Browse CVEs

HIGH 7.1 CVE-2025-5034 The wp-file-download WordPress plugin before 6.2.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Refle… Wp File Download 6.2.6+ Fix from $1,9502025-06-21 MEDIUM 6.5 CVE-2024-13374 The WP Table Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on thewptm_getFolders AJAX action in… Wp Table Manager 4.1.4+ Fix from $1,6002025-02-12 MEDIUM 5.4 CVE-2024-45456 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomUnited WP Meta SEO wp-meta-seo allows Store… Wp Meta Seo 4.5.14+ Fix from $1,6002024-09-15 MEDIUM 6.1 CVE-2023-6961 The WP Meta SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Referer’ header in all versions up to, and including, 4.5.… Wp Meta Seo 4.5.13+ Fix from $1,6002024-05-02 MEDIUM 5.3 CVE-2023-6962 The WP Meta SEO plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.5.12 via the meta descri… Wp Meta Seo 4.5.13+ Fix from $1,6002024-05-02 HIGH 8.8 CVE-2024-25909 Unrestricted Upload of File with Dangerous Type vulnerability in JoomUnited WP Media folder.This issue affects WP Media folder: from n/a through 5.7.… Wp Media Folder 5.7.3+ Fix from $1,9502024-02-26 MEDIUM 6.1 CVE-2024-22148 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Smart Editor JoomUnited allows Reflected XSS… Wp Smart Editor after 1.3.3 Fix from $1,6002024-02-01 HIGH 8.8 CVE-2023-1381 The WP Meta SEO WordPress plugin before 4.5.5 does not validate image file paths before attempting to manipulate the image files, leading to a PHAR d… Wp Meta Seo 4.5.5+ Fix from $1,9502023-04-10 MEDIUM 5.4 CVE-2022-47602 Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in JoomUnited WP Table Manager plugin <= 3.5.2 versions. Wp Table Manager after 3.5.2 Fix from $1,6002023-03-29 HIGH 8.8 CVE-2023-0875 The WP Meta SEO WordPress plugin before 4.5.3 does not properly sanitize and escape inputs into SQL queries, leading to a blind SQL Injection vulnera… Wp Meta Seo 4.5.3+ Fix from $1,9502023-03-20 MEDIUM 6.1 CVE-2023-0876 The WP Meta SEO WordPress plugin before 4.5.3 does not authorize several ajax actions, allowing low-privilege users to make updates to certain data a… Wp Meta Seo 4.5.3+ Fix from $1,6002023-03-20 MEDIUM 6.1 CVE-2016-10913 The wp-latest-posts plugin before 3.7.5 for WordPress has XSS. Wp Latest Posts 3.7.5+ Fix from $1,6002019-08-20