dbcve.org
Vulnerability index

Browse CVEs

6 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6673 Adobe 6383 Ibm 6286 Cisco 5751 Debian 3919 Mozilla 2886 Apache 2864 Redhat 2586
HIGH 8.8 CVE-2025-1305 The NewsBlogger theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2.5.4. This is due to missing… Newsblogger 0.2.5.5+ Fix from $1,9502025-05-01 HIGH 8.8 CVE-2025-1304 The NewsBlogger theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the newsblogger_install_and_activate… Newsblogger 0.2.5.2+ Fix from $1,9502025-05-01 CRITICAL 9.8 CVE-2025-1307 The Newscrunch theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check in the newscrunch_install_and_activate_p… Newscrunch 1.8.4.1+ Fix from $2,3002025-03-04 HIGH 8.8 CVE-2025-1306 The Newscrunch theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.4. This is due to missing or… Newscrunch 1.8.4.1+ Fix from $1,9502025-03-04 MEDIUM 6.1 CVE-2024-44003 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spicethemes Spice Starter Sites spice-starter-s… Spice Starter Sites after 1.2.5 Fix from $1,6002024-09-18 MEDIUM 5.4 CVE-2023-5362 The Carousel, Recent Post Slider and Banner Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'spice_post_slider' shortcod… Carousel\, Recent Post Slider And Banner Slider 2.1+ Fix from $1,6002023-10-30