Browse CVEs

MEDIUM 5.4 CVE-2025-5540 The Event RSVP and Simple Event Management Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emd_mb_meta' sh… Event Rsvp And Simple Event Management after 4.1.0 Fix from $1,6002025-06-26 MEDIUM 6.4 CVE-2025-5539 The Simple Contact Form Plugin for WordPress – WP Easy Contact plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'em… Wp Easy Contact 4.0.1+ Fix from $1,6002025-06-04 MEDIUM 5.9 CVE-2024-6231 The Request a Quote WordPress plugin before 2.4.1 does not sanitise and escape some of its settings, which could allow high privilege users such as a… Request A Quote 2.4.1+ Fix from $1,6002024-07-23 MEDIUM 5.3 CVE-2024-3268 The YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress plugin for WordPress is vulnerable to unauthorized modification of… Youtube Video Gallery 3.4.0+ Fix from $1,6002024-05-21 HIGH 8.8 CVE-2023-40558 Cross-Site Request Forgery (CSRF) vulnerability in eMarket Design YouTube Video Gallery by YouTube Showcase plugin <= 3.3.5 versions. Youtube Video Gallery 3.3.6+ Fix from $1,9502023-10-03 HIGH 8.8 CVE-2022-2240 The Request a Quote WordPress plugin through 2.3.7 does not validate uploaded CSV files, allowing unauthenticated users to attach a malicious CSV fil… Request A Quote after 2.3.7 Fix from $1,9502022-07-25 MEDIUM 5.4 CVE-2021-24420 The Request a Quote WordPress plugin before 2.3.4 did not sanitise and escape some of its quote fields when adding/editing a quote as admin, leading … Request A Quote 2.3.4+ Fix from $1,6002021-07-12