Browse CVEs

HIGH 8.2 CVE-2025-30783 Cross-Site Request Forgery (CSRF) vulnerability in jgwhite33 WP Google Review Slider wp-google-places-review-slider allows SQL Injection.This issue a… Mitigation only Fix from $1,9502025-03-27 HIGH 7.1 CVE-2025-30787 Cross-Site Request Forgery (CSRF) vulnerability in Eli EZ SQL Reports Shortcode Widget and DB Backup elisqlreports allows Stored XSS.This issue affec… Mitigation only Fix from $1,9502025-03-27 HIGH 7.1 CVE-2025-30769 Cross-Site Request Forgery (CSRF) vulnerability in alexvtn WIP WooCarousel Lite wip-woocarousel-lite allows Stored XSS.This issue affects WIP WooCaro… Mitigation only Fix from $1,9502025-03-27 MEDIUM 6.5 CVE-2025-20228 In Splunk Enterprise versions below 9.3.3, 9.2.5, and 9.1.8 and Splunk Cloud Platform versions below 9.2.2403.108, and 9.1.2312.204, a low-privileged… Splunk 9.1.8 / 9.1.2312.204+ Fix from $1,6002025-03-26 HIGH 8.8 CVE-2024-13146 The Booknetic WordPress plugin before 4.1.5 does not have CSRF check when creating Staff accounts, which could allow attackers to make logged in admi… Booknetic 4.1.5+ Fix from $1,9502025-03-26 HIGH 8.8 CVE-2025-2319 The EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 4.11.13 to 5.25.08. Th… Mitigation only Fix from $1,9502025-03-25 MEDIUM 6.1 CVE-2025-1798 The does not sanitise and escape some parameters when outputting them back in a page, allowing unauthenticated users the ability to perform stored C… Design Comuni Italia 1.1.2+ Fix from $1,6002025-03-25 CRITICAL 9.6 CVE-2025-30615 Cross-Site Request Forgery (CSRF) vulnerability in Jacob Schwartz WP e-Commerce Style Email wp-e-commerce-style-email allows Code Injection.This issu… Mitigation only Fix from $2,3002025-03-24 MEDIUM 5.4 CVE-2025-30619 Cross-Site Request Forgery (CSRF) vulnerability in SpeakPipe SpeakPipe speakpipe-voicemail-for-websites allows Cross Site Request Forgery.This issue … Mitigation only Fix from $1,6002025-03-24 HIGH 7.1 CVE-2025-30620 Cross-Site Request Forgery (CSRF) vulnerability in coderscom WP Odoo Form Integrator wp-odoo-form-integrator allows Stored XSS.This issue affects WP … Mitigation only Fix from $1,9502025-03-24 HIGH 7.1 CVE-2025-30621 Cross-Site Request Forgery (CSRF) vulnerability in kornelly Translator translator allows Stored XSS.This issue affects Translator: from n/a through <… Mitigation only Fix from $1,9502025-03-24 HIGH 7.1 CVE-2025-30608 Cross-Site Request Forgery (CSRF) vulnerability in Anthony WordPress SQL Backup wordpress-sql-backup allows Stored XSS.This issue affects WordPress S… Mitigation only Fix from $1,9502025-03-24 HIGH 7.1 CVE-2025-30612 Cross-Site Request Forgery (CSRF) vulnerability in mandegarweb Replace Default Words replace-default-words allows Stored XSS.This issue affects Repla… Mitigation only Fix from $1,9502025-03-24 HIGH 7.1 CVE-2025-30603 Cross-Site Request Forgery (CSRF) vulnerability in DEJAN CopyLink copy-link allows Stored XSS.This issue affects CopyLink: from n/a through <= 1.1. Mitigation only Fix from $1,9502025-03-24 HIGH 7.1 CVE-2025-30588 Cross-Site Request Forgery (CSRF) vulnerability in ryan_xantoo Map Contact map-contact allows Stored XSS.This issue affects Map Contact: from n/a thr… Mitigation only Fix from $1,9502025-03-24 HIGH 