dbcve.org
Vulnerability index

Browse CVEs

6 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12536 Microsoft 12379 Oracle 6843 Apple 6692 Adobe 6387 Ibm 6336 Cisco 5759 Debian 3919 Mozilla 2895 Apache 2864 Redhat 2592
MEDIUM 5.4 CVE-2024-4939 The Weaver Xtreme Theme Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's div shortcode in all versions up t… Weaver Xtreme Theme Support 6.5+ Fix from $1,6002024-06-05 MEDIUM 5.4 CVE-2023-6990 The Weaver Xtreme theme for WordPress is vulnerable to Stored Cross-Site Scripting via custom post meta in all versions up to, and including, 6.3.0 d… Weaver Xtreme Theme Support after 6.3.0 Fix from $1,6002024-01-11 HIGH 7.2 CVE-2023-4971 The Weaver Xtreme Theme Support WordPress plugin before 6.3.1 unserialises the content of an imported file, which could lead to PHP object injections… Weaver Xtreme Theme Support 6.3.1+ Fix from $1,9502023-10-16 MEDIUM 5.4 CVE-2023-1403 The Weaver Xtreme Theme for WordPress is vulnerable to stored Cross-Site Scripting due to insufficient escaping of the profile display name in versio… Weaver Xtreme Theme after 5.0.7 Fix from $1,6002023-06-09 MEDIUM 5.4 CVE-2023-1404 The Weaver Show Posts Plugin for WordPress is vulnerable to stored Cross-Site Scripting due to insufficient escaping of the profile display name in v… Weaver Show Posts after 1.6 Fix from $1,6002023-06-09 MEDIUM 5.4 CVE-2023-0276 The Weaver Xtreme Theme Support WordPress plugin before 6.2.7 does not validate and escape some of its shortcode attributes before outputting them ba… Weaver Xtreme Theme Support 6.2.7+ Fix from $1,6002023-04-24