Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
External Store For Shopify
MEDIUM 6.1
CVE-2025-7808
The WP Shopify WordPress plugin before 1.5.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected C…
Fix: 1.5.4+
Fix from $1,600
2025-08-14
Injection Guard
MEDIUM 6.1
CVE-2025-8046
The Injection Guard WordPress plugin before 1.2.8 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, wh…
Fix: 1.2.8+
Fix from $1,600
2025-08-14
Rss Feed Widget
MEDIUM 5.4
CVE-2024-10057
The RSS Feed Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's rfw-youtube-videos shortcode in all versions u…
Fix: 3.0.0+
Fix from $1,600
2024-10-18
Wp Docs
MEDIUM 5.4
CVE-2024-35695
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Fahad Mahmood WP Docs allows Stored XSS.…
Fix: 2.1.4+
Fix from $1,600
2024-06-08