7.1 CVE-2025-30578 Cross-Site Request Forgery (CSRF) vulnerability in hotvanrod AdSense Privacy Policy adsense-privacy-policy allows Stored XSS.This issue affects AdSen… Mitigation only Fix from $1,9502025-03-24 HIGH 7.1 CVE-2025-30583 Cross-Site Request Forgery (CSRF) vulnerability in ProRankTracker Pro Rank Tracker proranktracker allows Stored XSS.This issue affects Pro Rank Track… Mitigation only Fix from $1,9502025-03-24 HIGH 7.1 CVE-2025-30584 Cross-Site Request Forgery (CSRF) vulnerability in alphaomegaplugins AlphaOmega Captcha & Anti-Spam Filter alphaomega-captcha-anti-spam allows Stored… Mitigation only Fix from $1,9502025-03-24 HIGH 7.1 CVE-2025-30586 Cross-Site Request Forgery (CSRF) vulnerability in bbodine1 cTabs ctabs allows Stored XSS.This issue affects cTabs: from n/a through <= 1.3. Mitigation only Fix from $1,9502025-03-24 HIGH 7.1 CVE-2025-30587 Cross-Site Request Forgery (CSRF) vulnerability in shawfactor LH OGP Meta lh-ogp-meta-tags allows Stored XSS.This issue affects LH OGP Meta: from n/a… Mitigation only Fix from $1,9502025-03-24 HIGH 7.1 CVE-2025-30572 Cross-Site Request Forgery (CSRF) vulnerability in Igor Yavych Simple Rating simple-rating allows Stored XSS.This issue affects Simple Rating: from n… Mitigation only Fix from $1,9502025-03-24 HIGH 7.1 CVE-2025-30577 Cross-Site Request Forgery (CSRF) vulnerability in mendibass Browser Address Bar Color browser-address-bar-color allows Stored XSS.This issue affects… Mitigation only Fix from $1,9502025-03-24 HIGH 7.1 CVE-2025-30564 Cross-Site Request Forgery (CSRF) vulnerability in wpwox Custom Script Integration custom-script-integration allows Stored XSS.This issue affects Cus… Mitigation only Fix from $1,9502025-03-24 HIGH 7.1 CVE-2025-30565 Cross-Site Request Forgery (CSRF) vulnerability in karrikas banner-manager banner-manager allows Stored XSS.This issue affects banner-manager: from n… Mitigation only Fix from $1,9502025-03-24 HIGH 7.1 CVE-2025-30561 Cross-Site Request Forgery (CSRF) vulnerability in Henrique Mouta CAS Maestro cas-maestro allows Stored XSS.This issue affects CAS Maestro: from n/a … Mitigation only Fix from $1,9502025-03-24 HIGH 7.1 CVE-2025-30560 Cross-Site Request Forgery (CSRF) vulnerability in Sana Ullah jQuery Dropdown Menu jquery-drop-down-menu-plugin allows Stored XSS.This issue affects … Mitigation only Fix from $1,9502025-03-24 HIGH 7.1 CVE-2025-30558 Cross-Site Request Forgery (CSRF) vulnerability in EnzoCostantini55 ANAC XML Render anac-xml-render allows Stored XSS.This issue affects ANAC XML Ren… Mitigation only Fix from $1,9502025-03-24 HIGH 7.1 CVE-2025-30550 Cross-Site Request Forgery (CSRF) vulnerability in WPShop.ru CallPhone'r callphoner allows Stored XSS.This issue affects CallPhone'r: from n/a throug… Mitigation only Fix from $1,9502025-03-24 HIGH 7.1 CVE-2025-30552 Cross-Site Request Forgery (CSRF) vulnerability in Donald Gilbert WordPress Admin Bar Improved wordpress-admin-bar-improved allows Stored XSS.This is… Mitigation only Fix from $1,9502025-03-24 HIGH 7.1 CVE-2025-30555 Cross-Site Request Forgery (CSRF) vulnerability in iiiryan WordPres 同步微博 wp2wb allows Stored XSS.This issue affects WordPres 同步微博: from n/a t… Mitigation only Fix from $1,9502025-03-24