2023
    Poeditor
    Poeditor
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in POEditor plugin <= 0.9.4 versions.

  • CVE-2023-40202MedOct 3, 2023
    Codemiq
    Wp HTML Mail
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Hannes Etzelstorfer // codemiq WP HTML Mail plugin <= 3.4.1 versions.

  • CVE-2023-40199MedOct 3, 2023
    Crudlab
    Wp Like Button
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in CRUDLab WP Like Button plugin <= 1.7.0 versions.

  • CVE-2023-40198MedOct 3, 2023
    Antsanchez
    Easy Cookie Law
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Antsanchez Easy Cookie Law plugin <= 3.1 versions.

  • CVE-2023-40009MedOct 3, 2023
    Thimpress
    Wp Pipes
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in ThimPress WP Pipes plugin <= 1.4.0 versions.

  • CVE-2023-40210MedOct 3, 2023
    Commentluv
    Sb Child List
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Sean Barton (Tortoise IT) SB Child List plugin <= 4.5 versions.

  • CVE-2023-39989MedOct 3, 2023
    Draftpress
    Header Footer Code Manager
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in 99robots Header Footer Code Manager plugin <= 1.1.34 versions.

  • CVE-2023-39923MedOct 3, 2023
    Radiustheme
    The Post Grid
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in RadiusTheme The Post Grid plugin <= 7.2.7 versions.

  • CVE-2023-39165MedOct 3, 2023
    Fetchdesigns
    Sign Up Sheets
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Fetch Designs Sign-up Sheets plugin <= 2.2.8 versions.

  • CVE-2023-2830MedOct 3, 2023
    Trustindex
    Wp Testimonials
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Trustindex.Io WP Testimonials plugin <= 1.4.2 versions.

  • CVE-2023-38396MedOct 3, 2023
    Web Argument
    Google Map Shortcode
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Alain Gonzalez plugin <= 3.1.2 versions.

  • CVE-2023-25463MedOct 3, 2023
    Gopiplus
    Wp Tell A Friend Popup Form
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Gopi Ramasamy WP tell a friend popup form plugin <= 7.1 versions.

  • CVE-2022-46841MedOct 3, 2023
    Soflyy
    Oxygen
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Soflyy Oxygen Builder plugin <= 4.4 versions.

  • CVE-2023-38381MedOct 3, 2023
    WordPress
    WP-FlyBox
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Cyle Conoly WP-FlyBox plugin <= 6.46 versions.

  • CVE-2023-37996MedOct 3, 2023
    Gtmetrix
    Gtmetrix
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in GTmetrix GTmetrix for WordPress plugin <= 0.4.7 versions.

  • CVE-2023-37992MedOct 3, 2023
    Presspage
    Smarty For Wordpress
    risk 0.35cvss 5.4epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in PressPage Entertainment Inc. Smarty for WordPress plugin <= 3.1.35 versions.

  • CVE-2023-5162MedSep 27, 2023
    WordPress
    Options for Twenty Seventeen
    risk 0.35cvss 6.4epss 0.01

    The Options for Twenty Seventeen plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'social-links' shortcode in versions up to, and including, 2.5.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible…

  • CVE-2023-5161MedSep 27, 2023
    WordPress
    Modal Window
    risk 0.35cvss 6.4epss 0.01

    The Modal Window plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 5.3.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers…

  • CVE-2023-5135MedSep 27, 2023
    WordPress
    Simple Cloudflare Turnstile
    risk 0.35cvss 6.4epss 0.01

    The Simple Cloudflare Turnstile plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'gravity-simple-turnstile' shortcode in versions up to, and including, 1.23.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes…

  • CVE-2023-4281MedSep 25, 2023
    WordPress
    Activity Log
    risk 0.35cvss 5.3epss 0.01

    This Activity Log WordPress plugin before 2.8.8 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic.

  • CVE-2023-4774MedSep 22, 2023
    WordPress
    WP-Piwik
    risk 0.35cvss 6.4epss 0.01

    The WP-Matomo Integration (WP-Piwik) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wp-piwik' shortcode in versions up to, and including, 1.0.28 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…

Page 540 of 804