Browse CVEs

MEDIUM 5.3 CVE-2025-4302 The Stop User Enumeration WordPress plugin before version 1.7.3 blocks REST API /wp-json/wp/v2/users/ requests for non-authorized users. However, thi… Stop User Enumeration 1.7.3+ Fix from $1,6002025-07-17 MEDIUM 5.4 CVE-2023-23889 Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions. Quick Paypal Payments 5.7.26+ Fix from $1,6002023-04-25 MEDIUM 6.1 CVE-2023-25713 Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions. Quick Paypal Payments 5.7.26+ Fix from $1,6002023-04-07 MEDIUM 5.4 CVE-2023-23885 Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Contact Form plugin <= 8.0.3.1 versions. Quick Contact Form after 8.0.3.1 Fix from $1,6002023-04-07 MEDIUM 6.1 CVE-2023-23979 Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Event Manager plugin <= 9.7.4 versions. Quick Event Manager 9.7.5+ Fix from $1,6002023-04-06 MEDIUM 5.4 CVE-2023-23974 Cross-Site Request Forgery (CSRF) vulnerability in Fullworks Quick Event Manager plugin <= 9.7.4 affecting all registration actions (delete, delete a… Quick Event Manager 9.7.5+ Fix from $1,6002023-03-01 MEDIUM 6.1 CVE-2023-23491 The Quick Event Manager WordPress Plugin, version < 9.7.5, is affected by a reflected cross-site scripting vulnerability in the 'category' parameter … Quick Event Manager 9.7.5+ Fix from $1,6002023-01-20 MEDIUM 5.4 CVE-2022-37339 Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Meet My Team plugin <= 2.0.5 at WordPress. Meet My Team after 2.0.5 Fix from $1,6002022-09-23 MEDIUM 6.1 CVE-2017-18536 The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS. Stop User Enumeration 1.3.8+ Fix from $1,6002019-08-21 MEDIUM 5.3 CVE-2017-1000226 Stop User Enumeration 1.3.8 allows user enumeration via the REST API Stop User Enumeration No fix yet Fix from $1,6002017-11-17