dbcve.org
Vulnerability index

Browse CVEs

6 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12536 Microsoft 12379 Oracle 6843 Apple 6692 Adobe 6387 Ibm 6336 Cisco 5759 Debian 3919 Mozilla 2895 Apache 2864 Redhat 2592
MEDIUM 6.1 CVE-2024-9435 The ShiftController Employee Shift Scheduling plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL keys in all versions up to… Shiftcontroller 4.9.67+ Fix from $1,6002024-10-04 HIGH 8.8 CVE-2023-29425 Cross-Site Request Forgery (CSRF) vulnerability in plainware.Com ShiftController Employee Shift Scheduling plugin <= 4.9.23 versions. Shiftcontroller after 4.9.23 Fix from $1,9502023-11-12 MEDIUM 6.1 CVE-2023-4476 The Locatoraid Store Locator WordPress plugin before 3.9.24 does not sanitise and escape the lpr-search parameter before outputting it back in the pa… Locatoraid 3.9.24+ Fix from $1,6002023-09-25 MEDIUM 5.4 CVE-2023-2031 The Locatoraid Store Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versions up to, and i… Locatoraid after 3.9.14 Fix from $1,6002023-06-09 MEDIUM 6.1 CVE-2023-1978 The ShiftController Employee Shift Scheduling plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the query string in versions u… Shiftcontroller after 4.9.25 Fix from $1,6002023-06-09 HIGH 8.8 CVE-2023-25709 Cross-Site Request Forgery (CSRF) vulnerability in Plainware Locatoraid Store Locator plugin <= 3.9.11 versions. Locatoraid after 3.9.11 Fix from $1,9502023-03-15