Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from nearly 30 public sources, updated hourly.
- Tracked
- 410,166
- Last 24h
- 693
- Critical, 7 days
- 367
- Known exploited
- 1,779
98,052 results · Clear filters · Feed
-
High 8.8
click5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Stored XSS via post_notifications
The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege use…
-
High 8.8
click5 CRM add-on to Gravity Forms <= 1.0.3 - Unauthenticated Stored XSS via post_notifications
The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privile…
-
High 8.8
click5 CRM add-on to Ninja Forms <= 1.0.1 - Unauthenticated Stored XSS via post_notifications
The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege…
-
High 8.6
Tcard WP <= 1.8.0 - Unauthenticated SQLi via group_id Parameter
The Tcard WP WordPress plugin through 1.8.0 does not sanitise and escape a parameter before using it in a SQL statement in one of its unauthenticated AJAX actions, allowing unauthenticated users to perform SQL injection attacks.
-
High 7.5
WooCommerce Bookings < 3.11.0 - Unauthenticated Denial of Service
The WooCommerce Bookings WordPress plugin before 3.11.0 does not limit a user-supplied value before using it to allocate memory in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to exhaust server memory and cause a Denial of Servi…
-
High 7.2
Envira Gallery < 1.16.2 - Multisite Subsite Admin+ Arbitrary Plugin Installation via Onboarding Wizard
The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves for installing Envira Gallery WordPress plugin before 1.16.2 code before processing its setup-wizard Envira Gallery WordPress plugin before 1…
-
High 7.5
WeddingCity Lite <= 1.0.4 - Unauthenticated Arbitrary Post and Attachment Deletion
The WeddingCity Lite WordPress plugin through 1.0.4 does not perform any authorisation or validity checks before deleting posts, pages and media attachments, allowing unauthenticated attackers to permanently delete arbitrary content site-wide.
-
High 8.8
Mobile builder <= 1.4.2 - Subscriber+ Privilege Escalation to Admin
The Mobile builder WordPress plugin through 1.4.2 does not properly restrict which user meta keys a logged-in user can update through one of its REST routes, allowing any user with a self-registered account, such as a customer, to grant themselves the adminis…
-
High 8.8
Prenotazioni <= 1.7.5 - Unauthenticated Stored XSS via Settings Update
The Prenotazioni WordPress plugin through 1.7.5 does not have authorisation and CSRF checks when saving its settings, and does not escape some of them when outputting them, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against …
-
High 8.6
Mobile Builder <= 1.4.2 - Unauthenticated SQLi via 'vendor_id' Parameter
The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks.
-
High 8.3
Studio-Saelix Sencho Login Endpoint login improper authentication
A vulnerability was found in Studio-Saelix Sencho up to 0.94.1. This affects an unknown part of the file /api/auth/login of the component Login Endpoint. Performing a manipulation of the argument X-Forwarded-For results in improper authentication. The attack …
-
High 7.1
MultiVendorX through 5.0.19 Incorrect Authorization via Settings REST Endpoint
MultiVendorX WordPress plugin through 5.0.19 contains an incorrect authorization vulnerability that allows vendor accounts to modify marketplace-wide settings via the settings REST endpoint. Attackers with the store_owner role can send POST requests to /wp-js…
-
High 7.0
ImageMagick through 7.1.2-33 and 6.9.13-58 Uncontrolled Search Path via Ghostscript Delegate
ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscriptEXE() that launches gswin64c.exe by bare name when Ghostscript is unregistered. Attackers can plant a malicious gswin64c.exe in the workin…
-
High 8.8
Wukong_HRM through commit 186115e Missing Authorization via EmployeeAspect and EmployeeUtil
Wukong_HRM through commit 186115e contains a missing authorization vulnerability because EmployeeAspect assigns every caller the HR administrator role and EmployeeUtil data-scope checks return all employees. Any authenticated low-privileged employee can read …
-
High 8.1
JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/passApply
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows any authenticated user to approve tenant administrator applications. Attackers can file a pending application via doApplyTenantPack…
-
High 8.1
JeecgBoot through 3.9.5 Missing Authorization via saveDeptRolePermission Endpoint
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDeptRolePermission endpoint of SysDepartPermissionController that allows any authenticated user to modify department role permissions. Low-privileged attackers can submit roleId…
-
High 7.1
JeecgBoot through 3.9.5 Missing Authorization via /sys/log/deleteBatch
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController deleteBatch handler that allows any authenticated user to delete system audit log entries. Low-privileged attackers can send a DELETE request with ids set to allcle…
-
High 7.2
WordPress Builderius plugin <= 1.4-beta - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forgery. This issue affects Builderius: from 1.4 through 1.4-beta.
-
High 7.1
WordPress Kids Planet theme <= 2.2.14.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Group Kids Planet allows Reflected XSS. This issue affects Kids Planet: from n/a through 2.2.14.2.
-
High 7.1
WordPress Educavo theme <= 3.4.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Educavo <= 3.4.2 versions.
-
High 7.1
WordPress LMS theme <= 8.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in LMS <= 8.3 versions.
-
High 7.7
WordPress FoodBakery theme <= 4.6 - Arbitrary File Deletion vulnerability
Subscriber Arbitrary File Deletion in FoodBakery <= 4.6 versions.
-
High 8.1
WordPress Ambient theme <= 1.7 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.
-
High 7.2
WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.8 - PHP Object Injection vulnerability
Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.
-
High 7.5
WordPress Forminator plugin <= 1.57.3 - Arbitrary Content Deletion vulnerability
Unauthenticated Arbitrary Content Deletion in Forminator <= 1.57.3 versions.
-
High 7.3
WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.13.1 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
-
High 8.5
WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.13.1 - SQL Injection vulnerability
Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
-
High 7.1
WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
-
High 7.1
WordPress KuteShop theme <= 4.2.9 - Reflected Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions.
-
High 8.1
WordPress KuteShop theme <= 4.2.9 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.
-
High 8.1
WordPress Boutique theme <= 2.3.3 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.
-
High 7.1
WordPress Biolife theme <= 3.2.3 - Reflected Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions.
-
High 8.1
WordPress Biolife theme <= 3.2.3 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.
-
High 8.1
WordPress TechOne theme <= 3.0.3 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.
-
High 7.1
WordPress TechOne theme <= 3.0.3 - Reflected Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions.
-
High 7.1
WordPress Armania theme <= 1.4.8 - Reflected Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions.
-
High 8.1
WordPress Armania theme <= 1.4.8 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.
-
High 7.1
WordPress Pin WP theme <= 7.0 - Reflected Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Pin WP <= 7.0 versions.
-
High 8.1
WordPress Backhoe theme <= 2.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Backhoe <= 2.0 versions.
-
High 8.1
WordPress Ozeum theme <= 1.3.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Ozeum <= 1.3.0 versions.